Edit tour

Windows Analysis Report
http://myssl.jp

Overview

General Information

Sample URL:	http://myssl.jp
Analysis ID:	1467032
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://myssl.jp/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1880,i,11079429363911824844,15051641503318524601,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 14:46:52 GMTServer: ApacheLast-Modified: Thu, 03 Feb 2005 17:33:22 GMTETag: "62005-51e-3ef38c32f5c80;5ad58af528f3f"Accept-Ranges: bytesContent-Length: 1310Connection: closeContent-Type: text/html

Source: chromecache_169.1.dr	String found in binary or memory: http://ad.jp.ap.valuecommerce.com/servlet/gifbanner?sid=2030802&pid=870093556
Source: chromecache_169.1.dr	String found in binary or memory: http://ad.jp.ap.valuecommerce.com/servlet/htmlbanner?sid=2030802&pid=870093556
Source: chromecache_169.1.dr	String found in binary or memory: http://ad.jp.ap.valuecommerce.com/servlet/jsbanner?sid=2030802&pid=870093556
Source: chromecache_169.1.dr	String found in binary or memory: http://ck.jp.ap.valuecommerce.com/servlet/referral?sid=2030802&pid=870093556
Source: chromecache_111.1.dr, chromecache_82.1.dr	String found in binary or memory: http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=4
Source: chromecache_169.1.dr	String found in binary or memory: http://jprs.jp
Source: chromecache_169.1.dr	String found in binary or memory: http://px.a8.net/svt/ejp?a8mat=U74IM
Source: chromecache_169.1.dr	String found in binary or memory: http://referrals.tucows.com/auth_res/auth_res.cgi?seal_r=338&signature=f20c85d4515954a7a72738e2aaa7d
Source: chromecache_169.1.dr	String found in binary or memory: http://resellers.tucows.com/opensrs/
Source: chromecache_111.1.dr, chromecache_82.1.dr	String found in binary or memory: http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash
Source: chromecache_77.1.dr	String found in binary or memory: http://www.minim.jp
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/acdata/php-stats.js.php
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/acdata/php-stats.php
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/company/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/contact/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/design/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/faq/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/agreement.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/domain/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/info/
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/mailonly/guide/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/mailonly/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/pay.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/privacy.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/server/index.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/server/userguide/change.html
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/mydomain/server/userguide/index.html
Source: chromecache_82.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/report/report.cgi?
Source: chromecache_169.1.dr	String found in binary or memory: http://www.netgroove.ne.jp/whois/
Source: chromecache_169.1.dr	String found in binary or memory: http://www.yourname.jp/
Source: chromecache_169.1.dr	String found in binary or memory: http://www12.a8.net/0.gif?a8mat=U74IM
Source: chromecache_169.1.dr	String found in binary or memory: http://www21.a8.net/svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1
Source: chromecache_107.1.dr	String found in binary or memory: https://www.myssl.jp/images/mysslerror.gif
Source: chromecache_169.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/change/index.html
Source: chromecache_77.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/error/images/500.gif
Source: chromecache_77.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/error/images/banner.gif
Source: chromecache_77.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/error/style.css
Source: chromecache_169.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/manage/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/mydomain
Source: chromecache_169.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/order/index.html
Source: chromecache_169.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/pay.html
Source: chromecache_77.1.dr	String found in binary or memory: https://www.netgroove.ne.jp/report/report.cgi

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49814 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@20/164@26/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://myssl.jp/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1880,i,11079429363911824844,15051641503318524601,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1880,i,11079429363911824844,15051641503318524601,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://myssl.jp	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://www.netgroove.ne.jp/error/style.css	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/hosting1.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/toplogo200404.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/designfont.css	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/acdata/php-stats.php	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/spacer.gif	0%	Avira URL Cloud	safe
http://www12.a8.net/0.gif?a8mat=U74IM	0%	Avira URL Cloud	safe
http://referrals.tucows.com/auth_res/auth_res.cgi?seal_r=338&signature=f20c85d4515954a7a72738e2aaa7d	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/myssl_link.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/domain/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/logotop2.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_01.gif	0%	Avira URL Cloud	safe
https://www21.a8.net/svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/topbar_basic.gif	0%	Avira URL Cloud	safe
http://ad.jp.ap.valuecommerce.com/servlet/jsbanner?sid=2030802&pid=870093556	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/whois/	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/index.html	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/report/report.cgi?	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/mailonly/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_03.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/hosting.gif	0%	Avira URL Cloud	safe
http://www.minim.jp	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/error/images/500.gif	0%	Avira URL Cloud	safe
https://www.myssl.jp/favicon.ico	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/t_info.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/server/userguide/index.html	0%	Avira URL Cloud	safe
https://www12.a8.net/0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/report/report.cgi	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/underbar.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/companyindex.data_/images/spacer.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/company/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/company1.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_01.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/design/index.html	0%	Avira URL Cloud	safe
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=4	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/font.css	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/srsverify/seal_secure_site_tr.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/back_b.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/server/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/c_card_s.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_03.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_02.gif	0%	Avira URL Cloud	safe
http://ad.jp.ap.valuecommerce.com/servlet/htmlbanner?sid=2030802&pid=870093556	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/whatdomain2b.gif	0%	Avira URL Cloud	safe
http://resellers.tucows.com/opensrs/	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/contact1.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/home1.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/domain_top_basic.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/agreement.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/9861_01b.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/manage/	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/acdata/php-stats.js.php	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/change/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/linkicon.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/company.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/server/userguide/change.html	0%	Avira URL Cloud	safe
https://www.myssl.jp/images/mysslerror.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/pay.html	0%	Avira URL Cloud	safe
http://ck.jp.ap.valuecommerce.com/servlet/referral?sid=2030802&pid=870093556	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_02.gif	0%	Avira URL Cloud	safe
http://www.myssl.jp/	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/order/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/favicon.ico	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/info/	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/contact/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/design.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/privacy.html	0%	Avira URL Cloud	safe
http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_05.gif	0%	Avira URL Cloud	safe
http://myssl.jp/	0%	Avira URL Cloud	safe
http://www.yourname.jp/	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/design1.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_03.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/whatdomain2.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/GeneratedItems/CSScriptLib.js	0%	Avira URL Cloud	safe
http://jprs.jp	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/t_ssl.gif	0%	Avira URL Cloud	safe
http://www21.a8.net/svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/error/images/banner.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/favicon.ico	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/mydomain	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/mydomain/mailonly/guide/index.html	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/spacer.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/webmail/webmaillink.gif	0%	Avira URL Cloud	safe
https://www.myssl.jp/images/myssl.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/JPRS_logo_w100.jpg	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/home.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_01.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/report/report.cgi?	0%	Avira URL Cloud	safe
http://ad.jp.ap.valuecommerce.com/servlet/gifbanner?sid=2030802&pid=870093556	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/contact.gif	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_02.gif	0%	Avira URL Cloud	safe
http://www.netgroove.ne.jp/faq/index.html	0%	Avira URL Cloud	safe
http://px.a8.net/svt/ejp?a8mat=U74IM	0%	Avira URL Cloud	safe
https://www.netgroove.ne.jp/image/bg0409.gif	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www21.a8.net	150.230.193.202	true	false	unknown
myssl.jp	153.127.61.138	true	false	unknown
www.myssl.jp	153.127.61.138	true	false	unknown
www12.a8.net	150.230.193.202	true	false	unknown
www.netgroove.ne.jp	49.212.213.242	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.netgroove.ne.jp/image/hosting1.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/designfont.css	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/toplogo200404.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/spacer.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/myssl_link.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_01.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/logotop2.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/topbar_basic.gif	false	Avira URL Cloud: safe	unknown
https://www21.a8.net/svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_03.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/hosting.gif	false	Avira URL Cloud: safe	unknown
https://www.myssl.jp/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/t_info.gif	false	Avira URL Cloud: safe	unknown
https://www12.a8.net/0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/companyindex.data_/images/spacer.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/underbar.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/company1.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_01.gif	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/design/index.html	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/9861_01b.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/back_b.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/design/index.html	false		unknown
https://www.netgroove.ne.jp/srsverify/seal_secure_site_tr.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/font.css	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/c_card_s.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_03.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_02.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/whatdomain2b.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/home1.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/contact1.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/domain_top_basic.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/company.gif	false	Avira URL Cloud: safe	unknown
https://www.myssl.jp/	false		unknown
https://www.netgroove.ne.jp/image/linkicon.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/mydomain/index.html	false		unknown
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_03.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_02.gif	false	Avira URL Cloud: safe	unknown
http://www.myssl.jp/	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/design.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_05.gif	false	Avira URL Cloud: safe	unknown
http://myssl.jp/	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/design1.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/whatdomain2.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/t_ssl.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/GeneratedItems/CSScriptLib.js	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/favicon.ico	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/index.html	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/mydomain	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/webmail/webmaillink.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/spacer.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/home.gif	false	Avira URL Cloud: safe	unknown
https://www.myssl.jp/images/myssl.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/JPRS_logo_w100.jpg	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_01.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/design/sodan.html	false		unknown
https://www.netgroove.ne.jp/image/contact.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_02.gif	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/report/report.cgi?	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/image/bg0409.gif	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.netgroove.ne.jp/error/style.css	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/acdata/php-stats.php	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/domain/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://referrals.tucows.com/auth_res/auth_res.cgi?seal_r=338&signature=f20c85d4515954a7a72738e2aaa7d	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www12.a8.net/0.gif?a8mat=U74IM	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://ad.jp.ap.valuecommerce.com/servlet/jsbanner?sid=2030802&pid=870093556	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/whois/	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/mailonly/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/report/report.cgi?	chromecache_82.1.dr	false	Avira URL Cloud: safe	unknown
http://www.minim.jp	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/error/images/500.gif	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/server/userguide/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/report/report.cgi	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/company/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=4	chromecache_111.1.dr, chromecache_82.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/server/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://ad.jp.ap.valuecommerce.com/servlet/htmlbanner?sid=2030802&pid=870093556	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://resellers.tucows.com/opensrs/	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/agreement.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/manage/	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/acdata/php-stats.js.php	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/change/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/server/userguide/change.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
https://www.myssl.jp/images/mysslerror.gif	chromecache_107.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/pay.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://ck.jp.ap.valuecommerce.com/servlet/referral?sid=2030802&pid=870093556	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/order/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/contact/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/info/	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/privacy.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash	chromecache_111.1.dr, chromecache_82.1.dr	false	Avira URL Cloud: safe	unknown
http://www.yourname.jp/	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://jprs.jp	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www21.a8.net/svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
https://www.netgroove.ne.jp/error/images/banner.gif	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/mydomain/mailonly/guide/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://ad.jp.ap.valuecommerce.com/servlet/gifbanner?sid=2030802&pid=870093556	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://www.netgroove.ne.jp/faq/index.html	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown
http://px.a8.net/svt/ejp?a8mat=U74IM	chromecache_169.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
153.127.61.138	myssl.jp	Japan	7684	SAKURA-ASAKURAInternetIncJP	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
150.230.193.202	www21.a8.net	United States	13376	TOPPAN-MERRILLUS	false
49.212.213.242	www.netgroove.ne.jp	Japan	9371	SAKURA-CSAKURAInternetIncJP	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467032
Start date and time:	2024-07-03 16:42:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://myssl.jp
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@20/164@26/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 216.58.212.174, 64.233.166.84, 34.104.35.123, 142.250.184.195, 142.250.185.142
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: http://myssl.jp

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://www.netgroove.ne.jp/mydomain/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text provided do not contain any elements indicating the presence of a login form.","The text does not create a sense of urgency or interest.","There is no evidence of a CAPTCHA or any other anti-robot detection mechanism in the provided title and text."]}
Title: OCR: x "News( F d V n.ii
URL: https://www.netgroove.ne.jp/mydomain/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency or interest as it does not contain any calls to action related to viewing documents or accessing secured information.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: OCR: HOME netgroove L-ru5JLMJ .info . name cn .tv n.ii
URL: https://www.netgroove.ne.jp/design/index.html Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency or interest, as it only informs the user that Adobe Flash Player is no longer supported.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: OCR: Adobe Flash Player no longer supported
URL: https://www.netgroove.ne.jp/design/sodan.html Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency or interest as it does not contain any calls to action related to viewing documents or accessing secured content.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: OCR: Adobe Flash Player is no bnger supported sav;

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 13:43:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.982746339243701
Encrypted:	false
SSDEEP:	48:8GdXTP7nH6idAKZdA1FehwiZUklqehN5y+3:8SP405y
MD5:	6599EDC3165A8096447937E972356CD2
SHA1:	6E3F0FD0F19030A1072ADC08FEB47492735FBC5B
SHA-256:	6B44D6410FAA6DED43534A66E4B98DD0B5BD907D4E64538AF90C74303004BBDA
SHA-512:	5628F3352AB643827276F2198E80CFC4A709541CD5D02189217F9C9F185BE9A8F8609B20503D015AA62B7FE3315EAAA6B4A9A57C529F6B4D8A3B52B52F6F4E72
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......]W...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xdu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xlu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xlu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xlu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xnu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0.6.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 13:43:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.996094225230481
Encrypted:	false
SSDEEP:	48:84dXTP7nH6idAKZdA1seh/iZUkAQkqehk5y+2:8YPO9Q35y
MD5:	F9E47CD0D19B3DAE3FA4894EF860D62B
SHA1:	8D8D2E1E65F15BCD4659A18FB25C8F64675C3E39
SHA-256:	ABA36174BD7756DE3794D09C41BC303A50722FF7BCD19E632D5C1B7805A8199C
SHA-512:	6AD55CA098A3FBB279ACAF7073F2AFB3E2A063925479259C1EBDCA38F5629500748B84B92119824A5DBE74258F71C231B908E5AECC0A1E1434F1AF5AB7FF10B5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......\W...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xdu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xlu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xlu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xlu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xnu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0.6.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.006237681182647
Encrypted:	false
SSDEEP:	48:8EdXTP7AH6idAKZdA14meh7sFiZUkmgqeh7sW5y+BX:8UP3n45y
MD5:	59CF78251F2A20E430D42E76BF0CE4FD
SHA1:	3CE4EE52C84548CD05D1BD9F8E1A996933E493BC
SHA-256:	D933AA4E9CC1BB647A915693E2567985962FAD43320FE012BDFD5765B0B580FA
SHA-512:	540F15C7713724E5FC9B661D4E386F9B4F899A999503CDBCCF2E550BAC681205883B02A8B0D2DCEA6D28C46D2765277D425F3F5D0FB2F5F0381583DD845DA01E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xdu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xlu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xlu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xlu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0.6.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 13:43:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.996162288911596
Encrypted:	false
SSDEEP:	48:8MdXTP7nH6idAKZdA1TehDiZUkwqehA5y+R:8sPle5y
MD5:	2617F8A73F3BE6AD456F5E4D3192FD82
SHA1:	73085B1BDE93819FF11201FF9B9915A91DA9DD1F
SHA-256:	FAF96A3947CE5C4DBA1282C7864129CF9179B5E8143E3BEAD443BFE2AC0DCE2E
SHA-512:	D60D9B456E7FBE8B4C53E5C4B744394A368A62D53E848B6FCB251D379997D6797D4F6BA26EE25935C2BA6FB20B82729F69E4DDD954ED8866ECF13A78A7069B4D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Q.\W...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xdu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xlu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xlu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xlu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xnu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0.6.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 13:43:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9823931137571713
Encrypted:	false
SSDEEP:	48:8WdXTP7nH6idAKZdA1dehBiZUk1W1qeh65y+C:8iPV9a5y
MD5:	1A5CCE68461B1ABFF852CBD5C7759615
SHA1:	8412BF40C58562729F65D97F0A94222CF9BC85F0
SHA-256:	08ED96BC7FF590D2D8D1A572C4CC890B6AED99E142CB72ABAE25D48F68C6FF5E
SHA-512:	5DD9AD74D60F313AC17121D5E164ABABCCA747E911CC04CA43FD36F8E78BC488D122E7E0D0A08433BB51107B73C60D53A759C22F18D5023647CFC969A8493756
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....j..]W...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xdu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xlu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xlu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xlu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xnu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0.6.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 13:43:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990703417635694
Encrypted:	false
SSDEEP:	48:8HdXTP7nH6idAKZdA1duTeehOuTbbiZUk5OjqehOuTb45y+yT+:8dPdTfTbxWOvTb45y7T
MD5:	1DC83E0FCACD3B0174A56CBC116352CB
SHA1:	31F06EB4F6AA54E13DBBA82CA591223A4779C295
SHA-256:	4B7486E813EDFEB06E44B711F2E9C6631FC58CB52D10467606541FFD51F35011
SHA-512:	7DF70D9C65EC7E9485059096802E9E9BE56433D17DCB51E0513F7C60E9082BC49A019584A36A471C45F0FFE68E7A2C24F05444F78D59AFEE625C4D8964A134FF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......\W...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xdu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xlu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xlu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xlu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xnu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0.6.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 18
Category:	dropped
Size (bytes):	445
Entropy (8bit):	6.052313304810031
Encrypted:	false
SSDEEP:	6:mHyBuWfjYjksIFnD3lcBY5Gvnq7+OGq4RzRygi0sfYFYku2saPrPZ2umI19WT:m2usjYjHK8fq6E4R1ygXoiY29rZJe
MD5:	06B5996AD9E936410276829880C0C03E
SHA1:	1DD991F2B4E706B5DC536E711CD885899000A27A
SHA-256:	95102D43C9D9C94C48C6B8549BBD0EB96F0B64B45A3AD15CF0ECCCEA36340FEE
SHA-512:	648CD34C240377AAD355A609FEF6CD7BD38BD480FCC18B592E96EDDB390A8F2880BBE9CBBC2A596275B83CD39F3A28A0C972D9CE06419710B927265CFE43256B
Malicious:	false
Reputation:	low
Preview:	GIF89a..............................................................................................................................................................................................!.......,............OhH,...r.l:.....m..v..z.U..K.....t........A(.~.@@..\|..\|.. ......e... .....S... ..n...G.... ..X......................z..........f..........[..............K........................H..A... .....#J.H....3j.1..;

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	3143
Entropy (8bit):	7.832003109852524
Encrypted:	false
SSDEEP:	48:u/VxAlgF9e93bSWaIvlCv285tzC89yeEWEZiWlCoFPHiJwRs3SATUf3NKn5m3lSR:ugek3bSaI75CS9ECoFPHWww5Ul85KcR
MD5:	0437BDD75DCFE6246FC2D0C26A538097
SHA1:	E2A77109977D1F4FEB523A6C3862C1EA8D4FD44E
SHA-256:	75E4F8F3E3FA410EBB3BD4B34ACF695A08E7EDFBF363FBAA235E146667F9C7D1
SHA-512:	A71D368F00D937F042B5B7D4C93C660130B1F40054E4D5E96A2E7BC7AB3B8E6B1FECB6A6DEAA9D4CEFC9ED47684F91CD2CE4DC4F006E2941B9B25D298D6E720E
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7..........U..<...Z.m......3g..."....u..V........Gg.......e.9..'y...................-...2...........E...J...V..4.0.....%.....v...t.A...........:........:Y.........1......W.....l....K.............../.M.........V}\...2..q..{.L..1.. .........;.....}......D........c......m..........................6yP..........h...D.....'.........}.......d..>.../.3...~....?........Y.7.6..H...f..-x=..............<......`....4............P.............<......Qv.6.4..@..........C..4...x....5...Mp......E...K..h.X......0../OY._.......0.7.......L.Ru.z>.E....G..g.m....9.....Aa............9....J....5..............m..i..x..t.R..I........Y..?....4......o.X........ ...@..@....B..%........2..K..&..N......I......x......3..B..6...e......:..C...Q.8........f.."..6.....3.!.......,....Z.7.....w..H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..%.#.......<yR)]...+A.p8r.fO.$..= CF...(QB..Y.E.P...A..y..AE"..r..8...C}tdA.BE.$..'..I..$:J.2T.mW3~.T...%._...EE.6o.y..u.\|.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	3042
Entropy (8bit):	7.846100209177669
Encrypted:	false
SSDEEP:	48:U8i6fEJ6l6lgC2PtEioZukTwxtAoAjsbqFZg4d3ilzq5kq149vfsDD/2IU8RmOab:U8dfEJ6l6lxEtEioZAVAgbqQakm5kq1m
MD5:	1BA0278688241539500BDDA9021B0B08
SHA1:	482B4AA75F5883B2B6D7CBF491E45F9116101F01
SHA-256:	4213889CF9582381AE6CAF2CECF324A404D7BFCC73C566B6BDF3F09FAC842159
SHA-512:	C5D37476EFC313E117D05238EED94B08B04BA45B8FDD478892058D47548DF068A7955349AC74F9760327D092A1A83FD841C3C590E40F2E5062C33E1414E59AF2
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/hosting.gif
Preview:	GIF89aZ.7....b..5..X..I...........7i..........;........1..E........:.....2k..>.....h..u....-..I..;.....Cu.j..C..E..6.....H{..9.<...........I..'.........F.....n.$..8...4.A........}...X..6.......F.....\|.........}.............)..!...F........j.K......Y.......(...S........A.4..f.....D..$R.....q....?...}..c..T.&c.....j.....S.=..@.......................6......E.......p...t.M..'....2........H......@.,Z..K.?s..]..z........L..x.......:.._.F......L.......!..-...b................;...E..........p...........Lu............d........X~..........\|......9.................(V.............-....G...p.W..8...k.....s....0..............B..O..+..'\.,.......A...\|.G............A..K.....6..H.....+..D..O...........'..!P..>.j..............&...W.{..........;.....9..<.."S..\|.O.....@l..6.....3.!.......,....Z.7.....c..H......*\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L...........A.H(].A...p..(G..=M.X.......l{.`.j.x.U..;w........bf.9......4z.'...4...I....xA.....Y..{...<.....F.x..A.[7+V

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	2.7203155936248486
Encrypted:	false
SSDEEP:	24:suscp31zyYLEBfpnHJr9txxXBc5kBRTjTXLdL:rF1z1Or9txxXBc50x
MD5:	79D5390D45E3EA5A0B992A5C13108B84
SHA1:	4360FF8A130F36DD172372528EDE4FCE41662908
SHA-256:	4679644688FB6A35D8C5EF25F2FCBE374366C19B183FABEFC688C6F8A446A736
SHA-512:	3BA8CBB83A888CE1614081BC4B0905AACE80AC2C9F4ED5384EE521C38D44058EF4DA02223718808EDF44163E1C4888FAFA6EC0541BBEAC4AE298BC79B6FE72DA
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/favicon.ico
Preview:	...... ..............(... ...@................................................L.............F..........?...........D...@...z...........W...J...U.................A...S...f...@.......d...K...Q...P...q...............v...L...R...J...m...........y...>...I...M...C...R..............S...E...S...H...N..................\...E...D...G.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 123 x 53
Category:	dropped
Size (bytes):	2304
Entropy (8bit):	7.426292954929641
Encrypted:	false
SSDEEP:	48:W859FRq2QjfbNPV9EDNPmb8GFGrGWdBO07xt/8pldMEywIncEnp:W8nwNPV92N+gGErGWrv7xt/8PdMEy5c+
MD5:	37904F4F8B68C21806E3A1163BFDC181
SHA1:	7BB3F2385515E33E91294D08676BF684A2A93E2E
SHA-256:	249C020624A8526FCF4D26EF663AE105AAA1EBCFCB55BF0D0F599C855887114C
SHA-512:	2F36EADB60E8F91BA5B718961CCF9F795CD751F4D92AA15533B4E72B57CCC9F8C1C98CDC2D19DE7E7CD0F54729CF2BBE243E3B61C4E6BE1B41CFEECB8392E490
Malicious:	false
Reputation:	low
Preview:	GIF89a{.5......Ae.......Hr...................9h.....................v.........\|.Tt..........Z{....Ei.]..Kf..........uy..........tm.......>m................Rx.dz.....{....Ih.>g.......f..Pj....<k.Yo..................Uj..........8f....U}....Wy....\|u.Zi....x.....oq.............Mm.......m..n}....ur....r..`..............x..................................................................................................ht................fs...........z................jx.{t.............t.....fm.......w........bn.......}........`k.............ks.In.Lk.......ff.Xm..........}................p........i}....v.....@i.Bl..........l..Sh..~..x..w.o.....e........{..{..v..m..............j..m......................j........yr.Ql.x\|.......Gl.............y.....Zq....m{.........3f.......!.......,....{.5........H......\....#J.H....3j.... C....N..lH.\90..?.b...NJ.89..).gO8hn..:....H}..C..C6z.J...U.P.j.......n...,.8S..A.....q.^.$...AI...NB4H..m..nB;..7}.S.B>......B.>.K.Y...<B..E.w..8o..2=...?.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/spacer.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	7.852666137593173
Encrypted:	false
SSDEEP:	96:FG1Or29OLdWQv0kMKTR+gvp+IBMazR6tfeZL/eFUzMEmQRXQAT1:FG1Amg/0RK4gvQyfsiWFIMEmUN1
MD5:	C0E1FD92E9278444F71030D9C9CAF7F7
SHA1:	C23597F8F3A50D63958A8A0F9A9C7A8AF38DA60A
SHA-256:	880C08B48AF672FE9524F183D4F6D3CC12BE483E9F5DEDF83D01EF34ADCF193A
SHA-512:	F56B7F52848A717A3ACDDE82B0BD8B7A954F70A98C79FE4116D05F90CE3747027408448ECC57E89F6599D3BDC79070906BF05DB6DF5DE64E3F0DA4DD21785D02
Malicious:	false
Reputation:	low
Preview:	GIF89ad.d.....................\|Y.......f.[.....w...................\.............u..........`.......\|\......bE..a.............].......l...DDD.?.............y/..<...qqq.uS.....'.^......d...r...j...e.n.?..K.o.....u.....@.b................r.._yyy.......xi....Y.........i.pQ...........k....s...Y...........m.................m.............c...p....?.....i............}/..?..l....o..d.....?.~............i....q.......c...h...h......wX...vY........_...xT.h..O.g.......................333........................p...0.......`......`.y .....@..`.........P....@..pooo..P.....p..0.... YYY...._...........m...........w..........o.n.....v..............................wV<..g.O...................k.......f.fff......!..AdobeGoLive......x..U..0....\|Ed.I[..HIW.R.V.......D.dK.#..~...I..[.Zm.V"R"..x<s...h....Q...v%.(z...oF.W..r6c...v>y..\|GO")..9.....-.$E....=>\|].26`q.4.7.3.n9...I.c...{........6S...Z....d.:{'.=x..y........S....

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	downloaded
Size (bytes):	1310
Entropy (8bit):	5.137210820202186
Encrypted:	false
SSDEEP:	24:usJ6t0SGXsGap60eKZFX3l+GkEDw9GaDGI9B6L+GAGUr0A6FE79cE+xM:9GGXn7KvF5kEskaaI9YUrR6Fy9cVxM
MD5:	FEEDF9FDA53C68C5451B5E0EDB38DBDA
SHA1:	3114FB081DC3A8E1C88687BB96D2A176D15499A2
SHA-256:	7659FF263D60D6797FC12D348443279542F306D2277BFFE1E42757B127665024
SHA-512:	0666D5AA8CB95E35225BFEF2F6CD0CA147AAF0D0957CF2C0E76B0D865B2D8C6F17F434D567D3ECA436A2B513AF3AEE06E6D13C7818C0DA0E074464CD270DA0FA
Malicious:	false
Reputation:	low
URL:	https://www.myssl.jp/favicon.ico
Preview:	<html>...<head>...<meta http-equiv="content-type" content="text/html;charset=shift_jis">...<meta name="Copyright" VALUE="Copyright (C) 2000, Cobalt Networks, Inc. All rights reserved.">... locale-sensitive -->...<title>.t.@.C...............</title>..</head>...<body bgcolor="#FFFFFF">...<div align="left">....<img src="https://www.myssl.jp/images/mysslerror.gif" alt="" height="64" width="223" border="0" livesrc="../../myssl.psd">....<hr noshade size="1">....<table width="100%" border="0" cellspacing="0" cellpadding="0">.....<tr bgcolor="#999999">......<td>.......<table width="100%" border="0" cellspacing="1" cellpadding="5" align="center">........<tr>.........<td colspan="2" bgcolor="#ff6600">..........<div align="center">........... locale-sensitive --><font size="3" color="#FFFFFF">.t.@.C...............</font></div>.........</td>........</tr>........<tr>.........<td colspan="2" valign="middle" bgcolor="#FFFFFF">..........<table width="100%">...........<tr>............<td>

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 98 x 45
Category:	dropped
Size (bytes):	4278
Entropy (8bit):	7.847645348984339
Encrypted:	false
SSDEEP:	96:yIPp8ao7answyzURWZHRUPJmNHeD6UFd/eRzcbeX:yWdounyzUkJmPcN+ec/Acbw
MD5:	53B24D77202702DA9865AFABEF5324C4
SHA1:	0FE02638718F23EAC4D18F61E1AC59A6261BB4B8
SHA-256:	29AB3B24A486F38A34F4D256AFF5F28DD23107B4D8EF958AAFE205C4D13B7E2E
SHA-512:	20C40DE0FE6AC6F4BBE2F2777669B390788D9C28658C158FAA7CFB99751EB16A821F97A29F55E013151A4BF8DFF6160C109D0817E13A4F86EF103B1905CC8CEE
Malicious:	false
Reputation:	low
Preview:	GIF89ab.-....,........gv............de.........z........X.....w.............n..u..............Qc.KT....z.............vI..k..CG.........TZ..........~.....^....h..............(y...w..s.....}...............[..F..b.........g.......q~.f.......}........................k..q..r..........................1..{..R..............X]....a.....[o.){.......V..u..>B.ux.......VW................<=....:..............................^`.dn.{...../.....i.....t...........bz.-..l.......e..4..z................r.....o..w.....2.....p...LO.{..OW.e...+....V..}..................DN.g......0.......f..........s.............Y.........o........n............................................................._..w...........w..~........h........33..f3...!..AdobeGoLive......x..U]..@............M..m..C.#..:..t.\|...V6._....@.v...l"I.p...8.B. X..5rA.....h..../.j.^....._....y....$...H{) JS.Y.....sx..^$l..\XZ.9&..zy.d.xX...%w`D...+...\H.{...h..f............D.)<.....b.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 780 x 50
Category:	downloaded
Size (bytes):	28033
Entropy (8bit):	7.7320833661837325
Encrypted:	false
SSDEEP:	768:ZW21Zp4g6xtoItVOlsVbDZD3SsOusNY4EU6:ZWaZp76BVOls3rSsOusNYt
MD5:	8440941FE3ABD3DAF9A1DFCA4B3D178D
SHA1:	116FD2E2F4D9358CB292DB241B34BA03127DA6A4
SHA-256:	6F38D7996CC520F45E49D68C1B5801B3CF46D571DBFCFEABEEB2BA014B4FF55F
SHA-512:	3F686321D497C4C9B474294D75DFAEDCB154FE2CE73593EBA14B9E701C5B698DD8A6ABA7B11CB6E5C912845F10CF962ECDF72867A1973857CAA9A1D14B668FAC
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/logotop2.gif
Preview:	GIF89a..2.....V.-...U................e..B..q.................................{........s..k........g........K..u...M...[.Z...c..S.....Y..K..K......./t.......x..O...........Gz....E..E........5........H..R............{.......................s.$............s..............{........k....4...c........{..s..{.....s........{....V...k.................k.....K..k................o...a.&...c..s.......C...S..k.....S....u...s..K..{........k..a..c..............[..\..J..b...I..F..@....................6........5..B...{....$...s.f.....T.......................C...s.4...\|.%...r...........\|...t..k..l.......................K.....a........a.....a.....k.C......z..k.....{........c..u........S..a....S...........z..............f......r..A...[..l....L........P...R...M..A..d....P..b......<....!.......,......2.....+L;....Cz.EZ...;.n....a..R.......z...aI6..Tp.DJ.....-...E.*........(.E..?%......._.FdP....C11d`Q...?.TP(.m.q.%.PQ.K...X`.0...A.>H..eH.F.`)...9.D...^.%h"Tq.a....HmT...._.d.P....>P......

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 24
Category:	dropped
Size (bytes):	1156
Entropy (8bit):	7.097074858581238
Encrypted:	false
SSDEEP:	24:eWy8efA6RkHVYyMssACnghjKALvylSm5qrtde7iRkueFJNXwOLqp6:eZDIfVMHgIALv6Qrtde7iRklFJvLm6
MD5:	346156AB742CDFD75709DB918BC4B830
SHA1:	0AF266F441A0B1FAAE8A1B7189D4AF2BF76876AF
SHA-256:	53271E47BA412F2652BD71C035BF76A51C5779C5C448B8976D38579831D19158
SHA-512:	C21BA35D4D98980CBF313FBE0447BE522C949BB692D96357C74D597FF999D6BAF0E2A27E95C14F077E2B15C9CCE1ECE9897FB2EB280D96F9692408ADD2AF052B
Malicious:	false
Reputation:	low
Preview:	GIF89ad....c....p...................................y.............................................................................................................................o.............................................................................................................................f............................................................................................!.....c.,....d.......ccb.....................H........<..............U.................b.a..........[...[..( "2#....a...a..[a....[.....[.aa[.a..b....m.U..11[.@K..^.d..&.`.........qX.t..(@...F.&Sn..N_.{.v.........!(..".t.)>p......i\|X.`....((...=z.. @`...b....wm.>}.............a.....i+Fc..b...p`.....K....uH.Y...X.B)....,M....;...Q[..=~....-....3[ cu....T.M1(.x.G....bD.4.S..."...K\._H.4..@.J......>.#....(....c..sC..*#....1d...f..^c..UNR..G."..._".d....MB._..EH...RL...wOo?.....\SNX....#.I...=H..!.m!.!..#...>..=.....S8.".3....#u=pA.....b.P..V..%.d....+..E.YF...p.).t.i.x....P.....+

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (671)
Category:	downloaded
Size (bytes):	4400
Entropy (8bit):	5.304156765174867
Encrypted:	false
SSDEEP:	96:TdHsnB3cc9DD915T7oMSxwMSTXXzKgvK4heGZDkIYRrBYMMv4qqSTiy9w+hI+w+U:TdKxDDdT7oFxwFregv5hbtuyw+hNw+hO
MD5:	4296C51E6562CB25BE94C97FE35A2AD8
SHA1:	228F0B2F35F710F5652AD95B4B7E994CF928C53D
SHA-256:	19657FDCBFAD0552E23CE6CB6C90230F77E37B0C301B966DA5DE966D7D7F5D76
SHA-512:	732AB0041C04332535EA9027CCFC3FD88FC0A40A1197081698030E54CB3600C66228572B6BE90E6CEBFDC8F231AC80F451322B071F2BD327E8421EE157AC70C6
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/design/sodan.html
Preview:	<html lang="ja">...<head>...<meta http-equiv="content-type" content="text/html;charset=x-sjis">...<meta name="generator" content="Adobe GoLive 5">...<title>.V.K.......k</title>...<link rel="stylesheet" href="../designfont.css">...<csscriptdict import>....<script src="../GeneratedItems/CSScriptLib.js"></script>...</csscriptdict>...<csimport user="../../netgrooveworks.data/Components/footdesign.html" occur="62">....<csactions>.....<csaction name="B77CD5163" class="Go Last Page" type="onevent"></csaction>....</csactions>....<csactiondict>.....<script> .CSAct[/CMP/ 'B77CD5163'] = new Array(CSGoBack1);..// --></script>....</csactiondict>....<link rel="stylesheet" href="../designfont.css">...</csimport>..</head>...<body leftmargin="0" marginwidth="0" topmargin="0" marginheight="0" bgcolor="#3399ff">...<div align="center">....<table border="0" cellpadding="0" cellspacing="0" width="780" bgcolor="white">.....<tr>......<td bgcolor="blue">.......<div align="center">........<object classid="

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 123 x 53
Category:	dropped
Size (bytes):	2340
Entropy (8bit):	6.953075910744986
Encrypted:	false
SSDEEP:	48:XnxLmA2qsR7h8dURXsHufNWPCk88XzXZnm/Uxsk:BLmJqWM+cHu1zIDoe
MD5:	D8CD5B4404487A01880FFF78A1FAB369
SHA1:	7FADD239A1A1342B68E9C2F99ABC35CB1B6EDBB9
SHA-256:	9C710547A3CDCBA95464943C4913FABC0DD8A4D7B161A60AA838298B96B85382
SHA-512:	31C4233F86F4B5E45CED7FD70E66F3A27DD1C0A8E90DE8CC71E0C217648DA4AB13F10CE42BE8E628681B165AC75146F36776D566DF088008DD6C675DE7E239B9
Malicious:	false
Reputation:	low
Preview:	GIF89a{.5.......@...p.......`.....,.. y.0.............P.....p......w..l...............@...M..........,.s s...y0.m....\|..............`.h..................\..@l.......L..\|.h.$\|.....p...P.r..y .....................f....4..L.....<........q......p....m.q.........fs....p...\............s....w....T......T...$f...`....Pc..]......k...<..x.......cs.....k.......c...r...DX...fC\|..}i......~..l.f.Pf........f........f...................................................................................................................................................................................................................................................................................................................................................................!.......,....{.5........H......*\....#J.H...e.h.s.....4....Xh......Q`..I..!/s.\X......N....;;x..a.CP.Vh.b...H.....Q.....!.Z.R.jr...p..qR......`"._.t..@.....m..]\....#.ds.....Nn......+.`@.E...Lf.,...~

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	3087
Entropy (8bit):	7.877143219847063
Encrypted:	false
SSDEEP:	96:mhFSvpgemjLiSYQX2Af68JC0XLEkkj2Fbcx6V4Z:/VmjNX2gjFXLEkO2tcgV4Z
MD5:	6D4FDBA803FC55505241C1EFC45E35E3
SHA1:	D978FFA114D35A5671818AB50E583CF3F6AA9473
SHA-256:	870B73D70CEBE80F767793C824B8A5F827BB6CDC9C994F05ED5A30E2A5D573F1
SHA-512:	6CF584576DCDB0CFA46D9593E899AD83063A72BF723C78D96C8A90209F9092A101965724CD0F230773973D2C7F3E8EA2E73A81C8A16A4AEEE4CF759F427F6869
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7......(Y....z6......D.IC.F..Fxv..+.1.....K.PT.g%.8h.!.&C.Gw.z.sC......W.ZF.J....ci..._.c......U.Y>.D.G.V.Y.XvV.Z.5.x.{Y.^`.cP.T5.9=.T.."Z.f?.DM.Ra.d...)fk`.d&.,....C....a.d...a.f...K.N...............,.>...\.`.. ..._.a.."..!... .%.jU......4.I.Qa.eP.U4.9I.N...y.{Z.^.......F.Y.^..$ .%..E.......'.-..#...#.(...R.V...Bwl.....k.n..7mu.=....].a...Z.].N.........:.^.a;tk.Yk9.?.eV....]j.....&.7V.ZL.Q`.c..0..3.J...Z.].......(..%.+~.>.B.C....P.U\.`..n.r2.84.9 .$L.q^.c.:.I.No.s...S.W.=..=....8..T.$.)..&.,[._#.)6.;f.j].b.\|S......lKi.m.../.5\.`^.a............ W.\.9.S.X\.`......].b.......7....C.FW.Z)./).."Q....0.66.;...-.18.=N.h..."Y......:.....s..O.S.J....${\.....:....j.m......Ar{...J~....\~O.\M.P....-P.S...P.TX.[2`.T.X .&".'(.,.6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..%.Sq(=..!....=X..S.u.".x&".).7{...G....F.A.....1..X.6F....!..E'."Jau..$.J..X....."..(....`y.@y...R..!w...D.E.wc..k.......,.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	2971
Entropy (8bit):	7.849399781789861
Encrypted:	false
SSDEEP:	48:vn7X99VmfCvYCB3Q35MMkKCgJeMhfgGcOFclRr9PXOE6CBoxW6VVhGh5n10GpEae:vn7X9jNFQ35MBgJb5B+l/OTCBgJVhe5w
MD5:	17FFA64A0E0F02E2B5AB4217AE8EF034
SHA1:	C10FBF2B427539DEB086B3D28251911A39FA5FF9
SHA-256:	5293691A742CACF6FD27A40A27F0A884A76B29FFCD323FA3F10F18D592BAEDC2
SHA-512:	3D699D345C1527B4A4F1700C05187129974B33C6730642A96B5C47BDBA2B33B1CC9F1105DEA20744B1D40995C9FC308AECFE457B467ACE2503DB7D3A176D8482
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/company1.gif
Preview:	GIF89aZ.7....6/0...........@..I..N......-s..R...N...fD..m..f..u..=.y.h........2.....U..D.W........(......q..g+...........vW....9....1.......Y;......6..%................4.......%G..}............u...[c.0;p.\.............uu......!......wls..PW..[..1..b.H[...Y=-.53A..\|..\|S....sL.....p....f........Z.K.............2.....)..a.D....}..j.=....>U..Y...F4.........\|v.............}.9,H..z..C...........c.....e....x...i.U.%-TS:......N..),G.y.`.,...4..v.....:...;.z...+.i..X..b...Ub..]..7..<....h..\\|.....Af.4[.Oq.........j..x.....\|..........W.........9........fSExT.....(.........b..-c.J.!..E....q..cN9......u../..3.....}.......CAUB<C]Vg....D..,.......%.A.)....1eg.ag.or.\|x..[!?...H.s".........)3a78R8S..g..&P.6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L...5T..H.....X.Mz.R....QY..fO.8.&0....^.r.D.lYH...........I...H..e......F=..".aGA..&...(FU..u...\.(.n....$.\.0..X..\...^.Z5j..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 76
Category:	dropped
Size (bytes):	166
Entropy (8bit):	6.379508010340848
Encrypted:	false
SSDEEP:	3:CSlgllewl7/l6hl1C9cr3pv9byYlS0ZYlSfGqOqd1VvkMcZKn:FlgHl0hl1HXdIHlSEqdUi
MD5:	1E19C69FE4E146A31D34232D5025B65A
SHA1:	6D2383B3A14C48F087116258A42C192D64C25957
SHA-256:	A6798B8916C40FFEE078ADC7D7D3E9178A86F5F1F8F8CE5E9C6700E9FABC3803
SHA-512:	7013735E1ECE74D148F7CFB33819EF713D7AF6A5CCCF49D445A02E28CACF4C16BA0DCAB7AA20527E3E0E30E87B02DD76B1FA9926BC82D3C1177CB4451A43E2D7
Malicious:	false
Reputation:	low
Preview:	GIF89a..L..........!.......,......L...}................H........L..............L*.....J.....j..........N....................(8HXhx..........)9IYiy....T..;

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 14
Category:	dropped
Size (bytes):	254
Entropy (8bit):	5.875327928680781
Encrypted:	false
SSDEEP:	3:Cshp8tGTt8a3pPa8+AqVOaRt/jylexlltbg7qI6dCv67SRq34qdtUvkQIvr68iuZ:fhlfWXVjUX6dXu4IrcMBuZ
MD5:	D5D013647AA1DF8EDD459F7AC5D8E7AC
SHA1:	7A1A3D57C2D23A4C503026D22932E7F142625C7F
SHA-256:	43CA81984A235423E1D444DE3478038E5A64D1D9FB43746DA91D56475DE3FA86
SHA-512:	B060BC26339A21BEC689633F053B05CC513C09E74AFCE7BB400BFEFDBDD9CA7BFA371465090EAAB7AEA506D09C8A7A0CE7654B5F60CE08DB84C9002855A2D41E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................!.......,..........{`%.cq.D@.l.p,.tm.....Q..`e!....R)X....cI.Z...d....x\m....y.n..g`.M...@.}.."F.*}..F.q....4......................}....u.!.;

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 7 x 10
Category:	downloaded
Size (bytes):	110
Entropy (8bit):	4.61166951816862
Encrypted:	false
SSDEEP:	3:CJhlYU//1ylVrt33Wf5SCt7uhhE:YzRQxuyhE
MD5:	C866DF30E0EC8ABA06B10F5537BE1C06
SHA1:	1F521A91642DEDADCDFDB18265E264ED9F3FBD99
SHA-256:	84CA7E3FAB4EBE60BB4D68F90494C657DEB333A90678E251167FE5594F78DCA9
SHA-512:	5FB6028C16DF8B74A0BF51AFEE6462CF41A7603C64F621FCC505535D942BF17FBAE44FE49E6D7D99B05C85B2BA2CC42EAA3086789C085FD250103FD62FF235BA
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/linkicon.gif
Preview:	GIF89a...........`.... .....]................................!.......,.............D.........u.'.eQ .j....U..;

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 123 x 53
Category:	downloaded
Size (bytes):	2340
Entropy (8bit):	6.953075910744986
Encrypted:	false
SSDEEP:	48:XnxLmA2qsR7h8dURXsHufNWPCk88XzXZnm/Uxsk:BLmJqWM+cHu1zIDoe
MD5:	D8CD5B4404487A01880FFF78A1FAB369
SHA1:	7FADD239A1A1342B68E9C2F99ABC35CB1B6EDBB9
SHA-256:	9C710547A3CDCBA95464943C4913FABC0DD8A4D7B161A60AA838298B96B85382
SHA-512:	31C4233F86F4B5E45CED7FD70E66F3A27DD1C0A8E90DE8CC71E0C217648DA4AB13F10CE42BE8E628681B165AC75146F36776D566DF088008DD6C675DE7E239B9
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/whatdomain2b.gif
Preview:	GIF89a{.5.......@...p.......`.....,.. y.0.............P.....p......w..l...............@...M..........,.s s...y0.m....\|..............`.h..................\..@l.......L..\|.h.$\|.....p...P.r..y .....................f....4..L.....<........q......p....m.q.........fs....p...\............s....w....T......T...$f...`....Pc..]......k...<..x.......cs.....k.......c...r...DX...fC\|..}i......~..l.f.Pf........f........f...................................................................................................................................................................................................................................................................................................................................................................!.......,....{.5........H......*\....#J.H...e.h.s.....4....Xh......Q`..I..!/s.\X......N....;;x..a.CP.Vh.b...H.....Q.....!.Z.R.jr...p..qR......`"._.t..@.....m..]\....#.ds.....Nn......+.`@.E...Lf.,...~

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 780 x 50
Category:	downloaded
Size (bytes):	28469
Entropy (8bit):	7.644323460948211
Encrypted:	false
SSDEEP:	768:BehGmm4muIreeuHYOFL9Lo2UGvwBZUngL1bDdn:BeG4mL9OZU+wBZUngLP
MD5:	700B9F58DE7ADDD60CA653598E98ABE2
SHA1:	25CDAFBF580D9AFCE9DD06079E2B683257D2931D
SHA-256:	795F8C9D2F4FE744B99194FE123D9394DD138C26354913FDF389162803F4604A
SHA-512:	AB1EC4B155E4B4FCAF51A43A1FE7BDC0DB058182E0E4E51BBE9E3E9B424F64234B75607BB5917A120EAD2CF04E20FDCF43309B584CC49BD7C8B05777317B2478
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/underbar.gif
Preview:	GIF89a..2................x..G..................Fy.......1r.....v..k..{..h..s........K....1...K..[....h...S.....c..Y.h...K.......q......................................R.......................................................................0p.................................................s.....[..J..{..s..{..c..{..s..k.....s..S..k..k..{..S..c..k..[..[..{..c..c..{..S..s..S..b..c..K..[..K..S.....[..[..s..k..S..k...................O.....'Z..........................................................................1.................Nv.n.........................................s........t...........k..{........{..s..c.....b..[.....{..l..S..K..z..c..c..k..s.....[..S..{..k..s..b.....[........T..\..\..Q.....k..............a.......Q..[...-`..................................!.......,......2........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k..sS/..t!..N.....+......

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 70x41, components 3
Category:	downloaded
Size (bytes):	4114
Entropy (8bit):	7.110290168846327
Encrypted:	false
SSDEEP:	96:2uyt4N+zq7DHksDbvQLTzUCJGavd8zq73jgtAGpLrPZm:pyHz4HkubUTzXkSezWZr
MD5:	FFD6B11016A7714FB98913CA91571CC7
SHA1:	14B62CEFCE880615F95946BEE73DCB808CBCBF6B
SHA-256:	EC32458CA3288846D2DDDE93FEF2741C206898A83C6017A5DC5E2E4E0CFA7DBA
SHA-512:	7F6CEA5EFC2291FE276011F86869F3CC2D1B09802BB45CF67DA4E746530B6BA954C62514EEB4860AEB707265245DC92A9A55039D6F789497FDC57653D20276AB
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/JPRS_logo_w100.jpg
Preview:	......JFIF.....H.H.....<Photoshop 3.0.8BIM...Print Info....x.....H.H.............+.6.B.{.......X.X.....s.v.....d............'.................4............!.!..................@...8BIM...Resolution......H.......H......8BIM...FX Global Lighting Angle.........8BIM...FX Global Altitude.........8BIM...Print Flags..............8BIM...Copyright Flag.......8BIM'..Japanese Print Flags...............8BIM...Color Halftone Settings...H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM...Color Transfer Settings...p................................................................................................................8BIM...Guides............@...@....8BIM...URL overrides........8BIM...Slices....}...............)...F.....J.P.R.S._.l.o.g.o._.w.1.0.0...................................F...)..................................8BIM...ICC Untagged Flag......8BIM...Layer ID Generator Base........8BIM...New Windows Thumbnail...........F...)......!...............JFIF.....H.H..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 780 x 50
Category:	dropped
Size (bytes):	28469
Entropy (8bit):	7.644323460948211
Encrypted:	false
SSDEEP:	768:BehGmm4muIreeuHYOFL9Lo2UGvwBZUngL1bDdn:BeG4mL9OZU+wBZUngLP
MD5:	700B9F58DE7ADDD60CA653598E98ABE2
SHA1:	25CDAFBF580D9AFCE9DD06079E2B683257D2931D
SHA-256:	795F8C9D2F4FE744B99194FE123D9394DD138C26354913FDF389162803F4604A
SHA-512:	AB1EC4B155E4B4FCAF51A43A1FE7BDC0DB058182E0E4E51BBE9E3E9B424F64234B75607BB5917A120EAD2CF04E20FDCF43309B584CC49BD7C8B05777317B2478
Malicious:	false
Reputation:	low
Preview:	GIF89a..2................x..G..................Fy.......1r.....v..k..{..h..s........K....1...K..[....h...S.....c..Y.h...K.......q......................................R.......................................................................0p.................................................s.....[..J..{..s..{..c..{..s..k.....s..S..k..k..{..S..c..k..[..[..{..c..c..{..S..s..S..b..c..K..[..K..S.....[..[..s..k..S..k...................O.....'Z..........................................................................1.................Nv.n.........................................s........t...........k..{........{..s..c.....b..[.....{..l..S..K..z..c..c..k..s.....[..S..{..k..s..b.....[........T..\..\..Q.....k..............a.......Q..[...-`..................................!.......,......2........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k..sS/..t!..N.....+......

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	5.2536368727474425
Encrypted:	false
SSDEEP:	6:hn8FX0wadCc4svquXsLwFcn4mc4sLBdOMRdlVxqpzEdx434Qb:hnMEwuiuX4wpB0MPzx4z4x4IQb
MD5:	260ECF7320D9136DFB142EEA14CF1B9E
SHA1:	D3C60E2B12DA5B21EBF7710046DA299156FD5672
SHA-256:	4F6036CA4A4173C82BAD14CEDE7737890BB66213EE15FE4442EACD8D269D385B
SHA-512:	2646B6D045FAD43EC287878DEA7DCFB742826E59420AF12BEB24D84AFB1023AB39B59A1D643F97B0BFD2172D29DA63FC3548875140DA06FCA6EAA96E53A109C1
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/mydomain/index.html
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="http://www.w3.org/1999/xhtml">.<head>.<meta http-equiv="refresh"content="0;URL=./">.<title></title>.</head>.<body>.</body>.</html>

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 76
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	6.379508010340848
Encrypted:	false
SSDEEP:	3:CSlgllewl7/l6hl1C9cr3pv9byYlS0ZYlSfGqOqd1VvkMcZKn:FlgHl0hl1HXdIHlSEqdUi
MD5:	1E19C69FE4E146A31D34232D5025B65A
SHA1:	6D2383B3A14C48F087116258A42C192D64C25957
SHA-256:	A6798B8916C40FFEE078ADC7D7D3E9178A86F5F1F8F8CE5E9C6700E9FABC3803
SHA-512:	7013735E1ECE74D148F7CFB33819EF713D7AF6A5CCCF49D445A02E28CACF4C16BA0DCAB7AA20527E3E0E30E87B02DD76B1FA9926BC82D3C1177CB4451A43E2D7
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_02.gif
Preview:	GIF89a..L..........!.......,......L...}................H........L..............L*.....J.....j..........N....................(8HXhx..........)9IYiy....T..;

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1913
Entropy (8bit):	4.851452149282905
Encrypted:	false
SSDEEP:	48:V1SOhDB+Nq9/8UZZntjx6OpxPod8f+D6gID5XHx8Q0OI+:PcCBHTI+
MD5:	21E8525E15E7D0CC9FDAFC58AA8EDA3E
SHA1:	5830B8DF6341A08C4D37C2901C1A69B2EF0B7C53
SHA-256:	381D0EBCAADE97A87C05BAA78CE1927C76B416DC5AF9E79626F6003831C628AD
SHA-512:	D2CE734FC7C50CB3A076E03CFDEE3C8EC291C66044A52A8519D1A8BDFA49C847D1B6BAE6AD88CAA8355C8B43FBEA4BCCF145D78E01192ADCA2F2217CD5AFAFF8
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/font.css
Preview:	body { color: #444; font-size: 12px;background: #39f url("image/bg0409.gif") }..white { color: white; font-size: 10px }..linkbasic { font-size: 12px }..link10px { font-size: 10px }..orange { color: #f90; font-size: 10px }..news { color: #06f; font-size: 12px }..news14 { color: #06f; font-size: 14px }..news10 { color: #06f; font-size: 10px }..white12 { color: white; font-size: 12px }..white14 { color: white; font-size: 14px }..small { color: #444; font-size: 12px }..small2 { color: #444; font-size: 10px }..graysmall3 { color: gray; font-size: 10px }..small1 { color: #444; font-size: 12px }..smallorange { color: #f30; font-size: 10px }..smallvio { color: #60f; font-size: 10px }..smallred10 { color: red; font-size: 10px }..red12 { color: red; font-size: 12px }..smallred { color: red; font-size: 10px }..red11px { color: red; font-weight: bold; font-size: 12px }..green12px { color: #063; font-we

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/companyindex.data_/images/spacer.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	3101
Entropy (8bit):	7.835963114519046
Encrypted:	false
SSDEEP:	96:uNQXGqGT0n1p17zDfEdB5KCvsN3LQlTs2YiFJ6:uNQXEgn1PDMr7vslLG5TM
MD5:	227ED60162FEA67E5B2B7A49C72D26FF
SHA1:	8CB79AF53858C2615B91303F6F928D445A413086
SHA-256:	69FB3DABC2300118DA7BBFE0D924C123B3D11C08E9FD3456E00FE2D525C8AC11
SHA-512:	C13F69BDE9E06086F96BE1C1C5531F0968CBB605C16FEE92BA1B4524464BD3415AC4245D880F79A612CF51E1DD9472650D93600290366898B5156A0E25E5B43C
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/contact1.gif
Preview:	GIF89aZ.7.....U..D...2.S....>..K....x.(..EP.(....,.......cw....\......e.\....L..I.wD.....8t.F}.{.........-....2...........Fh....<.5..i......K.5r.L...o..:....-l.m{.2...Ig.#.!d..Q..N..>.....V[9......p.j..A. O.......,8.........a.........\|..X..Tr..R..X.1..@z..........U.....Q......T..^.9c.........G~.E...mw0..4h.............3[;<.....!..?x......U..6...E&.].'...M.Sm.....O....!d.$f2.K...=.[.....7.U..Yq.F...A...a9...EX@..4..0n.Jg.,it.5E=...\.T.%,...C[...3........<v........I.2p.v.....)..w...@9.=..R..O..5.Kp..8....4./.D..W.........-....I....s..;.....e...C\|...O........D.'h.9.....T..G....Cz..W.K.....g.]..P/.....f..r..a..Dw..L 8...N..N..P..C\|....)z,...M...../......_....q...W..R.>{..=t.......%..,k.)_...........=z(.Q.(f.[..u..;t..D.Q...VQ=...Z.........6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..%.n ..A..Q..MJ.<:?....M..&i.%...%.6..e@.,Y...z- ...to.....F..}.\|E....R.N.......(...........T@.:rQ....(.6...l8..PAR.)... .

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.1961893998690174
Encrypted:	false
SSDEEP:	3:CUXPQEsJQEn:1QEsJQEn
MD5:	AF835385F9910DFD4F1723C12B0716F4
SHA1:	D7A07677BF758571DD49B6DE3F7DE5458B534D49
SHA-256:	B1EFBAEB8C5CE34E2C6A6492D7AAD07DAEADFE3E2B4F2360A12BBD756EC23067
SHA-512:	140A3ED7DCB1E012E6F5C03BAA42C699660C38F427B607A4F9E04D587B91DF6E4657A37D7FE2A6A91FD5C1D8651820A0401400DA95E80D327D720D5390926555
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..L..;

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	3118
Entropy (8bit):	7.871445351514154
Encrypted:	false
SSDEEP:	48:A2ISn7f5/t5CUyaCWu93S68AZaUkjjB81qlmo+27dCvt+Tpe8P4xu3fYp2u6raDJ:AfSn74aGxNIzB8it3QYF/4x2wDMnXgvz
MD5:	36201BFF4D1E6340D08DE9A983010C94
SHA1:	88D0B66BA4035CC8243F6E09952A5D57DC1D56AA
SHA-256:	1BDCE738F1FFFACF1422257EB8AB47EAF3BA96246E81D3084A77CF94BE0697B6
SHA-512:	31642C90A9C8E7DFDF8335D5D0C71C6BED26429A2C4F6F7B84A557A75874E38A5F7816AA2DDD8397D798D09A90982AFB7BA29803475DE8465C1476B243485E85
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7....4.9...<.BH......:7.3h........#x.y..... .%Y.]f.jk.l5.........2... j.n#.)$...V.X..........u.x...V.Z.6KE.JM.RV.Y[.y..e.gK.P.......EQ.......W...."i..3....7.p....F.IV.]!.&...R..].i.....!.G.(.............".y3....A&...P.U".(.Dx.k....G.Y...I.N.pyC.F+.m.G......4.....9.A...#r....).DS.~.2...........2..u.@.FM..b.u2.7`.d.c.8.=.Y.....\|....^.c.1.d.h..2i.o8.<...Q..;..dL&.,-.3.0...l.p......e.t'.-...I.s/.5&.,...-.2..\.`.H.0.6.............N.3.7>.......f.j.......p.).-.>..8..9.M.............>...../.... ..z.......k..\..].bg.lb.g..$S.Xa.f.9.%.+V.[........).1!.e...\...K.O).....^.cD.H'o.:jF..............4..H.L.......:..8?..!.42.8..M.....}.._.x.@.....Y.\....J.....N._`.y.c....a...B..r.u,.2c.g.a._.a".%#.(y.{./\.`.........+m.n...2......E.~....6.....3.!.......,....Z.7.....i..H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L.......1`@D....*MzT.Q0rd.!s...+2..-p...6m.a.D..d....H..Q.....V.G...T.."..9p..paz.8.v...2L.i[....(.n.a...6L...\...".S.I.Z....

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 58 x 66
Category:	dropped
Size (bytes):	1947
Entropy (8bit):	7.636474268191322
Encrypted:	false
SSDEEP:	48:nnR+JQ/bmXfsbe7slovmmkWtuMEo8LA0vCJ9/Onu7suXcHX3Y:oybmv4VWtuboICJ9/OHuXqo
MD5:	3C21DD75FA1301FC94304D25DD9923AD
SHA1:	E2C10F39F17A3D97359FA7EAD4816DDC8A53F8A9
SHA-256:	C93AB28D09F2090FA0B7EB5A11120A7625710815A9271879B7D953717A3BDE3A
SHA-512:	D1AA22EC343D619E24E7BF701FD10B2A25FC24924BC818C444437AF14B96F3E87755F3BFB44D4D2751E7B39848C24566A4E06E6B957272D9ECF961FD8D26E7BF
Malicious:	false
Reputation:	low
Preview:	GIF89a:.B.....C.o........5k.P}.Yaj..........+Z.3r2Ll.R...)......>..L.++$^....-<P.i[{....E...Jh..!:.........!.......,....:.B.....'.di.h..l.0I..a.x..h@4.`cf#......x...( X; .JV$..T6....<.....9.....2m..... .8....8.....oq%..\.f.........M.........SF.p..\........^...l...\|....L..Y..........................S..;..L........@..........`...\...0.E.p..9...DhG.B..3$4(0@.....P...`..S...6.........AC..e.u....qP.X.p......\!........H@PAM.. 9!U....n.9..+.S..9.PAA..NGzD.A.2...@..A...31`...L.......F.I.... `SE....U`....a.0....B..w$..A+.6D..._.p'...5(...:................ 8.0....c/..B...<L...t...5#..t....x.. ......N.8.A..W.........i. 0A.8$... ......(....Yp... .....R...yP.i.....d.....%.+R..Zs.. @..z.c......\|=.....".\|&.....<.Ae...Y....R3..D.j.!.%,7!.T$.P.W....Vj7@..hy..3x...k..$.f.d.~:..@.#...au..d...9.].......8.g...C.R........ $i.XZ:A\V...........I.)JMJi......x....J..D.S.....k\.h .it..)..`......W~...$q.......Ld..d2ID..\."....i...Po...@"a.....0 o..dw...`.X`]e......h.L.L.........[.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	3101
Entropy (8bit):	7.835963114519046
Encrypted:	false
SSDEEP:	96:uNQXGqGT0n1p17zDfEdB5KCvsN3LQlTs2YiFJ6:uNQXEgn1PDMr7vslLG5TM
MD5:	227ED60162FEA67E5B2B7A49C72D26FF
SHA1:	8CB79AF53858C2615B91303F6F928D445A413086
SHA-256:	69FB3DABC2300118DA7BBFE0D924C123B3D11C08E9FD3456E00FE2D525C8AC11
SHA-512:	C13F69BDE9E06086F96BE1C1C5531F0968CBB605C16FEE92BA1B4524464BD3415AC4245D880F79A612CF51E1DD9472650D93600290366898B5156A0E25E5B43C
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7.....U..D...2.S....>..K....x.(..EP.(....,.......cw....\......e.\....L..I.wD.....8t.F}.{.........-....2...........Fh....<.5..i......K.5r.L...o..:....-l.m{.2...Ig.#.!d..Q..N..>.....V[9......p.j..A. O.......,8.........a.........\|..X..Tr..R..X.1..@z..........U.....Q......T..^.9c.........G~.E...mw0..4h.............3[;<.....!..?x......U..6...E&.].'...M.Sm.....O....!d.$f2.K...=.[.....7.U..Yq.F...A...a9...EX@..4..0n.Jg.,it.5E=...\.T.%,...C[...3........<v........I.2p.v.....)..w...@9.=..R..O..5.Kp..8....4./.D..W.........-....I....s..;.....e...C\|...O........D.'h.9.....T..G....Cz..W.K.....g.]..P/.....f..r..a..Dw..L 8...N..N..P..C\|....)z,...M...../......_....q...W..R.>{..=t.......%..,k.)_...........=z(.Q.(f.[..u..;t..D.Q...VQ=...Z.........6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..%.n ..A..Q..MJ.<:?....M..&i.%...%.6..e@.,Y...z- ...to.....F..}.\|E....R.N.......(...........T@.:rQ....(.6...l8..PAR.)... .

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	3046
Entropy (8bit):	7.858638368556845
Encrypted:	false
SSDEEP:	48:vWSo8VjOYJ/4fe7lA5rKC2EvgUl378YrqzSUv932L89tt36YeyZdWdMrZQoOi5Cu:A8VjOvfegrL2sgUlzrAv932L26IZhr/h
MD5:	444683DC126325F89F7CCF2E4FCDE343
SHA1:	9443FAC43DA5755074D5D57FBCCDA7DB7E137482
SHA-256:	2286B3116D695C48F763CD79BE1B4158678E2351555000CC68CB87CD15442822
SHA-512:	3F4B4CEBF7E198E19A5B2B2B443881FCB455BFFC38A751580DD6DC14658467165B8F2D236CB71062C0D37F93B36ED7D0F4B388FF49950C2179D67D5FAAB81513
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/contact.gif
Preview:	GIF89aZ.7.....5r........D.......J}..TkJ...A.....9.....Y..I..wHyW.w.Tr....t....."R.7..Ht...........Dkm8v...y.V..>."d..L..E....J{.@z...V-t.J~..B....F}....8t.z...Q....Qr.Q{..N.Ry........3...].3.H...Cy.8b...h.e%9.....Rv.......[........V.FD...`9#......=....My..6.;q.Q}.Lr.Dc........m.....N.1..]..)c...St....TtB!..I..Tr....;r.2o..../..>x..Ih@{$(.....U.....8.Q...d....-..l..Kz.9h.j..C..;.Il....}..3k.;v.M.......4#..Kl...1>...;....k.....G.2[.M...J3..=c.#b....4i.P..Fx.,X..S...7@......i.=o.M..Bs..@.4..6.....<\E.RF.+&..d..C\|....&gE>.??..K..Aw.Sx.+i.}...........\q....r........gz...........9.....E...#O.9b.Ok.w..Qo..R....m..................P...#[.Cz.F{.`..Au..K....V....H..........@v.Np.[......_..W......";..~...........-`.d...O.f.... ^..U.7Y.j..q...k.9r.Qg.6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..%....!Zr....Qf(..4J...N-....7{....)..%. .H..hi....F,"b$H(.&..%U....r].63...R...<&.(V....W._..Dy..T......^.\|7^h...`...`kqM....

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	3042
Entropy (8bit):	7.846100209177669
Encrypted:	false
SSDEEP:	48:U8i6fEJ6l6lgC2PtEioZukTwxtAoAjsbqFZg4d3ilzq5kq149vfsDD/2IU8RmOab:U8dfEJ6l6lxEtEioZAVAgbqQakm5kq1m
MD5:	1BA0278688241539500BDDA9021B0B08
SHA1:	482B4AA75F5883B2B6D7CBF491E45F9116101F01
SHA-256:	4213889CF9582381AE6CAF2CECF324A404D7BFCC73C566B6BDF3F09FAC842159
SHA-512:	C5D37476EFC313E117D05238EED94B08B04BA45B8FDD478892058D47548DF068A7955349AC74F9760327D092A1A83FD841C3C590E40F2E5062C33E1414E59AF2
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7....b..5..X..I...........7i..........;........1..E........:.....2k..>.....h..u....-..I..;.....Cu.j..C..E..6.....H{..9.<...........I..'.........F.....n.$..8...4.A........}...X..6.......F.....\|.........}.............)..!...F........j.K......Y.......(...S........A.4..f.....D..$R.....q....?...}..c..T.&c.....j.....S.=..@.......................6......E.......p...t.M..'....2........H......@.,Z..K.?s..]..z........L..x.......:.._.F......L.......!..-...b................;...E..........p...........Lu............d........X~..........\|......9.................(V.............-....G...p.W..8...k.....s....0..............B..O..+..'\.,.......A...\|.G............A..K.....6..H.....+..D..O...........'..!P..>.j..............&...W.{..........;.....9..<.."S..\|.O.....@l..6.....3.!.......,....Z.7.....c..H......*\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L...........A.H(].A...p..(G..=M.X.......l{.`.j.x.U..;w........bf.9......4z.'...4...I....xA.....Y..{...<.....F.x..A.[7+V

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 98 x 29
Category:	dropped
Size (bytes):	1614
Entropy (8bit):	7.546462787222834
Encrypted:	false
SSDEEP:	48:kQIxjMaMMVmVneBTPnYtp9Apg2iZPJIaNOpM2/a3MUc6:NIxjMaMUZTPnYtTegjZhIaNOpp/ux
MD5:	0E44D4E17867090322A90FE4D5CE255E
SHA1:	6123137EA393666EC73CE768A4F5ED0D5034059F
SHA-256:	1034FF9B0D731F5311F60C1DF8C9D51B57EF4868C3A0992AC5A8B6EC35E1E4DF
SHA-512:	DDAEA7629D3D9FAAE7E9D15803B4DD514C27D5FB8C2B49FEE9322B870BE569C639A573C3FB0C9390F6E1087B96D248B5AA1CE84D405AB11A9D15E313A7972D0E
Malicious:	false
Reputation:	low
Preview:	GIF89ab.................@..............p.........0..P...........`.....0.y ..`.... ..@..`....p.....P..p..............f............................................................................!..AdobeGoLive......x..U.n.@.........8.BE%;.$.d..5@.N...yX3.......5.].jHU5B...k\|..}.s..A.8.}...`K..@..g>...Ux..Kk.6\|;`..W...t'...#.m.Q..Ob........,a..fR..:.1a....%...:D./..#..e\y`..L.....[G+.0c../....9P..JN...VY..7..b....p....\|.F..Y. -E.....vCt^...(}.=l7;.a[G...JYRu.=R.\.<.H.n-.YV..t{}..!i(....>...Wu.h.G....q..(5...3\.$...m...0te-K.^K..?.Xq.R...r.Y..[.%a..YXzX.lw..-..\..-M..^..w....n..d..........o..X)....<..W.=. }o-..J.G..C).I..0.q.._....4.$X..=..!_..Z....^.D..?.>~yz..j......N3`..v..wn=....=e`t....wh.?..8.\..V.;...G....92Z..!.......,....b......@.pH,...r.l:..tz....v..Q.`..D...h.!.f.....M....)S1...psu.Nwd%.'.%d.%.(%.%.j..Lw.%....%...(!.......Gw.........E..`. D..C.......C....%...........g....B..g.B...(..&.C..D.&.B...B....B.%P..P.B.a..<(p"..2.......'rD..c.....

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	3046
Entropy (8bit):	7.858638368556845
Encrypted:	false
SSDEEP:	48:vWSo8VjOYJ/4fe7lA5rKC2EvgUl378YrqzSUv932L89tt36YeyZdWdMrZQoOi5Cu:A8VjOvfegrL2sgUlzrAv932L26IZhr/h
MD5:	444683DC126325F89F7CCF2E4FCDE343
SHA1:	9443FAC43DA5755074D5D57FBCCDA7DB7E137482
SHA-256:	2286B3116D695C48F763CD79BE1B4158678E2351555000CC68CB87CD15442822
SHA-512:	3F4B4CEBF7E198E19A5B2B2B443881FCB455BFFC38A751580DD6DC14658467165B8F2D236CB71062C0D37F93B36ED7D0F4B388FF49950C2179D67D5FAAB81513
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7.....5r........D.......J}..TkJ...A.....9.....Y..I..wHyW.w.Tr....t....."R.7..Ht...........Dkm8v...y.V..>."d..L..E....J{.@z...V-t.J~..B....F}....8t.z...Q....Qr.Q{..N.Ry........3...].3.H...Cy.8b...h.e%9.....Rv.......[........V.FD...`9#......=....My..6.;q.Q}.Lr.Dc........m.....N.1..]..)c...St....TtB!..I..Tr....;r.2o..../..>x..Ih@{$(.....U.....8.Q...d....-..l..Kz.9h.j..C..;.Il....}..3k.;v.M.......4#..Kl...1>...;....k.....G.2[.M...J3..=c.#b....4i.P..Fx.,X..S...7@......i.=o.M..Bs..@.4..6.....<\E.RF.+&..d..C\|....&gE>.??..K..Aw.Sx.+i.}...........\q....r........gz...........9.....E...#O.9b.Ok.w..Qo..R....m..................P...#[.Cz.F{.`..Au..K....V....H..........@v.Np.[......_..W......";..~...........-`.d...O.f.... ^..U.7Y.j..q...k.9r.Qg.6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..%....!Zr....Qf(..4J...N-....7{....)..%. .H..hi....F,"b$H(.&..%U....r].63...R...<&.(V....W._..Dy..T......^.\|7^h...`...`kqM....

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 440 x 207
Category:	dropped
Size (bytes):	31818
Entropy (8bit):	7.9104174409622
Encrypted:	false
SSDEEP:	384:HItINXUFSySupD3KpB3z1ytEATBJbcgYX9SUomJfeOtcz7WbavriFhPYHj0IrIYM:HvNXSSbut6BpctnWtScK7Wbavuy05q7A
MD5:	6011003E6ADF3159905A3EFBD9361A6C
SHA1:	3F6ABDA51FF97FB43F7E950F162B45DC48D5EB82
SHA-256:	9924CE8ADD1DBF5771A57B72F187D7561454F7DEF7E428CB50BDDE06F569FE50
SHA-512:	51CD14AAFB2F8294924F88159F5DFC7CA7121C0F974AC66B5123BA9FFCF0D8B6EB4EA4AD5826D0CC2FF512A67EDC41FE1F0496F0EE417E23A518B9B6F42728F5
Malicious:	false
Reputation:	low
Preview:	GIF89a...................}~~.....Bh................t........333...........................................................???.........hgg......(S................................................................................................................hh................................SSS.........z..r{.............................................................................{.................... .....................................................p.............................z............................................................................................................................o...@.`...gg.....p...............................qqq...................p........................3.......!..AdobeGoLive......x..U..0....<Ed....$+h)....r.:...?..l..W..o.c..L.M...j+..9D.....8A...... .~..m.<...~.*...5..>....I..-..$...Hkk@...i.....<......0..f.i..{..].Y.....7...........M%n..R.u4..3..Jy.N.A^..?..):..

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 600 x 93
Category:	downloaded
Size (bytes):	26153
Entropy (8bit):	7.889725288095832
Encrypted:	false
SSDEEP:	768:F4BePhTAWV2caRYzgqAv/YJrFspngnPms0:dPhTAWV12/YJrF2IP/0
MD5:	4C44BD937CC923754175AB2951C5F3B1
SHA1:	8F64C7B084EDD4BF6D895E2F6D90567CE53EF421
SHA-256:	25CBFA844DA01E51B1DE64105E23F98FB526ADF76596CA152B9C3B50011C5172
SHA-512:	6CAC648E61E67517752CB6629002EA9CCA9D712121701F5C8EF290D7E6F46ADA2903D16BDC6FFC3AAD0F2C016ADD264142454C502005910E93DB36E0C73D42C5
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/toplogo200404.gif
Preview:	GIF89aX.].......i..............,...i................b......p..........].....I........Y.....q..}..!z..........U..5.....N..d..T.........u....o.....A.....%\|....v.....9.....................r....P........k..)~....a...l....Y..x........<.........g.......c.....F........n............n....{.................l......x....Z...............j....2..u..............D..]....................X...............v..../..............h..............m..n.......g....._........S..z.............>...t...................p......................._...........c........K............o.#{.............7.................s................................"{.f..............@.....{...p...0........`.. y.d...........p..P...............o.7...........s........K............................................N..N...f..f....!..AdobeGoLive......x..UMo.@..8p.WX.N.PQ.N..!.H...J..v=vV.;n..z.m.RU.P%\|..o...{c;....>.../.. .i..A....7Z...&a..;...}..;.....io....~.#w9`...?.g...0....i......-.$..!:n\|...Q%,.....g.....:Z..k..\|.'. ...Pr..0.....

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 54
Category:	dropped
Size (bytes):	250
Entropy (8bit):	6.85855592102753
Encrypted:	false
SSDEEP:	6:HcPGZlF1HhSj8iJocVprzMSeIJhs/cHmvFIFkp:HBX1BK8dAprzM1cHmyFO
MD5:	1E80876835343B650761FC613A2EC6BF
SHA1:	E83CE0530A08EE4EBF08134BFADE05D30648A41E
SHA-256:	E1D72A9F94A26F0E63BAB08E4290C0F4F85512A39B9F7E1BA862B1FE07B46603
SHA-512:	7171D2859E54DCB7B881E4C2816569977174B3235C6F5C345B8D96FFBC14FF1A163DE5F64ADDF5CA00293FF6D58C6D9BEEAF75C8470CB919BC54260F68FAEE01
Malicious:	false
Reputation:	low
Preview:	GIF89a..6................!.......,......6....!...............H.......y.L.......&....,..L..A...`........n.......lN...v......n.C.........7Hhgx(.......i&9)Vi....Y.....DZ.t.J....:.....[{F..........<:Llj\|.........-.3]<k....t.$.=.-~A^^.S..;

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 14
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	5.875327928680781
Encrypted:	false
SSDEEP:	3:Cshp8tGTt8a3pPa8+AqVOaRt/jylexlltbg7qI6dCv67SRq34qdtUvkQIvr68iuZ:fhlfWXVjUX6dXu4IrcMBuZ
MD5:	D5D013647AA1DF8EDD459F7AC5D8E7AC
SHA1:	7A1A3D57C2D23A4C503026D22932E7F142625C7F
SHA-256:	43CA81984A235423E1D444DE3478038E5A64D1D9FB43746DA91D56475DE3FA86
SHA-512:	B060BC26339A21BEC689633F053B05CC513C09E74AFCE7BB400BFEFDBDD9CA7BFA371465090EAAB7AEA506D09C8A7A0CE7654B5F60CE08DB84C9002855A2D41E
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_01.gif
Preview:	GIF89a.......................................................................................................!.......,..........{`%.cq.D@.l.p,.tm.....Q..`e!....R)X....cI.Z...d....x\m....y.n..g`.M...@.}.."F.*}..F.q....4......................}....u.!.;

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 70x41, components 3
Category:	dropped
Size (bytes):	4114
Entropy (8bit):	7.110290168846327
Encrypted:	false
SSDEEP:	96:2uyt4N+zq7DHksDbvQLTzUCJGavd8zq73jgtAGpLrPZm:pyHz4HkubUTzXkSezWZr
MD5:	FFD6B11016A7714FB98913CA91571CC7
SHA1:	14B62CEFCE880615F95946BEE73DCB808CBCBF6B
SHA-256:	EC32458CA3288846D2DDDE93FEF2741C206898A83C6017A5DC5E2E4E0CFA7DBA
SHA-512:	7F6CEA5EFC2291FE276011F86869F3CC2D1B09802BB45CF67DA4E746530B6BA954C62514EEB4860AEB707265245DC92A9A55039D6F789497FDC57653D20276AB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....<Photoshop 3.0.8BIM...Print Info....x.....H.H.............+.6.B.{.......X.X.....s.v.....d............'.................4............!.!..................@...8BIM...Resolution......H.......H......8BIM...FX Global Lighting Angle.........8BIM...FX Global Altitude.........8BIM...Print Flags..............8BIM...Copyright Flag.......8BIM'..Japanese Print Flags...............8BIM...Color Halftone Settings...H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM...Color Transfer Settings...p................................................................................................................8BIM...Guides............@...@....8BIM...URL overrides........8BIM...Slices....}...............)...F.....J.P.R.S._.l.o.g.o._.w.1.0.0...................................F...)..................................8BIM...ICC Untagged Flag......8BIM...Layer ID Generator Base........8BIM...New Windows Thumbnail...........F...)......!...............JFIF.....H.H..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 600 x 93
Category:	dropped
Size (bytes):	26153
Entropy (8bit):	7.889725288095832
Encrypted:	false
SSDEEP:	768:F4BePhTAWV2caRYzgqAv/YJrFspngnPms0:dPhTAWV12/YJrF2IP/0
MD5:	4C44BD937CC923754175AB2951C5F3B1
SHA1:	8F64C7B084EDD4BF6D895E2F6D90567CE53EF421
SHA-256:	25CBFA844DA01E51B1DE64105E23F98FB526ADF76596CA152B9C3B50011C5172
SHA-512:	6CAC648E61E67517752CB6629002EA9CCA9D712121701F5C8EF290D7E6F46ADA2903D16BDC6FFC3AAD0F2C016ADD264142454C502005910E93DB36E0C73D42C5
Malicious:	false
Reputation:	low
Preview:	GIF89aX.].......i..............,...i................b......p..........].....I........Y.....q..}..!z..........U..5.....N..d..T.........u....o.....A.....%\|....v.....9.....................r....P........k..)~....a...l....Y..x........<.........g.......c.....F........n............n....{.................l......x....Z...............j....2..u..............D..]....................X...............v..../..............h..............m..n.......g....._........S..z.............>...t...................p......................._...........c........K............o.#{.............7.................s................................"{.f..............@.....{...p...0........`.. y.d...........p..P...............o.7...........s........K............................................N..N...f..f....!..AdobeGoLive......x..UMo.@..8p.WX.N.PQ.N..!.H...J..v=vV.;n..z.m.RU.P%\|..o...{c;....>.../.. .i..A....7Z...&a..;...}..;.....io....~.#w9`...?.g...0....i......-.$..!:n\|...Q%,.....g.....:Z..k..\|.'. ...Pr..0.....

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 400 x 100
Category:	downloaded
Size (bytes):	14554
Entropy (8bit):	7.932847663494539
Encrypted:	false
SSDEEP:	384:WMxUGCJ80q5CH1WPaRHARIG81ZpFvfbUM/:jcA5CHoPMHARId1FfbV/
MD5:	D6F013685A2DBBD811096D386717325F
SHA1:	84060FAF225C8B4FA6A65BA00157C2B28878CCA6
SHA-256:	2E093A91D35175BCCE3719CF513CB85989723E9A42DD797CB102E99F17C77332
SHA-512:	B1CBC3CCEAC59D68D7A3E13434049F2950942A8AB8D38B9A49DCACFBF81CA859CDFF8FE9C18CC6EAD84A684B1ADAB70CC43D2913461DB7ABB9E63AAF3A60740C
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/t_info.gif
Preview:	GIF89a..d..........}.....j.........UU................s...........N........z..................................''....NN....Bh.......n.................nx.....f...................?..'R......7........uuu].................S...........}...........5...........C..............z..........................i..b...........................................@..........p..`...t...................f...3.fff...!..AdobeGoLive......x..U.n.@.5..\|.5,..$..HvH.."."@.Ng....f....W.]\.....j..5>s.>...(.x.{l...m.E...O...._....._....E........H{.@T...../.....q9....p.p....n...s.J...:c9....8W...^....d.:{/.3x..y.T...Sx....g..Xl.j.....@....,. +.t..6.....+t_z..d.W........;.......B.I..N.[...~o..6.,..\..Bh.B.J.irh........P..<..IbJ......C_5..........T...TW.....(.k.....`.?$\Y...g.]ee...T.....m.<..jA...X.@...........yf..Nw...q4.z?.w...6M.V..4.M..f.LI.f...;x..#.k]Bg...w'.OcO...<$Zk...:>.....<.[o.;..Oo.I.209...+t..;..x...V.[';.....[..!.......,......d...................................

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 18
Category:	downloaded
Size (bytes):	445
Entropy (8bit):	6.052313304810031
Encrypted:	false
SSDEEP:	6:mHyBuWfjYjksIFnD3lcBY5Gvnq7+OGq4RzRygi0sfYFYku2saPrPZ2umI19WT:m2usjYjHK8fq6E4R1ygXoiY29rZJe
MD5:	06B5996AD9E936410276829880C0C03E
SHA1:	1DD991F2B4E706B5DC536E711CD885899000A27A
SHA-256:	95102D43C9D9C94C48C6B8549BBD0EB96F0B64B45A3AD15CF0ECCCEA36340FEE
SHA-512:	648CD34C240377AAD355A609FEF6CD7BD38BD480FCC18B592E96EDDB390A8F2880BBE9CBBC2A596275B83CD39F3A28A0C972D9CE06419710B927265CFE43256B
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_05.gif
Preview:	GIF89a..............................................................................................................................................................................................!.......,............OhH,...r.l:.....m..v..z.U..K.....t........A(.~.@@..\|..\|.. ......e... .....S... ..n...G.... ..X......................z..........f..........[..............K........................H..A... .....#J.H....3j.1..;

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	3143
Entropy (8bit):	7.832003109852524
Encrypted:	false
SSDEEP:	48:u/VxAlgF9e93bSWaIvlCv285tzC89yeEWEZiWlCoFPHiJwRs3SATUf3NKn5m3lSR:ugek3bSaI75CS9ECoFPHWww5Ul85KcR
MD5:	0437BDD75DCFE6246FC2D0C26A538097
SHA1:	E2A77109977D1F4FEB523A6C3862C1EA8D4FD44E
SHA-256:	75E4F8F3E3FA410EBB3BD4B34ACF695A08E7EDFBF363FBAA235E146667F9C7D1
SHA-512:	A71D368F00D937F042B5B7D4C93C660130B1F40054E4D5E96A2E7BC7AB3B8E6B1FECB6A6DEAA9D4CEFC9ED47684F91CD2CE4DC4F006E2941B9B25D298D6E720E
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/hosting1.gif
Preview:	GIF89aZ.7..........U..<...Z.m......3g..."....u..V........Gg.......e.9..'y...................-...2...........E...J...V..4.0.....%.....v...t.A...........:........:Y.........1......W.....l....K.............../.M.........V}\...2..q..{.L..1.. .........;.....}......D........c......m..........................6yP..........h...D.....'.........}.......d..>.../.3...~....?........Y.7.6..H...f..-x=..............<......`....4............P.............<......Qv.6.4..@..........C..4...x....5...Mp......E...K..h.X......0../OY._.......0.7.......L.Ru.z>.E....G..g.m....9.....Aa............9....J....5..............m..i..x..t.R..I........Y..?....4......o.X........ ...@..@....B..%........2..K..&..N......I......x......3..B..6...e......:..C...Q.8........f.."..6.....3.!.......,....Z.7.....w..H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..%.#.......<yR)]...+A.p8r.fO.$..= CF...(QB..Y.E.P...A..y..AE"..r..8...C}tdA.BE.$..'..I..$:J.2T.mW3~.T...%._...EE.6o.y..u.\|.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 10
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.931143810936033
Encrypted:	false
SSDEEP:	3:CizTZpbDXl9zl7/lbpePrar71f6+ZF2JLKk7MhVS9l8R6VdZbR4bYaKII01JMvn:LzTn15liOhfGOkAzSH8R6VbbObacov
MD5:	EEF9E0118F40E9F5C8470E5C4966FEE1
SHA1:	ED3B61B0D79CF6DBF8EF35612FDAAED20A392C2E
SHA-256:	1B7AD9B57C54AF8DC811DE5716EA21751E7D88B3C38EB3CD1B4A828E8E7B9F87
SHA-512:	8EB0D0B326927ABB7D74BA4457E9F25E361DB377FB5E51DDF1E888BCA6C0903A43AD59CD15471F75BC8ACF589B9CFE9B613580EBB27BB74DF58A8CEE052BC9A4
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_03.gif
Preview:	GIF89a.............t.....q.................f.................!.......,..........v...8...`(.$.$."Qe.p,.g.Vs..<\..\oH,.~....l:A.........)...+...(...z.n...\|......~.............\|6...............)..;

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 7 x 10
Category:	dropped
Size (bytes):	110
Entropy (8bit):	4.61166951816862
Encrypted:	false
SSDEEP:	3:CJhlYU//1ylVrt33Wf5SCt7uhhE:YzRQxuyhE
MD5:	C866DF30E0EC8ABA06B10F5537BE1C06
SHA1:	1F521A91642DEDADCDFDB18265E264ED9F3FBD99
SHA-256:	84CA7E3FAB4EBE60BB4D68F90494C657DEB333A90678E251167FE5594F78DCA9
SHA-512:	5FB6028C16DF8B74A0BF51AFEE6462CF41A7603C64F621FCC505535D942BF17FBAE44FE49E6D7D99B05C85B2BA2CC42EAA3086789C085FD250103FD62FF235BA
Malicious:	false
Reputation:	low
Preview:	GIF89a...........`.... .....]................................!.......,.............D.........u.'.eQ .j....U..;

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	3021
Entropy (8bit):	7.836252489275611
Encrypted:	false
SSDEEP:	48:Q+K/c8EWaOMZQGzg+mCRJsj9FrF2P0AR6zxa6p45WdqJTwtKuGakQmhRrl5TWi+y:4dP+prHvYFBu0ARi4K/p9kFVlV3iA
MD5:	341A32D4624BD581F4D755FC6F316789
SHA1:	C0811915C2D5E4BA7945812FCC701067C91A3E1A
SHA-256:	55D1CAF8F631F7D1B328C8C7EDAD713BD682CDD53154517FCAD09B128AD9530B
SHA-512:	7095E494AC4EB8B7F7FFDD7A769A824F5A7963BB8B973A7AD3E26628CB0B4A1219E8AB159A5BA713707EB72CC0B4A833DDAB1F42DE263D87E2AE7D42E501774F
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7........M.........k4.....u..J....u.vc....T....DL....Q.u8........3.h.......l6.(&.z;.U......L..:.......e.r...YY.e.("\|.Y.............]....zF.d.p6..D.~=.Y.]-.....@.F......h.~....%.d.x..z.5I.Y....&.Y....#.....q.....'.......c..l....1....5.[....k....~G....,E....7?.......>...;.b=2..y.......b/....f1..l.{Z.q..8.T0.....?....z.....a..~..A........H.i.\|....bW....\I....y.N&\|.....V).....C....s..K.o.C!k....6.V.. y....K..m.I$u.S......0..u..y.S(..E...Q'.....j.....a..'..J.w.\|<....h2.ka.n.X..I..._..Q.F"p.{..g.'.O@.g\..............L....3..x:.....c....@..}.N......\|;.z;.P'..s..w.!+.r7.s8..b.N.E....s>....p.o...o.s.......E..........N............kO.b5..d..~..l..o..{..%..?.p.\|@.......! s......}.F%{W7..[..y........_.]G.%...6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..e.(=.(1.h.."Db)]..##....fO.....AD..Y.$I..).Y......J../Rb..aDjU.WAVXb..).$qJe...S..........M.!c.. @.dI!....(.n..."@.....L...

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/spacer.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 24
Category:	downloaded
Size (bytes):	1156
Entropy (8bit):	7.097074858581238
Encrypted:	false
SSDEEP:	24:eWy8efA6RkHVYyMssACnghjKALvylSm5qrtde7iRkueFJNXwOLqp6:eZDIfVMHgIALv6Qrtde7iRklFJvLm6
MD5:	346156AB742CDFD75709DB918BC4B830
SHA1:	0AF266F441A0B1FAAE8A1B7189D4AF2BF76876AF
SHA-256:	53271E47BA412F2652BD71C035BF76A51C5779C5C448B8976D38579831D19158
SHA-512:	C21BA35D4D98980CBF313FBE0447BE522C949BB692D96357C74D597FF999D6BAF0E2A27E95C14F077E2B15C9CCE1ECE9897FB2EB280D96F9692408ADD2AF052B
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/back_b.gif
Preview:	GIF89ad....c....p...................................y.............................................................................................................................o.............................................................................................................................f............................................................................................!.....c.,....d.......ccb.....................H........<..............U.................b.a..........[...[..( "2#....a...a..[a....[.....[.aa[.a..b....m.U..11[.@K..^.d..&.`.........qX.t..(@...F.&Sn..N_.{.v.........!(..".t.)>p......i\|X.`....((...=z.. @`...b....wm.>}.............a.....i+Fc..b...p`.....K....uH.Y...X.B)....,M....;...Q[..=~....-....3[ cu....T.M1(.x.G....bD.4.S..."...K\._H.4..@.J......>.#....(....c..sC..*#....1d...f..^c..UNR..G."..._".d....MB._..EH...RL...wOo?.....\SNX....#.I...=H..!.m!.!..#...>..=.....S8.".3....#u=pA.....b.P..V..%.d....+..E.YF...p.).t.i.x....P.....+

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	2971
Entropy (8bit):	7.849399781789861
Encrypted:	false
SSDEEP:	48:vn7X99VmfCvYCB3Q35MMkKCgJeMhfgGcOFclRr9PXOE6CBoxW6VVhGh5n10GpEae:vn7X9jNFQ35MBgJb5B+l/OTCBgJVhe5w
MD5:	17FFA64A0E0F02E2B5AB4217AE8EF034
SHA1:	C10FBF2B427539DEB086B3D28251911A39FA5FF9
SHA-256:	5293691A742CACF6FD27A40A27F0A884A76B29FFCD323FA3F10F18D592BAEDC2
SHA-512:	3D699D345C1527B4A4F1700C05187129974B33C6730642A96B5C47BDBA2B33B1CC9F1105DEA20744B1D40995C9FC308AECFE457B467ACE2503DB7D3A176D8482
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7....6/0...........@..I..N......-s..R...N...fD..m..f..u..=.y.h........2.....U..D.W........(......q..g+...........vW....9....1.......Y;......6..%................4.......%G..}............u...[c.0;p.\.............uu......!......wls..PW..[..1..b.H[...Y=-.53A..\|..\|S....sL.....p....f........Z.K.............2.....)..a.D....}..j.=....>U..Y...F4.........\|v.............}.9,H..z..C...........c.....e....x...i.U.%-TS:......N..),G.y.`.,...4..v.....:...;.z...+.i..X..b...Ub..]..7..<....h..\\|.....Af.4[.Oq.........j..x.....\|..........W.........9........fSExT.....(.........b..-c.J.!..E....q..cN9......u../..3.....}.......CAUB<C]Vg....D..,.......%.A.)....1eg.ag.or.\|x..[!?...H.s".........)3a78R8S..g..&P.6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L...5T..H.....X.Mz.R....QY..fO.8.&0....^.r.D.lYH...........I...H..e......F=..".aGA..&...(FU..u...\.(.n....$.\.0..X..\...^.Z5j..

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 36
Category:	dropped
Size (bytes):	1865
Entropy (8bit):	7.255935420311191
Encrypted:	false
SSDEEP:	48:nVnn0d4Uvb0J5FhptQ9INBgpjEhvFPxyfsViUw06kw1:nVnn0d4UklOINBgZEhvFPxyfs/w06kW
MD5:	FE2BFC1D7F4058A89DA283EF2581D8D7
SHA1:	AF6BF0D0BFF32DC2176AAAFCFF8914DA08939750
SHA-256:	D052921C3A2F5C31BF351BAEB86AA632B64AE92105F5958F4E0A6162CF907047
SHA-512:	03B89B33A38D2003ACF4E0DD8606DCFD6934A5DA15E958D4C7007E0BBE084E04AB750FC43A0F98D1CC797E05592DC85806B5A707557EF8A5587B88A19935676B
Malicious:	false
Reputation:	low
Preview:	GIF89a..$..G..............................y ..0........p.....`..P....p......................................................................................................................................@.........f..................................................................................................................................................................................!.....G.,......$.....G...2.1/.F................/1.2...G5&.......&5..+9........9..G <...............< . 3.........E.E.................(....3.....E.l.D....E.. .H.....H...."..\..`......x.1dB.B..y...(..P........R.K. .. 5..$P."J!H...v@...EF6.qC...#..P.@.oD..-....A ..........7..I.n..I!.U.._.4...R$....B...p..E<.!..i...T...a..U`.......E....z5`...9.[.A.......!c......[.cT...P.*.k..E.6-D/..t.....1........p.P.2......t'.9~....B.mk~.v.5..Wt.........\l...[.\|..s.....]..H.E..bDDP....C~E...~....@.\P.{....n.D...DD#j.........7...N.....y.E$.P........`C.TD.[7].P.$.H.Wi...o..].....eD(..E.....l.uA..h ..

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 29
Category:	dropped
Size (bytes):	1809
Entropy (8bit):	7.475563661132604
Encrypted:	false
SSDEEP:	48:5IGQSKdips82jYxeyHurg/H1KJglJcMdOw2m6qQyvBSs4Cn:5fs8iVrOH1KEJcMdYLeWCn
MD5:	923CB89B7429F0731CFA4E38D4FD337C
SHA1:	620FC4CE16AA0E58006A2D9C90A302BFC02CC07E
SHA-256:	621DB6871F6C893CB566F64FA31BCA9F5C26026814C8ADD49932F06200CADF52
SHA-512:	31FD8779477652742DD26530B8B14CE9EF5DB8B7162B3CA990EAFC3093A913DE397C4951E4018B59CB26F814F98930962334E0DA1B422F9D5780FB615BDF1EFB
Malicious:	false
Reputation:	low
Preview:	GIF89a...............@......................M.....Y.....s.....................................................................................................................................................................w.....q.....................................f.......3f........................................................................................................!.......,............^...M,,5[...............5.M....?A.1=227_...............7.=1.A?..@'NH.......HN'@.+:<......<:+.^R.-.....-.R.+........;S......\|.@.KA..XQ.. ..X$.... .V..&...cC.._q.@..I.#Mj.....U.M. .....`..A.A.A..\.D`..BA_U.4...V.6~.T......JH..@...."W..0..IR+...Z..xq..K]A+-x..E.V..z1......4..)(..-..d...,...mU.....x........j.D.-a./.JBD...Oj..,..`-. .....U.>.2.Xr]...x.A.@e.\.X..7...{9.J......t....7...*b.z?9T......Z..]..E'...ya.\|.=....q....G.?.]..w..e....6.{.....,.(.l.....E.......r)..c.}......g.>'H....."w^d6.....Av....O.....Ef.z.......W...T...MpE.E,...P...z.=........

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (321)
Category:	downloaded
Size (bytes):	50808
Entropy (8bit):	5.369881827624742
Encrypted:	false
SSDEEP:	1536:FYrmFCJnr08QreqMLTZH7kzEditPG3ViXiIWgTi6uoaMPV87MPVXfq3Ng:FWJnr08QCqMJbkzEditPtcgTi6uoaMPd
MD5:	6BB88E8096CE1081265DA13578460F9E
SHA1:	C958CF6645A8FC6446490E828E2403C256D4C085
SHA-256:	B3CCCBEC1CB43392A996E42D0929083A6863213E2129B8604A928C410BBB619F
SHA-512:	3EA2CA34AF7AB73572F66A3EF8495B9E98B431ED9E4BEA1010CF0C87C5BF7F2ACA804E417E190311E84189354252625D3A939397284376AEA148A5875031BBAD
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/GeneratedItems/CSScriptLib.js
Preview:	/* -- Adobe GoLive JavaScript Library /./ -- Global Functions /.CSStateArray = new Object;.CSCookieArray = new Object;.CSCookieValArray = new Object;.function CSWriteCookie(action) {..var name = "DFT" + action[1];..var hrs = action[2];..var path = action[3];..var domain = action[4];..var secure = action[5];...var exp = new Date((new Date()).getTime() + hrs 3600000);...var cookieVal = "";..for(var prop in CSCookieArray) {...if(("DFT" + CSCookieArray[prop]) == name) {....if(cookieVal != "") cookieVal += "&";....cookieVal += prop + ":" + escape(CSStateArray[prop]);...}..}..if(hrs != 0)...cookieVal += "; expires=" + exp.toGMTString();..if(path != "")...cookieVal += "; path=" + path;..if(domain != "")...cookieVal += "; domain=" + domain;..if(secure == true)...cookieVal += "; secure";..document.cookie = name + '=' + cookieVal;.}.function CSReadCookie(action) {..var name = "DFT" + action[1];..var cookies = document.cookie;..if(cookies == "") return;..var start = cookies.inde

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 54
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	6.85855592102753
Encrypted:	false
SSDEEP:	6:HcPGZlF1HhSj8iJocVprzMSeIJhs/cHmvFIFkp:HBX1BK8dAprzM1cHmyFO
MD5:	1E80876835343B650761FC613A2EC6BF
SHA1:	E83CE0530A08EE4EBF08134BFADE05D30648A41E
SHA-256:	E1D72A9F94A26F0E63BAB08E4290C0F4F85512A39B9F7E1BA862B1FE07B46603
SHA-512:	7171D2859E54DCB7B881E4C2816569977174B3235C6F5C345B8D96FFBC14FF1A163DE5F64ADDF5CA00293FF6D58C6D9BEEAF75C8470CB919BC54260F68FAEE01
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_02.gif
Preview:	GIF89a..6................!.......,......6....!...............H.......y.L.......&....,..L..A...`........n.......lN...v......n.C.........7Hhgx(.......i&9)Vi....Y.....DZ.t.J....:.....[{F..........<:Llj\|.........-.3]<k....t.$.=.-~A^^.S..;

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 23
Category:	dropped
Size (bytes):	167
Entropy (8bit):	6.375663199413532
Encrypted:	false
SSDEEP:	3:Cap0iDEwZ/leAKeL9xCbI5OjbqjLvDD1DyJMDbd+1ChihtNDodg:gOxCAKQ9xCWOnq/PRb8T7N5
MD5:	43A9AA4B9D5A245A8BCA2103C359F078
SHA1:	DC5EFC7858850FD130FEF5989B069F8B0C5CC8B4
SHA-256:	9F331757436BD79353A70A5A6F8545B9A7BC5A85653B5FF4E77B1CC64284AC97
SHA-512:	3E697A8643DBA193DDD61551D834E6EBF7E912642C962F1FE9FBBDFE16E72BEE79A0D74777FC8889B389A0B8595E661D2F4A918C90021FD161C4CF8C02F0427D
Malicious:	false
Reputation:	low
Preview:	GIF89a................f..!.......,..........x..........q. ....H.&.u_r.....w.........j...8.......lJ......B..W.....yY>.....~.].].....:...G.H($.U..ux....X.).8S..;

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 98 x 61
Category:	downloaded
Size (bytes):	5445
Entropy (8bit):	7.790582821337125
Encrypted:	false
SSDEEP:	96:v10H5vr5+u7U0wVkOZAkyzm+g7zToSxqEoCiQfLvOUZMhpVBjl5x5aLWorO:WH1x7U0wKk+mDroS0mvPZMhXBzTaLw
MD5:	84AA39BBD528BF7CBEBB66164681924E
SHA1:	23EC2A6F4E40961A2AEC6ACC91F2884907896CD2
SHA-256:	033AAF448D2786BED6196F7E14F6A7D2591C3CC7675967C19AC2640AD15B86EF
SHA-512:	29BA25355A5763ADAA8C485E0AD48B0EBB2D153A14900A41E6B5530084FF6798249B8F007FD80F4B4CC626FBF1AE1142517337D1388D4FFEEFA3D4FFCD7AC038
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/9861_01b.gif
Preview:	GIF89ab.=..................y...........7.....w...........a..............X..i......}..Qz...............\.........}..z........E..................e..m..f.....J.....}..Y..{..6........q.....Qs.{..p.......^.....{...........`..............q.....Jm.g..e....]..}..Kq....T}.Mt....u.......d....................s.......t........Eh.\|..h......................d..U.....................................u...s..].....m..v..............................w..y....................W........Ow.j........h..............Sx...^..........x................B..m.....W....Z....l..j..v..Y\|....`..................................i.....Z...........................y........v...........k..m........Z..S...g.....`..`..`..c.................b..k..t......................!.......,....b.=.....!..HP...r.(\.......J.@....d2j..G$...D...I.%K.\)..H?..6.......#J....E...z....&..49..$d...h..D..$h.u.g.....Y.$K.(..d..X.`.R.:..O2GJL)!!,G.O.M.t-.P...[....g.....(K.n..;..(.#..>..#...0..Y.L.r

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 780 x 34
Category:	dropped
Size (bytes):	30372
Entropy (8bit):	7.602184014562706
Encrypted:	false
SSDEEP:	384:IwwNGNMupPr2WrXi7pTldOOnQaHwU4eLOVDPWLAFQAudCUwi9SXYWzg+xSNYRLy3:IwzKmPtG9OOQUVOdQfwiwXYOg+xuOIP
MD5:	D6AA298E51021ACD84A6CF245375BCE5
SHA1:	10CFDE2EA31AE6A79CCD1CCCE86696E4442C8AB9
SHA-256:	974D5AC2585D2ECE82731FBEE8CABB0982298643922DF4717B99506ECD24AB0E
SHA-512:	1E4AB621B86459781DA31C74E33F803C16943B95A5778D68717E78598B0B87B6E495E73F38FDAD779AC0A40E5D398C267AB6E92AFE7ECE201062E39368EE9B11
Malicious:	false
Reputation:	low
Preview:	GIF89a.."..........................k.....s.....c.....[.....{.+...S..e........v...........J..K.................Y.E...............K.................s....)n.................s.....c.....k.I...............[........k..k.....c...........[....m......{..{..s...........[.....c..S.....S.....s....H...c.....[..{....n......k.1......S.....{.....J.{...K.(.........S....4...............s........K.....k..k..s..c..c.....[..t........l...........m.................[..z..S...........s.C{..k..c.......)m........[..b..c..{........R........S.....s..{..k....h...[..{...................R.........{.![..c.w...T.....{.O...\.....L..k..S........s./...............k.l......b..E.t......{........\.....[..O.Y...Q..r.......j..8......Q........E.....E....Pu........E.................................................!..AdobeGoLive......x..U]o.0......GD.U.@J:AKi.Z1..7.97..?".f%.a....n.$.t.V.I.!.....=....`q.... x.<..f..A...?../.yiM./..t.,...D.Z^q... J..I....<..g...0....i........$..!:n\|...Q%.].l..I.{.r.h..f........<.J.@gSt..U.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 58 x 66
Category:	downloaded
Size (bytes):	1947
Entropy (8bit):	7.636474268191322
Encrypted:	false
SSDEEP:	48:nnR+JQ/bmXfsbe7slovmmkWtuMEo8LA0vCJ9/Onu7suXcHX3Y:oybmv4VWtuboICJ9/OHuXqo
MD5:	3C21DD75FA1301FC94304D25DD9923AD
SHA1:	E2C10F39F17A3D97359FA7EAD4816DDC8A53F8A9
SHA-256:	C93AB28D09F2090FA0B7EB5A11120A7625710815A9271879B7D953717A3BDE3A
SHA-512:	D1AA22EC343D619E24E7BF701FD10B2A25FC24924BC818C444437AF14B96F3E87755F3BFB44D4D2751E7B39848C24566A4E06E6B957272D9ECF961FD8D26E7BF
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/srsverify/seal_secure_site_tr.gif
Preview:	GIF89a:.B.....C.o........5k.P}.Yaj..........+Z.3r2Ll.R...)......>..L.++$^....-<P.i[{....E...Jh..!:.........!.......,....:.B.....'.di.h..l.0I..a.x..h@4.`cf#......x...( X; .JV$..T6....<.....9.....2m..... .8....8.....oq%..\.f.........M.........SF.p..\........^...l...\|....L..Y..........................S..;..L........@..........`...\...0.E.p..9...DhG.B..3$4(0@.....P...`..S...6.........AC..e.u....qP.X.p......\!........H@PAM.. 9!U....n.9..+.S..9.PAA..NGzD.A.2...@..A...31`...L.......F.I.... `SE....U`....a.0....B..w$..A+.6D..._.p'...5(...:................ 8.0....c/..B...<L...t...5#..t....x.. ......N.8.A..W.........i. 0A.8$... ......(....Yp... .....R...yP.i.....d.....%.+R..Zs.. @..z.c......\|=.....".\|&.....<.Ae...Y....R3..D.j.!.%,7!.T$.P.W....Vj7@..hy..3x...k..$.f.d.~:..@.#...au..d...9.].......8.g...C.R........ $i.XZ:A\V...........I.)JMJi......x....J..D.S.....k\.h .it..)..`......W~...$q.......Ld..d2ID..\."....i...Po...@"a.....0 o..dw...`.X`]e......h.L.L.........[.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	2965
Entropy (8bit):	7.864563946699288
Encrypted:	false
SSDEEP:	48:yx5f4BuBcn/DSy3C9dpqRAZT2Ayxay7nVevZuNeVI3mSfM/wZgMK+MQjc/U:kQBfSFLpqmUay7V2wIV2GY/KlQj6U
MD5:	90ADCB996C3EBD5958F83E6CB415A00B
SHA1:	0604F249F4D5012D92F8A63A1F329DB5E262D779
SHA-256:	061B326E5C95929E4A1B34D13889F33A940A80F16C50C3AD8E2FC1FE5872729A
SHA-512:	2795C7F4AC45E29138080C563978321636C0FEFC2978A223E0D66C1E7B335B5F3A7772DD6A81D258C12962F8F982C46B0A862A44F03015D1947359C64DA9A9EA
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7....HV.........W....0..y[3...w.....l..b.f..ue.N..2..lbd\|.....>..A.8.iVG................S.....~......]RT..:...........A.G..E..h.6~gN...c(.....%D...r.7...I.;..y,.R..&........T...}......6............J.ptjd.).Q.........faj....$...4.../......[Vd......Q...............9CwAHw...Z..A..T...IJj.S....-.j9.4.q.......:....K5C...!....;!=......S.y....y_.E..E...5L..J...s....3..K.L.{..s.........4..@}sj.C.!..)..J.n..K.....O.?..k(.6.....G.K.........6...O.>.}].....J.....j...E.RRN`.....+W^...F.....njq....d....@Q.....M.u..B......#...2.......r.R...\|........o....9......,....r\|`<.M..B.....[...JPy.f..=)?...@..K...^.8........+.....\.Q...dD.qI..P...F......~$.#.p..G.>.:.......-..>..R.F.........6.....3.!.......,....Z.7........H......*\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L...L6....J.,G...!.t..G.$...G..oQn.4....GH. .._.3.p.K.6I.r8....1.$.....V.k..h..G!J...(R$N.M.LI....$S..<..e..uI......6..IW....

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 400 x 100
Category:	dropped
Size (bytes):	14554
Entropy (8bit):	7.932847663494539
Encrypted:	false
SSDEEP:	384:WMxUGCJ80q5CH1WPaRHARIG81ZpFvfbUM/:jcA5CHoPMHARId1FfbV/
MD5:	D6F013685A2DBBD811096D386717325F
SHA1:	84060FAF225C8B4FA6A65BA00157C2B28878CCA6
SHA-256:	2E093A91D35175BCCE3719CF513CB85989723E9A42DD797CB102E99F17C77332
SHA-512:	B1CBC3CCEAC59D68D7A3E13434049F2950942A8AB8D38B9A49DCACFBF81CA859CDFF8FE9C18CC6EAD84A684B1ADAB70CC43D2913461DB7ABB9E63AAF3A60740C
Malicious:	false
Reputation:	low
Preview:	GIF89a..d..........}.....j.........UU................s...........N........z..................................''....NN....Bh.......n.................nx.....f...................?..'R......7........uuu].................S...........}...........5...........C..............z..........................i..b...........................................@..........p..`...t...................f...3.fff...!..AdobeGoLive......x..U.n.@.5..\|.5,..$..HvH.."."@.Ng....f....W.]\.....j..5>s.>...(.x.{l...m.E...O...._....._....E........H{.@T...../.....q9....p.p....n...s.J...:c9....8W...^....d.:{/.3x..y.T...Sx....g..Xl.j.....@....,. +.t..6.....+t_z..d.W........;.......B.I..N.[...~o..6.,..\..Bh.B.J.irh........P..<..IbJ......C_5..........T...TW.....(.k.....`.?$\Y...g.]ee...T.....m.<..jA...X.@...........yf..Nw...q4.z?.w...6M.V..4.M..f.LI.f...;x..#.k]Bg...w'.OcO...<$Zk...:>.....<.[o.;..Oo.I.209...+t..;..x...V.[';.....[..!.......,......d...................................

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 10
Category:	dropped
Size (bytes):	201
Entropy (8bit):	5.931143810936033
Encrypted:	false
SSDEEP:	3:CizTZpbDXl9zl7/lbpePrar71f6+ZF2JLKk7MhVS9l8R6VdZbR4bYaKII01JMvn:LzTn15liOhfGOkAzSH8R6VbbObacov
MD5:	EEF9E0118F40E9F5C8470E5C4966FEE1
SHA1:	ED3B61B0D79CF6DBF8EF35612FDAAED20A392C2E
SHA-256:	1B7AD9B57C54AF8DC811DE5716EA21751E7D88B3C38EB3CD1B4A828E8E7B9F87
SHA-512:	8EB0D0B326927ABB7D74BA4457E9F25E361DB377FB5E51DDF1E888BCA6C0903A43AD59CD15471F75BC8ACF589B9CFE9B613580EBB27BB74DF58A8CEE052BC9A4
Malicious:	false
Reputation:	low
Preview:	GIF89a.............t.....q.................f.................!.......,..........v...8...`(.$.$."Qe.p,.g.Vs..<\..\oH,.~....l:A.........)...+...(...z.n...\|......~.............\|6...............)..;

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 19
Category:	dropped
Size (bytes):	276
Entropy (8bit):	6.310893766160856
Encrypted:	false
SSDEEP:	6:c2RGEQQpJ1aPXhBBozHrKd6Wu6Pnmw4jYB1qPYasK0Cs2/Ybq:cPO7WxeHcUWJTjqPYasOYbq
MD5:	BD53FA8D02F8C1FA2EF2B99BB1250C78
SHA1:	66908EEB495FA6A9F480C153015A7D5F3F81E07F
SHA-256:	58BFAD73BA206B50CCA6267B8EF68CB77E3B69FD6F64D65A82FB9B751EAABDF6
SHA-512:	903E1BE8C6CB7D28004C608DE2B2307DC5A5C3C450B55053BFA1E0DFED8C03595827683BF9C45792C2C332D294623EA6687CEDEC3A5128D0CC2002D49A890A10
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................!.......,............%.di.h..l.p,.tm.x..\|....px....iRP:.AJ.J.....v.z@.... \..vq....x. h_*..Qbo..=.}m....7....M..0...m....+.f.}...."..........z....u...........}!.;

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	7.852666137593173
Encrypted:	false
SSDEEP:	96:FG1Or29OLdWQv0kMKTR+gvp+IBMazR6tfeZL/eFUzMEmQRXQAT1:FG1Amg/0RK4gvQyfsiWFIMEmUN1
MD5:	C0E1FD92E9278444F71030D9C9CAF7F7
SHA1:	C23597F8F3A50D63958A8A0F9A9C7A8AF38DA60A
SHA-256:	880C08B48AF672FE9524F183D4F6D3CC12BE483E9F5DEDF83D01EF34ADCF193A
SHA-512:	F56B7F52848A717A3ACDDE82B0BD8B7A954F70A98C79FE4116D05F90CE3747027408448ECC57E89F6599D3BDC79070906BF05DB6DF5DE64E3F0DA4DD21785D02
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/t_ssl.gif
Preview:	GIF89ad.d.....................\|Y.......f.[.....w...................\.............u..........`.......\|\......bE..a.............].......l...DDD.?.............y/..<...qqq.uS.....'.^......d...r...j...e.n.?..K.o.....u.....@.b................r.._yyy.......xi....Y.........i.pQ...........k....s...Y...........m.................m.............c...p....?.....i............}/..?..l....o..d.....?.~............i....q.......c...h...h......wX...vY........_...xT.h..O.g.......................333........................p...0.......`......`.y .....@..`.........P....@..pooo..P.....p..0.... YYY...._...........m...........w..........o.n.....v..............................wV<..g.O...................k.......f.fff......!..AdobeGoLive......x..U..0....\|Ed.I[..HIW.R.V.......D.dK.#..~...I..[.Zm.V"R"..x<s...h....Q...v%.(z...oF.W..r6c...v>y..\|GO")..9.....-.$E....=>\|].26`q.4.7.3.n9...I.c...{........6S...Z....d.:{'.=x..y........S....

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	2.7203155936248486
Encrypted:	false
SSDEEP:	24:suscp31zyYLEBfpnHJr9txxXBc5kBRTjTXLdL:rF1z1Or9txxXBc50x
MD5:	79D5390D45E3EA5A0B992A5C13108B84
SHA1:	4360FF8A130F36DD172372528EDE4FCE41662908
SHA-256:	4679644688FB6A35D8C5EF25F2FCBE374366C19B183FABEFC688C6F8A446A736
SHA-512:	3BA8CBB83A888CE1614081BC4B0905AACE80AC2C9F4ED5384EE521C38D44058EF4DA02223718808EDF44163E1C4888FAFA6EC0541BBEAC4AE298BC79B6FE72DA
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@................................................L.............F..........?...........D...@...z...........W...J...U.................A...S...f...@.......d...K...Q...P...q...............v...L...R...J...m...........y...>...I...M...C...R..............S...E...S...H...N..................\...E...D...G.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	3118
Entropy (8bit):	7.871445351514154
Encrypted:	false
SSDEEP:	48:A2ISn7f5/t5CUyaCWu93S68AZaUkjjB81qlmo+27dCvt+Tpe8P4xu3fYp2u6raDJ:AfSn74aGxNIzB8it3QYF/4x2wDMnXgvz
MD5:	36201BFF4D1E6340D08DE9A983010C94
SHA1:	88D0B66BA4035CC8243F6E09952A5D57DC1D56AA
SHA-256:	1BDCE738F1FFFACF1422257EB8AB47EAF3BA96246E81D3084A77CF94BE0697B6
SHA-512:	31642C90A9C8E7DFDF8335D5D0C71C6BED26429A2C4F6F7B84A557A75874E38A5F7816AA2DDD8397D798D09A90982AFB7BA29803475DE8465C1476B243485E85
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/design1.gif
Preview:	GIF89aZ.7....4.9...<.BH......:7.3h........#x.y..... .%Y.]f.jk.l5.........2... j.n#.)$...V.X..........u.x...V.Z.6KE.JM.RV.Y[.y..e.gK.P.......EQ.......W...."i..3....7.p....F.IV.]!.&...R..].i.....!.G.(.............".y3....A&...P.U".(.Dx.k....G.Y...I.N.pyC.F+.m.G......4.....9.A...#r....).DS.~.2...........2..u.@.FM..b.u2.7`.d.c.8.=.Y.....\|....^.c.1.d.h..2i.o8.<...Q..;..dL&.,-.3.0...l.p......e.t'.-...I.s/.5&.,...-.2..\.`.H.0.6.............N.3.7>.......f.j.......p.).-.>..8..9.M.............>...../.... ..z.......k..\..].bg.lb.g..$S.Xa.f.9.%.+V.[........).1!.e...\...K.O).....^.cD.H'o.:jF..............4..H.L.......:..8?..!.42.8..M.....}.._.x.@.....Y.\....J.....N._`.y.c....a...B..r.u,.2c.g.a._.a".%#.(y.{./\.`.........+m.n...2......E.~....6.....3.!.......,....Z.7.....i..H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L.......1`@D....*MzT.Q0rd.!s...+2..-p...6m.a.D..d....H..Q.....V.G...T.."..9p..paz.8.v...2L.i[....(.n.a...6L...\...".S.I.Z....

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 29
Category:	downloaded
Size (bytes):	1809
Entropy (8bit):	7.475563661132604
Encrypted:	false
SSDEEP:	48:5IGQSKdips82jYxeyHurg/H1KJglJcMdOw2m6qQyvBSs4Cn:5fs8iVrOH1KEJcMdYLeWCn
MD5:	923CB89B7429F0731CFA4E38D4FD337C
SHA1:	620FC4CE16AA0E58006A2D9C90A302BFC02CC07E
SHA-256:	621DB6871F6C893CB566F64FA31BCA9F5C26026814C8ADD49932F06200CADF52
SHA-512:	31FD8779477652742DD26530B8B14CE9EF5DB8B7162B3CA990EAFC3093A913DE397C4951E4018B59CB26F814F98930962334E0DA1B422F9D5780FB615BDF1EFB
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_01.gif
Preview:	GIF89a...............@......................M.....Y.....s.....................................................................................................................................................................w.....q.....................................f.......3f........................................................................................................!.......,............^...M,,5[...............5.M....?A.1=227_...............7.=1.A?..@'NH.......HN'@.+:<......<:+.^R.-.....-.R.+........;S......\|.@.KA..XQ.. ..X$.... .V..&...cC.._q.@..I.#Mj.....U.M. .....`..A.A.A..\.D`..BA_U.4...V.6~.T......JH..@...."W..0..IR+...Z..xq..K]A+-x..E.V..z1......4..)(..-..d...,...mU.....x........j.D.-a./.JBD...Oj..,..`-. .....U.>.2.Xr]...x.A.@e.\.X..7...{9.J......t....7...*b.z?9T......Z..]..E'...ya.\|.=....q....G.?.]..w..e....6.{.....,.(.l.....E.......r)..c.}......g.>'H....."w^d6.....Av....O.....Ef.z.......W...T...MpE.E,...P...z.=........

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 19
Category:	dropped
Size (bytes):	325
Entropy (8bit):	6.528233855669066
Encrypted:	false
SSDEEP:	6:c0Bc+4B81SG/W7D2RPaXxJfD7H0W/0CtbXIlWRRqIpgzFlDN82p6erXid1pJntnO:c0BP4BKScWudaXnv0SYlWRR9uFJK2p6I
MD5:	EC0A017795682D2CC024C09117AC4B91
SHA1:	DE529F9B76F7D8D6B09F420DF7FA0D2384623808
SHA-256:	D1B5D5A083AF41386F06BF4FA898D3BA543E08EFCE337227131D230B10A60352
SHA-512:	07ED1A5CC258760AEA31E4EC56F48550C47DE0DE9456CCE6C239DFB32606D3E2DDB0E263524F2B6C61E3243C388CC1CDDE96474DE5E5FC84C4806F50394F4522
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................!.......,........... &ZWi.h..l.p,.%..I.\|...........k...,.tJ.Z..v..z...qL....z.n....{N...x.......j......v..N....7................m........f...................r..................t...........d................!.;

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 123 x 53
Category:	downloaded
Size (bytes):	2304
Entropy (8bit):	7.426292954929641
Encrypted:	false
SSDEEP:	48:W859FRq2QjfbNPV9EDNPmb8GFGrGWdBO07xt/8pldMEywIncEnp:W8nwNPV92N+gGErGWrv7xt/8PdMEy5c+
MD5:	37904F4F8B68C21806E3A1163BFDC181
SHA1:	7BB3F2385515E33E91294D08676BF684A2A93E2E
SHA-256:	249C020624A8526FCF4D26EF663AE105AAA1EBCFCB55BF0D0F599C855887114C
SHA-512:	2F36EADB60E8F91BA5B718961CCF9F795CD751F4D92AA15533B4E72B57CCC9F8C1C98CDC2D19DE7E7CD0F54729CF2BBE243E3B61C4E6BE1B41CFEECB8392E490
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/whatdomain2.gif
Preview:	GIF89a{.5......Ae.......Hr...................9h.....................v.........\|.Tt..........Z{....Ei.]..Kf..........uy..........tm.......>m................Rx.dz.....{....Ih.>g.......f..Pj....<k.Yo..................Uj..........8f....U}....Wy....\|u.Zi....x.....oq.............Mm.......m..n}....ur....r..`..............x..................................................................................................ht................fs...........z................jx.{t.............t.....fm.......w........bn.......}........`k.............ks.In.Lk.......ff.Xm..........}................p........i}....v.....@i.Bl..........l..Sh..~..x..w.o.....e........{..{..v..m..............j..m......................j........yr.Ql.x\|.......Gl.............y.....Zq....m{.........3f.......!.......,....{.5........H......\....#J.H....3j.... C....N..lH.\90..?.b...NJ.89..).gO8hn..:....H}..C..C6z.J...U.P.j.......n...,.8S..A.....q.^.$...AI...NB4H..m..nB;..7}.S.B>......B.>.K.Y...<B..E.w..8o..2=...?.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (2217)
Category:	downloaded
Size (bytes):	46908
Entropy (8bit):	5.023887459858565
Encrypted:	false
SSDEEP:	384:+3XvVa7knwFhqO8DO+BxZUTUXAuPLNyIXAC8DPhYwD2TmLq+zENaYmJeMF1hw/U0:+3Xd7oq+zN5srUX4ZsE5zJl9me
MD5:	450D6EF3248F378A2324CF244C22A234
SHA1:	2C6F80EC85858BF712F9142C4AB5016D406827EC
SHA-256:	90D10572D5274282846215BE8840455672C9B2015FF687EAEAC943B7DA2F8558
SHA-512:	E9BAA2B077FBA7D91CB953D9DF7DF4805860FDAE9BE42B39757F2CE65D7CDA96A899AB27F82F26F157F720097B594FCE2187D8A0C2FB79F3B417B23C76764FA1
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/mydomain/
Preview:	.<html lang="ja">...<head>...<meta http-equiv="content-type" content="text/html;charset=x-sjis">...<meta name="description" content=".h...C..,.....^...T.[.o.[,.z.[...y.[.W.f.U.C...........i...........">...<meta name="keywords" content=".h...C..,.....^...T.[.o.[,.z.X.e.B...O,.z.[...y.[.W.f.U.C..">..<title> .h...C.. .E .....^...T.[.o.[.@.l.b.g.O...[..</title>...<meta http-equiv="Pragma" content="no-cache">...<link rel="stylesheet" href="../font.css">...<LINK REL="SHORTCUT ICON" href="../image/favicon.ico">...<style type="text/css" media="screen"> ..black10px { font-size: 10px }.--></style>...<csscriptdict import>....<script src="../GeneratedItems/CSScriptLib.js"></script>...</csscriptdict>...<csactiondict>....<script> .CSInit[CSInit.length] = new Array(CSILoad,/CMP/'whatdomain',/URL/'../image/whatdomain2.gif',/URL/'../image/whatdomain2b.gif',/URL/'../image/whatdomain2.gif','');.CSAct[/CMP/ 'B77557555'] = new Array(CSOpenWindow,/URL/ '../whatdomain.html','other',7

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 1000
Category:	downloaded
Size (bytes):	3392
Entropy (8bit):	7.879881186482368
Encrypted:	false
SSDEEP:	48:gGxlhd8XIopAJxlpvKOSipLdq/NOq92F4qYHWTl5io+bMdS12jcKvYE:gYlhd8DAHXBSadGOq92Fn/gMg1ErZ
MD5:	64AC66F9052967F80BFFB52B792E5E05
SHA1:	7C7955309AC5B8A6B4097C2C31043075BA42796B
SHA-256:	D780063F800E1C1CC9861B39B8A6D805DFE8A7F4EC18FA6CEC43986831C6EF21
SHA-512:	2C3C69FE3EAFACA47D86DA00198081E1B266E1D161F8004D3489A605EE488684B205BEF39D7D530FEDE12D7D1920F0F797A9398206E40B20D49BC32A78747013
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/bg0409.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................!.......,........@...........hh............)..)..)....>...........7..7.......7...7q..............................#..........'...................&...MH.8.......@.ca..."J......3f....- C.,R$H.'$Q.9...0...c...8e6A.`'.. ..J4(..H..8..)..x.H.....8Y....k..`..K.,X.p.\...jT.Q..>}.i.;}.l..(..n..I.fM.0...B.1.."#o.HY....R...s..?..M.......{G.]ky..6.....'...G.....u.N....%..ysc.v.....[.li.....T.....\|.M.8]..}.B...O..............!....0.{.Vr.y.........w.:.F.e....P.!1..S.$.p.s(N..$.....XAo..v.n.....'.x.l.C.....=k$....K>`.jN.FPhT2...y..D.i....Yd.H..!.H.)VS./.$.P}...]wMe.RM.u.[k...Y..*.Y

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 376 x 108
Category:	downloaded
Size (bytes):	4018
Entropy (8bit):	7.782206048333124
Encrypted:	false
SSDEEP:	96:1R15aTBMDH9yTNYnAUXUrJdKFLiZob4YlOcbz2InDdXfy+5yL:9QTYHwxqAUiJp0tbz2I5X+L
MD5:	101270A9B5E0026EA79A341D6CDC1ED9
SHA1:	A42AC218AEBDFE568AB3ADB1ABE08E643232005F
SHA-256:	55D3D8E669C5CE109A068BFDBBB8B4973AB0AD9267601B8B2CB48AD5ED46B913
SHA-512:	8BB85CA3DF60B4DEBEAE75D6E94B7B06EBC84986666CCF90216F6C25077E832293F7A62A03586A13DB2499284FEC96F30575CCF553BB0C6853DEAFFE9E6A3C2E
Malicious:	false
Reputation:	low
URL:	https://www.myssl.jp/images/myssl.gif
Preview:	GIF89ax.l......@......p......0..........`........0..`.......@..... .y .......p..P..p...........P....f.................................................................................................!.......,....x.l....@.pH,...r.l:..tJ.Z..v..z..xL....4W.x...\|N......3.......v......M..{.........F.............Y.............L........B........B...v.......D..........U...D........H...C....r........:(................P..K......p....}......E6v..@. ....:..V.R..9....@......8pB....P!..BD..(.j.r....h:...i.X.v6.......bc .'..C.J."@C.-...U.`.Re~.(..!......}.@.'.M...$R....4......#..^H......K....B1=P.....:....."O...w....C!.....lH.7..(....`;...."..}.l'........P...g...qP.d8.<...5..@.5.^y{H!.@..S.k......v...TMEY.w...+y......E.#6..'E...V....i.5....6..O...`.P...@9&A.'0J..nT.$".%~b.....$()2.b.+..c.7.....F.G.Jl0d$.P.c.}=1.\h.AX.G.r...ey.p...%(.l...JlYD......a.............wkn........K....T..a..BG.}...E.......<j..m...N..m...D.fN.^....g..d....iA.H....."..4.jv..JD.......fFr..

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	3021
Entropy (8bit):	7.836252489275611
Encrypted:	false
SSDEEP:	48:Q+K/c8EWaOMZQGzg+mCRJsj9FrF2P0AR6zxa6p45WdqJTwtKuGakQmhRrl5TWi+y:4dP+prHvYFBu0ARi4K/p9kFVlV3iA
MD5:	341A32D4624BD581F4D755FC6F316789
SHA1:	C0811915C2D5E4BA7945812FCC701067C91A3E1A
SHA-256:	55D1CAF8F631F7D1B328C8C7EDAD713BD682CDD53154517FCAD09B128AD9530B
SHA-512:	7095E494AC4EB8B7F7FFDD7A769A824F5A7963BB8B973A7AD3E26628CB0B4A1219E8AB159A5BA713707EB72CC0B4A833DDAB1F42DE263D87E2AE7D42E501774F
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/home1.gif
Preview:	GIF89aZ.7........M.........k4.....u..J....u.vc....T....DL....Q.u8........3.h.......l6.(&.z;.U......L..:.......e.r...YY.e.("\|.Y.............]....zF.d.p6..D.~=.Y.]-.....@.F......h.~....%.d.x..z.5I.Y....&.Y....#.....q.....'.......c..l....1....5.[....k....~G....,E....7?.......>...;.b=2..y.......b/....f1..l.{Z.q..8.T0.....?....z.....a..~..A........H.i.\|....bW....\I....y.N&\|.....V).....C....s..K.o.C!k....6.V.. y....K..m.I$u.S......0..u..y.S(..E...Q'.....j.....a..'..J.w.\|<....h2.ka.n.X..I..._..Q.F"p.{..g.'.O@.g\..............L....3..x:.....c....@..}.N......\|;.z;.P'..s..w.!+.r7.s8..b.N.E....s>....p.o...o.s.......E..........N............kO.b5..d..~..l..o..{..%..?.p.\|@.......! s......}.F%{W7..[..y........_.]G.%...6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..e.(=.(1.h.."Db)]..##....fO.....AD..Y.$I..).Y......J../Rb..aDjU.WAVXb..).$qJe...S..........M.!c.. @.dI!....(.n..."@.....L...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 98 x 61
Category:	dropped
Size (bytes):	5445
Entropy (8bit):	7.790582821337125
Encrypted:	false
SSDEEP:	96:v10H5vr5+u7U0wVkOZAkyzm+g7zToSxqEoCiQfLvOUZMhpVBjl5x5aLWorO:WH1x7U0wKk+mDroS0mvPZMhXBzTaLw
MD5:	84AA39BBD528BF7CBEBB66164681924E
SHA1:	23EC2A6F4E40961A2AEC6ACC91F2884907896CD2
SHA-256:	033AAF448D2786BED6196F7E14F6A7D2591C3CC7675967C19AC2640AD15B86EF
SHA-512:	29BA25355A5763ADAA8C485E0AD48B0EBB2D153A14900A41E6B5530084FF6798249B8F007FD80F4B4CC626FBF1AE1142517337D1388D4FFEEFA3D4FFCD7AC038
Malicious:	false
Reputation:	low
Preview:	GIF89ab.=..................y...........7.....w...........a..............X..i......}..Qz...............\.........}..z........E..................e..m..f.....J.....}..Y..{..6........q.....Qs.{..p.......^.....{...........`..............q.....Jm.g..e....]..}..Kq....T}.Mt....u.......d....................s.......t........Eh.\|..h......................d..U.....................................u...s..].....m..v..............................w..y....................W........Ow.j........h..............Sx...^..........x................B..m.....W....Z....l..j..v..Y\|....`..................................i.....Z...........................y........v...........k..m........Z..S...g.....`..`..`..c.................b..k..t......................!.......,....b.=.....!..HP...r.(\.......J.@....d2j..G$...D...I.%K.\)..H?..6.......#J....E...z....&..49..$d...h..D..$h.u.g.....Y.$K.(..d..X.`.R.:..O2GJL)!!,G.O.M.t-.P...[....g.....(K.n..;..(.#..>..#...0..Y.L.r

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	2.7203155936248486
Encrypted:	false
SSDEEP:	24:suscp31zyYLEBfpnHJr9txxXBc5kBRTjTXLdL:rF1z1Or9txxXBc50x
MD5:	79D5390D45E3EA5A0B992A5C13108B84
SHA1:	4360FF8A130F36DD172372528EDE4FCE41662908
SHA-256:	4679644688FB6A35D8C5EF25F2FCBE374366C19B183FABEFC688C6F8A446A736
SHA-512:	3BA8CBB83A888CE1614081BC4B0905AACE80AC2C9F4ED5384EE521C38D44058EF4DA02223718808EDF44163E1C4888FAFA6EC0541BBEAC4AE298BC79B6FE72DA
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/favicon.ico
Preview:	...... ..............(... ...@................................................L.............F..........?...........D...@...z...........W...J...U.................A...S...f...@.......d...K...Q...P...q...............v...L...R...J...m...........y...>...I...M...C...R..............S...E...S...H...N..................\...E...D...G.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	2912
Entropy (8bit):	7.877463046278686
Encrypted:	false
SSDEEP:	48:3XEQxhL1uCptBtQ/lClqDJx/wYY7DxnMFZ/HsmmX+dy5kgHj1I:3XEQrDTfQ/wslVWDMZPIcy5kgHjK
MD5:	9EE4A0CF081404BD0064CC0C2F960BCE
SHA1:	4687D005334330DEEB05523C03FECA3C4383382A
SHA-256:	232EC6E90D4EF2113FB2282EB326A038B74A8C3A5F142B56A054DFB51B9293C3
SHA-512:	662DF19A243D08A9BEA5A799F631D6EA0E20E26888535E9D53522A91F7A97BB4721F33209320D75AE0E06A180430B2522C76DE852BDACBAEC8EC7A58C7ACAA45
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/home.gif
Preview:	GIF89aZ.7........m.......M..Q..u..y........z.C0........J....MJ.ya....X..u.....u.T.h]..U......57.8H..f..j.U4..v.J.s.........~=.....3....p....e.].m5....s.z;....f..z..L..........3.>.F.....r....q7.......@.D.e1.EL....H.k....l.y....+D.......dS..[.......K/..K.72....l4.j3.%=.sb.zF..h.J3.\|X.;0..3..6.'0.......]0.u8.UR..a....?.Z....h2..B...w9....u.L...C.s..W..1..z.d..2..n.a."0..n..j..z.c..=..E.m..^....xC....H.[U.......+2.T7......S2..p...e5./0.p6..q..}..:..b.^Y..h.b.}<.q..i........0.[3..1.R0..u.k4..8..e.Y/..B..............................r..c.\|;..#.x:.s8..2..9...z;.C....b..W.... =..j.}X....m<.B........W..Q..Y.V.C?....d?.g8.JP.QM.WB.....p.....R........7<.lD..@....1E..D.i4..>.)0......x...e4....p.....L."1.......6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..e.1..=.pD.#...(]...(5.:<I....=M.p.n.7P.<\|......(XX.6............<......C..`.....;Mb.X\.....P..O.BM.Q.!7..#...{.S.).>..gG1+V.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 98 x 29
Category:	downloaded
Size (bytes):	1614
Entropy (8bit):	7.546462787222834
Encrypted:	false
SSDEEP:	48:kQIxjMaMMVmVneBTPnYtp9Apg2iZPJIaNOpM2/a3MUc6:NIxjMaMUZTPnYtTegjZhIaNOpp/ux
MD5:	0E44D4E17867090322A90FE4D5CE255E
SHA1:	6123137EA393666EC73CE768A4F5ED0D5034059F
SHA-256:	1034FF9B0D731F5311F60C1DF8C9D51B57EF4868C3A0992AC5A8B6EC35E1E4DF
SHA-512:	DDAEA7629D3D9FAAE7E9D15803B4DD514C27D5FB8C2B49FEE9322B870BE569C639A573C3FB0C9390F6E1087B96D248B5AA1CE84D405AB11A9D15E313A7972D0E
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/myssl_link.gif
Preview:	GIF89ab.................@..............p.........0..P...........`.....0.y ..`.... ..@..`....p.....P..p..............f............................................................................!..AdobeGoLive......x..U.n.@.........8.BE%;.$.d..5@.N...yX3.......5.].jHU5B...k\|..}.s..A.8.}...`K..@..g>...Ux..Kk.6\|;`..W...t'...#.m.Q..Ob........,a..fR..:.1a....%...:D./..#..e\y`..L.....[G+.0c../....9P..JN...VY..7..b....p....\|.F..Y. -E.....vCt^...(}.=l7;.a[G...JYRu.=R.\.<.H.n-.YV..t{}..!i(....>...Wu.h.G....q..(5...3\.$...m...0te-K.^K..?.Xq.R...r.Y..[.%a..YXzX.lw..-..\..-M..^..w....n..d..........o..X)....<..W.=. }o-..J.G..C).I..0.q.._....4.$X..=..!_..Z....^.D..?.>~yz..j......N3`..v..wn=....=e`t....wh.?..8.\..V.;...G....92Z..!.......,....b......@.pH,...r.l:..tz....v..Q.`..D...h.!.f.....M....)S1...psu.Nwd%.'.%d.%.(%.%.j..Lw.%....%...(!.......Gw.........E..`. D..C.......C....%...........g....B..g.B...(..&.C..D.&.B...B....B.%P..P.B.a..<(p"..2.......'rD..c.....

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	3087
Entropy (8bit):	7.877143219847063
Encrypted:	false
SSDEEP:	96:mhFSvpgemjLiSYQX2Af68JC0XLEkkj2Fbcx6V4Z:/VmjNX2gjFXLEkO2tcgV4Z
MD5:	6D4FDBA803FC55505241C1EFC45E35E3
SHA1:	D978FFA114D35A5671818AB50E583CF3F6AA9473
SHA-256:	870B73D70CEBE80F767793C824B8A5F827BB6CDC9C994F05ED5A30E2A5D573F1
SHA-512:	6CF584576DCDB0CFA46D9593E899AD83063A72BF723C78D96C8A90209F9092A101965724CD0F230773973D2C7F3E8EA2E73A81C8A16A4AEEE4CF759F427F6869
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/design.gif
Preview:	GIF89aZ.7......(Y....z6......D.IC.F..Fxv..+.1.....K.PT.g%.8h.!.&C.Gw.z.sC......W.ZF.J....ci..._.c......U.Y>.D.G.V.Y.XvV.Z.5.x.{Y.^`.cP.T5.9=.T.."Z.f?.DM.Ra.d...)fk`.d&.,....C....a.d...a.f...K.N...............,.>...\.`.. ..._.a.."..!... .%.jU......4.I.Qa.eP.U4.9I.N...y.{Z.^.......F.Y.^..$ .%..E.......'.-..#...#.(...R.V...Bwl.....k.n..7mu.=....].a...Z.].N.........:.^.a;tk.Yk9.?.eV....]j.....&.7V.ZL.Q`.c..0..3.J...Z.].......(..%.+~.>.B.C....P.U\.`..n.r2.84.9 .$L.q^.c.:.I.No.s...S.W.=..=....8..T.$.)..&.,[._#.)6.;f.j].b.\|S......lKi.m.../.5\.`^.a............ W.\.9.S.X\.`......].b.......7....C.FW.Z)./).."Q....0.66.;...-.18.=N.h..."Y......:.....s..O.S.J....${\.....:....j.m......Ar{...J~....\~O.\M.P....-P.S...P.TX.[2`.T.X .&".'(.,.6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..%.Sq(=..!....=X..S.u.".x&".).7{...G....F.A.....1..X.6F....!..E'."Jau..$.J..X....."..(....`y.@y...R..!w...D.E.wc..k.......,.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	5.601301127969461
Encrypted:	false
SSDEEP:	24:hMNmlB0sFDW8BqdQ+xytOLxzyNIUGkFWvkmyylcz+/6HcUOr2pjDOkXkoHe:Im3vFXgXktEZczFWvCE6UrMDOckoHe
MD5:	4424FC124308C18B6A817A4667FE7BB6
SHA1:	66AF616C555F1B85C758B96AAE3AA6DFEDE6841F
SHA-256:	2FA893D61246020E1E0E51B9913F5DB3D0958CE01152A5D5578AD8B15CA85395
SHA-512:	553F483CEAA8E990078F5F5C36DD8798BA9F0D951488807CC90BB431934A27AE92B3A79E91E942B4BAC1803FCBAD05498520D83B3C279B3182444DC9B00AA283
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/report/report.cgi?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="http://www.w3.org/1999/xhtml">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<title>500 ERROR - Internal Server Error</title>.<link href="https://www.netgroove.ne.jp/error/style.css" rel="stylesheet" type="text/css" />.</head>..<body>.<div id="siteblock" >.<div align="center">. <table width="480" border="0" cellspacing="0" cellpadding="5">. <tr>. <td><img src="https://www.netgroove.ne.jp/error/images/500.gif" width="480" height="100" /></td>. </tr>. <tr>. <td align="left"><br />. <span class="fred">https://www.netgroove.ne.jp/report/report.cgi</span><br />. .............<br />. CGI.SSI........htaccess............WEB...........................<br />. <br />. URL....

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 129 x 20
Category:	dropped
Size (bytes):	2703
Entropy (8bit):	7.815557010116774
Encrypted:	false
SSDEEP:	48:d8XOrRVNHlOWE1lnCA7PSGwgFSpiBUb9QYC/WQqlpRQNgg2q0EW2K:eOFVNFe1ZCAdBiSYC/WVzRQCgXVU
MD5:	26B92C56970F4E70D5D8C0EAD0ECC1EA
SHA1:	58EA57D50F4970CA29F8FE924C7EAB9BAF8BAB0D
SHA-256:	150E4015EF87E8AD00AE4795A793BFE31198349244ED548A98F79A91BE1A5937
SHA-512:	E3547774EBC56117CDC79619A2965A54D0566FF298F905A7234C08070E02B91060CAE0E8E9C96D3B8534B920847E7FCDA1DAB7C177E50F861098F9B4D39CAA58
Malicious:	false
Reputation:	low
Preview:	GIF89a..............%.v....U..E.....e('Z.t............<-c.Dk...........g,.....h....YZ~c.........1......('...........................SX.~.............C...\|....#.j..<@..0...........9.PPP.g.MrMq.................21g.....s..........G.........{.....F5G.0..........{......kkmKNt..................r.....OUy......8.cd....{\|...............4....eF"...........7....E5[.........6J0&......................n..7#1V.0...OMQ.............,4=\......i.............,.1..R..8.B.g\.........EUl.........ADqj.3.{........'.........w......j................Uh}..............................!Rt....y..x.............x........rf.....@.JT.....Xk..........@............z$lm..y...,.f.}............/.......:.= ................4N....D..5~.#.~........W.................!..AdobeGoLive......x.mQ.N.0..WNH.@e.C.S..1..0.....Z....S.n....p..6.."..y..SJ.....X(...a..;.}...b.....m...2..Nn)...2,o+d...y.&4.<9M.s.)$.uXPh.kx^..!...'......{..:..lny...5.$j5x.gK^0...4(..[....Q.pS...O.#.6........

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 19
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	6.310893766160856
Encrypted:	false
SSDEEP:	6:c2RGEQQpJ1aPXhBBozHrKd6Wu6Pnmw4jYB1qPYasK0Cs2/Ybq:cPO7WxeHcUWJTjqPYasOYbq
MD5:	BD53FA8D02F8C1FA2EF2B99BB1250C78
SHA1:	66908EEB495FA6A9F480C153015A7D5F3F81E07F
SHA-256:	58BFAD73BA206B50CCA6267B8EF68CB77E3B69FD6F64D65A82FB9B751EAABDF6
SHA-512:	903E1BE8C6CB7D28004C608DE2B2307DC5A5C3C450B55053BFA1E0DFED8C03595827683BF9C45792C2C332D294623EA6687CEDEC3A5128D0CC2002D49A890A10
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/companyindex.data_/images/companyindex_03.gif
Preview:	GIF89a.......................................................................................................!.......,............%.di.h..l.p,.tm.x..\|....px....iRP:.AJ.J.....v.z@.... \..vq....x. h_*..Qbo..=.}m....7....M..0...m....+.f.}...."..........z....u...........}!.;

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 98 x 45
Category:	downloaded
Size (bytes):	4278
Entropy (8bit):	7.847645348984339
Encrypted:	false
SSDEEP:	96:yIPp8ao7answyzURWZHRUPJmNHeD6UFd/eRzcbeX:yWdounyzUkJmPcN+ec/Acbw
MD5:	53B24D77202702DA9865AFABEF5324C4
SHA1:	0FE02638718F23EAC4D18F61E1AC59A6261BB4B8
SHA-256:	29AB3B24A486F38A34F4D256AFF5F28DD23107B4D8EF958AAFE205C4D13B7E2E
SHA-512:	20C40DE0FE6AC6F4BBE2F2777669B390788D9C28658C158FAA7CFB99751EB16A821F97A29F55E013151A4BF8DFF6160C109D0817E13A4F86EF103B1905CC8CEE
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/webmail/webmaillink.gif
Preview:	GIF89ab.-....,........gv............de.........z........X.....w.............n..u..............Qc.KT....z.............vI..k..CG.........TZ..........~.....^....h..............(y...w..s.....}...............[..F..b.........g.......q~.f.......}........................k..q..r..........................1..{..R..............X]....a.....[o.){.......V..u..>B.ux.......VW................<=....:..............................^`.dn.{...../.....i.....t...........bz.-..l.......e..4..z................r.....o..w.....2.....p...LO.{..OW.e...+....V..}..................DN.g......0.......f..........s.............Y.........o........n............................................................._..w...........w..~........h........33..f3...!..AdobeGoLive......x..U]..@............M..m..C.#..:..t.\|...V6._....@.v...l"I.p...8.B. X..5rA.....h..../.j.^....._....y....$...H{) JS.Y.....sx..^$l..\XZ.9&..zy.d.xX...%w`D...+...\H.{...h..f............D.)<.....b.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Non-ISO extended-ASCII text
Category:	downloaded
Size (bytes):	4210
Entropy (8bit):	5.547005157822293
Encrypted:	false
SSDEEP:	96:crHsiWlN6XcvhFgvZxvyceSWSWSYWsSWSWSf5SWSWSJaESWSeSWSWS8SiSTdSToh:crgR3szzYWlzzgzzJadzbzz1fg6kcMzM
MD5:	C466EBDF6F748E0480B8B41F6A8F241F
SHA1:	80300BD6DCBBDEC07BC810984668ACB129CC94F8
SHA-256:	3BD822F329DE5DBA76AA7BF0131804FBA08FF1D01585162A60BCF3E6E17DA2F0
SHA-512:	1152F422FAFA9153E2B80227B48DA8293CC4A83849AEB152EDD5FE8AFAB4B12298448BE991679AAB0AB5805DADF5C6A8751EB5CE66B6E8F26F7381359895A123
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/design/index.html
Preview:	<html lang="ja">..<head>.<meta http-equiv="content-type" content="text/html;charset=x-sjis">.<meta name="generator" content="Adobe GoLive 5">.<meta name="robots" content="index,follow">.<meta name="keywords" content=".h...C.., domain, .....^...T.[.o.[, .z.X.e.B...O, .o.[.`.....T.[.o.[, .z.[...y.[.W.f.U.C.., .z.[...y.[.W, .E.F.b.u.f.U.C..">.<meta name="description" content=".z.[...y.[.W.f.U.C...B.......R...T...e.B...O.....{...B">.<link rel="stylesheet" href="../designfont.css">.<title>.l.b.g.O...[.. .f.U.C..</title>.</head>..<body leftmargin="0" marginwidth="0" topmargin="0" marginheight="0" bgcolor="#ffffff">.<div align="center">.<SCRIPT Language="JavaScript">. .document.write("<img src='http://www.netgroove.ne.jp/report/report.cgi?");.document.write(document.referrer+"' width=1 height=1>");.// -->.</SCRIPT>.<table border="0" cellpadding="0" cellspacing="2" width="780" bgcolor="white">.<tr>.<td bgcolor="blue">.<div align="center">.<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 440 x 207
Category:	downloaded
Size (bytes):	31818
Entropy (8bit):	7.9104174409622
Encrypted:	false
SSDEEP:	384:HItINXUFSySupD3KpB3z1ytEATBJbcgYX9SUomJfeOtcz7WbavriFhPYHj0IrIYM:HvNXSSbut6BpctnWtScK7Wbavuy05q7A
MD5:	6011003E6ADF3159905A3EFBD9361A6C
SHA1:	3F6ABDA51FF97FB43F7E950F162B45DC48D5EB82
SHA-256:	9924CE8ADD1DBF5771A57B72F187D7561454F7DEF7E428CB50BDDE06F569FE50
SHA-512:	51CD14AAFB2F8294924F88159F5DFC7CA7121C0F974AC66B5123BA9FFCF0D8B6EB4EA4AD5826D0CC2FF512A67EDC41FE1F0496F0EE417E23A518B9B6F42728F5
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/domain_top_basic.gif
Preview:	GIF89a...................}~~.....Bh................t........333...........................................................???.........hgg......(S................................................................................................................hh................................SSS.........z..r{.............................................................................{.................... .....................................................p.............................z............................................................................................................................o...@.`...gg.....p...............................qqq...................p........................3.......!..AdobeGoLive......x..U..0....<Ed....$+h)....r.:...?..l..W..o.c..L.M...j+..9D.....8A...... .~..m.<...~.*...5..>....I..-..$...Hkk@...i.....<......0..f.i..{..].Y.....7...........M%n..R.u4..3..Jy.N.A^..?..):..

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	downloaded
Size (bytes):	2965
Entropy (8bit):	7.864563946699288
Encrypted:	false
SSDEEP:	48:yx5f4BuBcn/DSy3C9dpqRAZT2Ayxay7nVevZuNeVI3mSfM/wZgMK+MQjc/U:kQBfSFLpqmUay7V2wIV2GY/KlQj6U
MD5:	90ADCB996C3EBD5958F83E6CB415A00B
SHA1:	0604F249F4D5012D92F8A63A1F329DB5E262D779
SHA-256:	061B326E5C95929E4A1B34D13889F33A940A80F16C50C3AD8E2FC1FE5872729A
SHA-512:	2795C7F4AC45E29138080C563978321636C0FEFC2978A223E0D66C1E7B335B5F3A7772DD6A81D258C12962F8F982C46B0A862A44F03015D1947359C64DA9A9EA
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/company.gif
Preview:	GIF89aZ.7....HV.........W....0..y[3...w.....l..b.f..ue.N..2..lbd\|.....>..A.8.iVG................S.....~......]RT..:...........A.G..E..h.6~gN...c(.....%D...r.7...I.;..y,.R..&........T...}......6............J.ptjd.).Q.........faj....$...4.../......[Vd......Q...............9CwAHw...Z..A..T...IJj.S....-.j9.4.q.......:....K5C...!....;!=......S.y....y_.E..E...5L..J...s....3..K.L.{..s.........4..@}sj.C.!..)..J.n..K.....O.?..k(.6.....G.K.........6...O.>.}].....J.....j...E.RRN`.....+W^...F.....njq....d....@Q.....M.u..B......#...2.......r.R...\|........o....9......,....r\|`<.M..B.....[...JPy.f..=)?...@..K...^.8........+.....\.Q...dD.qI..P...F......~$.#.p..G.>.:.......-..>..R.F.........6.....3.!.......,....Z.7........H......*\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L...L6....J.,G...!.t..G.$...G..oQn.4....GH. .._.3.p.K.6I.r8....1.$.....V.k..h..G!J...(R$N.M.LI....$S..<..e..uI......6..IW....

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 129 x 20
Category:	downloaded
Size (bytes):	2703
Entropy (8bit):	7.815557010116774
Encrypted:	false
SSDEEP:	48:d8XOrRVNHlOWE1lnCA7PSGwgFSpiBUb9QYC/WQqlpRQNgg2q0EW2K:eOFVNFe1ZCAdBiSYC/WVzRQCgXVU
MD5:	26B92C56970F4E70D5D8C0EAD0ECC1EA
SHA1:	58EA57D50F4970CA29F8FE924C7EAB9BAF8BAB0D
SHA-256:	150E4015EF87E8AD00AE4795A793BFE31198349244ED548A98F79A91BE1A5937
SHA-512:	E3547774EBC56117CDC79619A2965A54D0566FF298F905A7234C08070E02B91060CAE0E8E9C96D3B8534B920847E7FCDA1DAB7C177E50F861098F9B4D39CAA58
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/c_card_s.gif
Preview:	GIF89a..............%.v....U..E.....e('Z.t............<-c.Dk...........g,.....h....YZ~c.........1......('...........................SX.~.............C...\|....#.j..<@..0...........9.PPP.g.MrMq.................21g.....s..........G.........{.....F5G.0..........{......kkmKNt..................r.....OUy......8.cd....{\|...............4....eF"...........7....E5[.........6J0&......................n..7#1V.0...OMQ.............,4=\......i.............,.1..R..8.B.g\.........EUl.........ADqj.3.{........'.........w......j................Uh}..............................!Rt....y..x.............x........rf.....@.JT.....Xk..........@............z$lm..y...,.f.}............/.......:.= ................4N....D..5~.#.~........W.................!..AdobeGoLive......x.mQ.N.0..WNH.@e.C.S..1..0.....Z....S.n....p..6.."..y..SJ.....X(...a..;.}...b.....m...2..Nn)...2,o+d...y.&4.<9M.s.)$.uXPh.kx^..!...'......{..:..lny...5.$j5x.gK^0...4(..[....Q.pS...O.#.6........

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 90 x 55
Category:	dropped
Size (bytes):	2912
Entropy (8bit):	7.877463046278686
Encrypted:	false
SSDEEP:	48:3XEQxhL1uCptBtQ/lClqDJx/wYY7DxnMFZ/HsmmX+dy5kgHj1I:3XEQrDTfQ/wslVWDMZPIcy5kgHjK
MD5:	9EE4A0CF081404BD0064CC0C2F960BCE
SHA1:	4687D005334330DEEB05523C03FECA3C4383382A
SHA-256:	232EC6E90D4EF2113FB2282EB326A038B74A8C3A5F142B56A054DFB51B9293C3
SHA-512:	662DF19A243D08A9BEA5A799F631D6EA0E20E26888535E9D53522A91F7A97BB4721F33209320D75AE0E06A180430B2522C76DE852BDACBAEC8EC7A58C7ACAA45
Malicious:	false
Reputation:	low
Preview:	GIF89aZ.7........m.......M..Q..u..y........z.C0........J....MJ.ya....X..u.....u.T.h]..U......57.8H..f..j.U4..v.J.s.........~=.....3....p....e.].m5....s.z;....f..z..L..........3.>.F.....r....q7.......@.D.e1.EL....H.k....l.y....+D.......dS..[.......K/..K.72....l4.j3.%=.sb.zF..h.J3.\|X.;0..3..6.'0.......]0.u8.UR..a....?.Z....h2..B...w9....u.L...C.s..W..1..z.d..2..n.a."0..n..j..z.c..=..E.m..^....xC....H.[U.......+2.T7......S2..p...e5./0.p6..q..}..:..b.^Y..h.b.}<.q..i........0.[3..1.R0..u.k4..8..e.Y/..B..............................r..c.\|;..#.x:.s8..2..9...z;.C....b..W.... =..j.}X....m<.B........W..Q..Y.V.C?....d?.g8.JP.QM.WB.....p.....R........7<.lD..@....1E..D.i4..>.)0......x...e4....p.....L."1.......6.....3.!.......,....Z.7........H......\..B.."J.H....3j.q . C...q..(1.L....c..s.M.5o.L..e.1..=.pD.#...(]...(5.:<I....=M.p.n.7P.<\|......(XX.6............<......C..`.....;Mb.X\.....P..O.BM.Q.!7..#...{.S.).>..gG1+V.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 23
Category:	downloaded
Size (bytes):	167
Entropy (8bit):	6.375663199413532
Encrypted:	false
SSDEEP:	3:Cap0iDEwZ/leAKeL9xCbI5OjbqjLvDD1DyJMDbd+1ChihtNDodg:gOxCAKQ9xCWOnq/PRb8T7N5
MD5:	43A9AA4B9D5A245A8BCA2103C359F078
SHA1:	DC5EFC7858850FD130FEF5989B069F8B0C5CC8B4
SHA-256:	9F331757436BD79353A70A5A6F8545B9A7BC5A85653B5FF4E77B1CC64284AC97
SHA-512:	3E697A8643DBA193DDD61551D834E6EBF7E912642C962F1FE9FBBDFE16E72BEE79A0D74777FC8889B389A0B8595E661D2F4A918C90021FD161C4CF8C02F0427D
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/whoisbg.data_/images/whoisbg_02.gif
Preview:	GIF89a................f..!.......,..........x..........q. ....H.&.u_r.....w.........j...8.......lJ......B..W.....yY>.....~.].].....:...G.H($.U..ux....X.).8S..;

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	2.7203155936248486
Encrypted:	false
SSDEEP:	24:suscp31zyYLEBfpnHJr9txxXBc5kBRTjTXLdL:rF1z1Or9txxXBc50x
MD5:	79D5390D45E3EA5A0B992A5C13108B84
SHA1:	4360FF8A130F36DD172372528EDE4FCE41662908
SHA-256:	4679644688FB6A35D8C5EF25F2FCBE374366C19B183FABEFC688C6F8A446A736
SHA-512:	3BA8CBB83A888CE1614081BC4B0905AACE80AC2C9F4ED5384EE521C38D44058EF4DA02223718808EDF44163E1C4888FAFA6EC0541BBEAC4AE298BC79B6FE72DA
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@................................................L.............F..........?...........D...@...z...........W...J...U.................A...S...f...@.......d...K...Q...P...q...............v...L...R...J...m...........y...>...I...M...C...R..............S...E...S...H...N..................\...E...D...G.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	99
Entropy (8bit):	4.579041919280895
Encrypted:	false
SSDEEP:	3:LEL2eFDKSruO6EosJEyuO6sdFIKSruMVin:wd54OSJOVnMVin
MD5:	1109177CCC530AB8E4E5B20935F91641
SHA1:	A5BDBAF4A2DB04CF64B6B1CE580925C43C1D9A28
SHA-256:	2E1801A8B2373C6B447F7547A2F791D0436CEA3F704F7E65A11C4CA691F54D2E
SHA-512:	67AFDB3FF0A318F4E9A62D9D15803D7A603FCEE75B86CD7E8656B1FB155B69E7E8B059A2BF5626D5AC7C1F96E486387791BB3FC80BD0386B5643E0BF7F67A626
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/designfont.css
Preview:	..basic { font-size: 12px }..blue { color: #03f; font-size: 12px }..basic10px { font-size: 10px }.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	downloaded
Size (bytes):	8481
Entropy (8bit):	7.8106637828134176
Encrypted:	false
SSDEEP:	192:SFCpsmd1OJJqFU+q62b2RjXmbdFwGKM8BNLHiDtLx:SFrJJG74bGyzBp8b8
MD5:	55E8D0F38C01AE847CBA78D619B246B6
SHA1:	861FB3A772CDD581A9DBC998AD7FA7285D2953AD
SHA-256:	19522D3E68EA46766A0118CAC7B79A19215C4ED00C12198215DEE7E5D4F34611
SHA-512:	EADCE7B3D78493714836CF69DA2AC636039E5CB7C284029AD3D1F327E6368A693B7CE4A117FABFDD6CDCC4BB27CA1F742E3FFAE1A8FDDF8C01EFAFC3AAFDC83E
Malicious:	false
Reputation:	low
URL:	https://www21.a8.net/svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1
Preview:	GIF89ad.d..........g.....Z...........$.......^............1.6.O..TSQ.Q....D,.l..........d.......................6.p.....1.n.lA.y.........{..............t................f...................{...k..7.p...M..3.oy........<....w...?.{......s................Z.7.........................9.u........=.w..................{...1.q....................................s......................................................~.........z....).j(.i8.q....k...".g@......T[......+.k...........feb0..0.m..5.pp.. ...........`............D.....P...r.......v...*6.bg.....333.......~...........~y.8C..........FO....%N...pt..........].....sqn.............n................@??...................P.........8.u..........k..l.......{...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 780 x 50
Category:	dropped
Size (bytes):	28033
Entropy (8bit):	7.7320833661837325
Encrypted:	false
SSDEEP:	768:ZW21Zp4g6xtoItVOlsVbDZD3SsOusNY4EU6:ZWaZp76BVOls3rSsOusNYt
MD5:	8440941FE3ABD3DAF9A1DFCA4B3D178D
SHA1:	116FD2E2F4D9358CB292DB241B34BA03127DA6A4
SHA-256:	6F38D7996CC520F45E49D68C1B5801B3CF46D571DBFCFEABEEB2BA014B4FF55F
SHA-512:	3F686321D497C4C9B474294D75DFAEDCB154FE2CE73593EBA14B9E701C5B698DD8A6ABA7B11CB6E5C912845F10CF962ECDF72867A1973857CAA9A1D14B668FAC
Malicious:	false
Reputation:	low
Preview:	GIF89a..2.....V.-...U................e..B..q.................................{........s..k........g........K..u...M...[.Z...c..S.....Y..K..K......./t.......x..O...........Gz....E..E........5........H..R............{.......................s.$............s..............{........k....4...c........{..s..{.....s........{....V...k.................k.....K..k................o...a.&...c..s.......C...S..k.....S....u...s..K..{........k..a..c..............[..\..J..b...I..F..@....................6........5..B...{....$...s.f.....T.......................C...s.4...\|.%...r...........\|...t..k..l.......................K.....a........a.....a.....k.C......z..k.....{........c..u........S..a....S...........z..............f......r..A...[..l....L........P...R...M..A..d....P..b......<....!.......,......2.....+L;....Cz.EZ...;.n....a..R.......z...aI6..Tp.DJ.....-...E.*........(.E..?%......._.FdP....C11d`Q...?.TP(.m.q.%.PQ.K...X`.0...A.>H..eH.F.`)...9.D...^.%h"Tq.a....HmT...._.d.P....>P......

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.1961893998690174
Encrypted:	false
SSDEEP:	3:CUXPQEsJQEn:1QEsJQEn
MD5:	AF835385F9910DFD4F1723C12B0716F4
SHA1:	D7A07677BF758571DD49B6DE3F7DE5458B534D49
SHA-256:	B1EFBAEB8C5CE34E2C6A6492D7AAD07DAEADFE3E2B4F2360A12BBD756EC23067
SHA-512:	140A3ED7DCB1E012E6F5C03BAA42C699660C38F427B607A4F9E04D587B91DF6E4657A37D7FE2A6A91FD5C1D8651820A0401400DA95E80D327D720D5390926555
Malicious:	false
Reputation:	low
URL:	https://www12.a8.net/0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1
Preview:	GIF89a.............!.......,........@..L..;

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 1000
Category:	dropped
Size (bytes):	3392
Entropy (8bit):	7.879881186482368
Encrypted:	false
SSDEEP:	48:gGxlhd8XIopAJxlpvKOSipLdq/NOq92F4qYHWTl5io+bMdS12jcKvYE:gYlhd8DAHXBSadGOq92Fn/gMg1ErZ
MD5:	64AC66F9052967F80BFFB52B792E5E05
SHA1:	7C7955309AC5B8A6B4097C2C31043075BA42796B
SHA-256:	D780063F800E1C1CC9861B39B8A6D805DFE8A7F4EC18FA6CEC43986831C6EF21
SHA-512:	2C3C69FE3EAFACA47D86DA00198081E1B266E1D161F8004D3489A605EE488684B205BEF39D7D530FEDE12D7D1920F0F797A9398206E40B20D49BC32A78747013
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................!.......,........@...........hh............)..)..)....>...........7..7.......7...7q..............................#..........'...................&...MH.8.......@.ca..."J......3f....- C.,R$H.'$Q.9...0...c...8e6A.`'.. ..J4(..H..8..)..x.H.....8Y....k..`..K.,X.p.\...jT.Q..>}.i.;}.l..(..n..I.fM.0...B.1.."#o.HY....R...s..?..M.......{G.]ky..6.....'...G.....u.N....%..ysc.v.....[.li.....T.....\|.M.8]..}.B...O..............!....0.{.Vr.y.........w.:.F.e....P.!1..S.$.p.s(N..$.....XAo..v.n.....'.x.l.C.....=k$....K>`.jN.FPhT2...y..D.i....Yd.H..!.H.)VS./.$.P}...]wMe.RM.u.[k...Y..*.Y

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 376 x 108
Category:	dropped
Size (bytes):	4018
Entropy (8bit):	7.782206048333124
Encrypted:	false
SSDEEP:	96:1R15aTBMDH9yTNYnAUXUrJdKFLiZob4YlOcbz2InDdXfy+5yL:9QTYHwxqAUiJp0tbz2I5X+L
MD5:	101270A9B5E0026EA79A341D6CDC1ED9
SHA1:	A42AC218AEBDFE568AB3ADB1ABE08E643232005F
SHA-256:	55D3D8E669C5CE109A068BFDBBB8B4973AB0AD9267601B8B2CB48AD5ED46B913
SHA-512:	8BB85CA3DF60B4DEBEAE75D6E94B7B06EBC84986666CCF90216F6C25077E832293F7A62A03586A13DB2499284FEC96F30575CCF553BB0C6853DEAFFE9E6A3C2E
Malicious:	false
Reputation:	low
Preview:	GIF89ax.l......@......p......0..........`........0..`.......@..... .y .......p..P..p...........P....f.................................................................................................!.......,....x.l....@.pH,...r.l:..tJ.Z..v..z..xL....4W.x...\|N......3.......v......M..{.........F.............Y.............L........B........B...v.......D..........U...D........H...C....r........:(................P..K......p....}......E6v..@. ....:..V.R..9....@......8pB....P!..BD..(.j.r....h:...i.X.v6.......bc .'..C.J."@C.-...U.`.Re~.(..!......}.@.'.M...$R....4......#..^H......K....B1=P.....:....."O...w....C!.....lH.7..(....`;...."..}.l'........P...g...qP.d8.<...5..@.5.^y{H!.@..S.k......v...TMEY.w...+y......E.#6..'E...V....i.5....6..O...`.P...@9&A.'0J..nT.$".%~b.....$()2.b.+..c.7.....F.G.Jl0d$.P.c.}=1.\h.AX.G.r...ey.p...%(.l...JlYD......a.............wkn........K....T..a..BG.}...E.......<j..m...N..m...D.fN.^....g..d....iA.H....."..4.jv..JD.......fFr..

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	dropped
Size (bytes):	8481
Entropy (8bit):	7.8106637828134176
Encrypted:	false
SSDEEP:	192:SFCpsmd1OJJqFU+q62b2RjXmbdFwGKM8BNLHiDtLx:SFrJJG74bGyzBp8b8
MD5:	55E8D0F38C01AE847CBA78D619B246B6
SHA1:	861FB3A772CDD581A9DBC998AD7FA7285D2953AD
SHA-256:	19522D3E68EA46766A0118CAC7B79A19215C4ED00C12198215DEE7E5D4F34611
SHA-512:	EADCE7B3D78493714836CF69DA2AC636039E5CB7C284029AD3D1F327E6368A693B7CE4A117FABFDD6CDCC4BB27CA1F742E3FFAE1A8FDDF8C01EFAFC3AAFDC83E
Malicious:	false
Reputation:	low
Preview:	GIF89ad.d..........g.....Z...........$.......^............1.6.O..TSQ.Q....D,.l..........d.......................6.p.....1.n.lA.y.........{..............t................f...................{...k..7.p...M..3.oy........<....w...?.{......s................Z.7.........................9.u........=.w..................{...1.q....................................s......................................................~.........z....).j(.i8.q....k...".g@......T[......+.k...........feb0..0.m..5.pp.. ...........`............D.....P...r.......v...*6.bg.....333.......~...........~y.8C..........FO....%N...pt..........].....sqn.............n................@??...................P.........8.u..........k..l.......{...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 19
Category:	downloaded
Size (bytes):	325
Entropy (8bit):	6.528233855669066
Encrypted:	false
SSDEEP:	6:c0Bc+4B81SG/W7D2RPaXxJfD7H0W/0CtbXIlWRRqIpgzFlDN82p6erXid1pJntnO:c0BP4BKScWudaXnv0SYlWRR9uFJK2p6I
MD5:	EC0A017795682D2CC024C09117AC4B91
SHA1:	DE529F9B76F7D8D6B09F420DF7FA0D2384623808
SHA-256:	D1B5D5A083AF41386F06BF4FA898D3BA543E08EFCE337227131D230B10A60352
SHA-512:	07ED1A5CC258760AEA31E4EC56F48550C47DE0DE9456CCE6C239DFB32606D3E2DDB0E263524F2B6C61E3243C388CC1CDDE96474DE5E5FC84C4806F50394F4522
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_03.gif
Preview:	GIF89a.......................................................................................................!.......,........... &ZWi.h..l.p,.%..I.\|...........k...,.tJ.Z..v..z...qL....z.n....{N...x.......j......v..N....7................m........f...................r..................t...........d................!.;

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 780 x 34
Category:	downloaded
Size (bytes):	30372
Entropy (8bit):	7.602184014562706
Encrypted:	false
SSDEEP:	384:IwwNGNMupPr2WrXi7pTldOOnQaHwU4eLOVDPWLAFQAudCUwi9SXYWzg+xSNYRLy3:IwzKmPtG9OOQUVOdQfwiwXYOg+xuOIP
MD5:	D6AA298E51021ACD84A6CF245375BCE5
SHA1:	10CFDE2EA31AE6A79CCD1CCCE86696E4442C8AB9
SHA-256:	974D5AC2585D2ECE82731FBEE8CABB0982298643922DF4717B99506ECD24AB0E
SHA-512:	1E4AB621B86459781DA31C74E33F803C16943B95A5778D68717E78598B0B87B6E495E73F38FDAD779AC0A40E5D398C267AB6E92AFE7ECE201062E39368EE9B11
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/topbar_basic.gif
Preview:	GIF89a.."..........................k.....s.....c.....[.....{.+...S..e........v...........J..K.................Y.E...............K.................s....)n.................s.....c.....k.I...............[........k..k.....c...........[....m......{..{..s...........[.....c..S.....S.....s....H...c.....[..{....n......k.1......S.....{.....J.{...K.(.........S....4...............s........K.....k..k..s..c..c.....[..t........l...........m.................[..z..S...........s.C{..k..c.......)m........[..b..c..{........R........S.....s..{..k....h...[..{...................R.........{.![..c.w...T.....{.O...\.....L..k..S........s./...............k.l......b..E.t......{........\.....[..O.Y...Q..r.......j..8......Q........E.....E....Pu........E.................................................!..AdobeGoLive......x..U]o.0......GD.U.@J:AKi.Z1..7.97..?".f%.a....n.$.t.V.I.!.....=....`q.... x.<..f..A...?../.yiM./..t.,...D.Z^q... J..I....<..g...0....i........$..!:n\|...Q%.].l..I.{.r.h..f........<.J.@gSt..U.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	685
Entropy (8bit):	5.143375830665364
Encrypted:	false
SSDEEP:	12:hnMQbwzrY5fvH5g6DHGTjL+YQrjZ+Jv91kaqLj2rVtPXSfW8XJgxGL:hMVsFHisGTjLnEjZ+Z9TqLj2BJXSfW8r
MD5:	76C798E370F6BBA38CF3DDCD8185F68D
SHA1:	1363D756D5A45B516876D29FDF4BF96ED68F59E6
SHA-256:	1945A77BD60F8891D21FF3945ACB667C74DFDF819C7641FDEE93F3E679168CD6
SHA-512:	203BA693AA735E5A0CC2D828F40065A05C58F57CA110367718C1EF53A1C2D9A0E4C1BBA8CABCADF415EC20DD96E9AE1184403B65FE5E353174C394DDFDCD5913
Malicious:	false
Reputation:	low
URL:	https://www.myssl.jp/
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">..<html>...<head>...<meta http-equiv="content-type" content="text/html;charset=euc-jp">...<meta name="generator" content="Adobe GoLive">...<title>mySSL</title>..</head>...<body bgcolor="#ffffff" leftmargin="0" marginheight="0" marginwidth="0" topmargin="0">...<div align="center">....<table width="100%" border="0" cellspacing="2" cellpadding="0" height="100%">.....<tr>......<td align="center" valign="middle"><a href="https://www.netgroove.ne.jp/mydomain"><img src="images/myssl.gif" alt="" border="0" livesrc="../myssl.psd" width="376" height="108"></a><br>.......</td>.....</tr>....</table>...</div>..</body>..</html>.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 150 x 36
Category:	downloaded
Size (bytes):	1865
Entropy (8bit):	7.255935420311191
Encrypted:	false
SSDEEP:	48:nVnn0d4Uvb0J5FhptQ9INBgpjEhvFPxyfsViUw06kw1:nVnn0d4UklOINBgZEhvFPxyfs/w06kW
MD5:	FE2BFC1D7F4058A89DA283EF2581D8D7
SHA1:	AF6BF0D0BFF32DC2176AAAFCFF8914DA08939750
SHA-256:	D052921C3A2F5C31BF351BAEB86AA632B64AE92105F5958F4E0A6162CF907047
SHA-512:	03B89B33A38D2003ACF4E0DD8606DCFD6934A5DA15E958D4C7007E0BBE084E04AB750FC43A0F98D1CC797E05592DC85806B5A707557EF8A5587B88A19935676B
Malicious:	false
Reputation:	low
URL:	https://www.netgroove.ne.jp/image/image/hostingindex.data_/images/hostingindex_01.gif
Preview:	GIF89a..$..G..............................y ..0........p.....`..P....p......................................................................................................................................@.........f..................................................................................................................................................................................!.....G.,......$.....G...2.1/.F................/1.2...G5&.......&5..+9........9..G <...............< . 3.........E.E.................(....3.....E.l.D....E.. .H.....H...."..\..`......x.1dB.B..y...(..P........R.K. .. 5..$P."J!H...v@...EF6.qC...#..P.@.oD..-....A ..........7..I.n..I!.U.._.4...R$....B...p..E<.!..i...T...a..U`.......E....z5`...9.[.A.......!c......[.cT...P.*.k..E.6-D/..t.....1........p.P.2......t'.9~....B.mk~.v.5..Wt.........\l...[.\|..s.....]..H.E..bDDP....C~E...~....@.\P.{....n.D...DD#j.........7...N.....y.E$.P........`C.TD.[7].P.$.H.Wi...o..].....eD(..E.....l.uA..h ..

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 16:43:25.442400932 CEST	49705	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:25.443017006 CEST	49706	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:25.447377920 CEST	80	49705	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:25.447470903 CEST	49705	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:25.447707891 CEST	49705	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:25.447828054 CEST	80	49706	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:25.447884083 CEST	49706	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:25.452534914 CEST	80	49705	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:25.906343937 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 3, 2024 16:43:26.216398954 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 3, 2024 16:43:26.350830078 CEST	80	49705	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:26.350944996 CEST	80	49705	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:26.351322889 CEST	49705	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:26.351402998 CEST	49705	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:26.356348991 CEST	80	49705	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:26.828843117 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 3, 2024 16:43:27.102495909 CEST	49707	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:27.107415915 CEST	80	49707	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:27.108421087 CEST	49707	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:27.108582973 CEST	49707	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:27.113405943 CEST	80	49707	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:27.939754963 CEST	80	49707	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:27.940033913 CEST	80	49707	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:27.940095901 CEST	49707	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:27.940375090 CEST	49707	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:27.945599079 CEST	80	49707	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:28.034873962 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 3, 2024 16:43:28.709105015 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:28.709148884 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:28.709217072 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:28.709472895 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:28.709486961 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:28.959317923 CEST	49689	80	192.168.2.16	192.229.211.108
Jul 3, 2024 16:43:29.685096979 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:29.685142994 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:29.685221910 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:29.685447931 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:29.685463905 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:29.842044115 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:29.842319965 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:29.842346907 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:29.843586922 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:29.843668938 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:29.844616890 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:29.844686031 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:29.844854116 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:29.844861984 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:29.894880056 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:30.263706923 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:30.263844967 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:30.263901949 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:30.264698982 CEST	49711	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:30.264718056 CEST	443	49711	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:30.286154985 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:30.286200047 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:30.286282063 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:30.286483049 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:30.286498070 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:30.354070902 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:30.354346037 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:30.354358912 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:30.355443001 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:30.355516911 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:30.356333017 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:30.356399059 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:30.405874968 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:30.405889034 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:30.438396931 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 3, 2024 16:43:30.453891039 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:31.143270969 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.143544912 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.143574953 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.144184113 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.144530058 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.144627094 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.144720078 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.192501068 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.650811911 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.651022911 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.651108980 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.651134968 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.651182890 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.651207924 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.651257992 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.651853085 CEST	49714	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.651869059 CEST	443	49714	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.658746958 CEST	49715	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.658790112 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:31.658883095 CEST	49715	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.659225941 CEST	49715	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:31.659241915 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:32.102220058 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:32.102269888 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:32.102355957 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:32.104512930 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:32.104525089 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:32.260319948 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:32.260363102 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:32.260454893 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:32.260730028 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:32.260750055 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:32.494818926 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:32.495141029 CEST	49715	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:32.495162010 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:32.495556116 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:32.495987892 CEST	49715	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:32.496064901 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:32.496129036 CEST	49715	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:32.540503979 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:32.752365112 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:32.752454042 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:32.755232096 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:32.755244017 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:32.755503893 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:32.794640064 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:32.836503983 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.006705046 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.006829023 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.006877899 CEST	49715	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.010452986 CEST	49715	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.010478973 CEST	443	49715	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.019821882 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.019892931 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.019943953 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.021363020 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.021384001 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.021394968 CEST	49716	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.021401882 CEST	443	49716	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.060535908 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.060580969 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.060668945 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.060940981 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.060956955 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.157344103 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.157639027 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.157663107 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.164792061 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.164900064 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.165250063 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.165323019 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.165402889 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.165411949 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.215881109 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.680989027 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.681080103 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.681137085 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.681170940 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.681189060 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.681238890 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.681843042 CEST	49717	443	192.168.2.16	153.127.61.138
Jul 3, 2024 16:43:33.681873083 CEST	443	49717	153.127.61.138	192.168.2.16
Jul 3, 2024 16:43:33.687158108 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.687256098 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.688608885 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.688618898 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.688891888 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.690414906 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.736509085 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.952735901 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.952809095 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.952887058 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.953696012 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.953715086 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:33.953726053 CEST	49718	443	192.168.2.16	23.43.61.160
Jul 3, 2024 16:43:33.953733921 CEST	443	49718	23.43.61.160	192.168.2.16
Jul 3, 2024 16:43:34.074244022 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 3, 2024 16:43:34.378719091 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 3, 2024 16:43:34.983886003 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 3, 2024 16:43:35.240242958 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 3, 2024 16:43:35.875706911 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:35.875747919 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:35.875938892 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:35.877370119 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:35.877382040 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:36.183919907 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 3, 2024 16:43:36.699719906 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:36.699804068 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:36.702488899 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:36.702501059 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:36.702862978 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:36.756866932 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:36.766856909 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:36.808496952 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038283110 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038302898 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038311958 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038335085 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038384914 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:37.038388014 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038398027 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038422108 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038435936 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:37.038451910 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:37.038470984 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:37.038561106 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038616896 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:37.038626909 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.038803101 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.039670944 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:37.049087048 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:37.049103975 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:37.049115896 CEST	49719	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:43:37.049123049 CEST	443	49719	40.68.123.157	192.168.2.16
Jul 3, 2024 16:43:38.542022943 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 3, 2024 16:43:38.589876890 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 3, 2024 16:43:38.845906973 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 3, 2024 16:43:39.453917027 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 3, 2024 16:43:40.223242998 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:40.223315954 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:40.223512888 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:40.667875051 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 3, 2024 16:43:40.862606049 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:40.862652063 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:40.862726927 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:40.862775087 CEST	49712	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:43:40.862785101 CEST	443	49712	142.250.184.228	192.168.2.16
Jul 3, 2024 16:43:40.862988949 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:40.862997055 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:40.863523006 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:40.863554955 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:40.863621950 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:40.863795996 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:40.863801956 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.042614937 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.042965889 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.042982101 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.044094086 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.044177055 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.044281960 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.044312954 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.044332981 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.045397997 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.045460939 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.046406031 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.046474934 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.046546936 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.046562910 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.048475981 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.048561096 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.087987900 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.087996960 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.088007927 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.135004997 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.345652103 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.346088886 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.346117020 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.346148968 CEST	443	49720	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.346358061 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.346358061 CEST	49720	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.348530054 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.396509886 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.652793884 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.653059006 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.653067112 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.653104067 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.653120041 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.653131962 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.653146982 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.653167009 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.653182983 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.653227091 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.654048920 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.666474104 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.666512012 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.666601896 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.667212009 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.667229891 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.667655945 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.667699099 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.667758942 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.668271065 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.668287992 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.668658018 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.668667078 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.668728113 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.669109106 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.669126987 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.669177055 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.669337988 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.669351101 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.669506073 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.669519901 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.707904100 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.707911968 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.755904913 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.939966917 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.939981937 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.940001011 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.940007925 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.940027952 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.940090895 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.940108061 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:42.940135002 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:42.940155983 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.074966908 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 3, 2024 16:43:43.140619993 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.140634060 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.140666008 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.140678883 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.140690088 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.140695095 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.140712976 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.140748978 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.140773058 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.140780926 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.140849113 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.140892029 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.141000986 CEST	49721	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.141017914 CEST	443	49721	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.394049883 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 3, 2024 16:43:43.635163069 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.635179996 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.635524035 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.635546923 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.635618925 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.635624886 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.636001110 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.636307001 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.636379957 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.636436939 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.636759996 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.636828899 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.637229919 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.637312889 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.637433052 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.637443066 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.637984991 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.638171911 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.638190031 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.639221907 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.639283895 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.639532089 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.639588118 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.639656067 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.639662981 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.640463114 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.640644073 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.640652895 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.640980005 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.641244888 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.641324997 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.641329050 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.676516056 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.679927111 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.679940939 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:43.688496113 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:43.695921898 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.168473005 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.168538094 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.168576002 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.168592930 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.168617964 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.168654919 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.169487000 CEST	49723	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.169507980 CEST	443	49723	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.170018911 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.170892954 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.171277046 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.171310902 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.171375036 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.171647072 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.171679974 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.171747923 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.172156096 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.172188044 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.172251940 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.172678947 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.172697067 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.172987938 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.172996998 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.172998905 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.173015118 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.174803019 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.222898960 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.223033905 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.223213911 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.368017912 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.368032932 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.368084908 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.368108988 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.368120909 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.368135929 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.368154049 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.368217945 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.368217945 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.369976044 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.369987011 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370011091 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370070934 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.370079041 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370091915 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.370095968 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370166063 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.370382071 CEST	49724	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.370398045 CEST	443	49724	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370765924 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.370820045 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370893955 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.370917082 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370953083 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370970964 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.370991945 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.371015072 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.371021032 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.371033907 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.371062040 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.371062040 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.371084929 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.371109962 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.371216059 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.371222973 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.375102043 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.375123024 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.375159979 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.375169992 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.375190020 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.375191927 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.375216961 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.375257015 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.375269890 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.376461029 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.376473904 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.376497984 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.376530886 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.376537085 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.376549006 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.376574993 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.376641989 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.376714945 CEST	49722	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.376728058 CEST	443	49722	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.585567951 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.585587978 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.585642099 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.585753918 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.585769892 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.585803986 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.585830927 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.670479059 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.670545101 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.670618057 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.670823097 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.670876026 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.670938015 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.671159029 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.671175003 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.671386957 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.671401978 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.812640905 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.812657118 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.812695026 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.812762976 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.812774897 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.812791109 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.812855959 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.813308001 CEST	49725	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.813322067 CEST	443	49725	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.815931082 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.815965891 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.816035986 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.816407919 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.816461086 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.816512108 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.816695929 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.816706896 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.817135096 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:44.817151070 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:44.845915079 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 3, 2024 16:43:45.100133896 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.100447893 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.100487947 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.100864887 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.101227045 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.101294994 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.101416111 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.113183022 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.113408089 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.113436937 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.113799095 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.114095926 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.114168882 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.114232063 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.144505978 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.150022984 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.150264978 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.150290012 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.151382923 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.151448011 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.151726007 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.151782036 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.151848078 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.151859045 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.156500101 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.195914984 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.370539904 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.370889902 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.370922089 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.371984959 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.372059107 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.372462988 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.372553110 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.372632027 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.372653008 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.419902086 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.669329882 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.669385910 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.669465065 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.669506073 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.669506073 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.670257092 CEST	49727	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.670277119 CEST	443	49727	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.670635939 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.670670033 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.670734882 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.671222925 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.671235085 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.674616098 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.674655914 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.674721003 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.675023079 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.675034046 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.675399065 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.675489902 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.675559998 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.675563097 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.675600052 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.676682949 CEST	49726	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.676701069 CEST	443	49726	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.677000046 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.677010059 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.677082062 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.677581072 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.677588940 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.679366112 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.679394007 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.679461956 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.679641962 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.679656029 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.689255953 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.689356089 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.689415932 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.690258026 CEST	49728	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.690279007 CEST	443	49728	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.690644979 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.690666914 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.690733910 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.691173077 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.691184998 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.698395014 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.698424101 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.698492050 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.698760033 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.698771000 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.863766909 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.864116907 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.864135027 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.865207911 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.865293980 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.865705013 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.865776062 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.865844965 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.865854979 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.872498035 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.872617960 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.872837067 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.872864008 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.872885942 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.872894049 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.873934031 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.873980045 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.874002934 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.874043941 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.874284029 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.874350071 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.874550104 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.874613047 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.874694109 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.874702930 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.874736071 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.874742031 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.883291006 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.883544922 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.883563042 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.884691000 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.884756088 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.885030031 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.885102034 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.885159016 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.885170937 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.906354904 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.906408072 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.906493902 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.906514883 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.906553030 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.907890081 CEST	49729	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.907918930 CEST	443	49729	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.908178091 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.908235073 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.908302069 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.909140110 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.909163952 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.914925098 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.917896032 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.919338942 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.929806948 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.929847956 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.929932117 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.930377007 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:45.930387020 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:45.930896997 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.371860027 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.380582094 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.380683899 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.380748034 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.381309986 CEST	49732	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.381331921 CEST	443	49732	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.381642103 CEST	49742	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.381669044 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.381741047 CEST	49742	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.382045031 CEST	49742	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.382060051 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.384793997 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.385149002 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.385210037 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.385422945 CEST	49733	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.385446072 CEST	443	49733	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.385797024 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.385828018 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.385900021 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.386007071 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.386204958 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.386221886 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.426938057 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.426942110 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.523813009 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.524219036 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.524238110 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.524703979 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.525063992 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.525207043 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.525213957 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.525578976 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.570941925 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.571182013 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.571198940 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.571284056 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.571300983 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.571333885 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.571366072 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.571377993 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.571392059 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.571392059 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.571408033 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.571449995 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.572622061 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.572632074 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.572674990 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.572704077 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.572711945 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.572729111 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.572756052 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.572981119 CEST	49731	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.572999001 CEST	443	49731	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.573458910 CEST	49744	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.573510885 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.573584080 CEST	49744	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.574048042 CEST	49744	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.574059963 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.582355022 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.582604885 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.582627058 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.583758116 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.583820105 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.584208965 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.584283113 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.584356070 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.584364891 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.586265087 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.586280107 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.586301088 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.586308956 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.586324930 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.586338997 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.586369991 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.586385965 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.586419106 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.587362051 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.587403059 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.587454081 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.587471008 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.587481976 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.587486982 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.587536097 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.587721109 CEST	49730	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.587734938 CEST	443	49730	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.588046074 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.588140965 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.588213921 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.588450909 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.588529110 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.588557005 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.588689089 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.588701963 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.589766979 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.589833021 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.590157032 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.590224981 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.590286970 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.590296984 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.634942055 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.634943008 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.789051056 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.789424896 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.789463997 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.789813042 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.790142059 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.790234089 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.790267944 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.791466951 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.791659117 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.791676044 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.792773962 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.792865992 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.793236971 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.793328047 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.793396950 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.793407917 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.836513042 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.840933084 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.840934038 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.864643097 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.864991903 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.865022898 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.865387917 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.865694046 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.865768909 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.865855932 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.868238926 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.868438005 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.868448973 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.869545937 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.869631052 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.869879007 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.869976044 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.869976044 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.912503958 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.912522078 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.920941114 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:46.920955896 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:46.967938900 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.055505037 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.055557013 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.055627108 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.055634022 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.055681944 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.056654930 CEST	49734	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.056688070 CEST	443	49734	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.057081938 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.057116032 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.057218075 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.057549953 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.057570934 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.078001022 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.078087091 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.078154087 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.078174114 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.078196049 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.078880072 CEST	49737	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.078906059 CEST	443	49737	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.079241037 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.079292059 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.079358101 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.079725027 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.079737902 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.083619118 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.083697081 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.083756924 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.083765984 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.083812952 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.084297895 CEST	49735	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.084316969 CEST	443	49735	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.256436110 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.256707907 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.256726980 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.257101059 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.257402897 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.257471085 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.257534027 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.282808065 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.282931089 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.282984972 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.283474922 CEST	49739	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.283495903 CEST	443	49739	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.284689903 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.284858942 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.284898043 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.284914970 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.284929991 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.284981012 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.285135984 CEST	49742	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.285151958 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.285506010 CEST	49736	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.285512924 CEST	443	49736	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.285520077 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.285928965 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.285969973 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.286043882 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.286382914 CEST	49742	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.286452055 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.286660910 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.286674976 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.287051916 CEST	49742	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.288294077 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.288494110 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.288523912 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.289586067 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.289655924 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.289974928 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.290014029 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.290082932 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.290277004 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.290339947 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.290463924 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.290477037 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.290572882 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.290585041 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.304497957 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.332493067 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.332940102 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.358333111 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.358397961 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.358477116 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.358478069 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.358525038 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.359189987 CEST	49740	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.359214067 CEST	443	49740	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.359651089 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.359697104 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.359767914 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.360091925 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.360105038 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.362591982 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.362610102 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.362704039 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.362904072 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.362917900 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.375797987 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.375874043 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.375932932 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.375952005 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.376005888 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.376504898 CEST	49738	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.376521111 CEST	443	49738	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.376773119 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.376810074 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.376894951 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.377139091 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.377150059 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.484841108 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.485203981 CEST	49744	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.485243082 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.485658884 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.485814095 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.485975027 CEST	49744	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.486053944 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.486129999 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.486161947 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.486238003 CEST	49744	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.486506939 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.486783028 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.486846924 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.486857891 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.532504082 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.532504082 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.537910938 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.746383905 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.746436119 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.746499062 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.746505022 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.746543884 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.747297049 CEST	49741	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.747318029 CEST	443	49741	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.747672081 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.747719049 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.747791052 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.748159885 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.748182058 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.824440002 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.824552059 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.824624062 CEST	49742	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.825386047 CEST	49742	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.825408936 CEST	443	49742	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.825800896 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.825858116 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.825943947 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.826114893 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.826232910 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.826287031 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.826391935 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.826409101 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.827595949 CEST	49743	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.827625036 CEST	443	49743	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.827992916 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.828043938 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.828111887 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.828460932 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.828479052 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.887950897 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 3, 2024 16:43:47.910090923 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.910419941 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.910454035 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.910825968 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.911183119 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.911252975 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.911317110 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.933902979 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.934153080 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.934176922 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.934542894 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.934838057 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.934905052 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.935048103 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.950941086 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.950972080 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.977494001 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.977602005 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.977699995 CEST	49744	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.978391886 CEST	49744	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.978415966 CEST	443	49744	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.978715897 CEST	49757	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.978769064 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.978863001 CEST	49757	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.979147911 CEST	49757	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:47.979171038 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:47.980510950 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.051243067 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.051357985 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.051453114 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.052083015 CEST	49745	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.052103996 CEST	443	49745	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.052443027 CEST	49758	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.052468061 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.052526951 CEST	49758	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.053014994 CEST	49758	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.053025961 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.146220922 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.146538019 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.146567106 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.146909952 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.147214890 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.147269964 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.147357941 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.170027018 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.170361042 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.170381069 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.170711994 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.171123028 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.171179056 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.171319962 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.188498020 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.216507912 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.264117002 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.264508963 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.264529943 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.264924049 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.265229940 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.265310049 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.265355110 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.271666050 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.272464991 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.272478104 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.272865057 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.274888039 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.275008917 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.276807070 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.277147055 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.277173996 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.277291059 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.277662039 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.279694080 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.279823065 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.279850006 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.312503099 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.314902067 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.320501089 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.324495077 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.332328081 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.450634956 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.451350927 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.451416969 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.451443911 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.451478958 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.451958895 CEST	49746	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.451978922 CEST	443	49746	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.452275038 CEST	49759	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.452322960 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.452387094 CEST	49759	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.452769041 CEST	49759	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.452783108 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.498191118 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.498261929 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.498316050 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.498322964 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.498374939 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.499038935 CEST	49747	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.499048948 CEST	443	49747	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.499483109 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.499525070 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.499624014 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.500016928 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.500031948 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.649141073 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.649461031 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.649488926 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.649863005 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.650162935 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.650222063 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.650301933 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.676440001 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.676502943 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.676578999 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.676579952 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.676630020 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.677237988 CEST	49749	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.677253008 CEST	443	49749	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.677639008 CEST	49761	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.677685022 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.677747011 CEST	49761	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.678124905 CEST	49761	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.678142071 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.692493916 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.700275898 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.700575113 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.700586081 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.701656103 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.701728106 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.701999903 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.702052116 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.702135086 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.702142000 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.708698988 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.708775043 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.708828926 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.708838940 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.708849907 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.708899975 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.709398985 CEST	49750	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.709407091 CEST	443	49750	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.709788084 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.709806919 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.709881067 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.710346937 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.710355997 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.746968985 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.795305014 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.795376062 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.795459032 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.795480013 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.795525074 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.796307087 CEST	49752	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.796329021 CEST	443	49752	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.806252956 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.806322098 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.806385040 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.806400061 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.806415081 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.806452036 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.806998968 CEST	49751	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.807005882 CEST	443	49751	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.807447910 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.807478905 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.807542086 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.808068991 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.808089018 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.810547113 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.810592890 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.810659885 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.810666084 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.810756922 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.810822010 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.810830116 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.810941935 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.810941935 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.810957909 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.811624050 CEST	49753	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.811635971 CEST	443	49753	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.811979055 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.811989069 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.812043905 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.812501907 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.812513113 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.869318962 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.869729042 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.869757891 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.870856047 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.870944023 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.871249914 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.871310949 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.871392965 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.871403933 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.878652096 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.878987074 CEST	49757	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.879004002 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.879352093 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.879750967 CEST	49757	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.879806995 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.879909992 CEST	49757	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.920514107 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.921925068 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.950190067 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.950489998 CEST	49758	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.950499058 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.951344967 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.951641083 CEST	49758	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.951710939 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:48.951776028 CEST	49758	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:48.992505074 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.232583046 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.232655048 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.232726097 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.232731104 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.232778072 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.233477116 CEST	49754	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.233495951 CEST	443	49754	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.233836889 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.233869076 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.233931065 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.234308958 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.234323025 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.292017937 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.292071104 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.292134047 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.292150021 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.292160988 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.292198896 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.292815924 CEST	49756	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.292829037 CEST	443	49756	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.293179989 CEST	49767	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.293217897 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.293284893 CEST	49767	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.293719053 CEST	49767	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.293736935 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.415397882 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.415810108 CEST	49759	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.415829897 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.416194916 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.416507006 CEST	49759	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.416572094 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.416649103 CEST	49759	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.419168949 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.419260025 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.419318914 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.419955969 CEST	49755	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.419976950 CEST	443	49755	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.420353889 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.420403957 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.420495033 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.420824051 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.420838118 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.428316116 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.428582907 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.428595066 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.428972960 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.429284096 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.429354906 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.429377079 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.464502096 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.476506948 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.481992960 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.483793020 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.483913898 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.484015942 CEST	49757	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.484846115 CEST	49757	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.484868050 CEST	443	49757	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.485076904 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.485114098 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.485183001 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.485480070 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.485490084 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.545825958 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.545943022 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.546001911 CEST	49758	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.546828985 CEST	49758	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.546840906 CEST	443	49758	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.547182083 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.547213078 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.547281981 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.547694921 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.547707081 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.677398920 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.677757025 CEST	49761	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.677778959 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.678133011 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.678447962 CEST	49761	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.678514957 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.678580046 CEST	49761	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.706599951 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.706906080 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.706928968 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.707261086 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.707571983 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.707623959 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.707716942 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.724498987 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.752505064 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.785262108 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.785651922 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.785662889 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.786025047 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.786355972 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.786437988 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.786484957 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.786485910 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.786696911 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.786704063 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.787082911 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.787420034 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.787458897 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.787463903 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.787487984 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.805871010 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.806147099 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.806170940 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.806560040 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.806864977 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.806937933 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.806977987 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.832498074 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.833942890 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.833942890 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.849962950 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.849989891 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.953885078 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.954788923 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.954907894 CEST	49759	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.955051899 CEST	49759	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.955070019 CEST	443	49759	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.955379009 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.955423117 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.955491066 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.955882072 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.955894947 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.959054947 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.959115982 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.959172010 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.959201097 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.959224939 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.959703922 CEST	49760	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.959717035 CEST	443	49760	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.960012913 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.960033894 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:49.960088968 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.960458040 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:49.960468054 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.088121891 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.088515043 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.088529110 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.088905096 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.089242935 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.089344025 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.089360952 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.136516094 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.137979984 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.146174908 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.146508932 CEST	49767	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.146534920 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.146919012 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.147224903 CEST	49767	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.147314072 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.147404909 CEST	49767	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.192514896 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.216438055 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.216563940 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.216681957 CEST	49761	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.217314959 CEST	49761	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.217339993 CEST	443	49761	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.217713118 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.217739105 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.217798948 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.218584061 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.218599081 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.243446112 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.243504047 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.243572950 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.243586063 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.243751049 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.244334936 CEST	49762	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.244344950 CEST	443	49762	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.244760036 CEST	49774	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.244774103 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.244884014 CEST	49774	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.245210886 CEST	49774	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.245219946 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.275372982 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.275685072 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.275700092 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.285155058 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.285698891 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.285839081 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.285933971 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.318454027 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.318586111 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.318681955 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.319385052 CEST	49765	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.319406033 CEST	443	49765	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.319816113 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.319839001 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.319902897 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.319933891 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.320055962 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.320100069 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.320329905 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.320343971 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.321959019 CEST	49763	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.321964979 CEST	443	49763	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.322304964 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.322338104 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.322540045 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.323153973 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.323164940 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.328933954 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.346550941 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.346621037 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.346694946 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.346707106 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.346734047 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.347445965 CEST	49764	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.347462893 CEST	443	49764	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.347827911 CEST	49777	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.347875118 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.347938061 CEST	49777	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.348268986 CEST	49777	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.348287106 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.354640961 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.355221987 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.355245113 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.355671883 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.356159925 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.356159925 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.356245995 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.399141073 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.399528027 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.399540901 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.399879932 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.400295973 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.400360107 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.400373936 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.407962084 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.440038919 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.621815920 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.621896029 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.621972084 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.621975899 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.622031927 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.639148951 CEST	49766	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.639173985 CEST	443	49766	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.639559984 CEST	49778	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.639605999 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.639672041 CEST	49778	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.640113115 CEST	49778	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.640124083 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.677939892 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.678076982 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.678138018 CEST	49767	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.680210114 CEST	49767	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.680236101 CEST	443	49767	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.820327044 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.829128027 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.829399109 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.829417944 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.829787970 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.830092907 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.830161095 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.830216885 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.830404997 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.830682039 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.830712080 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.831139088 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.831415892 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.831489086 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.831501007 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.869936943 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.876504898 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.876511097 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.885912895 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.889281034 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.889348030 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.889410973 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.889416933 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.889461040 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.890077114 CEST	49769	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.890094042 CEST	443	49769	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.890424013 CEST	49779	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.890465021 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.890530109 CEST	49779	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.891021013 CEST	49779	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.891036987 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.932620049 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.932729006 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:50.932796001 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.937540054 CEST	49770	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:50.937560081 CEST	443	49770	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020126104 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020145893 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020179033 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020195961 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020207882 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020221949 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.020247936 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020272970 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.020306110 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.020591021 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020600080 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020622969 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020648956 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.020656109 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020689964 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.020809889 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.020839930 CEST	443	49768	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.020885944 CEST	49768	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.023956060 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.023983002 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.024046898 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.024279118 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.024291039 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.091655970 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.092081070 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.092113018 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.092478037 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.092802048 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.092871904 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.092974901 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.111885071 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.112162113 CEST	49774	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.112188101 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.112529039 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.112843990 CEST	49774	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.112906933 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.112977028 CEST	49774	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.136503935 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.160502911 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.172852993 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.173181057 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.173198938 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.173576117 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.174007893 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.174072981 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.174160004 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.195400000 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.195712090 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.195722103 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.196883917 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.196993113 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.197244883 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.197309017 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.197371006 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.197379112 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.216509104 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.221122026 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.221415043 CEST	49777	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.221452951 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.221838951 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.222325087 CEST	49777	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.222404003 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.222515106 CEST	49777	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.236972094 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.264534950 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.361273050 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.361393929 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.361459970 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.362183094 CEST	49772	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.362204075 CEST	443	49772	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.363285065 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.412941933 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.508994102 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.509432077 CEST	49778	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.509478092 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.509841919 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.510184050 CEST	49778	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.510246038 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.510334969 CEST	49778	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.552547932 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.564321995 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.564338923 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.564383984 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.564416885 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.564522028 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.564538002 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.564659119 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.627279997 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.641822100 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.641936064 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.642061949 CEST	49774	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.642833948 CEST	49774	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.642854929 CEST	443	49774	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.667954922 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.705714941 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.705776930 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.705862999 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.705885887 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.705923080 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.706696987 CEST	49776	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.706715107 CEST	443	49776	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.709417105 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.709443092 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.709502935 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.709827900 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.709836960 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.717482090 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.717497110 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.717524052 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.717552900 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.717573881 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.717600107 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.717611074 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.717612982 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.717619896 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.717658997 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.717906952 CEST	49773	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.717916012 CEST	443	49773	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.719803095 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.719815969 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.719904900 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.720089912 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.720132113 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.720176935 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.720585108 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.720593929 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.720732927 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.720746040 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.721059084 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.721080065 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.721126080 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.721359968 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.721375942 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.730249882 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.730340004 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.730402946 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.730406046 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.730437994 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.731003046 CEST	49775	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.731024981 CEST	443	49775	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.732927084 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.732942104 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.733009100 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.734091997 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.734102011 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.744993925 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:51.745039940 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:51.745116949 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:51.745301962 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:51.745316029 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:51.749581099 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:51.749625921 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:51.749694109 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:51.749870062 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:51.749883890 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:51.758569956 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.758677006 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.758729935 CEST	49777	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.759402990 CEST	49777	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.759428978 CEST	443	49777	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.759788036 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.759803057 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.759855032 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.760257006 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.760267019 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.766571045 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.766623020 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.766671896 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.766688108 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.766740084 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.767046928 CEST	49771	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.767057896 CEST	443	49771	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.770421028 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.770462036 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.770533085 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.770811081 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.770819902 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.770880938 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.771159887 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.771172047 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.771296978 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.771306992 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.783315897 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.783742905 CEST	49779	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.783752918 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.784106016 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.784603119 CEST	49779	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.784671068 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.784784079 CEST	49779	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.828500986 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.871364117 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.871712923 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.871732950 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.872085094 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.872519970 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.872591972 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:51.872688055 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:51.920499086 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.042512894 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.043005943 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.043111086 CEST	49778	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.043319941 CEST	49778	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.043366909 CEST	443	49778	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.043680906 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.043720007 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.043823957 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.044138908 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.044151068 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.317856073 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.317966938 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.318080902 CEST	49779	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.318726063 CEST	49779	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.318743944 CEST	443	49779	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.405762911 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.449945927 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.567780972 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.568206072 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.568229914 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.568588018 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.568917036 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.568979979 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.569089890 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.575961113 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.576231003 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.576247931 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.577029943 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.577332973 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.577410936 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.577512026 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.579154015 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.579333067 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.579340935 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.579715967 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.579984903 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.580039024 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.580117941 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.589243889 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.589483023 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.589493990 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.589823961 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.590114117 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.590169907 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.590199947 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.603518963 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.603832006 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.603842020 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.604506016 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.604516029 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.604556084 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.604583025 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.604588032 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.604612112 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.604624987 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.604657888 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.604902983 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.604979992 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.605349064 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.605422020 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.605451107 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.612498045 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.612890005 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.612946033 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.612984896 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.613018990 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.613045931 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.613065004 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.613095045 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.613683939 CEST	49780	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.613706112 CEST	443	49780	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.620708942 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.620924950 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.620944023 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.622148991 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.622208118 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.622484922 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.622581959 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.622592926 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.624505997 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.625734091 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.625919104 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.626008034 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.626035929 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.627124071 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.627199888 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.627484083 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.627542973 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.627559900 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.632499933 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.638103962 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.638310909 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.638335943 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.639697075 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.639766932 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.640007973 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.640105963 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.640110016 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.640954018 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.652503014 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.656928062 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.656938076 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.668500900 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.668509007 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.672991037 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.673028946 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.673067093 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.673074961 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.684499979 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.688949108 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.688976049 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.703928947 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.719961882 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.720005035 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.736023903 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.799156904 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.799503088 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.799526930 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.800599098 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.800673008 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.800935984 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.801386118 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.801420927 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.801892996 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.801959038 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.802164078 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.802170992 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.802445889 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.802520037 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.803210020 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.803272009 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.803332090 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.803343058 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:52.847946882 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.847948074 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:52.912277937 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.915818930 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.915841103 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.916233063 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.918108940 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.918184042 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:52.919872999 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:52.964508057 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.007941961 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 3, 2024 16:43:53.081983089 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.082067966 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.082218885 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.083209991 CEST	49787	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.083244085 CEST	443	49787	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.089185953 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.089222908 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.089236975 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.089322090 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.089349031 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.089365005 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.089432955 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.089973927 CEST	49786	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.089987993 CEST	443	49786	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.099976063 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.100014925 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.100106001 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.100305080 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.100316048 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.108552933 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.108578920 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.108649015 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.108804941 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:53.108818054 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:53.113560915 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.114947081 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.115010977 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.115017891 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.115071058 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.115256071 CEST	49783	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.115273952 CEST	443	49783	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.116079092 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.117686033 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.117726088 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.117794037 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.118004084 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.118017912 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.122792959 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.124552011 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.124608040 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.124624014 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.124677896 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.124806881 CEST	49781	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.124821901 CEST	443	49781	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.167973995 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.178287983 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.178471088 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.178523064 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.178540945 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.179090977 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.179111004 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.179121017 CEST	443	49782	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.179141998 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.179177999 CEST	49782	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.181487083 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.181521893 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.181591988 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.181845903 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.181863070 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.201452017 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.201561928 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.201606989 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.202181101 CEST	49785	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.202193975 CEST	443	49785	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.204813004 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.204874992 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.204962969 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.205188990 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.205200911 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.219216108 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.219501019 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.219562054 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.219881058 CEST	49790	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.219899893 CEST	443	49790	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.236721039 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.237786055 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.237848043 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.237848997 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.237905979 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.238132954 CEST	49788	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.238147020 CEST	443	49788	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.238475084 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.238512039 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.238590956 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.238960981 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.238976955 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.246085882 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.284503937 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.284532070 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.284558058 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.284565926 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.284590006 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.284653902 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.284708977 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.284780025 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.289443016 CEST	49784	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.289468050 CEST	443	49784	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.295932055 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.447637081 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.447653055 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.447676897 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.447685003 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.447715998 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.447737932 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.447758913 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.447794914 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.447832108 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.452174902 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.452183008 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.452203989 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.452276945 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.452399015 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.452399015 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.452399015 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.452608109 CEST	49789	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.452616930 CEST	443	49789	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.455312014 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.455354929 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.455427885 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.455713034 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.455728054 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.456355095 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.456403017 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.456491947 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.456595898 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.456604004 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.456659079 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.457283020 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.457292080 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.457360983 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.457478046 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.457494974 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.457639933 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.457652092 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.458189011 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.458198071 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.458261967 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.458815098 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.458822966 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.458914042 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.459100008 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.459115028 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.459619999 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.459628105 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.459700108 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.459839106 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.459850073 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.460025072 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.460036039 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.460314035 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.460325956 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.518693924 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.565943003 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.717792034 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.717807055 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.717844009 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.717856884 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.717869043 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.717946053 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.717964888 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.717982054 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.718025923 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.916779995 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.916821003 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.916899920 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:53.916949987 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.917004108 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.917499065 CEST	49791	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:53.917515993 CEST	443	49791	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.104743004 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.104809999 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.105068922 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.105103970 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.105187893 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.105211020 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.105457067 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.105555058 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.105758905 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.105825901 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.106002092 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.106074095 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.106158972 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.106204033 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.118227959 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.118431091 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.118446112 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.119499922 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.119573116 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.119815111 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.119863987 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.119894028 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.148500919 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.148511887 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.161302090 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.161520004 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.161533117 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.162611008 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.162672043 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.162938118 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.163002968 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.163032055 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.164499044 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.171901941 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.171931982 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.202920914 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.202929974 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.218935013 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.250945091 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.277791023 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.278148890 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.278175116 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.279495955 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.279570103 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.279834986 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.279891968 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.279988050 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.279994965 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.282366037 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.282547951 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.282558918 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.283577919 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.283653021 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.284095049 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.284162998 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.284168959 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.324506044 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.330948114 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.330965042 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.330981970 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.357527971 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.357857943 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.357877016 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.358958960 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.359036922 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.359313965 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.359378099 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.359467983 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.359476089 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.367804050 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.368057966 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.368092060 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.368509054 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.368839025 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.368906975 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.368927002 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.378984928 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.389904976 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.390116930 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.390126944 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.391213894 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.391285896 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.391526937 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.391596079 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.391608000 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.397095919 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.397320986 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.397356033 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.397707939 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.398005009 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.398072004 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.398130894 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.399049997 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.399218082 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.399226904 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.400350094 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.400412083 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.400707006 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.400779009 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.400799036 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.409914017 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.416496992 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.424907923 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.432513952 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.440500975 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.440901995 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.440910101 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.440922022 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.440927982 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.488930941 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.488951921 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.575475931 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.575576067 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.575642109 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.576733112 CEST	49792	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.576755047 CEST	443	49792	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.580018997 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.580058098 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.580066919 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.580100060 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.580132961 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.580151081 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.580178976 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.580219030 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.580281973 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.580732107 CEST	49793	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:43:54.580746889 CEST	443	49793	150.230.193.202	192.168.2.16
Jul 3, 2024 16:43:54.639486074 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.640407085 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.640486956 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.640511036 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.640547991 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.640827894 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.641181946 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.641235113 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.641253948 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.641268969 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.641326904 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.644072056 CEST	49795	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.644089937 CEST	443	49795	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.646158934 CEST	49794	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.646179914 CEST	443	49794	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.647592068 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.647938013 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.648000956 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.648674011 CEST	49796	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.648682117 CEST	443	49796	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.929723024 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.929851055 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.929935932 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.930083990 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.930672884 CEST	49797	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.930695057 CEST	443	49797	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.930756092 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.930764914 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.931451082 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.931479931 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.931586027 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.931596041 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.932570934 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.932658911 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.932663918 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.932724953 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.932966948 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.933032036 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.933249950 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.933319092 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.933850050 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.933860064 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.933902025 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.933908939 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.934417009 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.935373068 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.935425997 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.935429096 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.935467958 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.935648918 CEST	49799	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.935663939 CEST	443	49799	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.936064959 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.936091900 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.936156034 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.936397076 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.936450005 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.936494112 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.936502934 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.936516047 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.936548948 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.936654091 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.936671019 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.937772989 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.938054085 CEST	49804	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.938060999 CEST	443	49804	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.938400030 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.938450098 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.938455105 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.938462019 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.938474894 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.938499928 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.938529968 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.939158916 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.939205885 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.939213991 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.939232111 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.939246893 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.939270973 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.940372944 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.940392971 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.940457106 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.940493107 CEST	49800	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.940505981 CEST	443	49800	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.940977097 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.940987110 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.941893101 CEST	49801	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.941898108 CEST	443	49801	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.942755938 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.942792892 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.942843914 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.943115950 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.943125010 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.943540096 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.943583012 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.943650961 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.943895102 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.943907022 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.944159985 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.944169044 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.944221973 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.944380045 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.944390059 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:54.984926939 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.985008955 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:54.985009909 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.099302053 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.099322081 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.099339962 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.099348068 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.099381924 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.099421024 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.099433899 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.099462032 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.099495888 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.102559090 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.102569103 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.102596998 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.102622986 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.102628946 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.102649927 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.102659941 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.102704048 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.102907896 CEST	49798	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.102921963 CEST	443	49798	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.428807974 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.428862095 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.428913116 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.428930044 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.428951979 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.428977013 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.429014921 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.429625988 CEST	49802	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.429641008 CEST	443	49802	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.431107044 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.431247950 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.431298018 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.431304932 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.431339979 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.431921005 CEST	49803	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.431940079 CEST	443	49803	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.432465076 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.432512045 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.432585001 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.432893991 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.432903051 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.434566021 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.434607983 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.434686899 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.434920073 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.434937000 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.786062002 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.786396027 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.786425114 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.786815882 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.787120104 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.787199020 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.787272930 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.790501118 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.790684938 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.790715933 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.791085005 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.791352034 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.791429043 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.791430950 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.791749001 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.791924953 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.791953087 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.793075085 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.793133974 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.793378115 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.793443918 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.793462038 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.797703028 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.797887087 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.797914028 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.798243999 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.798507929 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.798561096 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.798576117 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.807034969 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.807246923 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.807272911 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.808356047 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.808429003 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.808655977 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.808732033 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.808732986 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.831952095 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.831995964 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.832509041 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.840502024 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.840502977 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.847939014 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.847944021 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.847944021 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.847973108 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.847989082 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:55.895908117 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:55.895908117 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.287972927 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.288279057 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.288307905 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.289392948 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.289475918 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.289745092 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.289800882 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.289882898 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.289891005 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.297045946 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.297254086 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.297281981 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.298326969 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.298403025 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.298629999 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.298682928 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.298718929 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.315491915 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.315553904 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.315648079 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.315649986 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.315686941 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.320529938 CEST	49807	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.320548058 CEST	443	49807	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.321563005 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.321631908 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.321679115 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.321691990 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.321732044 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.322165966 CEST	49809	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.322180033 CEST	443	49809	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.330948114 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.331381083 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.331439972 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.331451893 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.331496000 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.331654072 CEST	49806	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.331674099 CEST	443	49806	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.333734989 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.333776951 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.333849907 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.334057093 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.334068060 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.340492010 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.342905998 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.342924118 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.342933893 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.351921082 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.352024078 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.352075100 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.352087975 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.352099895 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.352154016 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.352154016 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.352490902 CEST	49808	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.352504969 CEST	443	49808	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.390932083 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.406608105 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.406666040 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.406739950 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.406759977 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.406894922 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.407299995 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.407363892 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.407401085 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.407485962 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.407496929 CEST	443	49810	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.407509089 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.407542944 CEST	49810	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.919404030 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.919456959 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.919529915 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.919533968 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.919589043 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.920213938 CEST	49812	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.920231104 CEST	443	49812	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.942984104 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.943039894 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.943101883 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.943114042 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:56.943155050 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.943636894 CEST	49811	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:56.943660021 CEST	443	49811	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:57.354048967 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:57.354407072 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:57.354453087 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:57.354790926 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:57.355185986 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:57.355246067 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:57.355284929 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:57.395016909 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:57.489936113 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 3, 2024 16:43:57.889035940 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:57.889086008 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:57.889156103 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:57.889170885 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:43:57.889226913 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:57.890105009 CEST	49813	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:43:57.890126944 CEST	443	49813	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:10.448998928 CEST	49706	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:44:10.456039906 CEST	80	49706	153.127.61.138	192.168.2.16
Jul 3, 2024 16:44:13.172333956 CEST	80	49696	178.79.238.0	192.168.2.16
Jul 3, 2024 16:44:13.172447920 CEST	49696	80	192.168.2.16	178.79.238.0
Jul 3, 2024 16:44:13.172492027 CEST	49696	80	192.168.2.16	178.79.238.0
Jul 3, 2024 16:44:13.177392006 CEST	80	49696	178.79.238.0	192.168.2.16
Jul 3, 2024 16:44:13.374064922 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:13.374135017 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:13.374258041 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:13.374598980 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:13.374609947 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:13.789263964 CEST	49697	80	192.168.2.16	178.79.238.0
Jul 3, 2024 16:44:13.797173023 CEST	80	49697	178.79.238.0	192.168.2.16
Jul 3, 2024 16:44:13.797319889 CEST	49697	80	192.168.2.16	178.79.238.0
Jul 3, 2024 16:44:14.171442032 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.171593904 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.172904015 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.172920942 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.173166037 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.174613953 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.220499992 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.506336927 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.506361008 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.506380081 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.506459951 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.506486893 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.506535053 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.507555008 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.507600069 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.507638931 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.507646084 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.507658005 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.507659912 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.507697105 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.511070967 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.511085987 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:14.511102915 CEST	49814	443	192.168.2.16	40.68.123.157
Jul 3, 2024 16:44:14.511109114 CEST	443	49814	40.68.123.157	192.168.2.16
Jul 3, 2024 16:44:17.772562027 CEST	49815	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:17.773252010 CEST	49816	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:17.779757023 CEST	80	49815	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:17.779854059 CEST	49815	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:17.780061007 CEST	49815	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:17.780730009 CEST	80	49816	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:17.780783892 CEST	49816	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:17.785443068 CEST	80	49815	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:18.652256966 CEST	80	49815	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:18.654817104 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:18.654860973 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:18.654970884 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:18.655224085 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:18.655239105 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:18.702023983 CEST	49815	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:19.505728960 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:19.506105900 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:19.506159067 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:19.506501913 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:19.506808043 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:19.506901026 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:19.506939888 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:19.548029900 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:19.548044920 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.040849924 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.040971994 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.041034937 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.041718006 CEST	49817	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.041740894 CEST	443	49817	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.060317993 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.060347080 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.060427904 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.060494900 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.060548067 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.060604095 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.060734034 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.060743093 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.061096907 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.061110020 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.654634953 CEST	80	49815	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.654740095 CEST	49815	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.935709953 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.936059952 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.936089993 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.936446905 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.936737061 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.936800003 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.936877966 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.942370892 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.942578077 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.942615986 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.943085909 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.943361044 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.943433046 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.943442106 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:20.984508991 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.984517097 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:20.997992039 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.127341986 CEST	49815	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.132360935 CEST	80	49815	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.485919952 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.486475945 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.486538887 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.486543894 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.486602068 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.486633062 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.486635923 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.486634970 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.486649990 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.486661911 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.486690044 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.486726999 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.488377094 CEST	49818	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.488401890 CEST	443	49818	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.502556086 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.502599001 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.502679110 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.502888918 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.502898932 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.683778048 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.683801889 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.683890104 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.683918953 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.683979988 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.883492947 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.883516073 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.883606911 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.883640051 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.883682966 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.884190083 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.884242058 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.884249926 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.884300947 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.884335041 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.884500027 CEST	49819	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:21.884515047 CEST	443	49819	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:21.888582945 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:21.888622046 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:21.888679981 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:21.889058113 CEST	49822	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:21.889074087 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:21.889127016 CEST	49822	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:21.889281988 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:21.889295101 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:21.889419079 CEST	49822	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:21.889427900 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.354222059 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.354520082 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:22.354551077 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.354902983 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.355336905 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:22.355405092 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.355566025 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:22.396503925 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.886271954 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.886425972 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.886507034 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:22.886532068 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.886604071 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.886651993 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:22.887250900 CEST	49820	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:22.887268066 CEST	443	49820	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:22.934880018 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.935836077 CEST	49822	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:22.935877085 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.936086893 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.936320066 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.937916994 CEST	49822	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:22.938034058 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.939486027 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:22.939517021 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.939644098 CEST	49822	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:22.940807104 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.943784952 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:22.943955898 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:22.943970919 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.944026947 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.980519056 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:22.993992090 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.202162027 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.202248096 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.202300072 CEST	49822	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.202943087 CEST	49822	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.202965021 CEST	443	49822	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.205430984 CEST	49823	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.205467939 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.205544949 CEST	49823	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.205760002 CEST	49823	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.205770969 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.208928108 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.208950996 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.208959103 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.208977938 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.209006071 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.209026098 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.209054947 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.209089994 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.209171057 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.209635019 CEST	49821	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.209645987 CEST	443	49821	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.212454081 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.212495089 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:23.212569952 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.212789059 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:23.212799072 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.273510933 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.273849010 CEST	49823	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.273880005 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.274219990 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.274519920 CEST	49823	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.274593115 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.274660110 CEST	49823	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.289678097 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.289906979 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.289942026 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.290299892 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.290576935 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.290642023 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.290658951 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.316512108 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.331001043 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.331034899 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.541743994 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.542589903 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.542673111 CEST	49823	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.542845964 CEST	49823	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.542876959 CEST	443	49823	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.561764956 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.561785936 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.561794043 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.561878920 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.561878920 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.561933041 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.562572956 CEST	49824	443	192.168.2.16	150.230.193.202
Jul 3, 2024 16:44:24.562598944 CEST	443	49824	150.230.193.202	192.168.2.16
Jul 3, 2024 16:44:24.688949108 CEST	49825	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:24.689191103 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:24.689235926 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:24.689311028 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:24.689714909 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:24.689724922 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:24.691051960 CEST	49816	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:24.693903923 CEST	80	49825	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:24.693988085 CEST	49825	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:24.695954084 CEST	80	49816	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:24.997927904 CEST	80	49816	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:25.048021078 CEST	49816	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:25.565552950 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:25.565900087 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:25.565927029 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:25.566287041 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:25.566652060 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:25.566711903 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:25.566798925 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:25.612502098 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.099309921 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.099514008 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.099595070 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.099598885 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.099699974 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.100183964 CEST	49826	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.100253105 CEST	443	49826	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.110575914 CEST	49706	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:44:26.111005068 CEST	49828	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.111066103 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.111160994 CEST	49828	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.111378908 CEST	49828	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.111397028 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.116347075 CEST	80	49706	153.127.61.138	192.168.2.16
Jul 3, 2024 16:44:26.116440058 CEST	49706	80	192.168.2.16	153.127.61.138
Jul 3, 2024 16:44:26.972296953 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.972652912 CEST	49828	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.972676039 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.973009109 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.973412037 CEST	49828	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.973464966 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.973577023 CEST	49828	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:26.988719940 CEST	80	49816	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:26.992449999 CEST	49816	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:27.020500898 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:27.139413118 CEST	49816	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:27.144418955 CEST	80	49816	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:27.508857012 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:27.508979082 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:27.509038925 CEST	49828	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:27.512366056 CEST	49828	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:27.512392998 CEST	443	49828	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:27.527779102 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:27.527837992 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:27.527914047 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:27.529606104 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:27.529625893 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:28.395020962 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:28.395416021 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:28.395447969 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:28.395807028 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:28.396339893 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:28.396400928 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:28.396401882 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:28.436515093 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:28.445010900 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:29.739635944 CEST	49830	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:44:29.739696980 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:44:29.739773989 CEST	49830	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:44:29.740082026 CEST	49830	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:44:29.740094900 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:44:30.384907961 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:44:30.385237932 CEST	49830	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:44:30.385263920 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:44:30.385601044 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:44:30.385910988 CEST	49830	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:44:30.385973930 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:44:30.441009998 CEST	49830	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:44:32.962348938 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:32.962475061 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:32.962547064 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:32.963253975 CEST	49829	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:32.963282108 CEST	443	49829	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:34.676220894 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:34.676279068 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:34.676398993 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:34.676625013 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:34.676639080 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:34.802521944 CEST	49832	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:34.802541018 CEST	443	49832	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:34.802642107 CEST	49832	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:34.802848101 CEST	49832	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:34.802860975 CEST	443	49832	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.557938099 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.558214903 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:35.558247089 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.558604956 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.559012890 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:35.559076071 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.559257984 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:35.604507923 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.671092033 CEST	443	49832	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.671463013 CEST	49832	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:35.671479940 CEST	443	49832	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.671870947 CEST	443	49832	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.672276020 CEST	49832	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:35.672362089 CEST	443	49832	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:35.727005005 CEST	49832	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:36.093312025 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:36.093383074 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:36.093473911 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:36.093483925 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:36.093529940 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:36.094403982 CEST	49831	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:44:36.094424963 CEST	443	49831	49.212.213.242	192.168.2.16
Jul 3, 2024 16:44:40.285797119 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:44:40.285892963 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:44:40.286000013 CEST	49830	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:44:41.126795053 CEST	49830	443	192.168.2.16	142.250.184.228
Jul 3, 2024 16:44:41.126833916 CEST	443	49830	142.250.184.228	192.168.2.16
Jul 3, 2024 16:45:04.382291079 CEST	49699	80	192.168.2.16	192.229.221.95
Jul 3, 2024 16:45:04.388772011 CEST	80	49699	192.229.221.95	192.168.2.16
Jul 3, 2024 16:45:04.388840914 CEST	49699	80	192.168.2.16	192.229.221.95
Jul 3, 2024 16:45:09.699350119 CEST	49825	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:45:09.704752922 CEST	80	49825	49.212.213.242	192.168.2.16
Jul 3, 2024 16:45:20.682230949 CEST	49832	443	192.168.2.16	49.212.213.242
Jul 3, 2024 16:45:20.682261944 CEST	443	49832	49.212.213.242	192.168.2.16
Jul 3, 2024 16:45:25.127688885 CEST	49825	80	192.168.2.16	49.212.213.242
Jul 3, 2024 16:45:25.133820057 CEST	80	49825	49.212.213.242	192.168.2.16
Jul 3, 2024 16:45:25.133903980 CEST	49825	80	192.168.2.16	49.212.213.242

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 16:43:24.917469978 CEST	59439	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:24.917860985 CEST	59926	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:24.929255009 CEST	53	55402	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:24.958677053 CEST	53	54729	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:25.436573029 CEST	53	59439	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:25.441972017 CEST	53	59926	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:26.343682051 CEST	53	51724	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:26.354125977 CEST	62076	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:26.354126930 CEST	55584	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:26.834638119 CEST	53	55584	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:27.101969004 CEST	53	62076	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:27.942495108 CEST	54222	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:27.942640066 CEST	52513	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:28.466908932 CEST	53	52513	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:28.708568096 CEST	53	54222	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:29.676158905 CEST	54840	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:29.676400900 CEST	51665	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:29.683392048 CEST	53	54840	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:29.684351921 CEST	53	51665	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:31.658263922 CEST	58667	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:31.658416986 CEST	56701	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:32.206506968 CEST	53	58667	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:32.380846024 CEST	53	56701	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:39.858556032 CEST	62451	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:39.858892918 CEST	54721	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:40.861732960 CEST	53	62451	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:40.862059116 CEST	53	54721	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:43.402391911 CEST	53	53043	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:44.373383999 CEST	64153	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:44.373608112 CEST	55768	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:44.619811058 CEST	53	64153	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:45.935484886 CEST	53	55768	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:51.733408928 CEST	54386	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:51.733536005 CEST	49631	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:51.733774900 CEST	59276	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:51.733884096 CEST	62482	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:51.744394064 CEST	53	62482	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:51.744421959 CEST	53	54386	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:51.744432926 CEST	53	49631	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:51.749156952 CEST	53	59276	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:53.085597992 CEST	50669	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:53.085737944 CEST	53318	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:53.092319012 CEST	58609	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:53.092458963 CEST	57646	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:43:53.097995996 CEST	53	53318	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:53.099565029 CEST	53	50669	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:53.105674028 CEST	53	58609	1.1.1.1	192.168.2.16
Jul 3, 2024 16:43:53.108273029 CEST	53	57646	1.1.1.1	192.168.2.16
Jul 3, 2024 16:44:02.431947947 CEST	53	64774	1.1.1.1	192.168.2.16
Jul 3, 2024 16:44:16.279473066 CEST	60067	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:44:16.279683113 CEST	65382	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:44:17.296411037 CEST	57860	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:44:17.296580076 CEST	58017	53	192.168.2.16	1.1.1.1
Jul 3, 2024 16:44:17.539443016 CEST	53	65382	1.1.1.1	192.168.2.16
Jul 3, 2024 16:44:17.771804094 CEST	53	60067	1.1.1.1	192.168.2.16
Jul 3, 2024 16:44:18.295720100 CEST	53	57860	1.1.1.1	192.168.2.16
Jul 3, 2024 16:44:18.762192011 CEST	53	58017	1.1.1.1	192.168.2.16
Jul 3, 2024 16:44:24.826906919 CEST	53	50979	1.1.1.1	192.168.2.16
Jul 3, 2024 16:44:24.928708076 CEST	53	63661	1.1.1.1	192.168.2.16
Jul 3, 2024 16:44:30.255613089 CEST	138	138	192.168.2.16	192.168.2.255
Jul 3, 2024 16:44:53.249368906 CEST	53	58713	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 3, 2024 16:43:32.380930901 CEST	192.168.2.16	1.1.1.1	c222	(Port unreachable)	Destination Unreachable
Jul 3, 2024 16:43:45.935570955 CEST	192.168.2.16	1.1.1.1	c230	(Port unreachable)	Destination Unreachable
Jul 3, 2024 16:44:18.295802116 CEST	192.168.2.16	1.1.1.1	c205	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 16:43:24.917469978 CEST	192.168.2.16	1.1.1.1	0x8a70	Standard query (0)	myssl.jp	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:24.917860985 CEST	192.168.2.16	1.1.1.1	0x6666	Standard query (0)	myssl.jp	65	IN (0x0001)	false
Jul 3, 2024 16:43:26.354125977 CEST	192.168.2.16	1.1.1.1	0x43e9	Standard query (0)	www.myssl.jp	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:26.354126930 CEST	192.168.2.16	1.1.1.1	0xe859	Standard query (0)	www.myssl.jp	65	IN (0x0001)	false
Jul 3, 2024 16:43:27.942495108 CEST	192.168.2.16	1.1.1.1	0xa290	Standard query (0)	www.myssl.jp	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:27.942640066 CEST	192.168.2.16	1.1.1.1	0x2993	Standard query (0)	www.myssl.jp	65	IN (0x0001)	false
Jul 3, 2024 16:43:29.676158905 CEST	192.168.2.16	1.1.1.1	0x9aed	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:29.676400900 CEST	192.168.2.16	1.1.1.1	0xaf4f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 16:43:31.658263922 CEST	192.168.2.16	1.1.1.1	0x50e0	Standard query (0)	www.myssl.jp	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:31.658416986 CEST	192.168.2.16	1.1.1.1	0xd64e	Standard query (0)	www.myssl.jp	65	IN (0x0001)	false
Jul 3, 2024 16:43:39.858556032 CEST	192.168.2.16	1.1.1.1	0xdaba	Standard query (0)	www.netgroove.ne.jp	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:39.858892918 CEST	192.168.2.16	1.1.1.1	0xbac1	Standard query (0)	www.netgroove.ne.jp	65	IN (0x0001)	false
Jul 3, 2024 16:43:44.373383999 CEST	192.168.2.16	1.1.1.1	0xa47d	Standard query (0)	www.netgroove.ne.jp	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:44.373608112 CEST	192.168.2.16	1.1.1.1	0x11cf	Standard query (0)	www.netgroove.ne.jp	65	IN (0x0001)	false
Jul 3, 2024 16:43:51.733408928 CEST	192.168.2.16	1.1.1.1	0xe063	Standard query (0)	www21.a8.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:51.733536005 CEST	192.168.2.16	1.1.1.1	0x5822	Standard query (0)	www21.a8.net	65	IN (0x0001)	false
Jul 3, 2024 16:43:51.733774900 CEST	192.168.2.16	1.1.1.1	0xd0e5	Standard query (0)	www12.a8.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:51.733884096 CEST	192.168.2.16	1.1.1.1	0xe12f	Standard query (0)	www12.a8.net	65	IN (0x0001)	false
Jul 3, 2024 16:43:53.085597992 CEST	192.168.2.16	1.1.1.1	0xa077	Standard query (0)	www12.a8.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:53.085737944 CEST	192.168.2.16	1.1.1.1	0xd188	Standard query (0)	www12.a8.net	65	IN (0x0001)	false
Jul 3, 2024 16:43:53.092319012 CEST	192.168.2.16	1.1.1.1	0xc5cf	Standard query (0)	www21.a8.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:53.092458963 CEST	192.168.2.16	1.1.1.1	0x15e2	Standard query (0)	www21.a8.net	65	IN (0x0001)	false
Jul 3, 2024 16:44:16.279473066 CEST	192.168.2.16	1.1.1.1	0xdc94	Standard query (0)	www.netgroove.ne.jp	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:44:16.279683113 CEST	192.168.2.16	1.1.1.1	0x84a4	Standard query (0)	www.netgroove.ne.jp	65	IN (0x0001)	false
Jul 3, 2024 16:44:17.296411037 CEST	192.168.2.16	1.1.1.1	0x5743	Standard query (0)	www.netgroove.ne.jp	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:44:17.296580076 CEST	192.168.2.16	1.1.1.1	0xf71f	Standard query (0)	www.netgroove.ne.jp	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 16:43:25.436573029 CEST	1.1.1.1	192.168.2.16	0x8a70	No error (0)	myssl.jp	153.127.61.138	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:27.101969004 CEST	1.1.1.1	192.168.2.16	0x43e9	No error (0)	www.myssl.jp	153.127.61.138	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:28.708568096 CEST	1.1.1.1	192.168.2.16	0xa290	No error (0)	www.myssl.jp	153.127.61.138	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:29.683392048 CEST	1.1.1.1	192.168.2.16	0x9aed	No error (0)	www.google.com	142.250.184.228	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:29.684351921 CEST	1.1.1.1	192.168.2.16	0xaf4f	No error (0)	www.google.com		65	IN (0x0001)	false
Jul 3, 2024 16:43:32.206506968 CEST	1.1.1.1	192.168.2.16	0x50e0	No error (0)	www.myssl.jp	153.127.61.138	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:40.861732960 CEST	1.1.1.1	192.168.2.16	0xdaba	No error (0)	www.netgroove.ne.jp	49.212.213.242	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:44.619811058 CEST	1.1.1.1	192.168.2.16	0xa47d	No error (0)	www.netgroove.ne.jp	49.212.213.242	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:51.744421959 CEST	1.1.1.1	192.168.2.16	0xe063	No error (0)	www21.a8.net	150.230.193.202	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:51.749156952 CEST	1.1.1.1	192.168.2.16	0xd0e5	No error (0)	www12.a8.net	150.230.193.202	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:53.099565029 CEST	1.1.1.1	192.168.2.16	0xa077	No error (0)	www12.a8.net	150.230.193.202	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:43:53.105674028 CEST	1.1.1.1	192.168.2.16	0xc5cf	No error (0)	www21.a8.net	150.230.193.202	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:44:17.771804094 CEST	1.1.1.1	192.168.2.16	0xdc94	No error (0)	www.netgroove.ne.jp	49.212.213.242	A (IP address)	IN (0x0001)	false
Jul 3, 2024 16:44:18.295720100 CEST	1.1.1.1	192.168.2.16	0x5743	No error (0)	www.netgroove.ne.jp	49.212.213.242	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.myssl.jp

https:

www.netgroove.ne.jp

www12.a8.net

www21.a8.net

fs.microsoft.com

slscr.update.microsoft.com

myssl.jp

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49705	153.127.61.138	80	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 16:43:25.447707891 CEST	423	OUT	GET / HTTP/1.1 Host: myssl.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 16:43:26.350830078 CEST	490	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 03 Jul 2024 14:46:46 GMT Server: Apache Location: http://www.myssl.jp/ Content-Length: 286 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 79 73 73 6c 2e 6a 70 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 6d 79 73 73 6c 2e 6a 70 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.myssl.jp/">here</a>.</p><hr><address>Apache Server at myssl.jp Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49707	153.127.61.138	80	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 16:43:27.108582973 CEST	427	OUT	GET / HTTP/1.1 Host: www.myssl.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 16:43:27.939754963 CEST	460	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 14:46:47 GMT Server: Apache Location: https://www.myssl.jp/ Content-Length: 267 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 79 73 73 6c 2e 6a 70 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 6d 79 73 73 6c 2e 6a 70 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.myssl.jp/">here</a>.</p><hr><address>Apache Server at www.myssl.jp Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49706	153.127.61.138	80	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 16:44:10.448998928 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49815	49.212.213.242	80	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 16:44:17.780061007 CEST	453	OUT	GET /mydomain/index.html HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 16:44:18.652256966 CEST	540	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 14:44:18 GMT Server: Apache Location: https://www.netgroove.ne.jp/mydomain/index.html Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 237 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 4f 4b 4f c3 30 0c be f7 57 98 de 89 bb 71 41 c8 44 82 b5 13 93 06 54 a2 3b 70 0c 8b 47 8a 96 87 d2 6c 65 ff 9e 74 db 91 8b 65 fb f3 f7 30 dd d4 ef 8b ee b3 6d e0 a5 7b 5d 43 bb 79 5e af 16 50 de 22 ae 9a 6e 89 58 77 f5 05 99 8b 0a b1 79 2b 65 41 26 d9 bd 24 c3 4a e7 21 f5 69 cf f2 ae 9a c3 d2 1f 9c 26 bc 2c 0a c2 f3 01 7d 79 7d 9a 38 33 79 c5 73 57 50 90 9d 61 d0 7e 7b b0 ec 12 18 35 80 f5 47 d6 40 0a 4c e4 dd 63 69 52 0a c3 03 e2 38 8e c2 71 fa 8e 3e e3 b9 13 3f 01 ed 49 7b ab 7a 87 bd d3 fc 2b a6 3c a5 34 1c 99 50 49 41 18 26 c3 98 8b d2 3a f2 30 c8 a7 a0 b6 d9 ef 83 e3 91 23 a8 04 ff a8 42 eb 63 82 fb 2a 6b 5c 59 f9 87 73 fa 9c 79 fa b8 f8 03 37 b1 e4 d8 2c 01 00 00 Data Ascii: mOKO0WqADT;pGlete0m{]Cy^P"nXwy+eA&$J!i&,}y}83ysWPa~{5G@LciR8q>?I{z+<4PIA&:0#Bc*k\Ysy7,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49816	49.212.213.242	80	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 16:44:24.691051960 CEST	451	OUT	GET /design/index.html HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 16:44:24.997927904 CEST	536	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 14:44:24 GMT Server: Apache Location: https://www.netgroove.ne.jp/design/index.html Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 235 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 4f 4d 4f c3 30 0c bd f7 57 98 de 89 bb 71 41 c8 44 82 b5 13 93 06 54 a2 3b 70 0c 8b b7 14 ad 49 94 64 2b fc 7b d2 6d 47 2e 96 ed e7 f7 61 ba a9 df 17 dd 67 db c0 4b f7 ba 86 76 f3 bc 5e 2d a0 bc 45 5c 35 dd 12 b1 ee ea 0b 32 17 15 62 f3 56 ca 82 4c 1a 0e 92 0c 2b 9d 87 d4 a7 03 cb bb 6a 0e 4b 77 b4 9a f0 b2 28 08 cf 07 f4 e5 f4 ef c4 99 c9 2b 9e bb 82 bc ec 0c 83 76 db e3 c0 36 81 51 11 06 77 62 0d a4 c0 04 de 3d 96 26 25 1f 1f 10 c7 71 14 96 d3 3e b8 8c e7 4e 7c 7b d4 1c fb bd c5 de 6a fe 11 53 9a 52 1a 0e 4c a8 a4 20 f4 93 5d c8 45 69 1d 38 46 f9 e4 d5 36 bb 7d 70 38 71 00 95 e0 1f 4d 68 5d 48 70 5f 65 8d 2b 2b 7f 70 ce 9e 13 4f ff 16 7f 4f 01 55 cc 2a 01 00 00 Data Ascii: mOMO0WqADT;pId+{mG.agKv^-E\52bVL+jKw(+v6Qwb=&%q>N\|{jSRL ]Ei8F6}p8qMh]Hp_e++pOOU*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49825	49.212.213.242	80	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 16:45:09.699350119 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49711	153.127.61.138	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:29 UTC	655	OUT	GET / HTTP/1.1 Host: www.myssl.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:30 UTC	238	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:46:49 GMT Server: Apache Last-Modified: Thu, 13 Aug 2020 07:44:18 GMT ETag: "62009-2ad-5acbd78c4b4ac" Accept-Ranges: bytes Content-Length: 685 Connection: close Content-Type: text/html
2024-07-03 14:43:30 UTC	685	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 0a 3c 68 74 6d 6c 3e 0a 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 65 75 63 2d 6a 70 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 41 64 6f 62 65 20 47 6f 4c 69 76 65 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 6d 79 53 53 4c 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 0a 09 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 66 66 66 66 66 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html;charset=euc-jp"><meta name="generator" content="Adobe GoLive"><title>mySSL</title></head><body bgcolor="#fffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49714	153.127.61.138	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:31 UTC	585	OUT	GET /images/myssl.gif HTTP/1.1 Host: www.myssl.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.myssl.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:31 UTC	239	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:46:51 GMT Server: Apache Last-Modified: Thu, 03 Feb 2005 17:22:41 GMT ETag: "6200c-fb2-3ef389cfa7a40" Accept-Ranges: bytes Content-Length: 4018 Connection: close Content-Type: image/gif
2024-07-03 14:43:31 UTC	4018	IN	Data Raw: 47 49 46 38 39 61 78 01 6c 00 d5 00 00 ff b3 40 ff e5 bf ff f5 ef ff 70 10 ff cc 7f ff 83 30 ff c5 9f ff 9f 10 ff e2 cf ff a0 60 ff f9 ef ff ec cf ff ac 30 ff c0 60 ff f2 df ff d9 bf ff 8d 40 ff b2 7f ff a6 20 ff 79 20 ff d8 9f ff ec df ff c6 70 ff b9 50 ff a9 70 ff df af ff bc 8f ff cf af ff d2 8f ff 96 50 ff 99 00 ff 66 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 78 01 6c 00 00 06 ff 40 90 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 Data Ascii: GIF89axl@p0`0`@ y pPpPf!,xl@pH,rl:tJZvz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49715	153.127.61.138	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:32 UTC	580	OUT	GET /favicon.ico HTTP/1.1 Host: www.myssl.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.myssl.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:33 UTC	260	IN	HTTP/1.1 404 Not Found Date: Wed, 03 Jul 2024 14:46:52 GMT Server: Apache Last-Modified: Thu, 03 Feb 2005 17:33:22 GMT ETag: "62005-51e-3ef38c32f5c80;5ad58af528f3f" Accept-Ranges: bytes Content-Length: 1310 Connection: close Content-Type: text/html
2024-07-03 14:43:33 UTC	1310	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 73 68 69 66 74 5f 6a 69 73 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 43 6f 70 79 72 69 67 68 74 22 20 56 41 4c 55 45 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 30 30 2c 20 43 6f 62 61 6c 74 20 4e 65 74 77 6f 72 6b 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 22 3e 0a 09 09 3c 21 2d 2d 20 6c 6f 63 61 6c 65 2d 73 65 6e 73 69 74 69 76 65 20 2d 2d 3e 0a 09 09 3c 74 69 74 6c 65 3e 83 74 83 40 83 43 83 8b 82 aa 8c a9 82 c2 82 a9 82 e8 82 dc 82 b9 82 f1 3c 2f 74 69 74 6c 65 3e Data Ascii: <html><head><meta http-equiv="content-type" content="text/html;charset=shift_jis"><meta name="Copyright" VALUE="Copyright (C) 2000, Cobalt Networks, Inc. All rights reserved.">... locale-sensitive --><title>t@C</title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49716	23.43.61.160	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 14:43:33 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=91544 Date: Wed, 03 Jul 2024 14:43:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49717	153.127.61.138	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:33 UTC	352	OUT	GET /images/myssl.gif HTTP/1.1 Host: www.myssl.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:33 UTC	239	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:46:53 GMT Server: Apache Last-Modified: Thu, 03 Feb 2005 17:22:41 GMT ETag: "6200c-fb2-3ef389cfa7a40" Accept-Ranges: bytes Content-Length: 4018 Connection: close Content-Type: image/gif
2024-07-03 14:43:33 UTC	4018	IN	Data Raw: 47 49 46 38 39 61 78 01 6c 00 d5 00 00 ff b3 40 ff e5 bf ff f5 ef ff 70 10 ff cc 7f ff 83 30 ff c5 9f ff 9f 10 ff e2 cf ff a0 60 ff f9 ef ff ec cf ff ac 30 ff c0 60 ff f2 df ff d9 bf ff 8d 40 ff b2 7f ff a6 20 ff 79 20 ff d8 9f ff ec df ff c6 70 ff b9 50 ff a9 70 ff df af ff bc 8f ff cf af ff d2 8f ff 96 50 ff 99 00 ff 66 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 78 01 6c 00 00 06 ff 40 90 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 Data Ascii: GIF89axl@p0`0`@ y pPpPf!,xl@pH,rl:tJZvz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49718	23.43.61.160	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 14:43:33 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=91570 Date: Wed, 03 Jul 2024 14:43:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 14:43:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49719	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:36 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=owV+7+8G3xwy2uk&MD=LHCrtama HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-03 14:43:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 7ee8315c-13a2-48d5-a28f-b03c52db6eda MS-RequestId: 04e4e78b-3d11-4a40-b1e1-62e98e5f1b51 MS-CV: rCus/cYQHkehkrLa.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 03 Jul 2024 14:43:35 GMT Connection: close Content-Length: 24490
2024-07-03 14:43:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-07-03 14:43:37 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49720	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:42 UTC	708	OUT	GET /mydomain HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.myssl.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:42 UTC	244	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 03 Jul 2024 14:43:42 GMT Server: Apache Location: https://www.netgroove.ne.jp/mydomain/ Vary: Accept-Encoding Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-07-03 14:43:42 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 65 74 67 72 6f 6f 76 65 2e 6e 65 2e 6a 70 2f 6d 79 64 6f 6d 61 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.netgroove.ne.jp/mydomain/">here</a>.</p><hr><address>Apache Serv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:42 UTC	709	OUT	GET /mydomain/ HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.myssl.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:42 UTC	222	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:42 GMT Server: Apache X-Powered-By: PHP/5.6.29 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html;charset=Shift_JIS
2024-07-03 14:43:42 UTC	6	IN	Data Raw: 32 66 34 35 0d 0a Data Ascii: 2f45
2024-07-03 14:43:42 UTC	12101	IN	Data Raw: 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 78 2d 73 6a 69 73 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 83 68 83 81 83 43 83 93 2c 83 8c 83 93 83 5e 83 8b 83 54 81 5b 83 6f 81 5b 2c 83 7a 81 5b 83 80 83 79 81 5b 83 57 83 66 83 55 83 43 83 93 82 f0 82 a8 8e e8 8d a0 89 bf 8a 69 82 c5 92 f1 8b 9f 82 b5 82 c4 82 a2 82 dc 82 b7 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 83 68 83 81 83 43 83 93 2c 83 8c 83 Data Ascii: <html lang="ja"><head><meta http-equiv="content-type" content="text/html;charset=x-sjis"><meta name="description" content="hC,^T[o[,z[y[WfUCi"><meta name="keywords" content="hC,
2024-07-03 14:43:42 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-03 14:43:42 UTC	6	IN	Data Raw: 38 37 66 37 0d 0a Data Ascii: 87f7
2024-07-03 14:43:42 UTC	16384	IN	Data Raw: 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 35 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 22 33 22 20 77 69 64 74 68 3d 22 39 39 25 22 20 62 67 63 6f 6c 6f 72 3d 22 23 30 30 63 63 66 66 22 3e 0a 20 20 3c 74 72 3e 0a 20 20 20 20 3c 74 64 20 62 67 63 6f 6c 6f 72 3d 22 23 63 63 66 66 66 66 22 20 63 6c 61 73 73 3d 22 66 31 30 22 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 81 9c 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 31 30 70 78 22 20 68 72 65 66 3d 22 2f 6d 79 64 6f 6d 61 69 6e 2f 69 6e 66 6f 6e 65 77 2e 68 74 6d 6c 23 32 30 32 34 30 31 22 3e 5b 32 30 32 34 2e 30 31 5d 83 68 83 81 83 43 83 93 82 cc 89 bf 8a 69 89 fc 92 e8 82 c9 82 c2 82 ab 82 dc 82 b5 82 c4 3c 2f 61 3e 3c 62 72 3e 20 20 20 20 Data Ascii: <table border="0" cellpadding="5" cellspacing="3" width="99%" bgcolor="#00ccff"> <tr> <td bgcolor="#ccffff" class="f10"> <p><a class="link10px" href="/mydomain/infonew.html#202401">[2024.01]hCi</a><br>
2024-07-03 14:43:43 UTC	16384	IN	Data Raw: 09 09 09 09 09 09 3c 2f 74 64 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 74 72 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 74 72 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 74 64 20 63 6f 6c 73 70 61 6e 3d 22 33 22 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 26 6e 62 73 70 3b 3c 2f 74 64 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 74 72 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 74 61 62 6c 65 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 30 22 20 63 65 6c 6c 73 70 61 63 Data Ascii: </td></tr><tr><td colspan="3" bgcolor="white"> </td></tr></table><table border="0" cellpadding="0" cellspac
2024-07-03 14:43:43 UTC	2039	IN	Data Raw: 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 64 2e 6a 70 2e 61 70 2e 76 61 6c 75 65 63 6f 6d 6d 65 72 63 65 2e 63 6f 6d 2f 73 65 72 76 6c 65 74 2f 6a 73 62 61 6e 6e 65 72 3f 73 69 64 3d 32 30 33 30 38 30 32 26 70 69 64 3d 38 37 30 30 39 33 35 35 36 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6e 6f 73 63 72 69 70 74 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6b 2e 6a 70 2e 61 70 2e 76 61 6c 75 65 63 6f 6d 6d 65 72 63 65 Data Ascii: " marginwidth="0"><script language="javascript" src="http://ad.jp.ap.valuecommerce.com/servlet/jsbanner?sid=2030802&pid=870093556"></script><noscript><a href="http://ck.jp.ap.valuecommerce
2024-07-03 14:43:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-03 14:43:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49723	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:43 UTC	554	OUT	GET /font.css HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:44 UTC	283	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:44 GMT Server: Apache Last-Modified: Sat, 07 Jun 2008 20:13:34 GMT ETag: "2e0096-779-44f1936805780" Accept-Ranges: bytes Content-Length: 1913 Vary: User-Agent Connection: close Content-Type: text/css X-Pad: avoid browser bug
2024-07-03 14:43:44 UTC	1913	IN	Data Raw: 62 6f 64 79 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 66 20 75 72 6c 28 22 69 6d 61 67 65 2f 62 67 30 34 30 39 2e 67 69 66 22 29 20 7d 0a 2e 77 68 69 74 65 20 20 20 20 20 20 20 20 7b 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 20 7d 0a 2e 6c 69 6e 6b 62 61 73 69 63 20 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 20 7d 0a 2e 6c 69 6e 6b 31 30 70 78 20 20 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 20 7d 0a 2e 6f 72 61 6e 67 65 20 20 20 20 20 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 39 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 20 7d 0a 2e 6e 65 77 73 20 Data Ascii: body { color: #444; font-size: 12px;background: #39f url("image/bg0409.gif") }.white { color: white; font-size: 10px }.linkbasic { font-size: 12px }.link10px { font-size: 10px }.orange { color: #f90; font-size: 10px }.news

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49725	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:43 UTC	561	OUT	GET /GeneratedItems/CSScriptLib.js HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:44 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:44 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:14:34 GMT ETag: "2e00dc-c678-4216fd31fb680" Accept-Ranges: bytes Content-Length: 50808 Vary: User-Agent Connection: close Content-Type: text/javascript
2024-07-03 14:43:44 UTC	16384	IN	Data Raw: 2f 2a 20 2d 2d 20 41 64 6f 62 65 20 47 6f 4c 69 76 65 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 2f 2a 20 2d 2d 20 47 6c 6f 62 61 6c 20 46 75 6e 63 74 69 6f 6e 73 20 2a 2f 0a 43 53 53 74 61 74 65 41 72 72 61 79 20 3d 20 6e 65 77 20 4f 62 6a 65 63 74 3b 0a 43 53 43 6f 6f 6b 69 65 41 72 72 61 79 20 3d 20 6e 65 77 20 4f 62 6a 65 63 74 3b 0a 43 53 43 6f 6f 6b 69 65 56 61 6c 41 72 72 61 79 20 3d 20 6e 65 77 20 4f 62 6a 65 63 74 3b 0a 66 75 6e 63 74 69 6f 6e 20 43 53 57 72 69 74 65 43 6f 6f 6b 69 65 28 61 63 74 69 6f 6e 29 20 7b 0a 09 76 61 72 20 6e 61 6d 65 20 20 20 3d 20 22 44 46 54 22 20 2b 20 61 63 74 69 6f 6e 5b 31 5d 3b 0a 09 76 61 72 20 68 72 73 20 20 20 20 3d 20 61 63 74 69 6f 6e 5b 32 5d 3b 0a 09 76 61 72 20 70 61 74 68 20 20 Data Ascii: /* -- Adobe GoLive JavaScript Library // -- Global Functions */CSStateArray = new Object;CSCookieArray = new Object;CSCookieValArray = new Object;function CSWriteCookie(action) {var name = "DFT" + action[1];var hrs = action[2];var path
2024-07-03 14:43:44 UTC	16384	IN	Data Raw: 09 73 65 71 2e 61 63 74 69 6f 6e 73 5b 33 2a 69 20 2b 20 32 5d 20 3d 20 6c 6f 6f 70 43 6f 75 6e 74 3b 20 43 53 4c 6f 6f 70 49 73 52 75 6e 6e 69 6e 67 20 3d 20 74 72 75 65 3b 0a 09 09 09 09 09 43 53 41 63 74 69 6f 6e 28 6e 65 77 20 41 72 72 61 79 28 73 65 71 2e 61 63 74 69 6f 6e 73 5b 33 2a 69 20 2b 20 30 5d 29 29 3b 20 63 6f 6e 74 69 6e 75 65 4c 6f 6f 70 20 3d 20 74 72 75 65 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 20 63 6f 6e 74 69 6e 75 65 4c 6f 6f 70 20 3d 20 74 72 75 65 3b 20 62 72 65 61 6b 3b 20 7d 0a 09 09 7d 0a 09 7d 0a 09 72 65 74 75 72 6e 20 63 6f 6e 74 69 6e 75 65 4c 6f 6f 70 3b 0a 7d 09 09 0a 66 75 6e 63 74 69 6f 6e 20 43 53 53 65 71 46 75 6e 63 74 69 6f 6e 28 66 63 74 49 6e 66 6f 29 0a 7b 0a 09 76 61 72 20 73 65 71 20 3d 20 66 Data Ascii: seq.actions[3i + 2] = loopCount; CSLoopIsRunning = true;CSAction(new Array(seq.actions[3i + 0])); continueLoop = true;}} else { continueLoop = true; break; }}}return continueLoop;}function CSSeqFunction(fctInfo){var seq = f
2024-07-03 14:43:44 UTC	16384	IN	Data Raw: 74 31 3b 0a 09 09 09 6c 32 3d 70 61 72 73 65 49 6e 74 28 6c 61 79 65 72 32 2e 6c 65 66 74 29 3b 20 74 32 3d 70 61 72 73 65 49 6e 74 28 6c 61 79 65 72 32 2e 74 6f 70 29 3b 20 72 32 3d 70 61 72 73 65 49 6e 74 28 6c 61 79 65 72 32 2e 77 69 64 74 68 29 2b 6c 32 3b 20 62 32 3d 70 61 72 73 65 49 6e 74 28 6c 61 79 65 72 32 2e 68 65 69 67 68 74 29 2b 74 32 3b 0a 09 09 09 7d 0a 09 09 65 6c 73 65 0a 09 09 09 7b 0a 09 09 09 6c 31 3d 6c 61 79 65 72 31 2e 78 3b 20 74 31 3d 6c 61 79 65 72 31 2e 79 3b 20 72 31 3d 6c 61 79 65 72 31 2e 63 6c 69 70 2e 77 69 64 74 68 2b 6c 31 3b 20 62 31 3d 6c 61 79 65 72 31 2e 63 6c 69 70 2e 68 65 69 67 68 74 2b 74 31 3b 0a 09 09 09 6c 32 3d 6c 61 79 65 72 32 2e 78 3b 20 74 32 3d 6c 61 79 65 72 32 2e 79 3b 20 72 32 3d 6c 61 79 65 72 32 2e Data Ascii: t1;l2=parseInt(layer2.left); t2=parseInt(layer2.top); r2=parseInt(layer2.width)+l2; b2=parseInt(layer2.height)+t2;}else{l1=layer1.x; t1=layer1.y; r1=layer1.clip.width+l1; b1=layer1.clip.height+t1;l2=layer2.x; t2=layer2.y; r2=layer2.
2024-07-03 14:43:44 UTC	1656	IN	Data Raw: 66 28 61 63 74 69 6f 6e 5b 35 5d 20 3d 3d 20 74 72 75 65 29 20 61 6c 65 72 74 28 61 63 74 69 6f 6e 5b 33 5d 20 2b 20 22 20 22 20 2b 20 76 69 73 69 74 73 29 0a 09 69 66 28 61 63 74 69 6f 6e 5b 36 5d 20 3d 3d 20 74 72 75 65 29 20 7b 0a 09 09 69 66 28 76 69 73 69 74 73 20 3d 3d 20 61 63 74 69 6f 6e 5b 37 5d 29 0a 09 09 61 6c 65 72 74 28 61 63 74 69 6f 6e 5b 34 5d 29 0a 09 09 7d 0a 7d 0a 09 09 0a 66 75 6e 63 74 69 6f 6e 20 43 53 56 69 73 69 74 6f 72 43 6f 6f 6b 69 65 28 61 63 74 69 6f 6e 29 20 0a 7b 0a 72 65 73 75 6c 74 61 74 20 3d 20 22 76 69 73 69 74 6f 72 22 0a 63 6f 6f 6b 69 65 6e 61 6d 65 20 3d 20 61 63 74 69 6f 6e 5b 31 5d 0a 67 6f 55 72 6c 20 3d 20 61 63 74 69 6f 6e 5b 32 5d 0a 76 61 72 20 61 72 67 20 3d 20 63 6f 6f 6b 69 65 6e 61 6d 65 20 2b 20 22 3d Data Ascii: f(action[5] == true) alert(action[3] + " " + visits)if(action[6] == true) {if(visits == action[7])alert(action[4])}}function CSVisitorCookie(action) {resultat = "visitor"cookiename = action[1]goUrl = action[2]var arg = cookiename + "=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49724	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:43 UTC	614	OUT	GET /image/topbar_basic.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:44 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:44 GMT Server: Apache Last-Modified: Sat, 31 Dec 2005 17:52:14 GMT ETag: "2e1991-76a4-4093b9c216f80" Accept-Ranges: bytes Content-Length: 30372 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:44 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 0c 03 22 00 f7 00 00 01 dd fe 02 84 fc 01 c5 fe d3 d3 d3 00 bc fe 91 b2 dd 15 da e9 01 6b fe 01 e5 fe 01 73 fe 15 c8 e9 01 63 fe 01 b4 fe 01 5b fe 02 ae fe 01 7b fe 2b d0 f7 01 53 fe 14 65 ea 15 ba e9 cb f6 fd 14 76 e9 0b d4 fe 0a cd fe ab ad b0 01 4a ea 15 4b fd 0a dd fe 09 c5 fe 01 cc f4 01 d4 f4 01 c5 f5 15 59 e8 45 d3 fb 01 dd f5 02 84 eb 15 e6 e8 12 d5 fe 01 4b fe 01 bc f5 8d eb fb 08 bd fe e4 e4 e4 12 cd fe 0a 73 fe 12 c5 fe 29 6e f0 01 dd ed ff ff ff b2 ee fc 12 dd fe 01 cd ed 01 73 f5 af d4 f2 0a 63 fe 01 c5 ed 0a 6b fe 49 8c f8 0a e5 fe 01 d5 ed 01 ec fe 89 d1 f9 09 5b fe 13 84 fd 01 e5 f5 01 6b f5 12 6b fe 12 e5 fe 01 63 f5 01 bc ed 12 bc fe 0a b4 fe 00 5b f5 01 b4 f5 6d dc f8 01 e4 ed 0a 7b fe 01 7b f5 01 73 ed 11 ad fc 01 d5 Data Ascii: GIF89a"ksc[{+SevJKYEKs)nsckI[kkc[m{{s
2024-07-03 14:43:44 UTC	13988	IN	Data Raw: 10 1c 80 30 7c c1 02 48 41 24 d8 80 09 14 b3 34 00 43 10 40 02 26 10 81 0d f8 00 1e d3 40 13 b0 00 13 d0 c0 17 7f 43 03 58 43 00 dc 41 02 34 41 03 d0 80 34 78 01 0b 0c c2 36 84 c2 08 58 c2 15 18 83 25 20 c1 2b ec 82 3a 44 00 2a 08 ff 02 0d 08 43 39 98 31 26 2c 40 15 24 c0 02 e8 41 00 7c 01 0d 3c c3 02 44 02 0e 98 c0 1d 7c c1 01 48 01 0b 64 01 24 48 82 3a 20 01 13 ac 82 13 04 82 2e f8 41 26 7c c2 02 f0 01 2f 2c 40 00 04 81 04 34 81 2f 58 c3 03 7c c1 37 c0 01 17 8c 80 14 e0 80 17 10 83 19 44 00 0d f0 82 34 7c 83 1a 20 81 19 f8 c0 01 c0 f1 02 98 c0 01 24 40 04 44 00 26 e8 41 03 8c 01 0d c0 01 23 fb c1 17 b0 40 02 1c 40 39 48 c2 15 1c 40 16 6c 83 2a 38 81 14 c0 81 17 48 81 24 70 43 04 04 00 0b d8 40 02 64 42 29 5c 81 09 64 80 0d a8 81 2e 14 f3 01 f8 81 2e d8 Data Ascii: 0\|HA$4C@&@CXCA4A4x6X% +:DC91&,@$A\|<D\|Hd$H: .A&\|/,@4/X\|7D4\| $@D&A#@@9H@l8H$pC@dB)\d..

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49722	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:43 UTC	610	OUT	GET /image/logotop2.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:44 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:44 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:34 GMT ETag: "2e1921-6d81-4216fd6b33d80" Accept-Ranges: bytes Content-Length: 28033 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:44 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 0c 03 32 00 f7 00 00 16 56 fe 2d ac f9 01 55 e7 c8 dd fc f6 fa ff d8 e8 fe 16 e6 fd 01 e6 e8 65 aa ff 42 85 d8 71 96 ff 94 c5 fe 02 96 fd 00 c5 ff 86 bc fd 00 dd ff a5 ca fd 01 83 e7 00 cd ff 01 b4 ff 16 83 fd 00 7b ff 01 d5 ff 15 d7 e8 00 73 fe 01 6b ff 15 c8 e7 00 bc ff 16 67 e8 00 e5 ff 15 b7 e7 16 4b fd 15 75 e7 b8 d8 fe 4d 9e ff 00 5b ff 5a a3 ff 00 63 ff 00 53 ff 01 aa e7 14 59 e7 01 4b e7 00 4b fe ec f5 ff 00 83 ff 2f 74 fa 16 ac fe 16 e5 e8 78 b4 fe 4f db fb ca e4 fe 03 97 e7 e4 ee fe 47 7a fc 83 a5 fe 45 8b e4 45 87 fe 00 ad ff 12 b4 ff 35 95 fd 12 dd ff 0a dd fe 48 93 ed 52 9e ff a4 c5 ee 01 dd e5 00 c5 f5 0a 7b ff 00 dd f5 13 81 e8 15 9a fe 12 bc fe 0a c5 fe 00 bc f5 0a d5 ff 01 73 ed 24 87 fd 12 d5 ff 98 b8 fe 00 cd e5 0a 73 Data Ascii: GIF89a2V-UeBq{skgKuM[ZcSYKK/txOGzEE5HR{s$s
2024-07-03 14:43:44 UTC	11649	IN	Data Raw: 76 bb 36 78 d3 76 a4 d6 16 6c cb 0f 84 47 ea 6d 87 80 8f e6 f7 f4 b0 b1 91 0d 97 49 a3 b4 4a b3 ff b4 4b c3 b4 4c d3 b4 4d 4b 00 4e eb 34 4f 37 80 4f 03 b5 50 13 b5 51 23 b5 52 33 b5 53 43 b5 54 53 35 17 58 35 56 4f 81 56 73 b5 57 83 b5 58 93 b5 59 a3 b5 5a b3 b5 5b c3 b5 07 34 80 5c d3 b5 5d 0b 54 5e b7 ac 15 c4 42 03 6c 40 2b b4 01 42 de 9c 01 10 5d 39 b8 e0 03 bc 80 15 f0 55 d4 09 c3 20 bc 40 03 a4 c1 15 98 41 10 34 c1 23 10 c1 37 34 c0 23 14 43 07 f4 c0 2b 68 54 10 e4 00 c5 06 81 0b ac 81 3e 99 03 15 84 82 32 70 ec 03 f4 6b 1b 1c 00 12 f4 81 0e 70 c1 20 78 76 4b 85 f6 68 93 94 69 a3 b6 10 5c 83 14 f4 80 01 e8 c0 1a 9c e3 49 73 95 0e d4 75 d5 92 f4 30 20 c1 30 34 40 2e 3c 80 ca 22 81 05 e0 d3 fc 49 c1 40 f5 01 e4 d1 41 07 dc de 59 4d c0 41 af f5 1a 50 Data Ascii: v6xvlGmIJKLMKN4O7OPQ#R3SCTS5X5VOVsWXYZ[4\]T^Bl@+B]9U @A4#74#C+hT>2pkp xvKhi\Isu0 04@.<"I@AYMAP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49727	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:45 UTC	607	OUT	GET /image/bg0409.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/font.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:45 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:45 GMT Server: Apache Last-Modified: Tue, 15 Nov 2005 08:48:34 GMT ETag: "2e18a3-d40-40596a7207c80" Accept-Ranges: bytes Content-Length: 3392 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:45 UTC	3392	IN	Data Raw: 47 49 46 38 39 61 0a 00 e8 03 e6 00 00 de e9 fb c7 da fc e4 ea f6 d5 e2 f6 dd e6 f6 c6 d8 f7 d6 e4 fb f8 f9 fa f6 f8 f9 a2 c2 f9 bd d3 f8 d4 e2 fb d0 e0 fb c9 dc fb cc de fb e6 ee fa f8 f8 f9 a8 c7 f9 ea f0 fa e4 ec fb ec f0 f6 da e6 fb f4 f6 fa d2 e0 f7 ee f3 fa e2 eb fa ab c9 f9 b4 cd f8 b5 cf f8 b1 cc f7 ed f2 fa d1 de f7 d9 e4 f6 c8 da f7 b2 cd f7 dc e7 fb d8 e6 fb d2 e2 fb e8 ef fa e0 ea fb bd d3 f7 c8 dc fb c3 d7 f7 f2 f2 f5 db e5 f6 a7 c5 f8 e0 e9 f6 e8 ec f6 e2 ea f6 a0 c2 f8 f0 f2 f5 ac c9 f8 ea ef f6 cc dc fc ad ca f8 ce df fb e2 ec fa ba d1 f7 f2 f4 f5 f4 f4 f5 be d4 f7 ec f1 fa ca dd fc ce e0 fb ae ca f7 f2 f5 fa f0 f3 fa c0 d5 f7 cf dd f7 f2 f4 f9 e1 e9 fb cd db f7 f0 f3 f6 c4 d7 f7 eb ef f5 b0 ca f7 ab c7 f8 f6 f7 f9 f0 f1 f5 f2 f4 fa c3 d5 Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49726	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:45 UTC	607	OUT	GET /image/t_ssl.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:45 UTC	285	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:45 GMT Server: Apache Last-Modified: Fri, 29 Jul 2005 18:31:06 GMT ETag: "2e1978-1321-3fd0e15b9ce80" Accept-Ranges: bytes Content-Length: 4897 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:45 UTC	4897	IN	Data Raw: 47 49 46 38 39 61 64 00 64 00 f7 ff 00 fe b2 7f f5 d5 bf cc cc cc f2 f2 f2 e4 e4 e4 fe ce af a2 7c 59 ff c5 9f fe ce 10 b3 8c 66 e4 5b 00 ec ec ec c9 a1 77 ef ef ef b2 b2 b2 bc a4 91 be be be ff f2 df ff f3 c3 fd f4 ef a8 81 5c f5 ae 7f d3 d3 d3 82 82 82 c9 ba b7 f9 d6 bf c4 9d 75 ff e2 cf ff ce 0c fc ee ec f1 60 00 fd bb 8f e9 e9 e9 9d 7c 5c 8d 8d 8d d9 d9 d9 86 62 45 ac 85 61 ff d0 16 ed bd 00 c6 aa 95 ff d0 13 cc aa 87 e9 5d 00 dc c4 b4 ea d4 c7 c4 99 6c ff fb f5 44 44 44 ed 85 3f ae ae ae c5 c5 c5 fe fe fe ff d0 12 e8 79 2f fd d6 3c f3 dc c4 71 71 71 9b 75 53 f5 e2 db ff d4 27 ec 5e 00 ff cc 7f a4 84 64 ff f9 ef aa 8a 72 fc e5 8a f4 6a 0f ae 88 65 c9 9c 6e f2 87 3f fc d9 4b f3 a4 6f f6 c2 9f e0 ba 8f bd 9a 75 ff ec df ec ca 40 f4 62 00 ff cd 05 f2 db Data Ascii: GIF89add\|Yf[w\u`\|\bEa]lDDD?y/<qqquS'^drjen?Kou@b

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.16	49728	49.212.213.242	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:45 UTC	649	OUT	GET /image/image/hostingindex.data_/images/hostingindex_02.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:45 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:45 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:38 GMT ETag: "2e19b5-fa-4216fda83cd80" Accept-Ranges: bytes Content-Length: 250 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:45 UTC	250	IN	Data Raw: 47 49 46 38 39 61 96 00 36 00 91 00 00 ff ff ff 99 cc ff cc ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 96 00 36 00 00 02 cb 8c 21 a9 cb ed 0f a3 9c b4 da db 80 d9 01 e1 0f 86 e2 48 0a 1a d7 95 ea ca b6 d3 c9 79 ee 4c d7 1f bc c9 f6 ce f7 26 9a f2 09 87 2c dc 81 88 4c 82 8c 41 a5 f3 f9 60 ea a0 d4 a7 b4 8a b5 02 a7 d9 6e ef ea 0d 7f b7 e2 b2 0d 6c 4e 17 c9 ea 76 09 ed 8e df d8 f2 ba 05 6e cf 43 f0 fa fe 82 ef e7 07 18 a8 37 48 68 67 78 28 97 a8 e8 c6 d8 a8 f6 08 69 26 39 29 56 69 e9 85 99 99 b5 c9 59 e5 f9 09 15 2a ea 44 5a 9a 74 8a 4a a4 ba 2a d4 ea 3a 86 c2 15 db 05 5b 7b 46 87 ab a9 bb db d9 eb 0b 0a 1c 3c 3a 4c 6c 6a 7c 9c 9a ac cc ca dc fc fa 0c 2d 1b 33 5d 3c 6b ad 85 9d ad 74 cb bd 24 fd 3d e3 2d 7e 41 5e 5e 01 53 00 00 3b Data Ascii: GIF89a6!,6!HyL&,LA`nlNvnC7Hhgx(i&9)ViYDZtJ:[{F<:Llj\|-3]<kt$=-~A^^S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49729	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:45 UTC	639	OUT	GET /image/image/whoisbg.data_/images/whoisbg_01.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:45 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:45 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:40 GMT ETag: "2e19bc-711-4216fdaa25200" Accept-Ranges: bytes Content-Length: 1809 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:45 UTC	1809	IN	Data Raw: 47 49 46 38 39 61 a0 00 1d 00 e6 00 00 ff e5 cc e6 f2 ff ff 9f 40 b3 d9 ff e7 f3 ff ff ec d9 ff f2 e5 ff d9 b2 ff f9 f2 cd e6 ff ff a6 4d cc e6 ff ff ac 59 a7 d3 ff ff b9 73 ff bf 80 ff df bf ff c6 8d ff d2 a5 e8 f4 ff ba dd ff fb fd ff d3 e9 ff ef f7 ff b4 d9 ff ab d5 ff a0 cf ff bf df ff 9b cd ff ae d6 ff d1 d1 d1 d4 e9 ff e1 f0 ff e2 f0 ff db ed ff c7 e3 ff a6 d3 ff a4 d2 ff c1 e0 ff d2 d2 d2 df ef ff f5 fa ff f3 f3 f3 e5 e5 e5 d6 d6 d6 9d cc fb b7 cc e1 cf e7 ff fe fe fe c0 cc d8 a3 cc f5 d9 ec ff f3 f9 ff cd cd cd ac d6 ff 9a cc fe da ed ff a7 cc f1 bb cc dd ef ef ef a6 cc f2 b1 cc e7 f4 f9 ff fd fd fd ee ee ee e7 e7 e7 9e cc fa bd e9 ff e8 e8 e8 b0 cc e8 f7 fb ff d7 d7 d7 9f cc f9 b6 cc e2 77 d2 ff e3 e3 e3 71 d0 ff e4 e4 e4 b5 cc e3 a0 cc f8 a4 cc Data Ascii: GIF89a@MYswq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49731	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:45 UTC	365	OUT	GET /image/topbar_basic.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:46 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:46 GMT Server: Apache Last-Modified: Sat, 31 Dec 2005 17:52:14 GMT ETag: "2e1991-76a4-4093b9c216f80" Accept-Ranges: bytes Content-Length: 30372 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:46 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 0c 03 22 00 f7 00 00 01 dd fe 02 84 fc 01 c5 fe d3 d3 d3 00 bc fe 91 b2 dd 15 da e9 01 6b fe 01 e5 fe 01 73 fe 15 c8 e9 01 63 fe 01 b4 fe 01 5b fe 02 ae fe 01 7b fe 2b d0 f7 01 53 fe 14 65 ea 15 ba e9 cb f6 fd 14 76 e9 0b d4 fe 0a cd fe ab ad b0 01 4a ea 15 4b fd 0a dd fe 09 c5 fe 01 cc f4 01 d4 f4 01 c5 f5 15 59 e8 45 d3 fb 01 dd f5 02 84 eb 15 e6 e8 12 d5 fe 01 4b fe 01 bc f5 8d eb fb 08 bd fe e4 e4 e4 12 cd fe 0a 73 fe 12 c5 fe 29 6e f0 01 dd ed ff ff ff b2 ee fc 12 dd fe 01 cd ed 01 73 f5 af d4 f2 0a 63 fe 01 c5 ed 0a 6b fe 49 8c f8 0a e5 fe 01 d5 ed 01 ec fe 89 d1 f9 09 5b fe 13 84 fd 01 e5 f5 01 6b f5 12 6b fe 12 e5 fe 01 63 f5 01 bc ed 12 bc fe 0a b4 fe 00 5b f5 01 b4 f5 6d dc f8 01 e4 ed 0a 7b fe 01 7b f5 01 73 ed 11 ad fc 01 d5 Data Ascii: GIF89a"ksc[{+SevJKYEKs)nsckI[kkc[m{{s
2024-07-03 14:43:46 UTC	13988	IN	Data Raw: 10 1c 80 30 7c c1 02 48 41 24 d8 80 09 14 b3 34 00 43 10 40 02 26 10 81 0d f8 00 1e d3 40 13 b0 00 13 d0 c0 17 7f 43 03 58 43 00 dc 41 02 34 41 03 d0 80 34 78 01 0b 0c c2 36 84 c2 08 58 c2 15 18 83 25 20 c1 2b ec 82 3a 44 00 2a 08 ff 02 0d 08 43 39 98 31 26 2c 40 15 24 c0 02 e8 41 00 7c 01 0d 3c c3 02 44 02 0e 98 c0 1d 7c c1 01 48 01 0b 64 01 24 48 82 3a 20 01 13 ac 82 13 04 82 2e f8 41 26 7c c2 02 f0 01 2f 2c 40 00 04 81 04 34 81 2f 58 c3 03 7c c1 37 c0 01 17 8c 80 14 e0 80 17 10 83 19 44 00 0d f0 82 34 7c 83 1a 20 81 19 f8 c0 01 c0 f1 02 98 c0 01 24 40 04 44 00 26 e8 41 03 8c 01 0d c0 01 23 fb c1 17 b0 40 02 1c 40 39 48 c2 15 1c 40 16 6c 83 2a 38 81 14 c0 81 17 48 81 24 70 43 04 04 00 0b d8 40 02 64 42 29 5c 81 09 64 80 0d a8 81 2e 14 f3 01 f8 81 2e d8 Data Ascii: 0\|HA$4C@&@CXCA4A4x6X% +:DC91&,@$A\|<D\|Hd$H: .A&\|/,@4/X\|7D4\| $@D&A#@@9H@l8H$pC@dB)\d..

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49730	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:45 UTC	361	OUT	GET /image/logotop2.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:46 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:46 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:34 GMT ETag: "2e1921-6d81-4216fd6b33d80" Accept-Ranges: bytes Content-Length: 28033 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:46 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 0c 03 32 00 f7 00 00 16 56 fe 2d ac f9 01 55 e7 c8 dd fc f6 fa ff d8 e8 fe 16 e6 fd 01 e6 e8 65 aa ff 42 85 d8 71 96 ff 94 c5 fe 02 96 fd 00 c5 ff 86 bc fd 00 dd ff a5 ca fd 01 83 e7 00 cd ff 01 b4 ff 16 83 fd 00 7b ff 01 d5 ff 15 d7 e8 00 73 fe 01 6b ff 15 c8 e7 00 bc ff 16 67 e8 00 e5 ff 15 b7 e7 16 4b fd 15 75 e7 b8 d8 fe 4d 9e ff 00 5b ff 5a a3 ff 00 63 ff 00 53 ff 01 aa e7 14 59 e7 01 4b e7 00 4b fe ec f5 ff 00 83 ff 2f 74 fa 16 ac fe 16 e5 e8 78 b4 fe 4f db fb ca e4 fe 03 97 e7 e4 ee fe 47 7a fc 83 a5 fe 45 8b e4 45 87 fe 00 ad ff 12 b4 ff 35 95 fd 12 dd ff 0a dd fe 48 93 ed 52 9e ff a4 c5 ee 01 dd e5 00 c5 f5 0a 7b ff 00 dd f5 13 81 e8 15 9a fe 12 bc fe 0a c5 fe 00 bc f5 0a d5 ff 01 73 ed 24 87 fd 12 d5 ff 98 b8 fe 00 cd e5 0a 73 Data Ascii: GIF89a2V-UeBq{skgKuM[ZcSYKK/txOGzEE5HR{s$s
2024-07-03 14:43:46 UTC	11649	IN	Data Raw: 76 bb 36 78 d3 76 a4 d6 16 6c cb 0f 84 47 ea 6d 87 80 8f e6 f7 f4 b0 b1 91 0d 97 49 a3 b4 4a b3 ff b4 4b c3 b4 4c d3 b4 4d 4b 00 4e eb 34 4f 37 80 4f 03 b5 50 13 b5 51 23 b5 52 33 b5 53 43 b5 54 53 35 17 58 35 56 4f 81 56 73 b5 57 83 b5 58 93 b5 59 a3 b5 5a b3 b5 5b c3 b5 07 34 80 5c d3 b5 5d 0b 54 5e b7 ac 15 c4 42 03 6c 40 2b b4 01 42 de 9c 01 10 5d 39 b8 e0 03 bc 80 15 f0 55 d4 09 c3 20 bc 40 03 a4 c1 15 98 41 10 34 c1 23 10 c1 37 34 c0 23 14 43 07 f4 c0 2b 68 54 10 e4 00 c5 06 81 0b ac 81 3e 99 03 15 84 82 32 70 ec 03 f4 6b 1b 1c 00 12 f4 81 0e 70 c1 20 78 76 4b 85 f6 68 93 94 69 a3 b6 10 5c 83 14 f4 80 01 e8 c0 1a 9c e3 49 73 95 0e d4 75 d5 92 f4 30 20 c1 30 34 40 2e 3c 80 ca 22 81 05 e0 d3 fc 49 c1 40 f5 01 e4 d1 41 07 dc de 59 4d c0 41 af f5 1a 50 Data Ascii: v6xvlGmIJKLMKN4O7OPQ#R3SCTS5X5VOVsWXYZ[4\]T^Bl@+B]9U @A4#74#C+hT>2pkp xvKhi\Isu0 04@.<"I@AYMAP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49732	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:45 UTC	649	OUT	GET /image/image/hostingindex.data_/images/hostingindex_03.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:46 UTC	283	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:46 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:38 GMT ETag: "2e19b6-145-4216fda83cd80" Accept-Ranges: bytes Content-Length: 325 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:46 UTC	325	IN	Data Raw: 47 49 46 38 39 61 96 00 13 00 c4 19 00 9f cf ff f6 fa ff b7 db ff f7 fb ff fb fd ff b1 d8 ff c7 e3 ff ad d6 ff c4 e1 ff aa d4 ff 9d ce ff b5 da ff e3 f1 ff d3 e9 ff ed f6 ff c5 e2 ff cd e6 ff a2 d1 ff fd fe ff cf e7 ff af d7 ff a8 d3 ff ff ff ff cc ff ff 99 cc ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 19 00 2c 00 00 00 00 96 00 13 00 00 05 c2 20 26 5a 57 69 9e 68 aa ae 6c eb be 70 2c cf a9 25 de 18 49 ef 7c ef ff c0 8b 0d 97 0b 1a 8f c8 e4 6b 88 01 8c 2c d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a ab b7 0a 71 4c 2e 9b cf e8 b4 7a cd 6e bb 89 91 c2 7b 4e af db ef 78 0c 05 91 ef fb ff 80 6a 08 0c 81 85 86 87 76 0c 12 4e 88 8d 8e 8f 37 00 04 19 06 90 96 97 80 06 19 19 01 8c 98 9f a0 6d 00 01 9b 19 10 a1 a8 a9 66 13 a5 9b Data Ascii: GIF89a!, &ZWihlp,%I\|k,tJZvzqL.zn{NxjvN7mf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49733	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:45 UTC	649	OUT	GET /image/image/companyindex.data_/images/companyindex_01.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:46 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:46 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:34 GMT ETag: "2e19ae-fe-4216fda46c480" Accept-Ranges: bytes Content-Length: 254 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:46 UTC	254	IN	Data Raw: 47 49 46 38 39 61 96 00 0e 00 c4 15 00 f7 f7 ff 9f 9f ff b7 b7 ff fd fd ff ad ad ff f6 f6 ff b5 b5 ff d3 d3 ff cf cf ff aa aa ff c7 c7 ff ed ed ff af af ff b1 b1 ff e3 e3 ff 9b 9b ff c5 c5 ff c4 c4 ff a2 a2 ff fb fb ff 99 99 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 15 00 2c 00 00 00 00 96 00 0e 00 00 05 7b 60 25 8e 63 71 18 44 40 ad 6c eb be 70 2c cf 74 6d df f8 1a 10 c6 51 90 c0 60 65 21 c8 19 8f c8 a4 52 29 58 08 81 03 c8 63 49 ad 5a af b7 07 64 f2 ac 00 1a d8 b0 78 5c 6d 00 84 80 04 79 cd 6e cf 12 67 60 d1 4d af b3 05 40 84 7d cf c7 22 46 00 2a 7d 83 84 46 01 71 0a 85 8a 8b 34 0a 15 03 82 8c 92 93 01 03 0e 93 98 93 0e 11 99 9d 8a 11 0c 9e a2 7d 0c 12 a3 a7 75 12 21 00 3b Data Ascii: GIF89a!,{`%cqD@lp,tmQ`e!R)XcIZdx\myng`M@}"F*}Fq4}u!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49734	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:46 UTC	612	OUT	GET /image/myssl_link.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:46 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:43 GMT ETag: "2e1934-64e-4216fd73c91c0" Accept-Ranges: bytes Content-Length: 1614 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:47 UTC	1614	IN	Data Raw: 47 49 46 38 39 61 62 00 1d 00 d5 00 00 ff d6 99 ff f9 ef ff d2 8f ff cc 80 ff b3 40 ff f2 df ff d5 96 ff db a5 ff f5 ef ff cc 7f ff 70 10 ff df af ff c5 9f ff d8 9f ff 83 30 ff b9 50 ff ec cf ff b2 7f ff 9f 10 ff a0 60 ff e2 cf ff ac 30 ff 79 20 ff bf 60 ff d9 bf ff a6 20 ff 8d 40 ff c0 60 ff cf af ff c6 70 ff ec df ff 96 50 ff a9 70 ff d9 9f ff ee d5 ff f1 db ff bc 8f ff e5 bf ff 66 00 ff 99 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 41 64 6f 62 65 47 6f 4c 69 76 65 ff 01 00 00 06 8b 78 da cd 55 cb 6e d3 40 14 f5 aa 0b fe 01 c9 1a f6 38 89 42 45 25 3b 15 24 84 64 91 08 35 Data Ascii: GIF89ab@p0P`0y ` @`pPpf!AdobeGoLivexUn@8BE%;$d5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49737	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:46 UTC	359	OUT	GET /image/bg0409.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:46 GMT Server: Apache Last-Modified: Tue, 15 Nov 2005 08:48:34 GMT ETag: "2e18a3-d40-40596a7207c80" Accept-Ranges: bytes Content-Length: 3392 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:47 UTC	3392	IN	Data Raw: 47 49 46 38 39 61 0a 00 e8 03 e6 00 00 de e9 fb c7 da fc e4 ea f6 d5 e2 f6 dd e6 f6 c6 d8 f7 d6 e4 fb f8 f9 fa f6 f8 f9 a2 c2 f9 bd d3 f8 d4 e2 fb d0 e0 fb c9 dc fb cc de fb e6 ee fa f8 f8 f9 a8 c7 f9 ea f0 fa e4 ec fb ec f0 f6 da e6 fb f4 f6 fa d2 e0 f7 ee f3 fa e2 eb fa ab c9 f9 b4 cd f8 b5 cf f8 b1 cc f7 ed f2 fa d1 de f7 d9 e4 f6 c8 da f7 b2 cd f7 dc e7 fb d8 e6 fb d2 e2 fb e8 ef fa e0 ea fb bd d3 f7 c8 dc fb c3 d7 f7 f2 f2 f5 db e5 f6 a7 c5 f8 e0 e9 f6 e8 ec f6 e2 ea f6 a0 c2 f8 f0 f2 f5 ac c9 f8 ea ef f6 cc dc fc ad ca f8 ce df fb e2 ec fa ba d1 f7 f2 f4 f5 f4 f4 f5 be d4 f7 ec f1 fa ca dd fc ce e0 fb ae ca f7 f2 f5 fa f0 f3 fa c0 d5 f7 cf dd f7 f2 f4 f9 e1 e9 fb cd db f7 f0 f3 f6 c4 d7 f7 eb ef f5 b0 ca f7 ab c7 f8 f6 f7 f9 f0 f1 f5 f2 f4 fa c3 d5 Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49735	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:46 UTC	358	OUT	GET /image/t_ssl.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	285	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:46 GMT Server: Apache Last-Modified: Fri, 29 Jul 2005 18:31:06 GMT ETag: "2e1978-1321-3fd0e15b9ce80" Accept-Ranges: bytes Content-Length: 4897 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:47 UTC	4897	IN	Data Raw: 47 49 46 38 39 61 64 00 64 00 f7 ff 00 fe b2 7f f5 d5 bf cc cc cc f2 f2 f2 e4 e4 e4 fe ce af a2 7c 59 ff c5 9f fe ce 10 b3 8c 66 e4 5b 00 ec ec ec c9 a1 77 ef ef ef b2 b2 b2 bc a4 91 be be be ff f2 df ff f3 c3 fd f4 ef a8 81 5c f5 ae 7f d3 d3 d3 82 82 82 c9 ba b7 f9 d6 bf c4 9d 75 ff e2 cf ff ce 0c fc ee ec f1 60 00 fd bb 8f e9 e9 e9 9d 7c 5c 8d 8d 8d d9 d9 d9 86 62 45 ac 85 61 ff d0 16 ed bd 00 c6 aa 95 ff d0 13 cc aa 87 e9 5d 00 dc c4 b4 ea d4 c7 c4 99 6c ff fb f5 44 44 44 ed 85 3f ae ae ae c5 c5 c5 fe fe fe ff d0 12 e8 79 2f fd d6 3c f3 dc c4 71 71 71 9b 75 53 f5 e2 db ff d4 27 ec 5e 00 ff cc 7f a4 84 64 ff f9 ef aa 8a 72 fc e5 8a f4 6a 0f ae 88 65 c9 9c 6e f2 87 3f fc d9 4b f3 a4 6f f6 c2 9f e0 ba 8f bd 9a 75 ff ec df ec ca 40 f4 62 00 ff cd 05 f2 db Data Ascii: GIF89add\|Yf[w\u`\|\bEa]lDDD?y/<qqquS'^drjen?Kou@b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49736	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:46 UTC	610	OUT	GET /image/9861_01b.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	285	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:14:35 GMT ETag: "2e1886-1545-4216fd32ef8c0" Accept-Ranges: bytes Content-Length: 5445 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:47 UTC	5445	IN	Data Raw: 47 49 46 38 39 61 62 00 3d 00 f7 00 00 f5 f9 ff b7 c7 e5 b2 ea fe 9a b3 e4 c5 d9 fe 79 a5 fe c6 e9 fc d1 dd f4 a6 b6 d7 37 ad f6 8b b1 fe 77 92 c8 ca d4 e8 da e6 fd c3 d3 f3 61 92 f2 f1 f6 ff f9 fb ff a7 db fa cc d9 f4 58 bb fb 69 93 e7 9b bc fe 95 ac da 7d a8 ff 51 7a cb 86 ce f7 c1 d6 fe f8 fa ff aa c6 fe dc e8 fe 5c 89 e4 82 a3 e3 80 9d d7 99 d6 f9 01 9c ef 7d a1 e9 7a ca f8 dc e4 f6 db f1 fd 45 a8 f5 e8 f0 ff 81 99 c8 b5 ce ff ba d1 fe ae c2 e9 a5 bc eb a0 bc f5 65 8c da 6d 9e ff 66 99 fe bc d2 fe 4a b3 f9 aa c3 f4 7d 99 d3 59 85 dc 7b 9b db 36 99 f0 cd de ff 87 d3 f9 71 a0 ff e5 ee ff 51 73 b8 7b a3 f2 70 9f fb e5 ea f3 83 a5 ea 83 b4 ff 5e 8c e8 c9 d9 f9 7b 9d e2 e1 f3 fe fe fe ff 91 b5 fe 60 8f ec 84 aa f3 ad c9 ff c8 da fe 82 a0 dc d1 e1 ff 71 8b Data Ascii: GIF89ab=y7waXi}Qz\}zEemfJ}Y{6qQs{p^{`q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49739	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:46 UTC	400	OUT	GET /image/image/hostingindex.data_/images/hostingindex_02.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:38 GMT ETag: "2e19b5-fa-4216fda83cd80" Accept-Ranges: bytes Content-Length: 250 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:47 UTC	250	IN	Data Raw: 47 49 46 38 39 61 96 00 36 00 91 00 00 ff ff ff 99 cc ff cc ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 96 00 36 00 00 02 cb 8c 21 a9 cb ed 0f a3 9c b4 da db 80 d9 01 e1 0f 86 e2 48 0a 1a d7 95 ea ca b6 d3 c9 79 ee 4c d7 1f bc c9 f6 ce f7 26 9a f2 09 87 2c dc 81 88 4c 82 8c 41 a5 f3 f9 60 ea a0 d4 a7 b4 8a b5 02 a7 d9 6e ef ea 0d 7f b7 e2 b2 0d 6c 4e 17 c9 ea 76 09 ed 8e df d8 f2 ba 05 6e cf 43 f0 fa fe 82 ef e7 07 18 a8 37 48 68 67 78 28 97 a8 e8 c6 d8 a8 f6 08 69 26 39 29 56 69 e9 85 99 99 b5 c9 59 e5 f9 09 15 2a ea 44 5a 9a 74 8a 4a a4 ba 2a d4 ea 3a 86 c2 15 db 05 5b 7b 46 87 ab a9 bb db d9 eb 0b 0a 1c 3c 3a 4c 6c 6a 7c 9c 9a ac cc ca dc fc fa 0c 2d 1b 33 5d 3c 6b ad 85 9d ad 74 cb bd 24 fd 3d e3 2d 7e 41 5e 5e 01 53 00 00 3b Data Ascii: GIF89a6!,6!HyL&,LA`nlNvnC7Hhgx(i&9)ViYDZtJ:[{F<:Llj\|-3]<kt$=-~A^^S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49740	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:46 UTC	621	OUT	GET /image/webmail/webmaillink.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	285	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:49 GMT ETag: "2e19cf-10b6-4216fdb2ba640" Accept-Ranges: bytes Content-Length: 4278 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:47 UTC	4278	IN	Data Raw: 47 49 46 38 39 61 62 00 2d 00 f7 00 00 2c 83 da fd fe ff d9 e6 ff 67 76 ca 83 c1 ff 84 ad ff cd dd ff 99 b3 e8 64 65 b3 83 89 ca 92 b6 ff 96 ab e4 7a a6 fe 97 a5 d9 c1 d5 ff 58 ab ff 81 ab ff 77 98 dc d7 d8 dc c5 d8 ff a8 b5 dc 8a b1 ff 6e 9d fb 75 ba ff c7 cc e5 ff a5 87 f8 fa ff ea f1 ff 51 63 c2 4b 54 b2 b5 cd ff 7a 84 cb a1 b5 dc b4 bc e3 dd e9 ff d2 e1 ff ff 76 49 2a 7f d3 6b 99 f7 43 47 a7 c3 cc dc 96 b9 ff ed f3 ff 54 5a b2 ac c8 ff fa fc ff b8 c4 dc 7e bf ff e0 ea ff 5e 8b e5 b9 d0 ff 68 b4 ff a9 c6 ff 82 ac ff c8 da ff f2 f6 ff 28 79 ca 95 9c d3 77 89 d6 73 9e f6 a1 a6 d6 7d a9 ff 9d be ff dd e2 ec a1 c0 ff 85 a2 dc 95 97 cb 5b 85 db 46 a2 ff 62 90 ec 81 93 d9 ee f4 ff d4 e2 ff 67 85 d8 a0 bf fc bc d2 ff 71 7e ca 66 94 f2 a4 c2 ff f5 f8 ff 7d a1 Data Ascii: GIF89ab-,gvdezXwnuQcKTzvI*kCGTZ~^h(yws}[Fbgq~f}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49738	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:46 UTC	610	OUT	GET /image/c_card_s.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:14:56 GMT ETag: "2e18c6-a8f-4216fd46f6800" Accept-Ranges: bytes Content-Length: 2703 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:47 UTC	2703	IN	Data Raw: 47 49 46 38 39 61 81 00 14 00 f7 ff 00 fb da e6 e2 e1 e3 00 25 87 76 90 a7 ff aa 55 ff 05 45 d3 d3 d4 f0 cd 65 28 27 5a ff 74 00 b4 c4 f2 f2 f1 f5 a6 a5 a7 ed 01 3c 2d 63 de 44 6b e3 f5 8b 8b ff d2 0d e4 e4 e5 ff 67 2c cd cc db ff bc 68 fd f1 b1 a2 a2 bc 59 5a 7e 63 83 c6 cb ec d1 ec ec ec 88 01 31 fd c9 d7 89 a8 e3 ff 28 27 fc ba ce cc cc cd c4 d6 fe bf ce ee e0 eb fa ff cc 11 f1 fe ff f9 f9 f9 f9 fa fe 53 58 84 7e 99 ab f7 eb f1 84 a2 de d1 d2 de fd ca 09 e0 bd 43 fb fd fe 7c 94 c5 fa 8d 23 96 6a 14 ff 3c 40 ff d4 30 c3 c3 c3 ed f6 ff f7 f7 f8 00 01 39 ff 50 50 50 bd 67 fa 4d 72 4d 71 ba f0 f0 f0 db e5 e6 f5 f5 f6 fe e6 ee ea ed fd ef 90 aa 32 31 67 b5 b9 cb bc ba bd 73 92 d6 dc e6 f7 b4 b3 b5 02 02 47 88 8d a9 e9 e9 f1 dc db dc 7b 9a da d6 d6 e2 46 35 Data Ascii: GIF89a%vUEe('Zt<-cDkg,hYZ~c1('SX~C\|#j<@09PPPgMrMq21gsG{F5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49741	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:47 UTC	390	OUT	GET /image/image/whoisbg.data_/images/whoisbg_01.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:40 GMT ETag: "2e19bc-711-4216fdaa25200" Accept-Ranges: bytes Content-Length: 1809 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:47 UTC	1809	IN	Data Raw: 47 49 46 38 39 61 a0 00 1d 00 e6 00 00 ff e5 cc e6 f2 ff ff 9f 40 b3 d9 ff e7 f3 ff ff ec d9 ff f2 e5 ff d9 b2 ff f9 f2 cd e6 ff ff a6 4d cc e6 ff ff ac 59 a7 d3 ff ff b9 73 ff bf 80 ff df bf ff c6 8d ff d2 a5 e8 f4 ff ba dd ff fb fd ff d3 e9 ff ef f7 ff b4 d9 ff ab d5 ff a0 cf ff bf df ff 9b cd ff ae d6 ff d1 d1 d1 d4 e9 ff e1 f0 ff e2 f0 ff db ed ff c7 e3 ff a6 d3 ff a4 d2 ff c1 e0 ff d2 d2 d2 df ef ff f5 fa ff f3 f3 f3 e5 e5 e5 d6 d6 d6 9d cc fb b7 cc e1 cf e7 ff fe fe fe c0 cc d8 a3 cc f5 d9 ec ff f3 f9 ff cd cd cd ac d6 ff 9a cc fe da ed ff a7 cc f1 bb cc dd ef ef ef a6 cc f2 b1 cc e7 f4 f9 ff fd fd fd ee ee ee e7 e7 e7 9e cc fa bd e9 ff e8 e8 e8 b0 cc e8 f7 fb ff d7 d7 d7 9f cc f9 b6 cc e2 77 d2 ff e3 e3 e3 71 d0 ff e4 e4 e4 b5 cc e3 a0 cc f8 a4 cc Data Ascii: GIF89a@MYswq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49742	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:47 UTC	635	OUT	GET /image/image/whoisbg.data_/images/spacer.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	255	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:40 GMT ETag: "2e19bb-2b-4216fdaa25200" Accept-Ranges: bytes Content-Length: 43 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49743	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:47 UTC	649	OUT	GET /image/image/companyindex.data_/images/companyindex_02.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:34 GMT ETag: "2e19af-a6-4216fda46c480" Accept-Ranges: bytes Content-Length: 166 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:47 UTC	166	IN	Data Raw: 47 49 46 38 39 61 96 00 4c 00 80 00 00 99 99 ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 96 00 4c 00 00 02 7d 84 8f a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a6 ea ca b6 ee 0b c7 f2 4c d7 f6 8d e7 fa ce f7 fe 0f 0c 0a 87 c4 a2 f1 88 4c 2a 97 cc a6 f3 09 8d 4a a7 d4 aa f5 8a cd 6a b7 dc ae f7 0b 0e 8b c7 e4 b2 f9 8c 4e ab d7 ec b6 fb 0d 8f cb e7 f4 ba fd 8e cf eb f7 fc be ff 0f 18 28 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 08 19 29 39 49 59 69 79 89 99 a9 f9 54 00 00 3b Data Ascii: GIF89aL!,L}HLL*JjN(8HXhx)9IYiyT;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49744	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:47 UTC	400	OUT	GET /image/image/hostingindex.data_/images/hostingindex_03.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:47 UTC	283	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:38 GMT ETag: "2e19b6-145-4216fda83cd80" Accept-Ranges: bytes Content-Length: 325 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:47 UTC	325	IN	Data Raw: 47 49 46 38 39 61 96 00 13 00 c4 19 00 9f cf ff f6 fa ff b7 db ff f7 fb ff fb fd ff b1 d8 ff c7 e3 ff ad d6 ff c4 e1 ff aa d4 ff 9d ce ff b5 da ff e3 f1 ff d3 e9 ff ed f6 ff c5 e2 ff cd e6 ff a2 d1 ff fd fe ff cf e7 ff af d7 ff a8 d3 ff ff ff ff cc ff ff 99 cc ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 19 00 2c 00 00 00 00 96 00 13 00 00 05 c2 20 26 5a 57 69 9e 68 aa ae 6c eb be 70 2c cf a9 25 de 18 49 ef 7c ef ff c0 8b 0d 97 0b 1a 8f c8 e4 6b 88 01 8c 2c d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a ab b7 0a 71 4c 2e 9b cf e8 b4 7a cd 6e bb 89 91 c2 7b 4e af db ef 78 0c 05 91 ef fb ff 80 6a 08 0c 81 85 86 87 76 0c 12 4e 88 8d 8e 8f 37 00 04 19 06 90 96 97 80 06 19 19 01 8c 98 9f a0 6d 00 01 9b 19 10 a1 a8 a9 66 13 a5 9b Data Ascii: GIF89a!, &ZWihlp,%I\|k,tJZvzqL.zn{NxjvN7mf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49745	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:47 UTC	400	OUT	GET /image/image/companyindex.data_/images/companyindex_01.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:48 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:47 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:34 GMT ETag: "2e19ae-fe-4216fda46c480" Accept-Ranges: bytes Content-Length: 254 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:48 UTC	254	IN	Data Raw: 47 49 46 38 39 61 96 00 0e 00 c4 15 00 f7 f7 ff 9f 9f ff b7 b7 ff fd fd ff ad ad ff f6 f6 ff b5 b5 ff d3 d3 ff cf cf ff aa aa ff c7 c7 ff ed ed ff af af ff b1 b1 ff e3 e3 ff 9b 9b ff c5 c5 ff c4 c4 ff a2 a2 ff fb fb ff 99 99 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 15 00 2c 00 00 00 00 96 00 0e 00 00 05 7b 60 25 8e 63 71 18 44 40 ad 6c eb be 70 2c cf 74 6d df f8 1a 10 c6 51 90 c0 60 65 21 c8 19 8f c8 a4 52 29 58 08 81 03 c8 63 49 ad 5a af b7 07 64 f2 ac 00 1a d8 b0 78 5c 6d 00 84 80 04 79 cd 6e cf 12 67 60 d1 4d af b3 05 40 84 7d cf c7 22 46 00 2a 7d 83 84 46 01 71 0a 85 8a 8b 34 0a 15 03 82 8c 92 93 01 03 0e 93 98 93 0e 11 99 9d 8a 11 0c 9e a2 7d 0c 12 a3 a7 75 12 21 00 3b Data Ascii: GIF89a!,{`%cqD@lp,tmQ`e!R)XcIZdx\myng`M@}"F*}Fq4}u!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49746	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:47 UTC	613	OUT	GET /image/whatdomain2.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:48 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:48 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:29 GMT ETag: "2e19a2-900-4216fd9fa7940" Accept-Ranges: bytes Content-Length: 2304 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:48 UTC	2304	IN	Data Raw: 47 49 46 38 39 61 7b 00 35 00 f7 ff 00 c5 b6 ff 41 65 ff b1 ab ff ad 9b ff 48 72 ff c2 cd ff 9e 8c ff 93 8c ff ed e8 ff e8 e2 ff a9 ae ff 39 68 ff b5 bc ff a8 b9 ff f0 ec ff a9 94 ff a1 8a ff e5 de ff c2 b3 ff 76 93 ff ef f1 ff 92 aa ff 94 7c ff 54 74 ff cd c1 ff 9c 87 ff 93 91 ff 5a 7b ff 93 9e ff 45 69 ff 5d 81 ff 4b 66 ff 83 81 ff e0 d8 ff 95 c5 ff 75 79 ff e2 e6 ff d6 cc ff bd b3 ff 74 6d ff 94 83 ff b0 a2 ff 3e 6d ff f5 f3 ff b1 9d ff d1 d2 ff d8 ce ff d5 ca ff 52 78 ff 64 7a ff ed ee ff 8d 7b ff da d0 ff 49 68 ff 3e 67 ff d2 d9 ff 85 99 ff 66 86 ff 50 6a ff dd d4 ff 3c 6b ff 59 6f ff b5 a2 ff c7 b9 ff bf af ff b7 b1 ff 90 bf ff b8 a6 ff 55 6a ff 8a 86 ff 98 91 ff e3 e9 ff 38 66 ff 85 8c ff 55 7d ff cd d4 ff 57 79 ff d0 c4 ff 7c 75 ff 5a 69 ff 98 ca Data Ascii: GIF89a{5AeHr9hv\|TtZ{Ei]Kfuytm>mRxdz{Ih>gfPj<kYoUj8fU}Wy\|uZi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49747	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:47 UTC	363	OUT	GET /image/myssl_link.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:48 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:48 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:43 GMT ETag: "2e1934-64e-4216fd73c91c0" Accept-Ranges: bytes Content-Length: 1614 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:48 UTC	1614	IN	Data Raw: 47 49 46 38 39 61 62 00 1d 00 d5 00 00 ff d6 99 ff f9 ef ff d2 8f ff cc 80 ff b3 40 ff f2 df ff d5 96 ff db a5 ff f5 ef ff cc 7f ff 70 10 ff df af ff c5 9f ff d8 9f ff 83 30 ff b9 50 ff ec cf ff b2 7f ff 9f 10 ff a0 60 ff e2 cf ff ac 30 ff 79 20 ff bf 60 ff d9 bf ff a6 20 ff 8d 40 ff c0 60 ff cf af ff c6 70 ff ec df ff 96 50 ff a9 70 ff d9 9f ff ee d5 ff f1 db ff bc 8f ff e5 bf ff 66 00 ff 99 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 41 64 6f 62 65 47 6f 4c 69 76 65 ff 01 00 00 06 8b 78 da cd 55 cb 6e d3 40 14 f5 aa 0b fe 01 c9 1a f6 38 89 42 45 25 3b 15 24 84 64 91 08 35 Data Ascii: GIF89ab@p0P`0y ` @`pPpf!AdobeGoLivexUn@8BE%;$d5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49749	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	649	OUT	GET /image/image/hostingindex.data_/images/hostingindex_01.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:48 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:48 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:37 GMT ETag: "2e19b4-749-4216fda748b40" Accept-Ranges: bytes Content-Length: 1865 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:48 UTC	1865	IN	Data Raw: 47 49 46 38 39 61 96 00 24 00 e6 47 00 b3 d9 ff e6 f2 ff cc e6 ff cd e6 ff ff c5 9f ff ec df e7 f3 ff ff e2 cf ff f5 ef b4 d9 ff ff 79 20 ff 83 30 a7 d3 ff e8 f4 ff ff a9 70 fb fd ff ff a0 60 ff 96 50 ef f7 ff ff 70 10 ff cf af 9b cd ff ff bc 8f da ed ff a0 cf ff ac d6 ff bf df ff db ed ff c7 e3 ff d3 e9 ff e2 f0 ff 9f cf ff f7 fb ff f5 fa ff df ef ff a1 d0 ff ae d6 ff f3 f9 ff b7 db ff d4 e9 ff ab d5 ff a6 d3 ff ec f5 ff fd fe ff ba dd ff 9e ce ff a4 d2 ff ad d6 ff cf e7 ff b5 da ff f6 fa ff aa d4 ff e1 f0 ff ed f6 ff d9 ec ff b9 dc ff c4 e1 ff c5 e2 ff a2 d1 ff c6 e3 ff b1 d8 ff e3 f1 ff af d7 ff c1 e0 ff ff 8c 40 ff b3 80 ff d9 bf cc ff ff ff 66 00 ff ff ff 99 cc ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a$Gy 0p`Pp@f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49750	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	361	OUT	GET /image/9861_01b.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:48 UTC	285	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:48 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:14:35 GMT ETag: "2e1886-1545-4216fd32ef8c0" Accept-Ranges: bytes Content-Length: 5445 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:48 UTC	5445	IN	Data Raw: 47 49 46 38 39 61 62 00 3d 00 f7 00 00 f5 f9 ff b7 c7 e5 b2 ea fe 9a b3 e4 c5 d9 fe 79 a5 fe c6 e9 fc d1 dd f4 a6 b6 d7 37 ad f6 8b b1 fe 77 92 c8 ca d4 e8 da e6 fd c3 d3 f3 61 92 f2 f1 f6 ff f9 fb ff a7 db fa cc d9 f4 58 bb fb 69 93 e7 9b bc fe 95 ac da 7d a8 ff 51 7a cb 86 ce f7 c1 d6 fe f8 fa ff aa c6 fe dc e8 fe 5c 89 e4 82 a3 e3 80 9d d7 99 d6 f9 01 9c ef 7d a1 e9 7a ca f8 dc e4 f6 db f1 fd 45 a8 f5 e8 f0 ff 81 99 c8 b5 ce ff ba d1 fe ae c2 e9 a5 bc eb a0 bc f5 65 8c da 6d 9e ff 66 99 fe bc d2 fe 4a b3 f9 aa c3 f4 7d 99 d3 59 85 dc 7b 9b db 36 99 f0 cd de ff 87 d3 f9 71 a0 ff e5 ee ff 51 73 b8 7b a3 f2 70 9f fb e5 ea f3 83 a5 ea 83 b4 ff 5e 8c e8 c9 d9 f9 7b 9d e2 e1 f3 fe fe fe ff 91 b5 fe 60 8f ec 84 aa f3 ad c9 ff c8 da fe 82 a0 dc d1 e1 ff 71 8b Data Ascii: GIF89ab=y7waXi}Qz\}zEemfJ}Y{6qQs{p^{`q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49752	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	372	OUT	GET /image/webmail/webmaillink.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:48 UTC	285	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:48 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:49 GMT ETag: "2e19cf-10b6-4216fdb2ba640" Accept-Ranges: bytes Content-Length: 4278 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:48 UTC	4278	IN	Data Raw: 47 49 46 38 39 61 62 00 2d 00 f7 00 00 2c 83 da fd fe ff d9 e6 ff 67 76 ca 83 c1 ff 84 ad ff cd dd ff 99 b3 e8 64 65 b3 83 89 ca 92 b6 ff 96 ab e4 7a a6 fe 97 a5 d9 c1 d5 ff 58 ab ff 81 ab ff 77 98 dc d7 d8 dc c5 d8 ff a8 b5 dc 8a b1 ff 6e 9d fb 75 ba ff c7 cc e5 ff a5 87 f8 fa ff ea f1 ff 51 63 c2 4b 54 b2 b5 cd ff 7a 84 cb a1 b5 dc b4 bc e3 dd e9 ff d2 e1 ff ff 76 49 2a 7f d3 6b 99 f7 43 47 a7 c3 cc dc 96 b9 ff ed f3 ff 54 5a b2 ac c8 ff fa fc ff b8 c4 dc 7e bf ff e0 ea ff 5e 8b e5 b9 d0 ff 68 b4 ff a9 c6 ff 82 ac ff c8 da ff f2 f6 ff 28 79 ca 95 9c d3 77 89 d6 73 9e f6 a1 a6 d6 7d a9 ff 9d be ff dd e2 ec a1 c0 ff 85 a2 dc 95 97 cb 5b 85 db 46 a2 ff 62 90 ec 81 93 d9 ee f4 ff d4 e2 ff 67 85 d8 a0 bf fc bc d2 ff 71 7e ca 66 94 f2 a4 c2 ff f5 f8 ff 7d a1 Data Ascii: GIF89ab-,gvdezXwnuQcKTzvI*kCGTZ~^h(yws}[Fbgq~f}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49751	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	608	OUT	GET /image/design.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:48 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:48 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:02 GMT ETag: "2e18d5-c0f-4216fd4caf580" Accept-Ranges: bytes Content-Length: 3087 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:48 UTC	3087	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 16 82 28 2a 59 92 89 d8 8c 15 7a 36 ed ed ed fc fc fc 44 de 49 43 db 46 b7 e6 b9 46 78 76 a1 ed a2 2b da 31 b9 d6 b9 19 8c 1d 4b df 50 54 89 67 25 cb 2a 38 68 85 21 ba 26 43 af 47 77 da 7a 13 73 43 e5 e5 e5 d6 d6 d6 57 a7 5a 46 c2 4a d9 d9 d9 0e 63 69 e4 fa e5 5f dd 63 d7 f7 d7 f8 f8 f8 55 db 59 3e dd 44 18 47 ab 56 9c 59 0b 58 76 56 e1 5a 02 35 c6 78 ca 7b 59 e2 5e 60 b9 63 50 de 54 35 d9 39 3d 81 54 1d a2 22 5a 97 66 3f a5 44 4d e0 52 61 be 64 dd dd dd 29 66 6b 60 da 64 26 d5 2c 1b 96 1f 06 43 a7 f2 f2 f2 61 c3 64 c2 d5 c3 61 d4 66 f4 f4 f4 4b bb 4e d5 d5 d5 f6 f6 f6 dc f8 dd e3 e3 e3 1a 90 1e 2c 90 3e c9 d5 ca 5c c4 60 1c 9a 20 de de de 5f ad 61 1e a5 22 1c 9e 21 d4 ed d5 20 b5 25 10 6a 55 fb fe fb bc f2 bd 01 34 Data Ascii: GIF89aZ7(Yz6DICFFxv+1KPTg%8h!&CGwzsCWZFJci_cUY>DGVYXvVZ5x{Y^`cPT59=T"Zf?DMRad)fk`d&,CadafKN,>\` _a"! %jU4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49753	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	609	OUT	GET /image/company.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:48 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:48 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:01 GMT ETag: "2e18d1-b95-4216fd4bbb340" Accept-Ranges: bytes Content-Length: 2965 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:48 UTC	2965	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 48 56 8d fa a5 0c f5 a2 0c f7 be 57 e4 cd 90 b9 88 30 eb db b3 79 5b 33 de d0 b6 b3 77 08 ff a9 0c a3 6c 08 d8 b9 62 94 66 15 83 75 65 f2 b8 4e ff b6 32 f2 c3 6c 62 64 7c da da da ff bb 3e ff bc 41 14 38 ad 69 56 47 fa fa fa d7 d7 d7 df df df db d2 c1 fc fc fc c5 9d 53 d8 d8 d8 ec c5 7e cd 8d 17 e4 cd a3 f7 d6 99 5d 52 54 ff b9 3a fd f4 e2 ff ae 1a ff ab 11 a9 84 41 e4 ac 47 ff bd 45 f0 c0 68 c7 94 36 7e 67 4e cb 87 0a 89 63 28 e4 e4 e4 e2 96 0b 25 44 a9 ff cd 72 0d 37 b8 fe be 49 12 3b b7 a7 79 2c d1 a5 52 ff b2 26 fd fa f3 f7 f7 f7 a7 8a 54 fc f6 eb bd 7d 09 f6 f6 f6 ff b8 36 ec ec ec f6 e5 c7 fa d0 84 f4 f4 f4 eb b2 4a db b5 70 74 6a 64 ea a5 29 d8 a9 51 dc dc dc f8 ef de f1 f1 f1 66 61 6a f2 dc b4 fa af 24 fe e0 Data Ascii: GIF89aZ7HVW0y[3wlbfueN2lbd\|>A8iVGS~]RT:AGEh6~gNc(%Dr7I;y,R&T}6Jptjd)Qfaj$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49754	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	361	OUT	GET /image/c_card_s.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:49 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:49 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:14:56 GMT ETag: "2e18c6-a8f-4216fd46f6800" Accept-Ranges: bytes Content-Length: 2703 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:49 UTC	2703	IN	Data Raw: 47 49 46 38 39 61 81 00 14 00 f7 ff 00 fb da e6 e2 e1 e3 00 25 87 76 90 a7 ff aa 55 ff 05 45 d3 d3 d4 f0 cd 65 28 27 5a ff 74 00 b4 c4 f2 f2 f1 f5 a6 a5 a7 ed 01 3c 2d 63 de 44 6b e3 f5 8b 8b ff d2 0d e4 e4 e5 ff 67 2c cd cc db ff bc 68 fd f1 b1 a2 a2 bc 59 5a 7e 63 83 c6 cb ec d1 ec ec ec 88 01 31 fd c9 d7 89 a8 e3 ff 28 27 fc ba ce cc cc cd c4 d6 fe bf ce ee e0 eb fa ff cc 11 f1 fe ff f9 f9 f9 f9 fa fe 53 58 84 7e 99 ab f7 eb f1 84 a2 de d1 d2 de fd ca 09 e0 bd 43 fb fd fe 7c 94 c5 fa 8d 23 96 6a 14 ff 3c 40 ff d4 30 c3 c3 c3 ed f6 ff f7 f7 f8 00 01 39 ff 50 50 50 bd 67 fa 4d 72 4d 71 ba f0 f0 f0 db e5 e6 f5 f5 f6 fe e6 ee ea ed fd ef 90 aa 32 31 67 b5 b9 cb bc ba bd 73 92 d6 dc e6 f7 b4 b3 b5 02 02 47 88 8d a9 e9 e9 f1 dc db dc 7b 9a da d6 d6 e2 46 35 Data Ascii: GIF89a%vUEe('Zt<-cDkg,hYZ~c1('SX~C\|#j<@09PPPgMrMq21gsG{F5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49756	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	609	OUT	GET /image/contact.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:49 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:49 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:02 GMT ETag: "2e18d3-be6-4216fd4caf580" Accept-Ranges: bytes Content-Length: 3046 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:49 UTC	3046	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 ff 35 72 f9 f9 f9 b7 9a a3 cb 0a 44 b9 b9 b9 e9 e9 e9 f2 4a 7d fc 0c 54 6b 4a 83 c4 09 41 fd 99 b7 ab 08 39 d8 d8 d8 ff 12 59 dc 0a 49 c7 85 99 77 48 79 57 1b 77 b8 54 72 c4 c4 c4 d6 74 91 dc dc dc c3 22 52 14 37 ba db 48 74 ed ed ed d5 d5 d5 c1 c1 c1 e2 8b a5 c7 44 6b 6d 38 76 ce ce ce 79 11 56 ba 09 3e ff 22 64 e3 0b 4c d0 0a 45 fc fc fc ec 4a 7b ff 40 7a e0 e0 e0 56 2d 74 f9 4a 7e 92 0c 42 d1 d1 d1 ff 46 7d fd e9 ec ff 38 74 cb 7a 92 f3 0c 51 f5 87 a8 8c 51 72 d9 51 7b e9 0b 4e d3 52 79 ae ae ae d7 bb c4 ac ac ac 09 33 c2 ff 18 5d 03 33 c9 48 1e 81 f6 43 79 c4 38 62 fc e2 ea 68 15 65 25 39 aa e6 e6 e6 c9 52 76 b4 b4 b4 f4 f4 f4 d7 5b 81 bc bc bc b1 b1 b1 fe 56 89 46 44 99 ff 1c 60 39 23 8c b2 ab ad b5 09 3d b3 b1 Data Ascii: GIF89aZ75rDJ}TkJA9YIwHyWwTrt"R7HtDkm8vyV>"dLEJ{@zV-tJ~BF}8tzQQrQ{NRy3]3HCy8bhe%9Rv[VFD`9#=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49757	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	386	OUT	GET /image/image/whoisbg.data_/images/spacer.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:49 UTC	255	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:49 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:40 GMT ETag: "2e19bb-2b-4216fdaa25200" Accept-Ranges: bytes Content-Length: 43 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49755	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	639	OUT	GET /image/image/whoisbg.data_/images/whoisbg_02.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:49 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:49 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:40 GMT ETag: "2e19bd-a7-4216fdaa25200" Accept-Ranges: bytes Content-Length: 167 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:49 UTC	167	IN	Data Raw: 47 49 46 38 39 61 a0 00 17 00 91 00 00 cc cc cc ff ff ff 99 cc ff 66 cc ff 21 f9 04 00 00 00 00 00 2c 00 00 00 00 a0 00 17 00 00 02 78 84 14 a3 cb ed 0f a3 9c b4 da 8b 71 10 20 18 94 85 e2 48 96 26 b5 75 5f 72 b6 ee 0b 93 a9 77 b0 f1 8d e7 f0 bc ea fe 0f b4 f0 6a c1 a2 b1 38 04 1d 97 cc 1d 87 a6 6c 4a a7 a1 a4 8d 8a cd 42 ac da ae 57 c1 fd 8a a9 e1 b1 79 59 3e ab 81 e9 b5 1b d7 7e cb 5d f1 b9 5d f6 ec dd f7 a5 3a ff 8f 92 47 04 48 28 24 18 55 98 b8 75 78 a5 e8 b8 e0 f7 58 18 29 09 38 53 00 00 3b Data Ascii: GIF89af!,xq H&u_rwj8lJBWyY>~]]:GH($UuxX)8S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49758	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:48 UTC	400	OUT	GET /image/image/companyindex.data_/images/companyindex_02.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:49 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:49 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:34 GMT ETag: "2e19af-a6-4216fda46c480" Accept-Ranges: bytes Content-Length: 166 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:49 UTC	166	IN	Data Raw: 47 49 46 38 39 61 96 00 4c 00 80 00 00 99 99 ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 96 00 4c 00 00 02 7d 84 8f a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a6 ea ca b6 ee 0b c7 f2 4c d7 f6 8d e7 fa ce f7 fe 0f 0c 0a 87 c4 a2 f1 88 4c 2a 97 cc a6 f3 09 8d 4a a7 d4 aa f5 8a cd 6a b7 dc ae f7 0b 0e 8b c7 e4 b2 f9 8c 4e ab d7 ec b6 fb 0d 8f cb e7 f4 ba fd 8e cf eb f7 fc be ff 0f 18 28 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 08 19 29 39 49 59 69 79 89 99 a9 f9 54 00 00 3b Data Ascii: GIF89aL!,L}HLL*JjN(8HXhx)9IYiyT;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49759	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:49 UTC	639	OUT	GET /image/image/whoisbg.data_/images/whoisbg_05.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:49 UTC	283	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:49 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:41 GMT ETag: "2e19c0-1bd-4216fdab19440" Accept-Ranges: bytes Content-Length: 445 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:49 UTC	445	IN	Data Raw: 47 49 46 38 39 61 a0 00 12 00 d5 00 00 a6 cc f2 d2 d2 d2 ee ee ee d6 d6 d6 e7 e7 e7 b7 cc e1 9f cc f9 b5 cc e3 f3 f3 f3 a3 cc f5 bb cc dd c0 cc d8 fd fd fd e4 e4 e4 d1 d1 d1 9c cc fc e3 e3 e3 9d cc fb e5 e5 e5 b1 cc e7 b0 cc e8 fe fe fe de de de d9 d9 d9 a0 cc f8 9e cc fa d0 d0 d0 cf cf cf d3 d3 d3 a4 cc f4 d7 d7 d7 cc cc cc ff ff ff 99 cc ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 a0 00 12 00 00 06 da c0 4f 68 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 b4 f8 01 6d 1e d3 ac 76 cb ed 7a 95 55 0e Data Ascii: GIF89a!,OhH,rl:mvzU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49760	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:49 UTC	364	OUT	GET /image/whatdomain2.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:49 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:49 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:29 GMT ETag: "2e19a2-900-4216fd9fa7940" Accept-Ranges: bytes Content-Length: 2304 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:49 UTC	2304	IN	Data Raw: 47 49 46 38 39 61 7b 00 35 00 f7 ff 00 c5 b6 ff 41 65 ff b1 ab ff ad 9b ff 48 72 ff c2 cd ff 9e 8c ff 93 8c ff ed e8 ff e8 e2 ff a9 ae ff 39 68 ff b5 bc ff a8 b9 ff f0 ec ff a9 94 ff a1 8a ff e5 de ff c2 b3 ff 76 93 ff ef f1 ff 92 aa ff 94 7c ff 54 74 ff cd c1 ff 9c 87 ff 93 91 ff 5a 7b ff 93 9e ff 45 69 ff 5d 81 ff 4b 66 ff 83 81 ff e0 d8 ff 95 c5 ff 75 79 ff e2 e6 ff d6 cc ff bd b3 ff 74 6d ff 94 83 ff b0 a2 ff 3e 6d ff f5 f3 ff b1 9d ff d1 d2 ff d8 ce ff d5 ca ff 52 78 ff 64 7a ff ed ee ff 8d 7b ff da d0 ff 49 68 ff 3e 67 ff d2 d9 ff 85 99 ff 66 86 ff 50 6a ff dd d4 ff 3c 6b ff 59 6f ff b5 a2 ff c7 b9 ff bf af ff b7 b1 ff 90 bf ff b8 a6 ff 55 6a ff 8a 86 ff 98 91 ff e3 e9 ff 38 66 ff 85 8c ff 55 7d ff cd d4 ff 57 79 ff d0 c4 ff 7c 75 ff 5a 69 ff 98 ca Data Ascii: GIF89a{5AeHr9hv\|TtZ{Ei]Kfuytm>mRxdz{Ih>gfPj<kYoUj8fU}Wy\|uZi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49761	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:49 UTC	639	OUT	GET /image/image/whoisbg.data_/images/whoisbg_03.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:41 GMT ETag: "2e19be-c9-4216fdab19440" Accept-Ranges: bytes Content-Length: 201 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:50 UTC	201	IN	Data Raw: 47 49 46 38 39 61 a0 00 0a 00 b3 00 00 cf e7 ff f7 fb ff 74 d1 ff bd e9 ff 71 d0 ff f6 fa ff 9b cd ff cc cc cc ff ff ff 99 cc ff 66 cc ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 a0 00 0a 00 00 04 76 f0 a4 84 94 bd 38 eb cd bb ff 60 28 8e 24 89 24 07 22 51 65 eb be 70 2c 83 67 ba 56 73 ae ef 3c 5c ab 13 5c 6f 48 2c f2 7e ab 00 c1 c8 6c 3a 41 84 00 0a 98 00 0c 04 cf ac 96 29 18 00 a6 2b 03 a0 80 28 9b cf e8 b4 7a cd 6e bb df f0 b8 7c fe 2e 00 0c e0 89 7e cf ef fb ff 80 81 82 83 84 85 86 87 88 7c 36 89 8c 8d 8e 8f 90 91 81 8b 92 95 96 97 98 8e 29 11 00 3b Data Ascii: GIF89atqf!,v8`($$"Qep,gVs<\\oH,~l:A)+(zn\|.~\|6);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49762	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:49 UTC	400	OUT	GET /image/image/hostingindex.data_/images/hostingindex_01.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:37 GMT ETag: "2e19b4-749-4216fda748b40" Accept-Ranges: bytes Content-Length: 1865 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:50 UTC	1865	IN	Data Raw: 47 49 46 38 39 61 96 00 24 00 e6 47 00 b3 d9 ff e6 f2 ff cc e6 ff cd e6 ff ff c5 9f ff ec df e7 f3 ff ff e2 cf ff f5 ef b4 d9 ff ff 79 20 ff 83 30 a7 d3 ff e8 f4 ff ff a9 70 fb fd ff ff a0 60 ff 96 50 ef f7 ff ff 70 10 ff cf af 9b cd ff ff bc 8f da ed ff a0 cf ff ac d6 ff bf df ff db ed ff c7 e3 ff d3 e9 ff e2 f0 ff 9f cf ff f7 fb ff f5 fa ff df ef ff a1 d0 ff ae d6 ff f3 f9 ff b7 db ff d4 e9 ff ab d5 ff a6 d3 ff ec f5 ff fd fe ff ba dd ff 9e ce ff a4 d2 ff ad d6 ff cf e7 ff b5 da ff f6 fa ff aa d4 ff e1 f0 ff ed f6 ff d9 ec ff b9 dc ff c4 e1 ff c5 e2 ff a2 d1 ff c6 e3 ff b1 d8 ff e3 f1 ff af d7 ff c1 e0 ff ff 8c 40 ff b3 80 ff d9 bf cc ff ff ff 66 00 ff ff ff 99 cc ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a$Gy 0p`Pp@f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49763	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:49 UTC	610	OUT	GET /image/linkicon.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:25 GMT ETag: "2e190b-6e-4216fd629e940" Accept-Ranges: bytes Content-Length: 110 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:50 UTC	110	IN	Data Raw: 47 49 46 38 39 61 07 00 0a 00 b3 08 00 ce cc ff 00 60 99 99 bf d6 20 9d ff 9c cb e7 5d 9b bf 99 c8 ff 00 8e ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 08 00 2c 00 00 00 00 07 00 0a 00 00 04 1b 10 10 44 a9 19 b3 9a 83 f5 e1 d9 f6 75 e2 27 08 65 51 20 a2 6a 1d ae 15 ac 55 04 00 3b Data Ascii: GIF89a` ]!,Du'eQ jU;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49765	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:49 UTC	640	OUT	GET /image/image/hostingindex.data_/images/spacer.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	255	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:38 GMT ETag: "2e19b7-2b-4216fda83cd80" Accept-Ranges: bytes Content-Length: 43 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49764	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:49 UTC	359	OUT	GET /image/design.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:02 GMT ETag: "2e18d5-c0f-4216fd4caf580" Accept-Ranges: bytes Content-Length: 3087 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:50 UTC	3087	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 16 82 28 2a 59 92 89 d8 8c 15 7a 36 ed ed ed fc fc fc 44 de 49 43 db 46 b7 e6 b9 46 78 76 a1 ed a2 2b da 31 b9 d6 b9 19 8c 1d 4b df 50 54 89 67 25 cb 2a 38 68 85 21 ba 26 43 af 47 77 da 7a 13 73 43 e5 e5 e5 d6 d6 d6 57 a7 5a 46 c2 4a d9 d9 d9 0e 63 69 e4 fa e5 5f dd 63 d7 f7 d7 f8 f8 f8 55 db 59 3e dd 44 18 47 ab 56 9c 59 0b 58 76 56 e1 5a 02 35 c6 78 ca 7b 59 e2 5e 60 b9 63 50 de 54 35 d9 39 3d 81 54 1d a2 22 5a 97 66 3f a5 44 4d e0 52 61 be 64 dd dd dd 29 66 6b 60 da 64 26 d5 2c 1b 96 1f 06 43 a7 f2 f2 f2 61 c3 64 c2 d5 c3 61 d4 66 f4 f4 f4 4b bb 4e d5 d5 d5 f6 f6 f6 dc f8 dd e3 e3 e3 1a 90 1e 2c 90 3e c9 d5 ca 5c c4 60 1c 9a 20 de de de 5f ad 61 1e a5 22 1c 9e 21 d4 ed d5 20 b5 25 10 6a 55 fb fe fb bc f2 bd 01 34 Data Ascii: GIF89aZ7(Yz6DICFFxv+1KPTg%8h!&CGwzsCWZFJci_cUY>DGVYXvVZ5x{Y^`cPT59=T"Zf?DMRad)fk`d&,CadafKN,>\` _a"! %jU4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49766	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:50 UTC	360	OUT	GET /image/company.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:01 GMT ETag: "2e18d1-b95-4216fd4bbb340" Accept-Ranges: bytes Content-Length: 2965 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:50 UTC	2965	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 48 56 8d fa a5 0c f5 a2 0c f7 be 57 e4 cd 90 b9 88 30 eb db b3 79 5b 33 de d0 b6 b3 77 08 ff a9 0c a3 6c 08 d8 b9 62 94 66 15 83 75 65 f2 b8 4e ff b6 32 f2 c3 6c 62 64 7c da da da ff bb 3e ff bc 41 14 38 ad 69 56 47 fa fa fa d7 d7 d7 df df df db d2 c1 fc fc fc c5 9d 53 d8 d8 d8 ec c5 7e cd 8d 17 e4 cd a3 f7 d6 99 5d 52 54 ff b9 3a fd f4 e2 ff ae 1a ff ab 11 a9 84 41 e4 ac 47 ff bd 45 f0 c0 68 c7 94 36 7e 67 4e cb 87 0a 89 63 28 e4 e4 e4 e2 96 0b 25 44 a9 ff cd 72 0d 37 b8 fe be 49 12 3b b7 a7 79 2c d1 a5 52 ff b2 26 fd fa f3 f7 f7 f7 a7 8a 54 fc f6 eb bd 7d 09 f6 f6 f6 ff b8 36 ec ec ec f6 e5 c7 fa d0 84 f4 f4 f4 eb b2 4a db b5 70 74 6a 64 ea a5 29 d8 a9 51 dc dc dc f8 ef de f1 f1 f1 66 61 6a f2 dc b4 fa af 24 fe e0 Data Ascii: GIF89aZ7HVW0y[3wlbfueN2lbd\|>A8iVGS~]RT:AGEh6~gNc(%Dr7I;y,R&T}6Jptjd)Qfaj$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49767	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:50 UTC	640	OUT	GET /image/image/companyindex.data_/images/spacer.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	255	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:35 GMT ETag: "2e19b1-2b-4216fda5606c0" Accept-Ranges: bytes Content-Length: 43 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49768	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:50 UTC	615	OUT	GET /image/toplogo200404.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:25 GMT ETag: "2e1996-6629-4216fd9bd7040" Accept-Ranges: bytes Content-Length: 26153 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:51 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 58 02 5d 00 f7 00 00 bd d9 ff 69 a5 ff ee f4 ff b1 d0 ff 97 d6 ff c0 e5 ff 2c 81 ff 05 69 ff a5 c9 ff d3 ed ff c5 dd ff fa fc ff c8 de ff 62 a1 ff c1 da ff 11 70 ff f4 f8 ff df ec fe f1 f7 ff 5d 9d ff 91 bd ff 49 92 ff 85 b6 ff ea f3 ff 59 be ff 99 c2 ff 71 aa ff 7d b1 ff 21 7a ff f0 f6 ff e6 f0 ff 9e c5 ff 55 99 ff 35 86 ff ec f4 ff 4e 95 ff 64 a2 ff 54 bc ff b4 d2 ff dc f1 ff 19 75 ff 8a b9 ff 6f b0 ff f8 fa ff 41 8d ff e4 ef ff 25 7c ff d9 e6 fa 76 ad ff 8b d1 ff 39 88 ff a0 c6 ff f6 fa ff 8c ba ff ec f2 fd cc eb ff e0 ec ff 14 72 ff fd fe ff 50 96 ff bc d2 f5 b4 e1 ff 6b c5 ff 29 7e ff bc e4 ff 61 c1 ff 0a 6c ff a3 db ff 59 a3 ff 78 ae ff dc ea ff cc e0 ff 3c 8a ff d2 e4 ff d6 e6 ff 01 67 ff e9 f6 ff aa cc ff 63 c1 ff e8 f1 ff 46 90 Data Ascii: GIF89aX]i,ibp]IYq}!zU5NdTuoA%\|v9rPk)~alYx<gcF
2024-07-03 14:43:51 UTC	9769	IN	Data Raw: 08 58 c0 9b 12 9a 14 8a d6 18 24 b0 6b 50 32 11 5c c0 d1 ca f2 63 00 73 64 44 43 33 54 b3 35 5f 33 36 07 f3 3f fc 72 2d 77 33 d2 5e 72 2d f0 e3 0d 87 d2 2f 30 85 06 08 81 0c fd 83 35 74 72 63 50 c2 c2 da 4d c3 72 8a 0c 10 ff 2d 21 eb ea d1 02 00 af 12 81 8f 28 b1 64 cc 81 1d dc c0 3b 30 81 88 7a 04 6b f8 01 13 d8 41 15 ac 01 2b b0 4e 10 20 ef 15 3f f4 43 7f ac 66 c6 c1 23 f8 00 01 00 81 40 7f f1 64 88 e6 e2 48 01 f5 22 98 69 42 22 48 ba ec f5 b0 a6 cc 86 6f fb ba af 34 18 ad 37 f3 03 0b 7b 04 4b b7 34 d2 a2 b2 4c 23 2d d1 6a b2 37 ab 00 af 4a f3 3f 48 43 22 d7 72 1d 07 72 4d 1f ad 0a 00 32 fb 0e 35 3f 10 81 10 95 32 3f 68 43 fc 12 71 2d b3 70 4c d7 34 2a 53 42 9c 95 67 11 9a 89 0a 6f 75 37 b8 6f 27 6f 75 0a bf 34 a8 f8 34 52 ab f4 95 a8 b2 1b cf 31 5a 4b Data Ascii: X$kP2\csdDC3T5_36?r-w3^r-/05trcPMr-!(d;0zkA+N ?Cf#@dH"iB"Ho47{K4L#-j7J?HC"rrM25?2?hCq-pL4*SBgou7o'ou44R1ZK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49769	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:50 UTC	360	OUT	GET /image/contact.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:02 GMT ETag: "2e18d3-be6-4216fd4caf580" Accept-Ranges: bytes Content-Length: 3046 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:50 UTC	3046	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 ff 35 72 f9 f9 f9 b7 9a a3 cb 0a 44 b9 b9 b9 e9 e9 e9 f2 4a 7d fc 0c 54 6b 4a 83 c4 09 41 fd 99 b7 ab 08 39 d8 d8 d8 ff 12 59 dc 0a 49 c7 85 99 77 48 79 57 1b 77 b8 54 72 c4 c4 c4 d6 74 91 dc dc dc c3 22 52 14 37 ba db 48 74 ed ed ed d5 d5 d5 c1 c1 c1 e2 8b a5 c7 44 6b 6d 38 76 ce ce ce 79 11 56 ba 09 3e ff 22 64 e3 0b 4c d0 0a 45 fc fc fc ec 4a 7b ff 40 7a e0 e0 e0 56 2d 74 f9 4a 7e 92 0c 42 d1 d1 d1 ff 46 7d fd e9 ec ff 38 74 cb 7a 92 f3 0c 51 f5 87 a8 8c 51 72 d9 51 7b e9 0b 4e d3 52 79 ae ae ae d7 bb c4 ac ac ac 09 33 c2 ff 18 5d 03 33 c9 48 1e 81 f6 43 79 c4 38 62 fc e2 ea 68 15 65 25 39 aa e6 e6 e6 c9 52 76 b4 b4 b4 f4 f4 f4 d7 5b 81 bc bc bc b1 b1 b1 fe 56 89 46 44 99 ff 1c 60 39 23 8c b2 ab ad b5 09 3d b3 b1 Data Ascii: GIF89aZ75rDJ}TkJA9YIwHyWwTrt"R7HtDkm8vyV>"dLEJ{@zV-tJ~BF}8tzQQrQ{NRy3]3HCy8bhe%9Rv[VFD`9#=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49770	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:50 UTC	390	OUT	GET /image/image/whoisbg.data_/images/whoisbg_02.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:50 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:50 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:40 GMT ETag: "2e19bd-a7-4216fdaa25200" Accept-Ranges: bytes Content-Length: 167 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:50 UTC	167	IN	Data Raw: 47 49 46 38 39 61 a0 00 17 00 91 00 00 cc cc cc ff ff ff 99 cc ff 66 cc ff 21 f9 04 00 00 00 00 00 2c 00 00 00 00 a0 00 17 00 00 02 78 84 14 a3 cb ed 0f a3 9c b4 da 8b 71 10 20 18 94 85 e2 48 96 26 b5 75 5f 72 b6 ee 0b 93 a9 77 b0 f1 8d e7 f0 bc ea fe 0f b4 f0 6a c1 a2 b1 38 04 1d 97 cc 1d 87 a6 6c 4a a7 a1 a4 8d 8a cd 42 ac da ae 57 c1 fd 8a a9 e1 b1 79 59 3e ab 81 e9 b5 1b d7 7e cb 5d f1 b9 5d f6 ec dd f7 a5 3a ff 8f 92 47 04 48 28 24 18 55 98 b8 75 78 a5 e8 b8 e0 f7 58 18 29 09 38 53 00 00 3b Data Ascii: GIF89af!,xq H&u_rwj8lJBWyY>~]]:GH($UuxX)8S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49771	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:50 UTC	618	OUT	GET /image/domain_top_basic.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:51 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:51 GMT Server: Apache Last-Modified: Fri, 29 Jul 2005 18:31:02 GMT ETag: "2e18db-7c4a-3fd0e157cc580" Accept-Ranges: bytes Content-Length: 31818 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:51 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 b8 01 cf 00 f7 ff 00 da db dc a8 c7 b8 e2 e4 e5 ba c7 d9 d6 d8 f3 7d 7e 7e f3 f5 fe b3 da 97 42 68 ff f5 f8 fe ff fe fe dc fa eb ef f1 f2 ee f2 fe 74 8e c6 d3 f8 e6 ce da fe 33 33 33 f8 f9 f9 cc cc cd bb c2 f0 d4 dc ec dc e8 fa d2 d3 d4 ad b9 c9 ed f1 f7 ea ed fd 98 98 98 8d 8d 8d 9c b2 fc df e0 e0 c4 d1 ff 97 a7 f2 ee ee ed 9a b6 a8 be bf bf c5 ca f1 cd d0 f2 cd f3 e1 3f 3f 3f d2 dc ff f5 f5 f6 c9 cd f1 68 67 67 e7 e8 e9 c3 c5 c5 28 53 ff 8f 99 a6 d2 e1 f4 d8 da f4 b7 bc c3 99 a4 b2 ec f6 e8 a1 ac bb ba dd cc cf d0 d1 b1 b3 b3 8d a7 9b c5 cb d5 96 a0 ac b2 d4 c4 ab c2 f9 fd be be d5 e4 f8 f8 f9 ff f8 e2 e2 d3 d5 f2 01 01 01 c9 d5 ff c1 ce e1 d8 e6 f9 ea ea e9 be cb e5 a4 b8 ae ed ef f0 b2 c4 fc e6 ef fc a0 a0 a1 ad ae ae fb fc fb cc da Data Ascii: GIF89a}~~Bht333???hgg(S
2024-07-03 14:43:51 UTC	15434	IN	Data Raw: 68 2c 29 cb 71 c6 8e 6f 20 13 b2 41 30 72 2e 17 f2 1d 6f 80 3f b0 01 1e a4 b2 fb 06 81 c6 16 2e e0 e2 ae 0f 80 30 08 fb 40 35 0f 2d d1 12 ed cd 76 b3 0f e0 03 d5 e2 eb be d6 40 70 25 03 3a 63 80 3a af 33 3b 63 00 3a 9b f3 0c e4 96 1f f8 ff c1 b8 be 00 00 98 14 0c 98 ea 0e ec d6 3c f7 b3 3f ff 33 40 f7 33 b7 fa 81 00 4c 70 e9 46 b1 11 c7 c2 2e a4 80 fa 0a f0 1b 18 c2 16 3b 80 0e 5c 43 30 08 c2 16 8f 82 20 78 80 15 af f2 6f 38 2c fe d2 ef 24 4f 72 01 9c 71 48 4f 32 fd ae 71 2d 8c 40 1f 47 c0 24 d7 02 49 fb 43 35 40 b2 3f ec ef 19 33 b3 3f ac 34 1a 93 74 04 60 ec 0a a8 f1 0a 24 b2 1d bb 72 04 9c c0 0a d8 31 26 87 40 fc 0a c0 19 63 f2 f8 a6 c0 26 37 73 08 10 72 01 8c 74 23 97 ef 3e 84 40 0a 10 83 3f 00 f5 1d 93 41 f9 52 b5 21 3f 72 fc b6 00 22 00 40 35 1c 01 Data Ascii: h,)qo A0r.o?.0@5-v@p%:c:3;c:<?3@3LpF.;\C0 xo8,$OrqHO2q-@G$IC5@?3?4t`$r1&@c&7srt#>@?AR!?r"@5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49772	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:50 UTC	390	OUT	GET /image/image/whoisbg.data_/images/whoisbg_05.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:51 UTC	283	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:51 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:41 GMT ETag: "2e19c0-1bd-4216fdab19440" Accept-Ranges: bytes Content-Length: 445 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:51 UTC	445	IN	Data Raw: 47 49 46 38 39 61 a0 00 12 00 d5 00 00 a6 cc f2 d2 d2 d2 ee ee ee d6 d6 d6 e7 e7 e7 b7 cc e1 9f cc f9 b5 cc e3 f3 f3 f3 a3 cc f5 bb cc dd c0 cc d8 fd fd fd e4 e4 e4 d1 d1 d1 9c cc fc e3 e3 e3 9d cc fb e5 e5 e5 b1 cc e7 b0 cc e8 fe fe fe de de de d9 d9 d9 a0 cc f8 9e cc fa d0 d0 d0 cf cf cf d3 d3 d3 a4 cc f4 d7 d7 d7 cc cc cc ff ff ff 99 cc ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 a0 00 12 00 00 06 da c0 4f 68 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 b4 f8 01 6d 1e d3 ac 76 cb ed 7a 95 55 0e Data Ascii: GIF89a!,OhH,rl:mvzU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49773	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:51 UTC	608	OUT	GET /image/t_info.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:51 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:51 GMT Server: Apache Last-Modified: Fri, 29 Jul 2005 18:31:06 GMT ETag: "2e1976-38da-3fd0e15b9ce80" Accept-Ranges: bytes Content-Length: 14554 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:51 UTC	14554	IN	Data Raw: 47 49 46 38 39 61 90 01 64 00 e6 00 00 ba e1 ff c4 c4 fd 7d 97 e5 c1 e4 ff 6a be ff fa fd ff fd fe ff ed 55 55 f3 92 92 b3 de ff ac db ff f1 f9 ff ab ab fb 8d 8d 8d 73 c2 ff 8a cc ff 8a 8a fa cc e9 ff 4e b4 f9 f4 fa ff e1 eb f4 7a c5 ff d9 ef ff 9b d3 ff b3 b3 b3 e9 f5 ff 00 ba e9 84 c9 ff 15 d0 ff e7 1e 1e dd f0 ff 90 ce ff 99 ad eb 27 27 f7 e0 f2 ff 4e 4e f9 f9 c6 c6 42 68 d9 c8 c8 c8 ec f7 ff 6e bf ff c9 e7 ff a1 d6 ff e6 f4 ff d6 ed ff 95 d1 ff 6e 78 f2 ee f8 ff 00 66 ff f1 f5 f9 7f b2 ff a4 a4 a4 bf d9 fe d0 ea ff ec ec ec 3f 8c ff 27 52 d4 a5 d8 ff f6 fc ff 37 98 ef f4 f4 f4 e4 f3 ff 75 75 75 5d bd fb 0b ce ff f8 fb ff 00 c2 f2 d2 ec ff ed f0 f3 53 d8 f9 02 cc fe de ea f3 ee f5 fa 7d c7 ff a9 c1 f4 e9 f1 f7 80 c7 ff 35 d4 fc 10 cf ff f5 f8 fb e6 f1 Data Ascii: GIF89ad}jUUsNz''NNBhnnxf?'R7uuu]S}5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49774	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:51 UTC	390	OUT	GET /image/image/whoisbg.data_/images/whoisbg_03.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:51 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:51 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:41 GMT ETag: "2e19be-c9-4216fdab19440" Accept-Ranges: bytes Content-Length: 201 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:51 UTC	201	IN	Data Raw: 47 49 46 38 39 61 a0 00 0a 00 b3 00 00 cf e7 ff f7 fb ff 74 d1 ff bd e9 ff 71 d0 ff f6 fa ff 9b cd ff cc cc cc ff ff ff 99 cc ff 66 cc ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 a0 00 0a 00 00 04 76 f0 a4 84 94 bd 38 eb cd bb ff 60 28 8e 24 89 24 07 22 51 65 eb be 70 2c 83 67 ba 56 73 ae ef 3c 5c ab 13 5c 6f 48 2c f2 7e ab 00 c1 c8 6c 3a 41 84 00 0a 98 00 0c 04 cf ac 96 29 18 00 a6 2b 03 a0 80 28 9b cf e8 b4 7a cd 6e bb df f0 b8 7c fe 2e 00 0c e0 89 7e cf ef fb ff 80 81 82 83 84 85 86 87 88 7c 36 89 8c 8d 8e 8f 90 91 81 8b 92 95 96 97 98 8e 29 11 00 3b Data Ascii: GIF89atqf!,v8`($$"Qep,gVs<\\oH,~l:A)+(zn\|.~\|6);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49776	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:51 UTC	606	OUT	GET /image/home.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:51 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:51 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:12 GMT ETag: "2e18ea-b60-4216fd5638c00" Accept-Ranges: bytes Content-Length: 2912 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:51 UTC	2912	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 dc c5 f7 b1 6d ff b8 83 f6 b1 8c db a0 4d ff a2 51 ff b5 75 ff b6 79 fd fa fa fa f3 ea fc b3 7a f5 43 30 aa d4 d4 d4 f8 f8 f8 99 4a f4 f6 f6 f6 4d 4a 9e 79 61 a7 d2 d2 d2 a6 58 ff a1 75 d3 ed e3 f9 a3 75 d9 83 54 b9 68 5d a3 a4 55 ff e0 e0 e0 c4 ae de 35 37 a8 38 48 ab 83 66 ab 8d 6a b5 55 34 b4 b0 76 f3 84 4a c6 9c 73 cb d6 d6 d6 f2 f2 f2 d4 b5 f8 7e 3d ca ea ea ea 0a 33 c4 c1 a5 e2 b2 70 ff d9 d9 d9 99 65 d6 a8 5d ff 6d 35 b0 d0 ce d2 ac 73 ec 7a 3b c2 ef ef ef ad 66 ff b5 7a f9 9f 4c fd da da da e8 e8 e8 cd a7 f9 02 33 ca 81 3e cd 92 46 e9 cb b3 e5 c6 ac e4 ae 72 f3 e5 d6 f5 71 37 b5 e4 e4 e4 dd dd dd 85 40 d5 8e 44 e2 65 31 a2 45 4c a9 bb 8d ee 95 48 ed a4 6b e4 ed ed ed 95 6c c3 ab 79 e5 fe fe fe 2b 44 b3 de de Data Ascii: GIF89aZ7mMQuyzC0JMJyaXuuTh]U578HfjU4vJs~=3pe]m5sz;fzL3>Frq7@De1ELHkly+D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49775	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:51 UTC	609	OUT	GET /image/hosting.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:51 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:51 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:15 GMT ETag: "2e18ef-be2-4216fd59152c0" Accept-Ranges: bytes Content-Length: 3042 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:51 UTC	3042	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 62 ca f9 35 a5 d9 58 c6 f9 49 88 aa 02 ad fa c4 eb fd 1d b8 ff 37 69 a4 fa fa fa a6 e2 fe a4 d6 ed 3b b4 ec fd fd fd db f2 fc 31 be ff 45 9b c3 ea ea ea 02 a2 eb 3a bf fb e8 e8 e8 32 6b 9d 0a 3e bb f5 fb fe 01 68 b9 01 75 aa 9c d4 ed 2d bd ff 49 a1 c9 3b 84 a8 f8 f8 f8 43 75 a1 6a b1 d2 43 b2 e4 45 c4 fe 36 ad e3 19 b6 fd 48 7b 9f 00 39 c0 3c 9c c8 02 b0 ff 02 a9 f5 02 8d cd 49 c5 fd 27 8b b9 02 85 c1 ed ed ed 07 46 a5 f4 f4 f4 02 6e bf 24 bb ff 38 c0 fe 01 34 c9 41 b5 e9 f0 f0 f0 ee ee ee 7d cd f2 01 58 b9 02 36 c7 f5 f6 f6 16 b6 ff 46 a9 d6 d6 f1 fd 7c d5 fd db e6 ea f2 f2 f2 01 7d b5 11 b5 ff c5 df ec 09 b2 ff 02 99 dd 29 bc ff 21 ba ff 15 46 ae 06 b1 ff 02 90 d1 01 6a a3 4b 92 b3 c2 e2 f0 01 59 ab 01 82 be c2 dd Data Ascii: GIF89aZ7b5XI7i;1E:2k>hu-I;CujCE6H{9<I'Fn$84A}X6F\|})!FjKY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49777	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:51 UTC	391	OUT	GET /image/image/hostingindex.data_/images/spacer.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:51 UTC	255	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:51 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:38 GMT ETag: "2e19b7-2b-4216fda83cd80" Accept-Ranges: bytes Content-Length: 43 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49778	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:51 UTC	361	OUT	GET /image/linkicon.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:52 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:51 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:25 GMT ETag: "2e190b-6e-4216fd629e940" Accept-Ranges: bytes Content-Length: 110 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:52 UTC	110	IN	Data Raw: 47 49 46 38 39 61 07 00 0a 00 b3 08 00 ce cc ff 00 60 99 99 bf d6 20 9d ff 9c cb e7 5d 9b bf 99 c8 ff 00 8e ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 08 00 2c 00 00 00 00 07 00 0a 00 00 04 1b 10 10 44 a9 19 b3 9a 83 f5 e1 d9 f6 75 e2 27 08 65 51 20 a2 6a 1d ae 15 ac 55 04 00 3b Data Ascii: GIF89a` ]!,Du'eQ jU;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49779	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:51 UTC	391	OUT	GET /image/image/companyindex.data_/images/spacer.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:52 UTC	255	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:52 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:35 GMT ETag: "2e19b1-2b-4216fda5606c0" Accept-Ranges: bytes Content-Length: 43 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49780	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:51 UTC	366	OUT	GET /image/toplogo200404.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:52 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:52 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:25 GMT ETag: "2e1996-6629-4216fd9bd7040" Accept-Ranges: bytes Content-Length: 26153 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:52 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 58 02 5d 00 f7 00 00 bd d9 ff 69 a5 ff ee f4 ff b1 d0 ff 97 d6 ff c0 e5 ff 2c 81 ff 05 69 ff a5 c9 ff d3 ed ff c5 dd ff fa fc ff c8 de ff 62 a1 ff c1 da ff 11 70 ff f4 f8 ff df ec fe f1 f7 ff 5d 9d ff 91 bd ff 49 92 ff 85 b6 ff ea f3 ff 59 be ff 99 c2 ff 71 aa ff 7d b1 ff 21 7a ff f0 f6 ff e6 f0 ff 9e c5 ff 55 99 ff 35 86 ff ec f4 ff 4e 95 ff 64 a2 ff 54 bc ff b4 d2 ff dc f1 ff 19 75 ff 8a b9 ff 6f b0 ff f8 fa ff 41 8d ff e4 ef ff 25 7c ff d9 e6 fa 76 ad ff 8b d1 ff 39 88 ff a0 c6 ff f6 fa ff 8c ba ff ec f2 fd cc eb ff e0 ec ff 14 72 ff fd fe ff 50 96 ff bc d2 f5 b4 e1 ff 6b c5 ff 29 7e ff bc e4 ff 61 c1 ff 0a 6c ff a3 db ff 59 a3 ff 78 ae ff dc ea ff cc e0 ff 3c 8a ff d2 e4 ff d6 e6 ff 01 67 ff e9 f6 ff aa cc ff 63 c1 ff e8 f1 ff 46 90 Data Ascii: GIF89aX]i,ibp]IYq}!zU5NdTuoA%\|v9rPk)~alYx<gcF
2024-07-03 14:43:52 UTC	9769	IN	Data Raw: 08 58 c0 9b 12 9a 14 8a d6 18 24 b0 6b 50 32 11 5c c0 d1 ca f2 63 00 73 64 44 43 33 54 b3 35 5f 33 36 07 f3 3f fc 72 2d 77 33 d2 5e 72 2d f0 e3 0d 87 d2 2f 30 85 06 08 81 0c fd 83 35 74 72 63 50 c2 c2 da 4d c3 72 8a 0c 10 ff 2d 21 eb ea d1 02 00 af 12 81 8f 28 b1 64 cc 81 1d dc c0 3b 30 81 88 7a 04 6b f8 01 13 d8 41 15 ac 01 2b b0 4e 10 20 ef 15 3f f4 43 7f ac 66 c6 c1 23 f8 00 01 00 81 40 7f f1 64 88 e6 e2 48 01 f5 22 98 69 42 22 48 ba ec f5 b0 a6 cc 86 6f fb ba af 34 18 ad 37 f3 03 0b 7b 04 4b b7 34 d2 a2 b2 4c 23 2d d1 6a b2 37 ab 00 af 4a f3 3f 48 43 22 d7 72 1d 07 72 4d 1f ad 0a 00 32 fb 0e 35 3f 10 81 10 95 32 3f 68 43 fc 12 71 2d b3 70 4c d7 34 2a 53 42 9c 95 67 11 9a 89 0a 6f 75 37 b8 6f 27 6f 75 0a bf 34 a8 f8 34 52 ab f4 95 a8 b2 1b cf 31 5a 4b Data Ascii: X$kP2\csdDC3T5_36?r-w3^r-/05trcPMr-!(d;0zkA+N ?Cf#@dH"iB"Ho47{K4L#-j7J?HC"rrM25?2?hCq-pL4*SBgou7o'ou44R1ZK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49781	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	357	OUT	GET /image/home.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:52 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:12 GMT ETag: "2e18ea-b60-4216fd5638c00" Accept-Ranges: bytes Content-Length: 2912 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:53 UTC	2912	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 dc c5 f7 b1 6d ff b8 83 f6 b1 8c db a0 4d ff a2 51 ff b5 75 ff b6 79 fd fa fa fa f3 ea fc b3 7a f5 43 30 aa d4 d4 d4 f8 f8 f8 99 4a f4 f6 f6 f6 4d 4a 9e 79 61 a7 d2 d2 d2 a6 58 ff a1 75 d3 ed e3 f9 a3 75 d9 83 54 b9 68 5d a3 a4 55 ff e0 e0 e0 c4 ae de 35 37 a8 38 48 ab 83 66 ab 8d 6a b5 55 34 b4 b0 76 f3 84 4a c6 9c 73 cb d6 d6 d6 f2 f2 f2 d4 b5 f8 7e 3d ca ea ea ea 0a 33 c4 c1 a5 e2 b2 70 ff d9 d9 d9 99 65 d6 a8 5d ff 6d 35 b0 d0 ce d2 ac 73 ec 7a 3b c2 ef ef ef ad 66 ff b5 7a f9 9f 4c fd da da da e8 e8 e8 cd a7 f9 02 33 ca 81 3e cd 92 46 e9 cb b3 e5 c6 ac e4 ae 72 f3 e5 d6 f5 71 37 b5 e4 e4 e4 dd dd dd 85 40 d5 8e 44 e2 65 31 a2 45 4c a9 bb 8d ee 95 48 ed a4 6b e4 ed ed ed 95 6c c3 ab 79 e5 fe fe fe 2b 44 b3 de de Data Ascii: GIF89aZ7mMQuyzC0JMJyaXuuTh]U578HfjU4vJs~=3pe]m5sz;fzL3>Frq7@De1ELHkly+D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49783	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	616	OUT	GET /image/JPRS_logo_w100.jpg HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:52 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:22 GMT ETag: "2e1889-1012-4216fd5fc2280" Accept-Ranges: bytes Content-Length: 4114 Vary: User-Agent Connection: close Content-Type: image/jpeg
2024-07-03 14:43:53 UTC	4114	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 0a 3c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 e9 0a 50 72 69 6e 74 20 49 6e 66 6f 00 00 00 00 78 00 04 00 00 00 48 00 48 00 00 00 00 03 0d 02 1a ff e2 ff e4 03 2b 02 36 e2 42 05 7b 03 de 00 02 00 00 02 58 02 58 00 00 00 00 19 73 11 76 00 01 00 00 00 64 00 00 00 02 00 01 01 01 00 02 00 01 27 0f 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 34 02 00 19 01 90 00 00 00 16 e8 01 00 21 08 21 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 38 42 49 4d 03 ed 0a 52 65 73 6f 6c 75 74 69 6f 6e 00 00 00 00 10 00 48 00 00 00 01 00 02 00 48 00 00 00 01 00 02 38 42 49 4d 04 0d 18 46 58 20 47 6c 6f 62 61 6c 20 4c 69 67 68 74 69 6e 67 20 41 6e 67 6c 65 00 00 00 00 04 00 Data Ascii: JFIFHH<Photoshop 3.08BIMPrint InfoxHH+6B{XXsvd'4!!@8BIMResolutionHH8BIMFX Global Lighting Angle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49784	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	359	OUT	GET /image/t_info.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:52 GMT Server: Apache Last-Modified: Fri, 29 Jul 2005 18:31:06 GMT ETag: "2e1976-38da-3fd0e15b9ce80" Accept-Ranges: bytes Content-Length: 14554 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:53 UTC	14554	IN	Data Raw: 47 49 46 38 39 61 90 01 64 00 e6 00 00 ba e1 ff c4 c4 fd 7d 97 e5 c1 e4 ff 6a be ff fa fd ff fd fe ff ed 55 55 f3 92 92 b3 de ff ac db ff f1 f9 ff ab ab fb 8d 8d 8d 73 c2 ff 8a cc ff 8a 8a fa cc e9 ff 4e b4 f9 f4 fa ff e1 eb f4 7a c5 ff d9 ef ff 9b d3 ff b3 b3 b3 e9 f5 ff 00 ba e9 84 c9 ff 15 d0 ff e7 1e 1e dd f0 ff 90 ce ff 99 ad eb 27 27 f7 e0 f2 ff 4e 4e f9 f9 c6 c6 42 68 d9 c8 c8 c8 ec f7 ff 6e bf ff c9 e7 ff a1 d6 ff e6 f4 ff d6 ed ff 95 d1 ff 6e 78 f2 ee f8 ff 00 66 ff f1 f5 f9 7f b2 ff a4 a4 a4 bf d9 fe d0 ea ff ec ec ec 3f 8c ff 27 52 d4 a5 d8 ff f6 fc ff 37 98 ef f4 f4 f4 e4 f3 ff 75 75 75 5d bd fb 0b ce ff f8 fb ff 00 c2 f2 d2 ec ff ed f0 f3 53 d8 f9 02 cc fe de ea f3 ee f5 fa 7d c7 ff a9 c1 f4 e9 f1 f7 80 c7 ff 35 d4 fc 10 cf ff f5 f8 fb e6 f1 Data Ascii: GIF89ad}jUUsNz''NNBhnnxf?'R7uuu]S}5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49782	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	625	OUT	GET /srsverify/seal_secure_site_tr.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:52 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:25:44 GMT ETag: "2e3ec5-79b-4216ffb0f1a00" Accept-Ranges: bytes Content-Length: 1947 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:53 UTC	1947	IN	Data Raw: 47 49 46 38 39 61 3a 00 42 00 c4 1f 00 03 43 97 6f 94 c4 fa fb fc 9c a0 a5 35 6b b0 50 7d b7 59 61 6a 8e aa ce 04 04 05 d1 d2 d2 08 2b 5a 04 33 72 32 4c 6c 16 52 a1 02 13 29 c5 d2 e3 b0 c4 dd 08 3e 86 1e 4c 87 2b 2b 2a 24 5e a8 da e1 e9 2d 3c 50 8e 69 5b 7b 84 8f 02 1f 45 eb ee f1 4a 68 8f 0d 21 3a b7 ba bd 1b 1b 1a 00 00 00 21 f9 04 01 00 00 1f 00 2c 00 00 00 00 3a 00 42 00 00 05 ff e0 27 8e 64 69 9e 68 aa ae 6c eb be 30 49 cd 14 61 17 78 11 ef 68 40 34 c0 60 63 66 23 e0 02 01 1e 0f 00 78 1c 98 d0 28 20 58 3b 20 93 4a 56 24 c2 0c 54 36 8f 02 f3 a0 d1 3c 01 07 02 05 a0 39 06 0e d9 d4 16 32 6d 08 12 07 c1 86 20 90 38 f4 01 02 15 38 04 0e 11 14 05 6f 71 25 0b 0b 5c 02 66 11 02 06 19 0f 03 01 0f 0e 4d 18 10 0f 08 19 1a 01 11 04 53 46 07 70 8b 8d 5c 04 15 1a Data Ascii: GIF89a:BCo5kP}Yaj+Z3r2LlR)>L++*$^-<Pi[{EJh!:!,:B'dihl0Iaxh@4`cf#x( X; JV$T6<92m 88oq%\fMSFp\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49785	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	649	OUT	GET /image/image/companyindex.data_/images/companyindex_03.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	283	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:53 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:35 GMT ETag: "2e19b0-114-4216fda5606c0" Accept-Ranges: bytes Content-Length: 276 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:53 UTC	276	IN	Data Raw: 47 49 46 38 39 61 96 00 13 00 c4 17 00 9f 9f ff f7 f7 ff f6 f6 ff b7 b7 ff fb fb ff b1 b1 ff d3 d3 ff ed ed ff 9d 9d ff aa aa ff b5 b5 ff c7 c7 ff c5 c5 ff c4 c4 ff ad ad ff e3 e3 ff fd fd ff a8 a8 ff cf cf ff a2 a2 ff af af ff cd cd ff 99 99 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 17 00 2c 00 00 00 00 96 00 13 00 00 05 91 a0 25 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ff 02 be a0 70 78 8b 10 8f c8 a4 69 52 50 3a 9f 41 4a 03 4a ad da 1a 0f ab 76 db 7a 40 80 dc b0 d8 02 20 5c 16 e3 b4 76 71 b9 08 c0 ea 78 12 20 68 5f 2a f2 fc 51 62 6f 0f f4 80 3d 03 7d 6d 01 09 81 88 37 09 01 84 85 4d 89 90 30 05 8c 8d 6d 04 0c 91 99 2b 0c 66 95 7d 07 7f 9a a2 22 03 07 9e 9e 02 06 0a 0e 08 a3 Data Ascii: GIF89a!,%dihlp,tmx\|pxiRP:AJJvz@ \vqx h_*Qbo=}m7M0m+f}"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49790	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	608	OUT	GET /image/back_b.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:53 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:14:37 GMT ETag: "2e189c-484-4216fd34d7d40" Accept-Ranges: bytes Content-Length: 1156 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:53 UTC	1156	IN	Data Raw: 47 49 46 38 39 61 64 00 18 00 e6 63 00 f5 f9 ff 70 9f ff 83 ac ff e2 ec ff d9 e5 ff cf df ff 96 b9 ff a0 bf ff b3 cc ff ec f2 ff a9 c6 ff bc d2 ff c5 d9 ff 79 a6 ff d7 e5 ff e3 ed ff cc dd ff fa fc ff fd fd ff ef f4 ff ae c9 ff ee f4 ff ef f5 ff d7 e4 ff c2 d6 ff 82 ac ff f8 fb ff e2 eb ff f1 f6 ff f6 f9 ff d6 e3 ff e3 ec ff f1 f5 ff d1 e0 ff e6 ee ff d0 df ff ac c7 ff e0 ea ff 95 b9 ff e5 ed ff fb fc ff a7 c4 ff ad c8 ff ec f3 ff be d3 ff c1 d5 ff c5 d8 ff b6 cf ff c0 d5 ff c8 da ff da e7 ff b1 cb ff cb dc ff cb dd ff fa fb ff 6f 9f ff bf d4 ff f8 fa ff c7 d9 ff cd dd ff f2 f7 ff a2 c1 ff f5 f8 ff b9 d1 ff a9 c5 ff f7 fa ff c8 db ff ca dc ff df e9 ff d2 e1 ff b7 cf ff b0 ca ff fe fe ff fe ff ff e9 f0 ff d3 e1 ff b5 ce ff e8 ef ff cd de ff be d4 ff f2 f6 Data Ascii: GIF89adcpyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49788	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	360	OUT	GET /image/hosting.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:53 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:15 GMT ETag: "2e18ef-be2-4216fd59152c0" Accept-Ranges: bytes Content-Length: 3042 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:53 UTC	3042	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 62 ca f9 35 a5 d9 58 c6 f9 49 88 aa 02 ad fa c4 eb fd 1d b8 ff 37 69 a4 fa fa fa a6 e2 fe a4 d6 ed 3b b4 ec fd fd fd db f2 fc 31 be ff 45 9b c3 ea ea ea 02 a2 eb 3a bf fb e8 e8 e8 32 6b 9d 0a 3e bb f5 fb fe 01 68 b9 01 75 aa 9c d4 ed 2d bd ff 49 a1 c9 3b 84 a8 f8 f8 f8 43 75 a1 6a b1 d2 43 b2 e4 45 c4 fe 36 ad e3 19 b6 fd 48 7b 9f 00 39 c0 3c 9c c8 02 b0 ff 02 a9 f5 02 8d cd 49 c5 fd 27 8b b9 02 85 c1 ed ed ed 07 46 a5 f4 f4 f4 02 6e bf 24 bb ff 38 c0 fe 01 34 c9 41 b5 e9 f0 f0 f0 ee ee ee 7d cd f2 01 58 b9 02 36 c7 f5 f6 f6 16 b6 ff 46 a9 d6 d6 f1 fd 7c d5 fd db e6 ea f2 f2 f2 01 7d b5 11 b5 ff c5 df ec 09 b2 ff 02 99 dd 29 bc ff 21 ba ff 15 46 ae 06 b1 ff 02 90 d1 01 6a a3 4b 92 b3 c2 e2 f0 01 59 ab 01 82 be c2 dd Data Ascii: GIF89aZ7b5XI7i;1E:2k>hu-I;CujCE6H{9<I'Fn$84A}X6F\|})!FjKY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49789	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	610	OUT	GET /image/underbar.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:53 GMT Server: Apache Last-Modified: Sun, 27 Jun 2010 15:51:11 GMT ETag: "2e199f-6f35-48a04f92079c0" Accept-Ranges: bytes Content-Length: 28469 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:53 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 0c 03 32 00 f7 ff 00 00 d5 ff 00 cd ff 16 c7 e7 00 e5 ff 78 af fb 47 8f f7 00 c5 ff 00 b4 ff 00 bc ff c9 da f7 16 b8 e7 87 b3 fb 46 79 f2 ea ea ea 01 ae fe 31 72 f7 16 e6 e7 17 76 e6 01 6b ff 00 7b ff 16 68 e9 00 73 ff be d7 fc d3 e4 fd 15 4b fe b3 b5 b9 31 8c f8 00 4b ff 00 5b ff 16 83 fd 68 98 f7 00 53 ff 92 ad d6 00 63 ff 16 59 e8 68 92 d4 01 4b e8 02 83 e7 d9 da dc 71 8d b7 c7 c8 c8 00 83 ff a8 b8 cf 12 dd ff 0a dd fe f5 f5 f5 00 dd f3 12 d5 ff 12 e5 ff 12 b4 ff 1a dd ff 00 dd e5 52 86 ce 01 cd e5 01 eb ff 0a d5 ff 00 c5 f5 01 d5 f5 00 b4 ed 01 e5 e5 0a c5 ff 00 dd ed 01 e5 ed 0a e5 ff 0a cd ff 00 bc f5 00 cd f5 12 bc ff 00 d5 e5 12 cd ff 12 c5 ff 00 e5 f5 1a b4 ff 0a b3 ff 0a bc ff 00 c5 ed 30 70 d8 01 b3 f5 00 d5 ed 91 c3 fc 1a c5 Data Ascii: GIF89a2xGFy1rvk{hsK1K[hScYhKqR0p
2024-07-03 14:43:53 UTC	12085	IN	Data Raw: 02 e8 40 0f 20 00 2a e4 c0 2e d4 78 15 64 c1 2c c4 00 32 5c c1 16 58 41 16 50 81 0d 24 81 3a 2e ff 82 3a 5b 81 3d 08 40 7b da c2 01 60 c1 15 40 80 26 54 82 3d 00 e8 21 cf b2 3e b8 e6 3e 00 81 0e 24 b0 01 dc 83 02 38 81 26 34 01 7a bf 63 4e e2 c0 f0 26 41 2e 40 81 29 6c 82 22 5c 01 16 d4 00 0e 10 81 50 6f 41 10 2c c2 00 d8 80 16 38 41 0f 80 34 30 18 00 0e 74 78 12 58 e9 27 24 42 0d 04 c1 31 9f a7 37 c6 c0 24 6c 01 6b 37 70 00 d8 c0 15 1c 40 10 4c a6 90 32 02 23 1c 01 00 d8 83 15 10 81 02 54 42 00 14 41 0c f4 00 7d 33 42 0c d8 65 00 e8 82 0c e4 25 0f 84 02 02 1b 80 00 f8 43 00 e8 03 32 4c 41 16 0c c1 0b 60 42 3f e4 a3 12 04 c0 22 d4 82 2a dc c3 27 d4 c0 79 de f3 14 10 03 10 40 81 0d 90 c2 d6 1e 03 00 00 c1 01 00 83 0e e8 40 74 37 01 32 e8 03 00 c0 b6 5d 06 Data Ascii: @ .xd,2\XAP$:.:[=@{`@&T=!>>$8&4zcN&A.@)l"\PoA,8A40txX'$B17$lk7p@L2#TBA}3Be%C2LA`B?"'y@@t72]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49787	150.230.193.202	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	609	OUT	GET /0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1 HTTP/1.1 Host: www12.a8.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	120	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-07-03 14:43:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49786	150.230.193.202	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	645	OUT	GET /svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1 HTTP/1.1 Host: www21.a8.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	122	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:52 GMT Content-Type: image/gif Content-Length: 8481 Connection: close
2024-07-03 14:43:53 UTC	8054	IN	Data Raw: 47 49 46 38 39 61 64 00 64 00 f7 00 00 f2 ee e3 e9 b6 83 d3 cb ab 67 bd 95 a9 d9 c3 5a b9 8b 85 cb a9 ef eb e0 fb ec e1 e6 9e 24 f8 f4 e8 f4 f0 e5 ed b8 5e be b4 88 b4 b1 a9 c5 bb 93 fe fb f1 e5 a4 31 dc 87 36 db aa 4f dc 82 0e 54 53 51 e2 9a 51 fb f1 e2 e9 aa 44 2c a4 6c f6 f2 e7 f6 f2 e6 ea e4 d1 e4 a4 64 92 d1 b2 e2 db c5 e3 94 14 de 88 11 f0 eb da e9 e5 da e3 f3 ec ce c5 a2 e7 e1 cc 36 ac 70 db d4 b9 e0 8e 12 31 a8 6e ee bd 6c 41 b0 79 d5 ed e2 d5 ce af f0 ec e1 da 7b 0c d9 d1 b4 cd c2 9d f4 da c1 fc f8 ef f2 d2 b1 d7 74 17 e5 e1 d7 f4 f0 e4 e5 de c9 c8 e8 d8 d2 ba 83 d7 b2 66 99 d1 b8 f3 ee e2 f3 d3 a5 fc f6 ef f6 dc b5 ec e8 dd ea e6 db d3 b7 7b e2 dd d2 6b c1 96 37 ad 70 f1 f9 f5 4d b4 81 33 a9 6f 79 c5 a2 f8 e3 c4 fb f8 ed df a4 3c f1 ec de eb b7 Data Ascii: GIF89addgZ$^16OTSQQD,ld6p1nlAy{tf{k7pM3oy<
2024-07-03 14:43:53 UTC	138	IN	Data Raw: e0 de a2 3d 80 58 54 16 4e 2e ff 79 9f 57 b2 d6 3a 6b 7d cd 03 d6 5f 47 cb 43 42 d9 29 bf c6 59 0d ad 3d 68 61 00 b6 d9 1e 55 eb a9 91 28 e0 95 b9 ff 81 64 80 57 92 68 5b 8d 9f 7f de 3a 09 a9 b1 a5 71 6b c2 b3 5e a9 70 ae 53 2e 76 58 29 8c ed c6 bc 25 28 35 00 d8 81 d1 7c 56 6b 2b 90 c8 66 f3 cd 91 b0 82 6b 12 ca 23 20 0c 48 b2 39 8f 80 57 ac 38 6f 80 cc 3b ff 3c 6b f2 dc a4 31 50 b4 11 37 7c 9f 0c 72 d7 3d 77 Data Ascii: =XTN.yW:k}_GCB)Y=haU(dWh[:qk^pS.vX)%(5\|Vk+fk# H9W8o;<k1P7\|r=w
2024-07-03 14:43:53 UTC	289	IN	Data Raw: 33 d0 8b 52 1a 29 7a b8 a6 9b c8 cb 93 46 4b 98 cd 2b d8 3c 33 74 b7 82 04 2b a2 8f 1e fa dc 0d 40 f2 1f 35 92 68 81 00 d5 07 c8 dd 8a 6c 32 f8 87 75 cd b3 f1 3c 03 35 4c cf a6 00 88 33 28 fa fc dd 77 5f 29 7e dd 7b 3f dd 80 7f 7a 90 c6 9c 1e 48 10 fa bc 39 5c c9 3c 01 44 4f f3 72 37 00 d3 11 60 00 a7 22 40 01 74 37 b9 7f c4 6f 7c df 83 de f8 ac b0 b6 01 b4 c0 0a df 33 c0 35 ac 10 9e a6 dc 15 40 83 f4 d3 dd 4a 4e 71 42 14 9e 30 03 f9 18 51 0b cf 83 06 15 9c 30 54 82 3a a1 19 c8 83 84 2a a0 10 62 29 3c c5 f8 4e f8 bc e8 b1 c0 0a 85 38 c5 9d 72 98 c2 98 41 02 85 66 e0 21 0f 57 f2 09 28 46 31 8a 46 68 87 0b 47 d4 8e 2a 44 d1 1e 2c 90 62 14 0b d0 45 30 86 51 8c 63 24 63 14 57 b2 09 34 a6 51 8d 6b 64 63 1b dd f8 46 38 c6 51 8e 73 6c e3 4a 38 71 47 3c e6 51 8f Data Ascii: 3R)zFK+<3t+@5hl2u<5L3(w_)~{?zH9\<DOr7`"@t7o\|35@JNqB0Q0T:b)<N8rAf!W(F1FhGD,bE0Qc$cW4QkdcF8QslJ8qG<Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49791	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:52 UTC	369	OUT	GET /image/domain_top_basic.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:53 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:53 GMT Server: Apache Last-Modified: Fri, 29 Jul 2005 18:31:02 GMT ETag: "2e18db-7c4a-3fd0e157cc580" Accept-Ranges: bytes Content-Length: 31818 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:53 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 b8 01 cf 00 f7 ff 00 da db dc a8 c7 b8 e2 e4 e5 ba c7 d9 d6 d8 f3 7d 7e 7e f3 f5 fe b3 da 97 42 68 ff f5 f8 fe ff fe fe dc fa eb ef f1 f2 ee f2 fe 74 8e c6 d3 f8 e6 ce da fe 33 33 33 f8 f9 f9 cc cc cd bb c2 f0 d4 dc ec dc e8 fa d2 d3 d4 ad b9 c9 ed f1 f7 ea ed fd 98 98 98 8d 8d 8d 9c b2 fc df e0 e0 c4 d1 ff 97 a7 f2 ee ee ed 9a b6 a8 be bf bf c5 ca f1 cd d0 f2 cd f3 e1 3f 3f 3f d2 dc ff f5 f5 f6 c9 cd f1 68 67 67 e7 e8 e9 c3 c5 c5 28 53 ff 8f 99 a6 d2 e1 f4 d8 da f4 b7 bc c3 99 a4 b2 ec f6 e8 a1 ac bb ba dd cc cf d0 d1 b1 b3 b3 8d a7 9b c5 cb d5 96 a0 ac b2 d4 c4 ab c2 f9 fd be be d5 e4 f8 f8 f9 ff f8 e2 e2 d3 d5 f2 01 01 01 c9 d5 ff c1 ce e1 d8 e6 f9 ea ea e9 be cb e5 a4 b8 ae ed ef f0 b2 c4 fc e6 ef fc a0 a0 a1 ad ae ae fb fc fb cc da Data Ascii: GIF89a}~~Bht333???hgg(S
2024-07-03 14:43:53 UTC	15434	IN	Data Raw: 68 2c 29 cb 71 c6 8e 6f 20 13 b2 41 30 72 2e 17 f2 1d 6f 80 3f b0 01 1e a4 b2 fb 06 81 c6 16 2e e0 e2 ae 0f 80 30 08 fb 40 35 0f 2d d1 12 ed cd 76 b3 0f e0 03 d5 e2 eb be d6 40 70 25 03 3a 63 80 3a af 33 3b 63 00 3a 9b f3 0c e4 96 1f f8 ff c1 b8 be 00 00 98 14 0c 98 ea 0e ec d6 3c f7 b3 3f ff 33 40 f7 33 b7 fa 81 00 4c 70 e9 46 b1 11 c7 c2 2e a4 80 fa 0a f0 1b 18 c2 16 3b 80 0e 5c 43 30 08 c2 16 8f 82 20 78 80 15 af f2 6f 38 2c fe d2 ef 24 4f 72 01 9c 71 48 4f 32 fd ae 71 2d 8c 40 1f 47 c0 24 d7 02 49 fb 43 35 40 b2 3f ec ef 19 33 b3 3f ac 34 1a 93 74 04 60 ec 0a a8 f1 0a 24 b2 1d bb 72 04 9c c0 0a d8 31 26 87 40 fc 0a c0 19 63 f2 f8 a6 c0 26 37 73 08 10 72 01 8c 74 23 97 ef 3e 84 40 0a 10 83 3f 00 f5 1d 93 41 f9 52 b5 21 3f 72 fc b6 00 22 00 40 35 1c 01 Data Ascii: h,)qo A0r.o?.0@5-v@p%:c:3;c:<?3@3LpF.;\C0 xo8,$OrqHO2q-@G$IC5@?3?4t`$r1&@c&7srt#>@?AR!?r"@5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49794	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	367	OUT	GET /image/JPRS_logo_w100.jpg HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:22 GMT ETag: "2e1889-1012-4216fd5fc2280" Accept-Ranges: bytes Content-Length: 4114 Vary: User-Agent Connection: close Content-Type: image/jpeg
2024-07-03 14:43:54 UTC	4114	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 0a 3c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 e9 0a 50 72 69 6e 74 20 49 6e 66 6f 00 00 00 00 78 00 04 00 00 00 48 00 48 00 00 00 00 03 0d 02 1a ff e2 ff e4 03 2b 02 36 e2 42 05 7b 03 de 00 02 00 00 02 58 02 58 00 00 00 00 19 73 11 76 00 01 00 00 00 64 00 00 00 02 00 01 01 01 00 02 00 01 27 0f 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 34 02 00 19 01 90 00 00 00 16 e8 01 00 21 08 21 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 38 42 49 4d 03 ed 0a 52 65 73 6f 6c 75 74 69 6f 6e 00 00 00 00 10 00 48 00 00 00 01 00 02 00 48 00 00 00 01 00 02 38 42 49 4d 04 0d 18 46 58 20 47 6c 6f 62 61 6c 20 4c 69 67 68 74 69 6e 67 20 41 6e 67 6c 65 00 00 00 00 04 00 Data Ascii: JFIFHH<Photoshop 3.08BIMPrint InfoxHH+6B{XXsvd'4!!@8BIMResolutionHH8BIMFX Global Lighting Angle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49795	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	376	OUT	GET /srsverify/seal_secure_site_tr.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:25:44 GMT ETag: "2e3ec5-79b-4216ffb0f1a00" Accept-Ranges: bytes Content-Length: 1947 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:54 UTC	1947	IN	Data Raw: 47 49 46 38 39 61 3a 00 42 00 c4 1f 00 03 43 97 6f 94 c4 fa fb fc 9c a0 a5 35 6b b0 50 7d b7 59 61 6a 8e aa ce 04 04 05 d1 d2 d2 08 2b 5a 04 33 72 32 4c 6c 16 52 a1 02 13 29 c5 d2 e3 b0 c4 dd 08 3e 86 1e 4c 87 2b 2b 2a 24 5e a8 da e1 e9 2d 3c 50 8e 69 5b 7b 84 8f 02 1f 45 eb ee f1 4a 68 8f 0d 21 3a b7 ba bd 1b 1b 1a 00 00 00 21 f9 04 01 00 00 1f 00 2c 00 00 00 00 3a 00 42 00 00 05 ff e0 27 8e 64 69 9e 68 aa ae 6c eb be 30 49 cd 14 61 17 78 11 ef 68 40 34 c0 60 63 66 23 e0 02 01 1e 0f 00 78 1c 98 d0 28 20 58 3b 20 93 4a 56 24 c2 0c 54 36 8f 02 f3 a0 d1 3c 01 07 02 05 a0 39 06 0e d9 d4 16 32 6d 08 12 07 c1 86 20 90 38 f4 01 02 15 38 04 0e 11 14 05 6f 71 25 0b 0b 5c 02 66 11 02 06 19 0f 03 01 0f 0e 4d 18 10 0f 08 19 1a 01 11 04 53 46 07 70 8b 8d 5c 04 15 1a Data Ascii: GIF89a:BCo5kP}Yaj+Z3r2LlR)>L++*$^-<Pi[{EJh!:!,:B'dihl0Iaxh@4`cf#x( X; JV$T6<92m 88oq%\fMSFp\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49796	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	400	OUT	GET /image/image/companyindex.data_/images/companyindex_03.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	283	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:35 GMT ETag: "2e19b0-114-4216fda5606c0" Accept-Ranges: bytes Content-Length: 276 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:54 UTC	276	IN	Data Raw: 47 49 46 38 39 61 96 00 13 00 c4 17 00 9f 9f ff f7 f7 ff f6 f6 ff b7 b7 ff fb fb ff b1 b1 ff d3 d3 ff ed ed ff 9d 9d ff aa aa ff b5 b5 ff c7 c7 ff c5 c5 ff c4 c4 ff ad ad ff e3 e3 ff fd fd ff a8 a8 ff cf cf ff a2 a2 ff af af ff cd cd ff 99 99 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 17 00 2c 00 00 00 00 96 00 13 00 00 05 91 a0 25 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ff 02 be a0 70 78 8b 10 8f c8 a4 69 52 50 3a 9f 41 4a 03 4a ad da 1a 0f ab 76 db 7a 40 80 dc b0 d8 02 20 5c 16 e3 b4 76 71 b9 08 c0 ea 78 12 20 68 5f 2a f2 fc 51 62 6f 0f f4 80 3d 03 7d 6d 01 09 81 88 37 09 01 84 85 4d 89 90 30 05 8c 8d 6d 04 0c 91 99 2b 0c 66 95 7d 07 7f 9a a2 22 03 07 9e 9e 02 06 0a 0e 08 a3 Data Ascii: GIF89a!,%dihlp,tmx\|pxiRP:AJJvz@ \vqx h_*Qbo=}m7M0m+f}"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49797	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	359	OUT	GET /image/back_b.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:14:37 GMT ETag: "2e189c-484-4216fd34d7d40" Accept-Ranges: bytes Content-Length: 1156 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:54 UTC	1156	IN	Data Raw: 47 49 46 38 39 61 64 00 18 00 e6 63 00 f5 f9 ff 70 9f ff 83 ac ff e2 ec ff d9 e5 ff cf df ff 96 b9 ff a0 bf ff b3 cc ff ec f2 ff a9 c6 ff bc d2 ff c5 d9 ff 79 a6 ff d7 e5 ff e3 ed ff cc dd ff fa fc ff fd fd ff ef f4 ff ae c9 ff ee f4 ff ef f5 ff d7 e4 ff c2 d6 ff 82 ac ff f8 fb ff e2 eb ff f1 f6 ff f6 f9 ff d6 e3 ff e3 ec ff f1 f5 ff d1 e0 ff e6 ee ff d0 df ff ac c7 ff e0 ea ff 95 b9 ff e5 ed ff fb fc ff a7 c4 ff ad c8 ff ec f3 ff be d3 ff c1 d5 ff c5 d8 ff b6 cf ff c0 d5 ff c8 da ff da e7 ff b1 cb ff cb dc ff cb dd ff fa fb ff 6f 9f ff bf d4 ff f8 fa ff c7 d9 ff cd dd ff f2 f7 ff a2 c1 ff f5 f8 ff b9 d1 ff a9 c5 ff f7 fa ff c8 db ff ca dc ff df e9 ff d2 e1 ff b7 cf ff b0 ca ff fe fe ff fe ff ff e9 f0 ff d3 e1 ff b5 ce ff e8 ef ff cd de ff be d4 ff f2 f6 Data Ascii: GIF89adcpyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49792	150.230.193.202	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	370	OUT	GET /0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1 HTTP/1.1 Host: www12.a8.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	120	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-07-03 14:43:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49793	150.230.193.202	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	406	OUT	GET /svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1 HTTP/1.1 Host: www21.a8.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	122	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Content-Type: image/gif Content-Length: 8481 Connection: close
2024-07-03 14:43:54 UTC	8054	IN	Data Raw: 47 49 46 38 39 61 64 00 64 00 f7 00 00 f2 ee e3 e9 b6 83 d3 cb ab 67 bd 95 a9 d9 c3 5a b9 8b 85 cb a9 ef eb e0 fb ec e1 e6 9e 24 f8 f4 e8 f4 f0 e5 ed b8 5e be b4 88 b4 b1 a9 c5 bb 93 fe fb f1 e5 a4 31 dc 87 36 db aa 4f dc 82 0e 54 53 51 e2 9a 51 fb f1 e2 e9 aa 44 2c a4 6c f6 f2 e7 f6 f2 e6 ea e4 d1 e4 a4 64 92 d1 b2 e2 db c5 e3 94 14 de 88 11 f0 eb da e9 e5 da e3 f3 ec ce c5 a2 e7 e1 cc 36 ac 70 db d4 b9 e0 8e 12 31 a8 6e ee bd 6c 41 b0 79 d5 ed e2 d5 ce af f0 ec e1 da 7b 0c d9 d1 b4 cd c2 9d f4 da c1 fc f8 ef f2 d2 b1 d7 74 17 e5 e1 d7 f4 f0 e4 e5 de c9 c8 e8 d8 d2 ba 83 d7 b2 66 99 d1 b8 f3 ee e2 f3 d3 a5 fc f6 ef f6 dc b5 ec e8 dd ea e6 db d3 b7 7b e2 dd d2 6b c1 96 37 ad 70 f1 f9 f5 4d b4 81 33 a9 6f 79 c5 a2 f8 e3 c4 fb f8 ed df a4 3c f1 ec de eb b7 Data Ascii: GIF89addgZ$^16OTSQQD,ld6p1nlAy{tf{k7pM3oy<
2024-07-03 14:43:54 UTC	138	IN	Data Raw: e0 de a2 3d 80 58 54 16 4e 2e ff 79 9f 57 b2 d6 3a 6b 7d cd 03 d6 5f 47 cb 43 42 d9 29 bf c6 59 0d ad 3d 68 61 00 b6 d9 1e 55 eb a9 91 28 e0 95 b9 ff 81 64 80 57 92 68 5b 8d 9f 7f de 3a 09 a9 b1 a5 71 6b c2 b3 5e a9 70 ae 53 2e 76 58 29 8c ed c6 bc 25 28 35 00 d8 81 d1 7c 56 6b 2b 90 c8 66 f3 cd 91 b0 82 6b 12 ca 23 20 0c 48 b2 39 8f 80 57 ac 38 6f 80 cc 3b ff 3c 6b f2 dc a4 31 50 b4 11 37 7c 9f 0c 72 d7 3d 77 Data Ascii: =XTN.yW:k}_GCB)Y=haU(dWh[:qk^pS.vX)%(5\|Vk+fk# H9W8o;<k1P7\|r=w
2024-07-03 14:43:54 UTC	289	IN	Data Raw: 33 d0 8b 52 1a 29 7a b8 a6 9b c8 cb 93 46 4b 98 cd 2b d8 3c 33 74 b7 82 04 2b a2 8f 1e fa dc 0d 40 f2 1f 35 92 68 81 00 d5 07 c8 dd 8a 6c 32 f8 87 75 cd b3 f1 3c 03 35 4c cf a6 00 88 33 28 fa fc dd 77 5f 29 7e dd 7b 3f dd 80 7f 7a 90 c6 9c 1e 48 10 fa bc 39 5c c9 3c 01 44 4f f3 72 37 00 d3 11 60 00 a7 22 40 01 74 37 b9 7f c4 6f 7c df 83 de f8 ac b0 b6 01 b4 c0 0a df 33 c0 35 ac 10 9e a6 dc 15 40 83 f4 d3 dd 4a 4e 71 42 14 9e 30 03 f9 18 51 0b cf 83 06 15 9c 30 54 82 3a a1 19 c8 83 84 2a a0 10 62 29 3c c5 f8 4e f8 bc e8 b1 c0 0a 85 38 c5 9d 72 98 c2 98 41 02 85 66 e0 21 0f 57 f2 09 28 46 31 8a 46 68 87 0b 47 d4 8e 2a 44 d1 1e 2c 90 62 14 0b d0 45 30 86 51 8c 63 24 63 14 57 b2 09 34 a6 51 8d 6b 64 63 1b dd f8 46 38 c6 51 8e 73 6c e3 4a 38 71 47 3c e6 51 8f Data Ascii: 3R)zFK+<3t+@5hl2u<5L3(w_)~{?zH9\<DOr7`"@t7o\|35@JNqB0Q0T:b)<N8rAf!W(F1FhGD,bE0Qc$cW4QkdcF8QslJ8qG<Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49798	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	361	OUT	GET /image/underbar.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sun, 27 Jun 2010 15:51:11 GMT ETag: "2e199f-6f35-48a04f92079c0" Accept-Ranges: bytes Content-Length: 28469 Vary: User-Agent Connection: close Content-Type: image/gif
2024-07-03 14:43:55 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 0c 03 32 00 f7 ff 00 00 d5 ff 00 cd ff 16 c7 e7 00 e5 ff 78 af fb 47 8f f7 00 c5 ff 00 b4 ff 00 bc ff c9 da f7 16 b8 e7 87 b3 fb 46 79 f2 ea ea ea 01 ae fe 31 72 f7 16 e6 e7 17 76 e6 01 6b ff 00 7b ff 16 68 e9 00 73 ff be d7 fc d3 e4 fd 15 4b fe b3 b5 b9 31 8c f8 00 4b ff 00 5b ff 16 83 fd 68 98 f7 00 53 ff 92 ad d6 00 63 ff 16 59 e8 68 92 d4 01 4b e8 02 83 e7 d9 da dc 71 8d b7 c7 c8 c8 00 83 ff a8 b8 cf 12 dd ff 0a dd fe f5 f5 f5 00 dd f3 12 d5 ff 12 e5 ff 12 b4 ff 1a dd ff 00 dd e5 52 86 ce 01 cd e5 01 eb ff 0a d5 ff 00 c5 f5 01 d5 f5 00 b4 ed 01 e5 e5 0a c5 ff 00 dd ed 01 e5 ed 0a e5 ff 0a cd ff 00 bc f5 00 cd f5 12 bc ff 00 d5 e5 12 cd ff 12 c5 ff 00 e5 f5 1a b4 ff 0a b3 ff 0a bc ff 00 c5 ed 30 70 d8 01 b3 f5 00 d5 ed 91 c3 fc 1a c5 Data Ascii: GIF89a2xGFy1rvk{hsK1K[hScYhKqR0p
2024-07-03 14:43:55 UTC	12085	IN	Data Raw: 02 e8 40 0f 20 00 2a e4 c0 2e d4 78 15 64 c1 2c c4 00 32 5c c1 16 58 41 16 50 81 0d 24 81 3a 2e ff 82 3a 5b 81 3d 08 40 7b da c2 01 60 c1 15 40 80 26 54 82 3d 00 e8 21 cf b2 3e b8 e6 3e 00 81 0e 24 b0 01 dc 83 02 38 81 26 34 01 7a bf 63 4e e2 c0 f0 26 41 2e 40 81 29 6c 82 22 5c 01 16 d4 00 0e 10 81 50 6f 41 10 2c c2 00 d8 80 16 38 41 0f 80 34 30 18 00 0e 74 78 12 58 e9 27 24 42 0d 04 c1 31 9f a7 37 c6 c0 24 6c 01 6b 37 70 00 d8 c0 15 1c 40 10 4c a6 90 32 02 23 1c 01 00 d8 83 15 10 81 02 54 42 00 14 41 0c f4 00 7d 33 42 0c d8 65 00 e8 82 0c e4 25 0f 84 02 02 1b 80 00 f8 43 00 e8 03 32 4c 41 16 0c c1 0b 60 42 3f e4 a3 12 04 c0 22 d4 82 2a dc c3 27 d4 c0 79 de f3 14 10 03 10 40 81 0d 90 c2 d6 1e 03 00 00 c1 01 00 83 0e e8 40 74 37 01 32 e8 03 00 c0 b6 5d 06 Data Ascii: @ .xd,2\XAP$:.:[=@{`@&T=!>>$8&4zcN&A.@)l"\PoA,8A40txX'$B17$lk7p@L2#TBA}3Be%C2LA`B?"'y@@t72]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49799	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	609	OUT	GET /image/favicon.ico HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	273	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:07 GMT ETag: "2e18df-8be-4216fd51740c0" Accept-Ranges: bytes Content-Length: 2238 Vary: User-Agent Connection: close Content-Type: image/vnd.microsoft.icon
2024-07-03 14:43:54 UTC	2238	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 08 00 a8 08 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ff ff ff 00 fe df af 00 ff fa f4 00 fe f6 e8 00 fb b7 4c 00 fd d9 a2 00 ff ff fe 00 fd e1 b5 00 fb b5 46 00 fe ed d0 00 fc cd 85 00 fb b1 3f 00 ff fe fd 00 fe ef d8 00 fb b3 44 00 fb b2 40 00 fc c9 7a 00 ff f8 ed 00 ff fb f5 00 fc bb 57 00 fb b6 4a 00 fc bb 55 00 fd e8 c7 00 ff f3 e4 00 fd de ae 00 fc d4 92 00 fb b3 41 00 fb b9 53 00 fc c1 66 00 fb b1 40 00 fe fa f3 00 fc c0 64 00 fb b6 4b 00 fb b9 51 00 fb b8 50 00 fc c5 71 00 ff fd fa 00 fe fb f4 00 fd e8 c6 00 fc c7 76 00 fb b6 4c 00 fb b9 52 00 fb b5 4a 00 fc c4 6d 00 fe f5 e6 00 fe fa f4 00 fc c9 79 00 fb b1 3e 00 fb Data Ascii: ( @LF?D@zWJUASf@dKQPqvLRJmy>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49804	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	614	OUT	GET /image/whatdomain2b.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:30 GMT ETag: "2e19a3-924-4216fda09bb80" Accept-Ranges: bytes Content-Length: 2340 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:54 UTC	2340	IN	Data Raw: 47 49 46 38 39 61 7b 00 35 00 f7 8a 00 7f b2 ff 40 8c ff 10 70 ff ef f5 ff bf d9 ff 60 a0 ff 9f c5 ff 2c 80 ff 20 79 ff 30 83 ff cf e2 ff df ec ff cc 99 7f af cf ff 50 96 ff 80 b3 ff 70 a9 ff c3 db ff 1c 77 ff f9 6c 10 b3 b2 bf 9f c6 ef 93 be ff fb fd ff bc d7 ff e5 80 40 8f bc ff 4d 99 ff a3 c8 ff ff db c3 ff 80 2c f2 73 20 73 ab ff ec 79 30 0c 6d ff bf a6 9f 7c b0 ff b3 d1 ff ac b9 cf a6 bf df ff ef e5 d9 8c 60 ff 68 04 ff b3 80 9c c4 ff b9 ac af d5 e6 ff db e9 ff ff 9d 5c ff 8c 40 6c a7 ff b5 d3 ff ff 94 4c ff b0 7c 04 68 ff 24 7c ff f5 f9 ff d2 93 70 ff d1 b3 df 86 50 ff 72 14 ff 79 20 ff ba 8c ff be 93 a5 c9 ff ff d9 bf ff d3 b5 eb f3 ff c6 9f 8f ff f3 eb 80 66 7f ac cd ff 34 85 ff 4c 94 ff 8c ba ff 3c 8a ff 83 b5 ff ff c4 9c 11 71 ff ff e0 cb ff a9 Data Ascii: GIF89a{5@p`, y0Ppwl@M,s sy0m\|`h\@lL\|h$\|pPry f4L<q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49800	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	607	OUT	GET /image/home1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:12 GMT ETag: "2e18eb-bcd-4216fd5638c00" Accept-Ranges: bytes Content-Length: 3021 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:54 UTC	3021	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 bc 81 ff a0 4d ff c9 c9 c9 91 91 91 9d 9d 9d 6b 34 ab 8d 8d 8d b6 75 ff 99 4a f4 d5 d5 d5 85 75 96 76 63 e4 d9 d9 d9 81 54 b5 fc fc fc 44 4c d5 e6 e6 e6 a2 51 ff 75 38 bb ad ad ad f9 f3 ff 02 33 ca ae 68 ff 84 84 84 82 82 82 6c 36 b2 28 26 8b 7a 3b c2 a4 55 ff ce a4 fd c2 c2 c2 9e 4c fc 17 3a ca 99 99 99 b1 b1 b1 ad 65 ff 72 ba e6 a9 a9 a9 59 59 dd 8b 65 b7 28 22 7c 95 59 d9 be b2 cb d1 d1 d1 f8 f8 f8 92 8a 9a a9 5d ff f5 ec ff 7a 46 c8 9a 64 e9 70 36 b3 8d 44 e1 7e 3d ca 8c 59 c6 5d 2d 95 a5 a5 a5 85 40 d5 92 46 e9 c5 c5 c5 1c 1c 68 ae 7e f8 06 2e b5 25 1c 64 b7 78 ff b8 7a ff 35 49 d4 a7 59 ff 95 95 95 26 19 59 ba ba ba 14 23 85 f5 f5 f5 b3 71 ff ec ec ec 0c 27 97 08 2a a6 fa fa fa 81 63 a4 8d 6c ed d5 b2 fe 02 31 Data Ascii: GIF89aZ7Mk4uJuvcTDLQu83hl6(&z;UL:erYYe("\|Y]zFdp6D~=Y]-@Fh~.%dxz5IY&Y#q'*cl1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49801	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	610	OUT	GET /image/hosting1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:54 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:54 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:15 GMT ETag: "2e18f0-c47-4216fd59152c0" Accept-Ranges: bytes Content-Length: 3143 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:54 UTC	3143	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 99 a7 ad 02 9c e1 55 9b bb 3c c2 ff 01 5a 84 6d b2 d1 1b b6 fc 01 33 67 aa aa aa 22 91 c4 b5 b5 b5 75 d4 ff 56 a1 c4 b9 b9 b9 e5 e5 e5 01 47 67 b0 d7 e9 c5 c5 c5 1b 65 d6 39 c1 ff 27 79 dd c4 ec ff 0a b3 ff dd dd dd d6 f1 fd d1 d1 d1 f6 f6 f6 2d bd ff 00 32 b7 02 85 c1 04 b0 ff 13 8b c6 0a 45 cc a5 e3 ff 4a c7 ff 01 56 a6 01 34 ca 30 be ff c1 c1 c1 25 bb ff e5 f6 fe 76 a2 b6 01 74 a9 41 c4 ff 2e 8d e1 fc fc fc a7 bd c7 3a 98 c3 d5 d5 d5 b6 c8 d1 01 3a 59 da da da dc f4 fe 1c b8 ff 31 a1 d4 fa fa fa 15 57 d3 cd cd cd 01 6c 9c f2 f2 f2 4b bc f9 e8 e8 e8 e1 e1 e1 02 af fd f5 fb fe 00 2f 96 4d c8 ff 02 8e ce 02 90 d0 01 56 7d 5c cc fe 00 32 c2 01 71 a4 01 7b b2 4c c7 ff 31 8a e4 20 ba ff b5 e6 fd bc bc bc 04 3b cc f8 f8 Data Ascii: GIF89aZ7U<Zm3g"uVGge9'y-2EJV40%vtA.::Y1WlK/MV}\2q{L1 ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49803	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	609	OUT	GET /image/design1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:55 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:55 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:03 GMT ETag: "2e18d6-c2e-4216fd4da37c0" Accept-Ranges: bytes Content-Length: 3118 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:55 UTC	3118	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 34 db 39 ea ea ea 3c dc 42 48 a6 8a b9 b9 b9 08 3a 37 05 33 68 8e 8e 8e d3 d3 d3 1e a9 23 78 96 79 cb e3 cc 95 95 95 20 b3 25 59 e2 5d 66 e4 6a 6b 98 6c 35 88 98 ec fc ec ed ed ed 01 32 b8 1c 9d 20 6a e4 6e 23 c4 29 24 ca 2a b2 e7 b4 56 9d 58 d5 f0 d6 1a 91 1e be e7 bf 90 90 90 75 e6 78 a5 a5 a5 56 e1 5a 07 36 4b 45 de 4a 4d e0 52 56 a5 59 5b ca 79 b3 f1 b5 65 a7 67 4b df 50 99 99 99 de de de 09 45 51 e6 e6 e6 19 8d 1d 17 57 b4 b2 b2 b2 22 69 a7 02 33 a8 a1 a1 a1 37 a8 70 d9 d9 d9 a4 ee a6 46 b9 49 56 dc 5d 21 b8 26 c1 f2 c3 52 b7 83 5d da 69 c9 c9 c9 1d a0 21 0c 47 1b 28 d9 2e e3 fa e4 ce ce ce f8 fe f8 1e a4 22 15 79 33 b5 b5 b5 0b 41 26 e1 e1 e1 50 e0 55 22 be 28 0b 44 78 13 6b 17 fa fa fa 47 c4 59 f4 f4 f4 49 df Data Ascii: GIF89aZ749<BH:73h#xy %Y]fjkl52 jn#)$*VXuxVZ6KEJMRVY[yegKPEQW"i37pFIV]!&R]i!G(."y3A&PU"(DxkGYI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49802	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:54 UTC	610	OUT	GET /image/company1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:55 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:55 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:01 GMT ETag: "2e18d2-b9b-4216fd4bbb340" Accept-Ranges: bytes Content-Length: 2971 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:55 UTC	2971	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 36 2f 30 11 2e 8b fb e8 c6 ff a9 0c ff bc 40 ff bf 49 ff c0 4e ff e1 ab e1 e1 e1 19 2d 73 ff c2 52 fe e7 bc c9 9e 4e c9 c9 c9 66 44 05 a4 6d 09 ca a4 66 b7 9a 75 ff ba 3d d7 b5 79 d5 ad 68 e4 da c7 ff f6 e4 ff b6 32 ff ab 12 ff c3 55 ff bd 44 f3 bb 57 f9 a5 0c cc cc cc f5 ad 28 dc 92 0a fc fc fc aa 71 08 8d 67 2b ca 86 0a cb b4 8a ff b5 2e f8 f8 f8 92 76 57 e1 95 0b ff b9 39 cc c9 c3 05 31 b9 8e 84 88 fd fa f4 59 3b 05 b5 83 2e ff b8 36 ff b1 25 cb b9 98 f0 f0 f0 d2 d2 d2 ca c2 b3 fe f2 db fe d5 8a 02 34 c9 f4 f4 f4 ca ca ca 25 47 b8 bd 7d 09 fa fa fa ef 9e 0b ca be a9 ff ad 18 b1 75 09 c7 8b 1c 5b 63 95 30 3b 70 dc ad 5c d4 d4 d4 ff ac 16 da da da d5 8d 0a d0 8a 0a 75 75 93 dd dd dd fe b0 21 d0 d0 d0 e6 e6 e6 77 6c Data Ascii: GIF89aZ76/0.@IN-sRNfDmfu=yh2UDW(qg+.vW91Y;.6%4%G}u[c0;p\uu!wl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49807	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:55 UTC	360	OUT	GET /image/favicon.ico HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:56 UTC	273	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:56 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:07 GMT ETag: "2e18df-8be-4216fd51740c0" Accept-Ranges: bytes Content-Length: 2238 Vary: User-Agent Connection: close Content-Type: image/vnd.microsoft.icon
2024-07-03 14:43:56 UTC	2238	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 08 00 a8 08 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ff ff ff 00 fe df af 00 ff fa f4 00 fe f6 e8 00 fb b7 4c 00 fd d9 a2 00 ff ff fe 00 fd e1 b5 00 fb b5 46 00 fe ed d0 00 fc cd 85 00 fb b1 3f 00 ff fe fd 00 fe ef d8 00 fb b3 44 00 fb b2 40 00 fc c9 7a 00 ff f8 ed 00 ff fb f5 00 fc bb 57 00 fb b6 4a 00 fc bb 55 00 fd e8 c7 00 ff f3 e4 00 fd de ae 00 fc d4 92 00 fb b3 41 00 fb b9 53 00 fc c1 66 00 fb b1 40 00 fe fa f3 00 fc c0 64 00 fb b6 4b 00 fb b9 51 00 fb b8 50 00 fc c5 71 00 ff fd fa 00 fe fb f4 00 fd e8 c6 00 fc c7 76 00 fb b6 4c 00 fb b9 52 00 fb b5 4a 00 fc c4 6d 00 fe f5 e6 00 fe fa f4 00 fc c9 79 00 fb b1 3e 00 fb Data Ascii: ( @LF?D@zWJUASf@dKQPqvLRJmy>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49806	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:55 UTC	610	OUT	GET /image/contact1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:56 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:56 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:02 GMT ETag: "2e18d4-c1d-4216fd4caf580" Accept-Ranges: bytes Content-Length: 3101 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:56 UTC	3101	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 ff 55 88 8a 44 a0 95 07 32 ff 53 86 f5 f5 f5 3e 08 2a b6 4b 97 ff db e6 78 06 28 d1 0a 45 50 07 28 fc b7 cc 82 06 2c b1 b1 b1 b5 b5 b5 a5 63 77 e1 e1 e1 d1 2a 5c fe 96 b6 d9 d9 d9 65 14 5c a5 a5 a5 ff 4c 82 ff 49 80 77 44 a7 ff ee f3 ff 38 74 ff 46 7d 95 7b 83 ea ea ea 99 99 99 e6 e6 e6 07 2d b4 ff e5 ed 96 32 8b bf bd bd ff ad c6 c1 c1 c1 b8 46 68 cd cd cd b3 09 3c 12 35 c3 ff 69 96 9c 9c 9c e2 0b 4b ff 35 72 a7 4c 9c 2e 1a 6f ac 08 3a c9 c9 c9 ff 2d 6c 9c 6d 7b 02 32 c9 db 0a 49 67 05 23 ae 21 64 f2 0b 51 e8 0b 4e ba 09 3e fe c5 d6 fe 0d 56 5b 39 a8 c5 c5 c5 1c 1b 70 ff 2a 6a c1 09 41 bd 20 4f f8 f8 f8 ef ef ef ad ad ad 2c 38 bb ff c9 d9 f2 f2 f2 ff 1d 61 d5 d5 d5 96 96 96 8e 8e 8e fc 7c a3 fe 58 8a b8 54 72 e4 12 Data Ascii: GIF89aZ7UD2S>Kx(EP(,cw\e\LIwD8tF}{-2Fh<5iK5rL.o:-lm{2Ig#!dQN>V[9p*jA O,8a\|XTr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49809	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:55 UTC	365	OUT	GET /image/whatdomain2b.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:56 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:56 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:16:30 GMT ETag: "2e19a3-924-4216fda09bb80" Accept-Ranges: bytes Content-Length: 2340 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:56 UTC	2340	IN	Data Raw: 47 49 46 38 39 61 7b 00 35 00 f7 8a 00 7f b2 ff 40 8c ff 10 70 ff ef f5 ff bf d9 ff 60 a0 ff 9f c5 ff 2c 80 ff 20 79 ff 30 83 ff cf e2 ff df ec ff cc 99 7f af cf ff 50 96 ff 80 b3 ff 70 a9 ff c3 db ff 1c 77 ff f9 6c 10 b3 b2 bf 9f c6 ef 93 be ff fb fd ff bc d7 ff e5 80 40 8f bc ff 4d 99 ff a3 c8 ff ff db c3 ff 80 2c f2 73 20 73 ab ff ec 79 30 0c 6d ff bf a6 9f 7c b0 ff b3 d1 ff ac b9 cf a6 bf df ff ef e5 d9 8c 60 ff 68 04 ff b3 80 9c c4 ff b9 ac af d5 e6 ff db e9 ff ff 9d 5c ff 8c 40 6c a7 ff b5 d3 ff ff 94 4c ff b0 7c 04 68 ff 24 7c ff f5 f9 ff d2 93 70 ff d1 b3 df 86 50 ff 72 14 ff 79 20 ff ba 8c ff be 93 a5 c9 ff ff d9 bf ff d3 b5 eb f3 ff c6 9f 8f ff f3 eb 80 66 7f ac cd ff 34 85 ff 4c 94 ff 8c ba ff 3c 8a ff 83 b5 ff ff c4 9c 11 71 ff ff e0 cb ff a9 Data Ascii: GIF89a{5@p`, y0Ppwl@M,s sy0m\|`h\@lL\|h$\|pPry f4L<q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49808	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:55 UTC	358	OUT	GET /image/home1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:56 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:56 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:12 GMT ETag: "2e18eb-bcd-4216fd5638c00" Accept-Ranges: bytes Content-Length: 3021 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:56 UTC	3021	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 bc 81 ff a0 4d ff c9 c9 c9 91 91 91 9d 9d 9d 6b 34 ab 8d 8d 8d b6 75 ff 99 4a f4 d5 d5 d5 85 75 96 76 63 e4 d9 d9 d9 81 54 b5 fc fc fc 44 4c d5 e6 e6 e6 a2 51 ff 75 38 bb ad ad ad f9 f3 ff 02 33 ca ae 68 ff 84 84 84 82 82 82 6c 36 b2 28 26 8b 7a 3b c2 a4 55 ff ce a4 fd c2 c2 c2 9e 4c fc 17 3a ca 99 99 99 b1 b1 b1 ad 65 ff 72 ba e6 a9 a9 a9 59 59 dd 8b 65 b7 28 22 7c 95 59 d9 be b2 cb d1 d1 d1 f8 f8 f8 92 8a 9a a9 5d ff f5 ec ff 7a 46 c8 9a 64 e9 70 36 b3 8d 44 e1 7e 3d ca 8c 59 c6 5d 2d 95 a5 a5 a5 85 40 d5 92 46 e9 c5 c5 c5 1c 1c 68 ae 7e f8 06 2e b5 25 1c 64 b7 78 ff b8 7a ff 35 49 d4 a7 59 ff 95 95 95 26 19 59 ba ba ba 14 23 85 f5 f5 f5 b3 71 ff ec ec ec 0c 27 97 08 2a a6 fa fa fa 81 63 a4 8d 6c ed d5 b2 fe 02 31 Data Ascii: GIF89aZ7Mk4uJuvcTDLQu83hl6(&z;UL:erYYe("\|Y]zFdp6D~=Y]-@Fh~.%dxz5IY&Y#q'*cl1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49810	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:55 UTC	361	OUT	GET /image/hosting1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:56 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:56 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:15 GMT ETag: "2e18f0-c47-4216fd59152c0" Accept-Ranges: bytes Content-Length: 3143 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:56 UTC	3143	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 99 a7 ad 02 9c e1 55 9b bb 3c c2 ff 01 5a 84 6d b2 d1 1b b6 fc 01 33 67 aa aa aa 22 91 c4 b5 b5 b5 75 d4 ff 56 a1 c4 b9 b9 b9 e5 e5 e5 01 47 67 b0 d7 e9 c5 c5 c5 1b 65 d6 39 c1 ff 27 79 dd c4 ec ff 0a b3 ff dd dd dd d6 f1 fd d1 d1 d1 f6 f6 f6 2d bd ff 00 32 b7 02 85 c1 04 b0 ff 13 8b c6 0a 45 cc a5 e3 ff 4a c7 ff 01 56 a6 01 34 ca 30 be ff c1 c1 c1 25 bb ff e5 f6 fe 76 a2 b6 01 74 a9 41 c4 ff 2e 8d e1 fc fc fc a7 bd c7 3a 98 c3 d5 d5 d5 b6 c8 d1 01 3a 59 da da da dc f4 fe 1c b8 ff 31 a1 d4 fa fa fa 15 57 d3 cd cd cd 01 6c 9c f2 f2 f2 4b bc f9 e8 e8 e8 e1 e1 e1 02 af fd f5 fb fe 00 2f 96 4d c8 ff 02 8e ce 02 90 d0 01 56 7d 5c cc fe 00 32 c2 01 71 a4 01 7b b2 4c c7 ff 31 8a e4 20 ba ff b5 e6 fd bc bc bc 04 3b cc f8 f8 Data Ascii: GIF89aZ7U<Zm3g"uVGge9'y-2EJV40%vtA.::Y1WlK/MV}\2q{L1 ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49812	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:56 UTC	361	OUT	GET /image/company1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:56 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:56 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:01 GMT ETag: "2e18d2-b9b-4216fd4bbb340" Accept-Ranges: bytes Content-Length: 2971 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:56 UTC	2971	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 36 2f 30 11 2e 8b fb e8 c6 ff a9 0c ff bc 40 ff bf 49 ff c0 4e ff e1 ab e1 e1 e1 19 2d 73 ff c2 52 fe e7 bc c9 9e 4e c9 c9 c9 66 44 05 a4 6d 09 ca a4 66 b7 9a 75 ff ba 3d d7 b5 79 d5 ad 68 e4 da c7 ff f6 e4 ff b6 32 ff ab 12 ff c3 55 ff bd 44 f3 bb 57 f9 a5 0c cc cc cc f5 ad 28 dc 92 0a fc fc fc aa 71 08 8d 67 2b ca 86 0a cb b4 8a ff b5 2e f8 f8 f8 92 76 57 e1 95 0b ff b9 39 cc c9 c3 05 31 b9 8e 84 88 fd fa f4 59 3b 05 b5 83 2e ff b8 36 ff b1 25 cb b9 98 f0 f0 f0 d2 d2 d2 ca c2 b3 fe f2 db fe d5 8a 02 34 c9 f4 f4 f4 ca ca ca 25 47 b8 bd 7d 09 fa fa fa ef 9e 0b ca be a9 ff ad 18 b1 75 09 c7 8b 1c 5b 63 95 30 3b 70 dc ad 5c d4 d4 d4 ff ac 16 da da da d5 8d 0a d0 8a 0a 75 75 93 dd dd dd fe b0 21 d0 d0 d0 e6 e6 e6 77 6c Data Ascii: GIF89aZ76/0.@IN-sRNfDmfu=yh2UDW(qg+.vW91Y;.6%4%G}u[c0;p\uu!wl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49811	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:56 UTC	360	OUT	GET /image/design1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:56 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:56 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:03 GMT ETag: "2e18d6-c2e-4216fd4da37c0" Accept-Ranges: bytes Content-Length: 3118 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:56 UTC	3118	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 34 db 39 ea ea ea 3c dc 42 48 a6 8a b9 b9 b9 08 3a 37 05 33 68 8e 8e 8e d3 d3 d3 1e a9 23 78 96 79 cb e3 cc 95 95 95 20 b3 25 59 e2 5d 66 e4 6a 6b 98 6c 35 88 98 ec fc ec ed ed ed 01 32 b8 1c 9d 20 6a e4 6e 23 c4 29 24 ca 2a b2 e7 b4 56 9d 58 d5 f0 d6 1a 91 1e be e7 bf 90 90 90 75 e6 78 a5 a5 a5 56 e1 5a 07 36 4b 45 de 4a 4d e0 52 56 a5 59 5b ca 79 b3 f1 b5 65 a7 67 4b df 50 99 99 99 de de de 09 45 51 e6 e6 e6 19 8d 1d 17 57 b4 b2 b2 b2 22 69 a7 02 33 a8 a1 a1 a1 37 a8 70 d9 d9 d9 a4 ee a6 46 b9 49 56 dc 5d 21 b8 26 c1 f2 c3 52 b7 83 5d da 69 c9 c9 c9 1d a0 21 0c 47 1b 28 d9 2e e3 fa e4 ce ce ce f8 fe f8 1e a4 22 15 79 33 b5 b5 b5 0b 41 26 e1 e1 e1 50 e0 55 22 be 28 0b 44 78 13 6b 17 fa fa fa 47 c4 59 f4 f4 f4 49 df Data Ascii: GIF89aZ749<BH:73h#xy %Y]fjkl52 jn#)$*VXuxVZ6KEJMRVY[yegKPEQW"i37pFIV]!&R]i!G(."y3A&PU"(DxkGYI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49813	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:43:57 UTC	361	OUT	GET /image/contact1.gif HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:43:57 UTC	284	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:43:57 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:15:02 GMT ETag: "2e18d4-c1d-4216fd4caf580" Accept-Ranges: bytes Content-Length: 3101 Vary: User-Agent Connection: close Content-Type: image/gif X-Pad: avoid browser bug
2024-07-03 14:43:57 UTC	3101	IN	Data Raw: 47 49 46 38 39 61 5a 00 37 00 f7 00 00 ff 55 88 8a 44 a0 95 07 32 ff 53 86 f5 f5 f5 3e 08 2a b6 4b 97 ff db e6 78 06 28 d1 0a 45 50 07 28 fc b7 cc 82 06 2c b1 b1 b1 b5 b5 b5 a5 63 77 e1 e1 e1 d1 2a 5c fe 96 b6 d9 d9 d9 65 14 5c a5 a5 a5 ff 4c 82 ff 49 80 77 44 a7 ff ee f3 ff 38 74 ff 46 7d 95 7b 83 ea ea ea 99 99 99 e6 e6 e6 07 2d b4 ff e5 ed 96 32 8b bf bd bd ff ad c6 c1 c1 c1 b8 46 68 cd cd cd b3 09 3c 12 35 c3 ff 69 96 9c 9c 9c e2 0b 4b ff 35 72 a7 4c 9c 2e 1a 6f ac 08 3a c9 c9 c9 ff 2d 6c 9c 6d 7b 02 32 c9 db 0a 49 67 05 23 ae 21 64 f2 0b 51 e8 0b 4e ba 09 3e fe c5 d6 fe 0d 56 5b 39 a8 c5 c5 c5 1c 1b 70 ff 2a 6a c1 09 41 bd 20 4f f8 f8 f8 ef ef ef ad ad ad 2c 38 bb ff c9 d9 f2 f2 f2 ff 1d 61 d5 d5 d5 96 96 96 8e 8e 8e fc 7c a3 fe 58 8a b8 54 72 e4 12 Data Ascii: GIF89aZ7UD2S>Kx(EP(,cw\e\LIwD8tF}{-2Fh<5iK5rL.o:-lm{2Ig#!dQN>V[9p*jA O,8a\|XTr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49814	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:14 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=owV+7+8G3xwy2uk&MD=LHCrtama HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-03 14:44:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: d29917e0-67d6-4bca-9ca9-8a7446e5b01e MS-RequestId: ccf9b53f-c5bf-4a01-a836-0d5388f0dfab MS-CV: en982bM1bUWyKJyA.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 03 Jul 2024 14:44:13 GMT Connection: close Content-Length: 30005
2024-07-03 14:44:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-07-03 14:44:14 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49817	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:19 UTC	687	OUT	GET /mydomain/index.html HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:20 UTC	193	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:19 GMT Server: Apache Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Length: 265 Connection: close Content-Type: text/html
2024-07-03 14:44:20 UTC	265	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 63 6f 6e 74 65 6e 74 3d 22 30 3b 55 52 4c 3d 2e 2f 22 3e 0a 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="refresh"content="0;URL=./"><title></title></head><body></bod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49819	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:20 UTC	716	OUT	GET /mydomain/ HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.netgroove.ne.jp/mydomain/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:21 UTC	222	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:21 GMT Server: Apache X-Powered-By: PHP/5.6.29 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html;charset=Shift_JIS
2024-07-03 14:44:21 UTC	6	IN	Data Raw: 32 66 34 35 0d 0a Data Ascii: 2f45
2024-07-03 14:44:21 UTC	12101	IN	Data Raw: 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 78 2d 73 6a 69 73 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 83 68 83 81 83 43 83 93 2c 83 8c 83 93 83 5e 83 8b 83 54 81 5b 83 6f 81 5b 2c 83 7a 81 5b 83 80 83 79 81 5b 83 57 83 66 83 55 83 43 83 93 82 f0 82 a8 8e e8 8d a0 89 bf 8a 69 82 c5 92 f1 8b 9f 82 b5 82 c4 82 a2 82 dc 82 b7 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 83 68 83 81 83 43 83 93 2c 83 8c 83 Data Ascii: <html lang="ja"><head><meta http-equiv="content-type" content="text/html;charset=x-sjis"><meta name="description" content="hC,^T[o[,z[y[WfUCi"><meta name="keywords" content="hC,
2024-07-03 14:44:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-03 14:44:21 UTC	6	IN	Data Raw: 38 37 66 37 0d 0a Data Ascii: 87f7
2024-07-03 14:44:21 UTC	16384	IN	Data Raw: 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 35 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 22 33 22 20 77 69 64 74 68 3d 22 39 39 25 22 20 62 67 63 6f 6c 6f 72 3d 22 23 30 30 63 63 66 66 22 3e 0a 20 20 3c 74 72 3e 0a 20 20 20 20 3c 74 64 20 62 67 63 6f 6c 6f 72 3d 22 23 63 63 66 66 66 66 22 20 63 6c 61 73 73 3d 22 66 31 30 22 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 81 9c 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 31 30 70 78 22 20 68 72 65 66 3d 22 2f 6d 79 64 6f 6d 61 69 6e 2f 69 6e 66 6f 6e 65 77 2e 68 74 6d 6c 23 32 30 32 34 30 31 22 3e 5b 32 30 32 34 2e 30 31 5d 83 68 83 81 83 43 83 93 82 cc 89 bf 8a 69 89 fc 92 e8 82 c9 82 c2 82 ab 82 dc 82 b5 82 c4 3c 2f 61 3e 3c 62 72 3e 20 20 20 20 Data Ascii: <table border="0" cellpadding="5" cellspacing="3" width="99%" bgcolor="#00ccff"> <tr> <td bgcolor="#ccffff" class="f10"> <p><a class="link10px" href="/mydomain/infonew.html#202401">[2024.01]hCi</a><br>
2024-07-03 14:44:21 UTC	16384	IN	Data Raw: 09 09 09 09 09 09 3c 2f 74 64 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 74 72 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 74 72 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 74 64 20 63 6f 6c 73 70 61 6e 3d 22 33 22 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 26 6e 62 73 70 3b 3c 2f 74 64 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 74 72 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 74 61 62 6c 65 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 30 22 20 63 65 6c 6c 73 70 61 63 Data Ascii: </td></tr><tr><td colspan="3" bgcolor="white"> </td></tr></table><table border="0" cellpadding="0" cellspac
2024-07-03 14:44:21 UTC	2039	IN	Data Raw: 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 64 2e 6a 70 2e 61 70 2e 76 61 6c 75 65 63 6f 6d 6d 65 72 63 65 2e 63 6f 6d 2f 73 65 72 76 6c 65 74 2f 6a 73 62 61 6e 6e 65 72 3f 73 69 64 3d 32 30 33 30 38 30 32 26 70 69 64 3d 38 37 30 30 39 33 35 35 36 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6e 6f 73 63 72 69 70 74 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6b 2e 6a 70 2e 61 70 2e 76 61 6c 75 65 63 6f 6d 6d 65 72 63 65 Data Ascii: " marginwidth="0"><script language="javascript" src="http://ad.jp.ap.valuecommerce.com/servlet/jsbanner?sid=2030802&pid=870093556"></script><noscript><a href="http://ck.jp.ap.valuecommerce
2024-07-03 14:44:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-03 14:44:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49818	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:20 UTC	613	OUT	GET /favicon.ico HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/mydomain/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:21 UTC	273	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:21 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:09:32 GMT ETag: "2e0095-8be-4216fc11f8f00" Accept-Ranges: bytes Content-Length: 2238 Vary: User-Agent Connection: close Content-Type: image/vnd.microsoft.icon
2024-07-03 14:44:21 UTC	2238	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 08 00 a8 08 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ff ff ff 00 fe df af 00 ff fa f4 00 fe f6 e8 00 fb b7 4c 00 fd d9 a2 00 ff ff fe 00 fd e1 b5 00 fb b5 46 00 fe ed d0 00 fc cd 85 00 fb b1 3f 00 ff fe fd 00 fe ef d8 00 fb b3 44 00 fb b2 40 00 fc c9 7a 00 ff f8 ed 00 ff fb f5 00 fc bb 57 00 fb b6 4a 00 fc bb 55 00 fd e8 c7 00 ff f3 e4 00 fd de ae 00 fc d4 92 00 fb b3 41 00 fb b9 53 00 fc c1 66 00 fb b1 40 00 fe fa f3 00 fc c0 64 00 fb b6 4b 00 fb b9 51 00 fb b8 50 00 fc c5 71 00 ff fd fa 00 fe fb f4 00 fd e8 c6 00 fc c7 76 00 fb b6 4c 00 fb b9 52 00 fb b5 4a 00 fc c4 6d 00 fe f5 e6 00 fe fa f4 00 fc c9 79 00 fb b1 3e 00 fb Data Ascii: ( @LF?D@zWJUASf@dKQPqvLRJmy>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49820	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:22 UTC	354	OUT	GET /favicon.ico HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:22 UTC	273	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:22 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:09:32 GMT ETag: "2e0095-8be-4216fc11f8f00" Accept-Ranges: bytes Content-Length: 2238 Vary: User-Agent Connection: close Content-Type: image/vnd.microsoft.icon
2024-07-03 14:44:22 UTC	2238	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 08 00 a8 08 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ff ff ff 00 fe df af 00 ff fa f4 00 fe f6 e8 00 fb b7 4c 00 fd d9 a2 00 ff ff fe 00 fd e1 b5 00 fb b5 46 00 fe ed d0 00 fc cd 85 00 fb b1 3f 00 ff fe fd 00 fe ef d8 00 fb b3 44 00 fb b2 40 00 fc c9 7a 00 ff f8 ed 00 ff fb f5 00 fc bb 57 00 fb b6 4a 00 fc bb 55 00 fd e8 c7 00 ff f3 e4 00 fd de ae 00 fc d4 92 00 fb b3 41 00 fb b9 53 00 fc c1 66 00 fb b1 40 00 fe fa f3 00 fc c0 64 00 fb b6 4b 00 fb b9 51 00 fb b8 50 00 fc c5 71 00 ff fd fa 00 fe fb f4 00 fd e8 c6 00 fc c7 76 00 fb b6 4c 00 fb b9 52 00 fb b5 4a 00 fc c4 6d 00 fe f5 e6 00 fe fa f4 00 fc c9 79 00 fb b1 3e 00 fb Data Ascii: ( @LF?D@zWJUASf@dKQPqvLRJmy>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49822	150.230.193.202	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:22 UTC	609	OUT	GET /0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1 HTTP/1.1 Host: www12.a8.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:23 UTC	120	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:23 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-07-03 14:44:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49821	150.230.193.202	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:22 UTC	645	OUT	GET /svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1 HTTP/1.1 Host: www21.a8.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:23 UTC	122	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:23 GMT Content-Type: image/gif Content-Length: 8481 Connection: close
2024-07-03 14:44:23 UTC	8054	IN	Data Raw: 47 49 46 38 39 61 64 00 64 00 f7 00 00 f2 ee e3 e9 b6 83 d3 cb ab 67 bd 95 a9 d9 c3 5a b9 8b 85 cb a9 ef eb e0 fb ec e1 e6 9e 24 f8 f4 e8 f4 f0 e5 ed b8 5e be b4 88 b4 b1 a9 c5 bb 93 fe fb f1 e5 a4 31 dc 87 36 db aa 4f dc 82 0e 54 53 51 e2 9a 51 fb f1 e2 e9 aa 44 2c a4 6c f6 f2 e7 f6 f2 e6 ea e4 d1 e4 a4 64 92 d1 b2 e2 db c5 e3 94 14 de 88 11 f0 eb da e9 e5 da e3 f3 ec ce c5 a2 e7 e1 cc 36 ac 70 db d4 b9 e0 8e 12 31 a8 6e ee bd 6c 41 b0 79 d5 ed e2 d5 ce af f0 ec e1 da 7b 0c d9 d1 b4 cd c2 9d f4 da c1 fc f8 ef f2 d2 b1 d7 74 17 e5 e1 d7 f4 f0 e4 e5 de c9 c8 e8 d8 d2 ba 83 d7 b2 66 99 d1 b8 f3 ee e2 f3 d3 a5 fc f6 ef f6 dc b5 ec e8 dd ea e6 db d3 b7 7b e2 dd d2 6b c1 96 37 ad 70 f1 f9 f5 4d b4 81 33 a9 6f 79 c5 a2 f8 e3 c4 fb f8 ed df a4 3c f1 ec de eb b7 Data Ascii: GIF89addgZ$^16OTSQQD,ld6p1nlAy{tf{k7pM3oy<
2024-07-03 14:44:23 UTC	138	IN	Data Raw: e0 de a2 3d 80 58 54 16 4e 2e ff 79 9f 57 b2 d6 3a 6b 7d cd 03 d6 5f 47 cb 43 42 d9 29 bf c6 59 0d ad 3d 68 61 00 b6 d9 1e 55 eb a9 91 28 e0 95 b9 ff 81 64 80 57 92 68 5b 8d 9f 7f de 3a 09 a9 b1 a5 71 6b c2 b3 5e a9 70 ae 53 2e 76 58 29 8c ed c6 bc 25 28 35 00 d8 81 d1 7c 56 6b 2b 90 c8 66 f3 cd 91 b0 82 6b 12 ca 23 20 0c 48 b2 39 8f 80 57 ac 38 6f 80 cc 3b ff 3c 6b f2 dc a4 31 50 b4 11 37 7c 9f 0c 72 d7 3d 77 Data Ascii: =XTN.yW:k}_GCB)Y=haU(dWh[:qk^pS.vX)%(5\|Vk+fk# H9W8o;<k1P7\|r=w
2024-07-03 14:44:23 UTC	289	IN	Data Raw: 33 d0 8b 52 1a 29 7a b8 a6 9b c8 cb 93 46 4b 98 cd 2b d8 3c 33 74 b7 82 04 2b a2 8f 1e fa dc 0d 40 f2 1f 35 92 68 81 00 d5 07 c8 dd 8a 6c 32 f8 87 75 cd b3 f1 3c 03 35 4c cf a6 00 88 33 28 fa fc dd 77 5f 29 7e dd 7b 3f dd 80 7f 7a 90 c6 9c 1e 48 10 fa bc 39 5c c9 3c 01 44 4f f3 72 37 00 d3 11 60 00 a7 22 40 01 74 37 b9 7f c4 6f 7c df 83 de f8 ac b0 b6 01 b4 c0 0a df 33 c0 35 ac 10 9e a6 dc 15 40 83 f4 d3 dd 4a 4e 71 42 14 9e 30 03 f9 18 51 0b cf 83 06 15 9c 30 54 82 3a a1 19 c8 83 84 2a a0 10 62 29 3c c5 f8 4e f8 bc e8 b1 c0 0a 85 38 c5 9d 72 98 c2 98 41 02 85 66 e0 21 0f 57 f2 09 28 46 31 8a 46 68 87 0b 47 d4 8e 2a 44 d1 1e 2c 90 62 14 0b d0 45 30 86 51 8c 63 24 63 14 57 b2 09 34 a6 51 8d 6b 64 63 1b dd f8 46 38 c6 51 8e 73 6c e3 4a 38 71 47 3c e6 51 8f Data Ascii: 3R)zFK+<3t+@5hl2u<5L3(w_)~{?zH9\<DOr7`"@t7o\|35@JNqB0Q0T:b)<N8rAf!W(F1FhGD,bE0Qc$cW4QkdcF8QslJ8qG<Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49823	150.230.193.202	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:24 UTC	370	OUT	GET /0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1 HTTP/1.1 Host: www12.a8.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:24 UTC	120	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-07-03 14:44:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49824	150.230.193.202	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:24 UTC	406	OUT	GET /svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1 HTTP/1.1 Host: www21.a8.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:24 UTC	122	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:24 GMT Content-Type: image/gif Content-Length: 8481 Connection: close
2024-07-03 14:44:24 UTC	8054	IN	Data Raw: 47 49 46 38 39 61 64 00 64 00 f7 00 00 f2 ee e3 e9 b6 83 d3 cb ab 67 bd 95 a9 d9 c3 5a b9 8b 85 cb a9 ef eb e0 fb ec e1 e6 9e 24 f8 f4 e8 f4 f0 e5 ed b8 5e be b4 88 b4 b1 a9 c5 bb 93 fe fb f1 e5 a4 31 dc 87 36 db aa 4f dc 82 0e 54 53 51 e2 9a 51 fb f1 e2 e9 aa 44 2c a4 6c f6 f2 e7 f6 f2 e6 ea e4 d1 e4 a4 64 92 d1 b2 e2 db c5 e3 94 14 de 88 11 f0 eb da e9 e5 da e3 f3 ec ce c5 a2 e7 e1 cc 36 ac 70 db d4 b9 e0 8e 12 31 a8 6e ee bd 6c 41 b0 79 d5 ed e2 d5 ce af f0 ec e1 da 7b 0c d9 d1 b4 cd c2 9d f4 da c1 fc f8 ef f2 d2 b1 d7 74 17 e5 e1 d7 f4 f0 e4 e5 de c9 c8 e8 d8 d2 ba 83 d7 b2 66 99 d1 b8 f3 ee e2 f3 d3 a5 fc f6 ef f6 dc b5 ec e8 dd ea e6 db d3 b7 7b e2 dd d2 6b c1 96 37 ad 70 f1 f9 f5 4d b4 81 33 a9 6f 79 c5 a2 f8 e3 c4 fb f8 ed df a4 3c f1 ec de eb b7 Data Ascii: GIF89addgZ$^16OTSQQD,ld6p1nlAy{tf{k7pM3oy<
2024-07-03 14:44:24 UTC	427	IN	Data Raw: e0 de a2 3d 80 58 54 16 4e 2e ff 79 9f 57 b2 d6 3a 6b 7d cd 03 d6 5f 47 cb 43 42 d9 29 bf c6 59 0d ad 3d 68 61 00 b6 d9 1e 55 eb a9 91 28 e0 95 b9 ff 81 64 80 57 92 68 5b 8d 9f 7f de 3a 09 a9 b1 a5 71 6b c2 b3 5e a9 70 ae 53 2e 76 58 29 8c ed c6 bc 25 28 35 00 d8 81 d1 7c 56 6b 2b 90 c8 66 f3 cd 91 b0 82 6b 12 ca 23 20 0c 48 b2 39 8f 80 57 ac 38 6f 80 cc 3b ff 3c 6b f2 dc a4 31 50 b4 11 37 7c 9f 0c 72 d7 3d 77 33 d0 8b 52 1a 29 7a b8 a6 9b c8 cb 93 46 4b 98 cd 2b d8 3c 33 74 b7 82 04 2b a2 8f 1e fa dc 0d 40 f2 1f 35 92 68 81 00 d5 07 c8 dd 8a 6c 32 f8 87 75 cd b3 f1 3c 03 35 4c cf a6 00 88 33 28 fa fc dd 77 5f 29 7e dd 7b 3f dd 80 7f 7a 90 c6 9c 1e 48 10 fa bc 39 5c c9 3c 01 44 4f f3 72 37 00 d3 11 60 00 a7 22 40 01 74 37 b9 7f c4 6f 7c df 83 de f8 ac b0 Data Ascii: =XTN.yW:k}_GCB)Y=haU(dWh[:qk^pS.vX)%(5\|Vk+fk# H9W8o;<k1P7\|r=w3R)zFK+<3t+@5hl2u<5L3(w_)~{?zH9\<DOr7`"@t7o\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49826	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:25 UTC	685	OUT	GET /design/index.html HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:26 UTC	194	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:25 GMT Server: Apache Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Length: 4210 Connection: close Content-Type: text/html
2024-07-03 14:44:26 UTC	4210	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 78 2d 73 6a 69 73 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 41 64 6f 62 65 20 47 6f 4c 69 76 65 20 35 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 83 68 83 81 83 43 83 93 2c 20 64 6f 6d 61 69 6e 2c 20 83 8c 83 93 83 5e 83 8b 83 54 81 5b 83 6f 81 5b 2c 20 83 7a Data Ascii: <html lang="ja"><head><meta http-equiv="content-type" content="text/html;charset=x-sjis"><meta name="generator" content="Adobe GoLive 5"><meta name="robots" content="index,follow"><meta name="keywords" content="hC, domain, ^T[o[, z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49828	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:26 UTC	568	OUT	GET /designfont.css HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.netgroove.ne.jp/design/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:27 UTC	254	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:27 GMT Server: Apache Last-Modified: Sat, 04 Nov 2006 18:09:32 GMT ETag: "2e0093-63-4216fc11f8f00" Accept-Ranges: bytes Content-Length: 99 Vary: User-Agent Connection: close Content-Type: text/css
2024-07-03 14:44:27 UTC	99	IN	Data Raw: 0a 2e 62 61 73 69 63 20 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 20 7d 0a 2e 62 6c 75 65 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 33 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 20 7d 0a 2e 62 61 73 69 63 31 30 70 78 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 20 7d 0a Data Ascii: .basic { font-size: 12px }.blue { color: #03f; font-size: 12px }.basic10px { font-size: 10px }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49829	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:28 UTC	618	OUT	GET /report/report.cgi? HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.netgroove.ne.jp/design/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:32 UTC	217	IN	HTTP/1.1 500 Internal Server Error Date: Wed, 03 Jul 2024 14:44:28 GMT Server: Apache X-Powered-By: PHP/5.6.29 Vary: Accept-Encoding,User-Agent Content-Length: 1346 Connection: close Content-Type: text/html
2024-07-03 14:44:32 UTC	1346	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>500 E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49831	49.212.213.242	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 14:44:35 UTC	742	OUT	GET /design/sodan.html HTTP/1.1 Host: www.netgroove.ne.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.netgroove.ne.jp/design/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 14:44:36 UTC	194	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 14:44:35 GMT Server: Apache Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Length: 4400 Connection: close Content-Type: text/html
2024-07-03 14:44:36 UTC	4400	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 78 2d 73 6a 69 73 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 41 64 6f 62 65 20 47 6f 4c 69 76 65 20 35 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 90 56 8b 4b 96 b3 97 bf 91 8a 92 6b 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2e 2f 64 65 73 69 67 6e 66 6f 6e 74 2e 63 73 73 22 3e 0a 09 09 3c 63 73 73 63 72 69 70 74 64 69 63 74 20 69 6d 70 6f 72 74 3e 0a 09 09 09 Data Ascii: <html lang="ja"><head><meta http-equiv="content-type" content="text/html;charset=x-sjis"><meta name="generator" content="Adobe GoLive 5"><title>VKk</title><link rel="stylesheet" href="../designfont.css"><csscriptdict import>

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5000, Parent PID: 544

General

Target ID:	0
Start time:	10:43:23
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://myssl.jp/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6232, Parent PID: 5000

General

Target ID:	1
Start time:	10:43:24
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1880,i,11079429363911824844,15051641503318524601,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.myssl.jp/	HTTP Parser: No favicon
Source: https://www.netgroove.ne.jp/design/index.html	HTTP Parser: No favicon
Source: https://www.netgroove.ne.jp/design/sodan.html	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.myssl.jpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/myssl.gif HTTP/1.1Host: www.myssl.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.myssl.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.myssl.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.myssl.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/myssl.gif HTTP/1.1Host: www.myssl.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=owV+7+8G3xwy2uk&MD=LHCrtama HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mydomain HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.myssl.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mydomain/ HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.myssl.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font.css HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GeneratedItems/CSScriptLib.js HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/topbar_basic.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/logotop2.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/bg0409.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/font.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/t_ssl.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/hostingindex.data_/images/hostingindex_02.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/whoisbg_01.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/topbar_basic.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/logotop2.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/hostingindex.data_/images/hostingindex_03.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/companyindex.data_/images/companyindex_01.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/myssl_link.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/bg0409.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/t_ssl.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/9861_01b.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/hostingindex.data_/images/hostingindex_02.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/webmail/webmaillink.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/c_card_s.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/whoisbg_01.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/spacer.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/companyindex.data_/images/companyindex_02.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/hostingindex.data_/images/hostingindex_03.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/companyindex.data_/images/companyindex_01.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/whatdomain2.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/myssl_link.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/hostingindex.data_/images/hostingindex_01.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/9861_01b.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/webmail/webmaillink.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/design.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/company.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/c_card_s.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/contact.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/spacer.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/whoisbg_02.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/companyindex.data_/images/companyindex_02.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/whoisbg_05.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/whatdomain2.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/whoisbg_03.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/hostingindex.data_/images/hostingindex_01.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/linkicon.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/hostingindex.data_/images/spacer.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/design.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/company.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/companyindex.data_/images/spacer.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/toplogo200404.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/contact.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/whoisbg_02.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/domain_top_basic.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/whoisbg_05.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/t_info.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/whoisbg.data_/images/whoisbg_03.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/home.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/hosting.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/hostingindex.data_/images/spacer.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/linkicon.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/companyindex.data_/images/spacer.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/toplogo200404.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/home.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/JPRS_logo_w100.jpg HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/t_info.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /srsverify/seal_secure_site_tr.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/companyindex.data_/images/companyindex_03.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/back_b.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/hosting.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/underbar.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1 HTTP/1.1Host: www12.a8.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1 HTTP/1.1Host: www21.a8.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/domain_top_basic.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/JPRS_logo_w100.jpg HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /srsverify/seal_secure_site_tr.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/image/companyindex.data_/images/companyindex_03.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/back_b.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1 HTTP/1.1Host: www12.a8.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1 HTTP/1.1Host: www21.a8.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/underbar.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/favicon.ico HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/whatdomain2b.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/home1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/hosting1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/design1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/company1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/favicon.ico HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/contact1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/whatdomain2b.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/home1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/hosting1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/company1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/design1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/contact1.gif HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=owV+7+8G3xwy2uk&MD=LHCrtama HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mydomain/index.html HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mydomain/ HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.netgroove.ne.jp/mydomain/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/mydomain/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1 HTTP/1.1Host: www12.a8.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1 HTTP/1.1Host: www21.a8.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0.gif?a8mat=U74IM+DLEC1E+82A+6BMG1 HTTP/1.1Host: www12.a8.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svt/bgt?aid=050720926822&wid=001&eno=01&mid=s00000001045001062000&mc=1 HTTP/1.1Host: www21.a8.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design/index.html HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /designfont.css HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.netgroove.ne.jp/design/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /report/report.cgi? HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.netgroove.ne.jp/design/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design/sodan.html HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.netgroove.ne.jp/design/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: myssl.jpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.myssl.jpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mydomain/index.html HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design/index.html HTTP/1.1Host: www.netgroove.ne.jpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: myssl.jp
Source: global traffic	DNS traffic detected: DNS query: www.myssl.jp
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.netgroove.ne.jp
Source: global traffic	DNS traffic detected: DNS query: www21.a8.net
Source: global traffic	DNS traffic detected: DNS query: www12.a8.net

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://myssl.jp

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
http://myssl.jp