Edit tour

Windows Analysis Report
https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

Overview

General Information

Sample URL:	https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM
Analysis ID:	1471460
Infos:

Detection

DCRat, PureLog Stealer, zgRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Yara detected DCRat

Yara detected PureLog Stealer

Yara detected zgRAT

Blob-based file download detected

Creates processes via WMI

Downloads suspicious files via Chrome

Drops password protected ZIP file

Machine Learning detection for dropped file

Sigma detected: Files With System Process Name In Unsuspected Locations

Uses ping.exe to check the status of other devices and networks

Uses ping.exe to sleep

Uses schtasks.exe or at.exe to add and modify task schedules

Allocates memory with a write watch (potentially for evading sandboxes)

Contains functionality to detect virtual machines (SLDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Found dropped PE file which has not been started or loaded

Found inlined nop instructions (likely shell or obfuscated code)

HTML body contains password input but no form action

HTTP GET or POST without a user agent

Invalid 'forgot password' link found

May sleep (evasive loops) to hinder dynamic analysis

PE file contains executable resources (Code or Archives)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: DNS Query To MEGA Hosting Website

Sigma detected: Suspicious Schtasks From Env Var Folder

Stores files to the Windows start menu directory

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6860 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1884,i,6659997199172310811,18304377769233346356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5580 --field-trial-handle=1884,i,6659997199172310811,18304377769233346356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

rundll32.exe (PID: 7876 cmdline: C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)

7zG.exe (PID: 7412 cmdline: "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\" -an -ai#7zMap13162:70:7zEvent14778 MD5: 50F289DF0C19484E970849AAC4E6F977)

chrome.exe.exe (PID: 4232 cmdline: "C:\Users\user\Desktop\chrome.exe.exe" MD5: B19E0418F436A10BFB7BEBA2008438E9)

schtasks.exe (PID: 1700 cmdline: schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 11 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /f MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 2268 cmdline: schtasks.exe /create /tn "WmiPrvSE" /sc ONLOGON /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /rl HIGHEST /f MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 8020 cmdline: schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 13 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /rl HIGHEST /f MD5: 76CD6626DD8834BD4A42E6A565104DC2)

cmd.exe (PID: 8052 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8004 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chcp.com (PID: 7540 cmdline: chcp 65001 MD5: 33395C4732A49065EA72590B14B64F32)

PING.EXE (PID: 8080 cmdline: ping -n 10 localhost MD5: 2F46799D79D22AC72C241EC0322B011D)

WmiPrvSE.exe (PID: 4144 cmdline: "C:\Users\user\AppData\Local\WmiPrvSE.exe" MD5: B19E0418F436A10BFB7BEBA2008438E9)

chrome.exe (PID: 2304 cmdline: "C:\Users\user\Desktop\chrome.exe" MD5: 1BE1CE6E2BA8D48D6B7723D1CEE60835)

chrome.exe (PID: 800 cmdline: "C:\Users\user\Desktop\chrome.exe" MD5: 1BE1CE6E2BA8D48D6B7723D1CEE60835)

OpenWith.exe (PID: 5864 cmdline: C:\Windows\system32\OpenWith.exe -Embedding MD5: E4A834784FA08C17D47A1E72429C5109)

chrome.exe.exe (PID: 1544 cmdline: "C:\Users\user\Desktop\chrome.exe.exe" MD5: B19E0418F436A10BFB7BEBA2008438E9)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
DCRat	DCRat is a typical RAT that has been around since at least June 2019.	No Attribution	https://axmahr.github.io/posts/asyncrat-detection/ https://blog.sekoia.io/privateloader-the-loader-of-the-prevalent-ruzki-ppi-service/ https://blog.talosintelligence.com/2021/10/crimeware-targets-afghanistan-india.html https://blog.talosintelligence.com/2022/08/modernloader-delivers-multiple-stealers.html https://blogs.blackberry.com/en/2022/01/kraken-the-code-on-prometheus	https://malpedia.caad.fkie.fraunhofer.de/details/win.dcrat

Name	Description	Attribution	Blogpost URLs	Link
zgRAT	zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware. zgRAT has an inforstealer use which targets browser information and cryptowallets.Usually spreads by USB or phishing emails with -zip/-lnk/.bat/.xlsx attachments and so on.	No Attribution	https://bazaar.abuse.ch/browse/signature/zgRAT/ https://kcm.trellix.com/corporate/index?page=content&id=KB96190&locale=en_US https://www.cloudsek.com/blog/threat-actors-abuse-ai-generated-youtube-videos-to-spread-stealer-malware https://www.difesaesicurezza.com/cyber/cybercrime-rfq-dalla-turchia-veicola-agenttesla-e-zgrat/ https://www.fortinet.com/blog/threat-research/smokeloader-using-old-vulnerabilities	https://malpedia.caad.fkie.fraunhofer.de/details/win.zgrat

Yara Signatures

Dropped Files

Source	Rule	Description	Author
C:\Users\user\Desktop\chrome.exe.exe	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
C:\Users\user\Desktop\chrome.exe.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
C:\Users\user\Desktop\RuntimeBroker.exe	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
C:\Users\user\Desktop\RuntimeBroker.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
C:\Users\user\AppData\Local\WmiPrvSE.exe	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
C:\Users\user\AppData\Local\WmiPrvSE.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author
00000013.00000000.1499192068.0000000000082000.00000002.00000001.01000000.00000009.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000013.00000002.1551997778.0000000012C48000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_DCRat_1	Yara detected DCRat	Joe Security
Process Memory Space: chrome.exe.exe PID: 4232	JoeSecurity_DCRat_1	Yara detected DCRat	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
19.0.chrome.exe.exe.80000.0.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
19.0.chrome.exe.exe.80000.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security

Sigma Signatures

System Summary

Sigma detected: Files With System Process Name In Unsuspected Locations

Source: File created

Author: Sander Wiebing, Tim Shelton, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Program Files\7-Zip\7zG.exe, ProcessId: 7412, TargetFilename: C:\Users\user\Desktop\RuntimeBroker.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Users\user\AppData\Local\WmiPrvSE.exe", EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\chrome.exe.exe, ProcessId: 4232, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WmiPrvSE

Sigma detected: DNS Query To MEGA Hosting Website

Source: DNS query

Author: Aaron Greetham (@beardofbinary) - NCC Group: Data: Image: C:\Program Files\Google\Chrome\Application\chrome.exe, QueryName: gfs240n101.userstorage.mega.co.nz

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 11 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /f, CommandLine: schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 11 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /f, CommandLine|base64offset|contains: j, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "C:\Users\user\Desktop\chrome.exe.exe" , ParentImage: C:\Users\user\Desktop\chrome.exe.exe, ParentProcessId: 4232, ParentProcessName: chrome.exe.exe, ProcessCommandLine: schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 11 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /f, ProcessId: 1700, ProcessName: schtasks.exe

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Users\user\Desktop\zsRRIDta.log	Avira: detection malicious, Label: HEUR/AGEN.1300079
Source: C:\Users\user\Desktop\mgBDvwEF.log	Avira: detection malicious, Label: HEUR/AGEN.1300079
Source: C:\Users\user\Desktop\DFZAeFdW.log	Avira: detection malicious, Label: HEUR/AGEN.1362695
Source: C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat	Avira: detection malicious, Label: BAT/Delbat.C
Source: C:\Users\user\Desktop\chrome.exe.exe	Avira: detection malicious, Label: HEUR/AGEN.1323342
Source: C:\Users\user\Desktop\RuntimeBroker.exe	Avira: detection malicious, Label: HEUR/AGEN.1323342
Source: C:\Users\user\Desktop\ECAIzFsR.log	Avira: detection malicious, Label: HEUR/AGEN.1300079
Source: C:\Users\user\Desktop\ZHrwEXye.log	Avira: detection malicious, Label: HEUR/AGEN.1300079
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Avira: detection malicious, Label: HEUR/AGEN.1323342
Source: C:\Users\user\Desktop\MRbXzczB.log	Avira: detection malicious, Label: TR/PSW.Agent.qngqt

Multi AV Scanner detection for dropped file

Source: C:\Users\user\Desktop\MRbXzczB.log

ReversingLabs: Detection: 70%

Machine Learning detection for dropped file

Source: C:\Users\user\Desktop\zsRRIDta.log	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\DFZAeFdW.log	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\chrome.exe.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\vCaaBHth.log	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\RuntimeBroker.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\ECAIzFsR.log	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\OTNGVMDw.log	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\VRBGxbyl.log	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\ZHrwEXye.log	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\chrome.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\MRbXzczB.log	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\KgvHsPoI.log	Joe Sandbox ML: detected

Source: https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

HTTP Parser: Invalid link: Forgot your password?

Source: https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

HTTP Parser: <input type="password" .../> found

Source: https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

HTTP Parser: No <meta name="author".. found

Source: https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.17:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.17:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.155:443 -> 192.168.2.17:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.17:49844 version: TLS 1.2

Source:	Binary string: UHInOPZnx0HbaNVRlA.pdBsOhQTYWo0JJoicl source: chrome.exe.exe.17.dr
Source:	Binary string: %UHInOPZnx0HbaNVRlA.pdBsOhQTYWo0JJoicl source: chrome.exe.exe, 00000013.00000002.1545353789.0000000002899000.00000004.00000800.00020000.00000000.sdmp, chrome.exe.exe, 00000021.00000002.1687528974.0000000003189000.00000004.00000800.00020000.00000000.sdmp, WmiPrvSE.exe, 00000022.00000002.1718263810.00000000037B2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: is tampered.KUHInOPZnx0HbaNVRlA.pdBsOhQTYWo0JJoiclKGdUnHxKwUntF7BQU00.g52sFImHkvyFpIEgWkKjsYmZNkifyuNaRoqVS.L5N09i9gQLQqZPEieP3{11111-22222-50001-00000};GetDelegateForFunctionPointer source: chrome.exe.exe.17.dr

Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\Desktop\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\AppData\Local\Temp	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\Documents\desktop.ini	Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 4x nop then mov dword ptr [ebp-04h], 7FFFFFFFh		19_2_00007FF9BB92CCED
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 4x nop then jmp 00007FF9BB7619F6h		33_2_00007FF9BB7617EE

Networking

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\PING.EXE ping -n 10 localhost

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.67
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88

Source: global traffic	HTTP traffic detected: GET /file/3LZ0hLYB HTTP/1.1Host: mega.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secureboot.js?r=1720659709 HTTP/1.1Host: mega.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mega.nz/file/3LZ0hLYBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /loading-sprite_v4.png HTTP/1.1Host: mega.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mega.nz/file/3LZ0hLYBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/lang/en_e703ea956d39915b306a6fe9289e758e6d0ec377843d7a543a6b1a8b7a6b05c2.json HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-1_3a42998e6f7318edd6f6ea0568cc7824c9273044f89e2c38ae326fc554ad5a84.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=3 HTTP/1.1Host: mega.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mega.nz/file/3LZ0hLYBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /loading-sprite_v4.png HTTP/1.1Host: mega.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=3 HTTP/1.1Host: mega.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-2_1f80ff7ea7cc787dbed8963b01c4f709df888754e80f262d2e109e5a088a8f04.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-3_8d60e4c0aa8069a6dcb5d74a94e2672dfb90332f43cdbd766f13c0d66e6dccaf.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?id=0 HTTP/1.1Host: g.api.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?id=0&v=2 HTTP/1.1Host: g.api.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: mega.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://mega.nz/file/3LZ0hLYBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/lang/en_e703ea956d39915b306a6fe9289e758e6d0ec377843d7a543a6b1a8b7a6b05c2.json HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-1_3a42998e6f7318edd6f6ea0568cc7824c9273044f89e2c38ae326fc554ad5a84.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-4_4fd1c8f7e2f02fb9a57dcf5667dd968ed828ff048ce607fd73cbd530cf8a9db2.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-5_28a090261b3fcc9c576799d820968cdf2fe60f77328dc0e00d3a2ba7250a804f.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-3_8d60e4c0aa8069a6dcb5d74a94e2672dfb90332f43cdbd766f13c0d66e6dccaf.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-2_1f80ff7ea7cc787dbed8963b01c4f709df888754e80f262d2e109e5a088a8f04.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-6_f739f1b788e1aa846c5af53b37bf5835761d0f00a247ef0180f28edb71797578.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-4_4fd1c8f7e2f02fb9a57dcf5667dd968ed828ff048ce607fd73cbd530cf8a9db2.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-7_153ed2950ad758d1645d036bce30e293ae066ba6266e32e02dfa754b7bb34bfc.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-5_28a090261b3fcc9c576799d820968cdf2fe60f77328dc0e00d3a2ba7250a804f.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-1_73f0048e4f39d5ec99a6cd1b8e309b77eaccdbe1eaaf31c05e2b8e660919fdd0.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-6_f739f1b788e1aa846c5af53b37bf5835761d0f00a247ef0180f28edb71797578.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/html/templates_682231e1ad6ee170c226cb45a530ca090c6267ec93dff7cb2a70101d9be0bac8.json HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-7_153ed2950ad758d1645d036bce30e293ae066ba6266e32e02dfa754b7bb34bfc.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-8_5a0bd51c94a07cd5a5806408f32c247ce16f51db3df2d3992bdd9272478af76d.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-1_73f0048e4f39d5ec99a6cd1b8e309b77eaccdbe1eaaf31c05e2b8e660919fdd0.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-9_bc91f313152b74408e3715be06f8b45c9450f6f4814a11e5a2ab431e886fee21.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/html/templates_682231e1ad6ee170c226cb45a530ca090c6267ec93dff7cb2a70101d9be0bac8.json HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/bottom-pages-animations.css-postbuild_077437ba5398f2997efea39e55f89eadd473667177aba0b14a48c8b57c60af43.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-8_5a0bd51c94a07cd5a5806408f32c247ce16f51db3df2d3992bdd9272478af76d.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-10_c1031f4cca0d2cad1a9074cd0879ca29d084e2eb528787879d9134c8fa495250.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-9_bc91f313152b74408e3715be06f8b45c9450f6f4814a11e5a2ab431e886fee21.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-2_0e8588a249d6083898d049dfb2a913376c3f0434efe856bbfd93c62e6f82f42d.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/bottom-pages-animations.css-postbuild_077437ba5398f2997efea39e55f89eadd473667177aba0b14a48c8b57c60af43.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MXKGpzF+w7wuE73&MD=+YFfDOv1 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /4/js/mega-11_187f230e32b9f5a8b7ccaebdc95e13d34abefa2862e925b8a8bb1355aab74bf0.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-12_94cd0e56acb1d72a332a2f67a70fab76b5fc4698e19bfbba9141665ebda28f6b.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-2_0e8588a249d6083898d049dfb2a913376c3f0434efe856bbfd93c62e6f82f42d.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-10_c1031f4cca0d2cad1a9074cd0879ca29d084e2eb528787879d9134c8fa495250.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-3_1922102b66d4c2764a8cfa9bdbd87e007dc19b2a5b83a743f758ff17051c647e.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-13_230200d24f6daf921d926ff4d88f646672c163e3f5478212c35961f60d815a0d.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-12_94cd0e56acb1d72a332a2f67a70fab76b5fc4698e19bfbba9141665ebda28f6b.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-11_187f230e32b9f5a8b7ccaebdc95e13d34abefa2862e925b8a8bb1355aab74bf0.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-14_07b863d3ef47c1f5a009ef1828dec72da158a5ac5f7003a9e6e04a9015720712.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-13_230200d24f6daf921d926ff4d88f646672c163e3f5478212c35961f60d815a0d.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-15_e18287a396f86d96fba5714f7bb47e6322364acc3bdcb9a6ed94f382ca3df966.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-3_1922102b66d4c2764a8cfa9bdbd87e007dc19b2a5b83a743f758ff17051c647e.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-4_fa06e14b2baa149cd25ce0a79e30707cfcb371ec261a2b543075c519e35562af.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-14_07b863d3ef47c1f5a009ef1828dec72da158a5ac5f7003a9e6e04a9015720712.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-15_e18287a396f86d96fba5714f7bb47e6322364acc3bdcb9a6ed94f382ca3df966.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-16_e1f30ff0208b23154355d46d096fe4dc0903b6d61f3e1b940cd2bc8fd68ff723.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-4_fa06e14b2baa149cd25ce0a79e30707cfcb371ec261a2b543075c519e35562af.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-17_3a85d86ee65b0ea458f2d41270f2589ee1875995e684c8efff49b59f155efd79.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-7_58c04ac027b15931acfb17be4a134e35c8bdd3b99109e617895713a42f32d84a.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-16_e1f30ff0208b23154355d46d096fe4dc0903b6d61f3e1b940cd2bc8fd68ff723.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/mega-17_3a85d86ee65b0ea458f2d41270f2589ee1875995e684c8efff49b59f155efd79.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/html/download.html-postbuild_2749a59feff4141009bb961edd622162e7589b7f6c446e9be297528f0cdff89d.html HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/css/mega-7_58c04ac027b15931acfb17be4a134e35c8bdd3b99109e617895713a42f32d84a.css HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/html/js/download_7066fb3a9439ac4b7ab62485a20eef0196e9d0ec2a4038302f3eeda11453f2c5.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/html/download.html-postbuild_2749a59feff4141009bb961edd622162e7589b7f6c446e9be297528f0cdff89d.html HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/html/js/download_7066fb3a9439ac4b7ab62485a20eef0196e9d0ec2a4038302f3eeda11453f2c5.js HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/imagery/sprites-fm-illustration-sprite-wide.e397e234dc118de4.svg HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/imagery/sprites-fm-uni-uni.91766118ff060851.svg HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/imagery/sprites-fm-mime-90-uni.decaf26625f7b9e2.svg HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/images/mega/dialog-sprite.png?v=57a6bd1346996955 HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/images/mega/download-dialog.png?v=cf6daa0027e27782 HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mega.nzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/imagery/sprites-fm-mono.a67d0fb90e10bdab.woff2?h=dd3b1ae3a HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mega.nzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/fonts/Lato-Regular.woff2?v=6343dd45044b0726 HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mega.nzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/fonts/Lato-Semibold.woff2?v=7194963095272d0e HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mega.nzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js?v=1 HTTP/1.1Host: mega.nzConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://mega.nz/file/3LZ0hLYBUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/images/mega/dialog-sprite.png?v=57a6bd1346996955 HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/imagery/sprites-fm-illustration-sprite-wide.e397e234dc118de4.svg HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/imagery/sprites-fm-mime-90-uni.decaf26625f7b9e2.svg HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/images/mega/download-dialog.png?v=cf6daa0027e27782 HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /4/imagery/sprites-fm-uni-uni.91766118ff060851.svg HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?id=215118645&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1Host: g.api.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /4/images/mega/icons-sprite.png?v=48528e60724d858e HTTP/1.1Host: na.static.mega.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAdS%2BGHudbb5WIkBD%2BXZIP42DGg6aEgVvjQEo5UYaTfYoxVdOzP%2B2Um%2BzOZjg1ebCcBcH2LlA/8M6ZsuXhx/KpY7VgkX6acOlgXFt4zL/qk/27FqOLgUr920WSMV9wTYEpZoRGQTK0vjeI7mlEZHdjkzlwPqfkPfAUrx3Y1dPhyBoVvnAv3KxOkz6O8MrX%2BFew9E20PJK9iSFYNPR74/Ag8NfNJCxXk99h324DlglYqdSpdb%2BMTXaWlohhr3k5qt2u8Zb0wV5oZtiujOPShh2PzNlMl8zTM7ZItnVGT1HUK2Js/bGv1tdmEWW5md%2BiqdFH6MnkCqlTWortneBwkr99LsDZgAACI0a/ebQFehjqAGeOBjA7aroBpBQDbMUocRDjqMaAB9%2BXZ1RH3kpCxEYvWhchiQo4hyGlPEBjS91aHUkv9nwMSoUw4jvR1s3ODnJxB8rVokLzLa7Y/c6I8ocEiRs7F5sKap3VVaNzZ%2BY4/FYfxSFZEyvzoTvRL7bh9MpAyYvqBo0N5a736QabxqU9KVGZpmSFQKeeZSUsF3ON%2BfPpx7XsOdkKLhh/F%2BpTyvLtUKUeZrytD9IPB974eSxlrZdPevG2iTm2exVipfJBOx/dchMbBm/jQqkpyq0DdL/4ZaZkCMxhkSIf8039MG1kYaPmNooBf0JRsNQs7lm/nrKy%2BoUyC3pNCppmMkMdeqWh7M4kfhL0tuPlJ%2BV5wMN0jt6HYM9n/VQUMnTTr06JPSdAeNN9YzG08Iw/HiGyDUn3I%2BENJcpqlTUZrozo27WMIUVR2hW3VNUPBvliR51jckH5ydYZG8IHDXs%2BGP9efPqPB81DMA4UnCFwLofiVRJuWpVJBgwSfIKHj8sWrIvSkfUqRiBbPrX863os/0tb%2Bp89JTdmE4WPH15zBxoDr5Nk9VQxp4O7hbq1wE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1720697816User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: A71CA88E59BB42708F000623B42E87D2X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /4/images/mega/icons-sprite.png?v=48528e60724d858e HTTP/1.1Host: na.static.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?id=215118646&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1Host: g.api.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?id=215118647&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1Host: g.api.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/0-131071 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /decrypter.js HTTP/1.1Host: mega.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://mega.nz/file/3LZ0hLYBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/131072-393215 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/393216-786431 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/786432-1310719 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aesasm.js HTTP/1.1Host: mega.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mega.nz/decrypter.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/1310720-1966079 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/1966080-2752511 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/5767168-6519410 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/2752512-3670015 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/4718592-5767167 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/3670016-4718591 HTTP/1.1Host: gfs240n101.userstorage.mega.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MXKGpzF+w7wuE73&MD=+YFfDOv1 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: mega.nz
Source: global traffic	DNS traffic detected: DNS query: g.api.mega.co.nz
Source: global traffic	DNS traffic detected: DNS query: na.static.mega.co.nz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gfs240n101.userstorage.mega.co.nz

Source: unknown

HTTP traffic detected: POST /cs?id=0 HTTP/1.1Host: g.api.mega.co.nzConnection: keep-aliveContent-Length: 13sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://mega.nzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mega.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_198.1.dr	String found in binary or memory: http://asmjs.org
Source: chromecache_254.1.dr	String found in binary or memory: http://bit.ly/2kdckMn
Source: chromecache_231.1.dr	String found in binary or memory: http://brett-zamir.me)
Source: chromecache_198.1.dr	String found in binary or memory: http://burtleburtle.net/bob/rand/isaac.html
Source: chromecache_198.1.dr	String found in binary or memory: http://burtleburtle.net/bob/rand/isaacafa.html
Source: chromecache_238.1.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_254.1.dr	String found in binary or memory: http://github.com/garycourt/murmurhash-js
Source: chromecache_231.1.dr	String found in binary or memory: http://kevin.vanzonneveld.net
Source: chromecache_231.1.dr	String found in binary or memory: http://kevin.vanzonneveld.net)
Source: chromecache_231.1.dr	String found in binary or memory: http://rumkin.com)
Source: chrome.exe.exe, 00000013.00000002.1545353789.0000000002D93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: chromecache_254.1.dr	String found in binary or memory: http://sites.google.com/site/murmurhash/
Source: chromecache_254.1.dr	String found in binary or memory: http://stackoverflow.com/a/16344621/402133
Source: chromecache_242.1.dr	String found in binary or memory: http://stackoverflow.com/a/987376
Source: chromecache_192.1.dr	String found in binary or memory: http://stackoverflow.com/questions/123999/how-to-tell-if-a-dom-element-is-visible-in-the-current-vie
Source: chromecache_238.1.dr	String found in binary or memory: http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con
Source: chromecache_238.1.dr	String found in binary or memory: http://stackoverflow.com/questions/2600186/focus-doesnt-work-in-ie)
Source: chromecache_238.1.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_254.1.dr	String found in binary or memory: http://stackoverflow.com/questions/7317299/regex-matching-list-of-emoticons-of-various-type
Source: chromecache_181.1.dr	String found in binary or memory: http://w3.org/TR/css3-mediaqueries/#orientation
Source: chromecache_254.1.dr	String found in binary or memory: http://www.apache.org/licenses/
Source: chromecache_242.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_207.1.dr	String found in binary or memory: http://www.awaresystems.be/imaging/tiff/tifftags/docs/photoshopthumbnail.html
Source: chromecache_181.1.dr	String found in binary or memory: http://www.d-project.com/
Source: chromecache_181.1.dr	String found in binary or memory: http://www.denso-wave.com/qrcode/faqpatent-e.html
Source: chromecache_181.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_207.1.dr	String found in binary or memory: http://www.sno.phy.queensu.ca/~phil/exiftool/#supported
Source: chromecache_242.1.dr	String found in binary or memory: http://zetafleet.com
Source: chromecache_242.1.dr	String found in binary or memory: https://192.168.2.3:444/zero?t=1
Source: chromecache_254.1.dr	String found in binary or memory: https://beta.mega.nz.
Source: chromecache_242.1.dr	String found in binary or memory: https://blog.mega.io
Source: chromecache_242.1.dr	String found in binary or memory: https://blog.mega.io/?resilience=1
Source: chromecache_242.1.dr	String found in binary or memory: https://blog.mega.io/mega-adds-two-factor-authentication
Source: chromecache_242.1.dr	String found in binary or memory: https://blog.mega.io/the-mega-vulnerability-reward-program
Source: chromecache_242.1.dr	String found in binary or memory: https://blog.mega.io/vulnerability-rewards-the-first-week
Source: chromecache_231.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_231.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_231.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_231.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_231.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_231.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_231.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_207.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=149986
Source: chromecache_207.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=182424
Source: chromecache_207.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=183720
Source: chromecache_231.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_207.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1367251
Source: chromecache_181.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1456557
Source: chromecache_231.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_207.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=801176
Source: chromecache_207.1.dr	String found in binary or memory: https://caniuse.com/#feat=mediasource
Source: chromecache_207.1.dr	String found in binary or memory: https://caniuse.com/createimagebitmap
Source: chromecache_181.1.dr	String found in binary or memory: https://cms2.mega.nz/559d084a50ad7283acb6f1c433136952.png
Source: chromecache_181.1.dr	String found in binary or memory: https://cms2.mega.nz/b41537c0eae056cfe5ab05902fca322b.png
Source: chromecache_254.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=240603
Source: chromecache_207.1.dr	String found in binary or memory: https://crbug.com/1082451
Source: chromecache_207.1.dr	String found in binary or memory: https://crbug.com/979890
Source: chromecache_231.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_198.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/window.crypto.getRandomValues
Source: chromecache_181.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Events/dragenter
Source: chromecache_241.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/template
Source: chromecache_254.1.dr	String found in binary or memory: https://dexie.org
Source: chromecache_231.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_231.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_231.1.dr	String found in binary or memory: https://drafts.csswg.org/selectors/#relational
Source: chromecache_242.1.dr	String found in binary or memory: https://github.com/csnover/js-iso8601
Source: chromecache_181.1.dr	String found in binary or memory: https://github.com/diegocr/exif-js
Source: chromecache_238.1.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_181.1.dr	String found in binary or memory: https://github.com/imbcmdth)
Source: chromecache_231.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_231.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/157)
Source: chromecache_231.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/299)
Source: chromecache_231.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_231.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_242.1.dr	String found in binary or memory: https://github.com/meganz/
Source: chromecache_242.1.dr	String found in binary or memory: https://github.com/meganz/MEGAcmd
Source: chromecache_181.1.dr	String found in binary or memory: https://github.com/meganz/air-datepicker/tree/master/docs
Source: chromecache_238.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/1407
Source: chromecache_238.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_238.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/1548
Source: chromecache_238.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/1779
Source: chromecache_238.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_238.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/2325
Source: chromecache_238.1.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_242.1.dr	String found in binary or memory: https://github.com/mozilla/pdf.js/blob/3f33fbf8cf1d7eb5f29de32288ebaa4dd4922501/src/core/crypto.js#L
Source: chromecache_205.1.dr	String found in binary or memory: https://github.com/richtr/NoSleep.js
Source: chromecache_181.1.dr	String found in binary or memory: https://github.com/ryanve/verge
Source: chromecache_207.1.dr	String found in binary or memory: https://github.com/tmont/audio-metadata
Source: chromecache_255.1.dr	String found in binary or memory: https://github.com/vibornoff/asmcrypto.js/blob/release/src/aes/aes.asm.js
Source: chromecache_231.1.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_254.1.dr	String found in binary or memory: https://github.com/xxtea/xxtea-js/blob/master/src/xxtea.js)
Source: chromecache_242.1.dr	String found in binary or memory: https://help.mega.io
Source: chromecache_242.1.dr	String found in binary or memory: https://help.mega.io/accounts/password-management/recovery-key
Source: chromecache_242.1.dr	String found in binary or memory: https://help.mega.io/files-folders/rewind/how-do-i-use-rewind
Source: chromecache_242.1.dr	String found in binary or memory: https://help.mega.io/files-folders/sharing/encrypted-links
Source: chromecache_242.1.dr	String found in binary or memory: https://help.mega.io/files-folders/sharing/upload-file-request
Source: chromecache_242.1.dr	String found in binary or memory: https://help.mega.io/files-folders/view-move/mega-lite
Source: chromecache_242.1.dr	String found in binary or memory: https://help.mega.io/plans-storage/payments-billing/cancel-subscription
Source: chromecache_242.1.dr	String found in binary or memory: https://help.mega.io/plans-storage/space-storage/transfer-quota
Source: chromecache_231.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_231.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_231.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_231.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_231.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_254.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/input.html#e-mail-state-(type=email)
Source: chromecache_231.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_231.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_231.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_231.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_231.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_231.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_231.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_254.1.dr	String found in binary or memory: https://mega.io
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/cookie
Source: chromecache_242.1.dr, chromecache_241.1.dr	String found in binary or memory: https://mega.io/desktop
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/extensions
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/mobile
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/resellers
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/s4-terms
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/security
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/takedown
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/terms
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/terms#RecurringPaidSubscriptions
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/terms#Refunds
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.io/terms/#Refunds
Source: chromecache_254.1.dr	String found in binary or memory: https://mega.nz
Source: chromecache_254.1.dr	String found in binary or memory: https://mega.nz.
Source: chromecache_241.1.dr	String found in binary or memory: https://mega.nz/
Source: chromecache_254.1.dr	String found in binary or memory: https://mega.nz/#
Source: chromecache_181.1.dr	String found in binary or memory: https://mega.nz/#P
Source: chromecache_223.1.dr	String found in binary or memory: https://mega.nz/MEGAsyncSetup.dmg
Source: chromecache_223.1.dr	String found in binary or memory: https://mega.nz/MEGAsyncSetup.exe
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.nz/SecurityWhitepaper.pdf
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.nz/keybackup
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.nz/linux/repo/
Source: chromecache_242.1.dr	String found in binary or memory: https://mega.nz/recovery
Source: chromecache_242.1.dr, chromecache_241.1.dr	String found in binary or memory: https://mega.nz/support
Source: chromecache_231.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_231.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_231.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_231.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_231.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_231.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_231.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_181.1.dr	String found in binary or memory: https://schema.org/
Source: chromecache_236.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/tag/js/gpt.js
Source: chromecache_236.1.dr	String found in binary or memory: https://smoketest.mega.nz/
Source: chromecache_254.1.dr	String found in binary or memory: https://stackoverflow.com/a/13975255
Source: chromecache_254.1.dr	String found in binary or memory: https://stackoverflow.com/a/59756959
Source: chromecache_242.1.dr	String found in binary or memory: https://thunderbird.net/
Source: chromecache_242.1.dr	String found in binary or memory: https://unicode-org.github.io/cldr-staging/charts/latest/supplemental/language_plural_rules.html
Source: chromecache_242.1.dr	String found in binary or memory: https://www.npmjs.com/package/intl-pluralrules
Source: chromecache_242.1.dr	String found in binary or memory: https://www.npmjs.com/package/make-plural
Source: chromecache_242.1.dr	String found in binary or memory: https://www.qnap.com/en/app_center/
Source: chromecache_223.1.dr	String found in binary or memory: https://www.stopitnow.org.uk/concerned-about-your-own-thoughts-or-behaviour/
Source: chromecache_242.1.dr	String found in binary or memory: https://www.synology.com/en-nz/dsm/packages/MEGAcmd

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.17:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.17:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.155:443 -> 192.168.2.17:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.17:49844 version: TLS 1.2

System Summary

Blob-based file download detected

Source: C:\Users\user\Downloads\Local.zip

File download: blob:https://mega.nz/724c58d1-3817-4506-b06f-c8c28e1aba23

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File dump: C:\Users\user\Downloads\Local.zip (copy)

Jump to dropped file

Drops password protected ZIP file

Source: 89938b36-9e02-41fe-8154-715d5a6d60a8.tmp.0.dr	Zip Entry: encrypted
Source: 89938b36-9e02-41fe-8154-715d5a6d60a8.tmp.0.dr	Zip Entry: encrypted
Source: 89938b36-9e02-41fe-8154-715d5a6d60a8.tmp.0.dr	Zip Entry: encrypted
Source: 89938b36-9e02-41fe-8154-715d5a6d60a8.tmp.0.dr	Zip Entry: encrypted
Source: 89938b36-9e02-41fe-8154-715d5a6d60a8.tmp.0.dr	Zip Entry: encrypted
Source: 89938b36-9e02-41fe-8154-715d5a6d60a8.tmp.0.dr	Zip Entry: encrypted

Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB933C69	19_2_00007FF9BB933C69
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB935410	19_2_00007FF9BB935410
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB936C2D	19_2_00007FF9BB936C2D
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB9363B8	19_2_00007FF9BB9363B8
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB9351DD	19_2_00007FF9BB9351DD
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB9359C8	19_2_00007FF9BB9359C8
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB9200EB	19_2_00007FF9BB9200EB
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB9368A8	19_2_00007FF9BB9368A8
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB935850	19_2_00007FF9BB935850
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB9347B0	19_2_00007FF9BB9347B0
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB935F30	19_2_00007FF9BB935F30
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB935628	19_2_00007FF9BB935628
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB937534	19_2_00007FF9BB937534
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BBE7107E	19_2_00007FF9BBE7107E
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 33_2_00007FF9BB7994CD	33_2_00007FF9BB7994CD
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 33_2_00007FF9BB7A91E4	33_2_00007FF9BB7A91E4
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 33_2_00007FF9BB76AE4D	33_2_00007FF9BB76AE4D

Source: MZKqdMaH.log.19.dr	Static PE information: Resource name: RT_VERSION type: ARM COFF executable, no relocation info, not stripped, 52 sections, symbol offset=0x5f0053, 4522070 symbols, optional header size 82, created Sat Mar 7 05:34:56 1970
Source: OcxYzveC.log.19.dr	Static PE information: Resource name: RT_VERSION type: ARM COFF executable, no relocation info, not stripped, 52 sections, symbol offset=0x5f0053, 4522070 symbols, optional header size 82, created Sat Mar 7 05:34:56 1970
Source: MRbXzczB.log.19.dr	Static PE information: Resource name: RT_VERSION type: ARM COFF executable, no relocation info, not stripped, 52 sections, symbol offset=0x5f0053, 4522070 symbols, optional header size 82, created Sat Mar 7 05:34:56 1970

Source: MZKqdMaH.log.19.dr, -.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: OcxYzveC.log.19.dr, -.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: MRbXzczB.log.19.dr, -.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: classification engine

Classification label: mal100.troj.evad.win@37/182@18/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8004:120:WilError_03
Source: C:\Users\user\Desktop\chrome.exe.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\53323cd6ea8ec7a9dc5d88ea9aff93758419fb91ecc423c4814defa28a3062ca
Source: C:\Windows\System32\OpenWith.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5864:120:WilError_03

Source: C:\Users\user\Desktop\chrome.exe.exe

File created: C:\Users\user\AppData\Local\Temp\Whf3UGNhz2

Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat" "

Source: C:\Users\user\Desktop\chrome.exe.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Process::Create
Source: C:\Users\user\Desktop\chrome.exe.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Process::Create
Source: C:\Users\user\Desktop\chrome.exe.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Process::Create

Source: C:\Users\user\Desktop\chrome.exe.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1884,i,6659997199172310811,18304377769233346356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5580 --field-trial-handle=1884,i,6659997199172310811,18304377769233346356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: unknown	Process created: C:\Program Files\7-Zip\7zG.exe "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\" -an -ai#7zMap13162:70:7zEvent14778
Source: unknown	Process created: C:\Users\user\Desktop\chrome.exe.exe "C:\Users\user\Desktop\chrome.exe.exe"
Source: unknown	Process created: C:\Users\user\Desktop\chrome.exe "C:\Users\user\Desktop\chrome.exe"
Source: C:\Users\user\Desktop\chrome.exe.exe	Process created: C:\Windows\System32\schtasks.exe schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 11 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /f
Source: C:\Users\user\Desktop\chrome.exe.exe	Process created: C:\Windows\System32\schtasks.exe schtasks.exe /create /tn "WmiPrvSE" /sc ONLOGON /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /rl HIGHEST /f
Source: C:\Users\user\Desktop\chrome.exe.exe	Process created: C:\Windows\System32\schtasks.exe schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 13 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /rl HIGHEST /f
Source: C:\Users\user\Desktop\chrome.exe.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\chcp.com chcp 65001
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 10 localhost
Source: unknown	Process created: C:\Users\user\Desktop\chrome.exe "C:\Users\user\Desktop\chrome.exe"
Source: unknown	Process created: C:\Windows\System32\OpenWith.exe C:\Windows\system32\OpenWith.exe -Embedding
Source: unknown	Process created: C:\Users\user\Desktop\chrome.exe.exe "C:\Users\user\Desktop\chrome.exe.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\WmiPrvSE.exe "C:\Users\user\AppData\Local\WmiPrvSE.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1884,i,6659997199172310811,18304377769233346356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5580 --field-trial-handle=1884,i,6659997199172310811,18304377769233346356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat" "	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\chcp.com chcp 65001	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 10 localhost	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\WmiPrvSE.exe "C:\Users\user\AppData\Local\WmiPrvSE.exe"	Jump to behavior

Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: ktmw32.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: dlnashext.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: wpdshext.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\chcp.com	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\System32\chcp.com	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Windows\System32\PING.EXE	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\PING.EXE	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\PING.EXE	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\PING.EXE	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\PING.EXE	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\PING.EXE	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinui.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: pdh.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: actxprxy.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.appdefaults.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: thumbcache.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Section loaded: sspicli.dll	Jump to behavior

Source: C:\Program Files\7-Zip\7zG.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: UHInOPZnx0HbaNVRlA.pdBsOhQTYWo0JJoicl source: chrome.exe.exe.17.dr
Source:	Binary string: %UHInOPZnx0HbaNVRlA.pdBsOhQTYWo0JJoicl source: chrome.exe.exe, 00000013.00000002.1545353789.0000000002899000.00000004.00000800.00020000.00000000.sdmp, chrome.exe.exe, 00000021.00000002.1687528974.0000000003189000.00000004.00000800.00020000.00000000.sdmp, WmiPrvSE.exe, 00000022.00000002.1718263810.00000000037B2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: is tampered.KUHInOPZnx0HbaNVRlA.pdBsOhQTYWo0JJoiclKGdUnHxKwUntF7BQU00.g52sFImHkvyFpIEgWkKjsYmZNkifyuNaRoqVS.L5N09i9gQLQqZPEieP3{11111-22222-50001-00000};GetDelegateForFunctionPointer source: chrome.exe.exe.17.dr

Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB937937 push ebx; retf	19_2_00007FF9BB93793A
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 19_2_00007FF9BB9C2C67 pushad ; ret	19_2_00007FF9BB9C2C75
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 33_2_00007FF9BB7A2A10 push ecx; retf	33_2_00007FF9BB7A712C
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 33_2_00007FF9BB78C7A8 push eax; retf	33_2_00007FF9BB78C7A9
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 33_2_00007FF9BB77540B push edi; iretd	33_2_00007FF9BB77540C
Source: C:\Users\user\Desktop\chrome.exe.exe	Code function: 33_2_00007FF9BB775814 push ebp; retf	33_2_00007FF9BB775817

Persistence and Installation Behavior

Creates processes via WMI

Source: C:\Users\user\Desktop\chrome.exe.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Process::Create
Source: C:\Users\user\Desktop\chrome.exe.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Process::Create
Source: C:\Users\user\Desktop\chrome.exe.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Process::Create

Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\zsRRIDta.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\VRBGxbyl.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\MRbXzczB.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\mgBDvwEF.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\KgvHsPoI.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\EoSiPjjU.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\OcxYzveC.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\DFZAeFdW.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\FluqljyP.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\ECAIzFsR.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\mqZDgjXC.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\AppData\Local\WmiPrvSE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\OTNGVMDw.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\MZKqdMaH.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\QRoOqMSr.log	Jump to dropped file
Source: C:\Program Files\7-Zip\7zG.exe	File created: C:\Users\user\Desktop\chrome.exe.exe	Jump to dropped file
Source: C:\Program Files\7-Zip\7zG.exe	File created: C:\Users\user\Desktop\chrome.exe	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\AGzrsZCX.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\tRvKutio.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\TYmXMeMn.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\jqLMoAEM.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\vCaaBHth.log	Jump to dropped file
Source: C:\Program Files\7-Zip\7zG.exe	File created: C:\Users\user\Desktop\RuntimeBroker.exe	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\XOcOTbNg.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\ZHrwEXye.log	Jump to dropped file

Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\MZKqdMaH.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\OcxYzveC.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\MRbXzczB.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\EoSiPjjU.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\mgBDvwEF.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\KgvHsPoI.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\zsRRIDta.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\jqLMoAEM.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\ZHrwEXye.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\OTNGVMDw.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\FluqljyP.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\vCaaBHth.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\VRBGxbyl.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\DFZAeFdW.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\tRvKutio.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\QRoOqMSr.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\XOcOTbNg.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\ECAIzFsR.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\mqZDgjXC.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\TYmXMeMn.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	File created: C:\Users\user\Desktop\AGzrsZCX.log	Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\chrome.exe.exe

Process created: C:\Windows\System32\schtasks.exe schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 11 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /f

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run WmiPrvSE			Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run WmiPrvSE			Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Uses ping.exe to sleep

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 10 localhost
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 10 localhost			Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe	Memory allocated: 850000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Memory allocated: 1A890000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Memory allocated: 2980000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Memory allocated: 1AB60000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Memory allocated: 1680000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Memory allocated: 1B1A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Memory allocated: 16D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Memory allocated: 1B180000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Memory allocated: 1740000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Memory allocated: 1B750000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe

Code function: 33_2_00007FF9BB7A0394 sldt word ptr [eax]

33_2_00007FF9BB7A0394

Source: C:\Users\user\Desktop\chrome.exe.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\MZKqdMaH.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\QRoOqMSr.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\zsRRIDta.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\VRBGxbyl.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\MRbXzczB.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\mgBDvwEF.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\KgvHsPoI.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\AGzrsZCX.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\EoSiPjjU.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\tRvKutio.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\TYmXMeMn.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\jqLMoAEM.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\OcxYzveC.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\DFZAeFdW.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\FluqljyP.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\vCaaBHth.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\mqZDgjXC.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\ECAIzFsR.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\XOcOTbNg.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\ZHrwEXye.log	Jump to dropped file
Source: C:\Users\user\Desktop\chrome.exe.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\OTNGVMDw.log	Jump to dropped file

Source: C:\Users\user\Desktop\chrome.exe.exe TID: 1668	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe TID: 3392	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe TID: 3408	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe TID: 4468	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe TID: 1732	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\chrome.exe.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\Desktop\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\AppData\Local\Temp	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	File opened: C:\Users\user\Documents\desktop.ini	Jump to behavior

Source: chrome.exe, 0000001F.00000002.1580126347.00000000013CC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\DosDevices\D:5
Source: chrome.exe, 00000014.00000002.1511732661.0000000000E3B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\DosDevices\D:,
Source: chrome.exe.exe, 00000013.00000002.1575254197.000000001B642000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: -b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}

Source: C:\Users\user\Desktop\chrome.exe.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat" "	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\chcp.com chcp 65001	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 10 localhost	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\WmiPrvSE.exe "C:\Users\user\AppData\Local\WmiPrvSE.exe"	Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe	Queries volume information: C:\Users\user\Desktop\chrome.exe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Queries volume information: C:\Users\user\Desktop\chrome.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe	Queries volume information: C:\Users\user\Desktop\chrome.exe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\chrome.exe.exe	Queries volume information: C:\Users\user\Desktop\chrome.exe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\WmiPrvSE.exe	Queries volume information: C:\Users\user\AppData\Local\WmiPrvSE.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\chrome.exe.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected DCRat

Source: Yara match	File source: 00000013.00000002.1551997778.0000000012C48000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: chrome.exe.exe PID: 4232, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 19.0.chrome.exe.exe.80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000013.00000000.1499192068.0000000000082000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\Desktop\chrome.exe.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Desktop\RuntimeBroker.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\WmiPrvSE.exe, type: DROPPED

Yara detected zgRAT

Source: Yara match	File source: 19.0.chrome.exe.exe.80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\Desktop\chrome.exe.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Desktop\RuntimeBroker.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\WmiPrvSE.exe, type: DROPPED

Remote Access Functionality

Yara detected DCRat

Source: Yara match	File source: 00000013.00000002.1551997778.0000000012C48000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: chrome.exe.exe PID: 4232, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 19.0.chrome.exe.exe.80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000013.00000000.1499192068.0000000000082000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\Desktop\chrome.exe.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Desktop\RuntimeBroker.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\WmiPrvSE.exe, type: DROPPED

Yara detected zgRAT

Source: Yara match	File source: 19.0.chrome.exe.exe.80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\Desktop\chrome.exe.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Desktop\RuntimeBroker.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\WmiPrvSE.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	11 Windows Management Instrumentation	1 Scheduled Task/Job	11 Process Injection	11 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	11 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 Scripting	1 Scheduled Task/Job	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	11 Registry Run Keys / Startup Folder	11 Registry Run Keys / Startup Folder	41 Virtualization/Sandbox Evasion	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 DLL Side-Loading	1 DLL Side-Loading	11 Process Injection	NTDS	1 Remote System Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 System Network Configuration Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	2 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Rundll32	DCSync	14 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\Desktop\zsRRIDta.log	100%	Avira	HEUR/AGEN.1300079
C:\Users\user\Desktop\mgBDvwEF.log	100%	Avira	HEUR/AGEN.1300079
C:\Users\user\Desktop\DFZAeFdW.log	100%	Avira	HEUR/AGEN.1362695
C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat	100%	Avira	BAT/Delbat.C
C:\Users\user\Desktop\chrome.exe.exe	100%	Avira	HEUR/AGEN.1323342
C:\Users\user\Desktop\RuntimeBroker.exe	100%	Avira	HEUR/AGEN.1323342
C:\Users\user\Desktop\ECAIzFsR.log	100%	Avira	HEUR/AGEN.1300079
C:\Users\user\Desktop\ZHrwEXye.log	100%	Avira	HEUR/AGEN.1300079
C:\Users\user\AppData\Local\WmiPrvSE.exe	100%	Avira	HEUR/AGEN.1323342
C:\Users\user\Desktop\MRbXzczB.log	100%	Avira	TR/PSW.Agent.qngqt
C:\Users\user\Desktop\zsRRIDta.log	100%	Joe Sandbox ML
C:\Users\user\Desktop\DFZAeFdW.log	100%	Joe Sandbox ML
C:\Users\user\Desktop\chrome.exe.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\vCaaBHth.log	100%	Joe Sandbox ML
C:\Users\user\Desktop\RuntimeBroker.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\ECAIzFsR.log	100%	Joe Sandbox ML
C:\Users\user\Desktop\OTNGVMDw.log	100%	Joe Sandbox ML
C:\Users\user\Desktop\VRBGxbyl.log	100%	Joe Sandbox ML
C:\Users\user\Desktop\ZHrwEXye.log	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\WmiPrvSE.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\chrome.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\MRbXzczB.log	100%	Joe Sandbox ML
C:\Users\user\Desktop\KgvHsPoI.log	100%	Joe Sandbox ML
C:\Users\user\Desktop\AGzrsZCX.log	12%	ReversingLabs
C:\Users\user\Desktop\DFZAeFdW.log	8%	ReversingLabs
C:\Users\user\Desktop\ECAIzFsR.log	8%	ReversingLabs
C:\Users\user\Desktop\EoSiPjjU.log	12%	ReversingLabs
C:\Users\user\Desktop\FluqljyP.log	17%	ReversingLabs
C:\Users\user\Desktop\KgvHsPoI.log	8%	ReversingLabs
C:\Users\user\Desktop\MRbXzczB.log	71%	ReversingLabs	ByteCode-MSIL.Trojan.DCRat
C:\Users\user\Desktop\MZKqdMaH.log	12%	ReversingLabs
C:\Users\user\Desktop\OTNGVMDw.log	12%	ReversingLabs
C:\Users\user\Desktop\OcxYzveC.log	17%	ReversingLabs
C:\Users\user\Desktop\QRoOqMSr.log	12%	ReversingLabs
C:\Users\user\Desktop\TYmXMeMn.log	12%	ReversingLabs
C:\Users\user\Desktop\VRBGxbyl.log	17%	ReversingLabs
C:\Users\user\Desktop\XOcOTbNg.log	12%	ReversingLabs
C:\Users\user\Desktop\ZHrwEXye.log	17%	ReversingLabs
C:\Users\user\Desktop\jqLMoAEM.log	12%	ReversingLabs
C:\Users\user\Desktop\mgBDvwEF.log	17%	ReversingLabs	ByteCode-MSIL.Trojan.DCRat
C:\Users\user\Desktop\mqZDgjXC.log	17%	ReversingLabs
C:\Users\user\Desktop\tRvKutio.log	8%	ReversingLabs
C:\Users\user\Desktop\vCaaBHth.log	5%	ReversingLabs
C:\Users\user\Desktop\zsRRIDta.log	12%	ReversingLabs

Source	Detection	Scanner	Label
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/131072-393215	0%	Avira URL Cloud	safe
https://unicode-org.github.io/cldr-staging/charts/latest/supplemental/language_plural_rules.html	0%	Avira URL Cloud	safe
https://github.com/moment/moment/issues/1423	0%	Avira URL Cloud	safe
https://blog.mega.io/vulnerability-rewards-the-first-week	0%	Avira URL Cloud	safe
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/393216-786431	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af	0%	Avira URL Cloud	safe
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/3670016-4718591	0%	Avira URL Cloud	safe
https://cms2.mega.nz/b41537c0eae056cfe5ab05902fca322b.png	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/js/mega-3_8d60e4c0aa8069a6dcb5d74a94e2672dfb90332f43cdbd766f13c0d66e6dccaf.js	0%	Avira URL Cloud	safe
http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con	0%	Avira URL Cloud	safe
https://github.com/moment/moment/issues/1548	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/1966080-2752511	0%	Avira URL Cloud	safe
https://help.mega.io/accounts/password-management/recovery-key	0%	Avira URL Cloud	safe
https://thunderbird.net/	0%	Avira URL Cloud	safe
https://mega.nz.	0%	Avira URL Cloud	safe
https://mega.nz/keybackup	0%	Avira URL Cloud	safe
https://mega.nz	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/js/mega-11_187f230e32b9f5a8b7ccaebdc95e13d34abefa2862e925b8a8bb1355aab74bf0.js	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/js/mega-2_1f80ff7ea7cc787dbed8963b01c4f709df888754e80f262d2e109e5a088a8f04.js	0%	Avira URL Cloud	safe
https://mega.nz/	0%	Avira URL Cloud	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/js/mega-6_f739f1b788e1aa846c5af53b37bf5835761d0f00a247ef0180f28edb71797578.js	0%	Avira URL Cloud	safe
https://github.com/xxtea/xxtea-js/blob/master/src/xxtea.js)	0%	Avira URL Cloud	safe
https://mega.io/extensions	0%	Avira URL Cloud	safe
https://github.com/moment/moment/issues/1779	0%	Avira URL Cloud	safe
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/#nonce-attributes	0%	Avira URL Cloud	safe
https://blog.mega.io/?resilience=1	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/imagery/sprites-fm-mono.a67d0fb90e10bdab.woff2?h=dd3b1ae3a	0%	Avira URL Cloud	safe
https://www.stopitnow.org.uk/concerned-about-your-own-thoughts-or-behaviour/	0%	Avira URL Cloud	safe
https://mega.nz/recovery	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/css/mega-3_1922102b66d4c2764a8cfa9bdbd87e007dc19b2a5b83a743f758ff17051c647e.css	0%	Avira URL Cloud	safe
http://stackoverflow.com/questions/2600186/focus-doesnt-work-in-ie)	0%	Avira URL Cloud	safe
https://github.com/imbcmdth)	0%	Avira URL Cloud	safe
https://drafts.csswg.org/selectors/#relational	0%	Avira URL Cloud	safe
http://stackoverflow.com/a/16344621/402133	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/js/mega-8_5a0bd51c94a07cd5a5806408f32c247ce16f51db3df2d3992bdd9272478af76d.js	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/css/mega-1_73f0048e4f39d5ec99a6cd1b8e309b77eaccdbe1eaaf31c05e2b8e660919fdd0.css	0%	Avira URL Cloud	safe
http://zetafleet.com	0%	Avira URL Cloud	safe
http://w3.org/TR/css3-mediaqueries/#orientation	0%	Avira URL Cloud	safe
https://crbug.com/979890	0%	Avira URL Cloud	safe
https://mega.nz/sw.js?v=1	0%	Avira URL Cloud	safe
https://mega.nz/decrypter.js	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/fonts/Lato-Semibold.woff2?v=7194963095272d0e	0%	Avira URL Cloud	safe
http://bit.ly/2kdckMn	0%	Avira URL Cloud	safe
https://mega.nz/manifest.json	0%	Avira URL Cloud	safe
http://github.com/garycourt/murmurhash-js	0%	Avira URL Cloud	safe
https://mega.nz/linux/repo/	0%	Avira URL Cloud	safe
http://asmjs.org	0%	Avira URL Cloud	safe
http://burtleburtle.net/bob/rand/isaacafa.html	0%	Avira URL Cloud	safe
https://github.com/richtr/NoSleep.js	0%	Avira URL Cloud	safe
https://dexie.org	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/API/window.crypto.getRandomValues	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/js/mega-5_28a090261b3fcc9c576799d820968cdf2fe60f77328dc0e00d3a2ba7250a804f.js	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/Events/dragenter	0%	Avira URL Cloud	safe
https://github.com/meganz/air-datepicker/tree/master/docs	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery/pull/557)	0%	Avira URL Cloud	safe
http://stackoverflow.com/questions/123999/how-to-tell-if-a-dom-element-is-visible-in-the-current-vie	0%	Avira URL Cloud	safe
http://rumkin.com)	0%	Avira URL Cloud	safe
https://github.com/mozilla/pdf.js/blob/3f33fbf8cf1d7eb5f29de32288ebaa4dd4922501/src/core/crypto.js#L	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/css/mega-7_58c04ac027b15931acfb17be4a134e35c8bdd3b99109e617895713a42f32d84a.css	0%	Avira URL Cloud	safe
https://www.synology.com/en-nz/dsm/packages/MEGAcmd	0%	Avira URL Cloud	safe
https://mega.nz/#	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/lang/en_e703ea956d39915b306a6fe9289e758e6d0ec377843d7a543a6b1a8b7a6b05c2.json	0%	Avira URL Cloud	safe
https://mega.nz/MEGAsyncSetup.dmg	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js	0%	Avira URL Cloud	safe
http://burtleburtle.net/bob/rand/isaac.html	0%	Avira URL Cloud	safe
https://www.npmjs.com/package/make-plural	0%	Avira URL Cloud	safe
https://g.api.mega.co.nz/cs?id=215118647&j=a2c194a15c94c200&v=3&lang=en&domain=meganz	0%	Avira URL Cloud	safe
https://help.mega.io/files-folders/rewind/how-do-i-use-rewind	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/css/mega-2_0e8588a249d6083898d049dfb2a913376c3f0434efe856bbfd93c62e6f82f42d.css	0%	Avira URL Cloud	safe
https://github.com/tmont/audio-metadata	0%	Avira URL Cloud	safe
https://mega.nz/file/3LZ0hLYB	0%	Avira URL Cloud	safe
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/0-131071	0%	Avira URL Cloud	safe
https://na.static.mega.co.nz/4/fonts/Lato-Regular.woff2?v=6343dd45044b0726	0%	Avira URL Cloud	safe
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/786432-1310719	0%	Avira URL Cloud	safe
https://help.mega.io/files-folders/sharing/upload-file-request	0%	Avira URL Cloud	safe
https://help.mega.io/files-folders/sharing/encrypted-links	0%	Avira URL Cloud	safe
https://help.mega.io/plans-storage/space-storage/transfer-quota	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/input.html#e-mail-state-(type=email)	0%	Avira URL Cloud	safe
https://github.com/moment/moment/issues/2325	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mega.nz	31.216.144.5	true	true	unknown
gfs240n101.userstorage.mega.co.nz	69.30.89.11	true	false	unknown
na.static.mega.co.nz	162.208.16.210	true	false	unknown
lu.api.mega.co.nz	66.203.125.16	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
g.api.mega.co.nz	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/3670016-4718591	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af	false	Avira URL Cloud: safe	unknown
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/393216-786431	false	Avira URL Cloud: safe	unknown
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/131072-393215	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/js/mega-3_8d60e4c0aa8069a6dcb5d74a94e2672dfb90332f43cdbd766f13c0d66e6dccaf.js	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/1966080-2752511	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/js/mega-2_1f80ff7ea7cc787dbed8963b01c4f709df888754e80f262d2e109e5a088a8f04.js	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/js/mega-11_187f230e32b9f5a8b7ccaebdc95e13d34abefa2862e925b8a8bb1355aab74bf0.js	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/js/mega-6_f739f1b788e1aa846c5af53b37bf5835761d0f00a247ef0180f28edb71797578.js	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/imagery/sprites-fm-mono.a67d0fb90e10bdab.woff2?h=dd3b1ae3a	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/css/mega-3_1922102b66d4c2764a8cfa9bdbd87e007dc19b2a5b83a743f758ff17051c647e.css	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/js/mega-8_5a0bd51c94a07cd5a5806408f32c247ce16f51db3df2d3992bdd9272478af76d.js	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/css/mega-1_73f0048e4f39d5ec99a6cd1b8e309b77eaccdbe1eaaf31c05e2b8e660919fdd0.css	false	Avira URL Cloud: safe	unknown
https://mega.nz/decrypter.js	false	Avira URL Cloud: safe	unknown
https://mega.nz/sw.js?v=1	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/fonts/Lato-Semibold.woff2?v=7194963095272d0e	false	Avira URL Cloud: safe	unknown
https://mega.nz/manifest.json	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/js/mega-5_28a090261b3fcc9c576799d820968cdf2fe60f77328dc0e00d3a2ba7250a804f.js	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/css/mega-7_58c04ac027b15931acfb17be4a134e35c8bdd3b99109e617895713a42f32d84a.css	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/lang/en_e703ea956d39915b306a6fe9289e758e6d0ec377843d7a543a6b1a8b7a6b05c2.json	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js	false	Avira URL Cloud: safe	unknown
https://g.api.mega.co.nz/cs?id=215118647&j=a2c194a15c94c200&v=3&lang=en&domain=meganz	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/css/mega-2_0e8588a249d6083898d049dfb2a913376c3f0434efe856bbfd93c62e6f82f42d.css	false	Avira URL Cloud: safe	unknown
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/0-131071	false	Avira URL Cloud: safe	unknown
https://mega.nz/file/3LZ0hLYB	false	Avira URL Cloud: safe	unknown
https://na.static.mega.co.nz/4/fonts/Lato-Regular.woff2?v=6343dd45044b0726	false	Avira URL Cloud: safe	unknown
https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/786432-1310719	false	Avira URL Cloud: safe	unknown
https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://unicode-org.github.io/cldr-staging/charts/latest/supplemental/language_plural_rules.html	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/moment/moment/issues/1423	chromecache_238.1.dr	false	Avira URL Cloud: safe	unknown
https://blog.mega.io/vulnerability-rewards-the-first-week	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con	chromecache_238.1.dr	false	Avira URL Cloud: safe	unknown
https://cms2.mega.nz/b41537c0eae056cfe5ab05902fca322b.png	chromecache_181.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/moment/moment/issues/1548	chromecache_238.1.dr	false	Avira URL Cloud: safe	unknown
https://help.mega.io/accounts/password-management/recovery-key	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://thunderbird.net/	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_181.1.dr	false	URL Reputation: safe	unknown
https://mega.nz	chromecache_254.1.dr	true	Avira URL Cloud: safe	unknown
https://mega.nz.	chromecache_254.1.dr	false	Avira URL Cloud: safe	unknown
https://mega.nz/keybackup	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://mega.nz/	chromecache_241.1.dr	true	Avira URL Cloud: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_231.1.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://mega.io/extensions	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	chrome.exe.exe, 00000013.00000002.1545353789.0000000002D93000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/moment/moment/issues/1779	chromecache_238.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/xxtea/xxtea-js/blob/master/src/xxtea.js)	chromecache_254.1.dr	false	Avira URL Cloud: safe	unknown
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_238.1.dr	false	Avira URL Cloud: safe	unknown
https://blog.mega.io/?resilience=1	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#nonce-attributes	chromecache_231.1.dr	false	Avira URL Cloud: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://www.stopitnow.org.uk/concerned-about-your-own-thoughts-or-behaviour/	chromecache_223.1.dr	false	Avira URL Cloud: safe	unknown
https://mega.nz/recovery	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/questions/2600186/focus-doesnt-work-in-ie)	chromecache_238.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/imbcmdth)	chromecache_181.1.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/a/16344621/402133	chromecache_254.1.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/selectors/#relational	chromecache_231.1.dr	false	Avira URL Cloud: safe	unknown
http://w3.org/TR/css3-mediaqueries/#orientation	chromecache_181.1.dr	false	Avira URL Cloud: safe	unknown
http://zetafleet.com	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://crbug.com/979890	chromecache_207.1.dr	false	Avira URL Cloud: safe	unknown
https://jquery.com/	chromecache_231.1.dr	false	URL Reputation: safe	unknown
http://bit.ly/2kdckMn	chromecache_254.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/richtr/NoSleep.js	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://mega.nz/linux/repo/	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
http://github.com/garycourt/murmurhash-js	chromecache_254.1.dr	false	Avira URL Cloud: safe	unknown
http://burtleburtle.net/bob/rand/isaacafa.html	chromecache_198.1.dr	false	Avira URL Cloud: safe	unknown
http://asmjs.org	chromecache_198.1.dr	false	Avira URL Cloud: safe	unknown
https://dexie.org	chromecache_254.1.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/window.crypto.getRandomValues	chromecache_198.1.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Events/dragenter	chromecache_181.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/meganz/air-datepicker/tree/master/docs	chromecache_181.1.dr	false	Avira URL Cloud: safe	unknown
http://rumkin.com)	chromecache_231.1.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/questions/123999/how-to-tell-if-a-dom-element-is-visible-in-the-current-vie	chromecache_192.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_231.1.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://github.com/mozilla/pdf.js/blob/3f33fbf8cf1d7eb5f29de32288ebaa4dd4922501/src/core/crypto.js#L	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://www.synology.com/en-nz/dsm/packages/MEGAcmd	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://mega.nz/#	chromecache_254.1.dr	false	Avira URL Cloud: safe	unknown
https://mega.nz/MEGAsyncSetup.dmg	chromecache_223.1.dr	false	Avira URL Cloud: safe	unknown
http://burtleburtle.net/bob/rand/isaac.html	chromecache_198.1.dr	false	Avira URL Cloud: safe	unknown
https://www.npmjs.com/package/make-plural	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://help.mega.io/files-folders/rewind/how-do-i-use-rewind	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/tmont/audio-metadata	chromecache_207.1.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://help.mega.io/files-folders/sharing/upload-file-request	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://help.mega.io/plans-storage/space-storage/transfer-quota	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-54	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://help.mega.io/files-folders/sharing/encrypted-links	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/input.html#e-mail-state-(type=email)	chromecache_254.1.dr	false	Avira URL Cloud: safe	unknown
https://jquery.org/license	chromecache_231.1.dr	false	URL Reputation: safe	unknown
https://github.com/moment/moment/issues/2325	chromecache_238.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.208.16.210	na.static.mega.co.nz	United States	55190	TELLARC-ASN1US	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
66.203.125.16	lu.api.mega.co.nz	United States	11922	RBNUS	false
185.206.25.71	unknown	France	205809	MEGAFR	false
66.203.125.14	unknown	United States	11922	RBNUS	false
31.216.145.5	unknown	Luxembourg	24611	DCLUX-AS4rueGrahamBellLU	false
69.30.89.11	gfs240n101.userstorage.mega.co.nz	United States	2044	IINET-2044US	false
31.216.144.5	mega.nz	Luxembourg	24611	DCLUX-AS4rueGrahamBellLU	true

Private

IP
192.168.2.17
192.168.2.18
127.0.0.1

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1471460
Start date and time:	2024-07-11 13:36:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	37
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.evad.win@37/182@18/12
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, RuntimeBroker.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 172.217.16.206, 74.125.133.84, 34.104.35.123, 142.250.185.106, 142.250.185.202, 142.250.185.170, 142.250.74.202, 142.250.184.234, 172.217.18.10, 142.250.186.106, 216.58.206.74, 216.58.206.42, 142.250.185.234, 172.217.16.202, 142.250.185.138, 216.58.212.170, 142.250.186.170, 142.250.185.74, 142.250.186.74, 142.250.184.195, 172.217.18.14
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, login.live.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com
Execution Graph export aborted for target chrome.exe, PID 2304 because it is empty
Execution Graph export aborted for target chrome.exe, PID 800 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

Simulations

Behavior and APIs

Time	Type	Description
07:37:29	API Interceptor	1x Sleep call for process: OpenWith.exe modified

LLM Input / Output

Input

Output

URL: https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM Model: Perplexity: mixtral-8x7b-instruct

{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text of the webpage does not create a sense of urgency as it does not contain phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'. Instead, it only mentions creating an account and saving a file.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism as there is no challenge to solve or any indication of human verification."]}

Title: Download - MEGA OCR: Create account Local.zip Save to MEGA 6.2 / 6.2 MB Completed

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	ASCII text, with very long lines (634), with no line terminators
Category:	dropped
Size (bytes):	634
Entropy (8bit):	5.886986394806633
Encrypted:	false
SSDEEP:	12:3TUdD+UiYR/S8D5oh5q0X2A4fpUCbeaYrc9Q6P1RwpQQBcIrGZ32fSKE:3SR3D5v02AM6Uerrbe/EcKS32qh
MD5:	45E4B7D7C3CDC665D18856C1A5F11B97
SHA1:	EE3B331E359AC19C5ACC56DA619948146949BD29
SHA-256:	63FFB77E5F8539F0D056BDCF33185923BCBA9935E8E85410CAD83A6FF547E026
SHA-512:	4AC2CCA3A98A8CDA40A38CD1CC09A6501F70F7D602E4F057F37CB6B48939F630063A16EFA3403C41138CDA4B40514A8B3407C460BC360E232C32F411699D12C4
Malicious:	false
Reputation:	low
Preview:	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

C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	171
Entropy (8bit):	5.143169305911513
Encrypted:	false
SSDEEP:	3:mKDDVNGvTVLuVFcROr+jn9m1sHVvE2J5yIM2dASBktKcKZG1sHVvE2J5xAIgCXLq:hCRLuVFOOr+DE1sHO23yIMmKOZG1sHOJ
MD5:	344D8678DE0CF288E55E7BD2F79A14B9
SHA1:	9A987C98B3AE01B8A33DA0A6611A8F1C05F548A0
SHA-256:	E263FA8D60FFC245A6B5BE3DD307B5B454D839EDDF46A98BFF042EB400037600
SHA-512:	940BD9DE4CF32ACCCD607723D0C8EAC0F4B880F20948345C3BEB58964EE49242BB2B097AC9860A4EF917B16314D3C5DC5BFC2EADCE5093611AB84C60B46FE743
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100%
Reputation:	low
Preview:	@echo off..chcp 65001..ping -n 10 localhost > nul..start "" "C:\Users\user\AppData\Local\WmiPrvSE.exe"..del /a /q /f "C:\Users\user\AppData\Local\Temp\\5uPcWFRVBF.bat"

C:\Users\user\AppData\Local\Temp\Whf3UGNhz2

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	25
Entropy (8bit):	4.323856189774724
Encrypted:	false
SSDEEP:	3:1M9uWq7Xg:9Tg
MD5:	4C2D5D21BCF5CC38D64F15D22FFC1EB4
SHA1:	AF3266E03F733E10CDB56CADF1C79D804D2AE767
SHA-256:	9111B39FCC9DBB87D007A77FCF955677E34EA7AE2F5CD5E37C55562C20A8B70E
SHA-512:	51226BEB6BEF06E66DD51D4EB7FEE3C4FBA1C0AE42C055C4719498F744372BC9230C8727A17924AF4B2898C28F73A8CA39294BC8C40BA842012A8B5CADB48545
Malicious:	false
Reputation:	low
Preview:	RdVYwiXKaZ43TfGCdrJtNgwKr

C:\Users\user\AppData\Local\WmiPrvSE.exe

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3679232
Entropy (8bit):	7.822356755171379
Encrypted:	false
SSDEEP:	98304:uzTvIytEyW5NKJeYjw8T3aYb84yEBpJjuu0B0KG:M1yK88Tq88yz1uvB0KG
MD5:	B19E0418F436A10BFB7BEBA2008438E9
SHA1:	79CBEE755CF6B7766E7BDC7E224E12B3BAD21EFC
SHA-256:	117C66635CD244BCEF83DB4686F33D97FA463A925E508062A3DDB3F9AD17024D
SHA-512:	22C093E29BC66A91C00594DF7081FEDA1743FF43A54231FD6BBE8AF5BD5770035C99A1B5AF7DD0E63FACFBF51CB99615FA99367C5781E0ABCF353EF37F055A62
Malicious:	true
Yara Hits:	Rule: JoeSecurity_zgRAT_1, Description: Yara detected zgRAT, Source: C:\Users\user\AppData\Local\WmiPrvSE.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\WmiPrvSE.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...u..e..................8.........n;8.. ...@8...@.. ........................8...........@................................. ;8.K....@8.p....................`8...................................................... ............... ..H............text...t.8.. ....8................. ..`.rsrc...p....@8.......8.............@....reloc.......`8......"8.............@..B................P;8.....H.......x...........t... ...`S-..:8......................................0..........(.... ........8........E....q...).......M...8l...(.... ....~f...{....:....& ....8....(.... ....~f...{....9....& ....8....(.... ....~f...{\|...9....& ....8z......0..<....... ........8........E................=...............8....~....9.... ....8....8u... ....~f...{l...9....& ....8....~....(d... .... .... ....s....~....(h....... ....~f...{p...:b...& ....8W...r...ps....z...... ....~f...{....91..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 11 10:36:36 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9909247912445087
Encrypted:	false
SSDEEP:	48:8SkdBTO7riJHRidAKZdA1JehwiZUklqeh2y+3:8SSUCBy
MD5:	D30984F04000AE95EFAE8FD60E9B292A
SHA1:	3AA86FDEF1FC8DD0FD5D84BEF8A2344354E57AD5
SHA-256:	EE1ED0D9954EEC48CBF398F4C34BF2DCEEB06183E2B4F74C10AA72117E281E69
SHA-512:	A5F956D250DAF04115187686CF223D8CEEE8B33781053AC603E8BD6DDBE6294A78796658CE4027C428834F25E3911F882A344793B1F30B06E4777D62DA9EECDF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....{.;.........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X.\....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.\....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X.\....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.\...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.\...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.O'.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 11 10:36:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.0046638610937535
Encrypted:	false
SSDEEP:	48:80kdBTO7riJHRidAKZdA10eh/iZUkAQkqehxy+2:80SUI9QEy
MD5:	54DC14E81B2C70FC537914C0CF94CFD4
SHA1:	A93F28AB0AD61EF4862B59521A565C83BB411E50
SHA-256:	CB706F5E51E9C9BE4BD71354F1C7CE9D05C6A9DCB16D2462AD97093F1A614599
SHA-512:	1A4A3791F536A608A88F90BD516A58EF17B7B3D0A38AFDBB961E28AEDB20D226655014E3C4A76886EB05E611A84336551954CF4190BD7B604ED267D9D897B02E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....]0.........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X.\....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.\....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X.\....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.\...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.\...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.O'.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0126232822214325
Encrypted:	false
SSDEEP:	48:8ekdBTO7rjHRidAKZdA14tIeh7sFiZUkmgqeh7sny+BX:8eSU5ndy
MD5:	E60316FE454AC7B9A1F921FF0F60ABA2
SHA1:	CF0E45AE0C858CEBAA10BEEEC0603D5CBE47F9AB
SHA-256:	AEA6B07ED016B1B9D1BBF81B5D6BE6346D17ABE161F5C1EF1206A186615D2080
SHA-512:	D1552FE845BF5CFA107DDCE61EB4E18DFB5D4ADAAF090D65CFCDF9AA24C7AC2BF66199BC0A81D08E6AADDC72B31101A4805801BA381EFCEAEC652CC16D01E620
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X.\....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.\....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X.\....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.\...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.O'.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 11 10:36:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.0044670999130885
Encrypted:	false
SSDEEP:	48:8hkdBTO7riJHRidAKZdA1behDiZUkwqehFy+R:8hSUDvy
MD5:	5A4693493BC703E37555482CC6A33EAF
SHA1:	5677F403BBF85A9725C4078BD8CCC9EBBB6EB8BD
SHA-256:	B0C3EE2351303242FD7911B9CB6C2E221101EEA4910AF662A814089DB2C31DD5
SHA-512:	22110AE055C7118B4776BC5B5D90260972F1580A881BB95577022F16BD8ED5BACC220E24ACD042CB06F96184B85EF608042992DE7F0E99F186AFB1D543A009CB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...............y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X.\....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.\....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X.\....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.\...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.\...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.O'.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 11 10:36:36 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.991450228439084
Encrypted:	false
SSDEEP:	48:8pkdBTO7riJHRidAKZdA1VehBiZUk1W1qehTy+C:8pSUT9zy
MD5:	31D54E3F817C41CB5D0C130F68018C32
SHA1:	5775A37FB653A2B36EF837520B32EBB35E275519
SHA-256:	BBDFD833428E606AD9E50026921F8EA7BF33A473AB5B60F252C1666A87037835
SHA-512:	3BF7F3539D58D238015A84114EC08F96AEB034FF3110DB1ABDF1C0EDC84B4A9CAEDF707A7727656493934ECB3AF0965C81EB0966752E09494999292AB939D86F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....+.5.........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X.\....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.\....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X.\....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.\...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.\...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.O'.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 11 10:36:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.003851223119215
Encrypted:	false
SSDEEP:	48:8jkdBTO7riJHRidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbdy+yT+:8jSUPTTTbxWOvTbdy7T
MD5:	D0B052189E8E50A2911056D8D0705E44
SHA1:	E395D007CF9521E98B1832412B95DC2641A6A4D8
SHA-256:	8902980A8F43BA87A885E97285F3185B46200F23705F0479BC374ADC6FF9396A
SHA-512:	86C2C3AA074A046AC1DED7A6AA9BC611A04EBC88C7F62C27752500C9DF642F49AF3CEB0897C42E03715B46EEAD18281914FE2B47698FDC91EF6B09D143080AE5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....-".........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X.\....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.\....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X.\....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.\...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.\...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.O'.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Desktop\7a73b78f679a6f

Download File

Process:	C:\Program Files\7-Zip\7zG.exe
File Type:	ASCII text, with very long lines (524), with no line terminators
Category:	dropped
Size (bytes):	524
Entropy (8bit):	5.879788949454485
Encrypted:	false
SSDEEP:	12:qtRrQtN7+2hcLA1pwHG68VX1hZBbpmnyLps59io4YfEVvO:CRSN7HpGGZ5FpQnyLps6o4YfEVvO
MD5:	82026D942EAB9B50660686BF12B0D4AC
SHA1:	E68EBC32037D5E6CD8D8222D31C485C6284CCEF3
SHA-256:	893FF9E4AD5DD7ACB09C2746F151D43A7627798AF92F599364FC15985C0689F1
SHA-512:	E3891B91E69555EC474081ADFFFC3F54B2950A2E1C80C908AEA03B83052558A459E7CA86FCD5ACDE7AD790CF842BE9FACAD215589DE0C6656091213943082690
Malicious:	false
Reputation:	low
Preview:	GmqBf23ZW39rjJT7pNGIkK9cuhy1aZCct6uMgbjYtd59HeVTX9HD0W56nNQ7EC870h7nZGaNnrZHO9VPMedbR9lWBxjSLlUre8Jjhs4Rj4ZJ7xso1Bvjihp06lllhHBBXsnPzwsdjM1XkbZNF4bK0uJ7TSn5GStb2XwPKczFSR9VpSQeLYgnq1Lmjq6gIwWRcaeNpKDmFV1iuxRBCJtswGuAMJqegS7f5s2PxDyBU3hVAm2vZ5e8CnfWpdBgejGxYWnC4BN9VsX2jZAjR4Flx8cRNgkTCRhvwu7o901XrenUPmxPdbPjef9Z3VzXa47EKmFycWkaDr3TVIBktV0kB7RRuhunAd7whjJnh8xG1ygwlqEuTPoFEWCNUyD4l6ZkuHvv8YCuhttNbepEcAUvy2sKh6Ss42f5Y6Ce4Sv5M3hUnyw0I9clmov2YlOCFU0pOyyfcLJJOYj4UXgsKck5a3SuKKFTEtz1D1GzAQY6zSXNE1hBEg2nt4PUfDURG0Ffjs1dRqr3EnGH

C:\Users\user\Desktop\9e8d7a4ca61bd9

Download File

Process:	C:\Program Files\7-Zip\7zG.exe
File Type:	ASCII text, with very long lines (711), with no line terminators
Category:	dropped
Size (bytes):	711
Entropy (8bit):	5.884115057861494
Encrypted:	false
SSDEEP:	12:o2U0Y1p9NDnuVICa6AndUC2Dv/IGa/AyeeXSaiaAZkz1YC/7jrHjZjRPyg4/mFVF:9nU9NDnuGCa6Anu/zaIys3i1H7jrHjZ/
MD5:	84043513BFF18786D0B41FA8AAADE0E8
SHA1:	8080C1787AEF0E0D1BF7D364D36D3EC6CFDE73CF
SHA-256:	7A9ED61E627A8A823FC837656E059DEEFF62E16BE9302718B89B32E600B913BD
SHA-512:	C377098961B0C34B6818F4264C759372A25AF5DDACBE52B453C1B43F113C57EAF8D954E729D1D08A0E5DB5239EB456078616CA5949D8035C2B6B1383D9C5061F
Malicious:	false
Reputation:	low
Preview:	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

C:\Users\user\Desktop\AGzrsZCX.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	294912
Entropy (8bit):	6.010605469502259
Encrypted:	false
SSDEEP:	6144:f5M1rY+WGzK4NGSAhWj1dVV6cTl06YX6w/xHtRoNF:fuzzAWlvYXDRoNF
MD5:	00574FB20124EAFD40DC945EC86CA59C
SHA1:	8B96C4B6F450E711085AE7B22517C195222ACFDF
SHA-256:	3A0C38E5DC41A8D668EBDD9368CEE89F4991350E6967A9715CAE8F36E0D032BB
SHA-512:	B578007ECDCEC0D7A3A09F7E5D681A724FE2749CB46B58F5D5C96E88CAAC03C4570BB67F47BC45F01B9A47966086CC08DACB691AA2D26AD0262DC1257F7CA837
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d.........." .....x............... ........@.. ....................................@.....................................K.................................................................................... ............... ..H............text....v... ...x.................. ..`.rsrc................z..............@..@.reloc...............~..............@..B.......................H........y...............Z..............................................P...........W...........S...........[...........Q...........Y...........U.......A...]........@..P...........X...........T.......!...\........ ..R...........Z...........V....................`..P...........W...........S...........[...........Q...........Y...........U.......a...]........`..P...........X...........T.......1...\........0..R...........Z...........V....................`..........................

C:\Users\user\Desktop\DFZAeFdW.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	41472
Entropy (8bit):	5.6808219961645605
Encrypted:	false
SSDEEP:	768:IUVSXpIia8xiZ7tRCoz79t6DrMhvUsJAnmboowvDG:IFXRa/Lzugszmboowb
MD5:	6CD78D07F9BD4FECC55CDB392BC5EC89
SHA1:	094DE32070BED60A811D983740509054AD017CE4
SHA-256:	16CC3B734E72A74F578B63D08D81CC75B6C2445FB631EFD19F8A70D786871AD4
SHA-512:	5E25659A66E62F368ACD69790F0CF460008CAA3BB106E45CBA4755896B1872C02438C94E6FB5576891F29B3FEA95D8AAD9BCD7659C179D9619A1CDDB240AEB32
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 8%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d...........!.................... ........@.. ....................................@.................................x...S.................................................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H........s...D...........r............................................................................................................................................................................9..A..%+..................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\ECAIzFsR.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	39936
Entropy (8bit):	5.629584586954759
Encrypted:	false
SSDEEP:	768:tlPaJVGYXkJSMA2we8qlmau55wC1ND5kwcDl+y5X:chQZwalKdEfDld5
MD5:	D478E398EFCD2BD9BDBFEA958F7BEE4F
SHA1:	24CAA06949CDA52DB45F487EC2A8D3DE9C3FC1FC
SHA-256:	32E821193BE1D81BB3BE97F2719D28A0C7DD2E5BD94DC581D79A1497462EAC9B
SHA-512:	0705A42D2EE234D63DBE0A252A2048D85C817D8DF404EBFC12B583BF24AD84E111621727C7CB2369D1A22538354F725AADE067F0BDC4E2EBE2D61D937C130621
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 8%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d...........!................>.... ........@.. ....................................@....................................O.................................................................................... ............... ..H............text...D.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B................ .......H........r..h?..........Lq..8....................................................................................................................................................................M..d..u7 ...jj.................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\EoSiPjjU.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	40448
Entropy (8bit):	5.7028690200758465
Encrypted:	false
SSDEEP:	768:HjeDAXQDM/RgUK+1x85+CnTzP5KJcSdhRGPQPfnay:HjWB2CnTzUJcSdTdP/
MD5:	51B1964F31C557AE8C2B01EA164ABD9F
SHA1:	97C6E8FD1F21D644281FAF82D017969FE22423E4
SHA-256:	AF584F142A9A5A79355B212F8D7A2E3793E33FF23D50FDE591FB2F3E49BF308C
SHA-512:	5D06650D77DD2D574A31664FE9CEAD5E13941F99B2CFA8ECAD972B9E999422816E43A2BE469D9BBDF2778654C22A52656D23B9F230D2F6DF3F2305ABAE779AC3
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L..."..d...........!................n.... ........@.. ....................................@.....................................S.................................................................................... ............... ..H............text...t.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B................P.......H........k..@I...........k...........................................................................................................................................................................B._.@.;..................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\FluqljyP.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	64000
Entropy (8bit):	5.857602289000348
Encrypted:	false
SSDEEP:	768:TDPfhHfT/9IvAgoeA2U7dtZLr6SWB6/BYklKbz4Xgs7RlkUC4M+JVvTkgny:TD3Jbf2UQoBYHfSRRRC4BvPny
MD5:	5EE7E079F998F80293B3467CE6A5B4AE
SHA1:	3C0932D48F3542E9DFB09AD9E1FF70891A038532
SHA-256:	A3AE7E97703E694C479E3B460F89C16B4A511626E351145532D1A2F3BA051779
SHA-512:	056F03CB02A8A994461A5A26C2D738EE39E5AE49462222AD4937DD1CB9F29C6567D2E368EFB7844E8779B3EB3EB5D87DACDE5E3D24DF8227194DDC2E0556FF8D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 17%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d.........." ................N.... ... ....@.. .......................`......E.....@.....................................W.... .......................@....................................................... ............... ..H............text...T.... ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B................0.......H...........\|...................................................................................................................................................................................7.pO`....<o ..F................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\IconCache.db

Download File

Process:	C:\Program Files\7-Zip\7zG.exe
File Type:	data
Category:	dropped
Size (bytes):	62073
Entropy (8bit):	3.831599705146825
Encrypted:	false
SSDEEP:	768:qkKbb92v+DP4xxJ1k1rPN64171q1/1U1j1iotVosaGoxoCU2Is1DIRI+GU+CSebl:cbb92vi4tyQiog
MD5:	A913355DEA68AEC54FF225A52EFF10BA
SHA1:	330FD74D6786682952C4D1E52281B04C9E13CC73
SHA-256:	6E0F5FD7E11F7B9459923667C3A21D16AA3AFE2AC1693FF8E7B9D244A8D9CBE0
SHA-512:	91619AD7B4D43465F660F4FA3E1CE330A7944DB4BDD92D6A8322CA0C39E304D6217BA8C54A013351F67A123B500DBBB071F068A1E47E7BFAE33C28D6BA016AA7
Malicious:	false
Reputation:	low
Preview:	H...Win4....Z).. ... ... ... ...........0...0................................. .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s...d.l.l....... .c.:.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.i.m.a.g.e.r.e.s.

C:\Users\user\Desktop\KgvHsPoI.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	38912
Entropy (8bit):	5.679286635687991
Encrypted:	false
SSDEEP:	768:RH9nQF3DwRvGTYLOFbL79ed5l8UNebCPncg:TyDF0PybCPn
MD5:	9E910782CA3E88B3F87826609A21A54E
SHA1:	8DBC333244620EDA5D3F1C9EAA6B924455262303
SHA-256:	3B311986251EE5A303671108AFBAF43E0255C4CAE1C26CC9600BB0C7D22D3864
SHA-512:	592981359F46BBC577BE99DEFE3E2A17998BA2882AAAA20107841BCA97C2121CB97C45BC6EDBFC3F430D31450457CD855751727922AB4BB1A3C12DA050EEC057
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 8%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d...........!..................... ........@.. ....................................@.................................h...S.................................................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H........k..hC...........j......................................................................................................................................................................`..~...CE.w#'..................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\MRbXzczB.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	85504
Entropy (8bit):	5.8769270258874755
Encrypted:	false
SSDEEP:	1536:p7Oc/sAwP1Q1wUww6vtZNthMx4SJ2ZgjlrL7BzZZmKYT:lOc/sAwP1Q1wUwhHBMx4a2iJjBzZZm9
MD5:	E9CE850DB4350471A62CC24ACB83E859
SHA1:	55CDF06C2CE88BBD94ACDE82F3FEA0D368E7DDC6
SHA-256:	7C95D3B38114E7E4126CB63AADAF80085ED5461AB0868D2365DD6A18C946EA3A
SHA-512:	9F4CBCE086D8A32FDCAEF333C4AE522074E3DF360354822AA537A434EB43FF7D79B5AF91E12FB62D57974B9ED5B4D201DDE2C22848070D920C9B7F5AE909E2CA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d.........." .....F...........e... ........@.. ...............................@....@..................................e..S.................................................................................... ............... ..H............text....E... ...F.................. ..`.rsrc................H..............@..@.reloc...............L..............@..B.................e......H.......p...(j..................................................................................c\|w{.ko.0.g+..v..}.YG.....r....&6?..4...q.1...#..........'.u..,..nZ.R;.)./.S... ..[j.9JLX....CM3.E...P<..Q.@...8....!........_.D..~=d].s`.O."*..F...^...2:.I.$\..b...y..7m..N.lV..ez...x%.......t.K...p>.fH...a5W.........i.......U(......BhA.-..T..R.j.06.8.@......\|.9../..4.CD....T{.2..#=.L..B..N...f(.$.v[.Im..%r..d.h...\.]e..lpHP...^.FW.............X...E..,...?.........k

C:\Users\user\Desktop\MZKqdMaH.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	126976
Entropy (8bit):	6.057993947082715
Encrypted:	false
SSDEEP:	3072:V2IJq7YkHFJwBTZtHrC/0/FHkINvdF+nTCkjk1U+1:V2IJq7YbrFHkIrgnTQ
MD5:	16B480082780CC1D8C23FB05468F64E7
SHA1:	6FDDF86F9F0FBAA189F5CB79E44999A3F1AC2B26
SHA-256:	7A080D8BD178EC02C7F39F7F941479074C450C4FDD8E963C993D2FB5537C7708
SHA-512:	A165BB5D7972DE124F670BCAC20B4A46727B7CF27D1ED925D02F7CC7C79D7D04122D7C202C67D7EAE798348E8D481F085282EB5B89D84B902607D7EB1155BA19
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d.........." ..................... ... ....@.. .......................`......:.....@.....................................O.... .......................@....................................................... ............... ..H............text...$.... ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H...........(...........<...h.........................................................@.......0.................................................................................................................................Y........;~..................................................................#...+...3...;...C...S...c...s...................................................................................................................................................

C:\Users\user\Desktop\OTNGVMDw.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	36352
Entropy (8bit):	5.668291349855899
Encrypted:	false
SSDEEP:	384:3+GMbUL+1FjuuGWkgoCFvMiAAsSZH14gXO9XBKeRg3U7ixu8bqMle9dCe4i2+o06:3+T93kgoCFkid/O9sU7io8b1ocl+o
MD5:	94DA5073CCC14DCF4766DF6781485937
SHA1:	57300CA6033974810B71CF1AB4F047A026924A7A
SHA-256:	B81B9FA9B7017BE34F62D30CB16BAAB33757F04CC94EF4D6459C9D3BC768FD18
SHA-512:	7D539ECED2F19166F0F6FAE6E2624C0440DEC87AA9751FA82387EECEF9945997ABAE58C886494633BA360B122BCA955B3DDAE26E5256E371A0528F48DFA17871
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d...........!..................... ........@.. ....................................@....................................W.................................................................................... ............... ..H............text...$.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H.......pi..T;...........g..x........................................................................................................................................................................XWJ..%.v0................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\OcxYzveC.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	32256
Entropy (8bit):	5.631194486392901
Encrypted:	false
SSDEEP:	384:lP/qZmINM9WPs9Q617EsO2m2g7udB2HEsrW+a4yiym4I16Gl:lP/imaPyQ4T5dsHSt9nQ
MD5:	D8BF2A0481C0A17A634D066A711C12E9
SHA1:	7CC01A58831ED109F85B64FE4920278CEDF3E38D
SHA-256:	2B93377EA087225820A9F8E4F331005A0C600D557242366F06E0C1EAE003D669
SHA-512:	7FB4EB786528AD15DF044F16973ECA05F05F035491E9B1C350D6AA30926AAE438E98F37BE1BB80510310A91BC820BA3EDDAF7759D7D599BCDEBA0C9DF6302F60
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 17%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d...........!.....v..........n.... ........@.. ....................................@.....................................O.................................................................................... ............... ..H............text...tt... ...v.................. ..`.rsrc................x..............@..@.reloc...............\|..............@..B................P.......H........c...1..........._..h....................................................................................................................................................................Q.1k...].~g.v................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\QRoOqMSr.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	342528
Entropy (8bit):	6.170134230759619
Encrypted:	false
SSDEEP:	3072:YMRFbwlz0otnh0efcZBU/fbF+pzZDrpSToDxcLQcm+xCjNS3RaCtXAOZrNM1Ge6q:uhj/zQD9SocLQDchaUXAiNM1C3HuiH
MD5:	9DADB5C8A6FD5020275C31EE6BC61D63
SHA1:	ACE09D19F7DBB98F5C844E77F29A5D86E544CCC1
SHA-256:	80E21E05386AB5BF7BCFD745146700E2A73D808CAFDE3F1DAA256D09BCF4522F
SHA-512:	EDB9F8B4A3742AFD344B3E4957CD6A8574FA82EB49B45E75627180C42B51F9C019E241D695BAF0AAA36EE6959CE297C358BC592F2EE31B0BB5EA19FEED67FC7D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...l..d.........." .....2...........P... ...`....@.. ...................................@.................................LP..O....`............................................................................... ............... ..H............text....0... ...2.................. ..`.rsrc........`.......4..............@..@.reloc...............8..............@..B.................P......H............p..................................................................................................................................................................................GJ2....mj..R...................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\RuntimeBroker.exe

Download File

Process:	C:\Program Files\7-Zip\7zG.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3679232
Entropy (8bit):	7.822356755171379
Encrypted:	false
SSDEEP:	98304:uzTvIytEyW5NKJeYjw8T3aYb84yEBpJjuu0B0KG:M1yK88Tq88yz1uvB0KG
MD5:	B19E0418F436A10BFB7BEBA2008438E9
SHA1:	79CBEE755CF6B7766E7BDC7E224E12B3BAD21EFC
SHA-256:	117C66635CD244BCEF83DB4686F33D97FA463A925E508062A3DDB3F9AD17024D
SHA-512:	22C093E29BC66A91C00594DF7081FEDA1743FF43A54231FD6BBE8AF5BD5770035C99A1B5AF7DD0E63FACFBF51CB99615FA99367C5781E0ABCF353EF37F055A62
Malicious:	true
Yara Hits:	Rule: JoeSecurity_zgRAT_1, Description: Yara detected zgRAT, Source: C:\Users\user\Desktop\RuntimeBroker.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\Desktop\RuntimeBroker.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...u..e..................8.........n;8.. ...@8...@.. ........................8...........@................................. ;8.K....@8.p....................`8...................................................... ............... ..H............text...t.8.. ....8................. ..`.rsrc...p....@8.......8.............@....reloc.......`8......"8.............@..B................P;8.....H.......x...........t... ...`S-..:8......................................0..........(.... ........8........E....q...).......M...8l...(.... ....~f...{....:....& ....8....(.... ....~f...{....9....& ....8....(.... ....~f...{\|...9....& ....8z......0..<....... ........8........E................=...............8....~....9.... ....8....8u... ....~f...{l...9....& ....8....~....(d... .... .... ....s....~....(h....... ....~f...{p...:b...& ....8W...r...ps....z...... ....~f...{....91..

C:\Users\user\Desktop\TYmXMeMn.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	70144
Entropy (8bit):	5.909536568846014
Encrypted:	false
SSDEEP:	1536:3LM14SKtpfLarGzoQWaqaQ2n5YejqSRKnYdYPgh3c//npRwM:w7KtpTjNNn5YejqSRKnYdYPgJo/pRwM
MD5:	E4FA63649F1DBD23DE91861BB39C317D
SHA1:	25F9115FAF40EC6736FACF2288CAA9B0E6AF9366
SHA-256:	CB4CD707305733ADDFCC54A69DF54A0C8D47C312D969B3E8D38B93E18CCBD8E4
SHA-512:	C4B5A9D66146D98D414BC84CD5C09588E2E02B800B21CE3172042AD7F48CC4AED54772D32C891A921FF102C0C3DB1FEAF52E4D4C714ABDB15F73BAEB9A6F5A39
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d.........." .................)... ...@....@.. ..............................8.....@..................................(..S....@.......................`....................................................... ............... ..H............text...4.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................)......H..............................................................................................................................................................................................NC>.$qK...X....J................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\VRBGxbyl.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	34816
Entropy (8bit):	5.636032516496583
Encrypted:	false
SSDEEP:	384:JS7LcTqpkHdmLrBmyOLkOPXVcqTZH0uZLSHtciyBDVGehpx3ZPyp1MoCy07G7:J+CaBoXTZH0mUfoGCzpapaFy07
MD5:	996BD447A16F0A20F238A611484AFE86
SHA1:	CB0F51CE7FEEE1B5F02D3F13E60D67AF448C478D
SHA-256:	0CB182B9F8BD0804FC3BBA016926199C536BD7491BA577E089271DC1A63B07BE
SHA-512:	80924C19FAF3916DB5F71BE5723B6CB7BB7F731DBBA05B8218746F11FB9470F746B7AC581DB398E388377637811319EF8D6841504DC8EA39C510D7CFCD25184C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 17%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...v..d...........!..................... ........@.. ...............................[....@.................................l...O.................................................................................... ............... ..H............text....~... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H........b...;...........a.......................................................................................................................................................................k.X...=.%Cu..................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\XOcOTbNg.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	33280
Entropy (8bit):	5.634433516692816
Encrypted:	false
SSDEEP:	384:TVyNAbQWfDL/QwV/AnmqieB2Ht50uVVxg+94HoxMttjICAQgEYhfAcGQMrygg4Ty:TKWfYwV2u3xg+94HoSbTY4f2gfcab
MD5:	0D323E1CACEA89CAA5DDEAF2F37BCA69
SHA1:	4769C3E947D02A1FD548BE64013F520D571D96E1
SHA-256:	873E7688D95DCAA5468BF94063A94C548EF0D8BE9D4111F1917DA482DBC2A64C
SHA-512:	73F4EDE6D4C62997A4F11AD09A12DFD0BFD749026209E63E52F9D979F9423FDD640E96FA59D51556001C4BE22888E59C67781970649387AF090E26AC40C0C0DE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...k..d...........!.....z............... ........@.. ....................................@.................................h...S.................................................................................... ............... ..H............text....y... ...z.................. ..`.rsrc................\|..............@..@.reloc..............................@..B........................H.......@`..(9..........._......................................................................................................................................................................V.4...W..e..&&................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\ZHrwEXye.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	50176
Entropy (8bit):	5.723168999026349
Encrypted:	false
SSDEEP:	768:7PCvZsxIexhaqgbv8yGk/A/4NPmAQeMeYzlP58gH8zGTCWxttXyZPM:7P4ZsxIelkY/O+DeuzYbM5xXiE
MD5:	2E116FC64103D0F0CF47890FD571561E
SHA1:	3EF08A9B057D1876C24FC76E937CDA461FAC6071
SHA-256:	25EEEA99DCA05BF7651264FA0C07E0E91D89E0DA401C387284E9BE9AFDF79625
SHA-512:	39D09DE00E738B01B6D8D423BA05C61D08E281482C83835F4C88D2F87E6E0536DDC0101872CBD97C30F977BC223DFAE9FCB3DB71DD8078B7EB5B5A4D0D5207A8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 17%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d...........!..................... ........@.. ....................... .......e....@.....................................K.................................................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H............M...................................................................................................................................................................................Xg;.6.'.1. b9g................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\chrome.exe

Download File

Process:	C:\Program Files\7-Zip\7zG.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4608
Entropy (8bit):	3.859718110118878
Encrypted:	false
SSDEEP:	48:6Rm+tqxZ8RxeOAVFJtcV4MKe24iR/8iRLvvqBH3uuliRv+h3RwqXSfbNtm:qlxvjVx96JvkpekKzNt
MD5:	1BE1CE6E2BA8D48D6B7723D1CEE60835
SHA1:	5275AB2168805661320F6B37E166767F3289D178
SHA-256:	E252353FD8A274C9C6FE53DFD4907B652C2A37B052987EFCA9E0A7B53322B46C
SHA-512:	1670327A7511B385E0B0CCA326C69B43D8FF6627D8AAB4E107FC15AF540B0321A267E07018D687285A3FEB1D844573C64D108E096113B6B5182266B7BB6D6559
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...?..f............................n'... ...@....@.. ....................................@..................................'..W....@.......................`....................................................... ............... ..H............text...t.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................P'......H.......(!................................................................(.....0..!.......r...prS..p.{....(....(....&..&......................0..........rW..p(....&..&......................0..K.......s.......}...........s....s....(....~....-........s.........~....s....(......(....*.BSJB............v4.0.30319......l.......#~..@.......#Strings............#US.........#GUID....... ...#Blob...........WU........%3................................................................

C:\Users\user\Desktop\chrome.exe.exe

Download File

Process:	C:\Program Files\7-Zip\7zG.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3679232
Entropy (8bit):	7.822356755171379
Encrypted:	false
SSDEEP:	98304:uzTvIytEyW5NKJeYjw8T3aYb84yEBpJjuu0B0KG:M1yK88Tq88yz1uvB0KG
MD5:	B19E0418F436A10BFB7BEBA2008438E9
SHA1:	79CBEE755CF6B7766E7BDC7E224E12B3BAD21EFC
SHA-256:	117C66635CD244BCEF83DB4686F33D97FA463A925E508062A3DDB3F9AD17024D
SHA-512:	22C093E29BC66A91C00594DF7081FEDA1743FF43A54231FD6BBE8AF5BD5770035C99A1B5AF7DD0E63FACFBF51CB99615FA99367C5781E0ABCF353EF37F055A62
Malicious:	true
Yara Hits:	Rule: JoeSecurity_zgRAT_1, Description: Yara detected zgRAT, Source: C:\Users\user\Desktop\chrome.exe.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\Desktop\chrome.exe.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...u..e..................8.........n;8.. ...@8...@.. ........................8...........@................................. ;8.K....@8.p....................`8...................................................... ............... ..H............text...t.8.. ....8................. ..`.rsrc...p....@8.......8.............@....reloc.......`8......"8.............@..B................P;8.....H.......x...........t... ...`S-..:8......................................0..........(.... ........8........E....q...).......M...8l...(.... ....~f...{....:....& ....8....(.... ....~f...{....9....& ....8....(.... ....~f...{\|...9....& ....8z......0..<....... ........8........E................=...............8....~....9.... ....8....8u... ....~f...{l...9....& ....8....~....(d... .... .... ....s....~....(h....... ....~f...{p...:b...& ....8W...r...ps....z...... ....~f...{....91..

C:\Users\user\Desktop\jqLMoAEM.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	34304
Entropy (8bit):	5.618776214605176
Encrypted:	false
SSDEEP:	768:TBS4lqbgy0+q1nyfBYUyxYIAmghwpgAaaY5:TDY0+q1noBhyufmgCgxa
MD5:	9B25959D6CD6097C0EF36D2496876249
SHA1:	535B4D0576746D88537D4E9B01353210D893F4D2
SHA-256:	4DBA0293B2BA9478EC0738BAD92F0E56CB7CF800B0CA4FDA8261EE2C0C91E217
SHA-512:	C6FA40C2DA5B12683F2785F688984754DF5E11B95170B628F2721A21CD9A6E392672166892B994B8996DC961893A57DAD815C959C6076AB4F91404FEF66141FA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d...........!.....~..........n.... ........@.. ...............................G....@.....................................O.................................................................................... ............... ..H............text...t\|... ...~.................. ..`.rsrc...............................@..@.reloc..............................@..B................P.......H........c...8...........b.......................................................................................................................................................................,....:;.....>..................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\mgBDvwEF.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	69632
Entropy (8bit):	5.932541123129161
Encrypted:	false
SSDEEP:	1536:yo63BdpcSWxaQ/RKd8Skwea/e+hTEqS/ABGegJBb07j:j+9W+p/LEqu6GegG
MD5:	F4B38D0F95B7E844DD288B441EBC9AAF
SHA1:	9CBF5C6E865AE50CEC25D95EF70F3C8C0F2A6CBF
SHA-256:	AAB95596475CA74CEDE5BA50F642D92FA029F6F74F6FAEAE82A9A07285A5FB97
SHA-512:	2300D8FC857986DC9560225DE36C221C6ECB4F98ADB954D896ED6AFF305C3A3C05F5A9F1D5EF0FC9094355D60327DDDFAFC81A455596DCD28020A9A89EF50E1A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 17%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....;.d.........." .................'... ...@....@.. ....................................@.................................\'..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................'......H.......l....^..........t...............................................c\|w{.ko.0.g+..v..}.YG.....r....&6?..4...q.1...#..........'.u..,..nZ.R;.)./.S... ..[j.9JLX....CM3.E...P<..Q.@...8....!........_.D..~=d].s`.O."*..F...^...2:.I.$\..b...y..7m..N.lV..ez...x%.......t.K...p>.fH...a5W.........i.......U(......BhA.-..T..R.j.06.8.@......\|.9../..4.CD....T{.2..#=.L..B..N...f(.$.v[.Im..%r..d.h...\.]e..lpHP...^.FW.............X...E..,...?.........k:..AOg.......s..t".5.

C:\Users\user\Desktop\mqZDgjXC.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	33792
Entropy (8bit):	5.541771649974822
Encrypted:	false
SSDEEP:	768:VA51bYJhOlZVuS6c4UvEEXLeeG+NOInR:VJEx6f2EEbee/Bn
MD5:	2D6975FD1CC3774916D8FF75C449EE7B
SHA1:	0C3A915F80D20BFF0BB4023D86ACAF80AF30F98D
SHA-256:	75CE6EB6CDDD67D47FB7C5782F45FDC497232F87A883650BA98679F92708A986
SHA-512:	6B9792C609E0A3F729AE2F188DE49E66067E3808E5B412E6DC56A555BC95656DA62ECD07D931B05756303A65383B029E7862C04CA5EA879A3FDFB61789BD2580
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 17%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......d...........!.....\|............... ........@.. ....................................@.................................T...W.................................................................................... ............... ..H............text....z... ...\|.................. ..`.rsrc................~..............@..@.reloc..............................@..B........................H.......Tl...............h..h....................................................................................................................................................................aF..g~Z........................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\tRvKutio.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	39936
Entropy (8bit):	5.660491370279985
Encrypted:	false
SSDEEP:	768:1Q8H1q0rErIq3y48wo5iJyNJZ+pkw82VhgwgKZ:brErIqxPJRkw/VOwbZ
MD5:	240E98D38E0B679F055470167D247022
SHA1:	49888CCED719AE78EE3BAE2959402749668AA1C6
SHA-256:	C200E1BE39C35F8E57A0E1E241723FDB956089BC8EAD1235042456C7A3C4AD28
SHA-512:	93C1B6396C65C9EDACEFD6606A9563935D3C1331454DA69FA75D9B1CCE4D102A5F1B27B63FC3A7E485A083D8DAB1E6C4ECD01DD3CFED9B58DA6F4E90CC4F2998
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 8%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...n..d...........!.................... ........@.. ....................................@.....................................K.................................................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc..............................@..B.......................H........q...@.......... q...........................................................................................................................................................................-\|{.3.g...p................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\vCaaBHth.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	46592
Entropy (8bit):	5.870612048031897
Encrypted:	false
SSDEEP:	768:kEXtbvrhKJukN9LCewFI4eYWza7q9GYBAfNhgi2keA1RLaew5trbNM:NhKZEq4hWO7cAfN6DdA1R9w5x
MD5:	3601048DFB8C4A69313A593E74E5A2DE
SHA1:	A36A9842EA2D43D7ED024FFB936B4E9AE6E90338
SHA-256:	F5F1BA9E344B2F2E9CF90978C6D3518DFB55B316489E360874E3A1144BAC3C05
SHA-512:	B619A3D2C5CFADDEC234471FF68F96F19CFBBB5491439C3EE3593E0B2B6F995EBDC208563CC1B04FA383A983540646D02681B0CC039595C1845FE8F7941ABB23
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 5%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...j..d...........!..................... ........@.. ....................... .......h....@.....................................S.................................................................................... ............... ..H............text...$.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H............K...........w.................................................................................................................................................................................$A.................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Desktop\zsRRIDta.log

Download File

Process:	C:\Users\user\Desktop\chrome.exe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	38400
Entropy (8bit):	5.699005826018714
Encrypted:	false
SSDEEP:	768:bvTf5JA7rmkHDkK6/X7rpCA0U4oW+YcSNdb/deQoCDKmc:bTffImkjkK6/QAhaceb/dum
MD5:	87765D141228784AE91334BAE25AD743
SHA1:	442BA48B1B5BB158E2E6145B0592F81D20CB9C57
SHA-256:	9A121719F71383CF66FC36453679B36C8D24CC61EB335D0C304536E5D72AAAEB
SHA-512:	77FF7244F4E181A1F2B69A8814E1EFC0B7B55CD551B8D22F5A08039156295F6417D0E2E58265F1C07F8EA2BA3B24D9810B4B3E91B13943688C7450F736746657
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...c..d...........!..................... ........@.. ....................................@....................................O.................................................................................... ............... ..H............text...$.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H.......Dm...?..........<l......................................................................................................................................................................Q[..u.......;..................................................................#...+...3...;...C...S...c...s...................................................................................................................................................................................

C:\Users\user\Downloads\89938b36-9e02-41fe-8154-715d5a6d60a8.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=AES Encrypted
Category:	dropped
Size (bytes):	6519411
Entropy (8bit):	7.999969838062223
Encrypted:	true
SSDEEP:	196608:jJwneKx4eBW60ir6uQjQ/vFUFggi6MgaQueu:sHxpWfo6uNXCdi6MDQueu
MD5:	28EC03CD428C58A975131517E6C50927
SHA1:	CC35293D424773209B72F497B90907BB7E81D71E
SHA-256:	E626678A115D837A25E05D7220682C60D55A292645AA00CEB2459F207B95BE2A
SHA-512:	37F31CA6D2B2E676986BEC1DAE35F976E6216B9A2C725BB11F2BE579B6DC31A471B4DA928D3075DB20FF7A51116A693D9C00B169A8CE577FFF8BDF5E56833AEA
Malicious:	false
Reputation:	low
Preview:	PK......c.(P.X. \|l/.1..$8.....chrome.exe.exe......AE...;Z3.......{...D"kI...+.NJ._C..$.Xn.......G../..Qet.B.n[C6I^........A..\....X..F....H..o.J.J.8.Lt&e..I........Hp..48...McZ.D=.H..#....@._h(...vvNP.i.\.....Z.J...f..qwk.=.1...w~"..HnV=...`..t....U...y..9%L....&W.9b......-q.R.E..>[..Z.+.N:..ph..Fqv,0~.=R ..P...U.....B..>w.@......."OG....m".@3.n.f..3p!.7.'.)\|..~0.$.u..t._........\9..e^ ...;..K.........Vh.^.~A..W.VE_?q...".yd....P...mH....#B..r......-..m.wG:.E....m.....b)U......5.. .].y.......Ma.)..b... -..\.a..b..D.0Dl...c.......4....?.o.........~%..Q.#.MV..r....z,..=......,"7.a.p.i....=O\Mb..+..7.].k.TS...v.nk..}.g!...2Z..T..F.mm0f.,...p.nQ.m1.$..d....Kc0..k.x0O.E.}.....M..h.2.2........#...f.2..:..kg...m%^....".A8../2u.i.].$.'.?.....V..qg...]F.i..O...F.... ...tz....d..B.g`.....2..S......P..Y.....i..~N....(....?&zJ..28....Z$r)..gH..VYr..G.fq.....'X^9.f.\..5%.**.z..L.M...v.$.`.amy.:..MN.P.;.Y.{b.a.N....Z...fC.V.....>.l?2...

C:\Users\user\Downloads\Local.zip (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=AES Encrypted
Category:	dropped
Size (bytes):	6519411
Entropy (8bit):	7.999969838062223
Encrypted:	true
SSDEEP:	196608:jJwneKx4eBW60ir6uQjQ/vFUFggi6MgaQueu:sHxpWfo6uNXCdi6MDQueu
MD5:	28EC03CD428C58A975131517E6C50927
SHA1:	CC35293D424773209B72F497B90907BB7E81D71E
SHA-256:	E626678A115D837A25E05D7220682C60D55A292645AA00CEB2459F207B95BE2A
SHA-512:	37F31CA6D2B2E676986BEC1DAE35F976E6216B9A2C725BB11F2BE579B6DC31A471B4DA928D3075DB20FF7A51116A693D9C00B169A8CE577FFF8BDF5E56833AEA
Malicious:	true
Reputation:	low
Preview:	PK......c.(P.X. \|l/.1..$8.....chrome.exe.exe......AE...;Z3.......{...D"kI...+.NJ._C..$.Xn.......G../..Qet.B.n[C6I^........A..\....X..F....H..o.J.J.8.Lt&e..I........Hp..48...McZ.D=.H..#....@._h(...vvNP.i.\.....Z.J...f..qwk.=.1...w~"..HnV=...`..t....U...y..9%L....&W.9b......-q.R.E..>[..Z.+.N:..ph..Fqv,0~.=R ..P...U.....B..>w.@......."OG....m".@3.n.f..3p!.7.'.)\|..~0.$.u..t._........\9..e^ ...;..K.........Vh.^.~A..W.VE_?q...".yd....P...mH....#B..r......-..m.wG:.E....m.....b)U......5.. .].y.......Ma.)..b... -..\.a..b..D.0Dl...c.......4....?.o.........~%..Q.#.MV..r....z,..=......,"7.a.p.i....=O\Mb..+..7.].k.TS...v.nk..}.g!...2Z..T..F.mm0f.,...p.nQ.m1.$..d....Kc0..k.x0O.E.}.....M..h.2.2........#...f.2..:..kg...m%^....".A8../2u.i.].$.'.?.....V..qg...]F.i..O...F.... ...tz....d..B.g`.....2..S......P..Y.....i..~N....(....?&zJ..28....Z$r)..gH..VYr..G.fq.....'X^9.f.\..5%.**.z..L.M...v.$.`.amy.:..MN.P.;.Y.{b.a.N....Z...fC.V.....>.l?2...

C:\Users\user\Downloads\Local.zip.crdownload (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=AES Encrypted
Category:	dropped
Size (bytes):	6519411
Entropy (8bit):	7.999969838062223
Encrypted:	true
SSDEEP:	196608:jJwneKx4eBW60ir6uQjQ/vFUFggi6MgaQueu:sHxpWfo6uNXCdi6MDQueu
MD5:	28EC03CD428C58A975131517E6C50927
SHA1:	CC35293D424773209B72F497B90907BB7E81D71E
SHA-256:	E626678A115D837A25E05D7220682C60D55A292645AA00CEB2459F207B95BE2A
SHA-512:	37F31CA6D2B2E676986BEC1DAE35F976E6216B9A2C725BB11F2BE579B6DC31A471B4DA928D3075DB20FF7A51116A693D9C00B169A8CE577FFF8BDF5E56833AEA
Malicious:	true
Reputation:	low
Preview:	PK......c.(P.X. \|l/.1..$8.....chrome.exe.exe......AE...;Z3.......{...D"kI...+.NJ._C..$.Xn.......G../..Qet.B.n[C6I^........A..\....X..F....H..o.J.J.8.Lt&e..I........Hp..48...McZ.D=.H..#....@._h(...vvNP.i.\.....Z.J...f..qwk.=.1...w~"..HnV=...`..t....U...y..9%L....&W.9b......-q.R.E..>[..Z.+.N:..ph..Fqv,0~.=R ..P...U.....B..>w.@......."OG....m".@3.n.f..3p!.7.'.)\|..~0.$.u..t._........\9..e^ ...;..K.........Vh.^.~A..W.VE_?q...".yd....P...mH....#B..r......-..m.wG:.E....m.....b)U......5.. .].y.......Ma.)..b... -..\.a..b..D.0Dl...c.......4....?.o.........~%..Q.#.MV..r....z,..=......,"7.a.p.i....=O\Mb..+..7.].k.TS...v.nk..}.g!...2Z..T..F.mm0f.,...p.nQ.m1.$..d....Kc0..k.x0O.E.}.....M..h.2.2........#...f.2..:..kg...m%^....".A8../2u.i.].$.'.?.....V..qg...]F.i..O...F.... ...tz....d..B.g`.....2..S......P..Y.....i..~N....(....?&zJ..28....Z$r)..gH..VYr..G.fq.....'X^9.f.\..5%.**.z..L.M...v.$.`.amy.:..MN.P.;.Y.{b.a.N....Z...fC.V.....>.l?2...

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 184076, version 2.983
Category:	downloaded
Size (bytes):	184076
Entropy (8bit):	7.989270025983529
Encrypted:	false
SSDEEP:	3072:n/i8XilDQ8+jMiJpkOaE5tOMeawFlPgalLuAmKjLcSPwXUWFwZRqfs5Mi805Hx58:/iyUj+jMiJO1EzOMeawsAL9JLDPwXUWj
MD5:	8B4F872C5DE19974857328D06D3FE48F
SHA1:	32092EFBD7938AF900E99D63CF25DB246C6BFF26
SHA-256:	30F77A5FF0BCBA46D4E760B0C939A5FF112DA0D3DDD13A261834134E00CC21C7
SHA-512:	C7B87B142CEF8E1B31E5561593DB2AC5ECA2C578A724204464E9EDE977C8107F3D6748E9B52D072AFF04EEF07B232B8F19286AA2267BC325C57926DB1A2A3E9D
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/fonts/Lato-Semibold.woff2?v=7194963095272d0e
Preview:	wOF2.............._p..............................8..f.`..$..f........l..q.6.$..<......@.. ......o..9[.......+C..Er.JG...9...2.).S..\`N...!.!C....f...8.].O6A...Y.`.S.(%...5.cT..C....@...{.@..&.......#"..........................................................................3g.fv/...@M.:...7..!..p.... $...q...E...x.u].$.%S..);'7...b>..".....z..B...T..b..%^8.}.K#6.5$.$e....W........UQ..n..k.....dI.!..j...S1.n#.-1.m.k....^{..V(.(....U...x5...Z.ZC..+E.0.pC"..X[A.Xg..w.........>.Y...A..b.T..+5VX....@.Y..Ad.E...TI..]..........t..dd....e..;.q9.R.e>....v3q.(....2.=.NH.#&&...!3..O..d.uMTd,M..<>...B.....$$Hx~F.......<Tc.2....D..4...\+.e..;H92...F..4.U..h...nJ..h.. .0........R...Z5"....I.Qk.....d1.\..;.ZhP........A1....a../+........(..).p.X....t........#!.d\|@iq.....bN.aS.).k..s ..h......A....<l...P....Q.-..c.bK.q}4..Ei..r...XdX..i."... .6".....7uf..o.b."..:.....`:.J.m...S.5S........pH..].v_..)$U%...x.rJ....jA....L........ 36P.u...c9."0 ..Q1.B.Y

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10479
Entropy (8bit):	4.800568278529105
Encrypted:	false
SSDEEP:	192:lnNZIkugZ5/5WTdnj1DlOqQxu33CYu8I//Y//dluMX3Lb7/H8/HCn3r47Zf331Is:NNZIrgZ5/wdnj1BOqmu3yYu8I/Q/Vlu7
MD5:	DED8344B891B7109CEEB7074F30385EA
SHA1:	ADE46370BE55CAD024A3538204944B3F3BFF7138
SHA-256:	077437BA5398F2997EFEA39E55F89EADD473667177ABA0B14A48C8B57C60AF43
SHA-512:	C3306140EEF7B0EA5681B7604C8640E19D7E1FE987C80230674ECC63AFCDD9C84953CE7BCC3B606CBCB2B09626DAE1C5C473AD25F729390B4D9856A8F375247D
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/css/bottom-pages-animations.css-postbuild_077437ba5398f2997efea39e55f89eadd473667177aba0b14a48c8b57c60af43.css
Preview:	.@media only screen and (min-width:783px){..anim.img1,.anim.img-wrap:after,.anim.img-wrap:before,.bottom-page.anim,.startpage.top-notice,.top-to-bott.anim{..opacity:0;..-webkit-transition:all .2s ease-in-out;..transition:all .2s ease-in-out;..-webkit-transition-timing-function:ease-in-out;..transition-timing-function:ease-in-out.}..start-animation .anim.img1,.start-animation .anim.img-wrap:after,.start-animation .anim.img-wrap:before,.start-animation .startpage.top-notice,.top-to-bott.anim{..opacity:0.}..start-animation .anim.i2,.start-animation .anim.img-wrap:after,.start-animation .anim.img-wrap:before{..-webkit-animation-delay:.5s;..animation-delay:.5s;..-webkit-animation-duration:.5s;..animation-duration:.5s;..-webkit-animation-fill-mode:forwards;..animation-fill-mode:forwards;..-webkit-animation-name:top-fade-in;..animation-name:top-fade-in.}..top-to-bott.anim{..-webkit-animation-duration:.15s;..animation-duration:.15s;..-webkit-animation-fill-mode:forwards;..animation-fill-mode:f

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	185560
Entropy (8bit):	5.000306907999683
Encrypted:	false
SSDEEP:	1536:q+mStoTJGG+bS5UC9GuErSLEHQ2w2+ej+8o+e3+vYv/9It4ErJ/E5C+e3+vOS8Si:xru3LdC44/a75WSw5jr
MD5:	68D7C1B6A69AAD14E5199BAB17E15988
SHA1:	4129C88DA9DCB37B5ADC9FCEC24D98BDCF974258
SHA-256:	A425B63EDABF8127DBD4F262AF84E5F7DA22F836F492D3ABBF1ED4F88CDE3B19
SHA-512:	66931CC64581EF58DD638AA7154687AB76E74379BDC1CB8D84BB07C3E1F5D07C7CEB994BD177418D2D8AC19B2927B88E8AEEE35836A95C8D052544452B1E1CED
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.91766118ff060851.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg width="160" height="160" viewBox="0 0 176 176" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><view id="icon-accounts" viewBox="0 0 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><defs><path id="aaa" d="M0 0h16v16H0z"/><path d="M8 2a6 6 0 1 0 0 12A6 6 0 0 0 8 2Z" id="aac"/></defs><g fill="none" fill-rule="evenodd"><mask id="aab" fill="#fff"><use xlink:href="#aaa"/></mask><g mask="url(#aab)"><path d="M8 1.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13Z" fill="#FFCC80" fill-rule="nonzero"/><path d="M8 1.5a6.5 6.5 0 1 1 0 13 6.5 6.5 0 0 1 0-13ZM8 2a6 6 0 1 0 0 12A6 6 0 0 0 8 2Z" fill="#FFB020" fill-rule="nonzero"/><mask id="aad" fill="#fff"><use xlink:href="#aac"/></mask><path d="M10.25 7a2.25 2.25 0 1 1-4.5 0 2.25 2.25 0 0 1 4.5 0M8 18a4 4 0 1 0 0-8 4 4 0 0 0 0 8Z" fill="#FFF" mask="url(#aad)"/><path d="M8 9.75a4.25 4.25 0 1 1 0 8.5 4.25 4.25 0 0 1 0-8.5Zm0 .5a3.75 3.75 0 1 0 0

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	185560
Entropy (8bit):	5.000306907999683
Encrypted:	false
SSDEEP:	1536:q+mStoTJGG+bS5UC9GuErSLEHQ2w2+ej+8o+e3+vYv/9It4ErJ/E5C+e3+vOS8Si:xru3LdC44/a75WSw5jr
MD5:	68D7C1B6A69AAD14E5199BAB17E15988
SHA1:	4129C88DA9DCB37B5ADC9FCEC24D98BDCF974258
SHA-256:	A425B63EDABF8127DBD4F262AF84E5F7DA22F836F492D3ABBF1ED4F88CDE3B19
SHA-512:	66931CC64581EF58DD638AA7154687AB76E74379BDC1CB8D84BB07C3E1F5D07C7CEB994BD177418D2D8AC19B2927B88E8AEEE35836A95C8D052544452B1E1CED
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg width="160" height="160" viewBox="0 0 176 176" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><view id="icon-accounts" viewBox="0 0 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><defs><path id="aaa" d="M0 0h16v16H0z"/><path d="M8 2a6 6 0 1 0 0 12A6 6 0 0 0 8 2Z" id="aac"/></defs><g fill="none" fill-rule="evenodd"><mask id="aab" fill="#fff"><use xlink:href="#aaa"/></mask><g mask="url(#aab)"><path d="M8 1.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13Z" fill="#FFCC80" fill-rule="nonzero"/><path d="M8 1.5a6.5 6.5 0 1 1 0 13 6.5 6.5 0 0 1 0-13ZM8 2a6 6 0 1 0 0 12A6 6 0 0 0 8 2Z" fill="#FFB020" fill-rule="nonzero"/><mask id="aad" fill="#fff"><use xlink:href="#aac"/></mask><path d="M10.25 7a2.25 2.25 0 1 1-4.5 0 2.25 2.25 0 0 1 4.5 0M8 18a4 4 0 1 0 0-8 4 4 0 0 0 0 8Z" fill="#FFF" mask="url(#aad)"/><path d="M8 9.75a4.25 4.25 0 1 1 0 8.5 4.25 4.25 0 0 1 0-8.5Zm0 .5a3.75 3.75 0 1 0 0

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	6518
Entropy (8bit):	4.789786856591123
Encrypted:	false
SSDEEP:	96:EaLq5FfE6rwDDDIDDgDDDDD+CxyVqqqqqq0qqqqqq:Jq5hEtDDDIDDgDDDDD
MD5:	72F13FA5F987EA923A68A818D38FB540
SHA1:	F014620D35787FCFDEF193C20BB383F5655B9E1E
SHA-256:	37127C1A29C164CDAA75EC72AE685094C2468FE0577F743CB1F307D23DD35EC1
SHA-512:	B66AF0B6B95560C20584ED033547235D5188981A092131A7C1749926BA1AC208266193BD7FA8A3403A39EEE23FCDD53580E9533803D7F52DF5FB01D508E292B3
Malicious:	false
Reputation:	low
Preview:	............ .(...&... .... .(...N...(....... ..... ......................................................................................................................................................................T...................................S.......................S...........................................S...........................................................................................}y..................}y..........................................~...................~.................................................................................................................................................................................................................................................................................................................................................................S...........................................S........ ... ... ... ..S ... ... ... ... ... ... ... ... ..S ... ... ...!...!...!...!...!...!...!.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	68811
Entropy (8bit):	4.833256971201498
Encrypted:	false
SSDEEP:	1536:TBzoP6z4UA5sXHeSe27qATH3UP+CMEsJXKI:qP6zlA5slUVP21
MD5:	770B69C3DF131F0EBC4B0CE308D1EF33
SHA1:	67F2E3F1036B6BA9CF541175C98C7503A308A517
SHA-256:	A5169BC493A31B5513E7FB9357BB189E053F76A9C7D4A45232C145554BBEB075
SHA-512:	E0D5A259401D3EB73A344941DE3CF61D809A498743F3C687A0ABA50AA3FE1489B55E88C76AA756404999F0EB9F4B9DE22CB00DC4DD34DBC310A3F329392108D3
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/imagery/sprites-fm-illustration-sprite-wide.e397e234dc118de4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="4000" height="500"><style><![CDATA[.B{fill:#fff}.C{fill-rule:nonzero}.D{fill:#00c0a6}.E{fill-opacity:.2}.F{fill:#000}.G{mask:url(#BJ)}.H{fill:#f4d1c6}.I{fill:#f1c9bd}.J{fill:#e6e9ed}.K{mask:url(#BX)}.L{fill:#53565b}.M{fill:#ad6e53}.N{fill:#46b4e5}.O{fill:#ed5564}.P{fill:#fafafa}.Q{mask:url(#BN)}.R{fill:#ffa837}.S{fill:#00b69a}.T{mask:url(#Ar)}.U{mask:url(#As)}.V{fill-opacity:.9}.W{fill:#54bbff}.X{fill:#e1e4e9}.Y{fill:#732400}.Z{fill:#661d00}.a{fill:#e0895a}.b{fill:#da7c4e}.c{fill:#00a889}.d{mask:url(#BG)}.e{fill:#00b194}.f{mask:url(#BM)}.g{mask:url(#Be)}.h{fill:#ffb400}.i{fill:#aac8d6}.j{fill:#072545}.k{fill:#398d03}.l{fill:#3c3d3f}.m{stroke-width:2.273} </style><defs><path id="A" d="M28.182 72.631h16.364V41.762H28.182z"/><path d="M58.182 25.42c0 14.123-13.505 26.329-21.818 26.329-8.276 0-21.818-12.206-21.818-26.329v-1.816L20 15.433s8.303 1.816 16.364 1.816c8.095 0 15.455-1.816 15.455-1.816l6.36

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65952, version 1.0
Category:	downloaded
Size (bytes):	65952
Entropy (8bit):	7.996003446791938
Encrypted:	true
SSDEEP:	1536:hFFoNBOCocf/p28T3+D0DZyTgkb0vwex9jkC05H:PCN1tJR4ywePl05H
MD5:	FE59849706D9DDBC38D1C8D7A7D06FA5
SHA1:	F43C536B8D8A37BA1D80190035C108733026B608
SHA-256:	0E06B42B1DDBE7B83D3CA23591DA926C19EDF3815AD9B98B23C7E1F19523905A
SHA-512:	75A5D9BEBDA77A07027FE19429B052386573C2141462194A4642B2428EDDE1F184439A90A2070D55D999E260366E77F2790A869B581BACD123E27C83C911AD88
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/imagery/sprites-fm-mono.a67d0fb90e10bdab.woff2?h=dd3b1ae3a
Preview:	wOF2..............E....O.........................T.`..^...H..e.6.$..D..$.. .....^[..qd..a.v..;_4..v.G..)D.=Su..8../m....vR.C..).&..W.. ...R[...hc....t.-....#..l[.$F.+....=.7..E.4.=].N4..d.x...p.EP.].'.l..^.d"..L(..J........^.....B...W.g..N.N.n..~.M..sP...G.W..T....`.6....g...5......::..e...\|..)(..B#.BE....F(....."[d.X....&)1.{.......k..E4u....w.ES.D...&. .e`.5E.....cN..c..n..o:.[K.\.~,..{.oR...[.'.!.B`...]mk.> .(.96.....Q( .M.~.l..[..fN.y>.{y.>MM.>)....@.="...."....0?...;...O..x..@..T...l.w$F../J.......4.e.;k.Y.o......J4df.d..(T"..klZ..Ij.......A..... .0.....K...}.....C7'N..(h.)N...X.T..3@....g%u.J....l9..(I...#.f...s.+...'.mmy.a.a....t/...s}.gB....{y`....no@..F...dH...;#.&.....qE.......X.J..O. .L~..5..nW.H`.J.h...$.../.?.S.jw.6.P...R.!..x8.}............9.5.;..f..;.....@;...2....Y...H.Ci..X.! ..P[C..;mSJ.......{.N.k...>U.b..y.i0.bS3.....'..=..a....,...G...}J....a+.-....2\....c..#..j....x.....5..c.[..II .@...J....FP.....:......#xaBH..@^#..w..69.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	8787
Entropy (8bit):	7.532028713005772
Encrypted:	false
SSDEEP:	192:QQ9CzWgjVU7tlCZR7WzmvEIOT7XJ+rgRNn:X9CzWgj+5loFo7ygL
MD5:	3F788625BBC4F87885B982ED70876DCB
SHA1:	D4155B22D2E63B149B42E238AB5C2788199A2F99
SHA-256:	741F05BCA4428E5880A44222F68A2F50172860F43B09ABB57E3DC12D3CE5766D
SHA-512:	80FCE5A6FE9AFCEBC834B8F324BBABB368AAF5BD4CB4753CD4B675B18D657A988F91806119844AB68AB58FFDC25B2F27E6F8728487E6CCDFEA82FA6F0115CCD8
Malicious:	false
Reputation:	low
Preview:	GIF89a . ..........T..z...............p..^.................X..P........N.......j........v..f.................b.....D....J.@.0.,.&.6.:..............."...............................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH....K.Al:..."t:.JV..( lF........t:\|-C3..z.>....F.Z?....wE...."....P.......P........P......N.......O.......M....v.M......M......D.....C.................................................Cc.....0H@...Z,0H.....P`.xXF...."..`...V.`.".....@.Ca....2t.`.D.D.,5.AT...!A.....I......r....n..@...?Y....+N...<.....O&.,p.`...,....!.......,.... . ....@.pH..0.J..x @...@hB...t.M.B.C#.......O...f...7.;.yh..evw%.{T....r".........B.........`.......`........`....P.S......_.......S.....R.....Q...m.D.....C....................B............X`O.>..=........I..B..z.q`.0.....Y.q1......2..%..b.T.a...X...cF.BP.d..`...:a..........E..'.K(HH"*.E..+j.\..e(...Z8.S....L.@.vE.=A..!.......,.... . ....@.pH.p0.FH.x ...t:\`...&4.....bA..(..F

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550)
Category:	dropped
Size (bytes):	240597
Entropy (8bit):	4.952388946188964
Encrypted:	false
SSDEEP:	1536:+E/Qm+uSxiLBRFXP/IH5MVAGo81vAV8H4hAeFgm3XYvWcTV//5SoFmi:T+uSxiLBRxPk5MVTvAe4i
MD5:	5866EDF650716B108FBD1FDF282E0EF4
SHA1:	902D9067F4C2FBAC5B42EC55D1DDFB1D6F5E5D79
SHA-256:	0E8588A249D6083898D049DFB2A913376C3F0434EFE856BBFD93C62E6F82F42D
SHA-512:	AC1B814E41CAD321DF313844EA6845BC324FB09218B90976CA124A4092D169A05D90EE9DE03DB49E0CA45BC1C8C439450D6E6A2F0FB5551C51A668D609C6375E
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * css/codemirror.css. * css/txteditor.css. * css/vars/theme.css. * css/switches.css. * css/sprites/fm-uni@uni.css. * css/sprites/fm-mime@uni.css. * css/sprites/fm-mime-90@uni.css. * css/sprites/fm-mono@mono.css. * css/sprites/fm-theme@dark.css. * css/sprites/fm-theme@light.css. * css/sprites/fm-illustrations.css. * css/mega-dialog.css. * css/vars/dialog.css. * css/vars/button.css. * css/radios.css. * css/mega-button.css. * css/checkboxes.css. * css/media-viewer.css. * css/video-player.css. * css/perfect-scrollbar.css. * css/animations.css. */...CodeMirror{..background-color:var(--stroke-main);..box-sizing:border-box;..color:var(--text-color-high);..direction:ltr;..font:var(--text-code1);..height:100%.}..CodeMirror-lines{..padding:4px 0.}..CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{..padding:0 14px.}..CodeMirror-gutters{..background-color:var(--stroke-main);..white-space:nowrap.}..CodeMirror-linenumb

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	752243
Entropy (8bit):	7.999762477132077
Encrypted:	true
SSDEEP:	12288:JyqEoWj9X3Lq5Soo9c8u2fM81MskyueC5hmwBLUvIp79EfU9BCFX:U5jRX3LgSX9lfM2LemMwvIpRVc
MD5:	9CC62BCA3A3C9F70352778EFAF4CE32C
SHA1:	9CC49F9095743239BC15E9A32B05B175E7B21662
SHA-256:	C851E198F07FA1BC0D71A962AD19551F640D1117F073A1075AF5A3E1207948CE
SHA-512:	A3AD49F8823BD2FC0C5CD4DC939F33C883170A2D384CB39C697146FB147E25D1EB1A6E700CAF4DC19B98A371CBE4DD56F5899FF6C03C310FB267ABACF28E9221
Malicious:	false
Reputation:	low
Preview:	.N..A.XBuAd..=..N.z..............!...."H }.........q".X9?3...\|..M5.....Z.7r.q6@.:......DK.i...&..Sh6.%,.V..........a.c!.9.......,{........r..i..E.....+..[...\|.YV./."..s7./.<.(....4...3._g......;).f.h..F..j...H..).1-C..a..4...x..l......i.v..%...}.j....2{..O...Z....7..J4..Wo?.C.B...dc2.;4..%...+..~..q..A.NZ.D/I.P#.....w.].8.a....lh(\.n.}.e..`.7..Z......%.Qk..3.q....8.bPO:...).pt.9..>y.gM......R.,...p~...........D'.C.lx.A....^3...\_...N...Wy..W..ck.l...f.!..eNm(@..[+.n-,..Z.....[[B....M..n.0`..L..CV?...q6.u.....jN.J6.....~<..dm4.Q.B=..R..B.7E$2v....!.,..+....(9.c.Z&wL.....K....KL......H.....G...r.q/.G.:...P._&....0...d[.X.1.G.L....\.4k..T'(5K.2=..R..B.Ozq...o>...V.@.d0!.....c...(.`.~...U4V.f.n..v........op......v.P...y./..\.df...'Y.0..pj.j..........U.$.:..3.:..hAe..........bL.T....j.p.......hc:.F..._6..u".-..X5....7+..`8uN`8....{...A{ly.c......Q.de...y..,<x^......#.6.._..].!K.A.........w)M...P...\|....0>iId.%...)5....@.qc.\| ..Q.l.~?.Wr..*....

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 90132, version 2.655
Category:	downloaded
Size (bytes):	90132
Entropy (8bit):	7.997485616617977
Encrypted:	true
SSDEEP:	1536:/rfP9tchGTkgdTU1GvCOsDeEJxefg7vtz0Nlm63XnMBya1VBVbmV9kgOrU9mo6bN:zfP9tchGAMU1lXnLil33cBLVBVbm68Up
MD5:	94676E314A869CEA8B70FC6698CB2C48
SHA1:	C681F9EA637011A45FA30E4750098DEE378880D5
SHA-256:	92090A2FC2EE13F67411A5E5778E3265E7401163C87BEFFA8E0392CCC765A8E8
SHA-512:	59BBFE9127E937271E5AC8443681DD48C7BFA882BDBFE3E340EA145EE8B6852D9A612D67F51252985FB0E11B37CAFB42EB3A7E33B39C3AF9AECDCE3C5BD98E37
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e
Preview:	wOF2......`.......V..._..........................P?FFTM...\|......R.`..&...s.....H....6.$..j..p.. ..1.....V?webf.[...I..1.k..u.1..hA....$.../~M..=.....K.j...\..'Am.?T.......qD.}Dd...............$.....`rb..Jb.e.b$. ...r....I....RL..r....P.eIp.l.U(.R..d-j.......c...[U_...8.c..LI...g$.(d ..].r...4.V.eA..VT...&\..mmW...!!q;...q6O..!$EO{....../B.Y.R(g.b........3.6l.c)..k../..........GX...o.......{.F}pL....y~.j.....4=;...~....(.E"Q....IW.Y.g..a7i.J.I^.F{.27..`....B..^."c.2....T..jt..{...!l'..{Xp..oX......i.[.C...3.,..:vJ......U[.......zj#.-,.....<F....j....O..;Z=....i...g(F.]PB.T....&.I........>.SW.k.J.....`....T.j.l.[.H(A...9z.....t.X.T......}..o.#..B.y0....2..z.PF..A!o.1.-b...2.HV.a>Do..U....>2K,..]`...W9.m...............u..<..+\..R.e...-.uz.tJ.8a.[.*....Z7...N{M...7......@....w..j-..,..$.K].+,fSv..j.D...`A....v8S..G.5..[F.D.\n.Do.6..U...P..t........2?...~.'..4...)I.I...`Z.....>.'.'.k.E... ...0...U3.'..E.%.Y.>@.(.....<~./.T..J}..}.zu....[.k..9'........

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	469622
Entropy (8bit):	4.363270155404902
Encrypted:	false
SSDEEP:	6144:MCZCJklXooyWPeDOJ5pKfqyiNfXceakCzcE:MCZCJkVCqyiNfXcbkm
MD5:	F3A0A98A608FB462C90C94994A82B09C
SHA1:	97B0F00170D543CB32AF85E2ECC80E27C7351273
SHA-256:	07B863D3EF47C1F5A009EF1828DEC72DA158A5AC5F7003A9E6E04A9015720712
SHA-512:	DCAEBB87E5D38F28C6CAFE9E784CAF0CA54F41577E65E6C67F5707E36BDD9B084A7945B550D58AA12817C14CC5812576289BF17D62333AB3DB60F7891A28C219
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/fm/account.js. * js/fm/account-change-password.js. * js/fm/account-change-email.js. * js/fm/dialogs.js. * js/ui/dropdowns.js. * js/ui/node-filter.js. * js/ui/info-panel.js. * js/notify.js. * js/vendor/avatar.js. */..function accountUI() {.. "use strict";.. // Prevent ephemeral session to access account settings via url. if (u_type === 0) {. msgDialog('confirmation', l[998], l[17146]. + ' ' + l[999], l[1000], function(e) {. if (e) {. loadSubPage('register');. return false;. }. loadSubPage('fm');. });.. return false;. }.. var $fmContainer = $('.fm-main', '.fmholder');. var $settingsMenu = $('.content-panel.account', $fmContainer);.. accountUI.$contentBlock = $('.fm-right-account-block', $fmContainer);.. $('.fm-account-notifications', accountUI.$contentBlock).removeClass('hidden');. $('.settings-button', $settingsMenu).remove

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	745464
Entropy (8bit):	4.938087252313875
Encrypted:	false
SSDEEP:	6144:7CLIkQLna8VELNKSAiPQoXgCVfDhHPQne7Z0aJ0hGputY8qBx1RjeJ:9kQbM90Gp6JqBw
MD5:	95FA5EAF9DC4321C9F2686B871613602
SHA1:	03FC1BE495C9044F352919B5B25CC5C70C046CF7
SHA-256:	682231E1AD6EE170C226CB45A530CA090C6267EC93DFF7CB2A70101D9BE0BAC8
SHA-512:	B963B6B891672C284283C5CF6FB036525D4945749AF5568032949B3EDBE4ADD4FF7DE92E6343007A9F0036AFDD1DAB28B525B995F9AD8251DAE682D11D112DC0
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/html/templates_682231e1ad6ee170c226cb45a530ca090c6267ec93dff7cb2a70101d9be0bac8.json
Preview:	{"transferwidget":"<div class=\"widget-block hidden\"> <div class=\"widget-circle percents-0\"> <div class=\"widget-arrows\"> <div class=\"widget-tooltip\"> <div class=\"widget-icon uploading hidden\"> <span class=\"widget-txt\">[$1155]</span> <span class=\"widget-speed-block ulspeed\"> [$23062.k] </span> </div> <div class=\"widget-icon downloading hidden\"> <span class=\"widget-txt\">[$1156]</span> <span class=\"widget-speed-block dlspeed\"> [$23062.k] </span> </div> </div> <div class=\"widget-arrow\"></div> </div> </div> </div>","top":"<section class=\"topbar top-head js-topbar\"> <div class=\"logo-wrapper\"> <div class=\"logo-full sprite-fm-illustration-wide mega-logo-dark\"></div> <a class=\"logo\"> <i class=\"sprite-fm-uni icon-mega-logo\"></i> </a> <div class=\"top-business-title\"> <span class=\"rtl-block-if-rtl\">[$19530]</span> </div> <button class=\"mega-button individual hidden\"> <span class=\"rtl-block-if-rtl\">[$19529]</span> </button> <button class=\"btn-icon show-hints

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 2354, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	118009
Entropy (8bit):	7.9619236041122
Encrypted:	false
SSDEEP:	3072:s1yQierpK9dmbIdJXzPZdXPmQflXNIer2MQd6NGzX:sZFKXmoOaXuW0I0zX
MD5:	0C84425225CE575AA5D7DA38B5A448F5
SHA1:	E16CFED98DCC4BBD8CECFE3C2ADE5A09F392DFCB
SHA-256:	3F5CEF20C00263DCDE826647567A7B54E912C34B08F88BD5A7E1E4FECD342BD3
SHA-512:	CBA9F8A5BFC20EFD4A54665EF7392E822CC8087998295D0C80E241EA37AE3F4CC936E8F041E244DD9226CE07A9A6A838DD8B352DF5EC569A6698E5CAB332CF01
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.....+10....&iCCPAdobe RGB (1998)..(.c``2ptqre.``..+).rwR...R`?..............> v^~^...v...D_....@..J.(.....(%.8......../)..3...E..... vQH.3.}...K.....I........ ..H}:....6....KR+@.28..T.e.g.(.ZZZ8..'..W.....+x.%.....%.....B..........j..d.2.....9....bg.b..\ZT.e22...#.#.......B...a.....T...!...>..9...O..:6\....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-10-02T07:35:42+03:00" xmp:Mo

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HWn:2n
MD5:	7AD75F12C897D16014885FE2418FC04B
SHA1:	1F7B3F403E734E401BCC4A603620A2B1A65A92F5
SHA-256:	912271353D384A2FC941CB7705A5BD68519DF7E2D6788C82883A4E620EB3B2FF
SHA-512:	B326492F68D33379AC154382A538266B64040E7BE3EE5052AE26E764BF320ED23BC6F2BBA2C4FF44D6D020BC87833ED8A4957E115981363BF373D32B3D7BE541
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAlDRIlp68IzZBIFDThta24=?alt=proto
Preview:	CgkKBw04bWtuGgA=

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	506441
Entropy (8bit):	4.4687327356371505
Encrypted:	false
SSDEEP:	6144:IxXsynv/1XRvbky4ERF/6Jd0u4oYfBCFyu:Wvh9S
MD5:	99020B9FC4BC6AAB0B56C6D3C9F49C1C
SHA1:	993317F35798B18F5A7A597C62374CE2A817DB22
SHA-256:	230200D24F6DAF921D926FF4D88F646672C163E3F5478212C35961F60D815A0D
SHA-512:	B2A26F772C1EF38DC31A4624518499C5C5FBC64BC3CB5B0862D8CC3D9D1929C43ED56988E55624D32C9B948F0BB9F8240871D26705C68197B5724A063DEA8F85
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-13_230200d24f6daf921d926ff4d88f646672c163e3f5478212c35961f60d815a0d.js
Preview:	/* Bundle Includes:. * js/ui/mcomponents/classes/MComponent.js. * js/ui/mcomponents/classes/MButton.js. * js/ui/mcomponents/classes/MCheckbox.js. * js/ui/mcomponents/classes/MContextMenu.js. * js/ui/mcomponents/classes/MDialog.js. * js/ui/mcomponents/classes/MEmptyPad.js. * js/ui/mcomponents/classes/MHint.js. * js/ui/mcomponents/classes/MMenuSelect.js. * js/ui/mcomponents/classes/MMenuSelectItem.js. * js/ui/mcomponents/classes/MSidebarButton.js. * js/ui/mcomponents/classes/MTab.js. * js/ui/mcomponents/classes/MTabs.js. * js/vendor/megaDynamicList.js. * js/fm/quickfinder.js. * js/fm/selectionManager2.js. * js/fm.js. * js/fm/backupsUI.js. * js/fm/dashboard.js. * js/fm/recents.js. * js/time_checker.js. * js/ui/contextMenu.js. * js/ui/dragselect.js. * js/ui/onboarding.js. * js/ui/sms.js. /..class MComponent {. /. @param {String\|HtmlElement} parent Either DOM element or a query selector. * @param {Boolean} [appendToParent=true]

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	655360
Entropy (8bit):	7.999706510788242
Encrypted:	true
SSDEEP:	12288:ZbM9EWBmrf9skFQI1B38X2SlFwu6PrVNfG+PMFv9xryPOeout2Ca2uufEbAC:ZbChQZFQIUX2SlFwNzVNFPA9Hut2Ca24
MD5:	E17DBC1DF479897C9E58540B2F3C6D0C
SHA1:	4DEA8889F4FDBE0BC38191A6F58F225741F7B8B3
SHA-256:	39B3FBD200C1560366BEEEE4F81C354FF35C3B3A06B25BB43638A7A58FB20F09
SHA-512:	4050FE046572CC7A5EE86731F3B339FF3B7CD4839F935B97050900E4DDD67292700D23A2884BCB1E5B40A2828C315F061D3DD7BBF9841DD45893B357074BD0C2
Malicious:	false
Reputation:	low
Preview:	J...m......\|tA.$E.e8...O......IP.4^'...C...D..s....D.'.3q...D.w7.=.{..._7.[./<..?..Z m..q.q#.w.PI..!.C<.C'9..f+K.\e.^.e..~.S%...D...r.....T4....X..e_.7'..~"mV~....8..".M.S...R..[..%$. ...QO.....N.#D;........].n......Z.v.F..{1.r..kA......j...fEhp...p....\|8.>&...RU.<.O.{Y7.....fD..K..y).o...?....}..eq...O.R..-...S....cXH.......Avr5..N\...e.m[.\|....hk=......C..M.....L'..&-.\...u.}(.W...Afwk..pKD....p...E.x"#Z.%....p.y&EH....qW.9..,@.y$H.....k..cp....I....q09.g.......g.. ^....J?./B.I...g..`\9...9.D...h..;Dj#.N`nt..eM@....F...o.Z.S..3.5o...<`.<ab.f.caF..[(.)........I5"B.....i.k..L>'.2...+D.z..W.9^.jU.4D.A..S"T8x.p)...I.Lk..v...r..\`......i.gTd.........%....Bu?e.D>.t.w$R......~P.&O...}.l...6.........7T....x...q..eV..C......0...A._.Hqd.K.f.A...........F...g>....1..~2vT.R~...(.M.H......I..n...C.gd..+.b.3.....X.%-...7<.h..q.i..84p.../.s.4.O....0......@.\|.t.B,....-......xy.....v.K.../..*.....f..8...#35.N.A(Q.N.w....7.F.p~;9.0..$d.T.cxI..;zy.,O.o.8...S

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	501735
Entropy (8bit):	4.644873658961265
Encrypted:	false
SSDEEP:	3072:mYPPFQhAbXUAre7lE2ljFYK0NuS6LyqfAgmu6SauG0aPSJvOmRX9MfJftHBoQaos:ZPFgAbH2pt7mHryeKUUORR/ZiH
MD5:	65E4920E82D92DACD169529CE43D38F0
SHA1:	D3616EF7E12F457C906FFCAC7802B48D6FD8A348
SHA-256:	153ED2950AD758D1645D036BCE30E293AE066BA6266E32E02DFA754B7BB34BFC
SHA-512:	07E54A0E7B0FBE5CF8D9DF52299B21A2AE166DDCC1BD0A1FAA8C259044A9D45F9BF97A0B9B0E9271074FE5C6326932578C76E2FD657AA6CD85856D41FBA54CD0
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-7_153ed2950ad758d1645d036bce30e293ae066ba6266e32e02dfa754b7bb34bfc.js
Preview:	/* Bundle Includes:. * js/authring.js. * html/js/login.js. * js/ui/export.js. * html/js/key.js. * js/ui/simpletip.js. * js/useravatar.js. * html/js/bottompage.js. * js/filedrag.js. * js/thumbnail.js. * js/vendor/exif.js. * js/vendor/smartcrop.js. * js/vendor/jquery.qrcode.js. * js/vendor/qrcode.js. * js/ui/password-revert.js. * js/ui/publicServiceAnnouncement.js. * js/ui/megaInputs.js. * js/ui/megaInputs-underlinedText.js. * js/ui/megaInputs-textArea.js. * js/ui/megaInputs-currencyField.js. * html/js/developersettings.js. * html/js/repay.js. * js/ui/passwordReminderDialog.js. * js/metatags.js. * js/vendor/verge.js. /../. @fileOverview. * Storage of authenticated contacts.. /..var u_authring = { 'Ed25519': undefined,. 'Cu25519': undefined,. 'RSA': undefined };..var authring = (function () {. "use strict";.. /. @description. * <p>Storage of authenticated contacts.</p>. .

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	420464
Entropy (8bit):	4.2635832217575285
Encrypted:	false
SSDEEP:	3072:D+z6OZk7PVnGdCpU/11T3hB92I9sb5bh/NGXIjW7XVhZ4A0Wrc5c5+1Tuo1GmAM:D+U7sT3hB9F9sbNh/NG4xA0Wrg1Imx
MD5:	C2F3A6EE995A647B1975718C57E44F1D
SHA1:	04A29F722FCD555BF35FB8D16D49564A8C637CF2
SHA-256:	94CD0E56ACB1D72A332A2F67A70FAB76B5FC4698E19BFBBA9141665EBDA28F6B
SHA-512:	1207B61CBC6BED2A96EDDD90FB176BFCD33BBF0D20F932740B3FC8845FCE7B0F718E25ED3AB8A4D8182FC02E03E5C48F49CCA53984FC9F5E7E550FAB99D7A04F
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/fm/fileversioning.js. * js/fm/fileconflict.js. * js/ui/gdpr-download.js. * html/js/registerb.js. * js/emailNotify.js. * js/ui/slideshow/file.js. * js/ui/slideshow/manager.js. * js/ui/slideshow/playlist.js. * js/ui/slideshow/step.js. * js/ui/slideshow/utils.js. * js/ui/slideshow/settings/base/options.js. * js/ui/slideshow/settings/base/switch.js. * js/ui/slideshow/settings/order.js. * js/ui/slideshow/settings/speed.js. * js/ui/slideshow/settings/repeat.js. * js/ui/slideshow/settings/sub.js. * js/ui/slideshow/settings/settingsManager.js. * js/ui/imagesViewer.js. * js/filerequest_common.js. * js/filerequest_components.js. * js/filerequest.js. * js/ui/sprites.js. * js/ui/theme.js. * js/vendor/megalist.js. * js/ui/searchbar.js. /..var versiondialogid;.(function _fileversioning(global) {. 'use strict';.. var current_sel_version = [];. var ns = {. /. Get all the versions for given file han

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	511137
Entropy (8bit):	4.541735740658581
Encrypted:	false
SSDEEP:	6144:WIah58cFfgGHM2MNVdtqFHFuTZUfe9BxJIrt1NFZ6A/:WI+3HM2MNVMFuTZUfaBxqrt1Nt
MD5:	041A2A83421A4C1A4DE7FE12A2265BD5
SHA1:	C5A312AD6256EED52DE2A25A252F5437126998C9
SHA-256:	C1031F4CCA0D2CAD1A9074CD0879CA29D084E2EB528787879D9134C8FA495250
SHA-512:	594B4C2CD2BD1EA47F5ED9CCD46C32044DC29D3A63BC523AB499CEC0906E5FE905AA26E8536154AEDD6A9EBF210E32B584EB9F8934C6DE99E4EB1F44E92C44F1
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-10_c1031f4cca0d2cad1a9074cd0879ca29d084e2eb528787879d9134c8fa495250.js
Preview:	/* Bundle Includes:. * js/fm/fileTextEditor.js. * js/fm/textEditorUI.js. * js/transfers/xhr2.js. * js/transfers/queue.js. * js/transfers/utils.js. * js/transfers/meths/cache.js. * js/transfers/meths/memory.js. * js/transfers/meths/filesystem.js. * js/transfers/downloader.js. * js/transfers/decrypter.js. * js/transfers/download2.js. * js/transfers/meths.js. * js/transfers/upload2.js. * js/transfers/reader.js. * js/transfers/zip64.js. * js/transfers/cloudraid.js. * index.js. * js/filetypes.js. /../* This class is the core of text file editor.. * It will handle uploading/downloading of data. * and performs memory/bandwidth optimization..*/..mega.fileTextEditor = new function FileTextEditor() {. "use strict";. // the maximum slots in memory for edited files. // we have the maximum editable file size = 20MB --> max Total = 100MB. var maxFilesInMemory = 5;.. var filesDataMap = Object.create(null);. var slotIndex = 0;. var slotsMap =

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (728)
Category:	dropped
Size (bytes):	736213
Entropy (8bit):	5.0618261003613245
Encrypted:	false
SSDEEP:	3072:s7DiwNp9PVzcMfZY45pX0y6YvC6cDraVnjDTdZzzT90hMVCX5EJl/mggxb6V4:s7DiwNWt45Ky63X5Lggxmu
MD5:	CE6A444EFA9C8AE85A58824FB7565082
SHA1:	EAF656EED7E2DEA0729D0932FA003A4C8D9F1F39
SHA-256:	1922102B66D4C2764A8CFA9BDBD87E007DC19B2A5B83A743F758FF17051C647E
SHA-512:	848427D61516DF694995D6765DD7107C7663084593F4025942C92D08E8D2C53F26EDBDBEB48816DB2A6BBA60EF49806038299FB4AC19A2ABA0C4FA4A9FE71EE0
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * css/buttons.css. * css/components.css. * css/ui/mcomponents.css. * css/style.css. * css/fm-header.css. * css/fm-breadcrumb.css. * css/fm-lists.css. * css/grid-table.css. * css/tabs.css. * css/empty-pages.css. * css/node-filter.css. * css/gallery.css. * css/onboarding.css. * css/download.css. * css/user-card.css. * css/account.css. * css/banners.css. * css/dropdowns.css. * css/jq-ui-custom.css. * css/labels-and-filters.css. * css/dialogs.css. */...nonclickable{..cursor:not-allowed !important.}.button input{..border:0;..height:100%;..left:0;..margin:0;..opacity:0;..padding:0;..position:absolute;..top:0;..width:100%;..z-index:1.}.button input[type=file]{..cursor:pointer.}.button input[type=file]::-webkit-file-upload-button{..cursor:pointer.}.button.icon-dropdown{..border-radius:4px;..cursor:pointer;..float:right;..padding:2px 13px 2px 3px;..position:relative;..text-align:left.}.button.icon-dropdown.disabled>i{..cursor:defaul

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 2354, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	118009
Entropy (8bit):	7.9619236041122
Encrypted:	false
SSDEEP:	3072:s1yQierpK9dmbIdJXzPZdXPmQflXNIer2MQd6NGzX:sZFKXmoOaXuW0I0zX
MD5:	0C84425225CE575AA5D7DA38B5A448F5
SHA1:	E16CFED98DCC4BBD8CECFE3C2ADE5A09F392DFCB
SHA-256:	3F5CEF20C00263DCDE826647567A7B54E912C34B08F88BD5A7E1E4FECD342BD3
SHA-512:	CBA9F8A5BFC20EFD4A54665EF7392E822CC8087998295D0C80E241EA37AE3F4CC936E8F041E244DD9226CE07A9A6A838DD8B352DF5EC569A6698E5CAB332CF01
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/images/mega/icons-sprite.png?v=48528e60724d858e
Preview:	.PNG........IHDR.......2.....+10....&iCCPAdobe RGB (1998)..(.c``2ptqre.``..+).rwR...R`?..............> v^~^...v...D_....@..J.(.....(%.8......../)..3...E..... vQH.3.}...K.....I........ ..H}:....6....KR+@.28..T.e.g.(.ZZZ8..'..W.....+x.%.....%.....B..........j..d.2.....9....bg.b..\ZT.e22...#.#.......B...a.....T...!...>..9...O..:6\....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-10-02T07:35:42+03:00" xmp:Mo

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1048576
Entropy (8bit):	7.999827705510305
Encrypted:	true
SSDEEP:	24576:xPLCaImgwO5y7OBRzNn9hrEk2l5UTJB1EgQsR7U5ejAeH0IPNGkw:x/IwqB5NXrExWTJfmKz2
MD5:	B5EF39097ACFD7686504E7076569FDE3
SHA1:	AAE7A1BDACE256516D1255AF59408025274FE8C4
SHA-256:	41A57DC7CB53EFB20D3DA000CAD4F9E18D7480D882791A00E0F6BA6CD34E5A3C
SHA-512:	979D1BFDD6767A22908687D6709BC0B800F8C1A5E9A3E13B02E9EA38BC5775CEBACA6D7B5217AED2E4B1C4D63AC80A9A65DE4C9D431CE52E1877098FF4981B56
Malicious:	false
Reputation:	low
Preview:	\|.5...>.j..V.0@.T..F.W..+F...r.}hBf...~.O+'.7..]..}O..R<....#...\|G2..n....].\|...K/.c.....r..;.7.y....^.....>_t.h..y.#....".).!.g..R....^..=zw..9.......a.c.Ud...;...}.....!.....).[=QMmy....G..yJ...fx...}M...{....pFJX1........N3).....O ..@Qe.UL..\c.y.K..\.>(Z.K<;.[..&..s.#2#h..\|.B.........+.0...].W.6p.F.5.;.z...P....C..R.?.]...../M.~..w.9.fA.0(.5.s...'E8._s.&....}...:.....sg.':.2.F.,u..M.(. s.Pl.6......9..<G.wT.I6..Lc.~.eT.D.zx.F..r....e...Z...Z....~..N.~)....@...g.$..z....\|......1..pF...#...0.!....R...B.w...........~..B.].a.W...'3.@...'..f.X.p."......Eg......4.....p...u_....T.....$3R....J.Z.VV..F@.z..].......Y...q.%.....e..........h9GG.u.z.,.....&RC.......\|\|)..G....=<......B+..3-....C9...%G.@.7.<O..G ..$..r....b.(+..9.L....JI..e\|w]......S...v.l.....{..y..[.....7V...e.R".0#o)r...&.=.R..F..'. :..N..X}...&...g.`.....b........6.........#..-..^._(.A...n.GN.qi._..= ...wsF6:&.~I..,.....7..m..W22..D...W.Gc.e~...O.Z.eE. .6b>.Rr.V....!.........[0..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	38615
Entropy (8bit):	4.301692764163655
Encrypted:	false
SSDEEP:	384:NRvNikzCFSc96PJZqekq5ikh0t4xTx0x81m4l0APxfmrcAXAe8PG7z:NPfc96PJP5i0t08jeaUweT
MD5:	04C8B39A7211E91C390F3E7C18730EC6
SHA1:	B8D9EE0B2B7C96A0AAB18B05EE2D38EDA1823C3C
SHA-256:	7066FB3A9439AC4B7AB62485A20EEF0196E9D0EC2A4038302F3EEDA11453F2C5
SHA-512:	B7F63A2E238D6D6A0E25CD8A290FB95B3B06FC874369675E22230DE63AEC729D279133488F076CEBFAA8C31131714402B580447A19C8EB3AAE4FA47B84DD7843
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/html/js/download_7066fb3a9439ac4b7ab62485a20eef0196e9d0ec2a4038302f3eeda11453f2c5.js
Preview:	var dlpage_ph;.var dlpage_key;.var fdl_filename, fdl_filesize, fdl_key, fdl_url, fdl_starttime;.var dl_import=false;.var dl_attr;.var dl_node;.var fdl_queue_var=false;.var fileSize;.var dlResumeInfo;.var mediaCollectFn;.var maxDownloadSize = Math.pow(2, 53);..function dlinfo(ph,key,next).{. $('.widget-block').addClass('hidden');. loadingDialog.show();.. dlpage_ph = ph;. dlpage_key = key;.. if (!is_mobile) {. watchdog.query('dlsize', 2100, true).catch(nop);. }.. if (dl_res) {. setupSingleDownloadPage(dl_res). .catch(tell);.. dl_res = false;. }. else {. // Fetch the file information and optionally the download URL. api.req({a: 'g', p: ph, ad: 1}). .then(({result}) => result). .always(setupSingleDownloadPage). .catch(tell);. }.. $(window).rebind('keydown.uikeyevents', function(ev) {. if (ev.keyCode === 27) {. $('.media-viewer-container', 'body').removeClass('fu

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 7432, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	30699
Entropy (8bit):	7.955262660398151
Encrypted:	false
SSDEEP:	768:rphWmS5OEJDbSP4BvdZ0SKVCGg8lVBv8IYSqMd3rv:rTWmS7DbPfZ0XCGgqkdSqU37
MD5:	C53C4B781F53B21562990926425ABFD3
SHA1:	FFF91C4ACD5D0C187AD634B79B2619DAE9AF58AD
SHA-256:	1692F9C36F3AAA9D3E251A92FD2615B55D6F8E8E0BB286FA87184ECB4E20525C
SHA-512:	85041E7DD1EFF82DB0355A471ED64114D214BBF5D9B6B54F5F741E7A83B56F38DD591C854DC16C748DB806FFEDF896076C8A31AF7664429C373497F68323C7B6
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/images/mega/dialog-sprite.png?v=57a6bd1346996955
Preview:	.PNG........IHDR.............OW......PLTE.........gjj.............................v...7.....}...........-.....................................z\|{...4.......C..{...8........[[\.........E........noo............ipk..........CRUT.. eee...///...xxx000.........fffxxxttt...............&&&...cde...rsr....`.xxx......dee...afdyyy..\|...xxxfff....z...}...o...N......eff.....7xxxxxx..}...........fffbcc......yyy511.....}......................t.....}....3#....}........_.G....%X.....Q..........36............C......:.....i....................\|....H....R.7..G..3[.7...g.F....hM....:..:...7....[.7........9gw....../O[.....[....wwx....}...............fff)/7........Vr.O]t98G.....................R=/.....A..:..I...8.l.......)..7....i..........-/...>....&...m..v..T.....\.........t.D.....tRNS...M.2.......n..Ww&J.Gg.8......N2...w....\|..+.).=.12T.u."......_...]G...aD..k=..\|...A.SX.5..E..{.h..oz....z...P..../..b......*N...d..e..r..G=.....L.R...u....o......l&t..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	86811
Entropy (8bit):	4.525745623954823
Encrypted:	false
SSDEEP:	1536:FdNYvEs8KIxiVTlN4TWyqNOL1MWwmYLp+XPNovt:FCIxiVBVNOL1MWwT3
MD5:	02D5B69391A53D2C197BC52E10C09125
SHA1:	73CD5BF718113A4101E141E631D6F7CAFA34EDBE
SHA-256:	5A0BD51C94A07CD5A5806408F32C247CE16F51DB3DF2D3992BDD9272478AF76D
SHA-512:	355ED00C45641BBB89D30166790130FF79E13DB121D3755ADB9A27C8C898211F29DF7289F3A8C068A73DD1BBE2F6ADF1DBB3D4B0052B4C608720F5D65226382B
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-8_5a0bd51c94a07cd5a5806408f32c247ce16f51db3df2d3992bdd9272478af76d.js
Preview:	/* Bundle Includes:. * js/vendor/perfect-scrollbar.js. * js/ui/languageDialog.js. * js/ui/commercials.js. /../!. * perfect-scrollbar v1.5.7 - mega.nz build.. * Copyright 2024 Hyunje Jun, MDBootstrap and Contributors. * Licensed under MIT. */..(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :. typeof define === 'function' && define.amd ? define(factory) :. (global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, global.PerfectScrollbar = factory());.})(this, (function () { 'use strict';.. function get(element) {. return getComputedStyle(element);. }.. function set(element, obj) {. for (const key in obj) {. let val = obj[key];. if (typeof val === 'number') {. val = `${val}px`;. }. element.style[key] = val;. }. return element;. }.. function div(className) {. const div = document.createElement('div');. div.className = className;. return

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	469622
Entropy (8bit):	4.363270155404902
Encrypted:	false
SSDEEP:	6144:MCZCJklXooyWPeDOJ5pKfqyiNfXceakCzcE:MCZCJkVCqyiNfXcbkm
MD5:	F3A0A98A608FB462C90C94994A82B09C
SHA1:	97B0F00170D543CB32AF85E2ECC80E27C7351273
SHA-256:	07B863D3EF47C1F5A009EF1828DEC72DA158A5AC5F7003A9E6E04A9015720712
SHA-512:	DCAEBB87E5D38F28C6CAFE9E784CAF0CA54F41577E65E6C67F5707E36BDD9B084A7945B550D58AA12817C14CC5812576289BF17D62333AB3DB60F7891A28C219
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-14_07b863d3ef47c1f5a009ef1828dec72da158a5ac5f7003a9e6e04a9015720712.js
Preview:	/* Bundle Includes:. * js/fm/account.js. * js/fm/account-change-password.js. * js/fm/account-change-email.js. * js/fm/dialogs.js. * js/ui/dropdowns.js. * js/ui/node-filter.js. * js/ui/info-panel.js. * js/notify.js. * js/vendor/avatar.js. */..function accountUI() {.. "use strict";.. // Prevent ephemeral session to access account settings via url. if (u_type === 0) {. msgDialog('confirmation', l[998], l[17146]. + ' ' + l[999], l[1000], function(e) {. if (e) {. loadSubPage('register');. return false;. }. loadSubPage('fm');. });.. return false;. }.. var $fmContainer = $('.fm-main', '.fmholder');. var $settingsMenu = $('.content-panel.account', $fmContainer);.. accountUI.$contentBlock = $('.fm-right-account-block', $fmContainer);.. $('.fm-account-notifications', accountUI.$contentBlock).removeClass('hidden');. $('.settings-button', $settingsMenu).remove

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (426)
Category:	downloaded
Size (bytes):	288323
Entropy (8bit):	4.99015021232412
Encrypted:	false
SSDEEP:	1536:dxQo7xcr5XFubR2y067j3tv6/so20di+bs6LLnHc1SPOKpmcAkJHvZGr6+ynfRb8:piD4ro6crBiUr/QU8R80
MD5:	99F5DBF9C95EA87D8BF839159900079A
SHA1:	1F0B1D8742F770D79E0988156FE1CE7232422C3E
SHA-256:	FA06E14B2BAA149CD25CE0A79E30707CFCB371EC261A2B543075C519E35562AF
SHA-512:	7A688C521612CB9D3C03164D3A333C566E85D90918EE225DF845FE616B3EFFE5B413ED1E726104CB068BED4DF551AE7693AFC22CD3E1348B84D478BAAB5EC709
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/css/mega-4_fa06e14b2baa149cd25ce0a79e30707cfcb371ec261a2b543075c519e35562af.css
Preview:	/* Bundle Includes:. * css/share-dialog.css. * css/popups.css. * css/data-blocks-view.css. * css/recovery.css. * css/settings.css. * css/media-print.css. * css/affiliate-program.css. * css/backup-center.css. * css/top-menu.css. * css/context-menu.css. * css/tables.css. * css/recents.css. * css/transfer-widget.css. * css/components/fm-left-pane.css. * css/components/info-panel.css. * css/chat-bundle.css. * css/topbar.css. * css/notification-banner.css. */...mega-dialog.share-dialog{..border-radius:var(--border-radius);..height:auto;..min-height:10px;..overflow:hidden;..width:560px.}..mega-dialog.share-dialog .share-dialog-bottom{..-webkit-padding-end:0;..background:var(--surface-grey-1);..padding-inline-end:0.}..mega-dialog.share-dialog>header{..padding-bottom:8px.}..mega-dialog.share-dialog .share-dialog-top{..padding:0 42px.}..mega-dialog.share-dialog .share-dialog-top-body{..padding-bottom:16px;..position:relative.}..mega-dialog.share-dialog .share

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	420464
Entropy (8bit):	4.2635832217575285
Encrypted:	false
SSDEEP:	3072:D+z6OZk7PVnGdCpU/11T3hB92I9sb5bh/NGXIjW7XVhZ4A0Wrc5c5+1Tuo1GmAM:D+U7sT3hB9F9sbNh/NG4xA0Wrg1Imx
MD5:	C2F3A6EE995A647B1975718C57E44F1D
SHA1:	04A29F722FCD555BF35FB8D16D49564A8C637CF2
SHA-256:	94CD0E56ACB1D72A332A2F67A70FAB76B5FC4698E19BFBBA9141665EBDA28F6B
SHA-512:	1207B61CBC6BED2A96EDDD90FB176BFCD33BBF0D20F932740B3FC8845FCE7B0F718E25ED3AB8A4D8182FC02E03E5C48F49CCA53984FC9F5E7E550FAB99D7A04F
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-12_94cd0e56acb1d72a332a2f67a70fab76b5fc4698e19bfbba9141665ebda28f6b.js
Preview:	/* Bundle Includes:. * js/fm/fileversioning.js. * js/fm/fileconflict.js. * js/ui/gdpr-download.js. * html/js/registerb.js. * js/emailNotify.js. * js/ui/slideshow/file.js. * js/ui/slideshow/manager.js. * js/ui/slideshow/playlist.js. * js/ui/slideshow/step.js. * js/ui/slideshow/utils.js. * js/ui/slideshow/settings/base/options.js. * js/ui/slideshow/settings/base/switch.js. * js/ui/slideshow/settings/order.js. * js/ui/slideshow/settings/speed.js. * js/ui/slideshow/settings/repeat.js. * js/ui/slideshow/settings/sub.js. * js/ui/slideshow/settings/settingsManager.js. * js/ui/imagesViewer.js. * js/filerequest_common.js. * js/filerequest_components.js. * js/filerequest.js. * js/ui/sprites.js. * js/ui/theme.js. * js/vendor/megalist.js. * js/ui/searchbar.js. /..var versiondialogid;.(function _fileversioning(global) {. 'use strict';.. var current_sel_version = [];. var ns = {. /. Get all the versions for given file han

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	366638
Entropy (8bit):	4.409789868294678
Encrypted:	false
SSDEEP:	6144:TKwQMLeMbpx6+FvGlyQSN2x9OSd+3CJOSdv+ya8aZulKCl5G:TKwQML3px6mNAOSd+3CJOSdv/lKCl5G
MD5:	1B0CF2A3CFBDD9345564A76224711A95
SHA1:	4ABC7C3B364CE8DCB7E067B5C4342C449EBFEC49
SHA-256:	4FD1C8F7E2F02FB9A57DCF5667DD968ED828FF048CE607FD73CBD530CF8A9DB2
SHA-512:	A75FB26B60246E9BC7DB5DE1191CABEBE04840A21151590CB99CC8A31D4BA7E4ACEFA380D4B6C9852B9EA74C5853499C85DE4A7D3DE17192A792D3584FBF6BBD
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-4_4fd1c8f7e2f02fb9a57dcf5667dd968ed828ff048ce607fd73cbd530cf8a9db2.js
Preview:	/* Bundle Includes:. * js/utils/media.js. * js/utils/megalite.js. * js/utils/network.js. * js/utils/splitter.js. * js/utils/test.js. * js/utils/timers.js. * js/utils/watchdog.js. * js/utils/workers.js. * js/utils/trans.js. * js/utils/webgl.js. * js/utils/subtitles.js. * js/utils/sets.js. /..function isStreamingEnabled() {. 'use strict';. // return !window.safari \|\| d;. return true;.}..function isMediaSourceSupported() {. 'use strict'; // https://caniuse.com/#feat=mediasource. return window.MediaSource && typeof MediaSource.isTypeSupported === 'function' && isStreamingEnabled();.}..function is_video(n) {. 'use strict';.. if (String(n && n.fa).indexOf(':8') > 0) {. // check whether it's an streamable video. return MediaAttribute.getMediaType(n);. }.. var ext = fileext(n && n.name \|\| n, true, true);.. return is_video.ext[ext];.}..is_video.ext = {. 'MP4': -1,. 'M4V': -1.};..if (!isMediaSourceSupported()) {. wi

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	41595
Entropy (8bit):	4.998646908640853
Encrypted:	false
SSDEEP:	768:NT/KotXFw5b4USxK5hSgWlLcPXANR5zthbhDnL:NT/XfwvPXANNhVbL
MD5:	71D77607B323BC20BE32A02FCE4CADFD
SHA1:	2A18236090F47A4E1F0EBD2B9F1E4B0BC0053573
SHA-256:	58C04AC027B15931ACFB17BE4A134E35C8BDD3B99109E617895713A42F32D84A
SHA-512:	01E141B3C6CA46A83626F19E35A8E8ED613E2DC90FB42977752632C9818EA93F9B8F06E1A47417FE5CB8ED8A3BBA3FBF62BF28DA3F15C6200A6B8CCEC72C4005
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * css/toast.css. * css/general.css. * css/megainput.css. * css/vars/text-input.css. * css/retina-images.css. /...toast-rack{..box-sizing:border-box;..display:flex;..flex-direction:column;..position:relative.}..rtl .toast-rack{..direction:rtl.}..toast-rack {..box-sizing:border-box.}..toast-rack.top{..flex-direction:column-reverse;..justify-content:end.}..toast-rack.start{..flex-direction:row-reverse;..justify-content:end.}..toast-rack.end{..flex-direction:row.}..toast-rack .toast{..align-items:center;..display:flex;..justify-content:space-between;..margin:auto;..opacity:0;..transition:opacity .1s ease-in.}..toast-rack .toast .icon,.toast-rack .toast button{..flex-grow:0;..flex-shrink:0.}..timeline-tooltip button,.toast-rack .toast button{..border:none;..cursor:pointer;..outline:none.}..toast-rack .toast button.close{..align-items:center;..background:none;..display:flex;..flex-shrink:0;..justify-content:center.}..toast-rack .toast .message{..width:100%.}.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	7.998575148921194
Encrypted:	true
SSDEEP:	3072:tx+L8xUnBjdrB89XzY8KThGNQTXQWkeAoujzSHouyzytAS:6eMBrB89DsZTXQWkeAo0gyTS
MD5:	B8B6658F49075092A120FEF80A71AC47
SHA1:	8B722EDBDB1B09BC9892F2C060DEE975E2923AAF
SHA-256:	9B66A3571D8EFF1E57CFF4B1F38D3A501332698048779946C8494887E4DBFFCE
SHA-512:	4AA08E68E1CE03C3C62AF47B08DFB9BA21E9F21FFD964787DC0DB3816FF54F154F0E9CE2BB0495641422B1B9762BFA4CA86588A9D60C6E8A64178EB40C6B4542
Malicious:	false
Reputation:	low
Preview:	.I<....qu...{..yy.....{.\|....u....3.N.$.N;.'t..Ze:h ...g..Q..a....l.....[...Ib...../.^..TW...j.A.+.rH.....j....Xa.....~..;..n....It..X...)..Q.P.#P..~G..1..:.s..I.^...]C.........f[EnW.PTe...hiB.N.Z.j\..n..V~.z.u!.G...../...&pq.1....X\|...T.....^..6.+!..4.Q.......q..o....[AW......0..q._....7..;l....n.....}....a..[.....e..J.MM..f..F.._DrNN.r?.P.f.6..RH..u.....S..P..baT......=....5...l.a`..d...b)`..r.....!....>E-`..^40.I.j.(<Q/.c..-bC..Q.W..(p.......C..o..l[.....bQD....gO.."!.."].$..8=..y..j.....L.%gU._)."iy...M.6.w.J.>sFn..3.!.".sH..\|....@.E...w'.5....+...O.pt.w...d).$/..a.T:.$..o...rU2.r.....E..`{L....I...k~.Qh..+ce...\....%.........X0.}[;..S..[..H.z.9HZ..<,....o...A#.L..P2.a.J5BTF.j..&..sz.q....=.....&...(S@.8..U.2I.G.f...l._...........0....p.F).]../e.%.........L..EvX.l.FjdD+.gI.vt"])~W........PP.^M_5F...[i..a...;.k..>.!..R..D.Z.#...%........(..Zc....D`4..l...DK3-...ug.4.....gN...A_.]).2...._....m.......:..Xot.C.^..{- [..v.j.s..:...#z.yu...

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550)
Category:	downloaded
Size (bytes):	240597
Entropy (8bit):	4.952388946188964
Encrypted:	false
SSDEEP:	1536:+E/Qm+uSxiLBRFXP/IH5MVAGo81vAV8H4hAeFgm3XYvWcTV//5SoFmi:T+uSxiLBRxPk5MVTvAe4i
MD5:	5866EDF650716B108FBD1FDF282E0EF4
SHA1:	902D9067F4C2FBAC5B42EC55D1DDFB1D6F5E5D79
SHA-256:	0E8588A249D6083898D049DFB2A913376C3F0434EFE856BBFD93C62E6F82F42D
SHA-512:	AC1B814E41CAD321DF313844EA6845BC324FB09218B90976CA124A4092D169A05D90EE9DE03DB49E0CA45BC1C8C439450D6E6A2F0FB5551C51A668D609C6375E
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/css/mega-2_0e8588a249d6083898d049dfb2a913376c3f0434efe856bbfd93c62e6f82f42d.css
Preview:	/* Bundle Includes:. * css/codemirror.css. * css/txteditor.css. * css/vars/theme.css. * css/switches.css. * css/sprites/fm-uni@uni.css. * css/sprites/fm-mime@uni.css. * css/sprites/fm-mime-90@uni.css. * css/sprites/fm-mono@mono.css. * css/sprites/fm-theme@dark.css. * css/sprites/fm-theme@light.css. * css/sprites/fm-illustrations.css. * css/mega-dialog.css. * css/vars/dialog.css. * css/vars/button.css. * css/radios.css. * css/mega-button.css. * css/checkboxes.css. * css/media-viewer.css. * css/video-player.css. * css/perfect-scrollbar.css. * css/animations.css. */...CodeMirror{..background-color:var(--stroke-main);..box-sizing:border-box;..color:var(--text-color-high);..direction:ltr;..font:var(--text-code1);..height:100%.}..CodeMirror-lines{..padding:4px 0.}..CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{..padding:0 14px.}..CodeMirror-gutters{..background-color:var(--stroke-main);..white-space:nowrap.}..CodeMirror-linenumb

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	68811
Entropy (8bit):	4.833256971201498
Encrypted:	false
SSDEEP:	1536:TBzoP6z4UA5sXHeSe27qATH3UP+CMEsJXKI:qP6zlA5slUVP21
MD5:	770B69C3DF131F0EBC4B0CE308D1EF33
SHA1:	67F2E3F1036B6BA9CF541175C98C7503A308A517
SHA-256:	A5169BC493A31B5513E7FB9357BB189E053F76A9C7D4A45232C145554BBEB075
SHA-512:	E0D5A259401D3EB73A344941DE3CF61D809A498743F3C687A0ABA50AA3FE1489B55E88C76AA756404999F0EB9F4B9DE22CB00DC4DD34DBC310A3F329392108D3
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="4000" height="500"><style><![CDATA[.B{fill:#fff}.C{fill-rule:nonzero}.D{fill:#00c0a6}.E{fill-opacity:.2}.F{fill:#000}.G{mask:url(#BJ)}.H{fill:#f4d1c6}.I{fill:#f1c9bd}.J{fill:#e6e9ed}.K{mask:url(#BX)}.L{fill:#53565b}.M{fill:#ad6e53}.N{fill:#46b4e5}.O{fill:#ed5564}.P{fill:#fafafa}.Q{mask:url(#BN)}.R{fill:#ffa837}.S{fill:#00b69a}.T{mask:url(#Ar)}.U{mask:url(#As)}.V{fill-opacity:.9}.W{fill:#54bbff}.X{fill:#e1e4e9}.Y{fill:#732400}.Z{fill:#661d00}.a{fill:#e0895a}.b{fill:#da7c4e}.c{fill:#00a889}.d{mask:url(#BG)}.e{fill:#00b194}.f{mask:url(#BM)}.g{mask:url(#Be)}.h{fill:#ffb400}.i{fill:#aac8d6}.j{fill:#072545}.k{fill:#398d03}.l{fill:#3c3d3f}.m{stroke-width:2.273} </style><defs><path id="A" d="M28.182 72.631h16.364V41.762H28.182z"/><path d="M58.182 25.42c0 14.123-13.505 26.329-21.818 26.329-8.276 0-21.818-12.206-21.818-26.329v-1.816L20 15.433s8.303 1.816 16.364 1.816c8.095 0 15.455-1.816 15.455-1.816l6.36

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	443062
Entropy (8bit):	4.479255582865319
Encrypted:	false
SSDEEP:	6144:6/BJv438PebFPmBjbNibrw7n2nfjvmIyybeVXWeK4cz4by6AsAt16BCfQYs63:65Jv5Niu2nfj+IyybeVXWeK4cu763
MD5:	057852173E958810F1DE0E8ADBC9D462
SHA1:	BD05E51244966615A9DC2B0119F7E8CFA64F22B5
SHA-256:	9C90F27443FBDB85519985333A8B00C3CFF0E10A2753955F41890342D64362F7
SHA-512:	230EC42DFCEA740B4FB37E3C7559DA2289B7BF2025C465BF055DB75659C7F9F05EDE374792B046FFB3365F8FA5DC34E23F1312984C195C32A6D42147959EFC86
Malicious:	false
Reputation:	low
Preview:	/! asmCrypto, (c) 2013 Artem S Vybornov, opensource.org/licenses/MIT /.(function ( exports, global ) {..function IllegalStateError () { var err = Error.apply( this, arguments ); this.message = err.message, this.stack = err.stack; }.IllegalStateError.prototype = Object.create( Error.prototype, { name: { value: 'IllegalStateError' } } );..function IllegalArgumentError () { var err = Error.apply( this, arguments ); this.message = err.message, this.stack = err.stack; }.IllegalArgumentError.prototype = Object.create( Error.prototype, { name: { value: 'IllegalArgumentError' } } );..function SecurityError () { var err = Error.apply( this, arguments ); this.message = err.message, this.stack = err.stack; }.SecurityError.prototype = Object.create( Error.prototype, { name: { value: 'SecurityError' } } );..var FloatArray = global.Float64Array \|\| global.Float32Array; // make PhantomJS happy..function string_to_bytes ( str, utf8 ) {. utf8 = !!utf8;.. var len = str.length,. bytes = new

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (764)
Category:	downloaded
Size (bytes):	476787
Entropy (8bit):	5.16720438238552
Encrypted:	false
SSDEEP:	3072:AC+XpqD7Vpz5Py/ah6ej/cwJuqy7pKq160GMp138Lou:Aw7E/ahLj/cDK0GMpR8Mu
MD5:	0BFC5FA3ED2DDE3DCBB1551DB2552631
SHA1:	53B0217BDE243FEEA9AC52475EB5FB3040D96D4B
SHA-256:	73F0048E4F39D5EC99A6CD1B8E309B77EACCDBE1EAAF31C05E2B8E660919FDD0
SHA-512:	AD2F5418EF17E672D14D1C569704D59D5D7A4146C689A57E90C3F870EAE72FE2CF551E0AFFEB2C08CAB670F7C99A1174212099946CFA5F2E0168A0083BF0D407
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/css/mega-1_73f0048e4f39d5ec99a6cd1b8e309b77eaccdbe1eaaf31c05e2b8e660919fdd0.css
Preview:	/* Bundle Includes:. * css/avatars.css. * css/fonts.css. * css/bottom-pages.css. * css/bottom-menu.css. * css/business.css. * css/pro.css. * css/planpricing.css. * css/startpage.css. * css/icons.css. * css/spinners.css. * css/business-register.css. * css/psa.css. * css/features.css. * css/dialogs-common.css. * css/dialogs/cookie-dialog.css. * css/jquery-ui.extra.css. * css/cookiepolicy.css. */...avatar-wrapper{..background:#fff;..border-radius:100%;..box-sizing:border-box;..color:#fff;..display:block;..font-size:12px;..height:32px;..line-height:32px;..text-align:center;..width:32px.}..avatar-wrapper,.multi-avatar{..position:relative.}..multi-avatar .avatar-wrapper{..font-size:8px;..height:18px;..line-height:16px;..position:absolute;..width:18px.}..multi-avatar .avatar-wrapper img{..height:18px;..width:18px.}..multi-avatar .verified .verified_icon{..display:none.}..multi-avatar-2 .avatar-0{..left:1px;..top:1px.}..multi-avatar-2 .avatar-1{..left:17px;..t

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	745464
Entropy (8bit):	4.938087252313875
Encrypted:	false
SSDEEP:	6144:7CLIkQLna8VELNKSAiPQoXgCVfDhHPQne7Z0aJ0hGputY8qBx1RjeJ:9kQbM90Gp6JqBw
MD5:	95FA5EAF9DC4321C9F2686B871613602
SHA1:	03FC1BE495C9044F352919B5B25CC5C70C046CF7
SHA-256:	682231E1AD6EE170C226CB45A530CA090C6267EC93DFF7CB2A70101D9BE0BAC8
SHA-512:	B963B6B891672C284283C5CF6FB036525D4945749AF5568032949B3EDBE4ADD4FF7DE92E6343007A9F0036AFDD1DAB28B525B995F9AD8251DAE682D11D112DC0
Malicious:	false
Reputation:	low
Preview:	{"transferwidget":"<div class=\"widget-block hidden\"> <div class=\"widget-circle percents-0\"> <div class=\"widget-arrows\"> <div class=\"widget-tooltip\"> <div class=\"widget-icon uploading hidden\"> <span class=\"widget-txt\">[$1155]</span> <span class=\"widget-speed-block ulspeed\"> [$23062.k] </span> </div> <div class=\"widget-icon downloading hidden\"> <span class=\"widget-txt\">[$1156]</span> <span class=\"widget-speed-block dlspeed\"> [$23062.k] </span> </div> </div> <div class=\"widget-arrow\"></div> </div> </div> </div>","top":"<section class=\"topbar top-head js-topbar\"> <div class=\"logo-wrapper\"> <div class=\"logo-full sprite-fm-illustration-wide mega-logo-dark\"></div> <a class=\"logo\"> <i class=\"sprite-fm-uni icon-mega-logo\"></i> </a> <div class=\"top-business-title\"> <span class=\"rtl-block-if-rtl\">[$19530]</span> </div> <button class=\"mega-button individual hidden\"> <span class=\"rtl-block-if-rtl\">[$19529]</span> </button> <button class=\"btn-icon show-hints

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11912), with no line terminators
Category:	downloaded
Size (bytes):	11912
Entropy (8bit):	4.7728077513949385
Encrypted:	false
SSDEEP:	192:MDuEIIKOfkFKDZDghxj6GjZAbjUkOIInkbZvcJYWd959E9WJ+TM:M6EIIKOfmKDZDej6GjZAbjUkOIIn8vcR
MD5:	3474CEB37AF3BA509CB55092004E9C6B
SHA1:	5A0ADF63DB2B411BE79D7B5720D66279352D30D3
SHA-256:	2749A59FEFF4141009BB961EDD622162E7589B7F6C446E9BE297528F0CDFF89D
SHA-512:	CDB530366C310786FC43FA8112A6FE719BC874D8AA9E0304A584FA515D2A437208E6B5E6B70C842A7F4BF1F5AEA1C7ECBEC36B0329748D972C0A200C7C83CE28
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/html/download.html-postbuild_2749a59feff4141009bb961edd622162e7589b7f6c446e9be297528f0cdff89d.html
Preview:	<div class="bottom-page download scroll-block selectable-txt"> ((TOP)) <div class="download-content download download-page"> <div id="commercial-close-button" class="commercial-close-button hidden"> <i class="sprite-fm-mono icon-dialog-close"></i> </div> <section class="download-grid js-download-scroll-panel"> <div class="download main-pad"> <div class="download transfer-wrapper"> <div class="download video-block theme-dark-forced"> <div class="media-viewer"> <section class="content" data-fullscreen="false"> <video id="video" data-autoplayvideo="false" data-playvideoonclick="false"></video> <div class="download play-video-button"> <i class="sprite-fm-mono icon-play-regular-solid"></i> </div> <div class="play-pause-video-button hidden"> <i class="sprite-fm-mono icon-play-regular-solid"></i> </div> <div class="watch-again-button hidden"> <i class="sprite-fm-mono icon-rotate-ccw-small-regular-outline"></i> <span>[$video_player_watch_again]</span> </div> <div class="watch-again-button-over

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 853 x 1363, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	70369
Entropy (8bit):	7.968201503862259
Encrypted:	false
SSDEEP:	1536:Y0BMBs8Wls4KmHpLfrBUGu5nel1iTIv12Tz8SpwfiQI97lW7:Y0BMulHHLfFUGynePV1YcMa
MD5:	D74C0EFAC1A9C59152B0325932D399F1
SHA1:	A472EADB5B431A4EF40E78ED79EAED9BB8FC8135
SHA-256:	E8BEDFBC203B2D09457D44A4DDFAADFB770D637E332F41487438FA9A7F5352F5
SHA-512:	8B54060E0A7FA219FB96ADA3C4BEAE832727540D8872A231F71C2A0CDDC3ABAF061EB2687595BE3F4FBFD996BBE0488F44E1E042B28C2AAA45D51F03D0B4E689
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...U...S.............PLTE..............................c......u.e....(*. !.........5...\P.....................................!#..........$'.........."#npl............n+[.p...................>.....:.sE.vzS.,......................................l`..............................................................Yf.......HV..........................................S`............BP.....]...........................MZN..........".................G...............<.^j.........v........$eq/kwV..N..W.....9r\|b.....Bx..327..J~.P...z........GD..................]..........b...]j......q...................;...z..k.....!...\|........................k..............3............f..z....>........[......}......l...........?......5...iu.v...y{y...S....52.....~....[_^#.[..T....J...@tRNS.......%... ..x....O....r.Z..,....I..h..[.z..=.........r.......p-.....SIDATx...1k.0..aA....z...=.dV....f..]P.k.\.O....$.......L...a8..<......6...{To.b.].K.:.du.H@.u.....K..}..Uh

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	508452
Entropy (8bit):	4.46238067016295
Encrypted:	false
SSDEEP:	6144:rmWdoPMvAeE5zTna8cPcCrLOXw3lrffo6kNEbQeFnuN0cdav6XDdavg:rmWHAeaezr4t6bFnuNF
MD5:	46C77FCDDD805946E9AD1753A197659F
SHA1:	242A0CC2758333933EDA460E12F1C3E12B5AF25F
SHA-256:	28A090261B3FCC9C576799D820968CDF2FE60F77328DC0E00D3A2BA7250A804F
SHA-512:	EAAFD8186BEAF5BFBFF61B8D3DEB94B30EB29656AA86D2B25C2D725F1ED9D3C984B3418C9AD55EAF3FB60B9F79D069BE85D1BAD47785058CB0DDDBAA93D1110F
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/vendor/dexie.js. * js/functions.js. * js/config.js. * js/crypto.js. * js/account.js. * js/security.js. * js/two-factor-auth.js. /../. * Dexie.js - a minimalistic wrapper for IndexedDB. * ===============================================. . By David Fahlander, david.fahlander@gmail.com. . Version 3.2.1.meganz, 2023-06-29T11:23:08.477Z. . https://dexie.org. . Apache License Version 2.0, January 2004, http://www.apache.org/licenses/. */..(function (global, factory) {.typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :.typeof define === 'function' && define.amd ? define(factory) :.(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, global.Dexie = factory());.})(this, (function () { 'use strict';..const _global = typeof self !== 'undefined' ? self :. typeof window !== 'undefined' ? window :. global;..const keys = Object.keys;.const isArray = Array.isArray;.if (typeof

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	393442
Entropy (8bit):	4.47914490512063
Encrypted:	false
SSDEEP:	3072:W77hlyxxeBOZbIxbjYwMy5mAoPLJgTxbMWI6wvYxf:pxTIxHYwMy5mAMJgTKjrm
MD5:	862AE0B76F9638011A79A2FC0A6F88CC
SHA1:	D3883A443A8200E4724F3F844055D90336B4A776
SHA-256:	E1F30FF0208B23154355D46D096FE4DC0903B6D61F3E1B940CD2BC8FD68FF723
SHA-512:	D676C771B553F441EC266A52A3C0D753F3A9290AA28F883B2D41BC536A3D906826AEE19743DE856D01631247CD77B9EC50301E9450C6365A6C4CE967C975CD80
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/fm/filemanager.js. * js/fm/utils.js. * js/fm/megadata.js. * js/fm/megadata/account.js. * js/fm/megadata/contacts.js. * js/fm/megadata/filters.js. * js/fm/megadata/menus.js. */..function FileManager() {. "use strict";.. this.logger = new MegaLogger('FileManager');. this.columnsWidth = {. cloud: Object.create(null),. inshare: Object.create(null),. outshare: Object.create(null). };.. this.columnsWidth.cloud.fav = { max: 50, min: 50, curr: 50, viewed: true };. this.columnsWidth.cloud.fname = { max: 5000, min: 180, curr: '100%', viewed: true };. this.columnsWidth.cloud.label = { max: 130, min: 80, curr: 80, viewed: false };. this.columnsWidth.cloud.size = { max: 160, min: 100, curr: 100, viewed: true };. this.columnsWidth.cloud.type = { max: 180, min: 130, curr: 130, viewed: true };. this.columnsWidth.cloud.timeAd = { max: 180, min: 130, curr: 130, viewed: true };. this.columnsWidth.cloud.timeMd =

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	393442
Entropy (8bit):	4.47914490512063
Encrypted:	false
SSDEEP:	3072:W77hlyxxeBOZbIxbjYwMy5mAoPLJgTxbMWI6wvYxf:pxTIxHYwMy5mAMJgTKjrm
MD5:	862AE0B76F9638011A79A2FC0A6F88CC
SHA1:	D3883A443A8200E4724F3F844055D90336B4A776
SHA-256:	E1F30FF0208B23154355D46D096FE4DC0903B6D61F3E1B940CD2BC8FD68FF723
SHA-512:	D676C771B553F441EC266A52A3C0D753F3A9290AA28F883B2D41BC536A3D906826AEE19743DE856D01631247CD77B9EC50301E9450C6365A6C4CE967C975CD80
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-16_e1f30ff0208b23154355d46d096fe4dc0903b6d61f3e1b940cd2bc8fd68ff723.js
Preview:	/* Bundle Includes:. * js/fm/filemanager.js. * js/fm/utils.js. * js/fm/megadata.js. * js/fm/megadata/account.js. * js/fm/megadata/contacts.js. * js/fm/megadata/filters.js. * js/fm/megadata/menus.js. */..function FileManager() {. "use strict";.. this.logger = new MegaLogger('FileManager');. this.columnsWidth = {. cloud: Object.create(null),. inshare: Object.create(null),. outshare: Object.create(null). };.. this.columnsWidth.cloud.fav = { max: 50, min: 50, curr: 50, viewed: true };. this.columnsWidth.cloud.fname = { max: 5000, min: 180, curr: '100%', viewed: true };. this.columnsWidth.cloud.label = { max: 130, min: 80, curr: 80, viewed: false };. this.columnsWidth.cloud.size = { max: 160, min: 100, curr: 100, viewed: true };. this.columnsWidth.cloud.type = { max: 180, min: 130, curr: 130, viewed: true };. this.columnsWidth.cloud.timeAd = { max: 180, min: 130, curr: 130, viewed: true };. this.columnsWidth.cloud.timeMd =

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (411)
Category:	dropped
Size (bytes):	477018
Entropy (8bit):	4.998644602892811
Encrypted:	false
SSDEEP:	12288:DDdHCcmMj/W/CCk/QRzbrVDDdRwdBvemHFgym1l28hW:DDdHCcmMj/W/CCkIVDDdRkZ8hW
MD5:	B146B38ABF11526A32E89F65B7013583
SHA1:	15920AD87C5BBDFAAD2DE38DE3F2DFE3E1917817
SHA-256:	1F80FF7EA7CC787DBED8963B01C4F709DF888754E80F262D2E109E5A088A8F04
SHA-512:	67119AC86834D264724885C606E76011EE8295E22E9BDEE609C3FD17FB3C5B98017D0CF23611302756DEBCA2023DD6309649AD3B3D257E73CAA37ED4ECFB7B5D
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/vendor/jquery-ui.js. * js/vendor/jquery-ui-touch.js. * js/vendor/jquery.mousewheel.js. * js/scrolling.utils.js. * js/jquery.misc.js. * js/vendor/megaLogger.js. * js/vendor/jquery.fullscreen.js. * js/jquery-ui.extra.js. * js/utils/broadcast.js. * js/utils/polyfills.js. /../! jQuery UI - v1.12.1 - 2016-10-28.* http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/autocomplete.js, widgets/datepicker.js, widgets/menu.js, widgets/mouse.js, widgets/selectmenu.js, widgets/slider.js, effect.js, effects/effect-fade.js.* Copyright jQuery Foundation and other contributors; Licensed MIT */..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery"

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	366638
Entropy (8bit):	4.409789868294678
Encrypted:	false
SSDEEP:	6144:TKwQMLeMbpx6+FvGlyQSN2x9OSd+3CJOSdv+ya8aZulKCl5G:TKwQML3px6mNAOSd+3CJOSdv/lKCl5G
MD5:	1B0CF2A3CFBDD9345564A76224711A95
SHA1:	4ABC7C3B364CE8DCB7E067B5C4342C449EBFEC49
SHA-256:	4FD1C8F7E2F02FB9A57DCF5667DD968ED828FF048CE607FD73CBD530CF8A9DB2
SHA-512:	A75FB26B60246E9BC7DB5DE1191CABEBE04840A21151590CB99CC8A31D4BA7E4ACEFA380D4B6C9852B9EA74C5853499C85DE4A7D3DE17192A792D3584FBF6BBD
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/utils/media.js. * js/utils/megalite.js. * js/utils/network.js. * js/utils/splitter.js. * js/utils/test.js. * js/utils/timers.js. * js/utils/watchdog.js. * js/utils/workers.js. * js/utils/trans.js. * js/utils/webgl.js. * js/utils/subtitles.js. * js/utils/sets.js. /..function isStreamingEnabled() {. 'use strict';. // return !window.safari \|\| d;. return true;.}..function isMediaSourceSupported() {. 'use strict'; // https://caniuse.com/#feat=mediasource. return window.MediaSource && typeof MediaSource.isTypeSupported === 'function' && isStreamingEnabled();.}..function is_video(n) {. 'use strict';.. if (String(n && n.fa).indexOf(':8') > 0) {. // check whether it's an streamable video. return MediaAttribute.getMediaType(n);. }.. var ext = fileext(n && n.name \|\| n, true, true);.. return is_video.ext[ext];.}..is_video.ext = {. 'MP4': -1,. 'M4V': -1.};..if (!isMediaSourceSupported()) {. wi

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	786432
Entropy (8bit):	7.99973827580843
Encrypted:	true
SSDEEP:	12288:AJgQZ34B+Gqugi+RCEskMX8muCNdA6yQpAm2ZAfuMPTJl58SLmIgVhSx:k4B+G7eLA7vpSZ4uI0VhSx
MD5:	C0BC2815170396E7834BD3C3D75FB678
SHA1:	16C5D7869B8345F8D1E948779126B50789DA0DA2
SHA-256:	1B651DBAF5BF3558199C7D4FEC6085E8B717B78CAF09C22083680D7AE4D64CE6
SHA-512:	F5C9F117FA62771A540EA4D86CC3DC2F3C30CF7D91E4686BF6345B13E95F7A517B9C7F938EF4003F34E6968F2763FF14DE3741F8394C76287BF7EBA78D113D2D
Malicious:	false
Reputation:	low
Preview:	c.h.:.T..(h..h.%EU...\CH.,zP@....o.......g-d......5d.SQ.......?...).H...;2h.Z..ym`.pT.6.\.mT..e2..[n.w"4A]er.?........r;ctfWk....YqGzh.!.{ ...r.8P.rh6...^7`h........mCjD.+b..uws....CU.3.3z..H.n..2.gl....@..kj.E+.v<3>yDR#..\.F.:...=1<..\!.1......d#...h...\..WL.[....Y........a..\...\|.oT8...:;...f. .<....-.$....m.b.....].'.p..PL..hmX....\.2_.Xv..J.fq...x....(.IR.>......\|7.....i.V.7..u.Si../...I,9...6.zI.C...8..l.Z[.`...8m...;M.r.>x.j.OU.@.....4,....W.K+W!....q...Y............xMa..$...e].w."..lK.G.......<.G.n....YD.....e..>....lgP...........ixC....i..{.d.NI.\.WX.h........t[6c...a`e#......} ..........%..8ta....g.........4....U.....,Z.C%.3\.[_mM.%y.h........e%..\|....!'.I.....XM5DMK..\|+x....`..........Y..g.M.......9gn...ae.1~r.:M...\|(k...(...m..[....liS.5P.p...3..(.;...K...<....sZm.....2@sI....e.[:;......m...0......},....'. ..Tj?%.D:..m.yB........3.."N....?..g..S7;..`.....(_..Iy...z{.}..+..i..%.ADr.pg.&jt.S..K........R..wZ...q...;.-...EC

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	520394
Entropy (8bit):	4.598227277906457
Encrypted:	false
SSDEEP:	6144:6Y+0A3L+87xS7Hxaa6llJjUsuVHJXkZz17jwR5cYJi7v90hYjzUsUaPIeg1qT/qr:1fJIUsUaC1qyXN
MD5:	62F638B2C8C680614CA3299BD197CD21
SHA1:	9F653B9BD01F3F44CC1CCDF990B1F93EE30E1B95
SHA-256:	F739F1B788E1AA846C5AF53B37BF5835761D0F00A247EF0180F28EDB71797578
SHA-512:	5BA8DE15D3E94B09750FD4B8B223521F2DB4B6AA7B7A382951C2EE81FE111A8C52E5B89E5D0AE55AE70D77BB4DD36776B66941BCCF944A52504DA376F6785FBE
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/attr.js. * js/ui/nicknames.js. * js/mega.js. * js/megaPromise.js. * js/reqstatclient.js. * js/mDB.js. * js/mouse.js. * js/datastructs.js. * js/idbkvstorage.js. * js/sharedlocalkvstorage.js. * js/tlvstore.js. * js/vendor/nacl-fast.js. /../. mega.attr.* related code. /..(function _userAttributeHandling(global) {. "use strict";.. var ns = Object.create(null);. var _inflight = Object.create(null);. var logger = MegaLogger.getLogger('user-attribute');. var ATTRIB_CACHE_NON_CONTACT_EXP_TIME = 2 60 * 60;. var REVOKE_INFLIGHT = !1; // Lyubo is not happy so disabled for now :).. var ATTR_REQ_CHANNEL = {. 'keyring': 6,. '!authring': 6,. '!authRSA': 6,. '!authCu255': 6,. '+puCu255': 6,. '+sigCu255': 6,. '+puEd255': 6,. '+sigPubk': 6. };. const DEBUG = window.d > 2;.. // Attribute types (scope). ns.PUBLIC = 1;. ns.PRIVATE = -1;. ns.PRIVATE_UNE

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (426)
Category:	dropped
Size (bytes):	288323
Entropy (8bit):	4.99015021232412
Encrypted:	false
SSDEEP:	1536:dxQo7xcr5XFubR2y067j3tv6/so20di+bs6LLnHc1SPOKpmcAkJHvZGr6+ynfRb8:piD4ro6crBiUr/QU8R80
MD5:	99F5DBF9C95EA87D8BF839159900079A
SHA1:	1F0B1D8742F770D79E0988156FE1CE7232422C3E
SHA-256:	FA06E14B2BAA149CD25CE0A79E30707CFCB371EC261A2B543075C519E35562AF
SHA-512:	7A688C521612CB9D3C03164D3A333C566E85D90918EE225DF845FE616B3EFFE5B413ED1E726104CB068BED4DF551AE7693AFC22CD3E1348B84D478BAAB5EC709
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * css/share-dialog.css. * css/popups.css. * css/data-blocks-view.css. * css/recovery.css. * css/settings.css. * css/media-print.css. * css/affiliate-program.css. * css/backup-center.css. * css/top-menu.css. * css/context-menu.css. * css/tables.css. * css/recents.css. * css/transfer-widget.css. * css/components/fm-left-pane.css. * css/components/info-panel.css. * css/chat-bundle.css. * css/topbar.css. * css/notification-banner.css. */...mega-dialog.share-dialog{..border-radius:var(--border-radius);..height:auto;..min-height:10px;..overflow:hidden;..width:560px.}..mega-dialog.share-dialog .share-dialog-bottom{..-webkit-padding-end:0;..background:var(--surface-grey-1);..padding-inline-end:0.}..mega-dialog.share-dialog>header{..padding-bottom:8px.}..mega-dialog.share-dialog .share-dialog-top{..padding:0 42px.}..mega-dialog.share-dialog .share-dialog-top-body{..padding-bottom:16px;..position:relative.}..mega-dialog.share-dialog .share

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	368437
Entropy (8bit):	4.910340747077972
Encrypted:	false
SSDEEP:	6144:4VODrMODVlmouqcIYs1leKEnS6f1Q63NThnsgY7qdcJJb2Gy:xcE1wnsgYedc7b2Gy
MD5:	30EAFDD95F1D23F1CD4B7A28527C3E98
SHA1:	B82C4263A5F0A590F07C6AB681FB5F4920438117
SHA-256:	E703EA956D39915B306A6FE9289E758E6D0EC377843D7A543A6B1A8B7A6B05C2
SHA-512:	3EFC343D984E167815534F31081A713880DA31394DD096676FF39364CE6C38EA626B76FDD8DB6D9E12D604CD0656356AD1D96B8875E780F64FB2F20506144995
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/lang/en_e703ea956d39915b306a6fe9289e758e6d0ec377843d7a543a6b1a8b7a6b05c2.json
Preview:	{. "14": "Confirm deletion",. "15": "You are about to permanently remove all items from your Rubbish bin.",. "16": "Internal error",. "17": "Transfer quota exceeded",. "18": "Too many connections for this download",. "19": "Login session expired or invalid",. "22": "File no longer exists",. "23": "File no longer accessible",. "24": "Decryption error",. "2fa_already_enabled": "Two-factor authentication (2FA) has already been enabled. To disable, go to Settings > Security > 2FA.",. "2fa_menu": "Two-factor authentication (2FA)",. "34": "Warning:",. "47": "Oops, something went wrong. Sorry about that.",. "55": "Read-only",. "56": "Read and write",. "57": "Full access",. "58": "Download",. "60": "Share",. "61": "Rename",. "62": "Move",. "63": "Copy",. "68": "Create folder",. "71": "Add contact",. "78": "Yes",. "79": "No",. "81": "OK",. "82": "Cancel",. "83": "Remove",. "85": "Reload",. "86": "Nam

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	459681
Entropy (8bit):	4.438584921013351
Encrypted:	false
SSDEEP:	6144:T2ALhdIXuf1Sj9xLbFWgEMf3sJGfHfUTNHvZeNs80ptMJY:/fetWgeTNHvZeNs9T
MD5:	9505691742757F333E00EAAE146A57CC
SHA1:	79B6B6345505A89288690226FA9326C4657C92C0
SHA-256:	3A85D86EE65B0EA458F2D41270F2589EE1875995E684C8EFFF49B59F155EFD79
SHA-512:	E4B63353241D06756E5CD0865EF5C5BAC090F5591577C87741ED548EA41F6F728BFA287FECE513EAAB73C483115A327052E2E4320256A197C1DC832AAB5BB4F9
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-17_3a85d86ee65b0ea458f2d41270f2589ee1875995e684c8efff49b59f155efd79.js
Preview:	/* Bundle Includes:. * js/fm/megadata/nodes.js. * js/fm/megadata/openfolder.js. * js/fm/megadata/render.js. * js/fm/megadata/render-breadcrumbs.js. * js/fm/megadata/shares.js. * js/fm/megadata/sort.js. * js/fm/megadata/transfers.js. * js/fm/megadata/tree.js. * js/fm/megadata/reset.js. * html/js/megasync.js. * js/fm/linkinfohelper.js. * js/fm/affiliatedata.js. * js/eaffiliate.js. * js/fm/affiliateRedemption.js. * js/ui/megaGesture.js. */..(function(global) {. "use strict";. const delInShareQueue = Object.create(null);. const delUINode = tryCatch(h => removeUInode(h));.. const clearIndex = function(h) {. if (this.nn && h in this.nn) {. delete this.nn[h];. }. if (h in this.u) {. this.u[h].c = 0;. }. if (this.su.EXP && h in this.su.EXP) {. delete this.su.EXP[h];. }. };. const delNodeVersions = function(p, h) {. const v = fileversioning.getVersionHandles(h);..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	466876
Entropy (8bit):	4.221709309994807
Encrypted:	false
SSDEEP:	3072:fX9/XYDVPV++yn2jUAqgj7yJWRLolpgvhKMikRRdJVb1khDNArc9uR:fX9/IDVPY+y2jUAqgfycNR
MD5:	6924674078FE950FC4F0C9AB0A646A4A
SHA1:	5FEA3FD35CE2C0985A8821EFD334826DD221AE8A
SHA-256:	E18287A396F86D96FBA5714F7BB47E6322364ACC3BDCB9A6ED94F382CA3DF966
SHA-512:	B07B5D9EA9540710E9AB00AA37E46665DE6C2B5738ABDCD641F605B93E508EB3610FAAE65ED69C5DE1B9358BB5645BD44783A37E5D4E1A8933C1F84382C3BAFA
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/fm/affiliate.js. * js/fm/vpn.js. * js/fm/gallery/helpers/GalleryTitleControl.js. * js/fm/gallery/helpers/GalleryEmptyBlock.js. * js/fm/gallery/helpers/GalleryEmptyPhotos.js. * js/fm/gallery/helpers/GalleryEmptyImages.js. * js/fm/gallery/helpers/GalleryEmptyVideos.js. * js/fm/gallery/helpers/GalleryEmptyFavourites.js. * js/fm/gallery/helpers/GalleryEmptyDiscovery.js. * js/fm/gallery/gallery.js. * js/fm/albums/Albums.js. * js/fm/albums/AlbumTimeline.js. * js/ui/notificationBanner.js. */..// Note: Referral Program is called as affiliate program at begining, so all systemic names are under word affiliate.// i.e. affiliate === referral..function affiliateUI() {.. 'use strict';.. // Prevent ephemeral session to access. if (u_type === 0) {. msgDialog('confirmation', l[998], l[17146]. + ' ' + l[999], l[1000], function(e) {. if (e) {. loadSubPage('register');. return false;.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 560, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3414
Entropy (8bit):	7.671549953375806
Encrypted:	false
SSDEEP:	48:Q+mVrNtZqO6arLK6xmJXkvR+A/VGeJsU4Odns1IYTKgH2K8zigZHUo50tmvjq:Q+erN3qO6aTUkwWVGH4s1wgHcUUv+
MD5:	D2AAE9F202C03E46C66D8319203BB480
SHA1:	242AC3ECB0C1A0AF0E8049E1BFAB919A110F4E7A
SHA-256:	C5FE532B638805CE8673CF9967EC017C1C197CC3027038CAA7951A3CFB45B070
SHA-512:	FA7A743192ED7A6E054C78A56A7F117771002FBF356693EE14614B7332D47E80CEB449F7851AAF2E64992D7B0CBB615EE5539CF036D80AE71E88DBCDD8FEDA6D
Malicious:	false
Reputation:	low
URL:	https://mega.nz/loading-sprite_v4.png
Preview:	.PNG........IHDR.......0......h%^....PLTE.....................................................................................................................................39......333..........29.9A....GG.......29666.4=.1;....28333..........19.19..........1;.7>...444.19.......18....28...444....18.29.........999..........18.18...333....18.18.2:....28.28.......19...333.18333....19.18...333...444.29.19666...........@E.`d.?D.06.......pt. &.v.,...{tRNS.&M#.!.............?0H..5'w.C:........{iH93).....@=.....(.......~XW0+........cbZOE7'$..........vqjiP:70......_MD8#.G!..[-....IDATx..kv.0..........[3...iNO........JB6....8+......*D....%..KP.Kp_&.2.?....B3..~Vx?.'.........P....,..z..%......p.J..S....E?...p..x...>...C...Ex...$..jT.g..T....8....w..u.k }l..-.k.21.q.......7G..E`....w.M.[...o......k...7..U....m.98.../.....~Ww...20..;Y........E...G$.%....u...7\.......$..n.=0.\.=\..4..^K@..h..Lp!....%.....4..^...te....x.......L.5.W?I.....3...ZL...................a/.j_.^<v

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	8787
Entropy (8bit):	7.532028713005772
Encrypted:	false
SSDEEP:	192:QQ9CzWgjVU7tlCZR7WzmvEIOT7XJ+rgRNn:X9CzWgj+5loFo7ygL
MD5:	3F788625BBC4F87885B982ED70876DCB
SHA1:	D4155B22D2E63B149B42E238AB5C2788199A2F99
SHA-256:	741F05BCA4428E5880A44222F68A2F50172860F43B09ABB57E3DC12D3CE5766D
SHA-512:	80FCE5A6FE9AFCEBC834B8F324BBABB368AAF5BD4CB4753CD4B675B18D657A988F91806119844AB68AB58FFDC25B2F27E6F8728487E6CCDFEA82FA6F0115CCD8
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af
Preview:	GIF89a . ..........T..z...............p..^.................X..P........N.......j........v..f.................b.....D....J.@.0.,.&.6.:..............."...............................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH....K.Al:..."t:.JV..( lF........t:\|-C3..z.>....F.Z?....wE...."....P.......P........P......N.......O.......M....v.M......M......D.....C.................................................Cc.....0H@...Z,0H.....P`.xXF...."..`...V.`.".....@.Ca....2t.`.D.D.,5.AT...!A.....I......r....n..@...?Y....+N...<.....O&.,p.`...,....!.......,.... . ....@.pH..0.J..x @...@hB...t.M.B.C#.......O...f...7.;.yh..evw%.{T....r".........B.........`.......`........`....P.S......_.......S.....R.....Q...m.D.....C....................B............X`O.>..=........I..B..z.q`.0.....Y.q1......2..%..b.T.a...X...cF.BP.d..`...:a..........E..'.K(HH"*.E..+j.\..e(...Z8.S....L.@.vE.=A..!.......,.... . ....@.pH.p0.FH.x ...t:\`...&4.....bA..(..F

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	downloaded
Size (bytes):	408437
Entropy (8bit):	5.0512622264491
Encrypted:	false
SSDEEP:	12288:HSOdxMu1puYcYmD4/cZQ/coLGVFyCJTiPf7AqqArR:yAuVYmD4/cZQ/coLGVFyCJTiPf7A8rR
MD5:	A3EC158045B2B11DA1FAB8902A4F3C0F
SHA1:	AC5ADB201614A25E2E8AF95068531757623CBBA7
SHA-256:	3A42998E6F7318EDD6F6EA0568CC7824C9273044F89E2C38AE326FC554AD5A84
SHA-512:	302043C42FE340BA33B093D426454BADD90A1AD72BD5D0AF86596A57899F361740939432AF1CC92EED699172DD4AF08A3489D1B748CD720F2951B2D9C1FBD210
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-1_3a42998e6f7318edd6f6ea0568cc7824c9273044f89e2c38ae326fc554ad5a84.js
Preview:	/* Bundle Includes:. * sjcl.js. * nodedec.js. * js/vendor/jquery.js. * js/jquery.protect.js. /../* @fileOverview Javascript cryptography implementation.. . Crush to remove comments, shorten variable names and. * generally reduce transmission size.. . @author Emily Stark. * @author Mike Hamburg. * @author Dan Boneh. * . * Version 1.0.3. /../jslint indent: 2, bitwise: false, nomen: false, plusplus: false, white: false, regexp: false /./global document, window, escape, unescape, module, require, Uint32Array /../* @namespace The Stanford Javascript Crypto Library, top-level namespace. /.var sjcl = {. /* @namespace Symmetric ciphers. /. cipher: {},.. /* @namespace Hash functions. Right now only SHA256 is implemented. /. hash: {},.. /* @namespace Key exchange functions. Right now only SRP is implemented. /. keyexchange: {},. . /* @namespace Block cipher modes of operation. /. mode: {},.. /* @namespace Miscellaneous. HMAC and PBKDF2. */. misc: {},

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	393216
Entropy (8bit):	7.999483229398062
Encrypted:	true
SSDEEP:	6144:7ooYSE2HtgNJybecWXa3VJnjIGgN/4DagKC8lfRlFAXJNIi1L+egJMkKS1:7oBiHt0gbecWXyjngN/4DavVR45N7L3I
MD5:	CADC562A3B12A128AC707D20960E44AA
SHA1:	BBCFA07624307B4BB76A7D1954A1920DB44697D7
SHA-256:	973779E24233D798EB14164EBA5EA242A5799E832E849F6D1335E09A5AC92060
SHA-512:	620C5520249D622660050369801EC40F8E0BDF0174BDE610FC61A69916F1405351165454B5CF928253F55E83E3E59406B402886DAB962A29BCD5047BF4AE5641
Malicious:	false
Reputation:	low
Preview:	.O{v..p..`..."0..]....n..u=D.-e.......V1....?...0c...u./..y.+.@#..6'...K.5L:@)....7.!....ZP.).....=W..\|..qo.r..!.S.....%..c.oK....._D...O...C..@.q[.....Y[U...a(...q;eY.......7..`C.`....."T84.A.6.Ra.j.j...oic.......F.s7u...9..s.."..U....P.r3..G'.......@..{^PLXE.j...M+H.1.,..)..D......K>....D..r.T.y...R....Z...);....{...b.M...DJ...N.".f#.(...V.E..D9.otRK.Id._$......p.-.uT.?S...a....T@.S.....)SO.j..k...V..HA8)..dC...y..Pl.P:.oV.4.......M..FON.z.3...a.8r....t.....js.........&...q)E....U...6...-....N .E../y.....R.W/\..(!.5D#...IE:]L~Ib.............A...?..^.6...lL;...A.......'....a...wn.ee..............S......H((._L\LG....M........oK..{t..c..w.L6&..oK...}....a4..%_...^...Y...3.uv[..+e.rX..H..h]R.I...]>.(.c. ..W..#....]-cqy=m.O.5.!.M.%.wg)..S.>..d..6.x.x.>...vAS..5f..>..S1.L.;V.Yt......ls....m...O.i.%<...\|a...u_*.z\H/s...pPAsk.....}(..u..t.."`.d.....S...1....+G......+A........{'@8.....G...I..Phm..5'.!...P..(....?...M...{IV!.`.JW=.p.r..

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	511137
Entropy (8bit):	4.541735740658581
Encrypted:	false
SSDEEP:	6144:WIah58cFfgGHM2MNVdtqFHFuTZUfe9BxJIrt1NFZ6A/:WI+3HM2MNVMFuTZUfaBxqrt1Nt
MD5:	041A2A83421A4C1A4DE7FE12A2265BD5
SHA1:	C5A312AD6256EED52DE2A25A252F5437126998C9
SHA-256:	C1031F4CCA0D2CAD1A9074CD0879CA29D084E2EB528787879D9134C8FA495250
SHA-512:	594B4C2CD2BD1EA47F5ED9CCD46C32044DC29D3A63BC523AB499CEC0906E5FE905AA26E8536154AEDD6A9EBF210E32B584EB9F8934C6DE99E4EB1F44E92C44F1
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/fm/fileTextEditor.js. * js/fm/textEditorUI.js. * js/transfers/xhr2.js. * js/transfers/queue.js. * js/transfers/utils.js. * js/transfers/meths/cache.js. * js/transfers/meths/memory.js. * js/transfers/meths/filesystem.js. * js/transfers/downloader.js. * js/transfers/decrypter.js. * js/transfers/download2.js. * js/transfers/meths.js. * js/transfers/upload2.js. * js/transfers/reader.js. * js/transfers/zip64.js. * js/transfers/cloudraid.js. * index.js. * js/filetypes.js. /../* This class is the core of text file editor.. * It will handle uploading/downloading of data. * and performs memory/bandwidth optimization..*/..mega.fileTextEditor = new function FileTextEditor() {. "use strict";. // the maximum slots in memory for edited files. // we have the maximum editable file size = 20MB --> max Total = 100MB. var maxFilesInMemory = 5;.. var filesDataMap = Object.create(null);. var slotIndex = 0;. var slotsMap =

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	520394
Entropy (8bit):	4.598227277906457
Encrypted:	false
SSDEEP:	6144:6Y+0A3L+87xS7Hxaa6llJjUsuVHJXkZz17jwR5cYJi7v90hYjzUsUaPIeg1qT/qr:1fJIUsUaC1qyXN
MD5:	62F638B2C8C680614CA3299BD197CD21
SHA1:	9F653B9BD01F3F44CC1CCDF990B1F93EE30E1B95
SHA-256:	F739F1B788E1AA846C5AF53B37BF5835761D0F00A247EF0180F28EDB71797578
SHA-512:	5BA8DE15D3E94B09750FD4B8B223521F2DB4B6AA7B7A382951C2EE81FE111A8C52E5B89E5D0AE55AE70D77BB4DD36776B66941BCCF944A52504DA376F6785FBE
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-6_f739f1b788e1aa846c5af53b37bf5835761d0f00a247ef0180f28edb71797578.js
Preview:	/* Bundle Includes:. * js/attr.js. * js/ui/nicknames.js. * js/mega.js. * js/megaPromise.js. * js/reqstatclient.js. * js/mDB.js. * js/mouse.js. * js/datastructs.js. * js/idbkvstorage.js. * js/sharedlocalkvstorage.js. * js/tlvstore.js. * js/vendor/nacl-fast.js. /../. mega.attr.* related code. /..(function _userAttributeHandling(global) {. "use strict";.. var ns = Object.create(null);. var _inflight = Object.create(null);. var logger = MegaLogger.getLogger('user-attribute');. var ATTRIB_CACHE_NON_CONTACT_EXP_TIME = 2 60 * 60;. var REVOKE_INFLIGHT = !1; // Lyubo is not happy so disabled for now :).. var ATTR_REQ_CHANNEL = {. 'keyring': 6,. '!authring': 6,. '!authRSA': 6,. '!authCu255': 6,. '+puCu255': 6,. '+sigCu255': 6,. '+puEd255': 6,. '+sigPubk': 6. };. const DEBUG = window.d > 2;.. // Attribute types (scope). ns.PUBLIC = 1;. ns.PRIVATE = -1;. ns.PRIVATE_UNE

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	10479
Entropy (8bit):	4.800568278529105
Encrypted:	false
SSDEEP:	192:lnNZIkugZ5/5WTdnj1DlOqQxu33CYu8I//Y//dluMX3Lb7/H8/HCn3r47Zf331Is:NNZIrgZ5/wdnj1BOqmu3yYu8I/Q/Vlu7
MD5:	DED8344B891B7109CEEB7074F30385EA
SHA1:	ADE46370BE55CAD024A3538204944B3F3BFF7138
SHA-256:	077437BA5398F2997EFEA39E55F89EADD473667177ABA0B14A48C8B57C60AF43
SHA-512:	C3306140EEF7B0EA5681B7604C8640E19D7E1FE987C80230674ECC63AFCDD9C84953CE7BCC3B606CBCB2B09626DAE1C5C473AD25F729390B4D9856A8F375247D
Malicious:	false
Reputation:	low
Preview:	.@media only screen and (min-width:783px){..anim.img1,.anim.img-wrap:after,.anim.img-wrap:before,.bottom-page.anim,.startpage.top-notice,.top-to-bott.anim{..opacity:0;..-webkit-transition:all .2s ease-in-out;..transition:all .2s ease-in-out;..-webkit-transition-timing-function:ease-in-out;..transition-timing-function:ease-in-out.}..start-animation .anim.img1,.start-animation .anim.img-wrap:after,.start-animation .anim.img-wrap:before,.start-animation .startpage.top-notice,.top-to-bott.anim{..opacity:0.}..start-animation .anim.i2,.start-animation .anim.img-wrap:after,.start-animation .anim.img-wrap:before{..-webkit-animation-delay:.5s;..animation-delay:.5s;..-webkit-animation-duration:.5s;..animation-duration:.5s;..-webkit-animation-fill-mode:forwards;..animation-fill-mode:forwards;..-webkit-animation-name:top-fade-in;..animation-name:top-fade-in.}..top-to-bott.anim{..-webkit-animation-duration:.15s;..animation-duration:.15s;..-webkit-animation-fill-mode:forwards;..animation-fill-mode:f

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	459681
Entropy (8bit):	4.438584921013351
Encrypted:	false
SSDEEP:	6144:T2ALhdIXuf1Sj9xLbFWgEMf3sJGfHfUTNHvZeNs80ptMJY:/fetWgeTNHvZeNs9T
MD5:	9505691742757F333E00EAAE146A57CC
SHA1:	79B6B6345505A89288690226FA9326C4657C92C0
SHA-256:	3A85D86EE65B0EA458F2D41270F2589EE1875995E684C8EFFF49B59F155EFD79
SHA-512:	E4B63353241D06756E5CD0865EF5C5BAC090F5591577C87741ED548EA41F6F728BFA287FECE513EAAB73C483115A327052E2E4320256A197C1DC832AAB5BB4F9
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/fm/megadata/nodes.js. * js/fm/megadata/openfolder.js. * js/fm/megadata/render.js. * js/fm/megadata/render-breadcrumbs.js. * js/fm/megadata/shares.js. * js/fm/megadata/sort.js. * js/fm/megadata/transfers.js. * js/fm/megadata/tree.js. * js/fm/megadata/reset.js. * html/js/megasync.js. * js/fm/linkinfohelper.js. * js/fm/affiliatedata.js. * js/eaffiliate.js. * js/fm/affiliateRedemption.js. * js/ui/megaGesture.js. */..(function(global) {. "use strict";. const delInShareQueue = Object.create(null);. const delUINode = tryCatch(h => removeUInode(h));.. const clearIndex = function(h) {. if (this.nn && h in this.nn) {. delete this.nn[h];. }. if (h in this.u) {. this.u[h].c = 0;. }. if (this.su.EXP && h in this.su.EXP) {. delete this.su.EXP[h];. }. };. const delNodeVersions = function(p, h) {. const v = fileversioning.getVersionHandles(h);..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 560, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3414
Entropy (8bit):	7.671549953375806
Encrypted:	false
SSDEEP:	48:Q+mVrNtZqO6arLK6xmJXkvR+A/VGeJsU4Odns1IYTKgH2K8zigZHUo50tmvjq:Q+erN3qO6aTUkwWVGH4s1wgHcUUv+
MD5:	D2AAE9F202C03E46C66D8319203BB480
SHA1:	242AC3ECB0C1A0AF0E8049E1BFAB919A110F4E7A
SHA-256:	C5FE532B638805CE8673CF9967EC017C1C197CC3027038CAA7951A3CFB45B070
SHA-512:	FA7A743192ED7A6E054C78A56A7F117771002FBF356693EE14614B7332D47E80CEB449F7851AAF2E64992D7B0CBB615EE5539CF036D80AE71E88DBCDD8FEDA6D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......0......h%^....PLTE.....................................................................................................................................39......333..........29.9A....GG.......29666.4=.1;....28333..........19.19..........1;.7>...444.19.......18....28...444....18.29.........999..........18.18...333....18.18.2:....28.28.......19...333.18333....19.18...333...444.29.19666...........@E.`d.?D.06.......pt. &.v.,...{tRNS.&M#.!.............?0H..5'w.C:........{iH93).....@=.....(.......~XW0+........cbZOE7'$..........vqjiP:70......_MD8#.G!..[-....IDATx..kv.0..........[3...iNO........JB6....8+......*D....%..KP.Kp_&.2.?....B3..~Vx?.'.........P....,..z..%......p.J..S....E?...p..x...>...C...Ex...$..jT.g..T....8....w..u.k }l..-.k.21.q.......7G..E`....w.M.[...o......k...7..U....m.98.../.....~Ww...20..;Y........E...G$.%....u...7\.......$..n.=0.\.=\..4..^K@..h..Lp!....%.....4..^...te....x.......L.5.W?I.....3...ZL...................a/.j_.^<v

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	38615
Entropy (8bit):	4.301692764163655
Encrypted:	false
SSDEEP:	384:NRvNikzCFSc96PJZqekq5ikh0t4xTx0x81m4l0APxfmrcAXAe8PG7z:NPfc96PJP5i0t08jeaUweT
MD5:	04C8B39A7211E91C390F3E7C18730EC6
SHA1:	B8D9EE0B2B7C96A0AAB18B05EE2D38EDA1823C3C
SHA-256:	7066FB3A9439AC4B7AB62485A20EEF0196E9D0EC2A4038302F3EEDA11453F2C5
SHA-512:	B7F63A2E238D6D6A0E25CD8A290FB95B3B06FC874369675E22230DE63AEC729D279133488F076CEBFAA8C31131714402B580447A19C8EB3AAE4FA47B84DD7843
Malicious:	false
Reputation:	low
Preview:	var dlpage_ph;.var dlpage_key;.var fdl_filename, fdl_filesize, fdl_key, fdl_url, fdl_starttime;.var dl_import=false;.var dl_attr;.var dl_node;.var fdl_queue_var=false;.var fileSize;.var dlResumeInfo;.var mediaCollectFn;.var maxDownloadSize = Math.pow(2, 53);..function dlinfo(ph,key,next).{. $('.widget-block').addClass('hidden');. loadingDialog.show();.. dlpage_ph = ph;. dlpage_key = key;.. if (!is_mobile) {. watchdog.query('dlsize', 2100, true).catch(nop);. }.. if (dl_res) {. setupSingleDownloadPage(dl_res). .catch(tell);.. dl_res = false;. }. else {. // Fetch the file information and optionally the download URL. api.req({a: 'g', p: ph, ad: 1}). .then(({result}) => result). .always(setupSingleDownloadPage). .catch(tell);. }.. $(window).rebind('keydown.uikeyevents', function(ev) {. if (ev.keyCode === 27) {. $('.media-viewer-container', 'body').removeClass('fu

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	89334
Entropy (8bit):	5.030011932477186
Encrypted:	false
SSDEEP:	1536:jduSAhTTLJ/s726sp7o7X7a7c6sF7+1FC02nF/6adZStxNV5EnHGtMZtvBKji+2m:8SnF/d0xN0HGdwEiK
MD5:	6D753E3B8F0A6708723342C09083D500
SHA1:	F6B6BCAF47FA73A5B6D4724D68291809FE77EF7A
SHA-256:	56068F896874642289C7AEA7548F1A60D2E44CAEC8A95FF5AABCD0B8DDC1AACD
SHA-512:	B21C51741983E618EF402437D460CE9E91376E355EAEA762B7A8B08F70D40A8DB431ED90FD110AA93AEAB2CD163F8954198CE9207D6907F30B3710D87206CF30
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg width="160" height="160" viewBox="0 0 128 112" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><view id="icon-aftereffects-90" viewBox="0 0 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="50%" y1="0%" x2="50%" y2="95.436%" id="aac"><stop stop-color="#12002C" stop-opacity=".9" offset="0%"/><stop stop-color="#12002C" offset="100%"/></linearGradient><path id="aaa" d="M0 0h16v16H0z"/></defs><g fill="none" fill-rule="evenodd"><mask id="aab" fill="#fff"><use xlink:href="#aaa"/></mask><g mask="url(#aab)"><path d="M3 2h10c.184 0 .333.15.333.333v11.334c0 .184-.149.333-.333.333H3a.333.333 0 0 1-.333-.333V2.333C2.667 2.15 2.816 2 3 2Z" fill="#D8A1FF"/><path d="M3.333 2.5h9.334c.092 0 .166.075.166.167v10.666a.167.167 0 0 1-.166.167H3.333a.167.167 0 0 1-.166-.167V2.667c0-.092.074-.167.166-.167Z" fill="url(#aac)"/><path d="M9.812 8.127c.183 0 .248 0 .266-.007

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 182708, version 2.983
Category:	downloaded
Size (bytes):	182708
Entropy (8bit):	7.990125398423896
Encrypted:	true
SSDEEP:	3072:a+zq/3zkl+ciohnxbjroiZ/XPHi8Mo/Oqh/J41RZ7E/Aur2mmxuN/y424XqtjiJy:aYq/IlDfcipXf9h/sTE9lwuN524Xq9i4
MD5:	BD03A2CC277BBBC338D464E679FE9942
SHA1:	CBFF48BCE12E71565156BB331B0C9979746A5680
SHA-256:	983B0CAF336E8542214FC17019A4FC5E0360864B92806CA14D55C1FC1C2C5A0F
SHA-512:	A8FBC47ACA9C6875FC54983439687323D8E8DB4CA8F244ED3C77CA91893A23D3CFBD62857B1E6591F2BC570C47342EED1F4A6010E349EF1AC100045EF89CBFD0
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/fonts/Lato-Regular.woff2?v=6343dd45044b0726
Preview:	wOF2.............E....N..............................f.`..$..f........`..w.6.$..<......@.. ..=...o..9[.w.u.....A./..H"...t....v........%...I..?...mSV@...%%)yP..)...!........c........4+;........g..................................................................gKN..PqW.m.uD... .".{.bJ$SaZ}&.......C..@.......J.....t%}..rE.W15.V....5.Z.\]@..0..]F}C.)5oJFZ..f....,..OxJ.x...%.<...r.../....c......@]{....0..+..0..;..8h.:TZ^]..:.j.P).B.Vr.c........Q..6.F...I..5z.X.7>........P#810.d.j.<e..4..M..l......`h.H.4;.)rs@..y..(=.-..l.X.r4n\iw{. r...hQ.R...b.T..XHK&FK..1....<.(...Ks..R.R..M...>..8....X._.=.F.0.n+P&..`...b.{C...C.n.#........I..z.i.mF.........n,r.HM.(.6E.JxG.h...[.fa"...B.sHM".i.B....q..p.9R4........n.....h.B....t(....6<...F)V.C...M...T.....m)..f5l{.&.`!...i.4..$M;..i'+q.V.Y3.y....G.4F.CU.Vv...v.)...PC.N!O.4...RR.,..\...:...V...Y..T..x ..M.;..3{...Q9r...H..(..2H)Bj.h.UR....2.L$Q.J!..r. %EJ..4M=...P. .4.F.w..<i...c.S.).H.!.>,.. j.v4jn...0...;..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	7.999335827111899
Encrypted:	true
SSDEEP:	6144:a0HmFk44bJyuwcbC6jikrVE9NmaGnQzPTvmx:aic4MSoKMDvvmx
MD5:	187ADF0EC62D8FA2202D080D5B60395F
SHA1:	5028836C912B057551B6F3F4E85B7943240E2AE6
SHA-256:	70C8F6616ACF2C8A4C11B543808E10E7DF223F0D89167CCD9BE4DB5284BCA5A5
SHA-512:	B294C4A7B4BC10DDA5DB7C969659D0CA73AAA040AEECC1C130D77903FF5B98693BF4CA79C3FDB78067BD1B9C4A8DC06A2B01618726E6DE3D33C751A412EC9166
Malicious:	false
Reputation:	low
Preview:	RcV7....?5..J...b c{..g...<b.C~...I9..'...x....n...%..:.5i\5. ...\|...F.H.i,............i)=..........#O.@..}..?DO.......x..i...o.....`.8F..c.+........,......../.....\|....q.{...y...L......P.{..u9+.]...lE.en:.a......;.>x..b..* ....=.'.[.B../^4...:.{`..^;K..X......p?...F\|G4.......9.....S....&.'......&)..qP.s....zx77AIjf..rsm."...H..v................Tx.\|...0#........<jj0p.zW6,....HP.. Y=.....So..Pie._..\|w.XtFF._...Bz)O.......h./O..0........w2.3....N..\l.zK.K..2oR...H......5..R+..B}_...=.!....s.C..K .BL..DZ..j.i.Ce.L.3.F`p.sx../.........LG...N.*..."...02.`.roU.DG.a\|.he..\..&.....}.......>....:.........p`z;...Q.OU5..}........._$B9......#r...B..E..lOn8.>..a...^.i0...8A..&..n+.D..c.;..b\....5.'K..@Rr/..3..Sg......;.n...o..:{..<..\2..-...........EX.6M.=.5h.......~..<:g..U3.....S..2........io.>)B.7;T.8H..6E.758.....M.V..#.g...I....n.Hx..(%...t...^.v.w.D..4....W..ya.@.t%....].J..h.....rI..OD....aGMN..2..rd.i.-E/]>=k.D..g..mt..A.K...S6.?FY...j..O.I

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	500643
Entropy (8bit):	4.537605412549923
Encrypted:	false
SSDEEP:	12288:jwS1nnP/UiYKrAuLJYrHBLkiUD49AwF2RPYS8V8yZsAtaL:jwS1nnP/UiYKrAuLJqHBLkiUD49AwFCL
MD5:	7DBFCAA8EFBAE4F59909B31892076C23
SHA1:	3E31622305811BC6C9EB8DCD1D849F16583D2550
SHA-256:	187F230E32B9F5A8B7CCAEBDC95E13D34ABEFA2862E925B8A8BB1355AAB74BF0
SHA-512:	96F0A2969415C9E480A4486A799720AD12C4E4842459EC81B948119D0E84D040C922E7F82DE4E212A9696D5602B9AC2B3829630BEE352D8A9637AE1462BFC7FD
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/fm/properties.js. * js/fm/removenode.js. * js/fm/ufssizecache.js. * html/js/pro.js. * html/js/proplan.js. * html/js/planpricing.js. * html/js/propay.js. * html/js/propay-dialogs.js. * js/states-countries.js. * js/ui/miniui.js. * js/fm/achievements.js. /..(function _properties(global) {. 'use strict';.. /. Handles node properties/info dialog contact list content. * @param {Object} $dialog The properties dialog. * @param {Array} users The list of users to whom we're sharing the selected nodes. * @private. */. function fillPropertiesContactList($dialog, users) {.. var MAX_CONTACTS = 5;. var shareUsersHtml = '';. var $shareUsers = $dialog.find('.properties-body .properties-context-menu'). .empty(). .append('<div class="properties-context-arrow"></div>');.. for (var i = users.length; i--;) {. var user = users[i];. var userHandle = user.u \|

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	501735
Entropy (8bit):	4.644873658961265
Encrypted:	false
SSDEEP:	3072:mYPPFQhAbXUAre7lE2ljFYK0NuS6LyqfAgmu6SauG0aPSJvOmRX9MfJftHBoQaos:ZPFgAbH2pt7mHryeKUUORR/ZiH
MD5:	65E4920E82D92DACD169529CE43D38F0
SHA1:	D3616EF7E12F457C906FFCAC7802B48D6FD8A348
SHA-256:	153ED2950AD758D1645D036BCE30E293AE066BA6266E32E02DFA754B7BB34BFC
SHA-512:	07E54A0E7B0FBE5CF8D9DF52299B21A2AE166DDCC1BD0A1FAA8C259044A9D45F9BF97A0B9B0E9271074FE5C6326932578C76E2FD657AA6CD85856D41FBA54CD0
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/authring.js. * html/js/login.js. * js/ui/export.js. * html/js/key.js. * js/ui/simpletip.js. * js/useravatar.js. * html/js/bottompage.js. * js/filedrag.js. * js/thumbnail.js. * js/vendor/exif.js. * js/vendor/smartcrop.js. * js/vendor/jquery.qrcode.js. * js/vendor/qrcode.js. * js/ui/password-revert.js. * js/ui/publicServiceAnnouncement.js. * js/ui/megaInputs.js. * js/ui/megaInputs-underlinedText.js. * js/ui/megaInputs-textArea.js. * js/ui/megaInputs-currencyField.js. * html/js/developersettings.js. * html/js/repay.js. * js/ui/passwordReminderDialog.js. * js/metatags.js. * js/vendor/verge.js. /../. @fileOverview. * Storage of authenticated contacts.. /..var u_authring = { 'Ed25519': undefined,. 'Cu25519': undefined,. 'RSA': undefined };..var authring = (function () {. "use strict";.. /. @description. * <p>Storage of authenticated contacts.</p>. .

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	500643
Entropy (8bit):	4.537605412549923
Encrypted:	false
SSDEEP:	12288:jwS1nnP/UiYKrAuLJYrHBLkiUD49AwF2RPYS8V8yZsAtaL:jwS1nnP/UiYKrAuLJqHBLkiUD49AwFCL
MD5:	7DBFCAA8EFBAE4F59909B31892076C23
SHA1:	3E31622305811BC6C9EB8DCD1D849F16583D2550
SHA-256:	187F230E32B9F5A8B7CCAEBDC95E13D34ABEFA2862E925B8A8BB1355AAB74BF0
SHA-512:	96F0A2969415C9E480A4486A799720AD12C4E4842459EC81B948119D0E84D040C922E7F82DE4E212A9696D5602B9AC2B3829630BEE352D8A9637AE1462BFC7FD
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-11_187f230e32b9f5a8b7ccaebdc95e13d34abefa2862e925b8a8bb1355aab74bf0.js
Preview:	/* Bundle Includes:. * js/fm/properties.js. * js/fm/removenode.js. * js/fm/ufssizecache.js. * html/js/pro.js. * html/js/proplan.js. * html/js/planpricing.js. * html/js/propay.js. * html/js/propay-dialogs.js. * js/states-countries.js. * js/ui/miniui.js. * js/fm/achievements.js. /..(function _properties(global) {. 'use strict';.. /. Handles node properties/info dialog contact list content. * @param {Object} $dialog The properties dialog. * @param {Array} users The list of users to whom we're sharing the selected nodes. * @private. */. function fillPropertiesContactList($dialog, users) {.. var MAX_CONTACTS = 5;. var shareUsersHtml = '';. var $shareUsers = $dialog.find('.properties-body .properties-context-menu'). .empty(). .append('<div class="properties-context-arrow"></div>');.. for (var i = users.length; i--;) {. var user = users[i];. var userHandle = user.u \|

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (411)
Category:	downloaded
Size (bytes):	477018
Entropy (8bit):	4.998644602892811
Encrypted:	false
SSDEEP:	12288:DDdHCcmMj/W/CCk/QRzbrVDDdRwdBvemHFgym1l28hW:DDdHCcmMj/W/CCkIVDDdRkZ8hW
MD5:	B146B38ABF11526A32E89F65B7013583
SHA1:	15920AD87C5BBDFAAD2DE38DE3F2DFE3E1917817
SHA-256:	1F80FF7EA7CC787DBED8963B01C4F709DF888754E80F262D2E109E5A088A8F04
SHA-512:	67119AC86834D264724885C606E76011EE8295E22E9BDEE609C3FD17FB3C5B98017D0CF23611302756DEBCA2023DD6309649AD3B3D257E73CAA37ED4ECFB7B5D
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-2_1f80ff7ea7cc787dbed8963b01c4f709df888754e80f262d2e109e5a088a8f04.js
Preview:	/* Bundle Includes:. * js/vendor/jquery-ui.js. * js/vendor/jquery-ui-touch.js. * js/vendor/jquery.mousewheel.js. * js/scrolling.utils.js. * js/jquery.misc.js. * js/vendor/megaLogger.js. * js/vendor/jquery.fullscreen.js. * js/jquery-ui.extra.js. * js/utils/broadcast.js. * js/utils/polyfills.js. /../! jQuery UI - v1.12.1 - 2016-10-28.* http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/autocomplete.js, widgets/datepicker.js, widgets/menu.js, widgets/mouse.js, widgets/selectmenu.js, widgets/slider.js, effect.js, effects/effect-fade.js.* Copyright jQuery Foundation and other contributors; Licensed MIT */..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery"

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	dropped
Size (bytes):	408437
Entropy (8bit):	5.0512622264491
Encrypted:	false
SSDEEP:	12288:HSOdxMu1puYcYmD4/cZQ/coLGVFyCJTiPf7AqqArR:yAuVYmD4/cZQ/coLGVFyCJTiPf7A8rR
MD5:	A3EC158045B2B11DA1FAB8902A4F3C0F
SHA1:	AC5ADB201614A25E2E8AF95068531757623CBBA7
SHA-256:	3A42998E6F7318EDD6F6EA0568CC7824C9273044F89E2C38AE326FC554AD5A84
SHA-512:	302043C42FE340BA33B093D426454BADD90A1AD72BD5D0AF86596A57899F361740939432AF1CC92EED699172DD4AF08A3489D1B748CD720F2951B2D9C1FBD210
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * sjcl.js. * nodedec.js. * js/vendor/jquery.js. * js/jquery.protect.js. /../* @fileOverview Javascript cryptography implementation.. . Crush to remove comments, shorten variable names and. * generally reduce transmission size.. . @author Emily Stark. * @author Mike Hamburg. * @author Dan Boneh. * . * Version 1.0.3. /../jslint indent: 2, bitwise: false, nomen: false, plusplus: false, white: false, regexp: false /./global document, window, escape, unescape, module, require, Uint32Array /../* @namespace The Stanford Javascript Crypto Library, top-level namespace. /.var sjcl = {. /* @namespace Symmetric ciphers. /. cipher: {},.. /* @namespace Hash functions. Right now only SHA256 is implemented. /. hash: {},.. /* @namespace Key exchange functions. Right now only SRP is implemented. /. keyexchange: {},. . /* @namespace Block cipher modes of operation. /. mode: {},.. /* @namespace Miscellaneous. HMAC and PBKDF2. */. misc: {},

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (728)
Category:	downloaded
Size (bytes):	736213
Entropy (8bit):	5.0618261003613245
Encrypted:	false
SSDEEP:	3072:s7DiwNp9PVzcMfZY45pX0y6YvC6cDraVnjDTdZzzT90hMVCX5EJl/mggxb6V4:s7DiwNWt45Ky63X5Lggxmu
MD5:	CE6A444EFA9C8AE85A58824FB7565082
SHA1:	EAF656EED7E2DEA0729D0932FA003A4C8D9F1F39
SHA-256:	1922102B66D4C2764A8CFA9BDBD87E007DC19B2A5B83A743F758FF17051C647E
SHA-512:	848427D61516DF694995D6765DD7107C7663084593F4025942C92D08E8D2C53F26EDBDBEB48816DB2A6BBA60EF49806038299FB4AC19A2ABA0C4FA4A9FE71EE0
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/css/mega-3_1922102b66d4c2764a8cfa9bdbd87e007dc19b2a5b83a743f758ff17051c647e.css
Preview:	/* Bundle Includes:. * css/buttons.css. * css/components.css. * css/ui/mcomponents.css. * css/style.css. * css/fm-header.css. * css/fm-breadcrumb.css. * css/fm-lists.css. * css/grid-table.css. * css/tabs.css. * css/empty-pages.css. * css/node-filter.css. * css/gallery.css. * css/onboarding.css. * css/download.css. * css/user-card.css. * css/account.css. * css/banners.css. * css/dropdowns.css. * css/jq-ui-custom.css. * css/labels-and-filters.css. * css/dialogs.css. */...nonclickable{..cursor:not-allowed !important.}.button input{..border:0;..height:100%;..left:0;..margin:0;..opacity:0;..padding:0;..position:absolute;..top:0;..width:100%;..z-index:1.}.button input[type=file]{..cursor:pointer.}.button input[type=file]::-webkit-file-upload-button{..cursor:pointer.}.button.icon-dropdown{..border-radius:4px;..cursor:pointer;..float:right;..padding:2px 13px 2px 3px;..position:relative;..text-align:left.}.button.icon-dropdown.disabled>i{..cursor:defaul

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1048576
Entropy (8bit):	7.999836340399815
Encrypted:	true
SSDEEP:	24576:oZU8OFF1Siq8PCCWxx/TRuuI4TnREWXXwW5JqAk6xl57L1KmB8QU:oZU8+7qaCCWP/TRuu1RZwAYEgmB8QU
MD5:	4B072BE2541DEEED5170D246CF3B48A5
SHA1:	837F5EBC3961CD967E026A3379704FD732322518
SHA-256:	ECDF024D57C5FC644B909C243DA181DA715B63ABAD45649DD4413CA8D9BADF40
SHA-512:	350A4732AAF6AAAC74FAC0C826264B7A5B3B9DDF6713A6BD03700723147433FCC320AEDDCD252A52181F29E10F9D083F2177129F7BF7A6AC454719594E7AB5D6
Malicious:	false
Reputation:	low
Preview:	......\|.>0ED...c#,.. .....$...n.}we..Z8.@...`....8.a...7....^.P.......z.PF2.......7.z..........nS..(.)! .......^k...8..w..G.......c...tW...t.6B}..K..{....f%..n....5[....o.!)...$#..i.`...h.w...oyO.p......~+(......\|j..;..X..<A).#.X=.YG-...up.mus....'..g....Nw.^i~.\.B.2.!...f..V_.l....y.24A;W..eD.'.>......:.........h.;.nED.sX.U...]M.}0....X."...k..w.I"C...P..sY.#...5...Z-,...X...^u/c.... ....w..;.P.0...)WU;?A4r..o."........2$/:.......R+Le.Q.oW....y...}Q.H.j..A..^8K].._h..$Z&....?.....%];..B]..).7.N...E.....7....[w.A]...\.k.T..G..E...=.49`&....9e.....Q...8....1.z..um...........h......{b..J..#p..7......<vU..<"..e]H.,.]z=.U<'DW_.......^........&7).:.A...Z......5.gv.W..D.Y ..I.....uHvg.F........2....z...r.....H..........w...@.OMV$.f...5:..ID_].K...@...p.f\#K.S1R.2........J..'.6.&....y....E..;$1...;.!!_...}.u.s0..l..X?....}^_.....yN......"[...b...+.hK.E.....bV.S..Tp.&.s..^uB+T..9....f.....$H..d..[UR.......^..^h.A..L..nF...2m..L

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	41595
Entropy (8bit):	4.998646908640853
Encrypted:	false
SSDEEP:	768:NT/KotXFw5b4USxK5hSgWlLcPXANR5zthbhDnL:NT/XfwvPXANNhVbL
MD5:	71D77607B323BC20BE32A02FCE4CADFD
SHA1:	2A18236090F47A4E1F0EBD2B9F1E4B0BC0053573
SHA-256:	58C04AC027B15931ACFB17BE4A134E35C8BDD3B99109E617895713A42F32D84A
SHA-512:	01E141B3C6CA46A83626F19E35A8E8ED613E2DC90FB42977752632C9818EA93F9B8F06E1A47417FE5CB8ED8A3BBA3FBF62BF28DA3F15C6200A6B8CCEC72C4005
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/css/mega-7_58c04ac027b15931acfb17be4a134e35c8bdd3b99109e617895713a42f32d84a.css
Preview:	/* Bundle Includes:. * css/toast.css. * css/general.css. * css/megainput.css. * css/vars/text-input.css. * css/retina-images.css. /...toast-rack{..box-sizing:border-box;..display:flex;..flex-direction:column;..position:relative.}..rtl .toast-rack{..direction:rtl.}..toast-rack {..box-sizing:border-box.}..toast-rack.top{..flex-direction:column-reverse;..justify-content:end.}..toast-rack.start{..flex-direction:row-reverse;..justify-content:end.}..toast-rack.end{..flex-direction:row.}..toast-rack .toast{..align-items:center;..display:flex;..justify-content:space-between;..margin:auto;..opacity:0;..transition:opacity .1s ease-in.}..toast-rack .toast .icon,.toast-rack .toast button{..flex-grow:0;..flex-shrink:0.}..timeline-tooltip button,.toast-rack .toast button{..border:none;..cursor:pointer;..outline:none.}..toast-rack .toast button.close{..align-items:center;..background:none;..display:flex;..flex-shrink:0;..justify-content:center.}..toast-rack .toast .message{..width:100%.}.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	917504
Entropy (8bit):	7.999791268623968
Encrypted:	true
SSDEEP:	24576:EfbWQ4PTbHRyzFmW/zo1SO0ZBo+2DWUFfF725s5e6D:Ez547bHRSmW/E1ZQBo+gWUF12s5e6D
MD5:	E1FC0C2AA0A946CFB30890DF48545D21
SHA1:	C2CF29909D424BD43A629617FF9186C6F5A20A93
SHA-256:	F7797DD41037AC0AA8F9A0802DB3E63268028D81D01D65F958F85A1ED636A384
SHA-512:	183D754F47D2379B302D8F5D979509EC8132C6A628E52298844BB4D2DFD7C4003DA5467B84052F7656E19EF42F2C40B7565335BD82158435DB60559D6C1FFA5E
Malicious:	false
Reputation:	low
Preview:	.FYc.....< Y.(.2..}.0..iL-iE.G.M.9.].h....1..Y...`O.....L....w.z......@X.e....<..?.&W#.:N....p...\|x.Mn/k5F....\...dnV?.l...D...T.5>7..(g.s.}...'.;....7l.'(6....O^..Q.....@......HD.._Z.`Y".!.o.f...7=.7 g....3@...1......Hs..q...x.<.&.N..g.Hr.S7yU0..N....d...-An..;.@g)3..BZ.E..}J`Gf........B.. C........{......g...'.kp....I9.0#....;RX9D...>...o...Bn..&.......~.Y.'.R.3.z.... ........$P\|..?.Q..U..bL.5.Q.0.B.E...".w]q.......8.t$."...#..\|.RKE.....\|.w......!p.l.0i.P.p.....X]9.......=...l.U..=<.I....-..........`G8.,..\|k...C.\|@.!...b.#..k..p.....%...,F...T8.G..+(g..X.0.O..'.....(o........'a......M.....M<..i.....R..d...^.....E.F1.m.1..+...k.!.=.'..eAq(Wx.>R.(\|.....v....g7`..%G.$.T.J4.....\o...N.....pKC.f6Z{.......i#....j........xZ..N........}ReQR:\|.M...._t..o.Jns.I...0..vQZ.rg..+..N....O98Q.X._.i..>.Pk.....N{.7!.!\R.)...Kt...`f.o........,.Vc!..S.t....t..no.Y.S0\...?.B..\|.o...[.....Q...9(.0..G...\..6.3Iz7..*mMb....g.S,y.......;....j3v...s_.zq

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	dropped
Size (bytes):	86811
Entropy (8bit):	4.525745623954823
Encrypted:	false
SSDEEP:	1536:FdNYvEs8KIxiVTlN4TWyqNOL1MWwmYLp+XPNovt:FCIxiVBVNOL1MWwT3
MD5:	02D5B69391A53D2C197BC52E10C09125
SHA1:	73CD5BF718113A4101E141E631D6F7CAFA34EDBE
SHA-256:	5A0BD51C94A07CD5A5806408F32C247CE16F51DB3DF2D3992BDD9272478AF76D
SHA-512:	355ED00C45641BBB89D30166790130FF79E13DB121D3755ADB9A27C8C898211F29DF7289F3A8C068A73DD1BBE2F6ADF1DBB3D4B0052B4C608720F5D65226382B
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/vendor/perfect-scrollbar.js. * js/ui/languageDialog.js. * js/ui/commercials.js. /../!. * perfect-scrollbar v1.5.7 - mega.nz build.. * Copyright 2024 Hyunje Jun, MDBootstrap and Contributors. * Licensed under MIT. */..(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :. typeof define === 'function' && define.amd ? define(factory) :. (global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, global.PerfectScrollbar = factory());.})(this, (function () { 'use strict';.. function get(element) {. return getComputedStyle(element);. }.. function set(element, obj) {. for (const key in obj) {. let val = obj[key];. if (typeof val === 'number') {. val = `${val}px`;. }. element.style[key] = val;. }. return element;. }.. function div(className) {. const div = document.createElement('div');. div.className = className;. return

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (764)
Category:	dropped
Size (bytes):	476787
Entropy (8bit):	5.16720438238552
Encrypted:	false
SSDEEP:	3072:AC+XpqD7Vpz5Py/ah6ej/cwJuqy7pKq160GMp138Lou:Aw7E/ahLj/cDK0GMpR8Mu
MD5:	0BFC5FA3ED2DDE3DCBB1551DB2552631
SHA1:	53B0217BDE243FEEA9AC52475EB5FB3040D96D4B
SHA-256:	73F0048E4F39D5EC99A6CD1B8E309B77EACCDBE1EAAF31C05E2B8E660919FDD0
SHA-512:	AD2F5418EF17E672D14D1C569704D59D5D7A4146C689A57E90C3F870EAE72FE2CF551E0AFFEB2C08CAB670F7C99A1174212099946CFA5F2E0168A0083BF0D407
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * css/avatars.css. * css/fonts.css. * css/bottom-pages.css. * css/bottom-menu.css. * css/business.css. * css/pro.css. * css/planpricing.css. * css/startpage.css. * css/icons.css. * css/spinners.css. * css/business-register.css. * css/psa.css. * css/features.css. * css/dialogs-common.css. * css/dialogs/cookie-dialog.css. * css/jquery-ui.extra.css. * css/cookiepolicy.css. */...avatar-wrapper{..background:#fff;..border-radius:100%;..box-sizing:border-box;..color:#fff;..display:block;..font-size:12px;..height:32px;..line-height:32px;..text-align:center;..width:32px.}..avatar-wrapper,.multi-avatar{..position:relative.}..multi-avatar .avatar-wrapper{..font-size:8px;..height:18px;..line-height:16px;..position:absolute;..width:18px.}..multi-avatar .avatar-wrapper img{..height:18px;..width:18px.}..multi-avatar .verified .verified_icon{..display:none.}..multi-avatar-2 .avatar-0{..left:1px;..top:1px.}..multi-avatar-2 .avatar-1{..left:17px;..t

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	446544
Entropy (8bit):	4.4411957990170485
Encrypted:	false
SSDEEP:	3072:0puiRKhAzolOUqTZ7/OWBto2EfBjsuMBN+WYqsoMECsR3qg6Rgy+UjAOlzhF:VQ7/OWBO2KFMwonCsR3qj
MD5:	56CFA0E27C4FE98A3F50F4506EAA939A
SHA1:	B1F62B375CFB0B52BB4BB4FB1DF33B631D5FAB2F
SHA-256:	BC91F313152B74408E3715BE06F8B45C9450F6F4814A11E5A2AB431E886FEE21
SHA-512:	74A4F90B7A15A95EE71131B599462AA0F06414D3C39A35EB43A53F85FC7F9B446480BC624FE106AF4684C8FC5C4E36C4C6CF6C3B5BBBCDA1E09627E1D2B263FE
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/jquery.tokeninput.js. * js/jquery.checkboxes.js. * js/vendor/moment.js. * js/ui/megaRender.js. * js/ui/dialog.js. * js/ui/credentialsWarningDialog.js. * js/ui/loginRequiredDialog.js. * js/ui/registerDialog.js. * js/ui/keySignatureWarningDialog.js. * js/ui/feedbackDialog.js. * js/ui/forcedUpgradeProDialog.js. * js/ui/alarm.js. * js/ui/toast.js. * js/ui/top-tooltip-login.js. * js/fm/transfer-progress-widget.js. */..(function($) {.. // Default settings. var DEFAULT_SETTINGS = {. // Search settings. method: "GET",. queryParam: "q",. searchDelay: 200,. minChars: 1,. propertyToSearch: "id",. jsonContainer: null,. contentType: "json",. excludeCurrent: false,. excludeCurrentParameter: "x",. // Prepopulation settings. prePopulate: null,. processPrePopulate: false,. // Display settings. hintText: "Type in a search term",. no

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2113
Entropy (8bit):	5.1020086541999135
Encrypted:	false
SSDEEP:	48:/V1gMymALMxI4LVs2Df8NrIU3P3msU/FUjG:/MjEpf8B8sU/FUjG
MD5:	B46CEF2A839F77B03135A315AF1A489A
SHA1:	A8CD34B2DB51A26059398BD6F7D5B763F369031C
SHA-256:	6F1C600C59328392DFDD27845CAD96C6B9619A783FFB0D9F6C51380A53247B38
SHA-512:	472DF0BF3A1CEB934EFE03D3919EC0E2B25F219F74C9AEA5210ACB1B42EC3D557B034E4152965FD9F18F7D5A62E8BA960AD9A960F8F9F477FFC07CC9F8D84704
Malicious:	false
Reputation:	low
URL:	https://mega.nz/file/3LZ0hLYB
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml">.<head>.<meta property="og:title" content="6.22 MB file on MEGA" />.<meta property="og:url" content="https://mega.nz/file/3LZ0hLYB" />.<meta property="og:image" content="https://mega.nz/rich-file.png" />.<meta property="twitter:card" content="summary" />.<meta property="twitter:title" content="6.22 MB file on MEGA" />.<meta property="twitter:url" content="https://mega.nz/file/3LZ0hLYB" />.<meta property="twitter:image" content="https://mega.nz/rich-file.png" />..<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta http-equiv="Content-Type" content="text/html, charset=UTF-8" />.<meta name="referrer" content="strict-origin-when-cross-origin" />.<meta name="google" value="notranslate" />.<link rel="icon" href="/favicon.ico?v=3" type="image/x-icon" />.<link rel="chrome-webstore-item" href="https://chrome.google.com/webstore/detail/bigefpfhnfcobdlfbedofhhaibnlghod" />.</head>.<body id="bodyel" class="theme-light not-logged"

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	446544
Entropy (8bit):	4.4411957990170485
Encrypted:	false
SSDEEP:	3072:0puiRKhAzolOUqTZ7/OWBto2EfBjsuMBN+WYqsoMECsR3qg6Rgy+UjAOlzhF:VQ7/OWBO2KFMwonCsR3qj
MD5:	56CFA0E27C4FE98A3F50F4506EAA939A
SHA1:	B1F62B375CFB0B52BB4BB4FB1DF33B631D5FAB2F
SHA-256:	BC91F313152B74408E3715BE06F8B45C9450F6F4814A11E5A2AB431E886FEE21
SHA-512:	74A4F90B7A15A95EE71131B599462AA0F06414D3C39A35EB43A53F85FC7F9B446480BC624FE106AF4684C8FC5C4E36C4C6CF6C3B5BBBCDA1E09627E1D2B263FE
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-9_bc91f313152b74408e3715be06f8b45c9450f6f4814a11e5a2ab431e886fee21.js
Preview:	/* Bundle Includes:. * js/jquery.tokeninput.js. * js/jquery.checkboxes.js. * js/vendor/moment.js. * js/ui/megaRender.js. * js/ui/dialog.js. * js/ui/credentialsWarningDialog.js. * js/ui/loginRequiredDialog.js. * js/ui/registerDialog.js. * js/ui/keySignatureWarningDialog.js. * js/ui/feedbackDialog.js. * js/ui/forcedUpgradeProDialog.js. * js/ui/alarm.js. * js/ui/toast.js. * js/ui/top-tooltip-login.js. * js/fm/transfer-progress-widget.js. */..(function($) {.. // Default settings. var DEFAULT_SETTINGS = {. // Search settings. method: "GET",. queryParam: "q",. searchDelay: 200,. minChars: 1,. propertyToSearch: "id",. jsonContainer: null,. contentType: "json",. excludeCurrent: false,. excludeCurrentParameter: "x",. // Prepopulation settings. prePopulate: null,. processPrePopulate: false,. // Display settings. hintText: "Type in a search term",. no

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	dropped
Size (bytes):	506441
Entropy (8bit):	4.4687327356371505
Encrypted:	false
SSDEEP:	6144:IxXsynv/1XRvbky4ERF/6Jd0u4oYfBCFyu:Wvh9S
MD5:	99020B9FC4BC6AAB0B56C6D3C9F49C1C
SHA1:	993317F35798B18F5A7A597C62374CE2A817DB22
SHA-256:	230200D24F6DAF921D926FF4D88F646672C163E3F5478212C35961F60D815A0D
SHA-512:	B2A26F772C1EF38DC31A4624518499C5C5FBC64BC3CB5B0862D8CC3D9D1929C43ED56988E55624D32C9B948F0BB9F8240871D26705C68197B5724A063DEA8F85
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/ui/mcomponents/classes/MComponent.js. * js/ui/mcomponents/classes/MButton.js. * js/ui/mcomponents/classes/MCheckbox.js. * js/ui/mcomponents/classes/MContextMenu.js. * js/ui/mcomponents/classes/MDialog.js. * js/ui/mcomponents/classes/MEmptyPad.js. * js/ui/mcomponents/classes/MHint.js. * js/ui/mcomponents/classes/MMenuSelect.js. * js/ui/mcomponents/classes/MMenuSelectItem.js. * js/ui/mcomponents/classes/MSidebarButton.js. * js/ui/mcomponents/classes/MTab.js. * js/ui/mcomponents/classes/MTabs.js. * js/vendor/megaDynamicList.js. * js/fm/quickfinder.js. * js/fm/selectionManager2.js. * js/fm.js. * js/fm/backupsUI.js. * js/fm/dashboard.js. * js/fm/recents.js. * js/time_checker.js. * js/ui/contextMenu.js. * js/ui/dragselect.js. * js/ui/onboarding.js. * js/ui/sms.js. /..class MComponent {. /. @param {String\|HtmlElement} parent Either DOM element or a query selector. * @param {Boolean} [appendToParent=true]

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	dropped
Size (bytes):	381101
Entropy (8bit):	4.570608649497163
Encrypted:	false
SSDEEP:	3072:7/rV6XSDG94dNlLbgrZ8gFvAzdaZu12kSLi5Y4Xy6KPyEEslHx2k6WxEd3MU87Ok:d6XXZ85okvsP4+oBYFF
MD5:	6C463B181E10E343AF95D85B14705395
SHA1:	8B92E286BC1AB0D4C6F0991DBFCCD873D899DFC1
SHA-256:	8D60E4C0AA8069A6DCB5D74A94E2672DFB90332F43CDBD766F13C0D66E6DCCAF
SHA-512:	F5CD933D42EC0C98C330B9AB30E96DCB109A3876F0C798CD866A2D1AB1DBD85E190B29545A2A948B1FFD76D7D8C415B32E33555745A5B61936E69A73C9CA94CB
Malicious:	false
Reputation:	low
Preview:	/* Bundle Includes:. * js/utils/api.js. * js/utils/browser.js. * js/utils/clipboard.js. * js/utils/conv.js. * js/utils/crypt.js. * js/utils/csp.js. * js/utils/debug.js. * js/utils/dom.js. * js/utils/events.js. * js/utils/icu.js. * js/keymgr.js. * js/utils/locale.js. * js/utils/md5.js. /../ global MEGAException, MegaLogger, JSONSplitter, freeze, sleep, api_reqfailed, requesti, scqhead, scqtail /../. Deferred callback invocation controller. /.class MEGADeferredController extends Promise {. /. Constructs a new instance.. * @param {String\|Function} [callback] the function to invoke deferred.. * @param {} [ctx] context/scope to invoke the function with.. @param {} data data to pass through the callback. @param {String} [method] fire on idle, or timer based. */. constructor(callback, ctx, data, method = 'idle') {. let _reject, _resolve;. super((resolve, reject) => {. _reject = reject;.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	2039
Entropy (8bit):	5.153971958624431
Encrypted:	false
SSDEEP:	24:jNNEEhM4Uv+aMUa7+/XY983uvF5rRkyGmzuMBWQi9eJjMxUgsXYgSYjlpEuNOVir:5NwPV/diRkyXq4ThEUpXiETV47pDNG9
MD5:	EB261C1B3DDAFC3A78652DC6036E2A66
SHA1:	E25FE9ADB999932ED47D5504EE3EF6F36863B9BC
SHA-256:	E9F9D35C7C0906DD2AA24F1451ADF7876DDFD1DA5B5AC10910FB4A816D11FDF1
SHA-512:	80478FF3658B9015A77366789CA09B945F2B92E882403D1329B81F49BFFE87FA324E8B6D3F60AB5AAAE39F7A2BA1FD180D9412C943B5DCB1E041BCDE952FF7B5
Malicious:	false
Reputation:	low
URL:	https://mega.nz/decrypter.js
Preview:	importScripts('aesasm.js');..postMessage = self.webkitPostMessage \|\| self.postMessage;..var heap = new Uint8Array(0x200000), // first valid heap size after 0x101000. asm = aes_asm(self, null, heap.buffer),. nonce = new Uint8Array(8),. iv = new Uint8Array(16),. ctr = 0;..onmessage = function(e).{..if (typeof(e.data) == 'string')..{...var arr = JSON.parse(e.data);....var nonceView = new DataView(nonce.buffer);...nonceView.setUint32( 0, arr[4], false );...nonceView.setUint32( 4, arr[5], false );...iv.set( nonce, 0 );...iv.set( nonce, 8 );....var key = new Uint8Array(16);...var keyView = new DataView(key.buffer);...keyView.setUint32( 0, arr[0], false );...keyView.setUint32( 4, arr[1], false );...keyView.setUint32( 8, arr[2], false );...keyView.setUint32( 12, arr[3], false );....asm.init_key_128.apply( asm, key );..}..else if (typeof(e.data) == 'number')..{...ctr = e.data;..}..else..{...var data = new Uint8Array( e.data.buffer \|\| e.data );...var heapView = new DataView( heap

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 7432, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	30699
Entropy (8bit):	7.955262660398151
Encrypted:	false
SSDEEP:	768:rphWmS5OEJDbSP4BvdZ0SKVCGg8lVBv8IYSqMd3rv:rTWmS7DbPfZ0XCGgqkdSqU37
MD5:	C53C4B781F53B21562990926425ABFD3
SHA1:	FFF91C4ACD5D0C187AD634B79B2619DAE9AF58AD
SHA-256:	1692F9C36F3AAA9D3E251A92FD2615B55D6F8E8E0BB286FA87184ECB4E20525C
SHA-512:	85041E7DD1EFF82DB0355A471ED64114D214BBF5D9B6B54F5F741E7A83B56F38DD591C854DC16C748DB806FFEDF896076C8A31AF7664429C373497F68323C7B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............OW......PLTE.........gjj.............................v...7.....}...........-.....................................z\|{...4.......C..{...8........[[\.........E........noo............ipk..........CRUT.. eee...///...xxx000.........fffxxxttt...............&&&...cde...rsr....`.xxx......dee...afdyyy..\|...xxxfff....z...}...o...N......eff.....7xxxxxx..}...........fffbcc......yyy511.....}......................t.....}....3#....}........_.G....%X.....Q..........36............C......:.....i....................\|....H....R.7..G..3[.7...g.F....hM....:..:...7....[.7........9gw....../O[.....[....wwx....}...............fff)/7........Vr.O]t98G.....................R=/.....A..:..I...8.l.......)..7....i..........-/...>....&...m..v..T.....\.........t.D.....tRNS...M.2.......n..Ww&J.Gg.8......N2...w....\|..+.).=.12T.u."......_...]G...aD..k=..\|...A.SX.5..E..{.h..oz....z...P..../..b......*N...d..e..r..G=.....L.R...u....o......l&t..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	368437
Entropy (8bit):	4.910340747077972
Encrypted:	false
SSDEEP:	6144:4VODrMODVlmouqcIYs1leKEnS6f1Q63NThnsgY7qdcJJb2Gy:xcE1wnsgYedc7b2Gy
MD5:	30EAFDD95F1D23F1CD4B7A28527C3E98
SHA1:	B82C4263A5F0A590F07C6AB681FB5F4920438117
SHA-256:	E703EA956D39915B306A6FE9289E758E6D0EC377843D7A543A6B1A8B7A6B05C2
SHA-512:	3EFC343D984E167815534F31081A713880DA31394DD096676FF39364CE6C38EA626B76FDD8DB6D9E12D604CD0656356AD1D96B8875E780F64FB2F20506144995
Malicious:	false
Reputation:	low
Preview:	{. "14": "Confirm deletion",. "15": "You are about to permanently remove all items from your Rubbish bin.",. "16": "Internal error",. "17": "Transfer quota exceeded",. "18": "Too many connections for this download",. "19": "Login session expired or invalid",. "22": "File no longer exists",. "23": "File no longer accessible",. "24": "Decryption error",. "2fa_already_enabled": "Two-factor authentication (2FA) has already been enabled. To disable, go to Settings > Security > 2FA.",. "2fa_menu": "Two-factor authentication (2FA)",. "34": "Warning:",. "47": "Oops, something went wrong. Sorry about that.",. "55": "Read-only",. "56": "Read and write",. "57": "Full access",. "58": "Download",. "60": "Share",. "61": "Rename",. "62": "Move",. "63": "Copy",. "68": "Create folder",. "71": "Add contact",. "78": "Yes",. "79": "No",. "81": "OK",. "82": "Cancel",. "83": "Remove",. "85": "Reload",. "86": "Nam

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	806
Entropy (8bit):	4.881989476761858
Encrypted:	false
SSDEEP:	24:8ejHb4zHbpCmHbpEHbmK367Hbx8eDHbIcLDTO:vHb4zHbpCmHbpEHbjGHbx8+HbIaW
MD5:	A90CDBED12B825144B39A748C940F8B2
SHA1:	93A8E3A9CF544A74DDE64269DF4117C0B98EBC39
SHA-256:	ED13CB17F33954435D951100B53C15FDCF7B4D7377FD6219E83EFBD902FCE630
SHA-512:	2D48773EA13CABCA7BE03635A2CBA46E597E6D11B3AEB4BFC52AD0F023F5BBFDD0B13C2F9798B8D7EDCA72C96EFFF9D39B1C7F29AF76D8C2AFB7C3E788255242
Malicious:	false
Reputation:	low
URL:	https://mega.nz/manifest.json
Preview:	{.."name": "MEGA",.."short_name": "MEGA",.."icons": [...{...."src": "android-chrome-36x36.png",...."sizes": "36x36",...."type": "image\/png",...."density": 0.75...},...{...."src": "android-chrome-48x48.png",...."sizes": "48x48",...."type": "image\/png",...."density": 1...},...{...."src": "android-chrome-72x72.png",...."sizes": "72x72",...."type": "image\/png",...."density": 1.5...},...{...."src": "android-chrome-96x96.png",...."sizes": "96x96",...."type": "image\/png",...."density": 2...},...{...."src": "android-chrome-144x144.png",...."sizes": "144x144",...."type": "image\/png",...."density": 3...},...{...."src": "android-chrome-192x192.png",...."sizes": "192x192",...."type": "image\/png",...."density": 4...}..],.."start_url": "/",.."theme_color": "#dc0000",. "background_color": "#ffffff".}.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	6518
Entropy (8bit):	4.789786856591123
Encrypted:	false
SSDEEP:	96:EaLq5FfE6rwDDDIDDgDDDDD+CxyVqqqqqq0qqqqqq:Jq5hEtDDDIDDgDDDDD
MD5:	72F13FA5F987EA923A68A818D38FB540
SHA1:	F014620D35787FCFDEF193C20BB383F5655B9E1E
SHA-256:	37127C1A29C164CDAA75EC72AE685094C2468FE0577F743CB1F307D23DD35EC1
SHA-512:	B66AF0B6B95560C20584ED033547235D5188981A092131A7C1749926BA1AC208266193BD7FA8A3403A39EEE23FCDD53580E9533803D7F52DF5FB01D508E292B3
Malicious:	false
Reputation:	low
URL:	https://mega.nz/favicon.ico?v=3
Preview:	............ .(...&... .... .(...N...(....... ..... ......................................................................................................................................................................T...................................S.......................S...........................................S...........................................................................................}y..................}y..........................................~...................~.................................................................................................................................................................................................................................................................................................................................................................S...........................................S........ ... ... ... ..S ... ... ... ... ... ... ... ... ..S ... ... ...!...!...!...!...!...!...!.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	466876
Entropy (8bit):	4.221709309994807
Encrypted:	false
SSDEEP:	3072:fX9/XYDVPV++yn2jUAqgj7yJWRLolpgvhKMikRRdJVb1khDNArc9uR:fX9/IDVPY+y2jUAqgfycNR
MD5:	6924674078FE950FC4F0C9AB0A646A4A
SHA1:	5FEA3FD35CE2C0985A8821EFD334826DD221AE8A
SHA-256:	E18287A396F86D96FBA5714F7BB47E6322364ACC3BDCB9A6ED94F382CA3DF966
SHA-512:	B07B5D9EA9540710E9AB00AA37E46665DE6C2B5738ABDCD641F605B93E508EB3610FAAE65ED69C5DE1B9358BB5645BD44783A37E5D4E1A8933C1F84382C3BAFA
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-15_e18287a396f86d96fba5714f7bb47e6322364acc3bdcb9a6ed94f382ca3df966.js
Preview:	/* Bundle Includes:. * js/fm/affiliate.js. * js/fm/vpn.js. * js/fm/gallery/helpers/GalleryTitleControl.js. * js/fm/gallery/helpers/GalleryEmptyBlock.js. * js/fm/gallery/helpers/GalleryEmptyPhotos.js. * js/fm/gallery/helpers/GalleryEmptyImages.js. * js/fm/gallery/helpers/GalleryEmptyVideos.js. * js/fm/gallery/helpers/GalleryEmptyFavourites.js. * js/fm/gallery/helpers/GalleryEmptyDiscovery.js. * js/fm/gallery/gallery.js. * js/fm/albums/Albums.js. * js/fm/albums/AlbumTimeline.js. * js/ui/notificationBanner.js. */..// Note: Referral Program is called as affiliate program at begining, so all systemic names are under word affiliate.// i.e. affiliate === referral..function affiliateUI() {.. 'use strict';.. // Prevent ephemeral session to access. if (u_type === 0) {. msgDialog('confirmation', l[998], l[17146]. + ' ' + l[999], l[1000], function(e) {. if (e) {. loadSubPage('register');. return false;.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 853 x 1363, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	70369
Entropy (8bit):	7.968201503862259
Encrypted:	false
SSDEEP:	1536:Y0BMBs8Wls4KmHpLfrBUGu5nel1iTIv12Tz8SpwfiQI97lW7:Y0BMulHHLfFUGynePV1YcMa
MD5:	D74C0EFAC1A9C59152B0325932D399F1
SHA1:	A472EADB5B431A4EF40E78ED79EAED9BB8FC8135
SHA-256:	E8BEDFBC203B2D09457D44A4DDFAADFB770D637E332F41487438FA9A7F5352F5
SHA-512:	8B54060E0A7FA219FB96ADA3C4BEAE832727540D8872A231F71C2A0CDDC3ABAF061EB2687595BE3F4FBFD996BBE0488F44E1E042B28C2AAA45D51F03D0B4E689
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/images/mega/download-dialog.png?v=cf6daa0027e27782
Preview:	.PNG........IHDR...U...S.............PLTE..............................c......u.e....(*. !.........5...\P.....................................!#..........$'.........."#npl............n+[.p...................>.....:.sE.vzS.,......................................l`..............................................................Yf.......HV..........................................S`............BP.....]...........................MZN..........".................G...............<.^j.........v........$eq/kwV..N..W.....9r\|b.....Bx..327..J~.P...z........GD..................]..........b...]j......q...................;...z..k.....!...\|........................k..............3............f..z....>........[......}......l...........?......5...iu.v...y{y...S....52.....~....[_^#.[..T....J...@tRNS.......%... ..x....O....r.Z..,....I..h..[.z..=.........r.......p-.....SIDATx...1k.0..aA....z...=.dV....f..]P.k.\.O....$.......L...a8..<......6...{To.b.].K.:.du.H@.u.....K..}..Uh

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	443062
Entropy (8bit):	4.479255582865319
Encrypted:	false
SSDEEP:	6144:6/BJv438PebFPmBjbNibrw7n2nfjvmIyybeVXWeK4cz4by6AsAt16BCfQYs63:65Jv5Niu2nfj+IyybeVXWeK4cu763
MD5:	057852173E958810F1DE0E8ADBC9D462
SHA1:	BD05E51244966615A9DC2B0119F7E8CFA64F22B5
SHA-256:	9C90F27443FBDB85519985333A8B00C3CFF0E10A2753955F41890342D64362F7
SHA-512:	230EC42DFCEA740B4FB37E3C7559DA2289B7BF2025C465BF055DB75659C7F9F05EDE374792B046FFB3365F8FA5DC34E23F1312984C195C32A6D42147959EFC86
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js
Preview:	/! asmCrypto, (c) 2013 Artem S Vybornov, opensource.org/licenses/MIT /.(function ( exports, global ) {..function IllegalStateError () { var err = Error.apply( this, arguments ); this.message = err.message, this.stack = err.stack; }.IllegalStateError.prototype = Object.create( Error.prototype, { name: { value: 'IllegalStateError' } } );..function IllegalArgumentError () { var err = Error.apply( this, arguments ); this.message = err.message, this.stack = err.stack; }.IllegalArgumentError.prototype = Object.create( Error.prototype, { name: { value: 'IllegalArgumentError' } } );..function SecurityError () { var err = Error.apply( this, arguments ); this.message = err.message, this.stack = err.stack; }.SecurityError.prototype = Object.create( Error.prototype, { name: { value: 'SecurityError' } } );..var FloatArray = global.Float64Array \|\| global.Float32Array; // make PhantomJS happy..function string_to_bytes ( str, utf8 ) {. utf8 = !!utf8;.. var len = str.length,. bytes = new

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11912), with no line terminators
Category:	dropped
Size (bytes):	11912
Entropy (8bit):	4.7728077513949385
Encrypted:	false
SSDEEP:	192:MDuEIIKOfkFKDZDghxj6GjZAbjUkOIInkbZvcJYWd959E9WJ+TM:M6EIIKOfmKDZDej6GjZAbjUkOIIn8vcR
MD5:	3474CEB37AF3BA509CB55092004E9C6B
SHA1:	5A0ADF63DB2B411BE79D7B5720D66279352D30D3
SHA-256:	2749A59FEFF4141009BB961EDD622162E7589B7F6C446E9BE297528F0CDFF89D
SHA-512:	CDB530366C310786FC43FA8112A6FE719BC874D8AA9E0304A584FA515D2A437208E6B5E6B70C842A7F4BF1F5AEA1C7ECBEC36B0329748D972C0A200C7C83CE28
Malicious:	false
Reputation:	low
Preview:	<div class="bottom-page download scroll-block selectable-txt"> ((TOP)) <div class="download-content download download-page"> <div id="commercial-close-button" class="commercial-close-button hidden"> <i class="sprite-fm-mono icon-dialog-close"></i> </div> <section class="download-grid js-download-scroll-panel"> <div class="download main-pad"> <div class="download transfer-wrapper"> <div class="download video-block theme-dark-forced"> <div class="media-viewer"> <section class="content" data-fullscreen="false"> <video id="video" data-autoplayvideo="false" data-playvideoonclick="false"></video> <div class="download play-video-button"> <i class="sprite-fm-mono icon-play-regular-solid"></i> </div> <div class="play-pause-video-button hidden"> <i class="sprite-fm-mono icon-play-regular-solid"></i> </div> <div class="watch-again-button hidden"> <i class="sprite-fm-mono icon-rotate-ccw-small-regular-outline"></i> <span>[$video_player_watch_again]</span> </div> <div class="watch-again-button-over

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3573
Entropy (8bit):	4.342488338633969
Encrypted:	false
SSDEEP:	48:mj5Mr9nEKFjseOL/7uyJqTjPyy4tg1Aeeyz8sLbVqAGznnoKmaIzb3Z:mWh3FBw/66qTjPy45eyHLhq/jo1XZ
MD5:	4BB6D0B01C05E8A99339173297E0E515
SHA1:	1B15A37A43847C943570912313B0EF072CCF7029
SHA-256:	374CE9BDD50242D5CD0486250B532B65449D563A953F1FA2239212685E24CB43
SHA-512:	92499FCB0F0A619C20512E027524AFBA39AFF061DC1EA3508C588A999E8629608B5D8DEF51BE9DAD1EE72DBE1C70A165430F9C12A24147B048207800DB6A986F
Malicious:	false
Reputation:	low
URL:	https://mega.nz/sw.js?v=1
Preview:	/*. Service worker for mega.nz.. */.(() => {. 'use strict';.. const logger = {. log(...args) {. this.print('log', ...args);. },. warn(...args) {. this.print('warn', ...args);. },. error(...args) {. this.print('error', ...args);. },. print(type, ...args) {. const date = new Date().toISOString();. let ll = `%c${date} [MEGA-SERVICEWORKER] ${type.toUpperCase()}`;. if (typeof args[0] === 'string') {. ll = `${ll}: ${args.shift()}`;. }. console[type](ll, `${this.style}${this.colors[type]}`, ...args);. },. colors: {log: '#000000', warn: '#C25700', error: '#FF0000'},. style: 'color: white; padding-left: 1px; padding-right: 1px; background-color: ',. };.. const dump = logger.print.bind(logger, 'warn', '[dump]');.. self.addEventListener('install', (ev) => {. logger.log('Service worker installed. Activa

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	524288
Entropy (8bit):	7.999650965721296
Encrypted:	true
SSDEEP:	12288:m/1YIZrwT9Uj16+J/XlvvhUB5Jb07Qis37gu:uc9Uj16+1lvvheJbWQ137gu
MD5:	DF2F77418DD841DBB456E7367F4CD213
SHA1:	E024FBE37EC3307491CFC0ADEF1B87730F939A50
SHA-256:	F803EDE71AB5B62A74F122151CAC12C6D8C9D03D5444357F31D60C0385122937
SHA-512:	FAA6828A2686B38FE7F8A94C440E3D4498D1F3310EAB444AD33C6534D72C33821EB765C4BBF24B3BA4D4FAD286EA0389EF8C6C1809AE1B82BE529A06918CE5F9
Malicious:	false
Reputation:	low
Preview:	6.."..\fM.^}j!.v..n....=.......9..g......L{...O..l...+M...ma.D.x._>q..[....NX..g..0\...=.%8._.v..h.....T.[N....,.............fso. .....<re.5....,M.v......7K.7.u....}.j..Xe-...M..W..O$0.-.$L$J..........g...<0..\|..t.....z.x..GM.{r...n/..qH....op.G..0.....x.\..T....2....r.7>N`.b7...s<{t/.......i............<..Vo..M.)..T>..O.Qx.,.......sO.Gy\y.(....@..W!........)L.\|....0. Q1..'....+...k..._.M#(..Ec'...R..#.../=v..NaA=.9ky.oMIp.....B.?.........o.a...,..08..B.u.nP.....x..(....m1.9.`..l.B....`.?...F....,..:.s.....^.)...li.:Q.H!C....:...gwZ............2.#._".jC...y.n.S.......;...N~.@P........._}lu...`.S.0.Br...:R..K...& (..;.R...%.J..........0......>.R...$[.I.)a.f.%..s...>.....J...!..?\|k....C..T>.....UM._:..%$T.-[&.W,,<....O4..R...D...^......E.q...&.0.vkm......W.^d...:...XI$.7y...b...dY..oj.^\CF..2.8.K.+P5.=.)$Cd..W...)&2T..6.~..Ozo....a..R..r..G..76#7...`.Rfh_......K..}[..8.Uw...L.......[....S.v...H.;K,k..t?...fd..rO...~N..`%...J......a.....$

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	508452
Entropy (8bit):	4.46238067016295
Encrypted:	false
SSDEEP:	6144:rmWdoPMvAeE5zTna8cPcCrLOXw3lrffo6kNEbQeFnuN0cdav6XDdavg:rmWHAeaezr4t6bFnuNF
MD5:	46C77FCDDD805946E9AD1753A197659F
SHA1:	242A0CC2758333933EDA460E12F1C3E12B5AF25F
SHA-256:	28A090261B3FCC9C576799D820968CDF2FE60F77328DC0E00D3A2BA7250A804F
SHA-512:	EAAFD8186BEAF5BFBFF61B8D3DEB94B30EB29656AA86D2B25C2D725F1ED9D3C984B3418C9AD55EAF3FB60B9F79D069BE85D1BAD47785058CB0DDDBAA93D1110F
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-5_28a090261b3fcc9c576799d820968cdf2fe60f77328dc0e00d3a2ba7250a804f.js
Preview:	/* Bundle Includes:. * js/vendor/dexie.js. * js/functions.js. * js/config.js. * js/crypto.js. * js/account.js. * js/security.js. * js/two-factor-auth.js. /../. * Dexie.js - a minimalistic wrapper for IndexedDB. * ===============================================. . By David Fahlander, david.fahlander@gmail.com. . Version 3.2.1.meganz, 2023-06-29T11:23:08.477Z. . https://dexie.org. . Apache License Version 2.0, January 2004, http://www.apache.org/licenses/. */..(function (global, factory) {.typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :.typeof define === 'function' && define.amd ? define(factory) :.(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, global.Dexie = factory());.})(this, (function () { 'use strict';..const _global = typeof self !== 'undefined' ? self :. typeof window !== 'undefined' ? window :. global;..const keys = Object.keys;.const isArray = Array.isArray;.if (typeof

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	126274
Entropy (8bit):	4.501172302463666
Encrypted:	false
SSDEEP:	768:FkrRYgQWe2k5z2WGvb1G7S4bgjj+hl/6N8FyD8hz015jH3YScyfQW/vvkmd:FDgQWHk5z1Gvb1wSCgjj+hl/6LZnvsY
MD5:	A60D20C0CB2FFC5058FF87D62A4F198F
SHA1:	41E67C7ECFB2D648575AC8DFAE68C447F10C98DD
SHA-256:	EF6F148AE55723B5BB5D2BDE5261E4F132CF4C49267AD27CC45CFDCE1C2C35B6
SHA-512:	2951FC47674A72FF4BC26E219F3258C0012535A41717B389AC37712A8389C413ADA5F9A0D8444905A036B1FF9A308C93D0AEBAFCE6829A78C123B540A69E7C61
Malicious:	false
Reputation:	low
URL:	https://mega.nz/aesasm.js
Preview:	/*. asmCrypto. * Module from https://github.com/vibornoff/asmcrypto.js/blob/release/src/aes/aes.asm.js. * Copyright (c) 2013 Artem S Vybornov. * . * Permission is hereby granted, free of charge, to any person obtaining a copy of . * this software and associated documentation files (the "Software"), to deal in . * the Software without restriction, including without limitation the rights to . * use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of . * the Software, and to permit persons to whom the Software is furnished to do so, . * subject to the following conditions:. * . * The above copyright notice and this permission notice shall be included in all . * copies or substantial portions of the Software.. * . * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRI

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	381101
Entropy (8bit):	4.570608649497163
Encrypted:	false
SSDEEP:	3072:7/rV6XSDG94dNlLbgrZ8gFvAzdaZu12kSLi5Y4Xy6KPyEEslHx2k6WxEd3MU87Ok:d6XXZ85okvsP4+oBYFF
MD5:	6C463B181E10E343AF95D85B14705395
SHA1:	8B92E286BC1AB0D4C6F0991DBFCCD873D899DFC1
SHA-256:	8D60E4C0AA8069A6DCB5D74A94E2672DFB90332F43CDBD766F13C0D66E6DCCAF
SHA-512:	F5CD933D42EC0C98C330B9AB30E96DCB109A3876F0C798CD866A2D1AB1DBD85E190B29545A2A948B1FFD76D7D8C415B32E33555745A5B61936E69A73C9CA94CB
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/js/mega-3_8d60e4c0aa8069a6dcb5d74a94e2672dfb90332f43cdbd766f13c0d66e6dccaf.js
Preview:	/* Bundle Includes:. * js/utils/api.js. * js/utils/browser.js. * js/utils/clipboard.js. * js/utils/conv.js. * js/utils/crypt.js. * js/utils/csp.js. * js/utils/debug.js. * js/utils/dom.js. * js/utils/events.js. * js/utils/icu.js. * js/keymgr.js. * js/utils/locale.js. * js/utils/md5.js. /../ global MEGAException, MegaLogger, JSONSplitter, freeze, sleep, api_reqfailed, requesti, scqhead, scqtail /../. Deferred callback invocation controller. /.class MEGADeferredController extends Promise {. /. Constructs a new instance.. * @param {String\|Function} [callback] the function to invoke deferred.. * @param {} [ctx] context/scope to invoke the function with.. @param {} data data to pass through the callback. @param {String} [method] fire on idle, or timer based. */. constructor(callback, ctx, data, method = 'idle') {. let _reject, _resolve;. super((resolve, reject) => {. _reject = reject;.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	89334
Entropy (8bit):	5.030011932477186
Encrypted:	false
SSDEEP:	1536:jduSAhTTLJ/s726sp7o7X7a7c6sF7+1FC02nF/6adZStxNV5EnHGtMZtvBKji+2m:8SnF/d0xN0HGdwEiK
MD5:	6D753E3B8F0A6708723342C09083D500
SHA1:	F6B6BCAF47FA73A5B6D4724D68291809FE77EF7A
SHA-256:	56068F896874642289C7AEA7548F1A60D2E44CAEC8A95FF5AABCD0B8DDC1AACD
SHA-512:	B21C51741983E618EF402437D460CE9E91376E355EAEA762B7A8B08F70D40A8DB431ED90FD110AA93AEAB2CD163F8954198CE9207D6907F30B3710D87206CF30
Malicious:	false
Reputation:	low
URL:	https://na.static.mega.co.nz/4/imagery/sprites-fm-mime-90-uni.decaf26625f7b9e2.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg width="160" height="160" viewBox="0 0 128 112" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><view id="icon-aftereffects-90" viewBox="0 0 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="50%" y1="0%" x2="50%" y2="95.436%" id="aac"><stop stop-color="#12002C" stop-opacity=".9" offset="0%"/><stop stop-color="#12002C" offset="100%"/></linearGradient><path id="aaa" d="M0 0h16v16H0z"/></defs><g fill="none" fill-rule="evenodd"><mask id="aab" fill="#fff"><use xlink:href="#aaa"/></mask><g mask="url(#aab)"><path d="M3 2h10c.184 0 .333.15.333.333v11.334c0 .184-.149.333-.333.333H3a.333.333 0 0 1-.333-.333V2.333C2.667 2.15 2.816 2 3 2Z" fill="#D8A1FF"/><path d="M3.333 2.5h9.334c.092 0 .166.075.166.167v10.666a.167.167 0 0 1-.166.167H3.333a.167.167 0 0 1-.166-.167V2.667c0-.092.074-.167.166-.167Z" fill="url(#aac)"/><path d="M9.812 8.127c.183 0 .248 0 .266-.007

\Device\Null

Download File

Process:	C:\Windows\System32\PING.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	502
Entropy (8bit):	4.609881103024484
Encrypted:	false
SSDEEP:	12:PU5pTcgTcgTcgTcgTcgTcgTcgTcgTcgTLs4oS/AFSkIrxMVlmJHaVzvv:udUOAokItULVDv
MD5:	9A55AC83F5EA3F6CC8736395FBB6FA10
SHA1:	8E4CB9C8B280F80BDB5388102F885F388A1F5B4B
SHA-256:	085653C0C5CA1227F7BCCCFCB8A25383E70560CBF3747EA31A1EE52145369DF0
SHA-512:	B77F1531B0E50852C6AF444B65A44C9618AB108CC97D57022189F0CD048CC0F9587356707813AD7FC5607485A38F12B48EC8AF9BCD7F5C53AAA1AEF5B79A56FF
Malicious:	false
Reputation:	low
Preview:	..Pinging 124406 [::1] with 32 bytes of data:..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ..Reply from ::1: time<1ms ....Ping statistics for ::1:.. Packets: Sent = 10, Received = 10, Lost = 0 (0% loss),..Approximate round trip times in milli-seconds:.. Minimum = 0ms, Maximum = 0ms, Average = 0ms..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 11, 2024 13:36:34.997788906 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:34.997816086 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:34.997886896 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:34.998691082 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:34.998708010 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:35.688155890 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:35.688544989 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:35.688586950 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:35.690418959 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:35.690498114 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:35.691348076 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:35.691431999 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:35.691585064 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:35.691601992 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:35.745343924 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.033123016 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.033183098 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.033240080 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.033258915 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.034081936 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.034166098 CEST	443	49709	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.034226894 CEST	49709	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.046439886 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.046482086 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.046577930 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.046895981 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.046915054 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.679754972 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.680082083 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.680114031 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.681576967 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.681660891 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.682091951 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.682172060 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.682285070 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.682295084 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:36.737379074 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:36.997518063 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.041361094 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.085756063 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.085769892 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.085817099 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.085836887 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.085850000 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.085890055 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.085935116 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.085952997 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.085987091 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.117172956 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.117185116 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.117242098 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.117322922 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.117345095 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.117373943 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.117383957 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.151859999 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.151886940 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.151966095 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.151998997 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.152048111 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.194374084 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.194401979 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.194461107 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.194489002 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.194504976 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.194528103 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.225316048 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.225347042 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.225398064 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.225411892 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.225455046 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.225474119 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.250042915 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.250067949 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.250165939 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.250186920 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.250224113 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.274612904 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.274652958 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.274698019 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.274734020 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.274761915 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.274779081 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.289340019 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.289369106 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.289446115 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.289479971 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.289498091 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.289521933 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.303729057 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.303757906 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.303841114 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.303879976 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.303927898 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.317158937 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.317189932 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.317255020 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.317291975 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.317307949 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.317341089 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.328553915 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.328584909 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.328635931 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.328660011 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.328680038 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.328700066 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.341259956 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.341289997 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.341334105 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.341352940 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.341362953 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.341388941 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.341428041 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.341476917 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.341564894 CEST	49713	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.341582060 CEST	443	49713	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.362131119 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.362169981 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.362306118 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.362524986 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:37.362535000 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:37.440450907 CEST	49677	443	192.168.2.17	204.79.197.200
Jul 11, 2024 13:36:37.440450907 CEST	49678	443	192.168.2.17	204.79.197.200
Jul 11, 2024 13:36:37.443953037 CEST	49676	443	192.168.2.17	204.79.197.200
Jul 11, 2024 13:36:38.005059958 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.005402088 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.005429983 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.005907059 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.006278038 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.006369114 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.006428003 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.047367096 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.047377110 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.170304060 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.170341969 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.170407057 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.170439005 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.170447111 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.170491934 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.170629025 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.170639038 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.170753002 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.170767069 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.205931902 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.205956936 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.206018925 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.206201077 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.206202030 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.206844091 CEST	49715	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.206887960 CEST	443	49715	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.214509964 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.214572906 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.214639902 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.214850903 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.214860916 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.224984884 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:38.225028038 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:38.225099087 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:38.225280046 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:38.225296974 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:38.228054047 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.228065968 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.228122950 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.228214979 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.228235960 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.228285074 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.228415966 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.228430986 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.228564978 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.228588104 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.805087090 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.805429935 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.805464983 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.806721926 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.806906939 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.806946039 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.807145119 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.807245970 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.808219910 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.808320999 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.808377981 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.808388948 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.808468103 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.808547020 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.809478998 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.809591055 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.809600115 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.809720039 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.842303038 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.842708111 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.842744112 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.843916893 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.844016075 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.844990969 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.845062017 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.845163107 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.845175028 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.850704908 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.851397038 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.851416111 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.852854013 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.852946043 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.853234053 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.853303909 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.853395939 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.853405952 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:38.863351107 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.864653111 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.864680052 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.877813101 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.878113985 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.878154039 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.879260063 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.879595041 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.879712105 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.879723072 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.879779100 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:38.895376921 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.895411968 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:38.911465883 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.923309088 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.923357964 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.923371077 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.923391104 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.923424006 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.923434019 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.923448086 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.923476934 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.923523903 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.923548937 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.924302101 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.924341917 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.924357891 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.924371958 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.924395084 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.924416065 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.924416065 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.924434900 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:38.924498081 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.924505949 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:38.927381039 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:38.963073015 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:38.963450909 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:38.963469982 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:38.964382887 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:38.964474916 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:38.965410948 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:38.965476036 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:38.965607882 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:38.965615988 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.007397890 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.007956028 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.007993937 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.008115053 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.008137941 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.008186102 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.021692038 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.021708965 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.021743059 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.021888971 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.021905899 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.021949053 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.022221088 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.022253036 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.022290945 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.022300959 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.022336006 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.022347927 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.022768021 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.022802114 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.022838116 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.022845984 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.022866964 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.022886038 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.092890978 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.092924118 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.093092918 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.093108892 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.093163013 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.093909979 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.093945026 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.093995094 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.094027042 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.094044924 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.094068050 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.094964981 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.094993114 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.095032930 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.095041037 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.095072031 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.095093012 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.097722054 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.097748041 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.097790956 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.097796917 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.097821951 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.097845078 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.110069036 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.110090971 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.110178947 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.110193968 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.110235929 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.111422062 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.111449957 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.111491919 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.111498117 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.111525059 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.111548901 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.111860037 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.111882925 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.111922026 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.111927986 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.111955881 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.111979008 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.112741947 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.112762928 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.112814903 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.112821102 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.112842083 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.112863064 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.180910110 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.180938005 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.181034088 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.181061029 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.181107998 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.181591034 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.181622028 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.181662083 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.181668043 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.181706905 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.181730986 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.182832003 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.182858944 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.182902098 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.182909012 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.183032990 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.183032990 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.183432102 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.183459997 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.183502913 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.183507919 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.183552027 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.184032917 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.184061050 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.184106112 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.184134960 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.184154987 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.184175014 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.185786009 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.185811043 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.185892105 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.185898066 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.185931921 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.196207047 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.196229935 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.196356058 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.196372032 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.196420908 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.197674036 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.197704077 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.197757959 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.197772026 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.197803974 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.197824001 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.198438883 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.198465109 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.198518991 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.198527098 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.198587894 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.199246883 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.199266911 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.199341059 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.199348927 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.199377060 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.199402094 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.200133085 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.200156927 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.200215101 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.200221062 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.200259924 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.200711012 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.200738907 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.200783014 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.200793982 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.200828075 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.200851917 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.201366901 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.201389074 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.201432943 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.201438904 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.201493979 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.202016115 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.202035904 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.202080965 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.202086926 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.202109098 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.202132940 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.202616930 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.202642918 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.202665091 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.202701092 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:39.202729940 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.202769041 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:39.202826023 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.202888966 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.202931881 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:39.203521013 CEST	49719	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:39.203535080 CEST	443	49719	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.213116884 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.213143110 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.213232994 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.213443995 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.213454008 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.267740965 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.267885923 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.267940044 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.267952919 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.267992973 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.268007040 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.268343925 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.268409014 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.268460035 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.268558979 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.268608093 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.268635988 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.269093990 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.269160032 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.269186020 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.269192934 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.269247055 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.270004034 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.270059109 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.270126104 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.270165920 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.270196915 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.270219088 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.270826101 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.270870924 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.270894051 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.270916939 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.270931959 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.270951033 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.271001101 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.271003008 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.271008015 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.271054983 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.271620035 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.272188902 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.272247076 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.272285938 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.272291899 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.272366047 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.273293972 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.273339033 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.273400068 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.273427963 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.273459911 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.273489952 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.282215118 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.282274961 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.282363892 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.282371998 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.282418013 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.283327103 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.283382893 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.283406973 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.283417940 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.283423901 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.283431053 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.283467054 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.283474922 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.283499002 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.283539057 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.283539057 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.283911943 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.283970118 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.284003973 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.284010887 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.284054041 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.284257889 CEST	49721	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.284284115 CEST	443	49721	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.284677029 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.284720898 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.284765959 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.284780979 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.284811020 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.284832001 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.285193920 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.285235882 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.285275936 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.285284042 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.285355091 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.285394907 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.286437988 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.286482096 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.286541939 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.286556959 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.286585093 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.286609888 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.287080050 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.287123919 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.287161112 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.287177086 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.287200928 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.287221909 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.290467978 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:39.306780100 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:39.341437101 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:39.341469049 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:39.341792107 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:39.341995001 CEST	443	49718	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:39.342092037 CEST	49718	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:39.352755070 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:39.352782965 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:39.352879047 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:39.353091955 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:39.353107929 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:39.353949070 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.354044914 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.354065895 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.354074001 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.354115009 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.354217052 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.354429007 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.354952097 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.355011940 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.355804920 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.360558987 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.360985994 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.361022949 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.361028910 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:39.361044884 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:39.361053944 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.361160994 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.361186981 CEST	49723	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.361202002 CEST	443	49723	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.361536980 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:39.361840963 CEST	443	49717	66.203.125.16	192.168.2.17
Jul 11, 2024 13:36:39.361965895 CEST	49717	443	192.168.2.17	66.203.125.16
Jul 11, 2024 13:36:39.364573956 CEST	49722	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.364600897 CEST	443	49722	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.365108967 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:39.365130901 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.365209103 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:39.365816116 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:39.365844965 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:39.365916967 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:39.366034031 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:39.366050005 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:39.366183996 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:39.366199970 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:39.378887892 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:39.378956079 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:39.379045963 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:39.379246950 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:39.379252911 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:39.379277945 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:39.379283905 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:39.379362106 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:39.379501104 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:39.379518986 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:39.381448030 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.381473064 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.381539106 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.381741047 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.381753922 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.384027958 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.384064913 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.384140015 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.384332895 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.384351969 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.818118095 CEST	49732	443	192.168.2.17	142.250.185.132
Jul 11, 2024 13:36:39.818183899 CEST	443	49732	142.250.185.132	192.168.2.17
Jul 11, 2024 13:36:39.818259001 CEST	49732	443	192.168.2.17	142.250.185.132
Jul 11, 2024 13:36:39.818480015 CEST	49732	443	192.168.2.17	142.250.185.132
Jul 11, 2024 13:36:39.818500042 CEST	443	49732	142.250.185.132	192.168.2.17
Jul 11, 2024 13:36:39.871409893 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.871695995 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.871727943 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.872080088 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.872493982 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.872560978 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.872665882 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:39.916529894 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:39.957046032 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.957350969 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.957385063 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.957869053 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.958173990 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.958261967 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.958311081 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.966183901 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.966542959 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.966569901 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.967703104 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.968229055 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.968419075 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:39.968425035 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.998383045 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:39.998406887 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.012500048 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.013365984 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.040188074 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.040523052 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.040564060 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.041243076 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.041552067 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.041591883 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.041719913 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.041796923 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.042404890 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.042406082 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.042632103 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.043030977 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.043091059 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.043399096 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.043489933 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.043520927 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.044826031 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.045020103 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:40.045051098 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.046468973 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.046550989 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:40.046855927 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:40.046936989 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.046972036 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:40.069530010 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.069874048 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.069897890 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.071367979 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.071453094 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.071763039 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.071866989 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.071887016 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.088517904 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.088519096 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.089607954 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.089864016 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.089883089 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.091311932 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.091423035 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.091808081 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.091886044 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.091962099 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.091970921 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.093394995 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:40.093413115 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.093424082 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.093460083 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.093477011 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.093487978 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.093977928 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.094007969 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.094018936 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.094038010 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.094069958 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.094096899 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.094135046 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.094152927 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.094182968 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.100754023 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.100790024 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.100801945 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.100824118 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.100860119 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.100864887 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.100897074 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.100923061 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.100943089 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.116498947 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.125379086 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.125406981 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.141374111 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.141382933 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.141395092 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.141395092 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:40.173434973 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.175903082 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.175939083 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.176058054 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.176090002 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.176139116 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.179569960 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.179656982 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.179682970 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.179706097 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.179728031 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.179754019 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.179963112 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.179994106 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.180051088 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.180074930 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.180094004 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.180125952 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.181487083 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.181516886 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.181564093 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.181575060 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.181601048 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.181618929 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.192730904 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:40.192760944 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:40.192820072 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:40.192826033 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:40.192883968 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:40.193810940 CEST	49724	443	192.168.2.17	31.216.145.5
Jul 11, 2024 13:36:40.193837881 CEST	443	49724	31.216.145.5	192.168.2.17
Jul 11, 2024 13:36:40.265467882 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.265503883 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.265670061 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.265707970 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.265754938 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.266714096 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.266735077 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.266798019 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.266813993 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.266860962 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.270569086 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.270591021 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.270673037 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.270695925 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.270749092 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.270925999 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.270946026 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.270992994 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.271011114 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.271023035 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.271043062 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.271689892 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.271713018 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.271775007 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.271787882 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.271831989 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.272392035 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.272412062 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.272455931 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.272464037 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.272502899 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.272502899 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.274506092 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.274534941 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.274580956 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.274586916 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.274610996 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.274622917 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.325028896 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.325069904 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.325083017 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.325105906 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.325129986 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.325141907 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.325150967 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.325217009 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.325251102 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.325304031 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.325368881 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.344305038 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.352086067 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.352118969 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.352129936 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.352148056 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.352180958 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.352232933 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.352262974 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.352293968 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.352353096 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.352391005 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.352443933 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.352510929 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.352538109 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.352581978 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.353346109 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.353367090 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.353409052 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.353420019 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.353441954 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.353462934 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.354458094 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.354480028 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.355524063 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.360738993 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.360761881 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.361263990 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.362601995 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.364223003 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.364238977 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.364275932 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.364300966 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.364310980 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.364331007 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.364442110 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.364686012 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.364706993 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.364748955 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.364753962 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.364784002 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.364811897 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.374804974 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.375003099 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.375098944 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:40.375672102 CEST	49726	443	192.168.2.17	31.216.144.5
Jul 11, 2024 13:36:40.375694036 CEST	443	49726	31.216.144.5	192.168.2.17
Jul 11, 2024 13:36:40.379388094 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.379425049 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.379648924 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.379710913 CEST	443	49727	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.379774094 CEST	49727	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.394412994 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.394453049 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.394804955 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.394886971 CEST	443	49725	66.203.125.14	192.168.2.17
Jul 11, 2024 13:36:40.394959927 CEST	49725	443	192.168.2.17	66.203.125.14
Jul 11, 2024 13:36:40.396891117 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.396907091 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.396945000 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.397010088 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.397030115 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.397077084 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.397100925 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.397980928 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.398011923 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.398062944 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.398087025 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.398104906 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.398128986 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.413592100 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.413616896 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.413723946 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.413738012 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.413784981 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.425549030 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.425580025 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.425657988 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.425679922 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.425823927 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.439801931 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.439829111 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.439949989 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.439974070 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.440025091 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.440417051 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.440438986 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.440502882 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.440510988 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.440547943 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.440943003 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.440969944 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.440987110 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.440994024 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.441009045 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.441055059 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.441287994 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.441333055 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.441381931 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.441416979 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.441430092 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.441467047 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.441857100 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.441875935 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.441934109 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.441942930 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.441988945 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.442517042 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.442538977 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.442614079 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.442624092 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.442663908 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.443365097 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.443384886 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.443445921 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.443455935 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.443500996 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.443918943 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.443938971 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.443998098 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.444005966 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.444055080 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.444716930 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.444739103 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.444799900 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.444808006 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.444849968 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.448163033 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.448198080 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.448293924 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.448327065 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.448381901 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.449171066 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.449197054 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.449278116 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.449284077 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.449348927 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.450544119 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.450568914 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.450653076 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.450659037 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.450691938 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.451586008 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.451608896 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.451692104 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.451698065 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.451740026 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.452614069 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.452640057 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.452687979 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.452693939 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.452769995 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.453648090 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.453671932 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.453732967 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.453739882 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.453774929 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.454605103 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.454655886 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.454726934 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.454732895 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.454792023 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.479527950 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.479567051 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.479666948 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.479697943 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.479754925 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.482614994 CEST	443	49732	142.250.185.132	192.168.2.17
Jul 11, 2024 13:36:40.482852936 CEST	49732	443	192.168.2.17	142.250.185.132
Jul 11, 2024 13:36:40.482887983 CEST	443	49732	142.250.185.132	192.168.2.17
Jul 11, 2024 13:36:40.483716965 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.483736038 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.483804941 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.483810902 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.483825922 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.483850956 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.484311104 CEST	443	49732	142.250.185.132	192.168.2.17
Jul 11, 2024 13:36:40.484379053 CEST	49732	443	192.168.2.17	142.250.185.132
Jul 11, 2024 13:36:40.485316992 CEST	49732	443	192.168.2.17	142.250.185.132
Jul 11, 2024 13:36:40.485405922 CEST	443	49732	142.250.185.132	192.168.2.17
Jul 11, 2024 13:36:40.490287066 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.490309954 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.490408897 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.490415096 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.490457058 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.505222082 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.505240917 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.505315065 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.505320072 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.505369902 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.509550095 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.509577036 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.509634972 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.509649992 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.509668112 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.509686947 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.514065027 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.514085054 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.514166117 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.514173985 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.514216900 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.519413948 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.519433975 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.519500017 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.519507885 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.519543886 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.526223898 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.526247025 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.526339054 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.526357889 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.526405096 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.526726961 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.526742935 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.526788950 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.526797056 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.526835918 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.527403116 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.527417898 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.527465105 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.527472019 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.527502060 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.528146029 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.528161049 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.528214931 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.528220892 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.528331041 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.531047106 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.531063080 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.531121016 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.531128883 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.531181097 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.531542063 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.531560898 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.531611919 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.531619072 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.531660080 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.532119989 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.532135963 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.532200098 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.532207012 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.532253027 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.535662889 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.535682917 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.535686970 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.535706997 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.535731077 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.535737038 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.535780907 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.535789967 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.535813093 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.535825968 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.536398888 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.536415100 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.536468983 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.536478996 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.536519051 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.537091970 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537111044 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537164927 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.537170887 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537204027 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.537797928 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537811995 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537851095 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537861109 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.537866116 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537903070 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.537906885 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537940979 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.537945032 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.537987947 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.538033009 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.538049936 CEST	443	49731	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.538058996 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.538085938 CEST	49731	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.538356066 CEST	49732	443	192.168.2.17	142.250.185.132
Jul 11, 2024 13:36:40.538367987 CEST	443	49732	142.250.185.132	192.168.2.17
Jul 11, 2024 13:36:40.540705919 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.540739059 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.540816069 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.541040897 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.541055918 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.547350883 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.547379017 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.547446012 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.547694921 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.547708988 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.566042900 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.566062927 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.566134930 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.566142082 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.566181898 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.566776991 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.566793919 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.566853046 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.566859007 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.566895962 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.570645094 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.570663929 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.570725918 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.570730925 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.570764065 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.571389914 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.571408033 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.571466923 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.571471930 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.571511030 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.576229095 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.576246977 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.576296091 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.576301098 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.576356888 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.582577944 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.582602024 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.582642078 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.582647085 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.582683086 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.586374998 CEST	49732	443	192.168.2.17	142.250.185.132
Jul 11, 2024 13:36:40.592127085 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.592149019 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.592233896 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.592238903 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.592279911 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.598539114 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.598561049 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.598651886 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.598665953 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.598725080 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.599370956 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.599391937 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.599450111 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.599457026 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.599503040 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.603058100 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.603079081 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.603137016 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.603144884 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.603183985 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.603948116 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.603966951 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.604021072 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.604027987 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.604067087 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.608122110 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.608143091 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.608217001 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.608225107 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.608273029 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.612817049 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.612835884 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.612910986 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.612917900 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.612963915 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.613796949 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.613832951 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.613881111 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.613917112 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.613938093 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.613961935 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.614239931 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614258051 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614329100 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.614336967 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614382029 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.614725113 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614742994 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614784002 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614795923 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.614806890 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614835024 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.614855051 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.614861012 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614886045 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.614928007 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.615046024 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.615060091 CEST	443	49730	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.615073919 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.615106106 CEST	49730	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.624129057 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.624150038 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.624236107 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.624245882 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.624290943 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.626842976 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.626868010 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.626938105 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.627108097 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.627140045 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.627198935 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.627405882 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.627422094 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.627552032 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:40.627568960 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:40.656594992 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.656661034 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.656723022 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.656754017 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.656774044 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.656801939 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.657546043 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.657567024 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.657617092 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.657623053 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.657668114 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.658034086 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.658055067 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.658116102 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.658122063 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.658159018 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.658799887 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.658823967 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.658870935 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.658875942 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.658900976 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.658926010 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.659964085 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.659984112 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.660032034 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.660037041 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.660079956 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.666666031 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.666685104 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.666857004 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.666862011 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.666910887 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.670471907 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.670490980 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.670541048 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.670545101 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.670568943 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.670592070 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.679450989 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.679471016 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.679517031 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.679521084 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.679560900 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.686635971 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.686656952 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.686736107 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.686765909 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.686779976 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.687134981 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.687340021 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.687361002 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.687431097 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.687438965 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.687478065 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.687952995 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.687979937 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.688024044 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.688030005 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.688066006 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.688616991 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.688637018 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.688702106 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.688709021 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.688759089 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.691915035 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.691935062 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.691998959 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.692006111 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.692049980 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.696789026 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.696809053 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.696871996 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.696880102 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.696924925 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.701585054 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.701605082 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.701679945 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.701694012 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.701765060 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.718381882 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.718400955 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.718446970 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.718456030 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.718487978 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.718512058 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.731368065 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.731442928 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.731457949 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.731507063 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.731836081 CEST	49728	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.731858015 CEST	443	49728	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.776133060 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.776154041 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.776226997 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.776235104 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.776283026 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.777148008 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.777167082 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.777210951 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.777218103 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.777251005 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.777273893 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.777702093 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.777746916 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.777776003 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.777780056 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:40.777823925 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.778011084 CEST	49729	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:40.778027058 CEST	443	49729	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.132283926 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.132859945 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.132896900 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.133382082 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.133776903 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.133868933 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.133986950 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.176516056 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.194067001 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.198064089 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.198090076 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.198491096 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.202003956 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.202107906 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.202167034 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.227314949 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.227906942 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.227947950 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.228460073 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.228853941 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.228962898 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.228996038 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.244544029 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.255505085 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.259412050 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.259443998 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.259464979 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.259529114 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.259567976 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.259633064 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.271413088 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.271456957 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.319571972 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.319668055 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.319693089 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.319715977 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.319760084 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.319765091 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.319782019 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.319792032 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.319813967 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.319816113 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.319835901 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.319869995 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.340022087 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.340408087 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.340449095 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.341090918 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.341494083 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.341593981 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.341646910 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.344338894 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.344363928 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.344445944 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.344477892 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.344540119 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.346622944 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.346654892 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.346699953 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.346719027 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.346745014 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.346771002 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.383405924 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.383440971 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.619937897 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.619957924 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.620029926 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.620091915 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.620120049 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.620146036 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.620165110 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.621161938 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.621186018 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.621252060 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.621258974 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.621632099 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.621892929 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.621917009 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.621973038 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.621998072 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.622009993 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.622406960 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.622587919 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.622607946 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.622649908 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.622658968 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.622684956 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.622704983 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.624018908 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.624039888 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.624109983 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.624116898 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.624161005 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.626516104 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.626544952 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.626575947 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.626616001 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.626619101 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.626626015 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.626631021 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.626645088 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.626672029 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.626684904 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.626708031 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.626763105 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.626804113 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.626804113 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.626837969 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.627336979 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.627353907 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.627410889 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.627419949 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.627484083 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.627979040 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.628015041 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.628051043 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.628057003 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.628077984 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.628109932 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.630316019 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.630338907 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.630409956 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.630415916 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.630825043 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.630989075 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.631006956 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.631051064 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.631066084 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.631084919 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.631113052 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.631664991 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.631686926 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.631733894 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.631740093 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.631767988 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.631789923 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.631881952 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.631900072 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.631958008 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.631967068 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.632004976 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.632641077 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.632668018 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.632728100 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.632740974 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.632967949 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.632983923 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.633037090 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.633044958 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.633080006 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.633080959 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.633965969 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.633987904 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.634027004 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.634044886 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.634049892 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.634053946 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.634092093 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.634109020 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.634124041 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.634124994 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.634140968 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.634855986 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.634884119 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.634964943 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.634988070 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.635391951 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.635854959 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.635874987 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.635902882 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.635935068 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.635947943 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.635952950 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.635965109 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.635973930 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.636013031 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.636017084 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.636048079 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.636049032 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.636049986 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.636064053 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.636074066 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.636166096 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.636167049 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.636197090 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.636271954 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.636272907 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.636570930 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.636600971 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.636708021 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.636727095 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.636765003 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.636765957 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.636780977 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.636790037 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.636883020 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.636892080 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.636938095 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.637861013 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.637897968 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.637954950 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.637963057 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.637999058 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.638021946 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.638387918 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.638401985 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.638463974 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.638473988 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.638515949 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.639898062 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.639914036 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.639961958 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.639991045 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.640000105 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.640002012 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.640117884 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.640120029 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.640125990 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.640665054 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.641007900 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.641016006 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.641022921 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.641047001 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.641107082 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.641119957 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.641149044 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.641149044 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.641155958 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.641175985 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.641205072 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.642014980 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.642045021 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.642123938 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.642131090 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.642194033 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.642215967 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.642283916 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.642292976 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.642313957 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.642354965 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.643963099 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.643981934 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.644058943 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.644068956 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.644103050 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.644830942 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.644850969 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.644906044 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.644920111 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.644932032 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.644932032 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.644984007 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.645015955 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.645042896 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.645047903 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.645081997 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.645705938 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.645735979 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.645791054 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.645800114 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.645828962 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.645855904 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.646501064 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.646516085 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.646589041 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.646599054 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.646642923 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.646812916 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.646828890 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.646831036 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.646859884 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.646909952 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.646919012 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.646950006 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.646990061 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.647017002 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.647033930 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.647033930 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.652862072 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.652889013 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.653031111 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.653054953 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.653633118 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.658941031 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.659022093 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.659053087 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.659130096 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.659401894 CEST	49734	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.659423113 CEST	443	49734	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.665246010 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.665280104 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.665399075 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.665410995 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.665460110 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.665621996 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.665685892 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.665709019 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.665735006 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.665760040 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.665781021 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.666349888 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.666405916 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.666445971 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.666460037 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.666474104 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.666671991 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.666724920 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.666732073 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.666762114 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.666791916 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.666819096 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.666935921 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.666971922 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.667047977 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.667471886 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.667485952 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.668579102 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.668636084 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.668693066 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.668713093 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.668729067 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.668754101 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.669151068 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.669205904 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.669238091 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.669245005 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.669291973 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.669399977 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.669403076 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.669455051 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.669644117 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.669982910 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.669996977 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.670733929 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.670790911 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.670835972 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.670875072 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.670909882 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.670921087 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.671422958 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.671468019 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.671504974 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.671513081 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.671541929 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.671556950 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.672349930 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.672399044 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.672434092 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.672439098 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.672468901 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.672476053 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.680325031 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.680365086 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.680433989 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.680471897 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.680496931 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.680516958 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.692198038 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.692229986 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.692398071 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.692425013 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.692467928 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.726325035 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.726357937 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.726459980 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.726532936 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.726603985 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.728728056 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.728750944 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.728820086 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.728838921 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.728890896 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.729734898 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.729760885 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.729810953 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.729825020 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.729854107 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.729876041 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.734538078 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.734575987 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.734642982 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.734656096 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.734719038 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.735229969 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.739712000 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.739733934 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.739806890 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.739824057 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.739880085 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.750794888 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.750822067 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.750904083 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.750919104 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.750977993 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.752558947 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.752595901 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.752660990 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.752688885 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.752702951 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.752733946 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.753082037 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.753108978 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.753142118 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.753149033 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.753174067 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.753191948 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.753765106 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.753793001 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.753827095 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.753834963 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.753856897 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.753875017 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.754463911 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.754488945 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.754524946 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.754534006 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.754554033 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.754566908 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.755770922 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.755800009 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.755837917 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.755848885 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.755876064 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.755883932 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.756464005 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.756504059 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.756530046 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.756536961 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.756555080 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.756577969 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.757024050 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.757051945 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.757096052 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.757102966 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.757119894 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.757138014 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.758040905 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.758069992 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.758110046 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.758116961 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.758138895 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.758152962 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.765470028 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.765541077 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.765574932 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.765611887 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.765626907 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.765655994 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.770091057 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.770144939 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.770185947 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.770203114 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.770220041 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.770236969 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.775332928 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.775382042 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.775438070 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.775463104 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.775473118 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.775509119 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.787317991 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.787374973 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.787422895 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.787445068 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.787456989 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.787484884 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.812458992 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.812515974 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.812575102 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.812616110 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.812634945 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.812657118 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.813143015 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.813165903 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.813201904 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.813211918 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.813230991 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.813246965 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.814155102 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.814184904 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.814225912 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.814234018 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.814258099 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.814270973 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.819993973 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.820027113 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.820105076 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.820116043 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.820152998 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.820445061 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.820466042 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.820502996 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.820512056 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.820533991 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.820547104 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.821753979 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.821782112 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.821827888 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.821836948 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.821873903 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.827689886 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.827721119 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.827801943 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.827837944 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.827889919 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.838772058 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.838803053 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.838845015 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.838913918 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.838913918 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.838929892 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.838973999 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.839313984 CEST	49736	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.839334011 CEST	443	49736	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.852802992 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.852859974 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.852943897 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.853315115 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.853378057 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.853439093 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.853665113 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.853684902 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.853878975 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:41.853894949 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:41.858138084 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.858203888 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.858263969 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.858279943 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.858309031 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.858345985 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.859278917 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.859328985 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.859369993 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.859380007 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.859400034 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.859420061 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.863162994 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.863228083 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.863281012 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.863291025 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.863312960 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.863363981 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.864377022 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.864423990 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.864458084 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.864468098 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.864512920 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.864512920 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.869201899 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.869254112 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.869287968 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.869297981 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.869337082 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.869359016 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.873132944 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.873162985 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.873209953 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.873224974 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.873249054 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.873265028 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.878225088 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.878253937 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.878302097 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.878312111 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.878351927 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.879786968 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.879818916 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.879903078 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.879940033 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.879998922 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.899434090 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.899470091 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.899686098 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.899724007 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.899802923 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.900091887 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.900118113 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.900166988 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.900191069 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.900218964 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.900259018 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.900371075 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.900435925 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.900450945 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.900491953 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.900544882 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.900599957 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.900600910 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.900635958 CEST	443	49733	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.900695086 CEST	49733	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.950187922 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.950263023 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.950333118 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.950351000 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.950380087 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.950397968 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.950511932 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.950566053 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.950588942 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.950596094 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.950620890 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.950634956 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.951158047 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.951201916 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.951240063 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.951246977 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.951272011 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.951296091 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.951991081 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.952048063 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.952084064 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.952090979 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.952115059 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.952132940 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.956084967 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.956140995 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.956182003 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.956191063 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.956216097 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.956228971 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.960784912 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.960828066 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.960877895 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.960889101 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.960908890 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.960927963 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.965759993 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.965806007 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.965857983 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.965869904 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.965879917 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.965900898 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.971657038 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.971707106 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.971750975 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.971761942 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:41.971786022 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:41.971797943 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.042277098 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.042342901 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.042392969 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.042432070 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.042452097 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.042480946 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.042692900 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.042747974 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.042787075 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.042795897 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.042808056 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.042835951 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.043275118 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.043329954 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.043369055 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.043375969 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.043407917 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.043407917 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.043973923 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.044020891 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.044055939 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.044064045 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.044080973 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.044101954 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.048198938 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.048263073 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.048281908 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.048293114 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.048321009 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.048351049 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.053067923 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.053097963 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.053142071 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.053150892 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.053175926 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.053189993 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.058315992 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.058346033 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.058392048 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.058398008 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.058410883 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.058434963 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.058460951 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.058466911 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.058512926 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.058559895 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.058799982 CEST	49735	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.058816910 CEST	443	49735	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.258588076 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.258897066 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.258938074 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.259258032 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.259565115 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.259644985 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.259695053 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.304508924 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.310417891 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.373459101 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.373914003 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.373950958 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.374308109 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.374783993 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.374847889 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.374969959 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.387388945 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.387418032 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.387427092 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.387506962 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.387526989 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.387537003 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.387552977 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.387581110 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.387598038 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.387598038 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.387633085 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.416515112 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.439645052 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.439974070 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.439991951 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.440615892 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.440926075 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.441016912 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.441066980 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.484509945 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.486413002 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.494847059 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.494873047 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.494985104 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.495003939 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.495049000 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.497097015 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.497112989 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.497174978 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.497184038 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.497226000 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.565042973 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.565079927 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.565092087 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.565116882 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.565157890 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.565193892 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.565229893 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.565243959 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.565279007 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.586442947 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.586479902 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.586584091 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.586606979 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.586623907 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.586644888 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.586647987 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.586666107 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.586678028 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.586704969 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.588299036 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.588321924 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.588377953 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.588387012 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.588423014 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.590357065 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.590373993 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.590432882 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.590439081 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.590473890 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.596203089 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.596508026 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.596537113 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.596885920 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.597192049 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.597265005 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.597333908 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.640518904 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.652822971 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.652904987 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.652952909 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.652992964 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.653007984 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.653036118 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.654337883 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.654408932 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.654469013 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.654485941 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.654510021 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.654531956 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.656094074 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.656121969 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.656138897 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.656235933 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.656311035 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.656375885 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.676491022 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.676520109 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.676664114 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.676698923 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.676749945 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.677704096 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.677721024 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.677783012 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.677793026 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.677839994 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.678255081 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.678271055 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.678344965 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.678354979 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.678395987 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.678879023 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.678894043 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.678953886 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.678962946 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.679006100 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.679853916 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.679869890 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.679933071 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.679940939 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.679980993 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.680867910 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.680891037 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.680953979 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.680962086 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.681005955 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.706018925 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.706052065 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.706161022 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.706209898 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.706254005 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.740721941 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.740791082 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.740822077 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.740845919 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.740869045 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.740904093 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.741039991 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.741090059 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.741117954 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.741126060 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.741147041 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.741169930 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.741794109 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.741841078 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.741878986 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.741885900 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.741918087 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.741942883 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.742212057 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.742244959 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.742307901 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.742384911 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.742422104 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.742446899 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.742753029 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.742796898 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.742834091 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.742841959 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.742896080 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.742913961 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.756385088 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.756422043 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.756474972 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.756527901 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.756586075 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.756601095 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.767030954 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.767055988 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.767128944 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.767154932 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.767199993 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.767517090 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.767534971 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.767582893 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.767592907 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.767642021 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.768176079 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.768189907 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.768246889 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.768259048 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.768299103 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.768594980 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.768611908 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.768655062 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.768666029 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.768702030 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.768718958 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.769023895 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.769040108 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.769107103 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.769115925 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.769162893 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.772248030 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.772269964 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.772350073 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.772371054 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.772417068 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.772738934 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.772758961 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.772789955 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.772799969 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.772821903 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.772838116 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.796756029 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.796786070 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.796849966 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.796878099 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.796906948 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.796915054 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.829260111 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.829330921 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.829411983 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.829453945 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.829473972 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.829503059 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.829961061 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.830010891 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.830043077 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.830054998 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.830070019 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.830092907 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.830847025 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.830898046 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.830926895 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.830939054 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.830959082 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.830976963 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.831567049 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.831604004 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.831691980 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.831759930 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.831820011 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.831828117 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.831866026 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.831888914 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.831901073 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.831914902 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.831937075 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.832657099 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.832706928 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.832743883 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.832756042 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.832777977 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.832799911 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.833086014 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.833129883 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.833162069 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.833172083 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.833194017 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.833214998 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.834069014 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.834105015 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.834162951 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.834192991 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.834222078 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.834264040 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.834358931 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.834402084 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.834434986 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.834450006 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.834469080 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.834490061 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.837673903 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.837702990 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.837774992 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.837795973 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.837826014 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.837894917 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.851264954 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.851301908 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.851445913 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.851520061 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.851583958 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.856074095 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.856102943 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.856123924 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.856189013 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.856231928 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.856250048 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.856281996 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.859213114 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.859241009 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.859314919 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.859345913 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.859396935 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.859715939 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.859741926 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.859781027 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.859791040 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.859806061 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.859832048 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.860215902 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.860239029 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.860296011 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.860300064 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.860315084 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.860337019 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.860366106 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.860378027 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.860389948 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.860411882 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.860979080 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.861006975 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.861066103 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.861076117 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.861112118 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.861783028 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.861799002 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.861846924 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.861856937 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.861874104 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.861891031 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.861923933 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.873852968 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.873889923 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.873977900 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.874012947 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.874052048 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.887355089 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.887381077 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.887665033 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.887691975 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.918029070 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.918066025 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.918162107 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.918186903 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.918232918 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.918596983 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.918620110 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.918672085 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.918679953 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.918714046 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.919179916 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.919199944 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.919244051 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.919250965 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.919274092 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.919294119 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.919826031 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.919850111 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.919892073 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.919898033 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.919924974 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.919939995 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.920969963 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.921000004 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.921060085 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.921097994 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.921118021 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.921148062 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.921969891 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.921989918 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.922053099 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.922063112 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.922105074 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.922748089 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.922770023 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.922827959 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.922837019 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.922869921 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.923374891 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.923396111 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.923460007 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.923466921 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.923504114 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.924096107 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.924120903 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.924182892 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.924190044 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.924225092 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.924232006 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.924247026 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.924304962 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.924312115 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.924345016 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.924791098 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.924818993 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.924876928 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.924885035 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.924923897 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.925518990 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.925539017 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.925601006 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.925606966 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.925657034 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.931504011 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.933342934 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.933366060 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.933434010 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.933443069 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.933485985 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.933804989 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.933839083 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.933882952 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.933901072 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.933914900 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.933942080 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.937546968 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.937582016 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.937665939 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.937701941 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.937758923 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.948649883 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.948678017 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.948731899 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.948750973 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.948760986 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.948776007 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.948795080 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.948801994 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.948823929 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.948842049 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.948849916 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.948865891 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.949827909 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.949882030 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.949919939 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.949933052 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.949965000 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.950134039 CEST	49738	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.950150013 CEST	443	49738	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.953352928 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.953406096 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.953516006 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.953752041 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:42.953767061 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:42.962387085 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.962420940 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.962518930 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.962534904 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.962578058 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.963272095 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.963314056 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:42.963433027 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.963790894 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:42.963804960 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.018872976 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.018907070 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.019079924 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.019133091 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.019191980 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.019320965 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.019342899 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.019399881 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.019407988 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.019445896 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.020143032 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.020164013 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.020236015 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.020250082 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.020298958 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.020334959 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.020376921 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.020415068 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.020425081 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.020447969 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.020447969 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.020473957 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.020499945 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.020520926 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.020539045 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.020566940 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.021166086 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.021199942 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.021264076 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.021279097 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.021321058 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.022131920 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.022195101 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.022228003 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.022249937 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.022253036 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.022280931 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.022315025 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.022326946 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.022355080 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.022355080 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.022383928 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.023257971 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.023286104 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.023369074 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.023386002 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.023427963 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.024137974 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.024161100 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.024216890 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.024226904 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.024247885 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.024265051 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.024302959 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.024880886 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.024914980 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.024976969 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.024996996 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.025021076 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.025043011 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.025302887 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.025322914 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.025366068 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.025374889 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.025401115 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.025422096 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.026226044 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.026251078 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.026266098 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.026289940 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.026320934 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.026349068 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.026380062 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.026393890 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.026413918 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.026444912 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.026989937 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.027008057 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.027057886 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.027071953 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.027115107 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.032161951 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.032213926 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.032314062 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.032346010 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.032390118 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.032577038 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.032603025 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.032641888 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.032665968 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.032681942 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.032710075 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.042081118 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.042117119 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.042166948 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.042193890 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.042237997 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.042258978 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.051084042 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.051158905 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.051208973 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.051228046 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.051274061 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.051652908 CEST	49740	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.051678896 CEST	443	49740	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.056055069 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.056108952 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.056199074 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.056497097 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.056512117 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.062401056 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.062465906 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.062565088 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.062838078 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.062855005 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.106585979 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.106697083 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.106700897 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.106748104 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.107251883 CEST	49737	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.107275963 CEST	443	49737	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.115139961 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.115170002 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.115246058 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.115274906 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.115318060 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.116827011 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.116853952 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.116906881 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.116920948 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.116969109 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.117913961 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.117939949 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.117995977 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.118004084 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.118041992 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.119659901 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.119688988 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.119739056 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.119760036 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.119776011 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.119795084 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.124604940 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.124633074 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.124682903 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.124706984 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.124725103 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.124747038 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.130212069 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.130238056 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.130323887 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.130347013 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.130388975 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.135281086 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.135308027 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.135416985 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.135445118 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.135492086 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.189970016 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.190001011 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.190118074 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.190150976 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.190193892 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.208180904 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.208211899 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.208367109 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.208400965 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.208442926 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.208462954 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.208547115 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.208558083 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.208678961 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.209042072 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.209059000 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.209141016 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.209150076 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.209228992 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.212774992 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.212805033 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.212877035 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.212904930 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.212943077 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.217456102 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.217483044 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.217551947 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.217566967 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.217600107 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.222924948 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.222948074 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.223031998 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.223062992 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.223124027 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.227813005 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.227840900 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.227904081 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.227933884 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.227952957 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.227968931 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.300290108 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.300322056 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.300460100 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.300477982 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.300498009 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.300535917 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.300544977 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.300559998 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.300585032 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.300605059 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.301045895 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.301060915 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.301126003 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.301136017 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.301192999 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.301521063 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.301537991 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.301582098 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.301589966 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.301620007 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.304281950 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.304297924 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.304394007 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.304403067 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.304445982 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.310060978 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.310085058 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.310184956 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.310203075 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.310261011 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.316217899 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.316245079 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.316293001 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.316304922 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.316363096 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.316641092 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.320802927 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.320831060 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.320904970 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.320914984 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.320951939 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.392323971 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.392353058 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.392478943 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.392507076 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.392560959 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.393692970 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.393784046 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.393830061 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.393913031 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.393929005 CEST	443	49739	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.393939018 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.393975019 CEST	49739	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.534153938 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.534569979 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.534600973 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.535089016 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.535396099 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.535468102 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.535536051 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.580497980 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.659037113 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.659419060 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.659485102 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.659523964 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.659559011 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.659589052 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.659677029 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.659706116 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.659763098 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.659837008 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.660129070 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.660192966 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.660988092 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.663012028 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.663220882 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.663248062 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.663695097 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.664009094 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.664076090 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.664108992 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.704509974 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.704536915 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.709393978 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.740360022 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.740653038 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.740689993 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.741025925 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.741357088 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.741406918 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.741511106 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.742981911 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.743016958 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.743072033 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.743089914 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.743114948 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.743134022 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.746201992 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.746222973 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.746287107 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.746293068 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.746340990 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.788495064 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.793260098 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.793292046 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.793303013 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.793319941 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.793356895 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.793360949 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.793385029 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.793400049 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.793411016 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.793430090 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.829812050 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.829857111 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.829972029 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.830003977 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.830061913 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.830383062 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.830410004 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.830451012 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.830456018 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.830492973 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.831979990 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.832005024 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.832050085 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.832055092 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.832068920 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.832093000 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.834558010 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.834583044 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.834641933 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.834652901 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.834695101 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.881742954 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.881779909 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.882440090 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.882452965 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.882508039 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.884823084 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.884844065 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.884884119 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.884887934 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.884926081 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.917037964 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.917063951 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.917136908 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.917150974 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.917182922 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.917201042 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.917443037 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.917459011 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.917474985 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.917517900 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.917536020 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.917546034 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.917563915 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.917593002 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.917598963 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.917618990 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.917630911 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.917639017 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.917948008 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.917967081 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.918003082 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.918008089 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.918030977 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.918050051 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.919153929 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.919173956 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.919240952 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.919246912 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.919284105 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.919608116 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.919629097 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.919663906 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.919668913 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.919697046 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.919713020 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.920209885 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.920228958 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.920279026 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.920284033 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.920320034 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.921216011 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.921236038 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.921282053 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.921287060 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.921315908 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.921346903 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.973627090 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.973671913 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.973769903 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.973781109 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.973823071 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.974725008 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.974746943 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.974816084 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.974821091 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.974858999 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.975630999 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.975652933 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.975703955 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.975708008 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.975728989 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.975764990 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.977382898 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.977408886 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.977554083 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.977559090 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:43.977610111 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:43.992885113 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.992903948 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.993046045 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.993083000 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.993133068 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.995897055 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.995923042 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.995939016 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.996001005 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.996038914 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:43.996059895 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:43.996089935 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.006392002 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.006422997 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.006555080 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.006577015 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.006618977 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.007446051 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.007467031 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.007525921 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.007530928 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.007567883 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.007932901 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.007951975 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.007993937 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.007998943 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.008021116 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.008040905 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.018914938 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.018939018 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.019022942 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.019037008 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.019078970 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.019366026 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.019385099 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.019440889 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.019447088 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.019483089 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.019753933 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.019773960 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.019825935 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.019829988 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.019850969 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.019865990 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.020617008 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.020637989 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.020664930 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.020690918 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.020713091 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.020718098 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.020773888 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.020773888 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.020798922 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.020801067 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.020809889 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.020814896 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.020822048 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.020870924 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.021635056 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.066265106 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.066318035 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.066391945 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.066466093 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.066503048 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.066526890 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.066729069 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.066751003 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.066790104 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.066808939 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.066833019 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.066850901 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.067197084 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.067218065 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.067264080 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.067276955 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.067303896 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.067323923 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.067811012 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.067832947 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.067898989 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.067914963 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.067936897 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.067966938 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.068217039 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.068238974 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.068275928 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.068286896 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.068311930 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.068330050 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.068500996 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.068525076 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.068593025 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.068665028 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.068717957 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.068818092 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.068840027 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.068912983 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.068926096 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.068973064 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.069782019 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.069807053 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.069856882 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.069874048 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.069896936 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.069953918 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.078999043 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.079020023 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.079091072 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.079133987 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.079175949 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.083673954 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.083692074 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.083755016 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.083776951 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.083821058 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.084604979 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.084635019 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.084681988 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.084717989 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.084737062 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.084755898 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.088757992 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.088778019 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.088839054 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.088875055 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.088916063 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.094186068 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.094216108 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.094278097 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.094305992 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.094320059 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.094362020 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.094465971 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.094487906 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.094528913 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.094533920 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.094563007 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.094583988 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095330954 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095362902 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095416069 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095423937 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095443964 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095446110 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095455885 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095465899 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095491886 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095499039 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095520973 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095525980 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095555067 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095578909 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095581055 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095594883 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095613003 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095638037 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095644951 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.095671892 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.095691919 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096060991 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096081018 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096143961 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096152067 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096194983 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096477985 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096513987 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096554995 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096560955 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096585035 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096600056 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096605062 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096613884 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096662998 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096668959 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096705914 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.096749067 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096851110 CEST	49742	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.096865892 CEST	443	49742	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.100954056 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.100997925 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.101068020 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.101334095 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.101349115 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.107012033 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.107064009 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.107131958 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.107369900 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.107388020 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.109623909 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.109654903 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.109711885 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.109740019 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.109756947 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.109781981 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.111449003 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.111481905 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.111536980 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.111560106 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.111584902 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.111627102 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.151292086 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.151320934 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.151485920 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.151523113 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.151565075 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.155955076 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.155981064 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.156100035 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.156135082 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.156177998 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.158796072 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.158828020 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.158901930 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.158926010 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.158967972 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.159156084 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.159176111 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.159209967 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.159216881 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.159238100 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.159261942 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.159614086 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.159636974 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.159697056 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.159703016 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.159739971 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.160024881 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.160046101 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.160098076 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.160106897 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.160147905 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.160593033 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.160612106 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.160654068 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.160659075 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.160717010 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.161155939 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.161175013 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.161235094 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.161241055 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.161278963 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.161447048 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.161463976 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.161519051 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.161554098 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.161571026 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.161619902 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.162347078 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.162369013 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.162426949 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.162436962 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.162476063 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.169706106 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.169735909 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.169897079 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.169898033 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.169929981 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.169979095 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.170479059 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.170497894 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.170553923 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.170562983 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.170610905 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.174474955 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.174500942 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.174593925 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.174618959 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.174663067 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.174995899 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.175018072 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.175057888 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.175062895 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.175112963 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.175144911 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.176906109 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.176935911 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.177010059 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.177048922 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.177100897 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.179589033 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.179625034 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.179681063 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.179692984 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.179708958 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.179732084 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.184129953 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.184153080 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.184223890 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.184251070 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.184298038 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.200295925 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.200329065 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.200417995 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.200464010 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.200503111 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.238898993 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.238929033 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.239079952 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.239123106 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.239175081 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.239799023 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.239815950 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.239887953 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.239896059 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.239938974 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.243592024 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.243617058 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.243695974 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.243741989 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.243798971 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.244352102 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.244373083 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.244432926 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.244451046 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.244512081 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.249011993 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.249032021 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.249118090 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.249167919 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.249222994 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.251142979 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.251179934 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.251244068 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.251319885 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.251354933 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.251379967 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.251478910 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.251504898 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.251543045 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.251557112 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.251585007 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.251602888 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.253294945 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253320932 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253396034 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253437042 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.253458977 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253492117 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.253510952 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253530979 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253545046 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.253560066 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253593922 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.253593922 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.253679991 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253705025 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253743887 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.253761053 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.253786087 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.254137039 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.254158974 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.254209042 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.254221916 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.254246950 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.254904985 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.254929066 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.254987955 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.254998922 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.255028009 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.255263090 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.255292892 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.255345106 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.255394936 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.255424976 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.255443096 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.261429071 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.261460066 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.261548042 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.261590958 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.261641026 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.261831045 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.261847019 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.261882067 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.261888027 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.261912107 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.261933088 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.262511969 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.262531042 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.262590885 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.262598038 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.262634993 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.265675068 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.265696049 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.265769005 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.265809059 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.265861034 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.266196012 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.266215086 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.266266108 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.266279936 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.266310930 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.267646074 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.267662048 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.267720938 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.267741919 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.267791033 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.271382093 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.271400928 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.271505117 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.271528006 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.271576881 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.276190042 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.276213884 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.276257038 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.276266098 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.276289940 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.276309013 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.291496038 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.291529894 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.291631937 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.291646004 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.291703939 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.294425011 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.328067064 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.328098059 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.328161001 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.328197956 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.328217983 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.328242064 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.328758001 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.328783989 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.328841925 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.328852892 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.328892946 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.329097033 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.329121113 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.329161882 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.329169989 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.329191923 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.329209089 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.332604885 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.332622051 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.332676888 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.332700014 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.332716942 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.332735062 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.333117962 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.333137989 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.333192110 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.333203077 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.333240986 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.341995001 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.342026949 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.342072964 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.342097998 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.342114925 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.342128038 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.343611002 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.343638897 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.343676090 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.343682051 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.343719959 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.343736887 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.345176935 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.345238924 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.345271111 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.345336914 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.345372915 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.345396996 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.345607996 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.345664978 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.345699072 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.345720053 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.345746994 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.345767021 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.346379995 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.346424103 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.346460104 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.346472979 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.346498966 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.346590042 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.346831083 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.346874952 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.346910000 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.346921921 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.346947908 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.346986055 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.347395897 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.347440958 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.347476006 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.347487926 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.347512960 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.347557068 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.348040104 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.348081112 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.348109961 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.348124027 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.348150969 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.348170996 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.348716021 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.348762035 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.348799944 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.348828077 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.348850965 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.348896980 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.348957062 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.349001884 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.349023104 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.349040985 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.349066973 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.349083900 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.352545977 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.352575064 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.352623940 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.352654934 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.352667093 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.352699041 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.352937937 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.352957010 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.352993011 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.352998018 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.353024006 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.353045940 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.353415012 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.353435040 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.353475094 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.353478909 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.353499889 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.353518009 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.357376099 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.357402086 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.357805014 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.357846975 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.358194113 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.358225107 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.360873938 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.360898018 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.360949993 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.360975981 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.361008883 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.361015081 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.362328053 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.362353086 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.362405062 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.362413883 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.367151976 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.367178917 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.367218971 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.367225885 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.367250919 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.382980108 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.383008957 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.383090019 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.383101940 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.416130066 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.416157961 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.416250944 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.416294098 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.416353941 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.416471004 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.416500092 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.416524887 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.416533947 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.416553974 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.416572094 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.417304039 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.417320967 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.417386055 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.417396069 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.417433977 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.420825958 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.420850039 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.420902014 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.420921087 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.420937061 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.420968056 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.422792912 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.422810078 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.422868013 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.422882080 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.422924042 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.429976940 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.430001974 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.430058956 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.430073977 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.430113077 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.431930065 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.431952953 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.431991100 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.432003021 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.432018042 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.432034969 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.436405897 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.437985897 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.438054085 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.438088894 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.438113928 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.438128948 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.438144922 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.438503981 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.438546896 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.438569069 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.438575029 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.438602924 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.438618898 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.439042091 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.439086914 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.439110994 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.439115047 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.439141989 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.439156055 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.439714909 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.439763069 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.439790010 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.439795971 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.439822912 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.439841986 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.440061092 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.440103054 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.440125942 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.440186024 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.440212965 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.440229893 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.440845966 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.440892935 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.440927982 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.440932989 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.440958023 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.440970898 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.441466093 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.441508055 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.441543102 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.441549063 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.441571951 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.441591978 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.441668034 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.441730022 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.441736937 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.441842079 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.441900015 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.441942930 CEST	49744	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.441956997 CEST	443	49744	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.443945885 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.443974972 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.444034100 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.444065094 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.444077969 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.444103956 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.444401026 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.444447041 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.444463968 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.444468975 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.444502115 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.444511890 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.444531918 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.444569111 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.445286989 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.445348024 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.445415974 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.445626974 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.445642948 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.445689917 CEST	49741	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.445704937 CEST	443	49741	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.446182013 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.446208000 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.446265936 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.446291924 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.446331978 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.455503941 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.455558062 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.455637932 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.455856085 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.455868959 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.503216982 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.503315926 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.503329992 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.503365040 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.503376961 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.503408909 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.503704071 CEST	49743	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.503726006 CEST	443	49743	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.708020926 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.708412886 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.708442926 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.708965063 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.709275961 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.709371090 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.709427118 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.756520033 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.814176083 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.814572096 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.814606905 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.814955950 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.815265894 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.815332890 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.815510988 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:44.839257956 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.839297056 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.839318037 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.839391947 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.839422941 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.839468956 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.856523991 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:44.928605080 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.928673983 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.928734064 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.928781986 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.928817987 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.928838968 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.930418015 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.930464029 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.930502892 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.930527925 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:44.930541992 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:44.930561066 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.021015882 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.021084070 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.021193981 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.021238089 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.021251917 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.021277905 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.022469044 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.022515059 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.022546053 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.022572041 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.022588015 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.022609949 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.022631884 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.022689104 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.022695065 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.022805929 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.022866964 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.022927999 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.022947073 CEST	443	49746	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.022964954 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.022986889 CEST	49746	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.024950027 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.025212049 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.025238991 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.025612116 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.026139975 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.026220083 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.026624918 CEST	49749	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.026681900 CEST	443	49749	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.026756048 CEST	49749	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.027163029 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.027218103 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.027245998 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.027268887 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.027448893 CEST	49749	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.027466059 CEST	443	49749	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.027602911 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.027616978 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.072523117 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.076720953 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.076750040 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.076767921 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.076857090 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.076903105 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.076952934 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.151211023 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.151226044 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.151240110 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.151282072 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.151298046 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.151376009 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.151395082 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.151437998 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.151457071 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.151470900 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.151514053 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.153603077 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.153908968 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.153940916 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.155038118 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.155354023 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.155483007 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.155514002 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.172136068 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.172162056 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.172243118 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.172281981 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.172297955 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.172322989 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.201605082 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.233263969 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.233303070 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.233450890 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.233480930 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.233542919 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.236629963 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.236661911 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.236723900 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.236742973 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.236769915 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.236788034 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.240241051 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.240267992 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.240335941 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.240358114 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.240395069 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.244594097 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.244623899 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.244704962 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.244730949 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.244777918 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.248862028 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.248882055 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.248945951 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.248970032 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.249011040 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.262526989 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.262556076 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.262640953 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.262672901 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.262713909 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.319274902 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.319310904 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.319401026 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.319433928 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.319530010 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.320072889 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.320095062 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.320135117 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.320148945 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.320168972 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.320188046 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.320630074 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.320652008 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.320709944 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.320722103 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.320768118 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.324712992 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.324743032 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.324826956 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.324855089 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.324891090 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.332092047 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.332120895 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.332210064 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.332246065 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.332283974 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.332583904 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.332603931 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.332650900 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.332665920 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.332700014 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.336666107 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.336688995 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.336806059 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.336837053 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.336858034 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.336877108 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.341043949 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.341063023 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.341140985 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.341173887 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.341212988 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.342156887 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.342173100 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.342237949 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.342262030 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.342302084 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.346942902 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.346968889 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.347054005 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.347086906 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.347126007 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.355190992 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.355209112 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.361771107 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.361828089 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.361897945 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.406666040 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.406697989 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.406770945 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.406821012 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.406822920 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.406857967 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.406888962 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.407391071 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.407411098 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.407452106 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.407468081 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.407479048 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.407910109 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.407932043 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.407993078 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.408005953 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.411004066 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.411068916 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.411092043 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.411134958 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.411138058 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.411163092 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.411173105 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.411181927 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.411190987 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.411211014 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.411226988 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.411597967 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.411619902 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.411653996 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.411669970 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.411696911 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.411784887 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.411808968 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.411828995 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.411834002 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.411859035 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.412373066 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.412390947 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.412430048 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.412441969 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.412453890 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.424393892 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.424422979 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.424560070 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.424602985 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.424639940 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.425069094 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.425091028 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.425137043 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.425148964 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.425185919 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.426274061 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.426299095 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.426337004 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.426361084 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.426373959 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.426393032 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.427035093 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.427057028 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.427122116 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.427145004 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.427181959 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.429397106 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.429424047 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.429486990 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.429511070 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.429543972 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.434523106 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.434552908 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.434611082 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.434637070 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.434654951 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.434669971 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.439943075 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.439974070 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.440047979 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.440074921 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.440113068 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.448724985 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.448765993 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.448868990 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.448894024 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.448934078 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.456047058 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.456103086 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.456206083 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.456243992 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.456262112 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.487241983 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.487279892 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.487442970 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.487484932 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.487534046 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.493068933 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.493098021 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.493172884 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.493204117 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.493529081 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.493551970 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.493582964 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.493593931 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.493617058 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.494066954 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494083881 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494136095 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.494143009 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494154930 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494175911 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494199038 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.494208097 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494229078 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.494246960 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.494817972 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494834900 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494889021 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.494905949 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.494951010 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.495652914 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.495671034 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.495723963 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.495738029 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.495780945 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.496651888 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.496670008 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.496721983 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.496733904 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.496774912 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.501483917 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.501529932 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.501594067 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.501621962 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.501636982 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.501668930 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.517613888 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.517682076 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.517748117 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.517771006 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.517801046 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.517815113 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.517818928 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.517852068 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.517880917 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.517901897 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.517908096 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.517934084 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.517963886 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.517993927 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.518094063 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.518150091 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.518177032 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.518184900 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.518203020 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.518224955 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.518701077 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.518754005 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.518784046 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.518790960 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.518817902 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.518837929 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.522037983 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.522087097 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.522119999 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.522149086 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.522162914 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.522186041 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.526999950 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.527036905 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.527113914 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.527138948 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.527178049 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.531749964 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.531780005 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.531831026 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.531836987 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.531853914 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.531867981 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.531900883 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.531913042 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.531951904 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.532005072 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.532044888 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.532064915 CEST	443	49745	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.532074928 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.532108068 CEST	49745	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.542335033 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.542366982 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.542460918 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.542490005 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.542532921 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.575752974 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.575783014 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.575891972 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.575963020 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.576039076 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.833195925 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.833266020 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.833317995 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.833390951 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.833427906 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.833451986 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.833702087 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.833729982 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.833777905 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.833786011 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.833802938 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.833813906 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.833820105 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.833848953 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.834357977 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.834379911 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.834419012 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.834430933 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.834450960 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.835246086 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.835269928 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.835305929 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.835310936 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.835319996 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.835335970 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.835386992 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.835391998 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.835407972 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.835462093 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.835705042 CEST	49748	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.835721016 CEST	443	49748	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.835906982 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.835958958 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.835988045 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.836044073 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.836074114 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.836096048 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.837888956 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.838404894 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.838433981 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.838823080 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.838846922 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.838896990 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.838979959 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.838996887 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.839046001 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.839236975 CEST	49751	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.839277029 CEST	443	49751	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.839329004 CEST	49751	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.839762926 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.839834929 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.839972019 CEST	49751	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.839992046 CEST	443	49751	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.840034962 CEST	443	49749	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.840183020 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.840298891 CEST	49749	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.840318918 CEST	443	49749	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.841012955 CEST	443	49749	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.841301918 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.841310978 CEST	49749	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.841350079 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.841408968 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.841408968 CEST	49749	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.841413021 CEST	443	49749	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.841425896 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.841458082 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.841494083 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.844309092 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.844357014 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.844402075 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.844413996 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.844450951 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.844450951 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.845139027 CEST	49752	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.845165014 CEST	443	49752	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.845232964 CEST	49752	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.845454931 CEST	49752	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.845465899 CEST	443	49752	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.847115993 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.847162008 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.847203016 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.847217083 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.847244024 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.847279072 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.848053932 CEST	49753	443	192.168.2.17	40.68.123.157
Jul 11, 2024 13:36:45.848093033 CEST	443	49753	40.68.123.157	192.168.2.17
Jul 11, 2024 13:36:45.848167896 CEST	49753	443	192.168.2.17	40.68.123.157
Jul 11, 2024 13:36:45.849611044 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.849664927 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.849708080 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.849720955 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.849747896 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.849766016 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.850073099 CEST	49753	443	192.168.2.17	40.68.123.157
Jul 11, 2024 13:36:45.850097895 CEST	443	49753	40.68.123.157	192.168.2.17
Jul 11, 2024 13:36:45.851850033 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.851893902 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.851929903 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.851943016 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.851968050 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.852009058 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.853614092 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.853662014 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.853693008 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.853705883 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.853729963 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.853761911 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.855024099 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.855072975 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.855114937 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.855127096 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.855154037 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.855184078 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.856000900 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.856046915 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.856076956 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.856089115 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.856113911 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.856132030 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.856929064 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.856983900 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.857017040 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.857036114 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.857059002 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.857095957 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.857696056 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.857738972 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.857772112 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.857784033 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.857810020 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.857841015 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.858747959 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.858789921 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.858823061 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.858839989 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.858876944 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.858896017 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.859741926 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.859786987 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.859821081 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.859837055 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.859858036 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.859890938 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.860728979 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.860770941 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.860799074 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.860810995 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.860836029 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.860852957 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.861586094 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.861639023 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.861661911 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.861679077 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.861700058 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.861722946 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.862576962 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.862618923 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.862653971 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.862667084 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.862690926 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.862709045 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.862713099 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.862740040 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.862776041 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.862787962 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.862795115 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.862812042 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.862838984 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.862860918 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.863702059 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.863743067 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.863771915 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.863807917 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.863831997 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.863836050 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.863861084 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.863873005 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.863900900 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.863908052 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.863924026 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.863934994 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.863960028 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.863982916 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.868335962 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.868377924 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.868418932 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.868432045 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.868458033 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.868478060 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.868716002 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.868760109 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.868789911 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.868802071 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.868828058 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.868863106 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.869168997 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.869210005 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.869234085 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.869246006 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.869268894 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.869287014 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.869679928 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.869719982 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.869745970 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.869761944 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.869782925 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.869803905 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.884505987 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.884524107 CEST	443	49749	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.887406111 CEST	49749	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.935965061 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.935996056 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.936120987 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.936134100 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.936173916 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.936496973 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.936512947 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.936561108 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.936567068 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.936602116 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.936959028 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.936975956 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.937022924 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.937028885 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.937063932 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.940701962 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.940718889 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.940774918 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.940781116 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.940819025 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.940952063 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.940967083 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.941008091 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.941015005 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.941046000 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.945008039 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.945033073 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.945094109 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.945105076 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.945144892 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.952099085 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.952117920 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.952169895 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.952177048 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.952212095 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.957364082 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.957386971 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.957463026 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.957469940 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.957505941 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.960712910 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.960740089 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.960783958 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.960808039 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.960808039 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.960836887 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.960851908 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.961585999 CEST	49750	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.961606979 CEST	443	49750	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.963973045 CEST	49754	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.964004993 CEST	443	49754	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.964090109 CEST	49754	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.964448929 CEST	49755	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.964504004 CEST	443	49755	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:45.964554071 CEST	49755	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.964719057 CEST	49754	443	192.168.2.17	162.208.16.210
Jul 11, 2024 13:36:45.964736938 CEST	443	49754	162.208.16.210	192.168.2.17
Jul 11, 2024 13:36:45.964858055 CEST	49755	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:45.964871883 CEST	443	49755	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.026643038 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.026668072 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.026808977 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.026820898 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.026859045 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.027004957 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.027024984 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.027065992 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.027072906 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.027103901 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.027429104 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.027447939 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.027494907 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.027502060 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.027535915 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.031183958 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.031202078 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.031267881 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.031274080 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.031312943 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.031621933 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.031639099 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.031681061 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.031687021 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.031719923 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.036098957 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.036119938 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.036185026 CEST	49747	443	192.168.2.17	185.206.25.71
Jul 11, 2024 13:36:46.036195040 CEST	443	49747	185.206.25.71	192.168.2.17
Jul 11, 2024 13:36:46.036231041 CEST	49747	443	192.168.2.17	185.206.25.71

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 11, 2024 13:36:34.979140997 CEST	192.168.2.17	1.1.1.1	0x6153	Standard query (0)	mega.nz	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:34.979280949 CEST	192.168.2.17	1.1.1.1	0xdc49	Standard query (0)	mega.nz	65	IN (0x0001)	false
Jul 11, 2024 13:36:38.157284975 CEST	192.168.2.17	1.1.1.1	0xa658	Standard query (0)	g.api.mega.co.nz	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.157434940 CEST	192.168.2.17	1.1.1.1	0xacab	Standard query (0)	g.api.mega.co.nz	65	IN (0x0001)	false
Jul 11, 2024 13:36:38.213824987 CEST	192.168.2.17	1.1.1.1	0x8490	Standard query (0)	na.static.mega.co.nz	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.214011908 CEST	192.168.2.17	1.1.1.1	0xb04	Standard query (0)	na.static.mega.co.nz	65	IN (0x0001)	false
Jul 11, 2024 13:36:38.216296911 CEST	192.168.2.17	1.1.1.1	0x74c6	Standard query (0)	mega.nz	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.216494083 CEST	192.168.2.17	1.1.1.1	0x31b8	Standard query (0)	mega.nz	65	IN (0x0001)	false
Jul 11, 2024 13:36:39.344785929 CEST	192.168.2.17	1.1.1.1	0xde1f	Standard query (0)	g.api.mega.co.nz	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.344933033 CEST	192.168.2.17	1.1.1.1	0x9530	Standard query (0)	g.api.mega.co.nz	65	IN (0x0001)	false
Jul 11, 2024 13:36:39.365456104 CEST	192.168.2.17	1.1.1.1	0x38d5	Standard query (0)	na.static.mega.co.nz	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.365582943 CEST	192.168.2.17	1.1.1.1	0x73e3	Standard query (0)	na.static.mega.co.nz	65	IN (0x0001)	false
Jul 11, 2024 13:36:39.808520079 CEST	192.168.2.17	1.1.1.1	0x941d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.808686018 CEST	192.168.2.17	1.1.1.1	0x72a6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 11, 2024 13:37:01.060512066 CEST	192.168.2.17	1.1.1.1	0x3561	Standard query (0)	gfs240n101.userstorage.mega.co.nz	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:37:01.060837030 CEST	192.168.2.17	1.1.1.1	0x6dcc	Standard query (0)	gfs240n101.userstorage.mega.co.nz	65	IN (0x0001)	false
Jul 11, 2024 13:37:04.017832994 CEST	192.168.2.17	1.1.1.1	0x47e6	Standard query (0)	gfs240n101.userstorage.mega.co.nz	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:37:04.017966986 CEST	192.168.2.17	1.1.1.1	0xf93	Standard query (0)	gfs240n101.userstorage.mega.co.nz	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 11, 2024 13:36:34.986592054 CEST	1.1.1.1	192.168.2.17	0x6153	No error (0)	mega.nz		31.216.144.5	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:34.986592054 CEST	1.1.1.1	192.168.2.17	0x6153	No error (0)	mega.nz		31.216.145.5	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.166779041 CEST	1.1.1.1	192.168.2.17	0xa658	No error (0)	g.api.mega.co.nz	lu.api.mega.co.nz		CNAME (Canonical name)	IN (0x0001)	false
Jul 11, 2024 13:36:38.166779041 CEST	1.1.1.1	192.168.2.17	0xa658	No error (0)	lu.api.mega.co.nz		66.203.125.16	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.166779041 CEST	1.1.1.1	192.168.2.17	0xa658	No error (0)	lu.api.mega.co.nz		66.203.125.12	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.166779041 CEST	1.1.1.1	192.168.2.17	0xa658	No error (0)	lu.api.mega.co.nz		66.203.125.14	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.166779041 CEST	1.1.1.1	192.168.2.17	0xa658	No error (0)	lu.api.mega.co.nz		66.203.125.13	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.166779041 CEST	1.1.1.1	192.168.2.17	0xa658	No error (0)	lu.api.mega.co.nz		66.203.125.15	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.166779041 CEST	1.1.1.1	192.168.2.17	0xa658	No error (0)	lu.api.mega.co.nz		66.203.125.11	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.169830084 CEST	1.1.1.1	192.168.2.17	0xacab	No error (0)	g.api.mega.co.nz	lu.api.mega.co.nz		CNAME (Canonical name)	IN (0x0001)	false
Jul 11, 2024 13:36:38.222320080 CEST	1.1.1.1	192.168.2.17	0x8490	No error (0)	na.static.mega.co.nz		162.208.16.210	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.222320080 CEST	1.1.1.1	192.168.2.17	0x8490	No error (0)	na.static.mega.co.nz		185.206.25.71	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.223778009 CEST	1.1.1.1	192.168.2.17	0x74c6	No error (0)	mega.nz		31.216.145.5	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:38.223778009 CEST	1.1.1.1	192.168.2.17	0x74c6	No error (0)	mega.nz		31.216.144.5	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.352057934 CEST	1.1.1.1	192.168.2.17	0x9530	No error (0)	g.api.mega.co.nz	lu.api.mega.co.nz		CNAME (Canonical name)	IN (0x0001)	false
Jul 11, 2024 13:36:39.352181911 CEST	1.1.1.1	192.168.2.17	0xde1f	No error (0)	g.api.mega.co.nz	lu.api.mega.co.nz		CNAME (Canonical name)	IN (0x0001)	false
Jul 11, 2024 13:36:39.352181911 CEST	1.1.1.1	192.168.2.17	0xde1f	No error (0)	lu.api.mega.co.nz		66.203.125.14	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.352181911 CEST	1.1.1.1	192.168.2.17	0xde1f	No error (0)	lu.api.mega.co.nz		66.203.125.11	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.352181911 CEST	1.1.1.1	192.168.2.17	0xde1f	No error (0)	lu.api.mega.co.nz		66.203.125.12	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.352181911 CEST	1.1.1.1	192.168.2.17	0xde1f	No error (0)	lu.api.mega.co.nz		66.203.125.15	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.352181911 CEST	1.1.1.1	192.168.2.17	0xde1f	No error (0)	lu.api.mega.co.nz		66.203.125.16	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.352181911 CEST	1.1.1.1	192.168.2.17	0xde1f	No error (0)	lu.api.mega.co.nz		66.203.125.13	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.375246048 CEST	1.1.1.1	192.168.2.17	0x38d5	No error (0)	na.static.mega.co.nz		185.206.25.71	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.375246048 CEST	1.1.1.1	192.168.2.17	0x38d5	No error (0)	na.static.mega.co.nz		162.208.16.210	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:36:39.816185951 CEST	1.1.1.1	192.168.2.17	0x72a6	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 11, 2024 13:36:39.816936970 CEST	1.1.1.1	192.168.2.17	0x941d	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:37:01.074635983 CEST	1.1.1.1	192.168.2.17	0x3561	No error (0)	gfs240n101.userstorage.mega.co.nz		69.30.89.11	A (IP address)	IN (0x0001)	false
Jul 11, 2024 13:37:04.027375937 CEST	1.1.1.1	192.168.2.17	0x47e6	No error (0)	gfs240n101.userstorage.mega.co.nz		69.30.89.11	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49709	31.216.144.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:35 UTC	663	OUT	GET /file/3LZ0hLYB HTTP/1.1 Host: mega.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:36 UTC	921	IN	HTTP/1.1 200 OK Content-Type: text/html Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Content-Length: 2113 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Robots-Tag: noindex Set-Cookie: geoip=US Content-Security-Policy: default-src 'self' data: blob: .mega.co.nz .mega.nz .mega.io http://.mega.co.nz http://.mega.nz http://.mega.io wss://.karere.mega.nz wss://.sfu.mega.co.nz .karere.mega.nz:1380 http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342; script-src 'self' .mega.co.nz .mega.nz .mega.io data: blob:; style-src 'self' 'unsafe-inline' .mega.co.nz .mega.nz .mega.io data: blob:; frame-src 'self' .megapay.nz ad.mega.nz mega: .megaad.nz https://mega.nz/ https://mega.io/; img-src 'self' .mega.co.nz .mega.nz .mega.io data: blob: mega.nz Connection: Close
2024-07-11 11:36:36 UTC	2113	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 36 2e 32 32 20 4d 42 20 66 69 6c 65 20 6f 6e 20 4d 45 47 41 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6d 65 67 61 2e 6e 7a 2f 66 69 6c 65 2f 33 4c 5a 30 68 4c 59 42 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6d 65 67 61 2e 6e 7a 2f 72 69 63 68 2d 66 69 6c 65 2e Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><meta property="og:title" content="6.22 MB file on MEGA" /><meta property="og:url" content="https://mega.nz/file/3LZ0hLYB" /><meta property="og:image" content="https://mega.nz/rich-file.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49713	31.216.144.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:36 UTC	538	OUT	GET /secureboot.js?r=1720659709 HTTP/1.1 Host: mega.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mega.nz/file/3LZ0hLYB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:36 UTC	290	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 198041 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 2f 2f 20 52 65 6c 65 61 73 65 20 76 65 72 73 69 6f 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 62 75 69 6c 64 20 73 63 72 69 70 74 73 0a 76 61 72 20 62 75 69 6c 64 56 65 72 73 69 6f 6e 20 3d 20 7b 22 77 65 62 73 69 74 65 22 3a 22 35 2e 32 36 2e 33 22 2c 22 63 68 72 6f 6d 65 22 3a 22 35 2e 32 36 2e 33 22 2c 22 63 68 72 6f 6d 65 53 69 7a 65 22 3a 38 31 37 35 35 30 37 2c 22 66 69 72 65 66 6f 78 22 3a 22 34 2e 32 34 2e 30 22 2c 22 66 69 72 65 66 6f 78 53 69 7a 65 22 3a 38 35 39 39 35 32 37 2c 22 63 6f 6d 6d 69 74 22 3a 22 64 39 63 39 36 62 62 39 63 30 35 35 37 39 32 66 35 65 32 32 65 39 66 39 39 66 34 39 64 62 38 39 63 61 66 31 62 61 38 66 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 30 36 35 39 37 Data Ascii: // Release version information is replaced by the build scriptsvar buildVersion = {"website":"5.26.3","chrome":"5.26.3","chromeSize":8175507,"firefox":"4.24.0","firefoxSize":8599527,"commit":"d9c96bb9c055792f5e22e9f99f49db89caf1ba8f","timestamp":17206597
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 29 20 3e 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 68 74 74 70 73 3a 2f 2f 6e 61 2e 73 74 61 74 69 63 2e 6d 65 67 61 2e 63 6f 2e 6e 7a 2f 27 20 2b 20 66 69 6e 61 6c 50 61 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 63 6f 6f 6b 69 65 4d 61 74 63 68 20 26 26 20 63 6f 6f 6b 69 65 4d 61 74 63 68 5b 31 5d 20 26 26 20 6e 65 77 5a 65 61 6c 61 6e 64 53 74 61 74 69 63 43 6f 75 6e 74 72 69 65 73 2e 69 6e 64 65 78 4f 66 28 63 6f 6f 6b 69 65 4d 61 74 63 68 5b 31 5d 29 20 3e 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 68 74 74 70 73 3a 2f 2f 6e 7a 2e 73 74 61 74 69 63 2e 6d 65 67 61 2e 63 6f 2e 6e Data Ascii: ) > -1) { return 'https://na.static.mega.co.nz/' + finalPath; } else if (cookieMatch && cookieMatch[1] && newZealandStaticCountries.indexOf(cookieMatch[1]) > -1) { return 'https://nz.static.mega.co.n
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 6d 65 67 61 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 2e 73 74 72 6f 6e 67 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 69 73 53 65 63 75 72 65 43 6f 6e 74 65 78 74 20 26 26 20 74 79 70 65 6f 66 20 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 55 55 49 44 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 77 69 6e 64 6f 77 2c 20 27 6d 61 6b 65 55 55 49 44 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 Data Ascii: }; mega.getRandomValues.strong = true; if (window.isSecureContext && typeof crypto.randomUUID === 'function') { Object.defineProperty(window, 'makeUUID', { value: function() { return c
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 3e 3e 3e 33 5e 77 32 3c 3c 32 35 5e 77 32 3c 3c 31 34 29 2b 28 77 31 35 3e 3e 3e 31 37 5e 77 31 35 3e 3e 3e 31 39 5e 77 31 35 3e 3e 3e 31 30 5e 77 31 35 3c 3c 31 35 5e 77 31 35 3c 3c 31 33 29 2b 77 31 2b 77 31 30 29 7c 30 3b 74 3d 28 74 2b 68 2b 28 65 3e 3e 3e 36 5e 65 3e 3e 3e 31 31 5e 65 3e 3e 3e 32 35 5e 65 3c 3c 32 36 5e 65 3c 3c 32 31 5e 65 3c 3c 37 29 2b 28 67 5e 65 26 28 66 5e 67 29 29 2b 30 78 65 66 62 65 34 37 38 36 29 7c 30 3b 68 3d 67 3b 67 3d 66 3b 66 3d 65 3b 65 3d 28 64 2b 74 29 7c 30 3b 64 3d 63 3b 63 3d 62 3b 62 3d 61 3b 61 3d 28 74 2b 28 28 62 26 63 29 5e 28 64 26 28 62 5e 63 29 29 29 2b 28 62 3e 3e 3e 32 5e 62 3e 3e 3e 31 33 5e 62 3e 3e 3e 32 32 5e 62 3c 3c 33 30 5e 62 3c 3c 31 39 5e 62 3c 3c 31 30 29 29 7c 30 3b 77 32 3d 74 3d 28 28 77 Data Ascii: >>>3^w2<<25^w2<<14)+(w15>>>17^w15>>>19^w15>>>10^w15<<15^w15<<13)+w1+w10)\|0;t=(t+h+(e>>>6^e>>>11^e>>>25^e<<26^e<<21^e<<7)+(g^e&(f^g))+0xefbe4786)\|0;h=g;g=f;f=e;e=(d+t)\|0;d=c;c=b;b=a;a=(t+((b&c)^(d&(b^c)))+(b>>>2^b>>>13^b>>>22^b<<30^b<<19^b<<10))\|0;w2=t=((w
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 29 5f 73 74 61 74 65 5f 74 6f 5f 68 65 61 70 28 6f 75 74 70 75 74 29 3b 72 65 74 75 72 6e 20 68 61 73 68 65 64 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 68 6d 61 63 5f 72 65 73 65 74 28 29 7b 48 30 3d 49 30 3b 48 31 3d 49 31 3b 48 32 3d 49 32 3b 48 33 3d 49 33 3b 48 34 3d 49 34 3b 48 35 3d 49 35 3b 48 36 3d 49 36 3b 48 37 3d 49 37 3b 54 4f 54 41 4c 30 3d 36 34 3b 54 4f 54 41 4c 31 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 5f 68 6d 61 63 5f 6f 70 61 64 28 29 7b 48 30 3d 4f 30 3b 48 31 3d 4f 31 3b 48 32 3d 4f 32 3b 48 33 3d 4f 33 3b 48 34 3d 4f 34 3b 48 35 3d 4f 35 3b 48 36 3d 4f 36 3b 48 37 3d 4f 37 3b 54 4f 54 41 4c 30 3d 36 34 3b 54 4f 54 41 4c 31 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 68 6d 61 63 5f 69 6e 69 74 28 70 30 2c 70 31 2c 70 32 2c 70 33 2c 70 34 2c 70 35 2c Data Ascii: )_state_to_heap(output);return hashed\|0}function hmac_reset(){H0=I0;H1=I1;H2=I2;H3=I3;H4=I4;H5=I5;H6=I6;H7=I7;TOTAL0=64;TOTAL1=0}function _hmac_opad(){H0=O0;H1=O1;H2=O2;H3=O3;H4=O4;H5=O5;H6=O6;H7=O7;TOTAL0=64;TOTAL1=0}function hmac_init(p0,p1,p2,p3,p4,p5,
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 6e 76 6f 69 63 65 50 44 46 2e 68 74 6d 6c 2d 70 6f 73 74 62 75 69 6c 64 5f 37 39 30 37 36 38 61 39 32 30 63 38 36 62 35 37 37 64 33 38 39 38 35 36 30 32 62 38 36 62 63 63 37 63 31 39 35 30 31 36 39 31 62 66 39 31 30 30 33 30 63 36 61 64 62 32 31 35 30 34 31 63 62 35 2e 68 74 6d 6c 27 2c 0a 27 6a 73 2f 76 65 6e 64 6f 72 2f 63 6f 64 65 6d 69 72 72 6f 72 5f 31 30 65 66 65 38 33 39 64 61 38 32 30 66 63 65 62 30 63 62 61 35 66 65 33 36 35 33 63 36 39 38 34 38 62 66 65 31 66 33 66 34 61 38 62 33 30 39 30 65 33 39 37 61 32 66 37 39 33 61 62 64 34 61 2e 6a 73 27 2c 0a 27 6a 73 2f 76 65 6e 64 6f 72 2f 73 69 6d 70 6c 65 73 63 72 6f 6c 6c 62 61 72 73 5f 66 66 62 61 33 38 66 63 64 34 66 38 65 61 66 39 38 61 64 30 31 61 62 63 61 62 34 31 66 30 32 66 33 35 33 63 61 34 Data Ascii: nvoicePDF.html-postbuild_790768a920c86b577d38985602b86bcc7c19501691bf910030c6adb215041cb5.html','js/vendor/codemirror_10efe839da820fceb0cba5fe3653c69848bfe1f3f4a8b3090e397a2f793abd4a.js','js/vendor/simplescrollbars_ffba38fcd4f8eaf98ad01abcab41f02f353ca4
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 3f 69 64 3d 6d 65 67 61 2e 70 72 69 76 61 63 79 2e 61 6e 64 72 6f 69 64 2e 61 70 70 26 72 65 66 65 72 72 65 72 3d 6d 65 67 61 6e 7a 73 62 27 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 73 5f 68 75 61 77 65 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 20 3d 20 27 68 74 74 70 73 3a 2f 2f 61 70 70 67 61 6c 6c 65 72 79 2e 68 75 61 77 65 69 2e 63 6f 6d 2f 23 2f 61 70 70 2f 43 31 30 32 30 30 39 38 39 35 27 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 61 6e 64 72 6f 69 64 20 66 75 6c 6c 2d 6d 6f 64 65 20 73 75 70 70 6f 72 74 65 Data Ascii: https://play.google.com/store/apps/details?id=mega.privacy.android.app&referrer=meganzsb'; if (is_huawei) { app = 'https://appgallery.huawei.com/#/app/C102009895'; } document.body.className = 'android full-mode supporte
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 20 20 20 20 20 72 65 74 75 72 6e 20 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 44 65 66 61 75 6c 74 20 74 6f 20 45 6e 67 6c 69 73 68 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 65 6e 27 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 47 65 74 73 20 74 68 65 20 66 69 6c 65 20 70 61 74 68 20 66 6f 72 20 61 20 6c 61 6e 67 75 61 67 65 20 66 69 6c 65 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 6c 61 6e 67 75 61 67 65 0a 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 53 74 72 69 6e 67 7d 0a 20 20 20 20 20 Data Ascii: return k; } } } } // Default to English return 'en'; }; /** * Gets the file path for a language file * @param {String} language * @returns {String}
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 66 3a 27 6a 73 2f 6d 65 67 61 2d 31 37 5f 33 61 38 35 64 38 36 65 65 36 35 62 30 65 61 34 35 38 66 32 64 34 31 32 37 30 66 32 35 38 39 65 65 31 38 37 35 39 39 35 65 36 38 34 63 38 65 66 66 66 34 39 62 35 39 66 31 35 35 65 66 64 37 39 2e 6a 73 27 2c 20 6e 3a 20 27 6a 73 2d 6d 65 67 61 2d 31 37 2d 6a 73 27 2c 20 6a 3a 20 31 2c 20 77 3a 20 32 36 7d 29 3b 0a 0a 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6d 61 6b 65 43 61 63 68 65 29 20 7b 0a 20 20 20 20 20 20 20 20 6a 73 6c 2e 70 75 73 68 28 7b 66 3a 27 6d 61 6b 65 63 61 63 68 65 5f 64 62 62 36 63 62 61 39 39 39 61 63 35 31 63 33 62 38 30 35 37 66 31 66 65 30 61 64 32 33 66 64 63 35 65 66 61 61 31 36 61 61 36 65 34 31 62 32 34 30 31 32 35 38 35 39 61 64 62 37 31 64 64 61 2e 6a 73 27 2c 20 Data Ascii: f:'js/mega-17_3a85d86ee65b0ea458f2d41270f2589ee1875995e684c8efff49b59f155efd79.js', n: 'js-mega-17-js', j: 1, w: 26}); if (localStorage.makeCache) { jsl.push({f:'makecache_dbb6cba999ac51c3b8057f1fe0ad23fdc5efaa16aa6e41b240125859adb71dda.js',
2024-07-11 11:36:37 UTC	16384	IN	Data Raw: 6e 3a 20 27 75 6e 73 75 62 27 2c 20 6a 3a 30 7d 2c 0a 20 20 20 20 20 20 20 20 27 75 6e 73 75 62 5f 6a 73 27 3a 20 7b 66 3a 27 68 74 6d 6c 2f 6a 73 2f 75 6e 73 75 62 5f 37 36 63 37 35 31 30 31 66 38 66 38 66 33 61 62 63 33 64 65 34 65 35 35 36 65 33 38 61 65 63 61 62 34 38 36 36 34 36 36 62 30 63 66 62 30 39 36 38 64 66 61 65 62 62 33 36 33 32 39 32 61 64 31 2e 6a 73 27 2c 20 6e 3a 20 27 75 6e 73 75 62 5f 6a 73 27 2c 20 6a 3a 31 7d 2c 0a 20 20 20 20 20 20 20 20 27 72 65 64 65 65 6d 5f 6a 73 27 3a 20 7b 66 3a 27 68 74 6d 6c 2f 6a 73 2f 72 65 64 65 65 6d 5f 30 31 31 31 37 33 62 66 32 33 34 38 65 62 32 38 32 63 61 38 66 63 34 33 61 35 66 30 65 39 31 65 36 30 34 36 37 35 32 33 66 38 32 31 63 39 64 35 62 37 62 63 35 61 62 31 37 65 66 33 31 64 35 38 2e 6a 73 27 Data Ascii: n: 'unsub', j:0}, 'unsub_js': {f:'html/js/unsub_76c75101f8f8f3abc3de4e556e38aecab4866466b0cfb0968dfaebb363292ad1.js', n: 'unsub_js', j:1}, 'redeem_js': {f:'html/js/redeem_011173bf2348eb282ca8fc43a5f0e91e60467523f821c9d5b7bc5ab17ef31d58.js'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49715	31.216.144.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:38 UTC	593	OUT	GET /loading-sprite_v4.png HTTP/1.1 Host: mega.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mega.nz/file/3LZ0hLYB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:38 UTC	232	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3414 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:36:38 UTC	3414	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 de 00 00 02 30 08 03 00 00 00 de 68 25 5e 00 00 01 92 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 03 03 00 00 00 00 00 00 00 00 00 03 03 03 00 00 00 00 00 00 00 00 00 02 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d9 00 07 d9 00 07 ff 93 93 00 00 00 00 00 00 ff ff ff ef 7f 80 00 00 00 00 00 00 d9 00 07 d9 00 07 d9 00 07 d9 00 07 ff ff ff d9 00 07 d9 00 07 d9 00 07 d9 00 07 d9 00 07 d9 00 07 d9 00 07 d9 00 07 ff 33 39 d9 00 07 d9 00 07 33 33 33 ff ff ff ff ff ff ff ff ff ff 32 39 ff 39 41 ff ff ff ff 47 47 ff ff ff ff ff ff ff 32 39 36 36 36 ff 34 3d ff 31 3b 00 00 00 ff 32 38 33 33 33 ff ff ff ff ff ff ff ff ff ff 31 39 ff 31 39 ff ff ff ff ff ff 00 Data Ascii: PNGIHDR0h%^PLTE39333299AGG296664=1;283331919

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49723	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:38 UTC	611	OUT	GET /4/lang/en_e703ea956d39915b306a6fe9289e758e6d0ec377843d7a543a6b1a8b7a6b05c2.json HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:38 UTC	371	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:38 GMT Content-Type: application/json Content-Length: 368437 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-59f35" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:38 UTC	16013	IN	Data Raw: 7b 0a 20 20 20 20 22 31 34 22 3a 20 22 43 6f 6e 66 69 72 6d 20 64 65 6c 65 74 69 6f 6e 22 2c 0a 20 20 20 20 22 31 35 22 3a 20 22 59 6f 75 20 61 72 65 20 61 62 6f 75 74 20 74 6f 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 72 65 6d 6f 76 65 20 61 6c 6c 20 69 74 65 6d 73 20 66 72 6f 6d 20 79 6f 75 72 20 52 75 62 62 69 73 68 20 62 69 6e 2e 22 2c 0a 20 20 20 20 22 31 36 22 3a 20 22 49 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 22 2c 0a 20 20 20 20 22 31 37 22 3a 20 22 54 72 61 6e 73 66 65 72 20 71 75 6f 74 61 20 65 78 63 65 65 64 65 64 22 2c 0a 20 20 20 20 22 31 38 22 3a 20 22 54 6f 6f 20 6d 61 6e 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 64 6f 77 6e 6c 6f 61 64 22 2c 0a 20 20 20 20 22 31 39 22 3a 20 22 4c 6f 67 69 6e 20 73 65 73 73 69 6f 6e Data Ascii: { "14": "Confirm deletion", "15": "You are about to permanently remove all items from your Rubbish bin.", "16": "Internal error", "17": "Transfer quota exceeded", "18": "Too many connections for this download", "19": "Login session
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 61 69 6c 20 61 64 64 72 65 73 73 20 61 6c 72 65 61 64 79 20 69 6e 20 75 73 65 22 2c 0a 20 20 20 20 22 31 32 39 38 22 3a 20 22 50 6c 65 61 73 65 20 6c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 22 2c 0a 20 20 20 20 22 31 33 30 31 22 3a 20 22 54 6f 64 61 79 22 2c 0a 20 20 20 20 22 31 33 30 32 22 3a 20 22 59 65 73 74 65 72 64 61 79 22 2c 0a 20 20 20 20 22 31 33 30 33 22 3a 20 22 54 68 69 73 20 77 65 65 6b 22 2c 0a 20 20 20 20 22 31 33 30 34 22 3a 20 22 4c 61 73 74 20 77 65 65 6b 22 2c 0a 20 20 20 20 22 31 33 30 35 22 3a 20 22 54 68 69 73 20 6d 6f 6e 74 68 22 2c 0a 20 20 20 20 22 31 33 30 36 22 3a 20 22 54 68 69 73 20 79 65 61 72 22 2c 0a 20 20 20 20 22 31 33 30 37 22 3a 20 22 4f 6c 64 65 72 22 2c 0a 20 20 20 20 22 31 33 30 39 22 3a 20 Data Ascii: ail address already in use", "1298": "Please log in to your account.", "1301": "Today", "1302": "Yesterday", "1303": "This week", "1304": "Last week", "1305": "This month", "1306": "This year", "1307": "Older", "1309":
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 72 20 77 69 6e 64 6f 77 73 20 61 6e 64 20 74 61 62 73 20 77 68 69 63 68 20 61 72 65 20 72 75 6e 6e 69 6e 67 20 4d 45 47 41 20 62 65 66 6f 72 65 20 70 72 6f 63 65 65 64 69 6e 67 2e 22 2c 0a 20 20 20 20 22 37 31 36 30 22 3a 20 22 52 65 64 65 65 6d 20 76 6f 75 63 68 65 72 22 2c 0a 20 20 20 20 22 37 31 36 32 22 3a 20 22 54 68 69 73 20 70 6c 61 6e 20 69 73 20 74 6f 6f 20 65 78 70 65 6e 73 69 76 65 20 74 6f 20 62 65 20 70 75 72 63 68 61 73 65 64 20 77 69 74 68 20 74 68 69 73 20 70 61 79 6d 65 6e 74 20 70 72 6f 76 69 64 65 72 2e 22 2c 0a 20 20 20 20 22 37 31 36 35 22 3a 20 22 43 61 6e 63 65 6c 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 0a 20 20 20 20 22 37 31 37 39 22 3a 20 22 43 61 6e 63 65 6c 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 0a 20 20 20 20 22 37 Data Ascii: r windows and tabs which are running MEGA before proceeding.", "7160": "Redeem voucher", "7162": "This plan is too expensive to be purchased with this payment provider.", "7165": "Cancel subscription", "7179": "Cancel subscription", "7
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 73 64 69 63 74 69 6f 6e 20 77 68 65 72 65 20 79 6f 75 72 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 69 73 20 63 6f 75 6e 74 65 72 2d 6e 6f 74 69 63 65 20 69 73 20 6c 6f 63 61 74 65 64 2c 20 66 72 6f 6d 20 74 68 65 20 70 65 72 73 6f 6e 20 77 68 6f 20 70 72 6f 76 69 64 65 64 20 4d 45 47 41 20 77 69 74 68 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 74 61 6b 65 64 6f 77 6e 20 6e 6f 74 69 63 65 20 6f 72 20 61 6e 20 61 67 65 6e 74 20 6f 66 20 73 75 63 68 20 70 65 72 73 6f 6e 2e 22 2c 0a 20 20 20 20 22 38 38 31 37 22 3a 20 22 50 6c 65 61 73 65 20 61 63 6b 6e 6f 77 6c 65 64 67 65 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 61 20 67 6f 6f 64 20 66 61 69 74 68 20 62 65 6c 69 65 66 20 74 68 61 74 20 74 68 65 20 6d 61 74 65 72 69 61 6c 20 Data Ascii: sdiction where your address in this counter-notice is located, from the person who provided MEGA with the original copyright takedown notice or an agent of such person.", "8817": "Please acknowledge that you have a good faith belief that the material
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 6f 66 20 74 68 65 20 6c 69 6e 6b 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 22 31 36 34 37 34 22 3a 20 22 50 72 65 76 69 6f 75 73 20 76 65 72 73 69 6f 6e 73 22 2c 0a 20 20 20 20 22 31 36 34 37 35 22 3a 20 22 52 65 76 65 72 74 22 2c 0a 20 20 20 20 22 31 36 34 37 36 22 3a 20 22 45 64 69 74 65 64 20 62 79 20 25 31 22 2c 0a 20 20 20 20 22 31 36 34 38 30 22 3a 20 22 45 64 69 74 65 64 20 62 79 20 6d 65 22 2c 0a 20 20 20 20 22 31 36 34 38 35 22 3a 20 22 44 75 70 6c 69 63 61 74 65 20 69 74 65 6d 73 22 2c 0a 20 20 20 20 22 31 36 34 38 36 22 3a 20 22 41 20 66 69 6c 65 20 6e 61 6d 65 64 20 25 31 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 73 20 61 74 20 74 68 69 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 22 2c 0a 20 20 20 20 22 31 36 34 38 37 22 3a 20 22 57 68 61 74 20 Data Ascii: of the link again.", "16474": "Previous versions", "16475": "Revert", "16476": "Edited by %1", "16480": "Edited by me", "16485": "Duplicate items", "16486": "A file named %1 already exists at this destination.", "16487": "What
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 77 20 70 61 73 73 77 6f 72 64 2c 20 63 6f 6e 66 69 72 6d 20 69 74 20 61 6e 64 20 63 6c 69 63 6b 20 5b 42 5d 4f 4b 5b 2f 42 5d 2e 22 2c 0a 20 20 20 20 22 31 38 34 39 33 22 3a 20 22 44 6f 77 6e 6c 6f 61 64 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 22 2c 0a 20 20 20 20 22 31 38 34 39 35 22 3a 20 22 4e 6f 74 65 3a 20 54 68 69 73 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 61 6e 64 20 66 69 6c 65 20 6d 65 74 61 64 61 74 61 2c 20 6e 6f 74 20 74 68 65 20 61 63 74 75 61 6c 20 66 69 6c 65 73 20 73 74 6f 72 65 64 20 62 79 20 79 6f 75 2e 22 2c 0a 20 20 20 20 22 31 38 34 39 36 22 3a 20 22 54 68 69 73 20 66 65 61 74 75 72 65 20 64 6f 65 73 20 6e 6f 74 20 77 6f 72 6b 20 6f 6e 20 69 4f 53 2e 20 50 6c 65 61 73 65 20 74 Data Ascii: w password, confirm it and click [B]OK[/B].", "18493": "Download your personal data", "18495": "Note: This will provide your account and file metadata, not the actual files stored by you.", "18496": "This feature does not work on iOS. Please t
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 6f 6e 20 6f 66 20 79 6f 75 72 20 70 61 79 6d 65 6e 74 20 66 72 6f 6d 20 6f 75 72 20 70 61 79 6d 65 6e 74 20 70 72 6f 76 69 64 65 72 2e 20 49 66 20 79 6f 75 20 70 61 69 64 20 77 69 74 68 20 64 65 62 69 74 20 6f 72 20 63 72 65 64 69 74 20 63 61 72 64 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 6e 6f 74 20 72 65 63 65 69 76 65 64 20 79 6f 75 72 20 4d 45 47 41 20 50 72 6f 20 61 63 63 6f 75 6e 74 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 68 6f 75 72 73 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 75 73 20 61 74 20 5b 41 5d 73 75 70 70 6f 72 74 40 6d 65 67 61 2e 6e 7a 5b 2f 41 5d 2e 20 49 66 20 79 6f 75 20 70 61 69 64 20 77 69 74 68 20 61 20 62 61 6e 6b 20 74 72 61 6e 73 66 65 72 20 70 6c 65 61 73 65 20 61 6c 6c 6f 77 20 34 20 74 6f 20 35 20 64 61 79 73 20 Data Ascii: on of your payment from our payment provider. If you paid with debit or credit card and you have not received your MEGA Pro account within a few hours, please contact us at [A]support@mega.nz[/A]. If you paid with a bank transfer please allow 4 to 5 days
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 32 32 35 22 3a 20 22 54 68 65 20 63 6f 64 65 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 65 6e 74 65 72 69 6e 67 20 74 68 65 20 63 6f 64 65 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 22 32 30 32 32 36 22 3a 20 22 4e 6f 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 69 73 20 70 65 6e 64 69 6e 67 2e 20 50 6c 65 61 73 65 20 74 72 79 20 72 65 73 65 6e 64 69 6e 67 20 74 68 65 20 63 6f 64 65 2e 22 2c 0a 20 20 20 20 22 32 30 32 32 38 22 3a 20 22 4e 6f 74 20 61 63 63 65 73 73 69 62 6c 65 22 2c 0a 20 20 20 20 22 32 30 32 32 39 22 3a 20 22 52 75 62 62 69 73 68 20 62 69 6e 20 65 6d 70 74 79 69 6e 67 20 73 63 68 65 64 75 6c 65 72 22 2c 0a 20 20 20 20 22 32 30 32 33 30 22 3a 20 22 56 6f 75 63 68 65 72 73 22 2c 0a 20 20 20 20 22 32 30 32 33 Data Ascii: 225": "The code is incorrect. Please try entering the code again.", "20226": "No verification is pending. Please try resending the code.", "20228": "Not accessible", "20229": "Rubbish bin emptying scheduler", "20230": "Vouchers", "2023
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 30 39 31 37 22 3a 20 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 20 2d 20 72 65 73 74 61 72 74 69 6e 67 5c 75 32 30 32 36 22 2c 0a 20 20 20 20 22 32 30 39 31 38 22 3a 20 22 55 70 6c 6f 61 64 20 65 72 72 6f 72 20 2d 20 72 65 74 72 79 69 6e 67 5c 75 32 30 32 36 22 2c 0a 20 20 20 20 22 32 30 39 32 30 22 3a 20 22 4e 6f 20 65 6d 6f 6a 69 73 20 66 6f 75 6e 64 22 2c 0a 20 20 20 20 22 32 30 39 32 33 22 3a 20 22 5b 53 5d 44 6f 77 6e 6c 6f 61 64 20 61 6e 64 20 49 6e 73 74 61 6c 6c 5b 2f 53 5d 20 66 6f 72 20 25 31 22 2c 0a 20 20 20 20 22 32 30 39 32 34 22 3a 20 22 4d 45 47 41 20 65 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 25 31 22 2c 0a 20 20 20 20 22 32 30 39 33 31 22 3a 20 22 53 65 6e 64 20 6c 61 72 67 65 20 66 69 6c 65 73 20 62 79 20 65 6d 61 69 6c 20 74 68 72 6f 75 Data Ascii: 0917": "Upload failed - restarting\u2026", "20918": "Upload error - retrying\u2026", "20920": "No emojis found", "20923": "[S]Download and Install[/S] for %1", "20924": "MEGA extension for %1", "20931": "Send large files by email throu
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 6f 6e 6c 79 20 61 63 63 65 70 74 73 20 73 74 61 6e 64 61 72 64 20 42 69 74 63 6f 69 6e 3b 20 70 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 42 69 74 63 6f 69 6e 20 61 64 64 72 65 73 73 2e 22 2c 0a 20 20 20 20 22 32 33 33 30 35 22 3a 20 22 41 75 74 6f 66 69 6c 6c 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 32 33 33 30 36 22 3a 20 22 53 61 76 65 20 61 73 20 64 65 66 61 75 6c 74 20 61 63 63 6f 75 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 32 33 33 30 37 22 3a 20 22 44 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 61 76 65 20 74 68 65 73 65 20 63 68 61 6e 67 65 73 20 61 73 20 79 6f 75 72 20 6e 65 77 20 64 65 66 61 75 6c 74 20 61 63 63 6f 75 6e 74 20 69 6e 66 6f 72 6d Data Ascii: only accepts standard Bitcoin; please enter a valid Bitcoin address.", "23305": "Autofill with default information", "23306": "Save as default account information", "23307": "Do you want to save these changes as your new default account inform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49722	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:38 UTC	611	OUT	GET /4/js/mega-1_3a42998e6f7318edd6f6ea0568cc7824c9273044f89e2c38ae326fc554ad5a84.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:38 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:38 GMT Content-Type: application/javascript Content-Length: 408437 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-63b75" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:38 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 73 6a 63 6c 2e 6a 73 0a 20 2a 20 20 20 6e 6f 64 65 64 65 63 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2e 70 72 6f 74 65 63 74 2e 6a 73 0a 20 2a 2f 0a 0a 2f 2a 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 4a 61 76 61 73 63 72 69 70 74 20 63 72 79 70 74 6f 67 72 61 70 68 79 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 43 72 75 73 68 20 74 6f 20 72 65 6d 6f 76 65 20 63 6f 6d 6d 65 6e 74 73 2c 20 73 68 6f 72 74 65 6e 20 76 61 72 69 61 62 6c 65 20 6e 61 6d 65 73 20 61 6e 64 0a 20 2a 20 67 65 6e 65 72 61 6c 6c 79 20 72 65 64 75 63 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 Data Ascii: /* Bundle Includes: * sjcl.js * nodedec.js * js/vendor/jquery.js * js/jquery.protect.js //* @fileOverview Javascript cryptography implementation. * * Crush to remove comments, shorten variable names and * generally reduce transmission
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 4c 65 6e 67 74 68 28 61 72 72 29 2f 34 29 3b 2f 2f 2e 72 65 70 6c 61 63 65 28 2f 28 2e 7b 38 7d 29 2f 67 2c 20 22 24 31 20 22 29 3b 0a 20 20 7d 2c 0a 20 20 2f 2a 2a 20 43 6f 6e 76 65 72 74 20 66 72 6f 6d 20 61 20 68 65 78 20 73 74 72 69 6e 67 20 74 6f 20 61 20 62 69 74 41 72 72 61 79 2e 20 2a 2f 0a 20 20 74 6f 42 69 74 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 74 72 29 20 7b 0a 20 20 20 20 76 61 72 20 69 2c 20 6f 75 74 3d 5b 5d 2c 20 6c 65 6e 3b 0a 20 20 20 20 73 74 72 20 3d 20 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 5c 73 7c 30 78 2f 67 2c 20 22 22 29 3b 0a 20 20 20 20 6c 65 6e 20 3d 20 73 74 72 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 73 74 72 20 3d 20 73 74 72 20 2b 20 22 30 30 30 30 30 30 30 30 22 3b 0a 20 20 20 20 66 6f 72 20 28 69 3d 30 3b 20 69 3c 73 Data Ascii: Length(arr)/4);//.replace(/(.{8})/g, "$1 "); }, /** Convert from a hex string to a bitArray. */ toBits: function (str) { var i, out=[], len; str = str.replace(/\s\|0x/g, ""); len = str.length; str = str + "00000000"; for (i=0; i<s
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 6e 20 25 20 32 20 7c 7c 20 74 6c 65 6e 20 3c 20 34 20 7c 7c 20 74 6c 65 6e 20 3e 20 31 36 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 73 6a 63 6c 2e 65 78 63 65 70 74 69 6f 6e 2e 69 6e 76 61 6c 69 64 28 22 63 63 6d 3a 20 69 6e 76 61 6c 69 64 20 74 61 67 20 6c 65 6e 67 74 68 22 29 3b 0a 20 20 20 20 7d 0a 20 20 0a 20 20 20 20 69 66 20 28 61 64 61 74 61 2e 6c 65 6e 67 74 68 20 3e 20 30 78 46 46 46 46 46 46 46 46 20 7c 7c 20 70 6c 61 69 6e 74 65 78 74 2e 6c 65 6e 67 74 68 20 3e 20 30 78 46 46 46 46 46 46 46 46 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 49 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 65 78 74 72 61 63 74 69 6e 67 20 68 69 67 68 20 77 6f 72 64 73 20 66 72 6f 6d 20 64 6f 75 62 6c 65 73 2e 0a 20 20 20 20 Data Ascii: n % 2 \|\| tlen < 4 \|\| tlen > 16) { throw new sjcl.exception.invalid("ccm: invalid tag length"); } if (adata.length > 0xFFFFFFFF \|\| plaintext.length > 0xFFFFFFFF) { // I don't want to deal with extracting high words from doubles.
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 78 38 37 5d 3b 0a 20 20 7d 0a 7d 3b 0a 2f 2a 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 47 43 4d 20 6d 6f 64 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 20 4a 75 68 6f 20 56 61 68 61 2d 48 65 72 74 74 75 61 0a 20 2a 2f 0a 0a 2f 2a 2a 20 40 6e 61 6d 65 73 70 61 63 65 20 47 61 6c 6f 69 73 2f 43 6f 75 6e 74 65 72 20 6d 6f 64 65 2e 20 2a 2f 0a 73 6a 63 6c 2e 6d 6f 64 65 2e 67 63 6d 20 3d 20 7b 0a 20 20 2f 2a 2a 20 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 6d 6f 64 65 2e 0a 20 20 20 2a 20 40 63 6f 6e 73 74 61 6e 74 0a 20 20 20 2a 2f 0a 20 20 6e 61 6d 65 3a 20 22 67 63 6d 22 2c 0a 20 20 0a 20 20 2f 2a 2a 20 45 6e 63 72 79 70 74 20 69 6e 20 47 43 4d 20 6d 6f 64 65 2e 0a 20 20 20 2a 20 40 73 74 61 74 69 Data Ascii: x87]; }};/** @fileOverview GCM mode implementation. * * @author Juho Vaha-Herttua //* @namespace Galois/Counter mode. /sjcl.mode.gcm = { /* The name of the mode. * @constant / name: "gcm", /* Encrypt in GCM mode. * @stati
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 70 79 20 63 6f 6c 6c 65 63 74 6f 72 73 20 2a 2f 0a 20 20 73 74 61 72 74 43 6f 6c 6c 65 63 74 6f 72 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 63 6f 6c 6c 65 63 74 6f 72 73 53 74 61 72 74 65 64 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 0a 20 20 0a 20 20 20 20 74 68 69 73 2e 5f 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 3d 20 7b 0a 20 20 20 20 20 20 6c 6f 61 64 54 69 6d 65 43 6f 6c 6c 65 63 74 6f 72 3a 20 74 68 69 73 2e 5f 62 69 6e 64 28 74 68 69 73 2e 5f 6c 6f 61 64 54 69 6d 65 43 6f 6c 6c 65 63 74 6f 72 29 2c 0a 20 20 20 20 20 20 6d 6f 75 73 65 43 6f 6c 6c 65 63 74 6f 72 3a 20 74 68 69 73 2e 5f 62 69 6e 64 28 74 68 69 73 2e 5f 6d 6f 75 73 65 43 6f 6c 6c 65 63 74 6f 72 29 2c 0a 20 20 20 20 20 20 6b 65 79 62 6f Data Ascii: py collectors */ startCollectors: function () { if (this._collectorsStarted) { return; } this._eventListener = { loadTimeCollector: this._bind(this._loadTimeCollector), mouseCollector: this._bind(this._mouseCollector), keybo
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 20 4a 53 4f 4e 2e 0a 20 20 20 2a 2f 0a 20 20 64 65 63 6f 64 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 74 72 29 20 7b 0a 20 20 20 20 73 74 72 20 3d 20 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2f 67 2c 27 27 29 3b 0a 20 20 20 20 69 66 20 28 21 73 74 72 2e 6d 61 74 63 68 28 2f 5e 5c 7b 2e 2a 5c 7d 24 2f 29 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 73 6a 63 6c 2e 65 78 63 65 70 74 69 6f 6e 2e 69 6e 76 61 6c 69 64 28 22 6a 73 6f 6e 20 64 65 63 6f 64 65 3a 20 74 68 69 73 20 69 73 6e 27 74 20 6a 73 6f 6e 21 22 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 61 20 3d 20 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 7b 7c 5c 7d 24 2f 67 2c 20 27 27 29 2e 73 70 6c 69 74 28 2f 2c 2f 29 2c 20 6f 75 74 3d 7b 7d 2c 20 69 2c 20 6d 3b 0a 20 20 20 Data Ascii: JSON. / decode: function (str) { str = str.replace(/\s/g,''); if (!str.match(/^\{.\}$/)) { throw new sjcl.exception.invalid("json decode: this isn't json!"); } var a = str.replace(/^\{\|\}$/g, '').split(/,/), out={}, i, m;
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 2e 73 64 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 61 72 2e 73 64 73 20 3d 20 6e 2e 73 64 73 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6e 2e 72 72 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 61 72 2e 72 72 20 3d 20 6e 2e 72 72 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6e 2e 73 34 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 61 72 2e 73 34 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 2e 73 34 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6e 2e 64 65 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 61 72 2e Data Ascii: .sds !== 'undefined') { ar.sds = n.sds; } if (typeof n.rr !== 'undefined') { ar.rr = n.rr; } if (typeof n.s4 !== 'undefined') { ar.s4 = JSON.stringify(n.s4); } if (typeof n.des !== 'undefined') { ar.
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 20 3a 20 27 2f 27 7d 6e 6f 64 65 64 65 63 2e 6a 73 3f 76 3d 24 7b 57 4f 52 4b 45 52 5f 56 45 52 53 49 4f 4e 7d 60 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 20 6f 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 3e 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 20 6c 69 6d 69 74 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 2a 20 42 41 43 4b 50 52 45 53 53 55 52 45 5f 57 4f 52 4b 45 52 5f 4c 49 4d 49 54 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 20 62 75 73 79 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 73 20 3d 20 Data Ascii: : '/'}nodedec.js?v=${WORKER_VERSION}`; } get ok() { return this.length > 0; } get limit() { return this.length * BACKPRESSURE_WORKER_LIMIT; } get busy() { const res =
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 3b 0a 09 7d 2c 0a 0a 0a 09 2f 2f 20 52 65 74 72 69 65 76 65 20 74 68 65 20 74 65 78 74 20 76 61 6c 75 65 20 6f 66 20 61 6e 20 61 72 72 61 79 20 6f 66 20 44 4f 4d 20 6e 6f 64 65 73 0a 09 74 65 78 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 09 09 76 61 72 20 6e 6f 64 65 2c 0a 09 09 09 72 65 74 20 3d 20 22 22 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 6e 6f 64 65 54 79 70 65 20 3d 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 3b 0a 0a 09 09 69 66 20 28 20 21 6e 6f 64 65 54 79 70 65 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 49 66 20 6e 6f 20 6e 6f 64 65 54 79 70 65 2c 20 74 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 61 6e 20 61 72 72 61 79 0a 09 09 09 77 68 Data Ascii: }}return obj;},// Retrieve the text value of an array of DOM nodestext: function( elem ) {var node,ret = "",i = 0,nodeType = elem.nodeType;if ( !nodeType ) {// If no nodeType, this is expected to be an arraywh
2024-07-11 11:36:39 UTC	16384	IN	Data Raw: 3e 20 6c 65 67 65 6e 64 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 6e 2b 32 29 20 3a 63 61 6e 2d 64 69 73 61 62 6c 65 0a 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 0a 09 09 2f 2f 20 4f 6e 6c 79 20 63 65 72 74 61 69 6e 20 65 6c 65 6d 65 6e 74 73 20 63 61 6e 20 6d 61 74 63 68 20 3a 65 6e 61 62 6c 65 64 20 6f 72 20 3a 64 69 73 61 62 6c 65 64 0a 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 68 74 6d 6c 2e 73 70 65 63 2e 77 68 61 74 77 67 2e 6f 72 67 2f 6d 75 6c 74 69 70 61 67 65 2f 73 63 72 69 70 74 69 6e 67 2e 68 74 6d 6c 23 73 65 6c 65 63 74 6f 72 2d 65 6e 61 62 6c 65 64 0a 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 68 74 6d 6c 2e 73 70 65 63 2e 77 68 61 74 77 67 2e 6f 72 67 2f 6d 75 6c 74 69 70 61 67 65 2f 73 63 72 69 70 74 69 6e 67 Data Ascii: > legend:nth-of-type(n+2) :can-disablereturn function( elem ) {// Only certain elements can match :enabled or :disabled// https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled// https://html.spec.whatwg.org/multipage/scripting

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49718	66.203.125.16	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:38 UTC	596	OUT	POST /cs?id=0 HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:38 UTC	13	OUT	Data Raw: 5b 7b 22 61 22 3a 22 67 6d 66 22 7d 5d Data Ascii: [{"a":"gmf"}]
2024-07-11 11:36:39 UTC	331	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 112 Content-Length: 112 Connection: close
2024-07-11 11:36:39 UTC	112	IN	Data Raw: 5b 7b 22 6d 63 73 22 3a 31 2c 22 6d 66 61 65 22 3a 31 2c 22 6e 73 72 65 22 3a 31 2c 22 6e 6c 66 65 22 3a 31 2c 22 63 73 70 65 22 3a 31 2c 22 73 6d 73 76 65 22 3a 31 2c 22 6a 69 64 22 3a 22 61 32 63 31 39 34 61 31 35 63 39 34 63 32 30 30 22 2c 22 72 65 66 70 72 22 3a 31 2c 22 66 66 5f 63 68 6d 6f 6e 22 3a 31 2c 22 70 66 22 3a 31 7d 5d Data Ascii: [{"mcs":1,"mfae":1,"nsre":1,"nlfe":1,"cspe":1,"smsve":1,"jid":"a2c194a15c94c200","refpr":1,"ff_chmon":1,"pf":1}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49717	66.203.125.16	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:38 UTC	600	OUT	POST /cs?id=0&v=2 HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive Content-Length: 33 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:38 UTC	33	OUT	Data Raw: 5b 7b 22 61 22 3a 22 67 22 2c 22 61 64 22 3a 31 2c 22 70 22 3a 22 33 4c 5a 30 68 4c 59 42 22 7d 5d Data Ascii: [{"a":"g","ad":1,"p":"3LZ0hLYB"}]
2024-07-11 11:36:39 UTC	331	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 125 Content-Length: 125 Connection: close
2024-07-11 11:36:39 UTC	125	IN	Data Raw: 5b 7b 22 73 22 3a 36 35 31 39 34 31 31 2c 22 61 74 22 3a 22 6a 4f 7a 46 6d 76 54 39 68 38 44 74 46 5f 6f 4a 56 68 4b 6a 64 72 53 63 5a 42 51 62 4f 56 56 50 46 6f 55 2d 68 45 63 4c 42 7a 74 56 58 31 70 55 6c 32 35 47 74 6b 52 6b 77 54 55 57 39 2d 45 6b 50 61 77 5a 59 6d 55 2d 56 35 4d 37 47 68 32 46 6f 35 5a 58 4c 51 22 2c 22 6d 73 64 22 3a 31 2c 22 61 64 22 3a 2d 39 7d 5d Data Ascii: [{"s":6519411,"at":"jOzFmvT9h8DtF_oJVhKjdrScZBQbOVVPFoU-hEcLBztVX1pUl25GtkRkwTUW9-EkPawZYmU-V5M7Gh2Fo5ZXLQ","msd":1,"ad":-9}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49719	31.216.144.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:38 UTC	587	OUT	GET /favicon.ico?v=3 HTTP/1.1 Host: mega.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mega.nz/file/3LZ0hLYB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:39 UTC	235	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 6518 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:36:39 UTC	6518	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 28 05 00 00 26 00 00 00 20 20 00 00 01 00 20 00 28 14 00 00 4e 05 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 08 01 db 00 08 01 db 00 08 01 db 00 08 01 db 00 08 01 db 14 08 01 db 86 08 01 db d3 08 01 db fa 08 01 db f4 08 01 db ce 08 01 db 83 08 01 db 14 08 01 db 00 08 01 db 00 08 01 db 00 08 01 db 00 0a 03 dd 00 0a 03 dd 00 0a 03 dd 00 0a 03 dd 54 0a 03 dd f2 0a 03 dd ff 0a 03 dd ff 0a 03 dd ff 0a 03 dd ff 0a 03 dd ff 0a 03 dd ff 0a 03 dd f2 0a Data Ascii: (& (N( T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49721	31.216.145.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:38 UTC	352	OUT	GET /loading-sprite_v4.png HTTP/1.1 Host: mega.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:39 UTC	232	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3414 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:36:39 UTC	3414	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 de 00 00 02 30 08 03 00 00 00 de 68 25 5e 00 00 01 92 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 03 03 00 00 00 00 00 00 00 00 00 03 03 03 00 00 00 00 00 00 00 00 00 02 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d9 00 07 d9 00 07 ff 93 93 00 00 00 00 00 00 ff ff ff ef 7f 80 00 00 00 00 00 00 d9 00 07 d9 00 07 d9 00 07 d9 00 07 ff ff ff d9 00 07 d9 00 07 d9 00 07 d9 00 07 d9 00 07 d9 00 07 d9 00 07 d9 00 07 ff 33 39 d9 00 07 d9 00 07 33 33 33 ff ff ff ff ff ff ff ff ff ff 32 39 ff 39 41 ff ff ff ff 47 47 ff ff ff ff ff ff ff 32 39 36 36 36 ff 34 3d ff 31 3b 00 00 00 ff 32 38 33 33 33 ff ff ff ff ff ff ff ff ff ff 31 39 ff 31 39 ff ff ff ff ff ff 00 Data Ascii: PNGIHDR0h%^PLTE39333299AGG296664=1;283331919

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49724	31.216.145.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:39 UTC	346	OUT	GET /favicon.ico?v=3 HTTP/1.1 Host: mega.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:40 UTC	235	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 6518 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:36:40 UTC	6518	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 28 05 00 00 26 00 00 00 20 20 00 00 01 00 20 00 28 14 00 00 4e 05 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 07 00 d9 00 08 01 db 00 08 01 db 00 08 01 db 00 08 01 db 00 08 01 db 14 08 01 db 86 08 01 db d3 08 01 db fa 08 01 db f4 08 01 db ce 08 01 db 83 08 01 db 14 08 01 db 00 08 01 db 00 08 01 db 00 08 01 db 00 0a 03 dd 00 0a 03 dd 00 0a 03 dd 00 0a 03 dd 54 0a 03 dd f2 0a 03 dd ff 0a 03 dd ff 0a 03 dd ff 0a 03 dd ff 0a 03 dd ff 0a 03 dd ff 0a 03 dd f2 0a Data Ascii: (& (N( T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49730	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:39 UTC	611	OUT	GET /4/js/mega-2_1f80ff7ea7cc787dbed8963b01c4f709df888754e80f262d2e109e5a088a8f04.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:40 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:40 GMT Content-Type: application/javascript Content-Length: 477018 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7475a" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:40 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2d 75 69 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2d 75 69 2d 74 6f 75 63 68 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 6d 6f 75 73 65 77 68 65 65 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 73 63 72 6f 6c 6c 69 6e 67 2e 75 74 69 6c 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2e 6d 69 73 63 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6d 65 67 61 4c 6f 67 67 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 66 75 6c 6c 73 63 72 65 65 6e 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2d 75 69 2e 65 78 74 72 Data Ascii: /* Bundle Includes: * js/vendor/jquery-ui.js * js/vendor/jquery-ui-touch.js * js/vendor/jquery.mousewheel.js * js/scrolling.utils.js * js/jquery.misc.js * js/vendor/megaLogger.js * js/vendor/jquery.fullscreen.js * js/jquery-ui.extr
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 09 68 61 6e 64 6c 65 72 73 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 09 09 09 65 6c 65 6d 65 6e 74 20 3d 20 73 75 70 70 72 65 73 73 44 69 73 61 62 6c 65 64 43 68 65 63 6b 3b 0a 09 09 09 73 75 70 70 72 65 73 73 44 69 73 61 62 6c 65 64 43 68 65 63 6b 20 3d 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 4e 6f 20 65 6c 65 6d 65 6e 74 20 61 72 67 75 6d 65 6e 74 2c 20 73 68 75 66 66 6c 65 20 61 6e 64 20 75 73 65 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 0a 09 09 69 66 20 28 20 21 68 61 6e 64 6c 65 72 73 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 72 73 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 09 09 09 65 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3b 0a 09 09 09 64 65 6c 65 67 61 74 65 45 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 77 69 64 67 65 74 28 Data Ascii: handlers = element;element = suppressDisabledCheck;suppressDisabledCheck = false;}// No element argument, shuffle and use this.elementif ( !handlers ) {handlers = element;element = this.element;delegateElement = this.widget(
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 64 61 74 61 2e 77 69 74 68 69 6e 2c 0a 09 09 09 09 77 69 74 68 69 6e 4f 66 66 73 65 74 20 3d 20 77 69 74 68 69 6e 2e 6f 66 66 73 65 74 2e 6c 65 66 74 20 2b 20 77 69 74 68 69 6e 2e 73 63 72 6f 6c 6c 4c 65 66 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 20 3d 20 77 69 74 68 69 6e 2e 77 69 64 74 68 2c 0a 09 09 09 09 6f 66 66 73 65 74 4c 65 66 74 20 3d 20 77 69 74 68 69 6e 2e 69 73 57 69 6e 64 6f 77 20 3f 20 77 69 74 68 69 6e 2e 73 63 72 6f 6c 6c 4c 65 66 74 20 3a 20 77 69 74 68 69 6e 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 0a 09 09 09 09 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 4c 65 66 74 20 3d 20 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 2d 20 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 0a 09 09 09 Data Ascii: data.within,withinOffset = within.offset.left + within.scrollLeft,outerWidth = within.width,offsetLeft = within.isWindow ? within.scrollLeft : within.offset.left,collisionPosLeft = position.left - data.collisionPosition.marginLeft,
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 20 70 72 6f 74 6f 2e 70 6c 75 67 69 6e 73 5b 20 69 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 70 72 6f 74 6f 2e 70 6c 75 67 69 6e 73 5b 20 69 20 5d 2e 70 75 73 68 28 20 5b 20 6f 70 74 69 6f 6e 2c 20 73 65 74 5b 20 69 20 5d 20 5d 20 29 3b 0a 09 09 7d 0a 09 7d 2c 0a 09 63 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 73 74 61 6e 63 65 2c 20 6e 61 6d 65 2c 20 61 72 67 73 2c 20 61 6c 6c 6f 77 44 69 73 63 6f 6e 6e 65 63 74 65 64 20 29 20 7b 0a 09 09 76 61 72 20 69 2c 0a 09 09 09 73 65 74 20 3d 20 69 6e 73 74 61 6e 63 65 2e 70 6c 75 67 69 6e 73 5b 20 6e 61 6d 65 20 5d 3b 0a 0a 09 09 69 66 20 28 20 21 73 65 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 0a 09 09 69 66 20 28 20 21 61 6c 6c 6f 77 44 69 73 63 6f 6e 6e 65 63 74 65 64 20 26 26 20 28 Data Ascii: proto.plugins[ i ] \|\| [];proto.plugins[ i ].push( [ option, set[ i ] ] );}},call: function( instance, name, args, allowDisconnected ) {var i,set = instance.plugins[ name ];if ( !set ) {return;}if ( !allowDisconnected && (
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 7d 2c 0a 0a 09 5f 63 6f 6e 76 65 72 74 50 6f 73 69 74 69 6f 6e 54 6f 3a 20 66 75 6e 63 74 69 6f 6e 28 20 64 2c 20 70 6f 73 20 29 20 7b 0a 0a 09 09 69 66 20 28 20 21 70 6f 73 20 29 20 7b 0a 09 09 09 70 6f 73 20 3d 20 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 3b 0a 09 09 7d 0a 0a 09 09 76 61 72 20 6d 6f 64 20 3d 20 64 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 3f 20 31 20 3a 20 2d 31 2c 0a 09 09 09 73 63 72 6f 6c 6c 49 73 52 6f 6f 74 4e 6f 64 65 20 3d 20 74 68 69 73 2e 5f 69 73 52 6f 6f 74 4e 6f 64 65 28 20 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 20 30 20 5d 20 29 3b 0a 0a 09 09 72 65 74 75 72 6e 20 7b 0a 09 09 09 74 6f 70 3a 20 28 0a 0a 09 09 09 09 2f 2f 20 54 68 65 20 61 62 73 6f 6c 75 74 65 20 6d 6f 75 73 65 20 70 6f 73 69 74 69 6f 6e 0a Data Ascii: },_convertPositionTo: function( d, pos ) {if ( !pos ) {pos = this.position;}var mod = d === "absolute" ? 1 : -1,scrollIsRootNode = this._isRootNode( this.scrollParent[ 0 ] );return {top: (// The absolute mouse position
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 6f 6e 28 20 65 76 65 6e 74 2c 20 75 69 2c 20 69 6e 73 74 20 29 20 7b 0a 0a 09 09 76 61 72 20 74 73 2c 20 62 73 2c 20 6c 73 2c 20 72 73 2c 20 6c 2c 20 72 2c 20 74 2c 20 62 2c 20 69 2c 20 66 69 72 73 74 2c 0a 09 09 09 6f 20 3d 20 69 6e 73 74 2e 6f 70 74 69 6f 6e 73 2c 0a 09 09 09 64 20 3d 20 6f 2e 73 6e 61 70 54 6f 6c 65 72 61 6e 63 65 2c 0a 09 09 09 78 31 20 3d 20 75 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 20 78 32 20 3d 20 78 31 20 2b 20 69 6e 73 74 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2c 0a 09 09 09 79 31 20 3d 20 75 69 2e 6f 66 66 73 65 74 2e 74 6f 70 2c 20 79 32 20 3d 20 79 31 20 2b 20 69 6e 73 74 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 67 68 74 3b 0a 0a 09 09 66 6f 72 20 28 20 69 20 3d 20 Data Ascii: on( event, ui, inst ) {var ts, bs, ls, rs, l, r, t, b, i, first,o = inst.options,d = o.snapTolerance,x1 = ui.offset.left, x2 = x1 + inst.helperProportions.width,y1 = ui.offset.top, y2 = y1 + inst.helperProportions.height;for ( i =
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 70 61 62 6c 65 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 52 65 73 69 7a 61 62 6c 65 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 2f 2f 3e 3e 6c 61 62 65 6c 3a 20 52 65 73 69 7a 61 62 6c 65 0a 2f 2f 3e 3e 67 72 6f 75 70 3a 20 49 6e 74 65 72 61 63 74 69 6f 6e 73 0a 2f 2f 3e 3e 64 65 73 63 72 69 70 74 69 6f 6e 3a 20 45 Data Ascii: pable;/! jQuery UI Resizable 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license *///>>label: Resizable//>>group: Interactions//>>description: E
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 44 4f 3a 20 53 65 65 6d 73 20 6c 69 6b 65 20 61 20 62 75 67 20 74 6f 20 63 61 63 68 65 20 74 68 69 73 2e 6f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 0a 09 09 09 2f 2f 20 63 6f 6e 73 69 64 65 72 69 6e 67 20 74 68 61 74 20 77 65 20 61 72 65 20 69 6e 20 61 20 6c 6f 6f 70 2e 0a 09 09 09 69 66 20 28 20 21 74 68 69 73 2e 6f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 6f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 20 3d 20 74 68 69 73 2e 5f 67 65 74 50 61 64 64 69 6e 67 50 6c 75 73 42 6f 72 64 65 72 44 69 6d 65 6e 73 69 6f 6e 73 28 20 70 72 65 6c 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 70 72 65 6c 2e 63 73 73 28 20 7b 0a 09 09 09 09 68 65 69 67 68 74 3a 20 28 20 65 6c 65 6d 65 6e 74 2e 68 65 69 67 68 74 28 29 20 2d 20 74 68 Data Ascii: DO: Seems like a bug to cache this.outerDimensions// considering that we are in a loop.if ( !this.outerDimensions ) {this.outerDimensions = this._getPaddingPlusBorderDimensions( prel );}prel.css( {height: ( element.height() - th
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 42 61 63 6b 28 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 64 6f 53 65 6c 65 63 74 2c 0a 09 09 09 09 73 65 6c 65 63 74 65 65 20 3d 20 24 2e 64 61 74 61 28 20 74 68 69 73 2c 20 22 73 65 6c 65 63 74 61 62 6c 65 2d 69 74 65 6d 22 20 29 3b 0a 09 09 09 69 66 20 28 20 73 65 6c 65 63 74 65 65 20 29 20 7b 0a 09 09 09 09 64 6f 53 65 6c 65 63 74 20 3d 20 28 20 21 65 76 65 6e 74 2e 6d 65 74 61 4b 65 79 20 26 26 20 21 65 76 65 6e 74 2e 63 74 72 6c 4b 65 79 20 29 20 7c 7c 0a 09 09 09 09 09 21 73 65 6c 65 63 74 65 65 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 20 22 75 69 2d 73 65 6c 65 63 74 65 64 22 20 29 3b 0a 09 09 09 09 74 68 61 74 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 Data Ascii: .parents().addBack().each( function() {var doSelect,selectee = $.data( this, "selectable-item" );if ( selectee ) {doSelect = ( !event.metaKey && !event.ctrlKey ) \|\|!selectee.$element.hasClass( "ui-selected" );that._removeClass
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 6f 6e 20 3d 20 69 6e 74 65 72 73 65 63 74 69 6f 6e 20 3d 3d 3d 20 31 20 3f 20 22 64 6f 77 6e 22 20 3a 20 22 75 70 22 3b 0a 0a 09 09 09 09 69 66 20 28 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 6c 65 72 61 6e 63 65 20 3d 3d 3d 20 22 70 6f 69 6e 74 65 72 22 20 7c 7c 20 74 68 69 73 2e 5f 69 6e 74 65 72 73 65 63 74 73 57 69 74 68 53 69 64 65 73 28 20 69 74 65 6d 20 29 20 29 20 7b 0a 09 09 09 09 09 74 68 69 73 2e 5f 72 65 61 72 72 61 6e 67 65 28 20 65 76 65 6e 74 2c 20 69 74 65 6d 20 29 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 20 22 63 68 61 6e 67 65 22 2c 20 65 76 65 6e 74 2c 20 74 68 69 73 2e 5f 75 69 48 61 73 68 28 29 20 29 3b 0a 09 09 09 Data Ascii: on = intersection === 1 ? "down" : "up";if ( this.options.tolerance === "pointer" \|\| this._intersectsWithSides( item ) ) {this._rearrange( event, item );} else {break;}this._trigger( "change", event, this._uiHash() );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49731	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:39 UTC	611	OUT	GET /4/js/mega-3_8d60e4c0aa8069a6dcb5d74a94e2672dfb90332f43cdbd766f13c0d66e6dccaf.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:40 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:40 GMT Content-Type: application/javascript Content-Length: 381101 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-5d0ad" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:40 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 61 70 69 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 62 72 6f 77 73 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 63 6c 69 70 62 6f 61 72 64 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 63 6f 6e 76 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 63 72 79 70 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 63 73 70 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 64 65 62 75 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 64 6f 6d 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 65 76 65 6e 74 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 69 63 75 2e 6a 73 0a 20 2a 20 20 20 6a 73 Data Ascii: /* Bundle Includes: * js/utils/api.js * js/utils/browser.js * js/utils/clipboard.js * js/utils/conv.js * js/utils/crypt.js * js/utils/csp.js * js/utils/debug.js * js/utils/dom.js * js/utils/events.js * js/utils/icu.js * js
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 6c 28 74 68 69 73 2c 20 74 68 69 73 2e 63 68 61 6e 6e 65 6c 2c 20 72 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 20 3d 3d 3d 20 45 41 47 41 49 4e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 2d 20 72 65 74 72 79 20 77 69 74 68 20 65 78 70 6f 6e 65 6e 74 69 61 6c 20 62 61 63 6b 6f 66 66 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 62 61 63 6b 6f 66 66 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 62 61 63 6b 6f 66 66 20 3d 20 31 39 32 20 2b 20 2d 4d 61 74 68 2e 6c 6f 67 28 4d 61 Data Ascii: l(this, this.channel, res); } if (res === EAGAIN) { // request failed - retry with exponential backoff if (!this.backoff) { this.backoff = 192 + -Math.log(Ma
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 74 68 69 73 2e 73 74 61 74 75 73 20 7c 20 30 2c 20 74 68 69 73 2e 62 61 63 6b 6f 66 66 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 73 63 68 65 64 75 6c 65 28 62 61 63 6b 6f 66 66 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 62 61 63 6b 6f 66 66 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 73 74 61 74 75 73 20 3d 3d 3d 20 32 30 30 29 20 7b 0a Data Ascii: this.status \| 0, this.backoff); } }); return this; } schedule(backoff) { if (navigator.onLine === false) { return; } if (!backoff) { if (this.status === 200) {
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 73 75 6c 74 7d 20 3d 20 61 77 61 69 74 20 74 68 69 73 2e 72 65 71 28 70 61 79 6c 6f 61 64 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 5b 73 74 2c 20 76 61 6c 75 65 5d 20 3d 20 6d 53 74 50 61 72 73 65 72 28 72 65 73 75 6c 74 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 65 6c 66 2e 64 20 3e 20 31 20 26 26 20 73 74 20 21 3d 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 20 63 61 6c 6c 65 72 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 65 64 20 74 6f 20 75 73 65 20 61 70 69 2e 72 65 71 28 29 2c 20 77 65 27 6c 6c 20 6d 61 6b 65 20 68 69 6d 20 68 61 70 70 79 2e 2e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 67 67 65 72 2e 69 6e 66 6f 28 60 55 6e Data Ascii: sult} = await this.req(payload, options); const [st, value] = mStParser(result); if (self.d > 1 && st !== 0) { // The caller probably wanted to use api.req(), we'll make him happy... logger.info(`Un
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 5b 69 5d 2e 73 69 64 20 3d 20 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 73 65 74 41 50 49 50 61 74 68 28 61 44 6f 6d 61 69 6e 2c 20 61 53 61 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 44 6f 6d 61 69 6e 20 3d 3d 3d 20 27 64 65 62 75 67 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 44 6f 6d 61 69 6e 20 3d 20 60 24 7b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 3a 34 34 34 60 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 70 69 70 61 74 68 20 3d 20 60 68 74 74 70 73 3a 2f 2f 24 7b 61 44 6f 6d 61 69 6e 7d 2f 60 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: [i].sid = h; } } }, setAPIPath(aDomain, aSave) { if (aDomain === 'debug') { aDomain = `${location.host}:444`; } apipath = `https://${aDomain}/`;
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 75 73 65 72 61 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 27 68 75 61 77 65 69 62 72 6f 77 73 65 72 27 29 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 69 63 6f 6e 20 3d 20 27 68 75 61 77 2e 70 6e 67 27 3b 0a 20 20 20 20 20 20 20 20 62 72 6f 77 73 65 72 20 3d 20 27 48 75 61 77 65 69 42 72 6f 77 73 65 72 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 75 73 65 72 61 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 27 68 65 79 74 61 70 62 72 6f 77 73 65 72 27 29 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 69 63 6f 6e 20 3d 20 27 68 65 79 2e 70 6e 67 27 3b 0a 20 20 20 20 20 20 20 20 62 72 6f 77 73 65 72 20 3d 20 27 48 65 79 54 61 70 42 72 6f 77 73 65 72 27 3b 0a 20 20 20 20 7d 0a 20 20 20 Data Ascii: } else if (useragent.indexOf('huaweibrowser') > 0) { icon = 'huaw.png'; browser = 'HuaweiBrowser'; } else if (useragent.indexOf('heytapbrowser') > 0) { icon = 'hey.png'; browser = 'HeyTapBrowser'; }
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 63 61 74 63 68 20 28 65 78 29 20 7b 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 55 48 36 34 2c 20 27 70 72 6f 74 6f 74 79 70 65 27 2c 20 6d 61 6b 65 43 6c 61 73 73 28 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 55 48 36 34 2c 0a 20 20 20 20 20 20 20 20 6d 6f 64 3a 20 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 20 3d 20 36 34 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 62 75 66 66 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: catch (ex) {} } Object.defineProperty(UH64, 'prototype', makeClass({ constructor: UH64, mod: function mod(n) { var r = 0; var b = 64; if (!this.buffer) { return false;
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 20 76 61 72 20 61 75 74 68 72 69 6e 67 4c 6f 61 64 69 6e 67 50 72 6f 6d 69 73 65 20 3d 20 61 75 74 68 72 69 6e 67 2e 69 6e 69 74 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 53 79 73 74 65 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 74 65 72 50 72 6f 6d 69 73 65 2e 6c 69 6e 6b 46 61 69 6c 54 6f 28 61 75 74 68 72 69 6e 67 4c 6f 61 64 69 6e 67 50 72 6f 6d 69 73 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4e 6f 77 2c 20 77 69 74 68 20 74 68 65 20 61 75 74 68 72 69 6e 67 20 6c 6f 61 64 65 64 2c 20 6c 69 6e 6b 20 72 65 63 75 72 73 69 76 65 6c 79 20 74 6f 20 67 65 74 50 75 62 4b 65 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 68 72 69 6e 67 4c 6f 61 64 69 6e 67 50 72 6f 6d 69 73 65 2e 64 6f 6e 65 28 66 75 Data Ascii: var authringLoadingPromise = authring.initAuthenticationSystem(); masterPromise.linkFailTo(authringLoadingPromise); // Now, with the authring loaded, link recursively to getPubKey again. authringLoadingPromise.done(fu
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 44 65 72 69 76 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 61 20 70 72 69 76 61 74 65 20 6b 65 79 2e 0a 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 70 72 69 76 4b 65 79 20 7b 53 74 72 69 6e 67 7d 0a 20 20 20 20 20 2a 20 20 20 20 20 50 72 69 76 61 74 65 20 6b 65 79 20 69 6e 20 62 79 74 65 20 73 74 72 69 6e 67 20 66 6f 72 6d 2e 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 6b 65 79 54 79 70 65 20 7b 53 74 72 69 6e 67 7d 0a 20 20 20 20 20 2a 20 20 20 20 20 4b 65 79 20 74 79 70 65 20 74 6f 20 73 65 74 2e 20 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 3a 20 27 45 64 32 35 35 31 39 27 2c 20 27 43 75 32 35 35 31 39 27 2e Data Ascii: }); }; /** * Derives the public key from a private key. * * @param privKey {String} * Private key in byte string form. * @param keyType {String} * Key type to set. Allowed values: 'Ed25519', 'Cu25519'.
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 61 6c 6f 67 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 75 73 65 2d 63 75 72 72 65 6e 74 2d 73 65 74 74 69 6e 67 73 27 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 68 69 64 64 65 6e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 71 73 61 28 27 2e 73 65 74 74 69 6e 67 73 2d 63 65 6c 6c 2e 63 75 72 72 65 6e 74 27 2c 20 65 20 3d 3e 20 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 68 69 64 64 65 6e 27 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 69 72 73 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 61 6c 6f 67 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 Data Ascii: dialog.querySelector('.use-current-settings').classList.add('hidden'); qsa('.settings-cell.current', e => e.classList.remove('hidden')); if (first) { dialog.querySelector('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49727	66.203.125.14	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:40 UTC	347	OUT	GET /cs?id=0 HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:40 UTC	327	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 2 Content-Length: 2 Connection: close
2024-07-11 11:36:40 UTC	2	IN	Data Raw: 2d 32 Data Ascii: -2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49725	66.203.125.14	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:40 UTC	351	OUT	GET /cs?id=0&v=2 HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:40 UTC	327	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 2 Content-Length: 2 Connection: close
2024-07-11 11:36:40 UTC	2	IN	Data Raw: 2d 32 Data Ascii: -2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49726	31.216.144.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:40 UTC	524	OUT	GET /manifest.json HTTP/1.1 Host: mega.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://mega.nz/file/3LZ0hLYB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:40 UTC	238	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 806 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:36:40 UTC	806	IN	Data Raw: 7b 0a 09 22 6e 61 6d 65 22 3a 20 22 4d 45 47 41 22 2c 0a 09 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 4d 45 47 41 22 2c 0a 09 22 69 63 6f 6e 73 22 3a 20 5b 0a 09 09 7b 0a 09 09 09 22 73 72 63 22 3a 20 22 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 33 36 78 33 36 2e 70 6e 67 22 2c 0a 09 09 09 22 73 69 7a 65 73 22 3a 20 22 33 36 78 33 36 22 2c 0a 09 09 09 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 2c 0a 09 09 09 22 64 65 6e 73 69 74 79 22 3a 20 30 2e 37 35 0a 09 09 7d 2c 0a 09 09 7b 0a 09 09 09 22 73 72 63 22 3a 20 22 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 34 38 78 34 38 2e 70 6e 67 22 2c 0a 09 09 09 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 09 09 09 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 2c 0a 09 Data Ascii: {"name": "MEGA","short_name": "MEGA","icons": [{"src": "android-chrome-36x36.png","sizes": "36x36","type": "image\/png","density": 0.75},{"src": "android-chrome-48x48.png","sizes": "48x48","type": "image\/png",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49728	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:40 UTC	423	OUT	GET /4/lang/en_e703ea956d39915b306a6fe9289e758e6d0ec377843d7a543a6b1a8b7a6b05c2.json HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:40 UTC	371	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:40 GMT Content-Type: application/json Content-Length: 368437 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-59f35" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:40 UTC	16013	IN	Data Raw: 7b 0a 20 20 20 20 22 31 34 22 3a 20 22 43 6f 6e 66 69 72 6d 20 64 65 6c 65 74 69 6f 6e 22 2c 0a 20 20 20 20 22 31 35 22 3a 20 22 59 6f 75 20 61 72 65 20 61 62 6f 75 74 20 74 6f 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 72 65 6d 6f 76 65 20 61 6c 6c 20 69 74 65 6d 73 20 66 72 6f 6d 20 79 6f 75 72 20 52 75 62 62 69 73 68 20 62 69 6e 2e 22 2c 0a 20 20 20 20 22 31 36 22 3a 20 22 49 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 22 2c 0a 20 20 20 20 22 31 37 22 3a 20 22 54 72 61 6e 73 66 65 72 20 71 75 6f 74 61 20 65 78 63 65 65 64 65 64 22 2c 0a 20 20 20 20 22 31 38 22 3a 20 22 54 6f 6f 20 6d 61 6e 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 64 6f 77 6e 6c 6f 61 64 22 2c 0a 20 20 20 20 22 31 39 22 3a 20 22 4c 6f 67 69 6e 20 73 65 73 73 69 6f 6e Data Ascii: { "14": "Confirm deletion", "15": "You are about to permanently remove all items from your Rubbish bin.", "16": "Internal error", "17": "Transfer quota exceeded", "18": "Too many connections for this download", "19": "Login session
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 61 69 6c 20 61 64 64 72 65 73 73 20 61 6c 72 65 61 64 79 20 69 6e 20 75 73 65 22 2c 0a 20 20 20 20 22 31 32 39 38 22 3a 20 22 50 6c 65 61 73 65 20 6c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 22 2c 0a 20 20 20 20 22 31 33 30 31 22 3a 20 22 54 6f 64 61 79 22 2c 0a 20 20 20 20 22 31 33 30 32 22 3a 20 22 59 65 73 74 65 72 64 61 79 22 2c 0a 20 20 20 20 22 31 33 30 33 22 3a 20 22 54 68 69 73 20 77 65 65 6b 22 2c 0a 20 20 20 20 22 31 33 30 34 22 3a 20 22 4c 61 73 74 20 77 65 65 6b 22 2c 0a 20 20 20 20 22 31 33 30 35 22 3a 20 22 54 68 69 73 20 6d 6f 6e 74 68 22 2c 0a 20 20 20 20 22 31 33 30 36 22 3a 20 22 54 68 69 73 20 79 65 61 72 22 2c 0a 20 20 20 20 22 31 33 30 37 22 3a 20 22 4f 6c 64 65 72 22 2c 0a 20 20 20 20 22 31 33 30 39 22 3a 20 Data Ascii: ail address already in use", "1298": "Please log in to your account.", "1301": "Today", "1302": "Yesterday", "1303": "This week", "1304": "Last week", "1305": "This month", "1306": "This year", "1307": "Older", "1309":
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 72 20 77 69 6e 64 6f 77 73 20 61 6e 64 20 74 61 62 73 20 77 68 69 63 68 20 61 72 65 20 72 75 6e 6e 69 6e 67 20 4d 45 47 41 20 62 65 66 6f 72 65 20 70 72 6f 63 65 65 64 69 6e 67 2e 22 2c 0a 20 20 20 20 22 37 31 36 30 22 3a 20 22 52 65 64 65 65 6d 20 76 6f 75 63 68 65 72 22 2c 0a 20 20 20 20 22 37 31 36 32 22 3a 20 22 54 68 69 73 20 70 6c 61 6e 20 69 73 20 74 6f 6f 20 65 78 70 65 6e 73 69 76 65 20 74 6f 20 62 65 20 70 75 72 63 68 61 73 65 64 20 77 69 74 68 20 74 68 69 73 20 70 61 79 6d 65 6e 74 20 70 72 6f 76 69 64 65 72 2e 22 2c 0a 20 20 20 20 22 37 31 36 35 22 3a 20 22 43 61 6e 63 65 6c 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 0a 20 20 20 20 22 37 31 37 39 22 3a 20 22 43 61 6e 63 65 6c 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 0a 20 20 20 20 22 37 Data Ascii: r windows and tabs which are running MEGA before proceeding.", "7160": "Redeem voucher", "7162": "This plan is too expensive to be purchased with this payment provider.", "7165": "Cancel subscription", "7179": "Cancel subscription", "7
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 73 64 69 63 74 69 6f 6e 20 77 68 65 72 65 20 79 6f 75 72 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 69 73 20 63 6f 75 6e 74 65 72 2d 6e 6f 74 69 63 65 20 69 73 20 6c 6f 63 61 74 65 64 2c 20 66 72 6f 6d 20 74 68 65 20 70 65 72 73 6f 6e 20 77 68 6f 20 70 72 6f 76 69 64 65 64 20 4d 45 47 41 20 77 69 74 68 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 74 61 6b 65 64 6f 77 6e 20 6e 6f 74 69 63 65 20 6f 72 20 61 6e 20 61 67 65 6e 74 20 6f 66 20 73 75 63 68 20 70 65 72 73 6f 6e 2e 22 2c 0a 20 20 20 20 22 38 38 31 37 22 3a 20 22 50 6c 65 61 73 65 20 61 63 6b 6e 6f 77 6c 65 64 67 65 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 61 20 67 6f 6f 64 20 66 61 69 74 68 20 62 65 6c 69 65 66 20 74 68 61 74 20 74 68 65 20 6d 61 74 65 72 69 61 6c 20 Data Ascii: sdiction where your address in this counter-notice is located, from the person who provided MEGA with the original copyright takedown notice or an agent of such person.", "8817": "Please acknowledge that you have a good faith belief that the material
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 6f 66 20 74 68 65 20 6c 69 6e 6b 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 22 31 36 34 37 34 22 3a 20 22 50 72 65 76 69 6f 75 73 20 76 65 72 73 69 6f 6e 73 22 2c 0a 20 20 20 20 22 31 36 34 37 35 22 3a 20 22 52 65 76 65 72 74 22 2c 0a 20 20 20 20 22 31 36 34 37 36 22 3a 20 22 45 64 69 74 65 64 20 62 79 20 25 31 22 2c 0a 20 20 20 20 22 31 36 34 38 30 22 3a 20 22 45 64 69 74 65 64 20 62 79 20 6d 65 22 2c 0a 20 20 20 20 22 31 36 34 38 35 22 3a 20 22 44 75 70 6c 69 63 61 74 65 20 69 74 65 6d 73 22 2c 0a 20 20 20 20 22 31 36 34 38 36 22 3a 20 22 41 20 66 69 6c 65 20 6e 61 6d 65 64 20 25 31 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 73 20 61 74 20 74 68 69 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 22 2c 0a 20 20 20 20 22 31 36 34 38 37 22 3a 20 22 57 68 61 74 20 Data Ascii: of the link again.", "16474": "Previous versions", "16475": "Revert", "16476": "Edited by %1", "16480": "Edited by me", "16485": "Duplicate items", "16486": "A file named %1 already exists at this destination.", "16487": "What
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 77 20 70 61 73 73 77 6f 72 64 2c 20 63 6f 6e 66 69 72 6d 20 69 74 20 61 6e 64 20 63 6c 69 63 6b 20 5b 42 5d 4f 4b 5b 2f 42 5d 2e 22 2c 0a 20 20 20 20 22 31 38 34 39 33 22 3a 20 22 44 6f 77 6e 6c 6f 61 64 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 22 2c 0a 20 20 20 20 22 31 38 34 39 35 22 3a 20 22 4e 6f 74 65 3a 20 54 68 69 73 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 61 6e 64 20 66 69 6c 65 20 6d 65 74 61 64 61 74 61 2c 20 6e 6f 74 20 74 68 65 20 61 63 74 75 61 6c 20 66 69 6c 65 73 20 73 74 6f 72 65 64 20 62 79 20 79 6f 75 2e 22 2c 0a 20 20 20 20 22 31 38 34 39 36 22 3a 20 22 54 68 69 73 20 66 65 61 74 75 72 65 20 64 6f 65 73 20 6e 6f 74 20 77 6f 72 6b 20 6f 6e 20 69 4f 53 2e 20 50 6c 65 61 73 65 20 74 Data Ascii: w password, confirm it and click [B]OK[/B].", "18493": "Download your personal data", "18495": "Note: This will provide your account and file metadata, not the actual files stored by you.", "18496": "This feature does not work on iOS. Please t
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 6f 6e 20 6f 66 20 79 6f 75 72 20 70 61 79 6d 65 6e 74 20 66 72 6f 6d 20 6f 75 72 20 70 61 79 6d 65 6e 74 20 70 72 6f 76 69 64 65 72 2e 20 49 66 20 79 6f 75 20 70 61 69 64 20 77 69 74 68 20 64 65 62 69 74 20 6f 72 20 63 72 65 64 69 74 20 63 61 72 64 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 6e 6f 74 20 72 65 63 65 69 76 65 64 20 79 6f 75 72 20 4d 45 47 41 20 50 72 6f 20 61 63 63 6f 75 6e 74 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 68 6f 75 72 73 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 75 73 20 61 74 20 5b 41 5d 73 75 70 70 6f 72 74 40 6d 65 67 61 2e 6e 7a 5b 2f 41 5d 2e 20 49 66 20 79 6f 75 20 70 61 69 64 20 77 69 74 68 20 61 20 62 61 6e 6b 20 74 72 61 6e 73 66 65 72 20 70 6c 65 61 73 65 20 61 6c 6c 6f 77 20 34 20 74 6f 20 35 20 64 61 79 73 20 Data Ascii: on of your payment from our payment provider. If you paid with debit or credit card and you have not received your MEGA Pro account within a few hours, please contact us at [A]support@mega.nz[/A]. If you paid with a bank transfer please allow 4 to 5 days
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 32 32 35 22 3a 20 22 54 68 65 20 63 6f 64 65 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 65 6e 74 65 72 69 6e 67 20 74 68 65 20 63 6f 64 65 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 22 32 30 32 32 36 22 3a 20 22 4e 6f 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 69 73 20 70 65 6e 64 69 6e 67 2e 20 50 6c 65 61 73 65 20 74 72 79 20 72 65 73 65 6e 64 69 6e 67 20 74 68 65 20 63 6f 64 65 2e 22 2c 0a 20 20 20 20 22 32 30 32 32 38 22 3a 20 22 4e 6f 74 20 61 63 63 65 73 73 69 62 6c 65 22 2c 0a 20 20 20 20 22 32 30 32 32 39 22 3a 20 22 52 75 62 62 69 73 68 20 62 69 6e 20 65 6d 70 74 79 69 6e 67 20 73 63 68 65 64 75 6c 65 72 22 2c 0a 20 20 20 20 22 32 30 32 33 30 22 3a 20 22 56 6f 75 63 68 65 72 73 22 2c 0a 20 20 20 20 22 32 30 32 33 Data Ascii: 225": "The code is incorrect. Please try entering the code again.", "20226": "No verification is pending. Please try resending the code.", "20228": "Not accessible", "20229": "Rubbish bin emptying scheduler", "20230": "Vouchers", "2023
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 30 39 31 37 22 3a 20 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 20 2d 20 72 65 73 74 61 72 74 69 6e 67 5c 75 32 30 32 36 22 2c 0a 20 20 20 20 22 32 30 39 31 38 22 3a 20 22 55 70 6c 6f 61 64 20 65 72 72 6f 72 20 2d 20 72 65 74 72 79 69 6e 67 5c 75 32 30 32 36 22 2c 0a 20 20 20 20 22 32 30 39 32 30 22 3a 20 22 4e 6f 20 65 6d 6f 6a 69 73 20 66 6f 75 6e 64 22 2c 0a 20 20 20 20 22 32 30 39 32 33 22 3a 20 22 5b 53 5d 44 6f 77 6e 6c 6f 61 64 20 61 6e 64 20 49 6e 73 74 61 6c 6c 5b 2f 53 5d 20 66 6f 72 20 25 31 22 2c 0a 20 20 20 20 22 32 30 39 32 34 22 3a 20 22 4d 45 47 41 20 65 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 25 31 22 2c 0a 20 20 20 20 22 32 30 39 33 31 22 3a 20 22 53 65 6e 64 20 6c 61 72 67 65 20 66 69 6c 65 73 20 62 79 20 65 6d 61 69 6c 20 74 68 72 6f 75 Data Ascii: 0917": "Upload failed - restarting\u2026", "20918": "Upload error - retrying\u2026", "20920": "No emojis found", "20923": "[S]Download and Install[/S] for %1", "20924": "MEGA extension for %1", "20931": "Send large files by email throu
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 6f 6e 6c 79 20 61 63 63 65 70 74 73 20 73 74 61 6e 64 61 72 64 20 42 69 74 63 6f 69 6e 3b 20 70 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 42 69 74 63 6f 69 6e 20 61 64 64 72 65 73 73 2e 22 2c 0a 20 20 20 20 22 32 33 33 30 35 22 3a 20 22 41 75 74 6f 66 69 6c 6c 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 32 33 33 30 36 22 3a 20 22 53 61 76 65 20 61 73 20 64 65 66 61 75 6c 74 20 61 63 63 6f 75 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 32 33 33 30 37 22 3a 20 22 44 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 61 76 65 20 74 68 65 73 65 20 63 68 61 6e 67 65 73 20 61 73 20 79 6f 75 72 20 6e 65 77 20 64 65 66 61 75 6c 74 20 61 63 63 6f 75 6e 74 20 69 6e 66 6f 72 6d Data Ascii: only accepts standard Bitcoin; please enter a valid Bitcoin address.", "23305": "Autofill with default information", "23306": "Save as default account information", "23307": "Do you want to save these changes as your new default account inform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49729	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:40 UTC	423	OUT	GET /4/js/mega-1_3a42998e6f7318edd6f6ea0568cc7824c9273044f89e2c38ae326fc554ad5a84.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:40 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:40 GMT Content-Type: application/javascript Content-Length: 408437 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-63b75" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:40 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 73 6a 63 6c 2e 6a 73 0a 20 2a 20 20 20 6e 6f 64 65 64 65 63 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2e 70 72 6f 74 65 63 74 2e 6a 73 0a 20 2a 2f 0a 0a 2f 2a 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 4a 61 76 61 73 63 72 69 70 74 20 63 72 79 70 74 6f 67 72 61 70 68 79 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 43 72 75 73 68 20 74 6f 20 72 65 6d 6f 76 65 20 63 6f 6d 6d 65 6e 74 73 2c 20 73 68 6f 72 74 65 6e 20 76 61 72 69 61 62 6c 65 20 6e 61 6d 65 73 20 61 6e 64 0a 20 2a 20 67 65 6e 65 72 61 6c 6c 79 20 72 65 64 75 63 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 Data Ascii: /* Bundle Includes: * sjcl.js * nodedec.js * js/vendor/jquery.js * js/jquery.protect.js //* @fileOverview Javascript cryptography implementation. * * Crush to remove comments, shorten variable names and * generally reduce transmission
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 4c 65 6e 67 74 68 28 61 72 72 29 2f 34 29 3b 2f 2f 2e 72 65 70 6c 61 63 65 28 2f 28 2e 7b 38 7d 29 2f 67 2c 20 22 24 31 20 22 29 3b 0a 20 20 7d 2c 0a 20 20 2f 2a 2a 20 43 6f 6e 76 65 72 74 20 66 72 6f 6d 20 61 20 68 65 78 20 73 74 72 69 6e 67 20 74 6f 20 61 20 62 69 74 41 72 72 61 79 2e 20 2a 2f 0a 20 20 74 6f 42 69 74 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 74 72 29 20 7b 0a 20 20 20 20 76 61 72 20 69 2c 20 6f 75 74 3d 5b 5d 2c 20 6c 65 6e 3b 0a 20 20 20 20 73 74 72 20 3d 20 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 5c 73 7c 30 78 2f 67 2c 20 22 22 29 3b 0a 20 20 20 20 6c 65 6e 20 3d 20 73 74 72 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 73 74 72 20 3d 20 73 74 72 20 2b 20 22 30 30 30 30 30 30 30 30 22 3b 0a 20 20 20 20 66 6f 72 20 28 69 3d 30 3b 20 69 3c 73 Data Ascii: Length(arr)/4);//.replace(/(.{8})/g, "$1 "); }, /** Convert from a hex string to a bitArray. */ toBits: function (str) { var i, out=[], len; str = str.replace(/\s\|0x/g, ""); len = str.length; str = str + "00000000"; for (i=0; i<s
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 6e 20 25 20 32 20 7c 7c 20 74 6c 65 6e 20 3c 20 34 20 7c 7c 20 74 6c 65 6e 20 3e 20 31 36 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 73 6a 63 6c 2e 65 78 63 65 70 74 69 6f 6e 2e 69 6e 76 61 6c 69 64 28 22 63 63 6d 3a 20 69 6e 76 61 6c 69 64 20 74 61 67 20 6c 65 6e 67 74 68 22 29 3b 0a 20 20 20 20 7d 0a 20 20 0a 20 20 20 20 69 66 20 28 61 64 61 74 61 2e 6c 65 6e 67 74 68 20 3e 20 30 78 46 46 46 46 46 46 46 46 20 7c 7c 20 70 6c 61 69 6e 74 65 78 74 2e 6c 65 6e 67 74 68 20 3e 20 30 78 46 46 46 46 46 46 46 46 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 49 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 65 78 74 72 61 63 74 69 6e 67 20 68 69 67 68 20 77 6f 72 64 73 20 66 72 6f 6d 20 64 6f 75 62 6c 65 73 2e 0a 20 20 20 20 Data Ascii: n % 2 \|\| tlen < 4 \|\| tlen > 16) { throw new sjcl.exception.invalid("ccm: invalid tag length"); } if (adata.length > 0xFFFFFFFF \|\| plaintext.length > 0xFFFFFFFF) { // I don't want to deal with extracting high words from doubles.
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 78 38 37 5d 3b 0a 20 20 7d 0a 7d 3b 0a 2f 2a 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 47 43 4d 20 6d 6f 64 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 20 4a 75 68 6f 20 56 61 68 61 2d 48 65 72 74 74 75 61 0a 20 2a 2f 0a 0a 2f 2a 2a 20 40 6e 61 6d 65 73 70 61 63 65 20 47 61 6c 6f 69 73 2f 43 6f 75 6e 74 65 72 20 6d 6f 64 65 2e 20 2a 2f 0a 73 6a 63 6c 2e 6d 6f 64 65 2e 67 63 6d 20 3d 20 7b 0a 20 20 2f 2a 2a 20 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 6d 6f 64 65 2e 0a 20 20 20 2a 20 40 63 6f 6e 73 74 61 6e 74 0a 20 20 20 2a 2f 0a 20 20 6e 61 6d 65 3a 20 22 67 63 6d 22 2c 0a 20 20 0a 20 20 2f 2a 2a 20 45 6e 63 72 79 70 74 20 69 6e 20 47 43 4d 20 6d 6f 64 65 2e 0a 20 20 20 2a 20 40 73 74 61 74 69 Data Ascii: x87]; }};/** @fileOverview GCM mode implementation. * * @author Juho Vaha-Herttua //* @namespace Galois/Counter mode. /sjcl.mode.gcm = { /* The name of the mode. * @constant / name: "gcm", /* Encrypt in GCM mode. * @stati
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 70 79 20 63 6f 6c 6c 65 63 74 6f 72 73 20 2a 2f 0a 20 20 73 74 61 72 74 43 6f 6c 6c 65 63 74 6f 72 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 63 6f 6c 6c 65 63 74 6f 72 73 53 74 61 72 74 65 64 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 0a 20 20 0a 20 20 20 20 74 68 69 73 2e 5f 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 3d 20 7b 0a 20 20 20 20 20 20 6c 6f 61 64 54 69 6d 65 43 6f 6c 6c 65 63 74 6f 72 3a 20 74 68 69 73 2e 5f 62 69 6e 64 28 74 68 69 73 2e 5f 6c 6f 61 64 54 69 6d 65 43 6f 6c 6c 65 63 74 6f 72 29 2c 0a 20 20 20 20 20 20 6d 6f 75 73 65 43 6f 6c 6c 65 63 74 6f 72 3a 20 74 68 69 73 2e 5f 62 69 6e 64 28 74 68 69 73 2e 5f 6d 6f 75 73 65 43 6f 6c 6c 65 63 74 6f 72 29 2c 0a 20 20 20 20 20 20 6b 65 79 62 6f Data Ascii: py collectors */ startCollectors: function () { if (this._collectorsStarted) { return; } this._eventListener = { loadTimeCollector: this._bind(this._loadTimeCollector), mouseCollector: this._bind(this._mouseCollector), keybo
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 20 4a 53 4f 4e 2e 0a 20 20 20 2a 2f 0a 20 20 64 65 63 6f 64 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 74 72 29 20 7b 0a 20 20 20 20 73 74 72 20 3d 20 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2f 67 2c 27 27 29 3b 0a 20 20 20 20 69 66 20 28 21 73 74 72 2e 6d 61 74 63 68 28 2f 5e 5c 7b 2e 2a 5c 7d 24 2f 29 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 73 6a 63 6c 2e 65 78 63 65 70 74 69 6f 6e 2e 69 6e 76 61 6c 69 64 28 22 6a 73 6f 6e 20 64 65 63 6f 64 65 3a 20 74 68 69 73 20 69 73 6e 27 74 20 6a 73 6f 6e 21 22 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 61 20 3d 20 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 7b 7c 5c 7d 24 2f 67 2c 20 27 27 29 2e 73 70 6c 69 74 28 2f 2c 2f 29 2c 20 6f 75 74 3d 7b 7d 2c 20 69 2c 20 6d 3b 0a 20 20 20 Data Ascii: JSON. / decode: function (str) { str = str.replace(/\s/g,''); if (!str.match(/^\{.\}$/)) { throw new sjcl.exception.invalid("json decode: this isn't json!"); } var a = str.replace(/^\{\|\}$/g, '').split(/,/), out={}, i, m;
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 2e 73 64 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 61 72 2e 73 64 73 20 3d 20 6e 2e 73 64 73 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6e 2e 72 72 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 61 72 2e 72 72 20 3d 20 6e 2e 72 72 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6e 2e 73 34 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 61 72 2e 73 34 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 2e 73 34 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6e 2e 64 65 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 61 72 2e Data Ascii: .sds !== 'undefined') { ar.sds = n.sds; } if (typeof n.rr !== 'undefined') { ar.rr = n.rr; } if (typeof n.s4 !== 'undefined') { ar.s4 = JSON.stringify(n.s4); } if (typeof n.des !== 'undefined') { ar.
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 20 3a 20 27 2f 27 7d 6e 6f 64 65 64 65 63 2e 6a 73 3f 76 3d 24 7b 57 4f 52 4b 45 52 5f 56 45 52 53 49 4f 4e 7d 60 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 20 6f 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 3e 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 20 6c 69 6d 69 74 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 2a 20 42 41 43 4b 50 52 45 53 53 55 52 45 5f 57 4f 52 4b 45 52 5f 4c 49 4d 49 54 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 20 62 75 73 79 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 73 20 3d 20 Data Ascii: : '/'}nodedec.js?v=${WORKER_VERSION}`; } get ok() { return this.length > 0; } get limit() { return this.length * BACKPRESSURE_WORKER_LIMIT; } get busy() { const res =
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 3b 0a 09 7d 2c 0a 0a 0a 09 2f 2f 20 52 65 74 72 69 65 76 65 20 74 68 65 20 74 65 78 74 20 76 61 6c 75 65 20 6f 66 20 61 6e 20 61 72 72 61 79 20 6f 66 20 44 4f 4d 20 6e 6f 64 65 73 0a 09 74 65 78 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 09 09 76 61 72 20 6e 6f 64 65 2c 0a 09 09 09 72 65 74 20 3d 20 22 22 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 6e 6f 64 65 54 79 70 65 20 3d 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 3b 0a 0a 09 09 69 66 20 28 20 21 6e 6f 64 65 54 79 70 65 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 49 66 20 6e 6f 20 6e 6f 64 65 54 79 70 65 2c 20 74 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 61 6e 20 61 72 72 61 79 0a 09 09 09 77 68 Data Ascii: }}return obj;},// Retrieve the text value of an array of DOM nodestext: function( elem ) {var node,ret = "",i = 0,nodeType = elem.nodeType;if ( !nodeType ) {// If no nodeType, this is expected to be an arraywh
2024-07-11 11:36:40 UTC	16384	IN	Data Raw: 3e 20 6c 65 67 65 6e 64 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 6e 2b 32 29 20 3a 63 61 6e 2d 64 69 73 61 62 6c 65 0a 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 0a 09 09 2f 2f 20 4f 6e 6c 79 20 63 65 72 74 61 69 6e 20 65 6c 65 6d 65 6e 74 73 20 63 61 6e 20 6d 61 74 63 68 20 3a 65 6e 61 62 6c 65 64 20 6f 72 20 3a 64 69 73 61 62 6c 65 64 0a 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 68 74 6d 6c 2e 73 70 65 63 2e 77 68 61 74 77 67 2e 6f 72 67 2f 6d 75 6c 74 69 70 61 67 65 2f 73 63 72 69 70 74 69 6e 67 2e 68 74 6d 6c 23 73 65 6c 65 63 74 6f 72 2d 65 6e 61 62 6c 65 64 0a 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 68 74 6d 6c 2e 73 70 65 63 2e 77 68 61 74 77 67 2e 6f 72 67 2f 6d 75 6c 74 69 70 61 67 65 2f 73 63 72 69 70 74 69 6e 67 Data Ascii: > legend:nth-of-type(n+2) :can-disablereturn function( elem ) {// Only certain elements can match :enabled or :disabled// https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled// https://html.spec.whatwg.org/multipage/scripting

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49734	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:41 UTC	611	OUT	GET /4/js/mega-4_4fd1c8f7e2f02fb9a57dcf5667dd968ed828ff048ce607fd73cbd530cf8a9db2.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:41 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:41 GMT Content-Type: application/javascript Content-Length: 366638 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-5982e" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:41 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 6d 65 64 69 61 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 6d 65 67 61 6c 69 74 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 6e 65 74 77 6f 72 6b 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 73 70 6c 69 74 74 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 74 65 73 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 74 69 6d 65 72 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 77 61 74 63 68 64 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 77 6f 72 6b 65 72 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 74 72 61 6e 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 77 Data Ascii: /* Bundle Includes: * js/utils/media.js * js/utils/megalite.js * js/utils/network.js * js/utils/splitter.js * js/utils/test.js * js/utils/timers.js * js/utils/watchdog.js * js/utils/workers.js * js/utils/trans.js * js/utils/w
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 59 58 51 53 41 41 6f 46 47 41 41 4f 77 43 41 79 44 52 2f 77 41 41 42 67 42 67 41 41 41 41 43 73 79 76 41 3d 60 0a 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 48 45 49 43 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 69 6d 61 67 65 2f 68 65 69 63 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 60 41 41 41 41 47 47 5a 30 65 58 42 6f 5a 57 6c 6a 41 41 41 41 41 47 68 6c 61 57 4e 74 61 57 59 78 41 41 41 42 76 6d 31 6c 64 47 45 41 41 41 41 41 41 41 41 41 49 6d 68 6b 62 48 49 41 41 41 41 41 41 41 41 41 41 48 42 70 59 33 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 52 6b 61 57 35 6d 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 41 41 41 48 47 52 79 5a 57 59 41 41 41 41 41 41 41 41 41 Data Ascii: YXQSAAoFGAAOwCAyDR/wAABgBgAAAACsyvA=` ], [ 'HEIC', 'image/heic', `AAAAGGZ0eXBoZWljAAAAAGhlaWNtaWYxAAABvm1ldGEAAAAAAAAAImhkbHIAAAAAAAAAAHBpY3QAAAAAAAAAAAAAAAAAAAAAACRkaW5m AAAAHGRyZWYAAAAAAAAA
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 79 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 24 62 75 74 74 6f 6e 2e 70 61 72 65 6e 74 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 72 65 65 7a 65 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 74 72 6f 79 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 72 65 28 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 2e 74 79 70 65 20 3d 3d 3d 20 27 6d 6f 75 73 65 75 70 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 24 74 61 72 67 65 74 20 3d 20 24 28 65 76 2e 74 61 72 67 65 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: y); } })); $button.parent().removeClass('hidden'); return freeze({ destroy, fire(ev) { if (ev.type === 'mouseup') { const $target = $(ev.target);
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 74 72 65 61 6d 65 72 2e 63 75 72 72 65 6e 74 54 69 6d 65 20 2b 20 30 2e 30 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 70 65 6e 64 69 6e 67 42 6c 6f 63 6b 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 70 6c 61 79 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 61 79 65 76 65 6e 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 74 72 65 61 6d 65 72 2e 64 75 72 61 74 69 6f 6e 20 3e 20 64 75 72 61 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 75 72 Data Ascii: if (streamer.currentTime + 0.01) { $pendingBlock.addClass('hidden'); if (!playevent) { playevent = true; if (streamer.duration > duration) { setDur
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 56 6f 6c 75 6d 65 28 2d 30 2e 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 41 72 72 6f 77 4c 65 66 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 65 6b 42 79 28 2d 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 41 72 72 6f 77 52 69 67 68 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 65 6b 42 79 28 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 4b 65 79 4a 27 3a Data Ascii: Volume(-0.1); break; case 'ArrowLeft': seekBy(-5); break; case 'ArrowRight': seekBy(5); break; case 'KeyJ':
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 6c 6f 67 28 39 39 36 39 34 2c 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 20 2f 2f 20 63 6f 6e 74 69 6e 75 65 20 6c 69 73 74 65 6e 69 6e 67 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 73 2e 6f 6e 28 27 61 63 74 69 76 69 74 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 45 76 65 6e 74 20 69 6e 76 6f 6b 65 64 20 77 68 65 6e 20 74 68 65 20 76 69 64 65 6f 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 74 61 6c 6c 65 64 0a 20 20 20 20 20 20 Data Ascii: } eventlog(99694, JSON.stringify(data), true); } return true; // continue listening }); s.on('activity', function(ev) { // Event invoked when the video is no longer stalled
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 6e 65 72 61 6c 20 26 26 20 74 68 69 73 2e 47 65 6e 65 72 61 6c 2e 46 72 61 6d 65 52 61 74 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 70 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 2e 46 72 61 6d 65 52 61 74 65 5f 44 65 6e 20 26 26 20 76 2e 46 72 61 6d 65 52 61 74 65 5f 4e 75 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 70 73 20 3d 20 76 2e 46 72 61 6d 65 52 61 74 65 5f 4e 75 6d 20 2f 20 76 2e 46 72 61 6d 65 52 61 74 65 5f 44 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 70 73 20 3d 20 66 70 73 20 7c 7c 20 76 2e 46 72 61 6d 65 52 61 74 65 5f 4f 72 69 67 69 6e 61 6c 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: neral && this.General.FrameRate; if (!fps) { if (v.FrameRate_Den && v.FrameRate_Num) { fps = v.FrameRate_Num / v.FrameRate_Den; } fps = fps \|\| v.FrameRate_Original;
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 3a 20 27 2f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 65 6d 46 69 6c 65 20 3d 20 75 72 6c 50 61 74 68 20 2b 20 27 6d 65 64 69 61 69 6e 66 6f 2e 6d 65 6d 27 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 6f 70 65 6e 28 27 47 45 54 27 2c 20 6d 65 6d 46 69 6c 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 20 3d 20 27 61 72 72 61 79 62 75 66 66 65 72 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 73 65 6e 64 28 6e 75 6c 6c 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 72 65 71 75 69 72 65 28 27 6d 65 64 69 61 69 6e 66 6f 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 72 79 43 61 Data Ascii: : '/'; var memFile = urlPath + 'mediainfo.mem'; xhr.open('GET', memFile); xhr.responseType = 'arraybuffer'; xhr.send(null); M.require('mediainfo') .tryCa
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 4d 65 64 69 61 49 6e 66 6f 4c 69 62 28 65 6e 74 72 79 2e 6c 69 6e 6b 20 7c 7c 20 65 6e 74 72 79 2e 68 2c 20 2d 31 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 67 65 74 4d 65 74 61 64 61 74 61 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 65 6e 74 72 79 2e 73 74 6f 72 65 2e 62 69 6e 64 28 65 6e 74 72 79 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 6f 6c 76 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 72 65 6a 65 63 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 76 61 72 20 61 75 64 69 6f 45 6c 65 6d 65 6e 74 20 3d 20 Data Ascii: MediaInfoLib(entry.link \|\| entry.h, -1) .getMetadata() .then(entry.store.bind(entry)) .then(resolve) .catch(reject); } }); }; var audioElement =
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 49 6d 61 67 65 28 73 65 6c 66 2c 20 73 74 72 5f 74 6f 5f 61 62 28 61 74 6f 62 28 72 65 73 2e 47 65 6e 65 72 61 6c 2e 43 6f 76 65 72 5f 44 61 74 61 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 74 63 68 20 28 65 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 Data Ascii: { try { setImage(self, str_to_ab(atob(res.General.Cover_Data))); } catch (ex) { console.warn(ex); } }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49736	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:41 UTC	611	OUT	GET /4/js/mega-5_28a090261b3fcc9c576799d820968cdf2fe60f77328dc0e00d3a2ba7250a804f.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:41 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:41 GMT Content-Type: application/javascript Content-Length: 508452 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7c224" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:41 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 64 65 78 69 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 75 6e 63 74 69 6f 6e 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 63 6f 6e 66 69 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 63 72 79 70 74 6f 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 61 63 63 6f 75 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 73 65 63 75 72 69 74 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 77 6f 2d 66 61 63 74 6f 72 2d 61 75 74 68 2e 6a 73 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 44 65 78 69 65 2e 6a 73 20 2d 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 77 72 61 70 70 65 72 20 66 6f 72 20 49 6e 64 65 78 65 64 44 42 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* Bundle Includes: * js/vendor/dexie.js * js/functions.js * js/config.js * js/crypto.js * js/account.js * js/security.js * js/two-factor-auth.js // * Dexie.js - a minimalistic wrapper for IndexedDB * ==========================
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 73 74 61 74 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 76 61 6c 75 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 73 74 61 74 65 20 3d 3d 3d 20 66 61 6c 73 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 61 6e 64 6c 65 52 65 6a 65 63 74 69 6f 6e 28 74 68 69 73 2c 20 74 68 69 73 2e 5f 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 7d 0a 20 20 20 20 74 68 69 73 2e 5f 73 74 61 74 65 20 3d 20 6e 75 6c 6c 3b 0a 20 Data Ascii: ) throw new TypeError('Not a function'); this._state = arguments[1]; this._value = arguments[2]; if (this._state === false) handleRejection(this, this._value); return; } this._state = null;
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 6f 6e 65 4c 65 61 76 65 45 63 68 6f 28 29 20 7b 0a 20 20 20 20 76 61 72 20 7a 6f 6e 65 20 3d 20 7a 6f 6e 65 53 74 61 63 6b 5b 7a 6f 6e 65 53 74 61 63 6b 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 3b 0a 20 20 20 20 7a 6f 6e 65 53 74 61 63 6b 2e 70 6f 70 28 29 3b 0a 20 20 20 20 73 77 69 74 63 68 54 6f 5a 6f 6e 65 28 7a 6f 6e 65 2c 20 66 61 6c 73 65 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 77 69 74 63 68 54 6f 5a 6f 6e 65 28 74 61 72 67 65 74 5a 6f 6e 65 2c 20 62 45 6e 74 65 72 69 6e 67 5a 6f 6e 65 29 20 7b 0a 20 20 20 20 76 61 72 20 63 75 72 72 65 6e 74 5a 6f 6e 65 20 3d 20 50 53 44 3b 0a 20 20 20 20 69 66 20 28 62 45 6e 74 65 72 69 6e 67 5a 6f 6e 65 20 3f 20 74 61 73 6b 2e 65 63 68 6f 65 73 20 26 26 20 28 21 7a 6f 6e 65 45 Data Ascii: }function zoneLeaveEcho() { var zone = zoneStack[zoneStack.length - 1]; zoneStack.pop(); switchToZone(zone, false);}function switchToZone(targetZone, bEnteringZone) { var currentZone = PSD; if (bEnteringZone ? task.echoes && (!zoneE
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 26 26 20 61 75 74 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 54 6f 41 64 64 20 3d 20 77 6f 72 6b 61 72 6f 75 6e 64 46 6f 72 55 6e 64 65 66 69 6e 65 64 50 72 69 6d 4b 65 79 28 6b 65 79 50 61 74 68 29 28 6f 62 6a 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 72 61 6e 73 28 27 72 65 61 64 77 72 69 74 65 27 2c 20 74 72 61 6e 73 20 3d 3e 20 74 68 69 73 2e 63 6f 72 65 2e 6d 75 74 61 74 65 28 7b 20 74 72 61 6e 73 2c 20 74 79 70 65 3a 20 27 70 75 74 27 2c 20 76 61 6c 75 65 73 3a 20 5b 6f 62 6a 54 6f 41 64 64 5d 2c 20 6b 65 79 73 3a 20 6b 65 79 20 21 3d 20 6e 75 6c 6c 20 3f 20 5b 6b 65 79 5d 20 3a 20 6e 75 6c 6c 20 7d 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 Data Ascii: && auto) { objToAdd = workaroundForUndefinedPrimKey(keyPath)(obj); } return this._trans('readwrite', trans => this.core.mutate({ trans, type: 'put', values: [objToAdd], keys: key != null ? [key] : null })) .then(res
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 6e 79 74 68 69 6e 67 4d 6f 64 69 66 69 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 6f 72 65 54 61 62 6c 65 20 3d 20 63 74 78 2e 74 61 62 6c 65 2e 63 6f 72 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 7b 20 6f 75 74 62 6f 75 6e 64 2c 20 65 78 74 72 61 63 74 4b 65 79 20 7d 20 3d 20 63 6f 72 65 54 61 62 6c 65 2e 73 63 68 65 6d 61 2e 70 72 69 6d 61 72 79 4b 65 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 69 6d 69 74 20 3d 20 74 Data Ascii: } } return anythingModified; }; } const coreTable = ctx.table.core; const { outbound, extractKey } = coreTable.schema.primaryKey; const limit = t
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 72 61 6e 67 65 5b 31 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 73 63 65 6e 64 69 6e 67 28 72 61 6e 67 65 5b 30 5d 2c 20 72 61 6e 67 65 5b 31 5d 29 20 3c 3d 20 30 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 69 6c 28 74 68 69 73 2c 20 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 69 6e 41 6e 79 52 61 6e 67 65 28 29 20 6d 75 73 74 20 62 65 20 61 6e 20 41 72 72 61 79 20 6f 66 20 74 77 6f 2d 76 61 6c 75 65 20 41 72 72 61 79 73 20 5b 6c 6f 77 65 72 2c 75 70 70 65 72 5d 20 77 68 65 72 65 20 75 70 70 65 72 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6c 6f 77 65 72 20 74 68 61 6e 20 6c 6f 77 65 72 22 2c 20 65 78 63 65 70 74 69 6f 6e 73 2e 49 6e Data Ascii: range[1] !== undefined && ascending(range[0], range[1]) <= 0)) { return fail(this, "First argument to inAnyRange() must be an Array of two-value Arrays [lower,upper] where upper must not be lower than lower", exceptions.In
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 79 3a 20 67 65 74 4b 65 79 45 78 74 72 61 63 74 6f 72 28 6b 65 79 50 61 74 68 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 78 65 73 3a 20 61 72 72 61 79 69 66 79 28 73 74 6f 72 65 2e 69 6e 64 65 78 4e 61 6d 65 73 29 2e 6d 61 70 28 69 6e 64 65 78 4e 61 6d 65 20 3d 3e 20 73 74 6f 72 65 2e 69 6e 64 65 78 28 69 6e 64 65 78 4e 61 6d 65 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 61 70 28 69 6e 64 65 78 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 7b 20 6e 61 6d 65 2c 20 75 6e 69 71 75 65 2c 20 6d 75 6c 74 69 Data Ascii: y: getKeyExtractor(keyPath) }, indexes: arrayify(store.indexNames).map(indexName => store.index(indexName)) .map(index => { const { name, unique, multi
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 50 72 6f 70 28 6f 62 6a 2c 20 74 61 62 6c 65 4e 61 6d 65 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 28 29 20 7b 20 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 62 6c 65 28 74 61 62 6c 65 4e 61 6d 65 29 3b 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 28 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 20 74 61 62 6c 65 4e 61 6d 65 2c 20 7b 20 76 61 6c 75 65 2c 20 77 72 69 74 61 62 6c 65 3a 20 74 72 75 65 2c 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 Data Ascii: tion) { setProp(obj, tableName, { get() { return this.table(tableName); }, set(value) { defineProperty(this, tableName, { value, writable: true, configurable:
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 62 4f 70 65 6e 45 72 72 6f 72 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 73 74 61 74 65 2e 6f 70 65 6e 43 6f 6d 70 6c 65 74 65 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 63 6f 6e 73 74 20 6f 70 65 6e 43 61 6e 63 65 6c 6c 65 72 20 3d 20 73 74 61 74 65 2e 6f 70 65 6e 43 61 6e 63 65 6c 6c 65 72 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 68 72 6f 77 49 66 43 61 6e 63 65 6c 6c 65 64 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 65 2e 6f 70 65 6e 43 61 6e 63 65 6c 6c 65 72 20 21 3d 3d 20 6f 70 65 6e 43 61 6e 63 65 6c 6c 65 72 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 65 78 63 65 70 74 69 6f 6e 73 2e 44 61 74 61 62 61 73 65 43 6c 6f 73 65 64 28 27 64 62 2e 6f 70 65 6e 28 29 20 77 61 73 20 63 61 6e 63 65 6c 6c 65 64 Data Ascii: bOpenError = null; state.openComplete = false; const openCanceller = state.openCanceller; function throwIfCancelled() { if (state.openCanceller !== openCanceller) throw new exceptions.DatabaseClosed('db.open() was cancelled
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 74 68 69 73 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 6f 6e 28 22 76 65 72 73 69 6f 6e 63 68 61 6e 67 65 22 2c 20 65 76 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 2e 6e 65 77 56 65 72 73 69 6f 6e 20 3e 20 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 60 41 6e 6f 74 68 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 6e 74 73 20 74 6f 20 75 70 67 72 61 64 65 20 64 61 74 61 62 61 73 65 20 27 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 27 2e 20 43 6c 6f 73 69 6e 67 20 64 62 20 6e 6f 77 20 74 6f 20 72 65 73 75 6d 65 20 74 68 65 20 75 70 67 72 61 64 65 2e 60 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: onstructor(this); this.on("versionchange", ev => { if (ev.newVersion > 0) console.warn(`Another connection wants to upgrade database '${this.name}'. Closing db now to resume the upgrade.`); else

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49733	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:41 UTC	423	OUT	GET /4/js/mega-3_8d60e4c0aa8069a6dcb5d74a94e2672dfb90332f43cdbd766f13c0d66e6dccaf.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:41 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:41 GMT Content-Type: application/javascript Content-Length: 381101 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-5d0ad" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:41 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 61 70 69 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 62 72 6f 77 73 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 63 6c 69 70 62 6f 61 72 64 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 63 6f 6e 76 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 63 72 79 70 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 63 73 70 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 64 65 62 75 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 64 6f 6d 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 65 76 65 6e 74 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 69 63 75 2e 6a 73 0a 20 2a 20 20 20 6a 73 Data Ascii: /* Bundle Includes: * js/utils/api.js * js/utils/browser.js * js/utils/clipboard.js * js/utils/conv.js * js/utils/crypt.js * js/utils/csp.js * js/utils/debug.js * js/utils/dom.js * js/utils/events.js * js/utils/icu.js * js
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 6c 28 74 68 69 73 2c 20 74 68 69 73 2e 63 68 61 6e 6e 65 6c 2c 20 72 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 20 3d 3d 3d 20 45 41 47 41 49 4e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 2d 20 72 65 74 72 79 20 77 69 74 68 20 65 78 70 6f 6e 65 6e 74 69 61 6c 20 62 61 63 6b 6f 66 66 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 62 61 63 6b 6f 66 66 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 62 61 63 6b 6f 66 66 20 3d 20 31 39 32 20 2b 20 2d 4d 61 74 68 2e 6c 6f 67 28 4d 61 Data Ascii: l(this, this.channel, res); } if (res === EAGAIN) { // request failed - retry with exponential backoff if (!this.backoff) { this.backoff = 192 + -Math.log(Ma
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 74 68 69 73 2e 73 74 61 74 75 73 20 7c 20 30 2c 20 74 68 69 73 2e 62 61 63 6b 6f 66 66 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 73 63 68 65 64 75 6c 65 28 62 61 63 6b 6f 66 66 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 62 61 63 6b 6f 66 66 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 73 74 61 74 75 73 20 3d 3d 3d 20 32 30 30 29 20 7b 0a Data Ascii: this.status \| 0, this.backoff); } }); return this; } schedule(backoff) { if (navigator.onLine === false) { return; } if (!backoff) { if (this.status === 200) {
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 73 75 6c 74 7d 20 3d 20 61 77 61 69 74 20 74 68 69 73 2e 72 65 71 28 70 61 79 6c 6f 61 64 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 5b 73 74 2c 20 76 61 6c 75 65 5d 20 3d 20 6d 53 74 50 61 72 73 65 72 28 72 65 73 75 6c 74 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 65 6c 66 2e 64 20 3e 20 31 20 26 26 20 73 74 20 21 3d 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 20 63 61 6c 6c 65 72 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 65 64 20 74 6f 20 75 73 65 20 61 70 69 2e 72 65 71 28 29 2c 20 77 65 27 6c 6c 20 6d 61 6b 65 20 68 69 6d 20 68 61 70 70 79 2e 2e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 67 67 65 72 2e 69 6e 66 6f 28 60 55 6e Data Ascii: sult} = await this.req(payload, options); const [st, value] = mStParser(result); if (self.d > 1 && st !== 0) { // The caller probably wanted to use api.req(), we'll make him happy... logger.info(`Un
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 5b 69 5d 2e 73 69 64 20 3d 20 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 73 65 74 41 50 49 50 61 74 68 28 61 44 6f 6d 61 69 6e 2c 20 61 53 61 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 44 6f 6d 61 69 6e 20 3d 3d 3d 20 27 64 65 62 75 67 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 44 6f 6d 61 69 6e 20 3d 20 60 24 7b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 3a 34 34 34 60 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 70 69 70 61 74 68 20 3d 20 60 68 74 74 70 73 3a 2f 2f 24 7b 61 44 6f 6d 61 69 6e 7d 2f 60 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: [i].sid = h; } } }, setAPIPath(aDomain, aSave) { if (aDomain === 'debug') { aDomain = `${location.host}:444`; } apipath = `https://${aDomain}/`;
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 75 73 65 72 61 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 27 68 75 61 77 65 69 62 72 6f 77 73 65 72 27 29 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 69 63 6f 6e 20 3d 20 27 68 75 61 77 2e 70 6e 67 27 3b 0a 20 20 20 20 20 20 20 20 62 72 6f 77 73 65 72 20 3d 20 27 48 75 61 77 65 69 42 72 6f 77 73 65 72 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 75 73 65 72 61 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 27 68 65 79 74 61 70 62 72 6f 77 73 65 72 27 29 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 69 63 6f 6e 20 3d 20 27 68 65 79 2e 70 6e 67 27 3b 0a 20 20 20 20 20 20 20 20 62 72 6f 77 73 65 72 20 3d 20 27 48 65 79 54 61 70 42 72 6f 77 73 65 72 27 3b 0a 20 20 20 20 7d 0a 20 20 20 Data Ascii: } else if (useragent.indexOf('huaweibrowser') > 0) { icon = 'huaw.png'; browser = 'HuaweiBrowser'; } else if (useragent.indexOf('heytapbrowser') > 0) { icon = 'hey.png'; browser = 'HeyTapBrowser'; }
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 63 61 74 63 68 20 28 65 78 29 20 7b 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 55 48 36 34 2c 20 27 70 72 6f 74 6f 74 79 70 65 27 2c 20 6d 61 6b 65 43 6c 61 73 73 28 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 55 48 36 34 2c 0a 20 20 20 20 20 20 20 20 6d 6f 64 3a 20 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 20 3d 20 36 34 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 62 75 66 66 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: catch (ex) {} } Object.defineProperty(UH64, 'prototype', makeClass({ constructor: UH64, mod: function mod(n) { var r = 0; var b = 64; if (!this.buffer) { return false;
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 76 61 72 20 61 75 74 68 72 69 6e 67 4c 6f 61 64 69 6e 67 50 72 6f 6d 69 73 65 20 3d 20 61 75 74 68 72 69 6e 67 2e 69 6e 69 74 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 53 79 73 74 65 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 74 65 72 50 72 6f 6d 69 73 65 2e 6c 69 6e 6b 46 61 69 6c 54 6f 28 61 75 74 68 72 69 6e 67 4c 6f 61 64 69 6e 67 50 72 6f 6d 69 73 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4e 6f 77 2c 20 77 69 74 68 20 74 68 65 20 61 75 74 68 72 69 6e 67 20 6c 6f 61 64 65 64 2c 20 6c 69 6e 6b 20 72 65 63 75 72 73 69 76 65 6c 79 20 74 6f 20 67 65 74 50 75 62 4b 65 79 20 61 67 61 69 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 68 72 69 6e 67 4c 6f 61 64 69 6e 67 50 72 6f 6d 69 73 65 2e 64 6f 6e 65 28 66 75 Data Ascii: var authringLoadingPromise = authring.initAuthenticationSystem(); masterPromise.linkFailTo(authringLoadingPromise); // Now, with the authring loaded, link recursively to getPubKey again. authringLoadingPromise.done(fu
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 44 65 72 69 76 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 61 20 70 72 69 76 61 74 65 20 6b 65 79 2e 0a 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 70 72 69 76 4b 65 79 20 7b 53 74 72 69 6e 67 7d 0a 20 20 20 20 20 2a 20 20 20 20 20 50 72 69 76 61 74 65 20 6b 65 79 20 69 6e 20 62 79 74 65 20 73 74 72 69 6e 67 20 66 6f 72 6d 2e 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 6b 65 79 54 79 70 65 20 7b 53 74 72 69 6e 67 7d 0a 20 20 20 20 20 2a 20 20 20 20 20 4b 65 79 20 74 79 70 65 20 74 6f 20 73 65 74 2e 20 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 3a 20 27 45 64 32 35 35 31 39 27 2c 20 27 43 75 32 35 35 31 39 27 2e Data Ascii: }); }; /** * Derives the public key from a private key. * * @param privKey {String} * Private key in byte string form. * @param keyType {String} * Key type to set. Allowed values: 'Ed25519', 'Cu25519'.
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 61 6c 6f 67 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 75 73 65 2d 63 75 72 72 65 6e 74 2d 73 65 74 74 69 6e 67 73 27 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 68 69 64 64 65 6e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 71 73 61 28 27 2e 73 65 74 74 69 6e 67 73 2d 63 65 6c 6c 2e 63 75 72 72 65 6e 74 27 2c 20 65 20 3d 3e 20 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 68 69 64 64 65 6e 27 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 69 72 73 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 61 6c 6f 67 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 Data Ascii: dialog.querySelector('.use-current-settings').classList.add('hidden'); qsa('.settings-cell.current', e => e.classList.remove('hidden')); if (first) { dialog.querySelector('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49735	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:41 UTC	423	OUT	GET /4/js/mega-2_1f80ff7ea7cc787dbed8963b01c4f709df888754e80f262d2e109e5a088a8f04.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:41 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:41 GMT Content-Type: application/javascript Content-Length: 477018 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7475a" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:41 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2d 75 69 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2d 75 69 2d 74 6f 75 63 68 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 6d 6f 75 73 65 77 68 65 65 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 73 63 72 6f 6c 6c 69 6e 67 2e 75 74 69 6c 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2e 6d 69 73 63 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6d 65 67 61 4c 6f 67 67 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 66 75 6c 6c 73 63 72 65 65 6e 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2d 75 69 2e 65 78 74 72 Data Ascii: /* Bundle Includes: * js/vendor/jquery-ui.js * js/vendor/jquery-ui-touch.js * js/vendor/jquery.mousewheel.js * js/scrolling.utils.js * js/jquery.misc.js * js/vendor/megaLogger.js * js/vendor/jquery.fullscreen.js * js/jquery-ui.extr
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 09 68 61 6e 64 6c 65 72 73 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 09 09 09 65 6c 65 6d 65 6e 74 20 3d 20 73 75 70 70 72 65 73 73 44 69 73 61 62 6c 65 64 43 68 65 63 6b 3b 0a 09 09 09 73 75 70 70 72 65 73 73 44 69 73 61 62 6c 65 64 43 68 65 63 6b 20 3d 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 4e 6f 20 65 6c 65 6d 65 6e 74 20 61 72 67 75 6d 65 6e 74 2c 20 73 68 75 66 66 6c 65 20 61 6e 64 20 75 73 65 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 0a 09 09 69 66 20 28 20 21 68 61 6e 64 6c 65 72 73 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 72 73 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 09 09 09 65 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3b 0a 09 09 09 64 65 6c 65 67 61 74 65 45 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 77 69 64 67 65 74 28 Data Ascii: handlers = element;element = suppressDisabledCheck;suppressDisabledCheck = false;}// No element argument, shuffle and use this.elementif ( !handlers ) {handlers = element;element = this.element;delegateElement = this.widget(
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 64 61 74 61 2e 77 69 74 68 69 6e 2c 0a 09 09 09 09 77 69 74 68 69 6e 4f 66 66 73 65 74 20 3d 20 77 69 74 68 69 6e 2e 6f 66 66 73 65 74 2e 6c 65 66 74 20 2b 20 77 69 74 68 69 6e 2e 73 63 72 6f 6c 6c 4c 65 66 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 20 3d 20 77 69 74 68 69 6e 2e 77 69 64 74 68 2c 0a 09 09 09 09 6f 66 66 73 65 74 4c 65 66 74 20 3d 20 77 69 74 68 69 6e 2e 69 73 57 69 6e 64 6f 77 20 3f 20 77 69 74 68 69 6e 2e 73 63 72 6f 6c 6c 4c 65 66 74 20 3a 20 77 69 74 68 69 6e 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 0a 09 09 09 09 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 4c 65 66 74 20 3d 20 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 2d 20 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 0a 09 09 09 Data Ascii: data.within,withinOffset = within.offset.left + within.scrollLeft,outerWidth = within.width,offsetLeft = within.isWindow ? within.scrollLeft : within.offset.left,collisionPosLeft = position.left - data.collisionPosition.marginLeft,
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 20 70 72 6f 74 6f 2e 70 6c 75 67 69 6e 73 5b 20 69 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 70 72 6f 74 6f 2e 70 6c 75 67 69 6e 73 5b 20 69 20 5d 2e 70 75 73 68 28 20 5b 20 6f 70 74 69 6f 6e 2c 20 73 65 74 5b 20 69 20 5d 20 5d 20 29 3b 0a 09 09 7d 0a 09 7d 2c 0a 09 63 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 73 74 61 6e 63 65 2c 20 6e 61 6d 65 2c 20 61 72 67 73 2c 20 61 6c 6c 6f 77 44 69 73 63 6f 6e 6e 65 63 74 65 64 20 29 20 7b 0a 09 09 76 61 72 20 69 2c 0a 09 09 09 73 65 74 20 3d 20 69 6e 73 74 61 6e 63 65 2e 70 6c 75 67 69 6e 73 5b 20 6e 61 6d 65 20 5d 3b 0a 0a 09 09 69 66 20 28 20 21 73 65 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 0a 09 09 69 66 20 28 20 21 61 6c 6c 6f 77 44 69 73 63 6f 6e 6e 65 63 74 65 64 20 26 26 20 28 Data Ascii: proto.plugins[ i ] \|\| [];proto.plugins[ i ].push( [ option, set[ i ] ] );}},call: function( instance, name, args, allowDisconnected ) {var i,set = instance.plugins[ name ];if ( !set ) {return;}if ( !allowDisconnected && (
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 7d 2c 0a 0a 09 5f 63 6f 6e 76 65 72 74 50 6f 73 69 74 69 6f 6e 54 6f 3a 20 66 75 6e 63 74 69 6f 6e 28 20 64 2c 20 70 6f 73 20 29 20 7b 0a 0a 09 09 69 66 20 28 20 21 70 6f 73 20 29 20 7b 0a 09 09 09 70 6f 73 20 3d 20 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 3b 0a 09 09 7d 0a 0a 09 09 76 61 72 20 6d 6f 64 20 3d 20 64 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 3f 20 31 20 3a 20 2d 31 2c 0a 09 09 09 73 63 72 6f 6c 6c 49 73 52 6f 6f 74 4e 6f 64 65 20 3d 20 74 68 69 73 2e 5f 69 73 52 6f 6f 74 4e 6f 64 65 28 20 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 20 30 20 5d 20 29 3b 0a 0a 09 09 72 65 74 75 72 6e 20 7b 0a 09 09 09 74 6f 70 3a 20 28 0a 0a 09 09 09 09 2f 2f 20 54 68 65 20 61 62 73 6f 6c 75 74 65 20 6d 6f 75 73 65 20 70 6f 73 69 74 69 6f 6e 0a Data Ascii: },_convertPositionTo: function( d, pos ) {if ( !pos ) {pos = this.position;}var mod = d === "absolute" ? 1 : -1,scrollIsRootNode = this._isRootNode( this.scrollParent[ 0 ] );return {top: (// The absolute mouse position
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 6f 6e 28 20 65 76 65 6e 74 2c 20 75 69 2c 20 69 6e 73 74 20 29 20 7b 0a 0a 09 09 76 61 72 20 74 73 2c 20 62 73 2c 20 6c 73 2c 20 72 73 2c 20 6c 2c 20 72 2c 20 74 2c 20 62 2c 20 69 2c 20 66 69 72 73 74 2c 0a 09 09 09 6f 20 3d 20 69 6e 73 74 2e 6f 70 74 69 6f 6e 73 2c 0a 09 09 09 64 20 3d 20 6f 2e 73 6e 61 70 54 6f 6c 65 72 61 6e 63 65 2c 0a 09 09 09 78 31 20 3d 20 75 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 20 78 32 20 3d 20 78 31 20 2b 20 69 6e 73 74 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2c 0a 09 09 09 79 31 20 3d 20 75 69 2e 6f 66 66 73 65 74 2e 74 6f 70 2c 20 79 32 20 3d 20 79 31 20 2b 20 69 6e 73 74 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 67 68 74 3b 0a 0a 09 09 66 6f 72 20 28 20 69 20 3d 20 Data Ascii: on( event, ui, inst ) {var ts, bs, ls, rs, l, r, t, b, i, first,o = inst.options,d = o.snapTolerance,x1 = ui.offset.left, x2 = x1 + inst.helperProportions.width,y1 = ui.offset.top, y2 = y1 + inst.helperProportions.height;for ( i =
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 70 61 62 6c 65 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 52 65 73 69 7a 61 62 6c 65 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 2f 2f 3e 3e 6c 61 62 65 6c 3a 20 52 65 73 69 7a 61 62 6c 65 0a 2f 2f 3e 3e 67 72 6f 75 70 3a 20 49 6e 74 65 72 61 63 74 69 6f 6e 73 0a 2f 2f 3e 3e 64 65 73 63 72 69 70 74 69 6f 6e 3a 20 45 Data Ascii: pable;/! jQuery UI Resizable 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license *///>>label: Resizable//>>group: Interactions//>>description: E
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 44 4f 3a 20 53 65 65 6d 73 20 6c 69 6b 65 20 61 20 62 75 67 20 74 6f 20 63 61 63 68 65 20 74 68 69 73 2e 6f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 0a 09 09 09 2f 2f 20 63 6f 6e 73 69 64 65 72 69 6e 67 20 74 68 61 74 20 77 65 20 61 72 65 20 69 6e 20 61 20 6c 6f 6f 70 2e 0a 09 09 09 69 66 20 28 20 21 74 68 69 73 2e 6f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 6f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 20 3d 20 74 68 69 73 2e 5f 67 65 74 50 61 64 64 69 6e 67 50 6c 75 73 42 6f 72 64 65 72 44 69 6d 65 6e 73 69 6f 6e 73 28 20 70 72 65 6c 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 70 72 65 6c 2e 63 73 73 28 20 7b 0a 09 09 09 09 68 65 69 67 68 74 3a 20 28 20 65 6c 65 6d 65 6e 74 2e 68 65 69 67 68 74 28 29 20 2d 20 74 68 Data Ascii: DO: Seems like a bug to cache this.outerDimensions// considering that we are in a loop.if ( !this.outerDimensions ) {this.outerDimensions = this._getPaddingPlusBorderDimensions( prel );}prel.css( {height: ( element.height() - th
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 42 61 63 6b 28 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 64 6f 53 65 6c 65 63 74 2c 0a 09 09 09 09 73 65 6c 65 63 74 65 65 20 3d 20 24 2e 64 61 74 61 28 20 74 68 69 73 2c 20 22 73 65 6c 65 63 74 61 62 6c 65 2d 69 74 65 6d 22 20 29 3b 0a 09 09 09 69 66 20 28 20 73 65 6c 65 63 74 65 65 20 29 20 7b 0a 09 09 09 09 64 6f 53 65 6c 65 63 74 20 3d 20 28 20 21 65 76 65 6e 74 2e 6d 65 74 61 4b 65 79 20 26 26 20 21 65 76 65 6e 74 2e 63 74 72 6c 4b 65 79 20 29 20 7c 7c 0a 09 09 09 09 09 21 73 65 6c 65 63 74 65 65 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 20 22 75 69 2d 73 65 6c 65 63 74 65 64 22 20 29 3b 0a 09 09 09 09 74 68 61 74 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 Data Ascii: .parents().addBack().each( function() {var doSelect,selectee = $.data( this, "selectable-item" );if ( selectee ) {doSelect = ( !event.metaKey && !event.ctrlKey ) \|\|!selectee.$element.hasClass( "ui-selected" );that._removeClass
2024-07-11 11:36:41 UTC	16384	IN	Data Raw: 6f 6e 20 3d 20 69 6e 74 65 72 73 65 63 74 69 6f 6e 20 3d 3d 3d 20 31 20 3f 20 22 64 6f 77 6e 22 20 3a 20 22 75 70 22 3b 0a 0a 09 09 09 09 69 66 20 28 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 6c 65 72 61 6e 63 65 20 3d 3d 3d 20 22 70 6f 69 6e 74 65 72 22 20 7c 7c 20 74 68 69 73 2e 5f 69 6e 74 65 72 73 65 63 74 73 57 69 74 68 53 69 64 65 73 28 20 69 74 65 6d 20 29 20 29 20 7b 0a 09 09 09 09 09 74 68 69 73 2e 5f 72 65 61 72 72 61 6e 67 65 28 20 65 76 65 6e 74 2c 20 69 74 65 6d 20 29 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 20 22 63 68 61 6e 67 65 22 2c 20 65 76 65 6e 74 2c 20 74 68 69 73 2e 5f 75 69 48 61 73 68 28 29 20 29 3b 0a 09 09 09 Data Ascii: on = intersection === 1 ? "down" : "up";if ( this.options.tolerance === "pointer" \|\| this._intersectsWithSides( item ) ) {this._rearrange( event, item );} else {break;}this._trigger( "change", event, this._uiHash() );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49738	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:42 UTC	611	OUT	GET /4/js/mega-6_f739f1b788e1aa846c5af53b37bf5835761d0f00a247ef0180f28edb71797578.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:42 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:42 GMT Content-Type: application/javascript Content-Length: 520394 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7f0ca" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:42 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 61 74 74 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6e 69 63 6b 6e 61 6d 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6d 65 67 61 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6d 65 67 61 50 72 6f 6d 69 73 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 72 65 71 73 74 61 74 63 6c 69 65 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6d 44 42 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6d 6f 75 73 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 64 61 74 61 73 74 72 75 63 74 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 69 64 62 6b 76 73 74 6f 72 61 67 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 73 68 61 72 65 64 6c 6f 63 61 6c 6b 76 73 74 6f 72 61 67 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 6c 76 73 74 6f 72 65 2e 6a 73 0a Data Ascii: /* Bundle Includes: * js/attr.js * js/ui/nicknames.js * js/mega.js * js/megaPromise.js * js/reqstatclient.js * js/mDB.js * js/mouse.js * js/datastructs.js * js/idbkvstorage.js * js/sharedlocalkvstorage.js * js/tlvstore.js
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 68 61 74 68 61 6e 64 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 69 5f 72 65 71 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 27 61 27 3a 20 27 6d 63 75 67 61 27 2c 20 22 70 68 22 3a 20 63 68 61 74 68 61 6e 64 6c 65 2c 20 27 75 27 3a 20 75 73 65 72 68 61 6e 64 6c 65 2c 20 27 75 61 27 3a 20 61 74 74 72 69 62 75 74 65 2c 20 27 76 27 3a 20 31 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 79 43 74 78 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 54 54 52 5f 52 45 51 5f 43 48 41 4e 4e 45 4c 5b 61 74 74 72 69 62 75 74 65 5d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: if (chathandle) { api_req( {'a': 'mcuga', "ph": chathandle, 'u': userhandle, 'ua': attribute, 'v': 1}, myCtx, ATTR_REQ_CHANNEL[attribute]
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 20 20 63 61 6c 6c 62 61 63 6b 28 72 65 73 2c 20 6d 79 43 74 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 69 73 5f 63 68 61 74 6c 69 6e 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 61 74 74 72 4e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 61 75 74 68 52 53 41 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 61 75 74 68 72 69 6e 67 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 61 75 74 68 43 75 32 35 35 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: callback(res, myCtx); } }; if (window.is_chatlink) { switch (attrName) { case 'authRSA': case 'authring': case 'authCu255': if (d) {
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 28 27 45 64 32 35 35 31 39 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 75 61 50 61 63 6b 65 74 50 61 72 73 65 72 48 61 6e 64 6c 65 72 5b 27 2a 21 61 75 74 68 52 53 41 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 68 72 69 6e 67 2e 67 65 74 43 6f 6e 74 61 63 74 73 28 27 52 53 41 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 75 61 50 61 63 6b 65 74 50 61 72 73 65 72 48 61 6e 64 6c 65 72 5b 27 2a 21 61 75 74 68 43 75 32 35 35 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 65 67 61 2e 6b 65 79 4d 67 72 2e 67 65 6e 65 72 61 74 69 6f 6e 29 20 7b 0a 20 20 20 20 Data Ascii: ('Ed25519'); } }; uaPacketParserHandler['!authRSA'] = function() { authring.getContacts('RSA'); }; uaPacketParserHandler['!authCu255'] = function() { if (!mega.keyMgr.generation) {
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 74 6f 72 79 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 47 65 74 20 6e 6f 74 69 66 69 65 64 20 61 62 6f 75 74 20 63 68 61 6e 67 65 73 2e 0a 20 20 20 20 20 20 20 20 6e 73 2e 63 68 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 63 74 6f 72 79 2e 63 68 61 6e 67 65 28 63 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 73 2c 20 27 6e 61 6d 65 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 Data Ascii: tory)); }; // Get notified about changes. ns.change = function(cb) { factory.change(cb); return this; }; Object.defineProperty(ns, 'name', { get: function() { re
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 73 61 76 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 61 6c 73 65 2c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 20 70 72 69 76 61 74 65 20 61 6e 64 20 65 6e 63 72 79 70 74 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 75 65 2c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 20 6e 6f 6e 2d 68 69 73 74 6f 72 69 63 2c 20 74 68 69 73 20 77 6f 6e 27 74 20 72 65 74 61 69 6e 20 70 72 65 76 69 6f 75 73 20 76 61 6c 75 65 73 20 6f 6e 20 41 50 49 20 73 65 72 76 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 61 6c 73 65 2c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4e 6f 20 63 61 6c 6c 62 61 63 6b 20 72 65 71 75 69 72 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: save false, // Set to private and encrypted true, // Set to non-historic, this won't retain previous values on API server false, // No callback required
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 6e 69 5d 20 26 26 20 73 63 71 5b 73 63 6e 69 5d 5b 31 5d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 63 6e 6f 64 65 73 20 26 26 20 73 63 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 63 6b 65 74 20 3d 20 70 61 63 6b 65 74 20 7c 7c 20 73 63 71 5b 73 63 6e 69 5d 5b 30 5d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 70 61 63 6b 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 73 63 5f 66 71 75 65 75 65 74 3a 20 69 6e 76 61 6c 69 64 20 70 61 63 6b 65 74 21 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 20 3e 20 Data Ascii: ni] && scq[scni][1]; if (scnodes && scnodes.length) { packet = packet \|\| scq[scni][0]; if (!packet) { console.error('sc_fqueuet: invalid packet!'); } else { if (d >
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 72 69 6e 67 20 73 68 61 72 65 20 64 69 61 6c 6f 67 20 72 65 6d 6f 76 61 6c 20 6f 66 20 63 6f 6e 74 61 63 74 20 66 72 6f 6d 20 73 68 61 72 65 20 6c 69 73 74 29 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 73 20 74 68 69 73 20 61 20 66 75 6c 6c 20 73 68 61 72 65 20 64 65 6c 65 74 65 3f 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 2e 72 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 66 69 6c 6c 20 44 44 4c 20 77 69 74 68 20 72 65 6d 6f 76 65 64 20 63 6f 6e 74 61 63 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 2e 75 20 26 26 20 4d 2e 75 5b 61 2e 75 5d 20 26 26 20 4d 2e 75 5b 61 2e 75 5d 2e 6d 20 26 26 20 21 69 73 5f 6d 6f 62 69 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 Data Ascii: ring share dialog removal of contact from share list) // is this a full share delete? if (a.r === undefined) { // fill DDL with removed contact if (a.u && M.u[a.u] && M.u[a.u].m && !is_mobile) { var
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 20 20 20 4d 2e 63 68 65 63 6b 53 74 6f 72 61 67 65 51 75 6f 74 61 28 32 65 33 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 2f 2f 20 50 61 79 6d 65 6e 74 20 72 65 6d 69 6e 64 65 72 0a 73 63 70 61 72 73 65 72 2e 24 61 64 64 28 27 70 73 65 73 27 2c 20 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 69 66 20 28 21 66 6f 6c 64 65 72 6c 69 6e 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 6e 6f 74 69 66 79 2e 6e 6f 74 69 66 79 46 72 6f 6d 41 63 74 69 6f 6e 50 61 63 6b 65 74 28 61 29 2e 63 61 74 63 68 28 64 75 6d 70 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 2f 2f 20 50 61 79 6d 65 6e 74 20 63 61 72 64 20 73 74 61 74 75 73 0a 73 63 70 61 72 73 65 72 2e 24 61 64 64 28 27 63 63 65 Data Ascii: M.checkStorageQuota(2e3); }); }});// Payment reminderscparser.$add('pses', function(a) { 'use strict'; if (!folderlink) { notify.notifyFromActionPacket(a).catch(dump); }});// Payment card statusscparser.$add('cce
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 49 6e 62 6f 78 49 44 27 2c 20 27 52 75 62 62 69 73 68 49 44 27 5d 5b 6e 6f 64 65 2e 74 20 2d 20 32 5d 5d 20 3d 20 6e 6f 64 65 2e 68 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 52 65 63 65 69 76 65 64 20 70 61 72 65 6e 74 2d 6c 65 73 73 20 6e 6f 64 65 20 6f 66 20 74 79 70 65 20 22 20 2b 20 6e 6f 64 65 2e 74 20 2b 20 22 3a 20 22 20 2b 20 6e 6f 64 65 2e 68 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 73 72 76 6c 6f 67 32 28 27 70 61 72 65 6e 74 2d 6c 65 73 73 27 2c 20 6e 6f 64 65 2e 74 2c 20 6e 6f 64 65 2e 68 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 21 6e 6f 64 65 2e 68 20 7c 7c 20 Data Ascii: InboxID', 'RubbishID'][node.t - 2]] = node.h; } else { if (d) { console.error("Received parent-less node of type " + node.t + ": " + node.h); } srvlog2('parent-less', node.t, node.h); } if (!node.h \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49737	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:42 UTC	423	OUT	GET /4/js/mega-4_4fd1c8f7e2f02fb9a57dcf5667dd968ed828ff048ce607fd73cbd530cf8a9db2.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:42 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:42 GMT Content-Type: application/javascript Content-Length: 366638 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-5982e" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:42 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 6d 65 64 69 61 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 6d 65 67 61 6c 69 74 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 6e 65 74 77 6f 72 6b 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 73 70 6c 69 74 74 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 74 65 73 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 74 69 6d 65 72 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 77 61 74 63 68 64 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 77 6f 72 6b 65 72 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 74 72 61 6e 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 74 69 6c 73 2f 77 Data Ascii: /* Bundle Includes: * js/utils/media.js * js/utils/megalite.js * js/utils/network.js * js/utils/splitter.js * js/utils/test.js * js/utils/timers.js * js/utils/watchdog.js * js/utils/workers.js * js/utils/trans.js * js/utils/w
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 59 58 51 53 41 41 6f 46 47 41 41 4f 77 43 41 79 44 52 2f 77 41 41 42 67 42 67 41 41 41 41 43 73 79 76 41 3d 60 0a 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 48 45 49 43 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 69 6d 61 67 65 2f 68 65 69 63 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 60 41 41 41 41 47 47 5a 30 65 58 42 6f 5a 57 6c 6a 41 41 41 41 41 47 68 6c 61 57 4e 74 61 57 59 78 41 41 41 42 76 6d 31 6c 64 47 45 41 41 41 41 41 41 41 41 41 49 6d 68 6b 62 48 49 41 41 41 41 41 41 41 41 41 41 48 42 70 59 33 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 52 6b 61 57 35 6d 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 41 41 41 48 47 52 79 5a 57 59 41 41 41 41 41 41 41 41 41 Data Ascii: YXQSAAoFGAAOwCAyDR/wAABgBgAAAACsyvA=` ], [ 'HEIC', 'image/heic', `AAAAGGZ0eXBoZWljAAAAAGhlaWNtaWYxAAABvm1ldGEAAAAAAAAAImhkbHIAAAAAAAAAAHBpY3QAAAAAAAAAAAAAAAAAAAAAACRkaW5m AAAAHGRyZWYAAAAAAAAA
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 79 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 24 62 75 74 74 6f 6e 2e 70 61 72 65 6e 74 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 72 65 65 7a 65 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 74 72 6f 79 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 72 65 28 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 2e 74 79 70 65 20 3d 3d 3d 20 27 6d 6f 75 73 65 75 70 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 24 74 61 72 67 65 74 20 3d 20 24 28 65 76 2e 74 61 72 67 65 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: y); } })); $button.parent().removeClass('hidden'); return freeze({ destroy, fire(ev) { if (ev.type === 'mouseup') { const $target = $(ev.target);
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 74 72 65 61 6d 65 72 2e 63 75 72 72 65 6e 74 54 69 6d 65 20 2b 20 30 2e 30 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 70 65 6e 64 69 6e 67 42 6c 6f 63 6b 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 70 6c 61 79 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 61 79 65 76 65 6e 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 74 72 65 61 6d 65 72 2e 64 75 72 61 74 69 6f 6e 20 3e 20 64 75 72 61 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 75 72 Data Ascii: if (streamer.currentTime + 0.01) { $pendingBlock.addClass('hidden'); if (!playevent) { playevent = true; if (streamer.duration > duration) { setDur
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 56 6f 6c 75 6d 65 28 2d 30 2e 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 41 72 72 6f 77 4c 65 66 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 65 6b 42 79 28 2d 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 41 72 72 6f 77 52 69 67 68 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 65 6b 42 79 28 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 4b 65 79 4a 27 3a Data Ascii: Volume(-0.1); break; case 'ArrowLeft': seekBy(-5); break; case 'ArrowRight': seekBy(5); break; case 'KeyJ':
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 6c 6f 67 28 39 39 36 39 34 2c 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 20 2f 2f 20 63 6f 6e 74 69 6e 75 65 20 6c 69 73 74 65 6e 69 6e 67 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 73 2e 6f 6e 28 27 61 63 74 69 76 69 74 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 45 76 65 6e 74 20 69 6e 76 6f 6b 65 64 20 77 68 65 6e 20 74 68 65 20 76 69 64 65 6f 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 74 61 6c 6c 65 64 0a 20 20 20 20 20 20 Data Ascii: } eventlog(99694, JSON.stringify(data), true); } return true; // continue listening }); s.on('activity', function(ev) { // Event invoked when the video is no longer stalled
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 6e 65 72 61 6c 20 26 26 20 74 68 69 73 2e 47 65 6e 65 72 61 6c 2e 46 72 61 6d 65 52 61 74 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 70 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 2e 46 72 61 6d 65 52 61 74 65 5f 44 65 6e 20 26 26 20 76 2e 46 72 61 6d 65 52 61 74 65 5f 4e 75 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 70 73 20 3d 20 76 2e 46 72 61 6d 65 52 61 74 65 5f 4e 75 6d 20 2f 20 76 2e 46 72 61 6d 65 52 61 74 65 5f 44 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 70 73 20 3d 20 66 70 73 20 7c 7c 20 76 2e 46 72 61 6d 65 52 61 74 65 5f 4f 72 69 67 69 6e 61 6c 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: neral && this.General.FrameRate; if (!fps) { if (v.FrameRate_Den && v.FrameRate_Num) { fps = v.FrameRate_Num / v.FrameRate_Den; } fps = fps \|\| v.FrameRate_Original;
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 3a 20 27 2f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 65 6d 46 69 6c 65 20 3d 20 75 72 6c 50 61 74 68 20 2b 20 27 6d 65 64 69 61 69 6e 66 6f 2e 6d 65 6d 27 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 6f 70 65 6e 28 27 47 45 54 27 2c 20 6d 65 6d 46 69 6c 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 20 3d 20 27 61 72 72 61 79 62 75 66 66 65 72 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 68 72 2e 73 65 6e 64 28 6e 75 6c 6c 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 72 65 71 75 69 72 65 28 27 6d 65 64 69 61 69 6e 66 6f 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 72 79 43 61 Data Ascii: : '/'; var memFile = urlPath + 'mediainfo.mem'; xhr.open('GET', memFile); xhr.responseType = 'arraybuffer'; xhr.send(null); M.require('mediainfo') .tryCa
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 20 4d 65 64 69 61 49 6e 66 6f 4c 69 62 28 65 6e 74 72 79 2e 6c 69 6e 6b 20 7c 7c 20 65 6e 74 72 79 2e 68 2c 20 2d 31 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 67 65 74 4d 65 74 61 64 61 74 61 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 65 6e 74 72 79 2e 73 74 6f 72 65 2e 62 69 6e 64 28 65 6e 74 72 79 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 6f 6c 76 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 72 65 6a 65 63 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 76 61 72 20 61 75 64 69 6f 45 6c 65 6d 65 6e 74 20 3d 20 Data Ascii: MediaInfoLib(entry.link \|\| entry.h, -1) .getMetadata() .then(entry.store.bind(entry)) .then(resolve) .catch(reject); } }); }; var audioElement =
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 49 6d 61 67 65 28 73 65 6c 66 2c 20 73 74 72 5f 74 6f 5f 61 62 28 61 74 6f 62 28 72 65 73 2e 47 65 6e 65 72 61 6c 2e 43 6f 76 65 72 5f 44 61 74 61 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 74 63 68 20 28 65 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 Data Ascii: { try { setImage(self, str_to_ab(atob(res.General.Cover_Data))); } catch (ex) { console.warn(ex); } }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49740	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:42 UTC	611	OUT	GET /4/js/mega-7_153ed2950ad758d1645d036bce30e293ae066ba6266e32e02dfa754b7bb34bfc.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:42 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:42 GMT Content-Type: application/javascript Content-Length: 501735 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7a7e7" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:42 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 61 75 74 68 72 69 6e 67 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 6c 6f 67 69 6e 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 65 78 70 6f 72 74 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 6b 65 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 73 69 6d 70 6c 65 74 69 70 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 73 65 72 61 76 61 74 61 72 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 62 6f 74 74 6f 6d 70 61 67 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 69 6c 65 64 72 61 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 68 75 6d 62 6e 61 69 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 65 78 69 66 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f Data Ascii: /* Bundle Includes: * js/authring.js * html/js/login.js * js/ui/export.js * html/js/key.js * js/ui/simpletip.js * js/useravatar.js * html/js/bottompage.js * js/filedrag.js * js/thumbnail.js * js/vendor/exif.js * js/vendor/
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 6c 6c 69 6e 67 20 61 75 74 68 72 69 6e 67 2e 67 65 74 43 6f 6e 74 61 63 74 73 28 29 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 73 65 72 68 61 6e 64 6c 65 20 3d 3d 3d 20 75 5f 68 61 6e 64 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 74 72 61 63 6b 20 6f 75 72 73 65 6c 66 2e 20 4c 65 74 27 73 20 67 65 74 20 6f 75 74 20 6f 66 20 68 65 72 65 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 6c 64 52 65 63 6f 72 64 20 3d 20 75 5f 61 75 74 68 72 69 6e 67 5b 6b 65 79 54 79 70 65 5d 5b 75 73 65 72 68 61 6e 64 Data Ascii: lling authring.getContacts()'); return; } if (userhandle === u_handle) { // We don't want to track ourself. Let's get out of here. return; } var oldRecord = u_authring[keyType][userhand
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 73 65 2e 66 61 69 6c 28 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 74 74 72 69 62 75 74 65 50 72 6f 6d 69 73 65 52 65 6a 65 63 74 28 72 65 73 75 6c 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 75 6c 74 20 3d 3d 3d 20 45 4e 4f 45 4e 54 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 20 64 6f 6e 27 74 20 68 61 76 65 20 69 74 20 73 65 74 20 75 70 2c 20 79 65 74 2e 20 4c 65 74 27 73 20 64 6f 20 73 6f 20 6e 6f 77 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 67 67 65 72 2e 77 61 72 6e 28 27 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 79 73 74 65 6d 20 73 65 65 6d 73 20 6e 6f 6e 2d 65 78 69 73 74 65 6e 74 2e 20 53 65 74 74 69 6e 67 20 75 70 20 2e 2e 2e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: se.fail(function __attributePromiseReject(result) { if (result === ENOENT) { // We don't have it set up, yet. Let's do so now. logger.warn('Authentication system seems non-existent. Setting up ...');
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 6f 72 20 28 6c 65 74 20 78 20 3d 20 75 73 65 72 73 2e 6c 65 6e 67 74 68 3b 20 78 2d 2d 3b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 73 73 65 72 74 28 21 73 74 6f 72 65 5b 75 73 65 72 73 5b 78 5d 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 6f 72 65 5b 75 73 65 72 73 5b 78 5d 5d 20 3d 20 64 61 74 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6e 73 2e 73 65 74 43 6f 6e 74 61 63 74 73 28 74 79 70 65 29 2e 64 75 6d 70 28 60 73 65 74 43 6f 6e 74 61 63 74 73 2e 24 7b 74 79 70 65 7d 60 29 29 2e 63 61 74 63 68 28 64 75 6d 70 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 61 77 61 69 74 20 74 53 6c 65 Data Ascii: or (let x = users.length; x--;) { assert(!store[users[x]]); store[users[x]] = data; } await Promise.resolve(ns.setContacts(type).dump(`setContacts.${type}`)).catch(dump); } await tSle
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 6b 2e 6b 65 79 20 69 6e 70 75 74 27 2c 20 24 74 68 69 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 57 69 74 68 6f 75 74 4b 65 79 20 3d 20 24 6c 69 6e 6b 49 6e 70 75 74 2e 64 61 74 61 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6b 65 79 20 3d 20 24 6c 69 6e 6b 49 6e 70 75 74 2e 64 61 74 61 28 27 6b 65 79 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 6b 65 79 20 77 69 74 68 6f 75 74 20 23 20 6f 72 20 21 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 6b 65 79 49 6e 70 75 74 2e 76 61 6c 28 24 6b 65 79 49 6e 70 75 74 2e 64 61 74 61 28 27 6b 65 79 27 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 Data Ascii: k.key input', $this); var linkWithoutKey = $linkInput.data('link'); var key = $linkInput.data('key'); // Set key without # or ! $keyInput.val($keyInput.data('key')); // Set
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 2e 6a 73 2d 75 70 64 61 74 65 2d 73 75 63 63 65 73 73 2d 62 61 6e 6e 65 72 27 2c 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 50 72 65 70 61 72 65 20 4d 65 67 61 49 6e 70 75 74 20 66 69 65 6c 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 67 61 2e 75 69 2e 4d 65 67 61 49 6e 70 75 74 73 28 24 70 61 73 73 77 6f 72 64 49 6e 70 75 74 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 48 69 64 65 20 70 72 65 76 69 6f 75 73 20 65 72 72 6f 72 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 70 61 73 73 77 6f 72 64 49 6e 70 75 74 2e 64 61 74 61 28 27 4d 65 67 61 49 6e 70 75 74 73 27 29 2e 68 69 64 65 45 72 72 6f 72 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 47 65 74 20 74 68 65 20 70 61 73 73 Data Ascii: .js-update-success-banner', this.$dialog); // Prepare MegaInput field mega.ui.MegaInputs($passwordInput); // Hide previous errors $passwordInput.data('MegaInputs').hideError(); // Get the pass
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 4b 65 79 42 79 74 65 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 61 63 4b 65 79 42 79 74 65 73 20 3d 20 64 65 72 69 76 65 64 4b 65 79 42 79 74 65 73 2e 73 75 62 61 72 72 61 79 28 6d 61 63 4b 65 79 53 74 61 72 74 4f 66 66 73 65 74 2c 20 6d 61 63 4b 65 79 45 6e 64 4f 66 66 73 65 74 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 6d 70 75 74 65 20 74 68 65 20 4d 41 43 20 6f 76 65 72 20 74 68 65 20 64 61 74 61 20 74 6f 20 76 65 72 69 66 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 54 6f 56 65 72 69 66 79 42 79 74 65 73 20 3d 20 64 65 63 6f 64 65 64 42 79 74 65 73 2e 73 75 62 61 72 72 61 79 28 30 2c 20 6d 61 63 53 74 61 72 74 4f 66 66 73 65 74 29 3b 0a Data Ascii: KeyBytes.length; var macKeyBytes = derivedKeyBytes.subarray(macKeyStartOffset, macKeyEndOffset); // Compute the MAC over the data to verify var dataToVerifyBytes = decodedBytes.subarray(0, macStartOffset);
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 6c 5b 34 31 35 5d 2c 20 6c 5b 34 31 36 5d 2c 20 6c 5b 34 31 37 5d 2c 20 6c 5b 34 31 38 5d 2c 20 6c 5b 34 31 39 5d 20 20 20 20 20 20 2f 2f 20 4a 75 6c 79 20 2d 20 44 65 63 65 6d 62 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 5b 32 34 30 33 35 5d 2c 20 6c 5b 32 34 30 33 37 5d 2c 20 6c 5b 32 34 30 33 36 5d 2c 20 6c 5b 32 34 30 33 38 5d 2c 20 6c 5b 32 34 30 34 37 5d 2c 20 6c 5b 32 34 30 33 39 5d 2c 20 20 20 20 20 2f 2f 20 4a 61 6e 75 61 72 79 20 2d 20 4a 75 6e 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 5b 32 34 30 34 30 5d 2c 20 6c 5b 32 34 30 34 31 5d 2c 20 Data Ascii: l[415], l[416], l[417], l[418], l[419] // July - December ], monthsShort: [ l[24035], l[24037], l[24036], l[24038], l[24047], l[24039], // January - June l[24040], l[24041],
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 63 72 6f 6c 6c 5b 30 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 47 65 6e 65 72 61 74 65 20 63 6f 6e 74 65 6e 74 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 3d 20 69 74 65 6d 45 78 70 6f 72 74 4c 69 6e 6b 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 69 6c 6c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 68 74 6d 6c 2e 6c 65 6e 67 74 68 29 20 7b 20 2f 2f 20 73 6f 6d 65 20 68 6f 77 20 77 65 20 64 6f 6e 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 73 67 44 69 61 6c 6f 67 28 27 77 61 72 6e 69 6e 67 61 27 2c 20 6c 5b 31 37 35 36 34 5d 2c 20 6c 5b 31 37 35 36 35 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 Data Ascii: croll[0]); } // Generate content html = itemExportLink(); // Fill with content if (!html.length) { // some how we dont have a link msgDialog('warninga', l[17564], l[17565]); return true;
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 65 67 61 2e 69 63 75 2e 66 6f 72 6d 61 74 28 6c 2e 74 6f 61 73 74 5f 63 6f 70 79 5f 6c 69 6e 6b 2c 20 6c 69 6e 6b 73 4e 75 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 61 73 74 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 61 6e 64 20 64 61 74 61 20 74 6f 20 63 6f 70 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 20 3d 20 24 2e 74 72 69 6d 28 67 65 74 43 6c 69 70 62 6f 61 72 64 4c 69 6e 6b 73 28 24 69 74 65 6d 2c 20 6d 6f 64 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 70 79 20 74 6f 20 63 6c 69 70 62 6f 61 72 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 70 79 54 6f 43 6c 69 Data Ascii: ega.icu.format(l.toast_copy_link, linksNum); } // Set toast notification and data to copy data = $.trim(getClipboardLinks($item, mode)); } // Copy to clipboard copyToCli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49739	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:42 UTC	423	OUT	GET /4/js/mega-5_28a090261b3fcc9c576799d820968cdf2fe60f77328dc0e00d3a2ba7250a804f.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:42 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:42 GMT Content-Type: application/javascript Content-Length: 508452 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7c224" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:42 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 64 65 78 69 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 75 6e 63 74 69 6f 6e 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 63 6f 6e 66 69 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 63 72 79 70 74 6f 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 61 63 63 6f 75 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 73 65 63 75 72 69 74 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 77 6f 2d 66 61 63 74 6f 72 2d 61 75 74 68 2e 6a 73 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 44 65 78 69 65 2e 6a 73 20 2d 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 77 72 61 70 70 65 72 20 66 6f 72 20 49 6e 64 65 78 65 64 44 42 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* Bundle Includes: * js/vendor/dexie.js * js/functions.js * js/config.js * js/crypto.js * js/account.js * js/security.js * js/two-factor-auth.js // * Dexie.js - a minimalistic wrapper for IndexedDB * ==========================
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 73 74 61 74 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 76 61 6c 75 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 73 74 61 74 65 20 3d 3d 3d 20 66 61 6c 73 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 61 6e 64 6c 65 52 65 6a 65 63 74 69 6f 6e 28 74 68 69 73 2c 20 74 68 69 73 2e 5f 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 7d 0a 20 20 20 20 74 68 69 73 2e 5f 73 74 61 74 65 20 3d 20 6e 75 6c 6c 3b 0a 20 Data Ascii: ) throw new TypeError('Not a function'); this._state = arguments[1]; this._value = arguments[2]; if (this._state === false) handleRejection(this, this._value); return; } this._state = null;
2024-07-11 11:36:42 UTC	16384	IN	Data Raw: 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 6f 6e 65 4c 65 61 76 65 45 63 68 6f 28 29 20 7b 0a 20 20 20 20 76 61 72 20 7a 6f 6e 65 20 3d 20 7a 6f 6e 65 53 74 61 63 6b 5b 7a 6f 6e 65 53 74 61 63 6b 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 3b 0a 20 20 20 20 7a 6f 6e 65 53 74 61 63 6b 2e 70 6f 70 28 29 3b 0a 20 20 20 20 73 77 69 74 63 68 54 6f 5a 6f 6e 65 28 7a 6f 6e 65 2c 20 66 61 6c 73 65 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 77 69 74 63 68 54 6f 5a 6f 6e 65 28 74 61 72 67 65 74 5a 6f 6e 65 2c 20 62 45 6e 74 65 72 69 6e 67 5a 6f 6e 65 29 20 7b 0a 20 20 20 20 76 61 72 20 63 75 72 72 65 6e 74 5a 6f 6e 65 20 3d 20 50 53 44 3b 0a 20 20 20 20 69 66 20 28 62 45 6e 74 65 72 69 6e 67 5a 6f 6e 65 20 3f 20 74 61 73 6b 2e 65 63 68 6f 65 73 20 26 26 20 28 21 7a 6f 6e 65 45 Data Ascii: }function zoneLeaveEcho() { var zone = zoneStack[zoneStack.length - 1]; zoneStack.pop(); switchToZone(zone, false);}function switchToZone(targetZone, bEnteringZone) { var currentZone = PSD; if (bEnteringZone ? task.echoes && (!zoneE
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 26 26 20 61 75 74 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 54 6f 41 64 64 20 3d 20 77 6f 72 6b 61 72 6f 75 6e 64 46 6f 72 55 6e 64 65 66 69 6e 65 64 50 72 69 6d 4b 65 79 28 6b 65 79 50 61 74 68 29 28 6f 62 6a 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 72 61 6e 73 28 27 72 65 61 64 77 72 69 74 65 27 2c 20 74 72 61 6e 73 20 3d 3e 20 74 68 69 73 2e 63 6f 72 65 2e 6d 75 74 61 74 65 28 7b 20 74 72 61 6e 73 2c 20 74 79 70 65 3a 20 27 70 75 74 27 2c 20 76 61 6c 75 65 73 3a 20 5b 6f 62 6a 54 6f 41 64 64 5d 2c 20 6b 65 79 73 3a 20 6b 65 79 20 21 3d 20 6e 75 6c 6c 20 3f 20 5b 6b 65 79 5d 20 3a 20 6e 75 6c 6c 20 7d 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 Data Ascii: && auto) { objToAdd = workaroundForUndefinedPrimKey(keyPath)(obj); } return this._trans('readwrite', trans => this.core.mutate({ trans, type: 'put', values: [objToAdd], keys: key != null ? [key] : null })) .then(res
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 6e 79 74 68 69 6e 67 4d 6f 64 69 66 69 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 6f 72 65 54 61 62 6c 65 20 3d 20 63 74 78 2e 74 61 62 6c 65 2e 63 6f 72 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 7b 20 6f 75 74 62 6f 75 6e 64 2c 20 65 78 74 72 61 63 74 4b 65 79 20 7d 20 3d 20 63 6f 72 65 54 61 62 6c 65 2e 73 63 68 65 6d 61 2e 70 72 69 6d 61 72 79 4b 65 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 69 6d 69 74 20 3d 20 74 Data Ascii: } } return anythingModified; }; } const coreTable = ctx.table.core; const { outbound, extractKey } = coreTable.schema.primaryKey; const limit = t
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 72 61 6e 67 65 5b 31 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 73 63 65 6e 64 69 6e 67 28 72 61 6e 67 65 5b 30 5d 2c 20 72 61 6e 67 65 5b 31 5d 29 20 3c 3d 20 30 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 69 6c 28 74 68 69 73 2c 20 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 69 6e 41 6e 79 52 61 6e 67 65 28 29 20 6d 75 73 74 20 62 65 20 61 6e 20 41 72 72 61 79 20 6f 66 20 74 77 6f 2d 76 61 6c 75 65 20 41 72 72 61 79 73 20 5b 6c 6f 77 65 72 2c 75 70 70 65 72 5d 20 77 68 65 72 65 20 75 70 70 65 72 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6c 6f 77 65 72 20 74 68 61 6e 20 6c 6f 77 65 72 22 2c 20 65 78 63 65 70 74 69 6f 6e 73 2e 49 6e Data Ascii: range[1] !== undefined && ascending(range[0], range[1]) <= 0)) { return fail(this, "First argument to inAnyRange() must be an Array of two-value Arrays [lower,upper] where upper must not be lower than lower", exceptions.In
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 79 3a 20 67 65 74 4b 65 79 45 78 74 72 61 63 74 6f 72 28 6b 65 79 50 61 74 68 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 78 65 73 3a 20 61 72 72 61 79 69 66 79 28 73 74 6f 72 65 2e 69 6e 64 65 78 4e 61 6d 65 73 29 2e 6d 61 70 28 69 6e 64 65 78 4e 61 6d 65 20 3d 3e 20 73 74 6f 72 65 2e 69 6e 64 65 78 28 69 6e 64 65 78 4e 61 6d 65 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 61 70 28 69 6e 64 65 78 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 7b 20 6e 61 6d 65 2c 20 75 6e 69 71 75 65 2c 20 6d 75 6c 74 69 Data Ascii: y: getKeyExtractor(keyPath) }, indexes: arrayify(store.indexNames).map(indexName => store.index(indexName)) .map(index => { const { name, unique, multi
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 50 72 6f 70 28 6f 62 6a 2c 20 74 61 62 6c 65 4e 61 6d 65 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 28 29 20 7b 20 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 62 6c 65 28 74 61 62 6c 65 4e 61 6d 65 29 3b 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 28 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 20 74 61 62 6c 65 4e 61 6d 65 2c 20 7b 20 76 61 6c 75 65 2c 20 77 72 69 74 61 62 6c 65 3a 20 74 72 75 65 2c 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 Data Ascii: tion) { setProp(obj, tableName, { get() { return this.table(tableName); }, set(value) { defineProperty(this, tableName, { value, writable: true, configurable:
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 62 4f 70 65 6e 45 72 72 6f 72 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 73 74 61 74 65 2e 6f 70 65 6e 43 6f 6d 70 6c 65 74 65 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 63 6f 6e 73 74 20 6f 70 65 6e 43 61 6e 63 65 6c 6c 65 72 20 3d 20 73 74 61 74 65 2e 6f 70 65 6e 43 61 6e 63 65 6c 6c 65 72 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 68 72 6f 77 49 66 43 61 6e 63 65 6c 6c 65 64 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 65 2e 6f 70 65 6e 43 61 6e 63 65 6c 6c 65 72 20 21 3d 3d 20 6f 70 65 6e 43 61 6e 63 65 6c 6c 65 72 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 65 78 63 65 70 74 69 6f 6e 73 2e 44 61 74 61 62 61 73 65 43 6c 6f 73 65 64 28 27 64 62 2e 6f 70 65 6e 28 29 20 77 61 73 20 63 61 6e 63 65 6c 6c 65 64 Data Ascii: bOpenError = null; state.openComplete = false; const openCanceller = state.openCanceller; function throwIfCancelled() { if (state.openCanceller !== openCanceller) throw new exceptions.DatabaseClosed('db.open() was cancelled
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 74 68 69 73 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 6f 6e 28 22 76 65 72 73 69 6f 6e 63 68 61 6e 67 65 22 2c 20 65 76 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 2e 6e 65 77 56 65 72 73 69 6f 6e 20 3e 20 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 60 41 6e 6f 74 68 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 6e 74 73 20 74 6f 20 75 70 67 72 61 64 65 20 64 61 74 61 62 61 73 65 20 27 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 27 2e 20 43 6c 6f 73 69 6e 67 20 64 62 20 6e 6f 77 20 74 6f 20 72 65 73 75 6d 65 20 74 68 65 20 75 70 67 72 61 64 65 2e 60 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: onstructor(this); this.on("versionchange", ev => { if (ev.newVersion > 0) console.warn(`Another connection wants to upgrade database '${this.name}'. Closing db now to resume the upgrade.`); else

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49742	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:43 UTC	613	OUT	GET /4/css/mega-1_73f0048e4f39d5ec99a6cd1b8e309b77eaccdbe1eaaf31c05e2b8e660919fdd0.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:43 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:43 GMT Content-Type: text/css Content-Length: 476787 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-74673" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:43 UTC	16021	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 61 76 61 74 61 72 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 66 6f 6e 74 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 6f 74 74 6f 6d 2d 70 61 67 65 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 6f 74 74 6f 6d 2d 6d 65 6e 75 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 75 73 69 6e 65 73 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 70 72 6f 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 70 6c 61 6e 70 72 69 63 69 6e 67 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 74 61 72 74 70 61 67 65 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 69 63 6f 6e 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 69 6e 6e 65 72 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 75 73 69 6e 65 73 Data Ascii: /* Bundle Includes: * css/avatars.css * css/fonts.css * css/bottom-pages.css * css/bottom-menu.css * css/business.css * css/pro.css * css/planpricing.css * css/startpage.css * css/icons.css * css/spinners.css * css/busines
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 28 22 73 76 67 22 29 3b 0a 09 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 0a 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 5f 63 6f 64 65 5f 70 72 6f 72 65 67 75 6c 61 72 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 0a 09 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 63 6f 64 65 70 72 6f 2d 72 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 32 3f 76 3d 61 62 34 64 64 37 35 63 61 62 32 33 35 33 39 39 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 0a 20 20 20 20 20 20 20 20 20 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 63 6f 64 Data Ascii: ("svg");text-rendering:optimizeLegibility}@font-face{font-family:source_code_proregular;font-style:normal;font-weight:400;src:url(../fonts/sourcecodepro-regular-webfont.woff2?v=ab4dd75cab235399) format("woff2"), url(../fonts/sourcecod
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 72 61 6e 73 70 61 72 65 6e 74 2c 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 77 68 69 74 65 2d 62 6c 6f 63 6b 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 64 61 72 6b 2d 62 6c 75 65 2d 67 72 61 64 69 65 6e 74 7b 0a 09 62 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 33 31 64 32 34 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 31 33 31 64 32 34 20 30 2c 20 23 32 62 32 65 33 30 20 34 36 25 2c 20 23 32 39 33 30 33 33 20 31 30 30 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 Data Ascii: kground-color:#fff}.bottom-page.transparent,.bottom-page.white-block{font-size:0;overflow:hidden}.bottom-page.dark-blue-gradient{bbackground:#131d24;background:-moz-linear-gradient(top, #131d24 0, #2b2e30 46%, #293033 100%);background:-webki
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 70 78 20 30 20 35 70 78 0a 7d 0a 2e 6c 65 66 74 2d 62 6c 6f 63 6b 2e 69 6d 67 2d 64 65 73 63 72 69 70 74 69 6f 6e 2e 73 6d 61 6c 6c 2d 70 61 64 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 35 70 78 20 30 20 31 35 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 72 69 67 68 74 2d 63 65 6c 6c 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 0a 09 77 69 64 74 68 3a 35 30 25 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 62 6f 74 74 6f 6d 2d 61 6c 69 67 6e 7b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 68 61 6c 66 2d 73 69 7a 65 64 2d 63 65 6c 6c 2c 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 69 6d 67 7b 0a 09 2d 77 65 62 6b Data Ascii: px 0 5px}.left-block.img-description.small-pad{padding:0 5px 0 15px;text-align:right}.bottom-page.right-cell{text-align:right;width:50%}.bottom-page.bottom-align{vertical-align:bottom}.bottom-page.half-sized-cell,.bottom-page.img{-webk
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 74 6f 57 65 62 2c 73 6f 75 72 63 65 5f 73 61 6e 73 5f 70 72 6f 72 65 67 75 6c 61 72 2c 41 72 69 61 6c 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 6f 70 2d 64 61 72 6b 2d 69 6e 66 6f 20 61 2c 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 6f 70 2d 64 61 72 6b 2d 69 6e 66 6f 20 61 3a 76 69 73 69 74 65 64 7b 0a 09 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 6f 70 2d 64 61 72 6b 2d 69 6e 66 6f 2e 62 69 67 7b 0a 09 63 6f 6c 6f 72 Data Ascii: toWeb,source_sans_proregular,Arial;font-size:18px;line-height:24px;padding:0;position:relative}.bottom-page.top-dark-info a,.bottom-page.top-dark-info a:visited{color:inherit;text-decoration:underline}.bottom-page.top-dark-info.big{color
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 3a 61 66 74 65 72 2c 2e 6d 65 67 61 61 70 70 2d 6c 69 6e 75 78 20 2e 64 65 66 61 75 6c 74 2d 73 65 6c 65 63 74 2d 64 72 6f 70 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 75 6e 73 65 74 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 72 61 64 69 6f 2d 62 75 74 74 6f 6e 73 7b 0a 09 70 61 64 64 69 6e 67 3a 35 70 78 20 30 20 30 0a 7d 0a 2e 6d 65 67 61 61 70 70 2d 6c 69 6e 75 78 20 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 72 61 64 69 6f 2d 62 75 74 74 6f 6e 73 7b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 0a 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 09 6d 61 72 67 69 6e 3a Data Ascii: :after,.megaapp-linux .default-select-dropdown:before{content:unset}.bottom-page.radio-buttons{padding:5px 0 0}.megaapp-linux .bottom-page.radio-buttons{align-items:center;display:flex;flex-wrap:wrap;justify-content:space-between;margin:
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 61 6e 67 6c 65 2d 62 67 2e 62 6c 75 65 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 6d 65 67 61 2f 62 6f 74 74 6f 6d 2d 70 61 67 65 2f 62 75 73 69 6e 65 73 73 2d 62 67 33 40 32 78 2e 70 6e 67 3f 76 3d 31 31 34 30 66 62 38 32 36 66 34 36 30 36 64 65 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 30 3b 0a 09 62 6f 74 74 6f 6d 3a 61 75 74 6f 3b 0a 09 68 65 69 67 68 74 3a 31 33 34 33 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 2d 31 32 30 70 78 20 30 20 30 3b 0a 09 74 6f 70 3a 30 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 61 6e 67 6c 65 2d 62 67 2e 6c 69 67 68 74 2d 62 6c 75 65 7b Data Ascii: angle-bg.blue{background-color:initial;background-image:url(../images/mega/bottom-page/business-bg3@2x.png?v=1140fb826f4606de);background-position:center 0;bottom:auto;height:1343px;margin:-120px 0 0;top:0}.bottom-page.angle-bg.light-blue{
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 63 6f 6e 2d 69 6e 66 6f 7b 0a 09 63 6f 6c 6f 72 3a 23 30 30 30 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 65 63 6f 6e 64 2d 72 65 67 75 6c 61 72 29 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 34 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 32 30 70 78 20 30 20 30 0a 7d 0a 2e 65 6e 20 2e 61 66 66 69 6c 69 61 74 65 2e 69 63 6f 6e 2d 69 6e 66 6f 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 32 37 32 70 78 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 6c 61 72 67 65 2d 69 63 6f 6e 2e 74 6f 70 2d 70 61 64 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 31 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 Data Ascii: con-info{color:#000;font-family:var(--text-font-family-second-regular);font-size:28px;line-height:34px;padding:20px 0 0}.en .affiliate.icon-info{margin:0 auto;max-width:272px}.bottom-page.large-icon.top-pad{margin-top:61px}.affiliate
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 33 32 25 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 6d 69 64 2d 68 65 61 64 65 72 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 0a 7d 0a 2e 70 61 67 65 73 2d 6e 61 76 2e 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 2c 2e 70 61 67 65 73 2d 6e 61 76 2e 6e 61 76 2d 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 2e 67 72 65 79 65 64 2d 6f 75 74 20 2e 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 6f 70 2d 68 65 61 64 65 72 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 36 31 30 70 78 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 62 69 67 2d 69 63 6f 6e 73 2d 62 6c 7b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 Data Ascii: 32%}.bottom-page.mid-header{max-width:640px}.pages-nav.button-label,.pages-nav.nav-button.active.greyed-out .button-label{font-size:14px}.bottom-page.top-header{max-width:610px}.bottom-page.big-icons-bl{padding-left:10px;padding-right:10
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 66 61 71 2d 68 65 61 64 65 72 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 66 61 71 2d 73 75 62 68 65 61 64 65 72 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 30 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 72 65 66 65 72 2d 68 65 61 64 65 72 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 72 65 66 65 72 2d 74 78 74 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 69 63 6f 6e 2d 69 6e 66 6f 2c 2e 72 75 20 2e 61 66 66 69 6c 69 61 74 Data Ascii: }.affiliate.faq-header{font-size:16px}.affiliate.faq-subheader{font-size:14px;line-height:22px;margin-top:-10px;padding:0}.affiliate.refer-header{font-size:20px}.affiliate.refer-txt{font-size:14px}.affiliate.icon-info,.ru .affiliat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49741	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:43 UTC	423	OUT	GET /4/js/mega-6_f739f1b788e1aa846c5af53b37bf5835761d0f00a247ef0180f28edb71797578.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:43 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:43 GMT Content-Type: application/javascript Content-Length: 520394 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7f0ca" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:43 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 61 74 74 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6e 69 63 6b 6e 61 6d 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6d 65 67 61 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6d 65 67 61 50 72 6f 6d 69 73 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 72 65 71 73 74 61 74 63 6c 69 65 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6d 44 42 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6d 6f 75 73 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 64 61 74 61 73 74 72 75 63 74 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 69 64 62 6b 76 73 74 6f 72 61 67 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 73 68 61 72 65 64 6c 6f 63 61 6c 6b 76 73 74 6f 72 61 67 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 6c 76 73 74 6f 72 65 2e 6a 73 0a Data Ascii: /* Bundle Includes: * js/attr.js * js/ui/nicknames.js * js/mega.js * js/megaPromise.js * js/reqstatclient.js * js/mDB.js * js/mouse.js * js/datastructs.js * js/idbkvstorage.js * js/sharedlocalkvstorage.js * js/tlvstore.js
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 68 61 74 68 61 6e 64 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 69 5f 72 65 71 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 27 61 27 3a 20 27 6d 63 75 67 61 27 2c 20 22 70 68 22 3a 20 63 68 61 74 68 61 6e 64 6c 65 2c 20 27 75 27 3a 20 75 73 65 72 68 61 6e 64 6c 65 2c 20 27 75 61 27 3a 20 61 74 74 72 69 62 75 74 65 2c 20 27 76 27 3a 20 31 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 79 43 74 78 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 54 54 52 5f 52 45 51 5f 43 48 41 4e 4e 45 4c 5b 61 74 74 72 69 62 75 74 65 5d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: if (chathandle) { api_req( {'a': 'mcuga', "ph": chathandle, 'u': userhandle, 'ua': attribute, 'v': 1}, myCtx, ATTR_REQ_CHANNEL[attribute]
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 20 20 63 61 6c 6c 62 61 63 6b 28 72 65 73 2c 20 6d 79 43 74 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 69 73 5f 63 68 61 74 6c 69 6e 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 61 74 74 72 4e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 61 75 74 68 52 53 41 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 61 75 74 68 72 69 6e 67 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 61 75 74 68 43 75 32 35 35 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: callback(res, myCtx); } }; if (window.is_chatlink) { switch (attrName) { case 'authRSA': case 'authring': case 'authCu255': if (d) {
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 28 27 45 64 32 35 35 31 39 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 75 61 50 61 63 6b 65 74 50 61 72 73 65 72 48 61 6e 64 6c 65 72 5b 27 2a 21 61 75 74 68 52 53 41 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 68 72 69 6e 67 2e 67 65 74 43 6f 6e 74 61 63 74 73 28 27 52 53 41 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 75 61 50 61 63 6b 65 74 50 61 72 73 65 72 48 61 6e 64 6c 65 72 5b 27 2a 21 61 75 74 68 43 75 32 35 35 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 65 67 61 2e 6b 65 79 4d 67 72 2e 67 65 6e 65 72 61 74 69 6f 6e 29 20 7b 0a 20 20 20 20 Data Ascii: ('Ed25519'); } }; uaPacketParserHandler['!authRSA'] = function() { authring.getContacts('RSA'); }; uaPacketParserHandler['!authCu255'] = function() { if (!mega.keyMgr.generation) {
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 74 6f 72 79 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 47 65 74 20 6e 6f 74 69 66 69 65 64 20 61 62 6f 75 74 20 63 68 61 6e 67 65 73 2e 0a 20 20 20 20 20 20 20 20 6e 73 2e 63 68 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 63 74 6f 72 79 2e 63 68 61 6e 67 65 28 63 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 73 2c 20 27 6e 61 6d 65 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 Data Ascii: tory)); }; // Get notified about changes. ns.change = function(cb) { factory.change(cb); return this; }; Object.defineProperty(ns, 'name', { get: function() { re
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 73 61 76 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 61 6c 73 65 2c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 20 70 72 69 76 61 74 65 20 61 6e 64 20 65 6e 63 72 79 70 74 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 75 65 2c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 20 6e 6f 6e 2d 68 69 73 74 6f 72 69 63 2c 20 74 68 69 73 20 77 6f 6e 27 74 20 72 65 74 61 69 6e 20 70 72 65 76 69 6f 75 73 20 76 61 6c 75 65 73 20 6f 6e 20 41 50 49 20 73 65 72 76 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 61 6c 73 65 2c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4e 6f 20 63 61 6c 6c 62 61 63 6b 20 72 65 71 75 69 72 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: save false, // Set to private and encrypted true, // Set to non-historic, this won't retain previous values on API server false, // No callback required
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 6e 69 5d 20 26 26 20 73 63 71 5b 73 63 6e 69 5d 5b 31 5d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 63 6e 6f 64 65 73 20 26 26 20 73 63 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 63 6b 65 74 20 3d 20 70 61 63 6b 65 74 20 7c 7c 20 73 63 71 5b 73 63 6e 69 5d 5b 30 5d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 70 61 63 6b 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 73 63 5f 66 71 75 65 75 65 74 3a 20 69 6e 76 61 6c 69 64 20 70 61 63 6b 65 74 21 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 20 3e 20 Data Ascii: ni] && scq[scni][1]; if (scnodes && scnodes.length) { packet = packet \|\| scq[scni][0]; if (!packet) { console.error('sc_fqueuet: invalid packet!'); } else { if (d >
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 72 69 6e 67 20 73 68 61 72 65 20 64 69 61 6c 6f 67 20 72 65 6d 6f 76 61 6c 20 6f 66 20 63 6f 6e 74 61 63 74 20 66 72 6f 6d 20 73 68 61 72 65 20 6c 69 73 74 29 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 73 20 74 68 69 73 20 61 20 66 75 6c 6c 20 73 68 61 72 65 20 64 65 6c 65 74 65 3f 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 2e 72 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 66 69 6c 6c 20 44 44 4c 20 77 69 74 68 20 72 65 6d 6f 76 65 64 20 63 6f 6e 74 61 63 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 2e 75 20 26 26 20 4d 2e 75 5b 61 2e 75 5d 20 26 26 20 4d 2e 75 5b 61 2e 75 5d 2e 6d 20 26 26 20 21 69 73 5f 6d 6f 62 69 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 Data Ascii: ring share dialog removal of contact from share list) // is this a full share delete? if (a.r === undefined) { // fill DDL with removed contact if (a.u && M.u[a.u] && M.u[a.u].m && !is_mobile) { var
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 20 20 20 4d 2e 63 68 65 63 6b 53 74 6f 72 61 67 65 51 75 6f 74 61 28 32 65 33 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 2f 2f 20 50 61 79 6d 65 6e 74 20 72 65 6d 69 6e 64 65 72 0a 73 63 70 61 72 73 65 72 2e 24 61 64 64 28 27 70 73 65 73 27 2c 20 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 69 66 20 28 21 66 6f 6c 64 65 72 6c 69 6e 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 6e 6f 74 69 66 79 2e 6e 6f 74 69 66 79 46 72 6f 6d 41 63 74 69 6f 6e 50 61 63 6b 65 74 28 61 29 2e 63 61 74 63 68 28 64 75 6d 70 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 2f 2f 20 50 61 79 6d 65 6e 74 20 63 61 72 64 20 73 74 61 74 75 73 0a 73 63 70 61 72 73 65 72 2e 24 61 64 64 28 27 63 63 65 Data Ascii: M.checkStorageQuota(2e3); }); }});// Payment reminderscparser.$add('pses', function(a) { 'use strict'; if (!folderlink) { notify.notifyFromActionPacket(a).catch(dump); }});// Payment card statusscparser.$add('cce
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 49 6e 62 6f 78 49 44 27 2c 20 27 52 75 62 62 69 73 68 49 44 27 5d 5b 6e 6f 64 65 2e 74 20 2d 20 32 5d 5d 20 3d 20 6e 6f 64 65 2e 68 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 52 65 63 65 69 76 65 64 20 70 61 72 65 6e 74 2d 6c 65 73 73 20 6e 6f 64 65 20 6f 66 20 74 79 70 65 20 22 20 2b 20 6e 6f 64 65 2e 74 20 2b 20 22 3a 20 22 20 2b 20 6e 6f 64 65 2e 68 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 73 72 76 6c 6f 67 32 28 27 70 61 72 65 6e 74 2d 6c 65 73 73 27 2c 20 6e 6f 64 65 2e 74 2c 20 6e 6f 64 65 2e 68 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 21 6e 6f 64 65 2e 68 20 7c 7c 20 Data Ascii: InboxID', 'RubbishID'][node.t - 2]] = node.h; } else { if (d) { console.error("Received parent-less node of type " + node.t + ": " + node.h); } srvlog2('parent-less', node.t, node.h); } if (!node.h \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49744	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:43 UTC	618	OUT	GET /4/html/templates_682231e1ad6ee170c226cb45a530ca090c6267ec93dff7cb2a70101d9be0bac8.json HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:43 UTC	371	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:43 GMT Content-Type: application/json Content-Length: 745464 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-b5ff8" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:43 UTC	16013	IN	Data Raw: 7b 22 74 72 61 6e 73 66 65 72 77 69 64 67 65 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 62 6c 6f 63 6b 20 68 69 64 64 65 6e 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 63 69 72 63 6c 65 20 70 65 72 63 65 6e 74 73 2d 30 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 61 72 72 6f 77 73 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 74 6f 6f 6c 74 69 70 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 69 63 6f 6e 20 75 70 6c 6f 61 64 69 6e 67 20 68 69 64 64 65 6e 5c 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 74 78 74 5c 22 3e 5b 24 31 31 35 35 5d 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: {"transferwidget":"<div class=\"widget-block hidden\"> <div class=\"widget-circle percents-0\"> <div class=\"widget-arrows\"> <div class=\"widget-tooltip\"> <div class=\"widget-icon uploading hidden\"> <span class=\"widget-txt\">[$1155]</span> <span class
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 6f 64 79 5c 22 3e 20 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 6c 69 6e 6b 73 5c 22 3e 20 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 64 2d 64 6f 74 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 61 74 75 73 2d 64 72 6f 70 64 6f 77 6e 5c 22 3e 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 64 72 6f 70 62 74 6e 5c 22 3e 20 3c 73 70 61 6e 3e 5b 24 32 34 38 34 35 5d 3c 2f 73 70 61 6e 3e 20 3c 69 20 63 6c 61 73 73 3d 5c 22 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 20 69 63 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 20 78 31 5c 22 3e 3c 2f 69 3e 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 65 6e 74 5c 22 3e 20 Data Ascii: v> </div> <div class=\"body\"> <ul class=\"links\"> <li class=\"no-red-dot\"> <div class=\"status-dropdown\"> <button class=\"dropbtn\"> <span>[$24845]</span> <i class=\"sprite-fm-mono icon-arrow-right x1\"></i> </button> <div class=\"dropdown-content\">
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 6f 62 6a 65 63 74 73 74 6f 72 61 67 65 5c 22 3e 5b 24 66 6f 6f 74 65 72 5f 69 74 65 6d 5f 6f 62 6a 65 63 74 5f 73 74 6f 72 61 67 65 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 73 79 6e 63 69 6e 67 5c 22 3e 5b 24 66 6f 6f 74 65 72 5f 69 74 65 6d 5f 73 79 6e 63 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 67 61 62 61 63 6b 75 70 5c 22 3e 5b 24 66 74 5f 62 61 63 6b 75 70 5f 74 61 62 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 73 68 61 72 65 5c 22 3e 5b 24 66 6f 6f 74 65 72 5f 69 74 65 6d 5f 73 68 61 72 Data Ascii: v class=\"top-menu-item objectstorage\">[$footer_item_object_storage]</div> <div class=\"top-menu-item syncing\">[$footer_item_sync]</div> <div class=\"top-menu-item megabackup\">[$ft_backup_tab]</div> <div class=\"top-menu-item share\">[$footer_item_shar
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 65 78 74 72 61 2d 64 65 74 61 69 6c 73 5c 22 3e 20 3c 74 64 20 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 65 78 74 72 61 2d 64 65 73 63 5c 22 3e 20 3c 2f 74 64 3e 20 3c 74 64 20 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 65 78 74 72 61 2d 76 61 6c 5c 22 3e 20 3c 2f 74 64 3e 20 3c 2f 74 72 3e 20 3c 74 72 20 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 62 72 65 61 6b 64 6f 77 6e 2d 74 62 2d 74 6f 74 61 6c 5c 22 3e 20 3c 74 64 3e 5b 24 32 34 39 37 36 5d 3c 2f 74 64 3e 20 3c 74 64 20 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 74 64 2d 74 6f 74 61 6c 5c 22 20 63 6f 6c 73 70 61 6e 3d 5c 22 32 5c 22 3e 20 3c 2f 74 64 3e 20 3c 2f 74 72 3e 20 3c 2f 74 61 62 6c 65 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 Data Ascii: class=\"repay-extra-details\"> <td class=\"repay-extra-desc\"> </td> <td class=\"repay-extra-val\"> </td> </tr> <tr class=\"repay-breakdown-tb-total\"> <td>[$24976]</td> <td class=\"repay-td-total\" colspan=\"2\"> </td> </tr> </table> </div> </div> <div c
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 70 72 69 74 65 20 69 2d 69 63 6f 6e 20 73 69 6d 70 6c 65 74 69 70 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 3d 5c 22 5b 24 32 33 38 30 38 5d 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 70 6f 73 69 74 69 6f 6e 3d 5c 22 74 6f 70 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 6f 66 66 73 65 74 3d 5c 22 33 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 2d 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 74 69 70 20 74 72 61 6e 73 66 6f 72 6d 65 64 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 77 72 61 70 70 65 72 3d 5c 22 2e 63 6f 6e 74 65 6e 74 5c 22 3e 3c 2f 69 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 61 67 65 20 70 6c 61 6e 2d 66 65 61 74 75 72 65 5c 22 3e 20 3c 73 70 61 6e 3e Data Ascii: prite i-icon simpletip\" data-simpletip=\"[$23808]\" data-simpletipposition=\"top\" data-simpletipoffset=\"3\" data-simpletip-class=\"pricing-tip transformed\" data-simpletipwrapper=\".content\"></i> </div> <div class=\"pricing-page plan-feature\"> <span>
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 61 67 65 20 63 6f 6d 70 61 72 65 2d 74 69 74 6c 65 5c 22 3e 44 52 4f 50 42 4f 58 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 61 67 65 20 63 6f 6d 70 61 72 65 2d 73 74 6f 72 61 67 65 5c 22 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 61 67 65 20 63 6f 6d 70 61 72 65 2d 70 72 69 63 65 20 62 6c 75 65 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 65 5c 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 73 74 61 72 5c 22 3e 26 23 31 30 30 33 33 3b 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 73 74 61 72 20 67 72 65 65 6e 5c 22 3e 26 23 39 37 33 33 3b 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: age compare-title\">DROPBOX</div> <div class=\"pricing-page compare-storage\"></div> <div class=\"pricing-page compare-price blue\"><span class=\"price\"></span><span class=\"star\">✱</span><span class=\"star green\">★</span></div> <div class
2024-07-11 11:36:43 UTC	16384	IN	Data Raw: 67 2d 72 61 64 69 6f 2d 62 74 6e 5c 22 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 5c 22 3e 20 5b 24 32 33 37 38 30 5d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 67 20 70 65 72 69 6f 64 2d 6e 6f 74 65 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 65 72 69 6f 64 2d 6e 6f 74 65 2d 74 78 74 5c 22 3e 20 5b 24 70 72 5f 73 61 76 65 5f 74 69 70 5d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 67 20 70 69 63 6b 2d 70 65 72 69 6f 64 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: g-radio-btn\"></div> <div class=\"pricing-radio-label\"> [$23780] </div> </div> </div> </div> <div class=\"pricing-pg period-note-container\"> <div class=\"period-note-txt\"> [$pr_save_tip] </div> </div> </div> <div class=\"pricing-pg pick-period-containe
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 72 62 20 62 67 2d 67 72 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c 22 6d 69 6e 75 73 2d 69 63 6f 6e 5c 22 3e 3c 2f 69 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 2d 63 6f 6d 70 61 72 65 2d 74 61 62 6c 65 2d 69 74 65 6d 20 70 72 6f 2d 65 78 63 2d 6f 66 66 65 72 20 63 65 6e 74 65 72 20 72 62 20 62 67 2d 67 72 20 68 69 64 64 65 6e 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c 22 67 72 65 79 2d 73 6d 61 6c 6c 2d 63 68 65 63 6b 2d 74 69 63 6b 5c 22 3e 3c 2f 69 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 2d 63 6f 6d 70 61 72 65 2d 74 61 62 6c 65 2d 69 74 65 6d 20 70 72 6f 20 63 65 6e 74 65 72 20 72 62 20 62 67 2d 67 72 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c Data Ascii: rb bg-gr\"><i class=\"minus-icon\"></i></div> <div class=\"pricing-plans-compare-table-item pro-exc-offer center rb bg-gr hidden\"><i class=\"grey-small-check-tick\"></i></div> <div class=\"pricing-plans-compare-table-item pro center rb bg-gr\"><i class=\
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 2d 62 6c 6f 63 6b 2d 65 73 74 69 6d 61 74 6f 72 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 5c 22 3e 31 30 30 20 5b 24 32 30 31 36 30 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 66 6c 65 78 69 2d 62 6c 6f 63 6b 2d 65 73 74 69 6d 61 74 6f 72 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 5c 22 3e 31 20 5b 24 32 33 30 36 31 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 66 6c 65 78 69 2d 62 6c 6f 63 6b 2d 65 73 74 69 6d 61 74 6f 72 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 5c 22 3e 31 30 20 5b 24 32 33 30 36 31 5d 3c 2f 64 69 76 3e 20 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 66 6c 65 78 69 2d 73 6c 69 64 65 72 5c 22 20 74 79 70 65 3d 5c 22 72 61 6e 67 65 5c 22 20 69 64 3d Data Ascii: -block-estimator-slider-mark\">100 [$20160]</div> <div class=\"pricing-flexi-block-estimator-slider-mark\">1 [$23061]</div> <div class=\"pricing-flexi-block-estimator-slider-mark\">10 [$23061]</div> <input class=\"pricing-flexi-slider\" type=\"range\" id=
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 73 75 62 6d 65 6e 75 2d 69 74 65 6d 20 6c 61 6e 67 75 61 67 65 73 20 73 6d 61 6c 6c 2d 70 61 64 5c 22 3e 20 3c 69 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 63 6f 6e 20 6d 65 6e 75 73 2d 73 70 72 69 74 65 20 67 6c 6f 62 65 5c 22 3e 3c 2f 69 3e 20 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 20 3c 69 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 63 6f 6e 20 6d 65 6e 75 73 2d 73 70 72 69 74 65 20 72 69 67 68 74 2d 61 72 72 6f 77 20 69 6e 6c 69 6e 65 20 64 6f 77 6e 5c 22 3e 3c 2f 69 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 73 75 62 6d 65 6e 75 20 6c 61 6e 67 75 61 67 65 2d 69 74 65 6d 73 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f Data Ascii: ass=\"top-menu-item submenu-item languages small-pad\"> <i class=\"top-menu-icon menus-sprite globe\"></i> <span></span> <i class=\"top-menu-icon menus-sprite right-arrow inline down\"></i> </div> <div class=\"top-submenu language-items\"> <div class=\"to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49743	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:43 UTC	423	OUT	GET /4/js/mega-7_153ed2950ad758d1645d036bce30e293ae066ba6266e32e02dfa754b7bb34bfc.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:43 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:43 GMT Content-Type: application/javascript Content-Length: 501735 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7a7e7" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:43 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 61 75 74 68 72 69 6e 67 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 6c 6f 67 69 6e 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 65 78 70 6f 72 74 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 6b 65 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 73 69 6d 70 6c 65 74 69 70 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 73 65 72 61 76 61 74 61 72 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 62 6f 74 74 6f 6d 70 61 67 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 69 6c 65 64 72 61 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 68 75 6d 62 6e 61 69 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 65 78 69 66 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f Data Ascii: /* Bundle Includes: * js/authring.js * html/js/login.js * js/ui/export.js * html/js/key.js * js/ui/simpletip.js * js/useravatar.js * html/js/bottompage.js * js/filedrag.js * js/thumbnail.js * js/vendor/exif.js * js/vendor/
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 6c 6c 69 6e 67 20 61 75 74 68 72 69 6e 67 2e 67 65 74 43 6f 6e 74 61 63 74 73 28 29 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 73 65 72 68 61 6e 64 6c 65 20 3d 3d 3d 20 75 5f 68 61 6e 64 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 74 72 61 63 6b 20 6f 75 72 73 65 6c 66 2e 20 4c 65 74 27 73 20 67 65 74 20 6f 75 74 20 6f 66 20 68 65 72 65 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 6c 64 52 65 63 6f 72 64 20 3d 20 75 5f 61 75 74 68 72 69 6e 67 5b 6b 65 79 54 79 70 65 5d 5b 75 73 65 72 68 61 6e 64 Data Ascii: lling authring.getContacts()'); return; } if (userhandle === u_handle) { // We don't want to track ourself. Let's get out of here. return; } var oldRecord = u_authring[keyType][userhand
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 73 65 2e 66 61 69 6c 28 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 74 74 72 69 62 75 74 65 50 72 6f 6d 69 73 65 52 65 6a 65 63 74 28 72 65 73 75 6c 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 75 6c 74 20 3d 3d 3d 20 45 4e 4f 45 4e 54 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 20 64 6f 6e 27 74 20 68 61 76 65 20 69 74 20 73 65 74 20 75 70 2c 20 79 65 74 2e 20 4c 65 74 27 73 20 64 6f 20 73 6f 20 6e 6f 77 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 67 67 65 72 2e 77 61 72 6e 28 27 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 79 73 74 65 6d 20 73 65 65 6d 73 20 6e 6f 6e 2d 65 78 69 73 74 65 6e 74 2e 20 53 65 74 74 69 6e 67 20 75 70 20 2e 2e 2e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: se.fail(function __attributePromiseReject(result) { if (result === ENOENT) { // We don't have it set up, yet. Let's do so now. logger.warn('Authentication system seems non-existent. Setting up ...');
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 6f 72 20 28 6c 65 74 20 78 20 3d 20 75 73 65 72 73 2e 6c 65 6e 67 74 68 3b 20 78 2d 2d 3b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 73 73 65 72 74 28 21 73 74 6f 72 65 5b 75 73 65 72 73 5b 78 5d 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 6f 72 65 5b 75 73 65 72 73 5b 78 5d 5d 20 3d 20 64 61 74 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6e 73 2e 73 65 74 43 6f 6e 74 61 63 74 73 28 74 79 70 65 29 2e 64 75 6d 70 28 60 73 65 74 43 6f 6e 74 61 63 74 73 2e 24 7b 74 79 70 65 7d 60 29 29 2e 63 61 74 63 68 28 64 75 6d 70 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 61 77 61 69 74 20 74 53 6c 65 Data Ascii: or (let x = users.length; x--;) { assert(!store[users[x]]); store[users[x]] = data; } await Promise.resolve(ns.setContacts(type).dump(`setContacts.${type}`)).catch(dump); } await tSle
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 6b 2e 6b 65 79 20 69 6e 70 75 74 27 2c 20 24 74 68 69 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 57 69 74 68 6f 75 74 4b 65 79 20 3d 20 24 6c 69 6e 6b 49 6e 70 75 74 2e 64 61 74 61 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6b 65 79 20 3d 20 24 6c 69 6e 6b 49 6e 70 75 74 2e 64 61 74 61 28 27 6b 65 79 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 6b 65 79 20 77 69 74 68 6f 75 74 20 23 20 6f 72 20 21 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 6b 65 79 49 6e 70 75 74 2e 76 61 6c 28 24 6b 65 79 49 6e 70 75 74 2e 64 61 74 61 28 27 6b 65 79 27 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 Data Ascii: k.key input', $this); var linkWithoutKey = $linkInput.data('link'); var key = $linkInput.data('key'); // Set key without # or ! $keyInput.val($keyInput.data('key')); // Set
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 2e 6a 73 2d 75 70 64 61 74 65 2d 73 75 63 63 65 73 73 2d 62 61 6e 6e 65 72 27 2c 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 50 72 65 70 61 72 65 20 4d 65 67 61 49 6e 70 75 74 20 66 69 65 6c 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 67 61 2e 75 69 2e 4d 65 67 61 49 6e 70 75 74 73 28 24 70 61 73 73 77 6f 72 64 49 6e 70 75 74 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 48 69 64 65 20 70 72 65 76 69 6f 75 73 20 65 72 72 6f 72 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 70 61 73 73 77 6f 72 64 49 6e 70 75 74 2e 64 61 74 61 28 27 4d 65 67 61 49 6e 70 75 74 73 27 29 2e 68 69 64 65 45 72 72 6f 72 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 47 65 74 20 74 68 65 20 70 61 73 73 Data Ascii: .js-update-success-banner', this.$dialog); // Prepare MegaInput field mega.ui.MegaInputs($passwordInput); // Hide previous errors $passwordInput.data('MegaInputs').hideError(); // Get the pass
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 4b 65 79 42 79 74 65 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 61 63 4b 65 79 42 79 74 65 73 20 3d 20 64 65 72 69 76 65 64 4b 65 79 42 79 74 65 73 2e 73 75 62 61 72 72 61 79 28 6d 61 63 4b 65 79 53 74 61 72 74 4f 66 66 73 65 74 2c 20 6d 61 63 4b 65 79 45 6e 64 4f 66 66 73 65 74 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 6d 70 75 74 65 20 74 68 65 20 4d 41 43 20 6f 76 65 72 20 74 68 65 20 64 61 74 61 20 74 6f 20 76 65 72 69 66 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 54 6f 56 65 72 69 66 79 42 79 74 65 73 20 3d 20 64 65 63 6f 64 65 64 42 79 74 65 73 2e 73 75 62 61 72 72 61 79 28 30 2c 20 6d 61 63 53 74 61 72 74 4f 66 66 73 65 74 29 3b 0a Data Ascii: KeyBytes.length; var macKeyBytes = derivedKeyBytes.subarray(macKeyStartOffset, macKeyEndOffset); // Compute the MAC over the data to verify var dataToVerifyBytes = decodedBytes.subarray(0, macStartOffset);
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 6c 5b 34 31 35 5d 2c 20 6c 5b 34 31 36 5d 2c 20 6c 5b 34 31 37 5d 2c 20 6c 5b 34 31 38 5d 2c 20 6c 5b 34 31 39 5d 20 20 20 20 20 20 2f 2f 20 4a 75 6c 79 20 2d 20 44 65 63 65 6d 62 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 5b 32 34 30 33 35 5d 2c 20 6c 5b 32 34 30 33 37 5d 2c 20 6c 5b 32 34 30 33 36 5d 2c 20 6c 5b 32 34 30 33 38 5d 2c 20 6c 5b 32 34 30 34 37 5d 2c 20 6c 5b 32 34 30 33 39 5d 2c 20 20 20 20 20 2f 2f 20 4a 61 6e 75 61 72 79 20 2d 20 4a 75 6e 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 5b 32 34 30 34 30 5d 2c 20 6c 5b 32 34 30 34 31 5d 2c 20 Data Ascii: l[415], l[416], l[417], l[418], l[419] // July - December ], monthsShort: [ l[24035], l[24037], l[24036], l[24038], l[24047], l[24039], // January - June l[24040], l[24041],
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 63 72 6f 6c 6c 5b 30 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 47 65 6e 65 72 61 74 65 20 63 6f 6e 74 65 6e 74 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 3d 20 69 74 65 6d 45 78 70 6f 72 74 4c 69 6e 6b 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 69 6c 6c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 68 74 6d 6c 2e 6c 65 6e 67 74 68 29 20 7b 20 2f 2f 20 73 6f 6d 65 20 68 6f 77 20 77 65 20 64 6f 6e 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 73 67 44 69 61 6c 6f 67 28 27 77 61 72 6e 69 6e 67 61 27 2c 20 6c 5b 31 37 35 36 34 5d 2c 20 6c 5b 31 37 35 36 35 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 Data Ascii: croll[0]); } // Generate content html = itemExportLink(); // Fill with content if (!html.length) { // some how we dont have a link msgDialog('warninga', l[17564], l[17565]); return true;
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 65 67 61 2e 69 63 75 2e 66 6f 72 6d 61 74 28 6c 2e 74 6f 61 73 74 5f 63 6f 70 79 5f 6c 69 6e 6b 2c 20 6c 69 6e 6b 73 4e 75 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 61 73 74 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 61 6e 64 20 64 61 74 61 20 74 6f 20 63 6f 70 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 20 3d 20 24 2e 74 72 69 6d 28 67 65 74 43 6c 69 70 62 6f 61 72 64 4c 69 6e 6b 73 28 24 69 74 65 6d 2c 20 6d 6f 64 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 70 79 20 74 6f 20 63 6c 69 70 62 6f 61 72 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 70 79 54 6f 43 6c 69 Data Ascii: ega.icu.format(l.toast_copy_link, linksNum); } // Set toast notification and data to copy data = $.trim(getClipboardLinks($item, mode)); } // Copy to clipboard copyToCli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49746	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:44 UTC	611	OUT	GET /4/js/mega-8_5a0bd51c94a07cd5a5806408f32c247ce16f51db3df2d3992bdd9272478af76d.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:44 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:44 GMT Content-Type: application/javascript Content-Length: 86811 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-1531b" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:44 UTC	16008	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6c 61 6e 67 75 61 67 65 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 63 6f 6d 6d 65 72 63 69 61 6c 73 2e 6a 73 0a 20 2a 2f 0a 0a 2f 2a 21 0a 20 2a 20 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 20 76 31 2e 35 2e 37 20 2d 20 6d 65 67 61 2e 6e 7a 20 62 75 69 6c 64 2e 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 79 75 6e 6a 65 20 4a 75 6e 2c 20 4d 44 42 6f 6f 74 73 74 72 61 70 20 61 6e 64 20 43 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 0a 20 2a 2f 0a 0a 28 66 75 6e Data Ascii: /* Bundle Includes: * js/vendor/perfect-scrollbar.js * js/ui/languageDialog.js * js/ui/commercials.js //! * perfect-scrollbar v1.5.7 - mega.nz build. * Copyright 2024 Hyunje Jun, MDBootstrap and Contributors * Licensed under MIT */(fun
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 68 74 5d 20 2d 20 69 5b 73 63 72 6f 6c 6c 62 61 72 59 48 65 69 67 68 74 5d 29 3b 0a 20 20 20 20 20 20 69 66 20 28 21 74 6f 75 63 68 4d 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 2e 65 76 65 6e 74 2e 62 69 6e 64 28 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 20 27 6d 6f 75 73 65 6d 6f 76 65 27 2c 20 6d 6f 75 73 65 4d 6f 76 65 48 61 6e 64 6c 65 72 29 3b 0a 20 20 20 20 20 20 20 20 69 2e 65 76 65 6e 74 2e 6f 6e 63 65 28 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 20 27 6d 6f 75 73 65 75 70 27 2c 20 6d 6f 75 73 65 55 70 48 61 6e 64 6c 65 72 29 3b 0a 20 20 20 20 20 20 20 20 69 2e 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 65 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 69 2e Data Ascii: ht] - i[scrollbarYHeight]); if (!touchMode) { i.event.bind(i.ownerDocument, 'mousemove', mouseMoveHandler); i.event.once(i.ownerDocument, 'mouseup', mouseUpHandler); i.event.preventDefault(e, false); } else { i.
2024-07-11 11:36:44 UTC	16384	IN	Data Raw: 65 79 5d 20 3d 20 75 73 65 72 53 65 74 74 69 6e 67 73 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 48 65 69 67 68 74 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 65 6e 74 57 69 64 74 68 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 65 6e 74 48 65 69 67 68 74 20 3d 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 66 6f 63 75 73 20 3d 20 28 29 20 3d 3e 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 63 6c 73 2e 73 74 61 74 65 2e 66 6f 63 75 73 29 3b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 62 6c 75 72 20 3d 20 28 Data Ascii: ey] = userSettings[key]; } this.containerWidth = null; this.containerHeight = null; this.contentWidth = null; this.contentHeight = null; const focus = () => element.classList.add(cls.state.focus); const blur = (
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 3b 20 20 20 20 20 20 20 20 2f 2f 20 48 61 76 65 20 61 64 48 61 6e 64 6c 65 72 73 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 7a 65 64 0a 20 20 20 20 6c 65 74 20 69 73 4d 6f 62 69 6c 65 43 6c 6f 75 64 44 72 69 76 65 3b 20 20 20 20 20 2f 2f 20 54 72 75 65 20 69 66 20 63 75 72 72 65 6e 74 20 70 61 67 65 20 69 73 20 6d 6f 62 69 6c 65 20 68 6f 6d 65 2c 20 61 6e 64 20 73 65 6c 65 63 74 65 64 20 74 61 62 20 69 73 20 63 6c 6f 75 64 20 64 72 69 76 65 0a 20 20 20 20 6c 65 74 20 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 41 63 74 69 76 65 3b 20 20 20 20 20 20 20 20 2f 2f 20 41 72 65 20 74 68 65 72 65 20 61 6e 79 20 63 75 72 72 65 6e 74 20 72 65 73 69 7a 65 20 68 61 6e 64 6c 65 72 73 20 61 63 74 69 76 65 20 66 6f 72 20 63 6f 6d 6d 73 0a 20 20 20 20 6c 65 74 20 63 6f 6d 6d Data Ascii: ; // Have adHandlers been initialized let isMobileCloudDrive; // True if current page is mobile home, and selected tab is cloud drive let resizeHandlerActive; // Are there any current resize handlers active for comms let comm
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 69 6e 67 2e 64 65 6c 65 74 65 28 63 6f 6d 6d 49 44 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 63 6c 6f 73 65 42 75 74 74 6f 6e 20 3d 20 24 63 6c 6f 73 65 42 75 74 74 6f 6e 20 26 26 20 24 63 6c 6f 73 65 42 75 74 74 6f 6e 5b 30 5d 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 24 63 6c 6f 73 65 42 75 74 74 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3a 20 63 75 72 72 65 6e 74 50 61 67 65 20 3d 3d 3d 20 27 66 69 6c 65 6c 69 6e 6b 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 24 28 27 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 20 2e 64 6f 77 Data Ascii: loading.delete(commID); } }; $closeButton = $closeButton && $closeButton[0].length ? $closeButton : currentPage === 'filelink' ? $('.bottom-page .dow
2024-07-11 11:36:45 UTC	5267	IN	Data Raw: 20 20 20 20 24 66 69 6c 65 4d 61 6e 61 67 65 72 42 6c 6f 63 6b 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 6c 6f 74 50 61 72 65 6e 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 66 69 6c 65 50 72 65 76 69 65 77 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 69 64 65 43 6f 6d 6d 73 28 61 63 74 69 76 65 53 6c 6f 74 73 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 53 6c 6f 74 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 41 63 74 69 76 65 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 70 64 61 74 65 52 65 73 69 7a 65 48 61 6e 64 6c 65 72 Data Ascii: $fileManagerBlock = undefined; $slotParent = undefined; $filePreview = undefined; hideComms(activeSlots, true); activeSlots = []; resizeHandlerActive = false; updateResizeHandler

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49745	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:44 UTC	425	OUT	GET /4/css/mega-1_73f0048e4f39d5ec99a6cd1b8e309b77eaccdbe1eaaf31c05e2b8e660919fdd0.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:45 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:44 GMT Content-Type: text/css Content-Length: 476787 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-74673" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:45 UTC	16021	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 61 76 61 74 61 72 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 66 6f 6e 74 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 6f 74 74 6f 6d 2d 70 61 67 65 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 6f 74 74 6f 6d 2d 6d 65 6e 75 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 75 73 69 6e 65 73 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 70 72 6f 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 70 6c 61 6e 70 72 69 63 69 6e 67 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 74 61 72 74 70 61 67 65 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 69 63 6f 6e 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 69 6e 6e 65 72 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 75 73 69 6e 65 73 Data Ascii: /* Bundle Includes: * css/avatars.css * css/fonts.css * css/bottom-pages.css * css/bottom-menu.css * css/business.css * css/pro.css * css/planpricing.css * css/startpage.css * css/icons.css * css/spinners.css * css/busines
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 28 22 73 76 67 22 29 3b 0a 09 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 0a 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 5f 63 6f 64 65 5f 70 72 6f 72 65 67 75 6c 61 72 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 0a 09 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 63 6f 64 65 70 72 6f 2d 72 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 32 3f 76 3d 61 62 34 64 64 37 35 63 61 62 32 33 35 33 39 39 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 0a 20 20 20 20 20 20 20 20 20 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 63 6f 64 Data Ascii: ("svg");text-rendering:optimizeLegibility}@font-face{font-family:source_code_proregular;font-style:normal;font-weight:400;src:url(../fonts/sourcecodepro-regular-webfont.woff2?v=ab4dd75cab235399) format("woff2"), url(../fonts/sourcecod
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 72 61 6e 73 70 61 72 65 6e 74 2c 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 77 68 69 74 65 2d 62 6c 6f 63 6b 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 64 61 72 6b 2d 62 6c 75 65 2d 67 72 61 64 69 65 6e 74 7b 0a 09 62 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 33 31 64 32 34 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 31 33 31 64 32 34 20 30 2c 20 23 32 62 32 65 33 30 20 34 36 25 2c 20 23 32 39 33 30 33 33 20 31 30 30 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 Data Ascii: kground-color:#fff}.bottom-page.transparent,.bottom-page.white-block{font-size:0;overflow:hidden}.bottom-page.dark-blue-gradient{bbackground:#131d24;background:-moz-linear-gradient(top, #131d24 0, #2b2e30 46%, #293033 100%);background:-webki
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 70 78 20 30 20 35 70 78 0a 7d 0a 2e 6c 65 66 74 2d 62 6c 6f 63 6b 2e 69 6d 67 2d 64 65 73 63 72 69 70 74 69 6f 6e 2e 73 6d 61 6c 6c 2d 70 61 64 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 35 70 78 20 30 20 31 35 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 72 69 67 68 74 2d 63 65 6c 6c 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 0a 09 77 69 64 74 68 3a 35 30 25 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 62 6f 74 74 6f 6d 2d 61 6c 69 67 6e 7b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 68 61 6c 66 2d 73 69 7a 65 64 2d 63 65 6c 6c 2c 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 69 6d 67 7b 0a 09 2d 77 65 62 6b Data Ascii: px 0 5px}.left-block.img-description.small-pad{padding:0 5px 0 15px;text-align:right}.bottom-page.right-cell{text-align:right;width:50%}.bottom-page.bottom-align{vertical-align:bottom}.bottom-page.half-sized-cell,.bottom-page.img{-webk
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 74 6f 57 65 62 2c 73 6f 75 72 63 65 5f 73 61 6e 73 5f 70 72 6f 72 65 67 75 6c 61 72 2c 41 72 69 61 6c 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 6f 70 2d 64 61 72 6b 2d 69 6e 66 6f 20 61 2c 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 6f 70 2d 64 61 72 6b 2d 69 6e 66 6f 20 61 3a 76 69 73 69 74 65 64 7b 0a 09 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 6f 70 2d 64 61 72 6b 2d 69 6e 66 6f 2e 62 69 67 7b 0a 09 63 6f 6c 6f 72 Data Ascii: toWeb,source_sans_proregular,Arial;font-size:18px;line-height:24px;padding:0;position:relative}.bottom-page.top-dark-info a,.bottom-page.top-dark-info a:visited{color:inherit;text-decoration:underline}.bottom-page.top-dark-info.big{color
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 3a 61 66 74 65 72 2c 2e 6d 65 67 61 61 70 70 2d 6c 69 6e 75 78 20 2e 64 65 66 61 75 6c 74 2d 73 65 6c 65 63 74 2d 64 72 6f 70 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 75 6e 73 65 74 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 72 61 64 69 6f 2d 62 75 74 74 6f 6e 73 7b 0a 09 70 61 64 64 69 6e 67 3a 35 70 78 20 30 20 30 0a 7d 0a 2e 6d 65 67 61 61 70 70 2d 6c 69 6e 75 78 20 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 72 61 64 69 6f 2d 62 75 74 74 6f 6e 73 7b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 0a 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 09 6d 61 72 67 69 6e 3a Data Ascii: :after,.megaapp-linux .default-select-dropdown:before{content:unset}.bottom-page.radio-buttons{padding:5px 0 0}.megaapp-linux .bottom-page.radio-buttons{align-items:center;display:flex;flex-wrap:wrap;justify-content:space-between;margin:
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 61 6e 67 6c 65 2d 62 67 2e 62 6c 75 65 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 6d 65 67 61 2f 62 6f 74 74 6f 6d 2d 70 61 67 65 2f 62 75 73 69 6e 65 73 73 2d 62 67 33 40 32 78 2e 70 6e 67 3f 76 3d 31 31 34 30 66 62 38 32 36 66 34 36 30 36 64 65 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 30 3b 0a 09 62 6f 74 74 6f 6d 3a 61 75 74 6f 3b 0a 09 68 65 69 67 68 74 3a 31 33 34 33 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 2d 31 32 30 70 78 20 30 20 30 3b 0a 09 74 6f 70 3a 30 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 61 6e 67 6c 65 2d 62 67 2e 6c 69 67 68 74 2d 62 6c 75 65 7b Data Ascii: angle-bg.blue{background-color:initial;background-image:url(../images/mega/bottom-page/business-bg3@2x.png?v=1140fb826f4606de);background-position:center 0;bottom:auto;height:1343px;margin:-120px 0 0;top:0}.bottom-page.angle-bg.light-blue{
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 63 6f 6e 2d 69 6e 66 6f 7b 0a 09 63 6f 6c 6f 72 3a 23 30 30 30 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 65 63 6f 6e 64 2d 72 65 67 75 6c 61 72 29 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 34 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 32 30 70 78 20 30 20 30 0a 7d 0a 2e 65 6e 20 2e 61 66 66 69 6c 69 61 74 65 2e 69 63 6f 6e 2d 69 6e 66 6f 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 32 37 32 70 78 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 6c 61 72 67 65 2d 69 63 6f 6e 2e 74 6f 70 2d 70 61 64 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 31 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 Data Ascii: con-info{color:#000;font-family:var(--text-font-family-second-regular);font-size:28px;line-height:34px;padding:20px 0 0}.en .affiliate.icon-info{margin:0 auto;max-width:272px}.bottom-page.large-icon.top-pad{margin-top:61px}.affiliate
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 33 32 25 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 6d 69 64 2d 68 65 61 64 65 72 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 0a 7d 0a 2e 70 61 67 65 73 2d 6e 61 76 2e 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 2c 2e 70 61 67 65 73 2d 6e 61 76 2e 6e 61 76 2d 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 2e 67 72 65 79 65 64 2d 6f 75 74 20 2e 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 74 6f 70 2d 68 65 61 64 65 72 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 36 31 30 70 78 0a 7d 0a 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 62 69 67 2d 69 63 6f 6e 73 2d 62 6c 7b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 Data Ascii: 32%}.bottom-page.mid-header{max-width:640px}.pages-nav.button-label,.pages-nav.nav-button.active.greyed-out .button-label{font-size:14px}.bottom-page.top-header{max-width:610px}.bottom-page.big-icons-bl{padding-left:10px;padding-right:10
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 66 61 71 2d 68 65 61 64 65 72 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 66 61 71 2d 73 75 62 68 65 61 64 65 72 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 30 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 72 65 66 65 72 2d 68 65 61 64 65 72 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 72 65 66 65 72 2d 74 78 74 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2e 69 63 6f 6e 2d 69 6e 66 6f 2c 2e 72 75 20 2e 61 66 66 69 6c 69 61 74 Data Ascii: }.affiliate.faq-header{font-size:16px}.affiliate.faq-subheader{font-size:14px;line-height:22px;margin-top:-10px;padding:0}.affiliate.refer-header{font-size:20px}.affiliate.refer-txt{font-size:14px}.affiliate.icon-info,.ru .affiliat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49748	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:45 UTC	611	OUT	GET /4/js/mega-9_bc91f313152b74408e3715be06f8b45c9450f6f4814a11e5a2ab431e886fee21.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:45 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:45 GMT Content-Type: application/javascript Content-Length: 446544 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-6d050" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:45 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2e 74 6f 6b 65 6e 69 6e 70 75 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2e 63 68 65 63 6b 62 6f 78 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6d 6f 6d 65 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 65 67 61 52 65 6e 64 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 64 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 63 72 65 64 65 6e 74 69 61 6c 73 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6c 6f 67 69 6e 52 65 71 75 69 72 65 64 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 Data Ascii: /* Bundle Includes: * js/jquery.tokeninput.js * js/jquery.checkboxes.js * js/vendor/moment.js * js/ui/megaRender.js * js/ui/dialog.js * js/ui/credentialsWarningDialog.js * js/ui/loginRequiredDialog.js * js/ui/registerDialog.js *
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2d 6d 65 6e 75 27 29 2e 66 61 64 65 4f 75 74 28 32 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2d 69 63 6f 6e 2e 61 63 74 69 76 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 73 68 61 72 65 2d 64 69 61 6c 6f 67 2d 70 65 72 6d 69 73 73 69 6f 6e 73 2e 61 63 74 69 76 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2d 6d 65 6e 75 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 73 65 Data Ascii: ; $('.permissions-menu').fadeOut(200); $('.permissions-icon.active').removeClass('active'); $('.share-dialog-permissions.active').removeClass('active'); $('.permissions-menu').removeClass('se
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 7b 20 6f 6e 46 72 65 65 54 61 67 67 69 6e 67 41 64 64 2c 20 74 6f 6b 65 6e 56 61 6c 75 65 2c 20 70 72 6f 70 65 72 74 79 54 6f 53 65 61 72 63 68 20 7d 20 3d 20 24 28 69 6e 70 75 74 29 2e 64 61 74 61 28 22 73 65 74 74 69 6e 67 73 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6f 6e 46 72 65 65 54 61 67 67 69 6e 67 41 64 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 20 3d 20 6f 6e 46 72 65 65 54 61 67 67 69 6e 67 41 64 64 2e 63 61 6c 6c 28 68 69 64 64 65 6e 5f 69 6e 70 75 74 2c 20 74 6f 6b 65 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: { onFreeTaggingAdd, tokenValue, propertyToSearch } = $(input).data("settings"); if (typeof onFreeTaggingAdd === 'function') { token = onFreeTaggingAdd.call(hidden_input, token);
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 6f 74 46 6f 75 6e 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 69 6d 6d 65 64 4c 69 73 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 20 3d 20 74 72 69 6d 6d 65 64 4c 69 73 74 3b 0a 20 20 20 20 20 20 Data Ascii: se; } }); if (notFound) { trimmedList.push(value); } }); results = trimmedList;
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 2d 6e 65 77 5f 6c 65 66 74 0a 20 20 20 20 20 20 7d 2c 20 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 53 70 61 6e 2e 61 6e 69 6d 61 74 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 4c 65 66 74 3a 20 6e 65 77 5f 6c 65 66 74 20 2d 20 74 68 69 73 2e 72 69 67 68 74 53 69 64 65 0a 20 20 20 20 20 20 7d 2c 20 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 4f 53 43 68 65 63 6b 62 6f 78 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 61 63 68 45 76 65 6e 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6c 6f 63 61 6c 4d 6f 75 73 65 4d 6f 76 65 2c 20 6c 6f 63 61 6c 4d 6f 75 73 65 55 70 2c 20 73 65 6c 66 3b 0a 20 20 20 20 20 20 Data Ascii: -new_left }, this.duration); return this.onSpan.animate({ marginLeft: new_left - this.rightSide }, this.duration); }; iOSCheckbox.prototype.attachEvents = function() { var localMouseMove, localMouseUp, self;
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 7a 65 72 6f 46 69 6c 6c 28 6e 75 6d 62 65 72 2c 20 74 61 72 67 65 74 4c 65 6e 67 74 68 2c 20 66 6f 72 63 65 53 69 67 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 62 73 4e 75 6d 62 65 72 20 3d 20 27 27 20 2b 20 4d 61 74 68 2e 61 62 73 28 6e 75 6d 62 65 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 65 72 6f 73 54 6f 46 69 6c 6c 20 3d 20 74 61 72 67 65 74 4c 65 6e 67 74 68 20 2d 20 61 62 73 4e 75 6d 62 65 72 2e 6c 65 6e 67 74 68 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 69 67 6e 20 3d 20 6e 75 6d 62 65 72 20 3e 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 73 69 67 6e 20 3f 20 28 66 6f Data Ascii: } return this; } function zeroFill(number, targetLength, forceSign) { var absNumber = '' + Math.abs(number), zerosToFill = targetLength - absNumber.length, sign = number >= 0; return (sign ? (fo
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 28 74 68 69 73 2e 79 65 61 72 28 29 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 61 64 64 46 6f 72 6d 61 74 54 6f 6b 65 6e 28 27 77 27 2c 20 5b 27 77 77 27 2c 20 32 5d 2c 20 27 77 6f 27 2c 20 27 77 65 65 6b 27 29 3b 0a 20 20 20 20 61 64 64 46 6f 72 6d 61 74 54 6f 6b 65 6e 28 27 57 27 2c 20 5b 27 57 57 27 2c 20 32 5d 2c 20 27 57 6f 27 2c 20 27 69 73 6f 57 65 65 6b 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 41 4c 49 41 53 45 53 0a 0a 20 20 20 20 61 64 64 55 6e 69 74 41 6c 69 61 73 28 27 77 65 65 6b 27 2c 20 27 77 27 29 3b 0a 20 20 20 20 61 64 64 55 6e 69 74 41 6c 69 61 73 28 27 69 73 6f 57 65 65 6b 27 2c 20 27 57 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 50 41 52 53 49 4e 47 0a 0a 20 20 20 20 61 64 64 52 65 67 65 78 54 6f 6b 65 6e 28 27 77 27 2c 20 20 6d 61 74 63 68 31 74 Data Ascii: (this.year()); } addFormatToken('w', ['ww', 2], 'wo', 'week'); addFormatToken('W', ['WW', 2], 'Wo', 'isoWeek'); // ALIASES addUnitAlias('week', 'w'); addUnitAlias('isoWeek', 'W'); // PARSING addRegexToken('w', match1t
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 66 20 6d 6f 6d 65 6e 74 20 6f 62 6a 65 63 74 73 20 6f 72 20 61 6e 20 61 72 72 61 79 2c 20 77 68 6f 73 65 0a 20 20 20 20 2f 2f 20 66 69 72 73 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 61 6e 20 61 72 72 61 79 20 6f 66 20 6d 6f 6d 65 6e 74 20 6f 62 6a 65 63 74 73 2e 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 69 63 6b 42 79 28 66 6e 2c 20 6d 6f 6d 65 6e 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 73 2c 20 69 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 6f 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 20 26 26 20 69 73 41 72 72 61 79 28 6d 6f 6d 65 6e 74 73 5b 30 5d 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 6d 65 6e 74 73 20 3d 20 6d 6f 6d 65 6e 74 73 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 Data Ascii: f moment objects or an array, whose // first element is an array of moment objects. function pickBy(fn, moments) { var res, i; if (moments.length === 1 && isArray(moments[0])) { moments = moments[0]; } i
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 75 6e 69 74 73 20 3d 3d 3d 20 27 79 65 61 72 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 70 75 74 20 3d 20 6f 75 74 70 75 74 20 2f 20 31 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 3d 20 74 68 69 73 20 2d 20 74 68 61 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 70 75 74 20 3d 20 75 6e 69 74 73 20 3d 3d 3d 20 27 73 65 63 6f 6e 64 27 20 3f 20 64 65 6c 74 61 20 2f 20 31 65 33 20 3a 20 2f 2f 20 31 30 30 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 6e 69 74 73 20 3d 3d 3d 20 27 6d 69 6e 75 74 65 27 20 3f 20 64 65 6c 74 61 20 2f 20 36 65 34 20 3a 20 Data Ascii: } else if (units === 'year') { output = output / 12; } } else { delta = this - that; output = units === 'second' ? delta / 1e3 : // 1000 units === 'minute' ? delta / 6e4 :
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 30 30 3b 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 61 64 64 46 6f 72 6d 61 74 54 6f 6b 65 6e 28 30 2c 20 5b 27 53 53 53 53 53 53 53 53 53 27 2c 20 39 5d 2c 20 30 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 6c 6c 69 73 65 63 6f 6e 64 28 29 20 2a 20 31 30 30 30 30 30 30 3b 0a 20 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 2f 2f 20 41 4c 49 41 53 45 53 0a 0a 20 20 20 20 61 64 64 55 6e 69 74 41 6c 69 61 73 28 27 6d 69 6c 6c 69 73 65 63 6f 6e 64 27 2c 20 27 6d 73 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 50 41 52 53 49 4e 47 0a 0a 20 20 20 20 61 64 64 52 65 67 65 78 54 6f 6b 65 6e 28 27 53 27 2c 20 20 20 20 6d 61 74 63 68 31 74 6f 33 2c 20 6d 61 74 63 68 31 29 3b 0a 20 20 20 20 61 64 64 52 65 67 65 78 54 Data Ascii: 00; }); addFormatToken(0, ['SSSSSSSSS', 9], 0, function () { return this.millisecond() * 1000000; }); // ALIASES addUnitAlias('millisecond', 'ms'); // PARSING addRegexToken('S', match1to3, match1); addRegexT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49747	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:45 UTC	430	OUT	GET /4/html/templates_682231e1ad6ee170c226cb45a530ca090c6267ec93dff7cb2a70101d9be0bac8.json HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:45 UTC	371	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:45 GMT Content-Type: application/json Content-Length: 745464 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-b5ff8" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:45 UTC	16013	IN	Data Raw: 7b 22 74 72 61 6e 73 66 65 72 77 69 64 67 65 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 62 6c 6f 63 6b 20 68 69 64 64 65 6e 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 63 69 72 63 6c 65 20 70 65 72 63 65 6e 74 73 2d 30 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 61 72 72 6f 77 73 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 74 6f 6f 6c 74 69 70 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 69 63 6f 6e 20 75 70 6c 6f 61 64 69 6e 67 20 68 69 64 64 65 6e 5c 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 2d 74 78 74 5c 22 3e 5b 24 31 31 35 35 5d 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: {"transferwidget":"<div class=\"widget-block hidden\"> <div class=\"widget-circle percents-0\"> <div class=\"widget-arrows\"> <div class=\"widget-tooltip\"> <div class=\"widget-icon uploading hidden\"> <span class=\"widget-txt\">[$1155]</span> <span class
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 6f 64 79 5c 22 3e 20 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 6c 69 6e 6b 73 5c 22 3e 20 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 64 2d 64 6f 74 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 61 74 75 73 2d 64 72 6f 70 64 6f 77 6e 5c 22 3e 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 64 72 6f 70 62 74 6e 5c 22 3e 20 3c 73 70 61 6e 3e 5b 24 32 34 38 34 35 5d 3c 2f 73 70 61 6e 3e 20 3c 69 20 63 6c 61 73 73 3d 5c 22 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 20 69 63 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 20 78 31 5c 22 3e 3c 2f 69 3e 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 65 6e 74 5c 22 3e 20 Data Ascii: v> </div> <div class=\"body\"> <ul class=\"links\"> <li class=\"no-red-dot\"> <div class=\"status-dropdown\"> <button class=\"dropbtn\"> <span>[$24845]</span> <i class=\"sprite-fm-mono icon-arrow-right x1\"></i> </button> <div class=\"dropdown-content\">
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 6f 62 6a 65 63 74 73 74 6f 72 61 67 65 5c 22 3e 5b 24 66 6f 6f 74 65 72 5f 69 74 65 6d 5f 6f 62 6a 65 63 74 5f 73 74 6f 72 61 67 65 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 73 79 6e 63 69 6e 67 5c 22 3e 5b 24 66 6f 6f 74 65 72 5f 69 74 65 6d 5f 73 79 6e 63 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 67 61 62 61 63 6b 75 70 5c 22 3e 5b 24 66 74 5f 62 61 63 6b 75 70 5f 74 61 62 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 73 68 61 72 65 5c 22 3e 5b 24 66 6f 6f 74 65 72 5f 69 74 65 6d 5f 73 68 61 72 Data Ascii: v class=\"top-menu-item objectstorage\">[$footer_item_object_storage]</div> <div class=\"top-menu-item syncing\">[$footer_item_sync]</div> <div class=\"top-menu-item megabackup\">[$ft_backup_tab]</div> <div class=\"top-menu-item share\">[$footer_item_shar
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 65 78 74 72 61 2d 64 65 74 61 69 6c 73 5c 22 3e 20 3c 74 64 20 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 65 78 74 72 61 2d 64 65 73 63 5c 22 3e 20 3c 2f 74 64 3e 20 3c 74 64 20 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 65 78 74 72 61 2d 76 61 6c 5c 22 3e 20 3c 2f 74 64 3e 20 3c 2f 74 72 3e 20 3c 74 72 20 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 62 72 65 61 6b 64 6f 77 6e 2d 74 62 2d 74 6f 74 61 6c 5c 22 3e 20 3c 74 64 3e 5b 24 32 34 39 37 36 5d 3c 2f 74 64 3e 20 3c 74 64 20 63 6c 61 73 73 3d 5c 22 72 65 70 61 79 2d 74 64 2d 74 6f 74 61 6c 5c 22 20 63 6f 6c 73 70 61 6e 3d 5c 22 32 5c 22 3e 20 3c 2f 74 64 3e 20 3c 2f 74 72 3e 20 3c 2f 74 61 62 6c 65 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 Data Ascii: class=\"repay-extra-details\"> <td class=\"repay-extra-desc\"> </td> <td class=\"repay-extra-val\"> </td> </tr> <tr class=\"repay-breakdown-tb-total\"> <td>[$24976]</td> <td class=\"repay-td-total\" colspan=\"2\"> </td> </tr> </table> </div> </div> <div c
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 70 72 69 74 65 20 69 2d 69 63 6f 6e 20 73 69 6d 70 6c 65 74 69 70 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 3d 5c 22 5b 24 32 33 38 30 38 5d 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 70 6f 73 69 74 69 6f 6e 3d 5c 22 74 6f 70 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 6f 66 66 73 65 74 3d 5c 22 33 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 2d 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 74 69 70 20 74 72 61 6e 73 66 6f 72 6d 65 64 5c 22 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 77 72 61 70 70 65 72 3d 5c 22 2e 63 6f 6e 74 65 6e 74 5c 22 3e 3c 2f 69 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 61 67 65 20 70 6c 61 6e 2d 66 65 61 74 75 72 65 5c 22 3e 20 3c 73 70 61 6e 3e Data Ascii: prite i-icon simpletip\" data-simpletip=\"[$23808]\" data-simpletipposition=\"top\" data-simpletipoffset=\"3\" data-simpletip-class=\"pricing-tip transformed\" data-simpletipwrapper=\".content\"></i> </div> <div class=\"pricing-page plan-feature\"> <span>
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 61 67 65 20 63 6f 6d 70 61 72 65 2d 74 69 74 6c 65 5c 22 3e 44 52 4f 50 42 4f 58 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 61 67 65 20 63 6f 6d 70 61 72 65 2d 73 74 6f 72 61 67 65 5c 22 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 61 67 65 20 63 6f 6d 70 61 72 65 2d 70 72 69 63 65 20 62 6c 75 65 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 65 5c 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 73 74 61 72 5c 22 3e 26 23 31 30 30 33 33 3b 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 73 74 61 72 20 67 72 65 65 6e 5c 22 3e 26 23 39 37 33 33 3b 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: age compare-title\">DROPBOX</div> <div class=\"pricing-page compare-storage\"></div> <div class=\"pricing-page compare-price blue\"><span class=\"price\"></span><span class=\"star\">✱</span><span class=\"star green\">★</span></div> <div class
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 67 2d 72 61 64 69 6f 2d 62 74 6e 5c 22 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 5c 22 3e 20 5b 24 32 33 37 38 30 5d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 67 20 70 65 72 69 6f 64 2d 6e 6f 74 65 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 65 72 69 6f 64 2d 6e 6f 74 65 2d 74 78 74 5c 22 3e 20 5b 24 70 72 5f 73 61 76 65 5f 74 69 70 5d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 67 20 70 69 63 6b 2d 70 65 72 69 6f 64 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: g-radio-btn\"></div> <div class=\"pricing-radio-label\"> [$23780] </div> </div> </div> </div> <div class=\"pricing-pg period-note-container\"> <div class=\"period-note-txt\"> [$pr_save_tip] </div> </div> </div> <div class=\"pricing-pg pick-period-containe
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 72 62 20 62 67 2d 67 72 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c 22 6d 69 6e 75 73 2d 69 63 6f 6e 5c 22 3e 3c 2f 69 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 2d 63 6f 6d 70 61 72 65 2d 74 61 62 6c 65 2d 69 74 65 6d 20 70 72 6f 2d 65 78 63 2d 6f 66 66 65 72 20 63 65 6e 74 65 72 20 72 62 20 62 67 2d 67 72 20 68 69 64 64 65 6e 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c 22 67 72 65 79 2d 73 6d 61 6c 6c 2d 63 68 65 63 6b 2d 74 69 63 6b 5c 22 3e 3c 2f 69 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 70 6c 61 6e 73 2d 63 6f 6d 70 61 72 65 2d 74 61 62 6c 65 2d 69 74 65 6d 20 70 72 6f 20 63 65 6e 74 65 72 20 72 62 20 62 67 2d 67 72 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c Data Ascii: rb bg-gr\"><i class=\"minus-icon\"></i></div> <div class=\"pricing-plans-compare-table-item pro-exc-offer center rb bg-gr hidden\"><i class=\"grey-small-check-tick\"></i></div> <div class=\"pricing-plans-compare-table-item pro center rb bg-gr\"><i class=\
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 2d 62 6c 6f 63 6b 2d 65 73 74 69 6d 61 74 6f 72 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 5c 22 3e 31 30 30 20 5b 24 32 30 31 36 30 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 66 6c 65 78 69 2d 62 6c 6f 63 6b 2d 65 73 74 69 6d 61 74 6f 72 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 5c 22 3e 31 20 5b 24 32 33 30 36 31 5d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 66 6c 65 78 69 2d 62 6c 6f 63 6b 2d 65 73 74 69 6d 61 74 6f 72 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 5c 22 3e 31 30 20 5b 24 32 33 30 36 31 5d 3c 2f 64 69 76 3e 20 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 5c 22 70 72 69 63 69 6e 67 2d 66 6c 65 78 69 2d 73 6c 69 64 65 72 5c 22 20 74 79 70 65 3d 5c 22 72 61 6e 67 65 5c 22 20 69 64 3d Data Ascii: -block-estimator-slider-mark\">100 [$20160]</div> <div class=\"pricing-flexi-block-estimator-slider-mark\">1 [$23061]</div> <div class=\"pricing-flexi-block-estimator-slider-mark\">10 [$23061]</div> <input class=\"pricing-flexi-slider\" type=\"range\" id=
2024-07-11 11:36:45 UTC	16384	IN	Data Raw: 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 74 65 6d 20 73 75 62 6d 65 6e 75 2d 69 74 65 6d 20 6c 61 6e 67 75 61 67 65 73 20 73 6d 61 6c 6c 2d 70 61 64 5c 22 3e 20 3c 69 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 63 6f 6e 20 6d 65 6e 75 73 2d 73 70 72 69 74 65 20 67 6c 6f 62 65 5c 22 3e 3c 2f 69 3e 20 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 20 3c 69 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 6d 65 6e 75 2d 69 63 6f 6e 20 6d 65 6e 75 73 2d 73 70 72 69 74 65 20 72 69 67 68 74 2d 61 72 72 6f 77 20 69 6e 6c 69 6e 65 20 64 6f 77 6e 5c 22 3e 3c 2f 69 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f 70 2d 73 75 62 6d 65 6e 75 20 6c 61 6e 67 75 61 67 65 2d 69 74 65 6d 73 5c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 74 6f Data Ascii: ass=\"top-menu-item submenu-item languages small-pad\"> <i class=\"top-menu-icon menus-sprite globe\"></i> <span></span> <i class=\"top-menu-icon menus-sprite right-arrow inline down\"></i> </div> <div class=\"top-submenu language-items\"> <div class=\"to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49750	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:45 UTC	644	OUT	GET /4/css/bottom-pages-animations.css-postbuild_077437ba5398f2997efea39e55f89eadd473667177aba0b14a48c8b57c60af43.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:45 UTC	361	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:45 GMT Content-Type: text/css Content-Length: 10479 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-28ef" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:45 UTC	10479	IN	Data Raw: 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 33 70 78 29 7b 0a 2e 61 6e 69 6d 2e 69 6d 67 31 2c 2e 61 6e 69 6d 2e 69 6d 67 2d 77 72 61 70 3a 61 66 74 65 72 2c 2e 61 6e 69 6d 2e 69 6d 67 2d 77 72 61 70 3a 62 65 66 6f 72 65 2c 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 61 6e 69 6d 2c 2e 73 74 61 72 74 70 61 67 65 2e 74 6f 70 2d 6e 6f 74 69 63 65 2c 2e 74 6f 70 2d 74 6f 2d 62 6f 74 74 2e 61 6e 69 6d 7b 0a 09 6f 70 61 63 69 74 79 3a 30 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e Data Ascii: @media only screen and (min-width:783px){.anim.img1,.anim.img-wrap:after,.anim.img-wrap:before,.bottom-page.anim,.startpage.top-notice,.top-to-bott.anim{opacity:0;-webkit-transition:all .2s ease-in-out;transition:all .2s ease-in-out;-webkit-tran

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49749	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:45 UTC	423	OUT	GET /4/js/mega-8_5a0bd51c94a07cd5a5806408f32c247ce16f51db3df2d3992bdd9272478af76d.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:46 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:45 GMT Content-Type: application/javascript Content-Length: 86811 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-1531b" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:46 UTC	16008	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6c 61 6e 67 75 61 67 65 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 63 6f 6d 6d 65 72 63 69 61 6c 73 2e 6a 73 0a 20 2a 2f 0a 0a 2f 2a 21 0a 20 2a 20 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 20 76 31 2e 35 2e 37 20 2d 20 6d 65 67 61 2e 6e 7a 20 62 75 69 6c 64 2e 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 79 75 6e 6a 65 20 4a 75 6e 2c 20 4d 44 42 6f 6f 74 73 74 72 61 70 20 61 6e 64 20 43 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 0a 20 2a 2f 0a 0a 28 66 75 6e Data Ascii: /* Bundle Includes: * js/vendor/perfect-scrollbar.js * js/ui/languageDialog.js * js/ui/commercials.js //! * perfect-scrollbar v1.5.7 - mega.nz build. * Copyright 2024 Hyunje Jun, MDBootstrap and Contributors * Licensed under MIT */(fun
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 68 74 5d 20 2d 20 69 5b 73 63 72 6f 6c 6c 62 61 72 59 48 65 69 67 68 74 5d 29 3b 0a 20 20 20 20 20 20 69 66 20 28 21 74 6f 75 63 68 4d 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 2e 65 76 65 6e 74 2e 62 69 6e 64 28 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 20 27 6d 6f 75 73 65 6d 6f 76 65 27 2c 20 6d 6f 75 73 65 4d 6f 76 65 48 61 6e 64 6c 65 72 29 3b 0a 20 20 20 20 20 20 20 20 69 2e 65 76 65 6e 74 2e 6f 6e 63 65 28 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 20 27 6d 6f 75 73 65 75 70 27 2c 20 6d 6f 75 73 65 55 70 48 61 6e 64 6c 65 72 29 3b 0a 20 20 20 20 20 20 20 20 69 2e 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 65 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 69 2e Data Ascii: ht] - i[scrollbarYHeight]); if (!touchMode) { i.event.bind(i.ownerDocument, 'mousemove', mouseMoveHandler); i.event.once(i.ownerDocument, 'mouseup', mouseUpHandler); i.event.preventDefault(e, false); } else { i.
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 65 79 5d 20 3d 20 75 73 65 72 53 65 74 74 69 6e 67 73 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 48 65 69 67 68 74 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 65 6e 74 57 69 64 74 68 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 65 6e 74 48 65 69 67 68 74 20 3d 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 66 6f 63 75 73 20 3d 20 28 29 20 3d 3e 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 63 6c 73 2e 73 74 61 74 65 2e 66 6f 63 75 73 29 3b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 62 6c 75 72 20 3d 20 28 Data Ascii: ey] = userSettings[key]; } this.containerWidth = null; this.containerHeight = null; this.contentWidth = null; this.contentHeight = null; const focus = () => element.classList.add(cls.state.focus); const blur = (
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 3b 20 20 20 20 20 20 20 20 2f 2f 20 48 61 76 65 20 61 64 48 61 6e 64 6c 65 72 73 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 7a 65 64 0a 20 20 20 20 6c 65 74 20 69 73 4d 6f 62 69 6c 65 43 6c 6f 75 64 44 72 69 76 65 3b 20 20 20 20 20 2f 2f 20 54 72 75 65 20 69 66 20 63 75 72 72 65 6e 74 20 70 61 67 65 20 69 73 20 6d 6f 62 69 6c 65 20 68 6f 6d 65 2c 20 61 6e 64 20 73 65 6c 65 63 74 65 64 20 74 61 62 20 69 73 20 63 6c 6f 75 64 20 64 72 69 76 65 0a 20 20 20 20 6c 65 74 20 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 41 63 74 69 76 65 3b 20 20 20 20 20 20 20 20 2f 2f 20 41 72 65 20 74 68 65 72 65 20 61 6e 79 20 63 75 72 72 65 6e 74 20 72 65 73 69 7a 65 20 68 61 6e 64 6c 65 72 73 20 61 63 74 69 76 65 20 66 6f 72 20 63 6f 6d 6d 73 0a 20 20 20 20 6c 65 74 20 63 6f 6d 6d Data Ascii: ; // Have adHandlers been initialized let isMobileCloudDrive; // True if current page is mobile home, and selected tab is cloud drive let resizeHandlerActive; // Are there any current resize handlers active for comms let comm
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 69 6e 67 2e 64 65 6c 65 74 65 28 63 6f 6d 6d 49 44 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 63 6c 6f 73 65 42 75 74 74 6f 6e 20 3d 20 24 63 6c 6f 73 65 42 75 74 74 6f 6e 20 26 26 20 24 63 6c 6f 73 65 42 75 74 74 6f 6e 5b 30 5d 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 24 63 6c 6f 73 65 42 75 74 74 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3a 20 63 75 72 72 65 6e 74 50 61 67 65 20 3d 3d 3d 20 27 66 69 6c 65 6c 69 6e 6b 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 24 28 27 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 20 2e 64 6f 77 Data Ascii: loading.delete(commID); } }; $closeButton = $closeButton && $closeButton[0].length ? $closeButton : currentPage === 'filelink' ? $('.bottom-page .dow
2024-07-11 11:36:46 UTC	5267	IN	Data Raw: 20 20 20 20 24 66 69 6c 65 4d 61 6e 61 67 65 72 42 6c 6f 63 6b 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 6c 6f 74 50 61 72 65 6e 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 66 69 6c 65 50 72 65 76 69 65 77 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 69 64 65 43 6f 6d 6d 73 28 61 63 74 69 76 65 53 6c 6f 74 73 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 53 6c 6f 74 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 41 63 74 69 76 65 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 70 64 61 74 65 52 65 73 69 7a 65 48 61 6e 64 6c 65 72 Data Ascii: $fileManagerBlock = undefined; $slotParent = undefined; $filePreview = undefined; hideComms(activeSlots, true); activeSlots = []; resizeHandlerActive = false; updateResizeHandler

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49752	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:46 UTC	612	OUT	GET /4/js/mega-10_c1031f4cca0d2cad1a9074cd0879ca29d084e2eb528787879d9134c8fa495250.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:46 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:46 GMT Content-Type: application/javascript Content-Length: 511137 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7cca1" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:46 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 66 69 6c 65 54 65 78 74 45 64 69 74 6f 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 74 65 78 74 45 64 69 74 6f 72 55 49 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 78 68 72 32 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 71 75 65 75 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 75 74 69 6c 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 6d 65 74 68 73 2f 63 61 63 68 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 6d 65 74 68 73 2f 6d 65 6d 6f 72 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 6d 65 74 68 73 2f 66 69 6c 65 73 79 73 74 Data Ascii: /* Bundle Includes: * js/fm/fileTextEditor.js * js/fm/textEditorUI.js * js/transfers/xhr2.js * js/transfers/queue.js * js/transfers/utils.js * js/transfers/meths/cache.js * js/transfers/meths/memory.js * js/transfers/meths/filesyst
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 65 64 69 74 6f 72 43 6f 6e 74 61 69 6e 65 72 2e 72 65 62 69 6e 64 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6d 6f 75 73 65 75 70 2e 74 78 74 2d 65 64 69 74 6f 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 65 78 74 45 64 69 74 6f 72 47 6c 6f 62 61 6c 43 6c 69 63 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 4d 65 6e 75 2e 63 6c 6f 73 65 28 66 69 6c 65 4d 65 6e 75 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 4d 65 6e 75 2e 63 6c 6f 73 65 28 66 6f 72 6d 61 74 4d 65 6e 75 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 Data Ascii: e; } ); $editorContainer.rebind( 'mouseup.txt-editor', function textEditorGlobalClick() { contextMenu.close(fileMenu); contextMenu.close(formatMenu); retu
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 45 4e 44 20 4d 45 47 41 20 4c 49 4d 49 54 45 44 20 43 4f 44 45 20 52 45 56 49 45 57 20 4c 49 43 45 4e 43 45 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 5f 78 68 72 54 72 61 6e 73 66 65 72 73 4c 6f 67 69 63 28 67 6c 6f 62 61 6c 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 76 61 72 20 78 68 72 54 69 6d 65 6f 75 74 20 3d 20 70 61 72 73 65 49 6e 74 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 78 68 72 54 69 6d 65 6f 75 74 29 20 7c 7c 20 31 32 65 34 3b 0a 20 20 20 20 76 61 72 20 6c 6f 67 67 65 72 20 3d 20 4d 65 67 61 4c 6f 67 67 65 72 2e 67 65 74 4c 6f 67 67 65 72 28 27 78 68 72 32 27 29 3b 0a 20 20 20 20 76 61 72 20 64 65 Data Ascii: ************** END MEGA LIMITED CODE REVIEW LICENCE *************** */(function _xhrTransfersLogic(global) { "use strict"; var xhrTimeout = parseInt(localStorage.xhrTimeout) \|\| 12e4; var logger = MegaLogger.getLogger('xhr2'); var de
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 28 27 70 61 75 73 65 27 29 3b 0a 7d 3b 0a 0a 4d 65 67 61 51 75 65 75 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 61 75 73 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 75 73 65 64 3b 0a 7d 3b 0a 0a 4d 65 67 61 51 75 65 75 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 41 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 61 73 6b 73 2c 20 6e 65 78 74 2c 20 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 43 43 51 75 65 75 65 43 68 65 63 6b 65 72 28 74 61 73 6b 2c 20 72 65 73 70 6f 6e 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 6c 65 6e 67 74 68 20 26 26 20 72 65 73 70 6f 6e 73 65 5b 30 5d 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0a 20 20 20 20 Data Ascii: ('pause');};MegaQueue.prototype.isPaused = function() { return this._paused;};MegaQueue.prototype.pushAll = function(tasks, next, error) { function CCQueueChecker(task, response) { if (response.length && response[0] === false) {
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6c 6d 61 6e 61 67 65 72 2e 6c 6f 67 67 65 72 2e 77 61 72 6e 28 60 64 6c 46 61 74 61 6c 45 72 72 6f 72 3a 20 24 7b 65 72 72 6f 72 7d 60 2c 20 64 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 2f 2f 20 53 65 74 20 74 72 61 6e 73 66 65 72 20 73 74 61 74 75 73 20 61 6e 64 20 61 62 6f 72 74 20 69 74 0a 20 20 20 20 73 65 74 54 72 61 6e 73 66 65 72 53 74 61 74 75 73 28 64 6c 2c 20 65 72 72 6f 72 2c 20 65 74 68 72 6f 77 2c 20 6c 6f 63 6b 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 6c 6f 63 6b 20 3a 20 74 Data Ascii: if (d) { dlmanager.logger.warn(`dlFatalError: ${error}`, dl); } } } }); // Set transfer status and abort it setTransferStatus(dl, error, ethrow, lock !== undefined ? lock : t
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 20 61 6e 79 20 70 61 74 65 6e 74 20 72 69 67 68 74 20 69 6e 20 72 65 73 70 65 63 74 0a 20 2a 20 20 20 20 6f 66 20 74 68 65 20 63 6f 64 65 20 28 69 6e 63 6c 75 64 69 6e 67 20 61 6e 79 20 6a 6f 69 6e 64 65 72 20 6f 72 20 63 6f 75 6e 74 65 72 63 6c 61 69 6d 29 2c 20 79 6f 75 72 20 6c 69 63 65 6e 63 65 20 74 6f 0a 20 2a 20 20 20 20 74 68 65 20 63 6f 64 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 65 72 6d 69 6e 61 74 65 64 2e 0a 20 2a 0a 20 2a 20 33 2e 20 54 48 45 20 43 4f 44 45 20 49 53 20 4d 41 44 45 20 41 56 41 49 4c 41 42 4c 45 20 22 41 53 2d 49 53 22 20 41 4e 44 20 57 49 54 48 4f 55 54 20 41 4e 59 20 45 58 50 52 45 53 53 20 4f 46 20 49 4d 50 4c 49 45 44 0a 20 2a 20 20 20 20 47 55 41 52 41 4e 54 45 45 53 20 41 53 20 54 4f 20 46 49 54 4e 45 Data Ascii: any patent right in respect * of the code (including any joinder or counterclaim), your licence to * the code is automatically terminated. * * 3. THE CODE IS MADE AVAILABLE "AS-IS" AND WITHOUT ANY EXPRESS OF IMPLIED * GUARANTEES AS TO FITNE
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 6e 53 65 63 75 72 69 74 79 45 72 72 6f 72 53 77 69 74 63 68 4d 65 74 68 6f 64 28 64 6c 2c 20 64 6c 5f 69 64 2c 20 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 63 68 65 63 6b 53 65 63 75 72 69 74 79 45 72 72 6f 72 28 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 62 6f 72 74 41 6e 64 53 74 61 72 74 4f 76 65 72 28 64 6c 2c 20 64 6c 5f 69 64 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 69 74 28 73 74 6f 72 61 Data Ascii: n true; } } function onSecurityErrorSwitchMethod(dl, dl_id, e) { if (checkSecurityError(e)) { abortAndStartOver(dl, dl_id, e); return true; } return false; } function clearit(stora
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6c 46 61 74 61 6c 45 72 72 6f 72 28 64 6c 2c 20 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6c 5f 66 77 2e 6f 6e 77 72 69 74 65 65 6e 64 20 3d 20 74 72 79 43 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 72 72 6f 72 20 3d 20 74 72 75 65 3b 0a 0a 20 Data Ascii: dlFatalError(dl, ex); } }; dl_fw.onwriteend = tryCatch(function() { var error = true;
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 73 2e 50 72 6f 67 72 65 73 73 2e 64 61 74 61 5b 74 68 69 73 2e 78 69 64 5d 3b 0a 20 20 20 20 69 66 20 28 21 70 62 78 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 21 72 65 70 6f 72 74 5f 64 6f 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 70 6f 72 74 5f 64 6f 6e 65 20 3d 20 21 74 68 69 73 2e 64 6f 6e 65 20 26 26 20 64 6c 51 75 65 75 65 2e 63 61 6e 45 78 70 61 6e 64 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 28 70 62 78 5b 31 5d 20 2d 20 70 62 78 5b 30 5d 29 20 2f 20 74 68 69 73 2e 50 72 6f 67 72 65 73 73 2e 73 70 65 65 64 20 3c 3d 20 64 6c 6d 61 6e 61 67 65 72 2e 64 6c 44 6f 6e 65 54 68 72 65 73 68 6f 6c 64 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 72 65 70 6f 72 74 5f 64 6f Data Ascii: s.Progress.data[this.xid]; if (!pbx) { return; } if (!report_done) { report_done = !this.done && dlQueue.canExpand() && (pbx[1] - pbx[0]) / this.Progress.speed <= dlmanager.dlDoneThreshold; } if (report_do
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6c 2e 69 6f 2e 73 65 74 43 72 65 64 65 6e 74 69 61 6c 73 28 22 22 2c 20 30 2c 20 74 68 69 73 2e 64 6c 2e 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 72 61 6e 73 66 65 72 53 74 61 74 75 73 28 74 68 69 73 2e 64 6c 2c 20 65 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 66 61 74 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 64 6c 29 Data Ascii: return this.dl.io.setCredentials("", 0, this.dl.n); } catch (e) { setTransferStatus(this.dl, e, true); } } else if (fatal) { if (this.dl)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49751	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:46 UTC	423	OUT	GET /4/js/mega-9_bc91f313152b74408e3715be06f8b45c9450f6f4814a11e5a2ab431e886fee21.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:46 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:46 GMT Content-Type: application/javascript Content-Length: 446544 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-6d050" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:46 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2e 74 6f 6b 65 6e 69 6e 70 75 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6a 71 75 65 72 79 2e 63 68 65 63 6b 62 6f 78 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 6d 6f 6d 65 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 65 67 61 52 65 6e 64 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 64 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 63 72 65 64 65 6e 74 69 61 6c 73 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6c 6f 67 69 6e 52 65 71 75 69 72 65 64 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 Data Ascii: /* Bundle Includes: * js/jquery.tokeninput.js * js/jquery.checkboxes.js * js/vendor/moment.js * js/ui/megaRender.js * js/ui/dialog.js * js/ui/credentialsWarningDialog.js * js/ui/loginRequiredDialog.js * js/ui/registerDialog.js *
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2d 6d 65 6e 75 27 29 2e 66 61 64 65 4f 75 74 28 32 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2d 69 63 6f 6e 2e 61 63 74 69 76 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 73 68 61 72 65 2d 64 69 61 6c 6f 67 2d 70 65 72 6d 69 73 73 69 6f 6e 73 2e 61 63 74 69 76 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2d 6d 65 6e 75 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 73 65 Data Ascii: ; $('.permissions-menu').fadeOut(200); $('.permissions-icon.active').removeClass('active'); $('.share-dialog-permissions.active').removeClass('active'); $('.permissions-menu').removeClass('se
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 7b 20 6f 6e 46 72 65 65 54 61 67 67 69 6e 67 41 64 64 2c 20 74 6f 6b 65 6e 56 61 6c 75 65 2c 20 70 72 6f 70 65 72 74 79 54 6f 53 65 61 72 63 68 20 7d 20 3d 20 24 28 69 6e 70 75 74 29 2e 64 61 74 61 28 22 73 65 74 74 69 6e 67 73 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6f 6e 46 72 65 65 54 61 67 67 69 6e 67 41 64 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 20 3d 20 6f 6e 46 72 65 65 54 61 67 67 69 6e 67 41 64 64 2e 63 61 6c 6c 28 68 69 64 64 65 6e 5f 69 6e 70 75 74 2c 20 74 6f 6b 65 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: { onFreeTaggingAdd, tokenValue, propertyToSearch } = $(input).data("settings"); if (typeof onFreeTaggingAdd === 'function') { token = onFreeTaggingAdd.call(hidden_input, token);
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 6f 74 46 6f 75 6e 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 69 6d 6d 65 64 4c 69 73 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 20 3d 20 74 72 69 6d 6d 65 64 4c 69 73 74 3b 0a 20 20 20 20 20 20 Data Ascii: se; } }); if (notFound) { trimmedList.push(value); } }); results = trimmedList;
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 2d 6e 65 77 5f 6c 65 66 74 0a 20 20 20 20 20 20 7d 2c 20 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 53 70 61 6e 2e 61 6e 69 6d 61 74 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 4c 65 66 74 3a 20 6e 65 77 5f 6c 65 66 74 20 2d 20 74 68 69 73 2e 72 69 67 68 74 53 69 64 65 0a 20 20 20 20 20 20 7d 2c 20 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 4f 53 43 68 65 63 6b 62 6f 78 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 61 63 68 45 76 65 6e 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6c 6f 63 61 6c 4d 6f 75 73 65 4d 6f 76 65 2c 20 6c 6f 63 61 6c 4d 6f 75 73 65 55 70 2c 20 73 65 6c 66 3b 0a 20 20 20 20 20 20 Data Ascii: -new_left }, this.duration); return this.onSpan.animate({ marginLeft: new_left - this.rightSide }, this.duration); }; iOSCheckbox.prototype.attachEvents = function() { var localMouseMove, localMouseUp, self;
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 7a 65 72 6f 46 69 6c 6c 28 6e 75 6d 62 65 72 2c 20 74 61 72 67 65 74 4c 65 6e 67 74 68 2c 20 66 6f 72 63 65 53 69 67 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 62 73 4e 75 6d 62 65 72 20 3d 20 27 27 20 2b 20 4d 61 74 68 2e 61 62 73 28 6e 75 6d 62 65 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 65 72 6f 73 54 6f 46 69 6c 6c 20 3d 20 74 61 72 67 65 74 4c 65 6e 67 74 68 20 2d 20 61 62 73 4e 75 6d 62 65 72 2e 6c 65 6e 67 74 68 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 69 67 6e 20 3d 20 6e 75 6d 62 65 72 20 3e 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 73 69 67 6e 20 3f 20 28 66 6f Data Ascii: } return this; } function zeroFill(number, targetLength, forceSign) { var absNumber = '' + Math.abs(number), zerosToFill = targetLength - absNumber.length, sign = number >= 0; return (sign ? (fo
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 28 74 68 69 73 2e 79 65 61 72 28 29 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 61 64 64 46 6f 72 6d 61 74 54 6f 6b 65 6e 28 27 77 27 2c 20 5b 27 77 77 27 2c 20 32 5d 2c 20 27 77 6f 27 2c 20 27 77 65 65 6b 27 29 3b 0a 20 20 20 20 61 64 64 46 6f 72 6d 61 74 54 6f 6b 65 6e 28 27 57 27 2c 20 5b 27 57 57 27 2c 20 32 5d 2c 20 27 57 6f 27 2c 20 27 69 73 6f 57 65 65 6b 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 41 4c 49 41 53 45 53 0a 0a 20 20 20 20 61 64 64 55 6e 69 74 41 6c 69 61 73 28 27 77 65 65 6b 27 2c 20 27 77 27 29 3b 0a 20 20 20 20 61 64 64 55 6e 69 74 41 6c 69 61 73 28 27 69 73 6f 57 65 65 6b 27 2c 20 27 57 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 50 41 52 53 49 4e 47 0a 0a 20 20 20 20 61 64 64 52 65 67 65 78 54 6f 6b 65 6e 28 27 77 27 2c 20 20 6d 61 74 63 68 31 74 Data Ascii: (this.year()); } addFormatToken('w', ['ww', 2], 'wo', 'week'); addFormatToken('W', ['WW', 2], 'Wo', 'isoWeek'); // ALIASES addUnitAlias('week', 'w'); addUnitAlias('isoWeek', 'W'); // PARSING addRegexToken('w', match1t
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 66 20 6d 6f 6d 65 6e 74 20 6f 62 6a 65 63 74 73 20 6f 72 20 61 6e 20 61 72 72 61 79 2c 20 77 68 6f 73 65 0a 20 20 20 20 2f 2f 20 66 69 72 73 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 61 6e 20 61 72 72 61 79 20 6f 66 20 6d 6f 6d 65 6e 74 20 6f 62 6a 65 63 74 73 2e 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 69 63 6b 42 79 28 66 6e 2c 20 6d 6f 6d 65 6e 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 73 2c 20 69 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 6f 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 20 26 26 20 69 73 41 72 72 61 79 28 6d 6f 6d 65 6e 74 73 5b 30 5d 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 6d 65 6e 74 73 20 3d 20 6d 6f 6d 65 6e 74 73 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 Data Ascii: f moment objects or an array, whose // first element is an array of moment objects. function pickBy(fn, moments) { var res, i; if (moments.length === 1 && isArray(moments[0])) { moments = moments[0]; } i
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 75 6e 69 74 73 20 3d 3d 3d 20 27 79 65 61 72 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 70 75 74 20 3d 20 6f 75 74 70 75 74 20 2f 20 31 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 3d 20 74 68 69 73 20 2d 20 74 68 61 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 70 75 74 20 3d 20 75 6e 69 74 73 20 3d 3d 3d 20 27 73 65 63 6f 6e 64 27 20 3f 20 64 65 6c 74 61 20 2f 20 31 65 33 20 3a 20 2f 2f 20 31 30 30 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 6e 69 74 73 20 3d 3d 3d 20 27 6d 69 6e 75 74 65 27 20 3f 20 64 65 6c 74 61 20 2f 20 36 65 34 20 3a 20 Data Ascii: } else if (units === 'year') { output = output / 12; } } else { delta = this - that; output = units === 'second' ? delta / 1e3 : // 1000 units === 'minute' ? delta / 6e4 :
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 30 30 3b 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 61 64 64 46 6f 72 6d 61 74 54 6f 6b 65 6e 28 30 2c 20 5b 27 53 53 53 53 53 53 53 53 53 27 2c 20 39 5d 2c 20 30 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 6c 6c 69 73 65 63 6f 6e 64 28 29 20 2a 20 31 30 30 30 30 30 30 3b 0a 20 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 2f 2f 20 41 4c 49 41 53 45 53 0a 0a 20 20 20 20 61 64 64 55 6e 69 74 41 6c 69 61 73 28 27 6d 69 6c 6c 69 73 65 63 6f 6e 64 27 2c 20 27 6d 73 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 50 41 52 53 49 4e 47 0a 0a 20 20 20 20 61 64 64 52 65 67 65 78 54 6f 6b 65 6e 28 27 53 27 2c 20 20 20 20 6d 61 74 63 68 31 74 6f 33 2c 20 6d 61 74 63 68 31 29 3b 0a 20 20 20 20 61 64 64 52 65 67 65 78 54 Data Ascii: 00; }); addFormatToken(0, ['SSSSSSSSS', 9], 0, function () { return this.millisecond() * 1000000; }); // ALIASES addUnitAlias('millisecond', 'ms'); // PARSING addRegexToken('S', match1to3, match1); addRegexT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49754	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:46 UTC	613	OUT	GET /4/css/mega-2_0e8588a249d6083898d049dfb2a913376c3f0434efe856bbfd93c62e6f82f42d.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:46 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:46 GMT Content-Type: text/css Content-Length: 240597 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-3abd5" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:46 UTC	16021	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 63 6f 64 65 6d 69 72 72 6f 72 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 74 78 74 65 64 69 74 6f 72 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 76 61 72 73 2f 74 68 65 6d 65 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 77 69 74 63 68 65 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 72 69 74 65 73 2f 66 6d 2d 75 6e 69 40 75 6e 69 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 72 69 74 65 73 2f 66 6d 2d 6d 69 6d 65 40 75 6e 69 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 72 69 74 65 73 2f 66 6d 2d 6d 69 6d 65 2d 39 30 40 75 6e 69 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 72 69 74 65 73 2f 66 6d 2d 6d 6f 6e 6f 40 6d 6f 6e 6f 2e 63 73 73 0a 20 2a 20 20 20 63 73 Data Ascii: /* Bundle Includes: * css/codemirror.css * css/txteditor.css * css/vars/theme.css * css/switches.css * css/sprites/fm-uni@uni.css * css/sprites/fm-mime@uni.css * css/sprites/fm-mime-90@uni.css * css/sprites/fm-mono@mono.css * cs
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 62 6f 72 64 65 72 3a 62 6f 72 64 65 72 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 63 6f 6c 6f 72 3a 63 6f 6c 6f 72 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 62 67 2d 63 6f 6c 6f 72 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 68 65 69 67 68 74 3a 68 65 69 67 68 74 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6f 70 61 63 69 74 79 3a 6f 70 61 63 69 74 79 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 61 64 64 69 6e 67 3a Data Ascii: border:border 200ms ease-in-out;--transition-color:color 200ms ease-in-out;--transition-bg-color:background-color 200ms ease-in-out;--transition-height:height 200ms ease-in-out;--transition-opacity:opacity 200ms ease-in-out;--transition-padding:
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 2d 2d 69 63 6f 6e 2d 61 63 74 69 76 65 2d 69 6e 76 65 72 74 65 64 3a 72 67 62 61 28 35 31 2c 20 35 31 2c 20 35 31 2c 20 76 61 72 28 2d 2d 69 63 6f 6e 2d 61 63 74 69 76 65 2d 61 6c 70 68 61 2c 20 31 29 29 3b 0a 0a 09 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6c 75 65 2d 69 6e 76 65 72 74 65 64 3a 72 67 62 61 28 34 33 2c 20 31 36 36 2c 20 32 32 32 2c 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 61 6c 70 68 61 2c 20 31 29 29 3b 0a 09 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 67 72 65 65 6e 2d 69 6e 76 65 72 74 65 64 3a 72 67 62 61 28 32 39 2c 20 31 37 36 2c 20 31 32 33 2c 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 61 6c 70 68 61 2c 20 31 29 29 3b 0a 09 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 72 61 6e 67 65 2d 69 6e 76 65 72 74 65 64 3a 72 67 62 61 28 32 Data Ascii: --icon-active-inverted:rgba(51, 51, 51, var(--icon-active-alpha, 1));--secondary-blue-inverted:rgba(43, 166, 222, var(--secondary-alpha, 1));--secondary-green-inverted:rgba(29, 176, 123, var(--secondary-alpha, 1));--secondary-orange-inverted:rgba(2
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 67 23 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 29 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 75 6e 69 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 2d 73 65 6c 65 63 74 65 64 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 75 6e 69 2d 62 65 66 6f 72 65 2e 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 2d 73 65 6c 65 63 74 65 64 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 75 6e 69 2e 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 2d 73 65 6c 65 63 74 65 64 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 72 79 2f 73 70 72 69 74 65 73 2d 66 6d 2d 75 6e 69 2d 75 6e 69 2e 39 31 37 36 36 31 31 38 66 66 30 36 30 38 35 31 2e 73 76 67 23 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 2d Data Ascii: g#icon-gallery)}.sprite-fm-uni-after.icon-gallery-selected-after:after,.sprite-fm-uni-before.icon-gallery-selected-before:before,.sprite-fm-uni.icon-gallery-selected{background-image:url(../imagery/sprites-fm-uni-uni.91766118ff060851.svg#icon-gallery-
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 61 6d 65 72 61 2d 75 70 6c 6f 61 64 73 2d 32 34 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 69 6d 65 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 61 6d 65 72 61 2d 75 70 6c 6f 61 64 73 2d 32 34 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 72 79 2f 73 70 72 69 74 65 73 2d 66 6d 2d 6d 69 6d 65 2d 75 6e 69 2e 39 66 35 61 64 62 36 30 31 30 62 61 65 33 63 65 2e 73 76 67 23 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 61 6d 65 72 61 2d 75 70 6c 6f 61 64 73 2d 32 34 29 0a 7d 0a 2e 69 74 65 6d 2d 74 79 70 65 2d 69 63 6f 6e 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 68 61 74 2d 32 34 2c 2e 69 74 65 6d 2d 74 79 70 65 2d 69 63 6f 6e 2e 69 63 6f 6e 2d Data Ascii: icon-folder-camera-uploads-24-before:before,.sprite-fm-mime.icon-folder-camera-uploads-24{background-image:url(../imagery/sprites-fm-mime-uni.9f5adb6010bae3ce.svg#icon-folder-camera-uploads-24)}.item-type-icon.icon-folder-chat-24,.item-type-icon.icon-
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 72 6c 28 2e 2e 2f 69 6d 61 67 65 72 79 2f 73 70 72 69 74 65 73 2d 66 6d 2d 6d 69 6d 65 2d 39 30 2d 75 6e 69 2e 64 65 63 61 66 32 36 36 32 35 66 37 62 39 65 32 2e 73 76 67 23 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 70 75 62 6c 69 63 2d 39 30 29 0a 7d 0a 2e 69 74 65 6d 2d 74 79 70 65 2d 69 63 6f 6e 2d 39 30 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 73 79 6e 63 2d 39 30 2c 2e 69 74 65 6d 2d 74 79 70 65 2d 69 63 6f 6e 2d 39 30 2e 69 63 6f 6e 2d 72 75 62 62 69 73 68 2d 66 6f 6c 64 65 72 2d 73 79 6e 63 2d 39 30 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 69 6d 65 2d 39 30 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 73 79 6e 63 2d 39 30 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 69 6d 65 2d 39 30 2d 62 65 66 6f 72 65 2e 69 63 6f Data Ascii: rl(../imagery/sprites-fm-mime-90-uni.decaf26625f7b9e2.svg#icon-folder-public-90)}.item-type-icon-90.icon-folder-sync-90,.item-type-icon-90.icon-rubbish-folder-sync-90,.sprite-fm-mime-90-after.icon-folder-sync-90-after:after,.sprite-fm-mime-90-before.ico
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 6c 65 64 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 63 68 61 74 2d 66 69 6c 6c 65 64 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 35 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 63 68 61 74 2d 77 72 69 74 65 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 63 68 61 74 2d 77 72 69 74 65 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 36 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 63 68 61 74 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 63 68 61 74 3a Data Ascii: led-after:after,.sprite-fm-mono.icon-chat-filled:before{content:"\f2a5"}.sprite-fm-mono-after.icon-chat-write-after:after,.sprite-fm-mono.icon-chat-write:before{content:"\f2a6"}.sprite-fm-mono-after.icon-chat-after:after,.sprite-fm-mono.icon-chat:
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 32 35 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 68 65 61 72 74 2d 62 72 6f 6b 65 6e 2d 73 6d 61 6c 6c 2d 72 65 67 75 6c 61 72 2d 6f 75 74 6c 69 6e 65 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 68 65 61 72 74 2d 62 72 6f 6b 65 6e 2d 73 6d 61 6c 6c 2d 72 65 67 75 6c 61 72 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 32 36 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 68 6f 75 72 67 6c 61 73 73 2d 6e 65 77 2d 61 66 74 65 72 3a 61 66 74 65 72 Data Ascii: fm-mono.icon-globe:before{content:"\f325"}.sprite-fm-mono-after.icon-heart-broken-small-regular-outline-after:after,.sprite-fm-mono.icon-heart-broken-small-regular-outline:before{content:"\f326"}.sprite-fm-mono-after.icon-hourglass-new-after:after
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 6f 6e 2d 73 65 74 74 69 6e 67 73 2d 6f 75 74 6c 69 6e 65 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 33 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 34 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 73 68 61 72 65 2d 30 32 2d 74 68 69 6e 2d 6f 75 74 6c 69 6e 65 2d 61 66 74 65 Data Ascii: on-settings-outline-after:after,.sprite-fm-mono.icon-settings-outline:before{content:"\f3b3"}.sprite-fm-mono-after.icon-settings-after:after,.sprite-fm-mono.icon-settings:before{content:"\f3b4"}.sprite-fm-mono-after.icon-share-02-thin-outline-afte
2024-07-11 11:36:46 UTC	16384	IN	Data Raw: 74 61 74 65 2d 72 65 73 74 72 69 63 74 65 64 2d 66 6f 6c 64 65 72 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 2d 66 6f 72 63 65 64 20 2e 73 70 72 69 74 65 2d 66 6d 2d 74 68 65 6d 65 2d 62 65 66 6f 72 65 2e 69 63 6f 6e 2d 65 6d 70 74 79 2d 73 74 61 74 65 2d 72 65 73 74 72 69 63 74 65 64 2d 66 6f 6c 64 65 72 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 2d 66 6f 72 63 65 64 20 2e 73 70 72 69 74 65 2d 66 6d 2d 74 68 65 6d 65 2e 69 63 6f 6e 2d 65 6d 70 74 79 2d 73 74 61 74 65 2d 72 65 73 74 72 69 63 74 65 64 2d 66 6f 6c 64 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 70 72 69 74 65 2d 66 6d 2d 74 68 65 6d 65 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 65 6d 70 74 79 2d 73 74 61 74 65 2d 72 65 73 74 72 Data Ascii: tate-restricted-folder-after:after,.theme-dark-forced .sprite-fm-theme-before.icon-empty-state-restricted-folder-before:before,.theme-dark-forced .sprite-fm-theme.icon-empty-state-restricted-folder,.theme-dark .sprite-fm-theme-after.icon-empty-state-restr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49755	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:46 UTC	456	OUT	GET /4/css/bottom-pages-animations.css-postbuild_077437ba5398f2997efea39e55f89eadd473667177aba0b14a48c8b57c60af43.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:46 UTC	361	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:46 GMT Content-Type: text/css Content-Length: 10479 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-28ef" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:46 UTC	10479	IN	Data Raw: 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 33 70 78 29 7b 0a 2e 61 6e 69 6d 2e 69 6d 67 31 2c 2e 61 6e 69 6d 2e 69 6d 67 2d 77 72 61 70 3a 61 66 74 65 72 2c 2e 61 6e 69 6d 2e 69 6d 67 2d 77 72 61 70 3a 62 65 66 6f 72 65 2c 2e 62 6f 74 74 6f 6d 2d 70 61 67 65 2e 61 6e 69 6d 2c 2e 73 74 61 72 74 70 61 67 65 2e 74 6f 70 2d 6e 6f 74 69 63 65 2c 2e 74 6f 70 2d 74 6f 2d 62 6f 74 74 2e 61 6e 69 6d 7b 0a 09 6f 70 61 63 69 74 79 3a 30 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e Data Ascii: @media only screen and (min-width:783px){.anim.img1,.anim.img-wrap:after,.anim.img-wrap:before,.bottom-page.anim,.startpage.top-notice,.top-to-bott.anim{opacity:0;-webkit-transition:all .2s ease-in-out;transition:all .2s ease-in-out;-webkit-tran

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49753	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:46 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MXKGpzF+w7wuE73&MD=+YFfDOv1 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-11 11:36:46 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 2e88de50-2179-4b54-bdc0-185b792a391e MS-RequestId: f0f3c3c2-e63a-4546-a5fb-4ae88dc814f4 MS-CV: x8xDxLQur0Ol2fB9.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 11 Jul 2024 11:36:45 GMT Connection: close Content-Length: 24490
2024-07-11 11:36:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-07-11 11:36:46 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49757	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:47 UTC	612	OUT	GET /4/js/mega-11_187f230e32b9f5a8b7ccaebdc95e13d34abefa2862e925b8a8bb1355aab74bf0.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:47 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:47 GMT Content-Type: application/javascript Content-Length: 500643 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7a3a3" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:47 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 70 72 6f 70 65 72 74 69 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 72 65 6d 6f 76 65 6e 6f 64 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 75 66 73 73 69 7a 65 63 61 63 68 65 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 72 6f 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 72 6f 70 6c 61 6e 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 6c 61 6e 70 72 69 63 69 6e 67 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 72 6f 70 61 79 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 72 6f 70 61 79 2d 64 69 61 6c 6f 67 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 73 74 61 74 65 73 2d 63 6f 75 6e 74 72 69 65 73 2e 6a 73 0a 20 2a 20 20 Data Ascii: /* Bundle Includes: * js/fm/properties.js * js/fm/removenode.js * js/fm/ufssizecache.js * html/js/pro.js * html/js/proplan.js * html/js/planpricing.js * html/js/propay.js * html/js/propay-dialogs.js * js/states-countries.js *
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 69 72 69 64 5d 20 7c 7c 20 4d 2e 69 73 41 6c 62 75 6d 73 50 61 67 65 28 29 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 72 6f 70 65 72 74 69 65 73 2d 62 72 65 61 64 63 72 75 6d 62 27 2c 20 24 64 69 61 6c 6f 67 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 20 69 64 6c 65 20 73 6f 20 77 65 20 63 61 6e 20 63 61 6c 6c 20 72 65 6e 64 65 72 50 61 74 68 42 72 65 61 64 63 72 75 6d 62 73 20 6f 6e 6c 79 20 6f 6e 63 65 20 74 68 65 20 69 6e 66 6f 20 64 69 61 6c 6f 67 20 69 73 20 72 65 6e 64 65 72 65 64 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: irid] \|\| M.isAlbumsPage()) { $('.properties-breadcrumb', $dialog).addClass('hidden'); } else { // on idle so we can call renderPathBreadcrumbs only once the info dialog is rendered.
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 20 3d 3d 3d 20 4d 2e 63 75 72 72 65 6e 74 64 69 72 69 64 20 7c 7c 20 70 61 72 65 6e 74 20 3d 3d 3d 20 4d 2e 63 75 72 72 65 6e 74 43 75 73 74 6f 6d 56 69 65 77 2e 6e 6f 64 65 49 44 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 74 68 65 20 6e 6f 64 65 20 77 61 73 20 6d 6f 76 65 64 20 6f 75 74 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 76 69 65 77 70 6f 72 74 2c 20 73 6f 20 6c 65 74 73 20 72 65 6d 6f 76 65 20 69 74 20 66 72 6f 6d 20 74 68 65 20 4d 65 67 61 4c 69 73 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 6d 65 67 61 52 65 6e 64 65 72 2e 6d 65 67 61 4c 69 73 74 2e 72 65 6d 6f 76 65 28 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a Data Ascii: === M.currentdirid \|\| parent === M.currentCustomView.nodeID) { // the node was moved out of the current viewport, so lets remove it from the MegaList M.megaRender.megaList.remove(h); } } else {
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 69 74 20 69 66 20 6e 6f 74 20 63 6f 72 72 65 63 74 20 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 6f 6e 46 6f 6c 64 65 72 53 69 7a 65 43 68 61 6e 67 65 55 49 55 70 64 61 74 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 3b 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 63 6f 72 64 20 66 6f 6c 64 65 72 20 6e 6f 64 65 2c 20 70 6f 70 75 6c 61 74 65 73 20 4d 2e 74 72 65 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 6e 20 54 68 65 20 66 6f 6c 64 65 72 20 6e 6f 64 65 20 74 6f 20 61 64 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 42 6f 6f 6c 65 61 6e 7d 20 5b 69 67 6e 6f 72 65 44 42 5d 20 57 68 65 74 68 65 72 20 75 70 64 61 74 69 6e 67 20 6c 6f 63 61 6c 20 73 74 61 74 65 20 6f 6e 6c 79 0a 20 2a 2f 0a 55 46 53 53 69 7a 65 43 61 63 Data Ascii: it if not correct path M.onFolderSizeChangeUIUpdate(n); } }};/** * Record folder node, populates M.tree * @param {Object} n The folder node to add * @param {Boolean} [ignoreDB] Whether updating local state only */UFSSizeCac
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 61 63 63 6f 75 6e 74 2e 6c 61 73 74 75 70 64 61 74 65 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 44 6f 6e 27 74 20 73 68 6f 77 20 74 68 65 20 70 6c 61 6e 20 65 78 70 69 72 79 20 64 69 61 6c 6f 67 20 61 6e 79 6d 6f 72 65 20 66 6f 72 20 74 68 69 73 20 73 65 73 73 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 61 72 6d 2e 70 6c 61 6e 45 78 70 69 72 65 64 2e 6c 61 73 74 50 61 79 6d 65 6e 74 20 3d 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 66 20 6c 61 73 74 20 70 61 79 6d 65 6e 74 20 77 61 73 20 42 69 74 63 6f 69 6e 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 72 65 64 69 72 65 63 74 20 74 6f 20 74 68 65 20 61 63 Data Ascii: M.account.lastupdate = 0; } // Don't show the plan expiry dialog anymore for this session alarm.planExpired.lastPayment = null; // If last payment was Bitcoin, we need to redirect to the ac
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 6d 20 6d 6f 6e 74 68 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 7a 79 28 70 66 2e 70 6c 61 6e 73 2c 20 73 69 6d 70 6c 65 46 69 6c 74 65 72 4b 65 79 73 5b 6a 5d 20 2b 20 6d 6f 6e 74 68 73 54 61 67 2c 20 28 29 20 3d 3e 20 70 72 6f 2e 6d 65 6d 62 65 72 73 68 69 70 50 6c 61 6e 73 2e 66 69 6c 74 65 72 28 28 70 6c 61 6e 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6d 6f 6e 74 68 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 72 6f 2e 66 69 6c 74 65 72 2e 73 69 6d 70 6c 65 5b 73 69 6d 70 6c 65 46 69 6c 74 65 72 4b 65 79 73 5b 6a 5d 5d 2e 68 61 73 28 70 6c 61 6e 5b 70 72 6f 2e 55 54 51 41 5f 52 45 53 5f 49 4e 44 45 58 5f 41 43 43 4f Data Ascii: m months) lazy(pf.plans, simpleFilterKeys[j] + monthsTag, () => pro.membershipPlans.filter((plan) => { if (months) { return pro.filter.simple[simpleFilterKeys[j]].has(plan[pro.UTQA_RES_INDEX_ACCO
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 20 20 20 2f 2f 20 50 72 65 76 65 6e 74 20 49 70 68 6f 6e 65 20 75 72 6c 20 62 61 72 20 72 65 73 69 7a 69 6e 67 20 74 72 69 67 67 65 72 20 72 65 69 6e 69 74 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 57 69 64 74 68 20 3d 20 24 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 57 69 64 74 68 20 21 3d 3d 20 70 72 65 76 57 69 6e 64 6f 77 57 69 64 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 6f 2e 70 72 6f 70 6c 61 6e 2e 69 6e 69 74 50 6c 61 6e 53 6c 69 64 65 72 43 6f 6e 74 72 6f 6c 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 65 76 57 69 6e 64 6f 77 57 69 64 74 68 20 3d Data Ascii: // Prevent Iphone url bar resizing trigger reinit. var currentWindowWidth = $(window).width(); if (currentWindowWidth !== prevWindowWidth) { pro.proplan.initPlanSliderControls(); prevWindowWidth =
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 63 6f 6e 73 74 20 24 67 65 74 46 72 65 65 42 75 74 74 6f 6e 20 3d 20 24 28 27 2e 66 72 65 65 2d 62 75 74 74 6f 6e 27 2c 20 24 73 74 65 70 4f 6e 65 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 24 67 65 74 53 74 61 72 74 65 64 4e 6f 77 20 3d 20 24 28 27 23 67 65 74 2d 73 74 61 72 74 65 64 2d 62 74 6e 27 2c 20 24 73 74 65 70 4f 6e 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 6f 6e 49 64 6c 65 28 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 75 67 68 2c 20 61 20 72 61 63 65 20 77 69 74 68 20 63 6c 69 63 6b 55 52 4c 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 67 65 74 53 74 61 72 74 65 64 4e 6f 77 2e 72 65 62 69 6e 64 28 27 63 6c 69 63 6b 2e 6c 6f 67 27 2c 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: const $getFreeButton = $('.free-button', $stepOne); const $getStartedNow = $('#get-started-btn', $stepOne); onIdle(() => { // ugh, a race with clickURL $getStartedNow.rebind('click.log', () => {
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 65 73 74 61 6d 70 20 3d 3d 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 63 75 72 72 50 6c 61 6e 2e 61 64 64 43 6c 61 73 73 28 27 72 65 6e 65 77 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 63 75 72 72 50 6c 61 6e 2e 61 64 64 43 6c 61 73 73 28 27 72 65 6e 65 77 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 64 61 74 61 28 27 74 61 67 27 2c 20 6c 5b 32 30 37 35 39 5d 2e 72 65 70 6c 61 63 65 28 27 25 31 27 2c 20 74 69 6d 65 32 64 61 74 65 28 72 65 6e 65 77 54 69 6d 65 73 74 61 6d 70 2c 20 32 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 Data Ascii: estamp === 0) { $currPlan.addClass('renew'); } else { $currPlan.addClass('renew') .data('tag', l[20759].replace('%1', time2date(renewTimestamp, 2))); } }
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 6c 6f 67 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 70 61 73 73 77 6f 72 64 20 41 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 65 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 70 72 65 2d 66 69 6c 6c 65 64 20 69 6e 74 6f 20 74 68 65 20 64 69 61 6c 6f 67 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 4c 6f 67 69 6e 44 69 61 6c 6f 67 28 65 6d 61 69 6c 2c 20 70 61 73 73 77 6f 72 64 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 76 61 72 20 24 64 69 61 6c 6f 67 20 3d 20 24 28 27 2e 70 72 6f 2d 6c 6f 67 69 6e 2d 64 69 61 6c 6f 67 27 29 3b 0a 20 20 20 20 76 61 72 20 24 69 6e 70 75 74 73 20 3d 20 24 28 27 69 6e 70 75 74 27 2c 20 24 64 69 61 6c 6f 67 29 3b 0a 20 20 20 20 76 61 72 20 24 62 75 74 74 6f 6e 20 3d 20 24 28 27 Data Ascii: log * @param {String} password A password to be optionally pre-filled into the dialog */function showLoginDialog(email, password) { 'use strict'; var $dialog = $('.pro-login-dialog'); var $inputs = $('input', $dialog); var $button = $('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49759	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:47 UTC	612	OUT	GET /4/js/mega-12_94cd0e56acb1d72a332a2f67a70fab76b5fc4698e19bfbba9141665ebda28f6b.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:47 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:47 GMT Content-Type: application/javascript Content-Length: 420464 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-66a70" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:47 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 66 69 6c 65 76 65 72 73 69 6f 6e 69 6e 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 66 69 6c 65 63 6f 6e 66 6c 69 63 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 67 64 70 72 2d 64 6f 77 6e 6c 6f 61 64 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 72 65 67 69 73 74 65 72 62 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 65 6d 61 69 6c 4e 6f 74 69 66 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 73 6c 69 64 65 73 68 6f 77 2f 66 69 6c 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 73 6c 69 64 65 73 68 6f 77 2f 6d 61 6e 61 67 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 73 6c 69 64 65 73 68 6f 77 2f 70 6c 61 79 6c 69 73 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f Data Ascii: /* Bundle Includes: * js/fm/fileversioning.js * js/fm/fileconflict.js * js/ui/gdpr-download.js * html/js/registerb.js * js/emailNotify.js * js/ui/slideshow/file.js * js/ui/slideshow/manager.js * js/ui/slideshow/playlist.js * js/
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 3d 22 24 7b 6c 5b 31 36 34 37 35 5d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 24 7b 6c 5b 31 36 34 37 35 5d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 76 72 76 5f 24 7b 76 2e 68 7d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 20 69 63 6f 6e 2d 76 65 72 73 69 6f 6e 73 2d 70 72 65 76 69 6f 75 73 20 64 69 73 61 62 6c 65 64 20 6e 6f 6e 63 6c 69 63 6b 61 62 6c 65 22 3e 3c 2f 69 Data Ascii: data-simpletip="${l[16475]}" aria-label="${l[16475]}" id="vrv_${v.h}"> <i class="sprite-fm-mono icon-versions-previous disabled nonclickable"></i
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 63 6b 73 70 61 63 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 76 65 72 73 69 6f 6e 69 6e 67 2e 63 6c 6f 73 65 46 69 6c 65 56 65 72 73 69 6f 6e 69 6e 67 44 69 61 6c 6f 67 28 77 69 6e 64 6f 77 2e 76 65 72 73 69 6f 6e 64 69 61 6c 6f 67 69 64 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 66 6d 2d 76 65 72 73 69 6f 6e 69 6e 67 20 2e 68 65 61 64 65 72 20 2e 62 75 74 74 6f 6e 2e 73 65 74 74 69 6e 67 73 27 29 2e 72 65 62 69 6e 64 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a Data Ascii: ckspace e.stopPropagation(); fileversioning.closeFileVersioningDialog(window.versiondialogid); } }); $('.fm-versioning .header .button.settings').rebind('click', function() {
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 20 20 6e 65 77 4f 6b 4e 6f 64 65 73 20 3d 20 6e 65 77 4f 6b 4e 6f 64 65 73 2e 63 6f 6e 63 61 74 28 72 65 73 2e 6f 6b 4e 6f 64 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6b 4e 6f 64 65 73 20 3d 20 6f 6b 4e 6f 64 65 73 2e 63 6f 6e 63 61 74 28 6e 65 77 4f 6b 4e 6f 64 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 6c 69 63 74 65 64 4e 6f 64 65 73 20 3d 20 63 6f 6e 66 6c 69 63 74 65 64 4e 6f 64 65 73 2e 63 6f 6e 63 61 74 28 6e 65 77 43 6f 6e 66 6c 69 63 74 65 64 4e 6f 64 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b Data Ascii: newOkNodes = newOkNodes.concat(res.okNodes); } } okNodes = okNodes.concat(newOkNodes); conflictedNodes = conflictedNodes.concat(newConflictedNodes); } return {
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 74 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 64 75 70 73 2c 20 74 61 72 67 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 64 75 70 73 20 7c 7c 20 28 21 64 75 70 73 2e 66 69 6c 65 73 20 26 26 20 21 64 75 70 73 2e 66 6f 6c 64 65 72 73 29 20 7c 7c 20 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 75 70 73 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 75 70 73 4b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 75 70 73 2e 66 69 6c 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 6c 6c 44 75 70 73 20 3d 20 64 75 70 73 4b 65 79 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 Data Ascii: tion: function(dups, target) { if (!dups \|\| (!dups.files && !dups.folders) \|\| !Object.keys(dups).length) { return; } var dupsKeys = Object.keys(dups.files); var allDups = dupsKeys.length;
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 72 5b 27 65 6d 61 69 6c 27 5d 29 3b 0a 20 20 20 20 20 20 20 20 24 65 6d 61 69 6c 49 6e 70 75 74 2e 70 72 6f 70 28 27 64 69 73 61 62 6c 65 64 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 24 65 6d 61 69 6c 49 6e 70 75 74 2e 62 6c 75 72 28 29 3b 0a 20 20 20 20 20 20 20 20 24 66 6e 61 6d 65 49 6e 70 75 74 2e 76 61 6c 28 75 5f 61 74 74 72 5b 27 66 69 72 73 74 6e 61 6d 65 27 5d 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 5f 61 74 74 72 5b 27 66 69 72 73 74 6e 61 6d 65 27 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 66 6e 61 6d 65 49 6e 70 75 74 2e 70 72 6f 70 28 27 64 69 73 61 62 6c 65 64 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 66 6e 61 6d 65 49 6e 70 75 74 2e 62 6c 75 72 28 29 3b 0a 20 20 20 20 20 20 20 20 7d Data Ascii: r['email']); $emailInput.prop('disabled', true); $emailInput.blur(); $fnameInput.val(u_attr['firstname']); if (u_attr['firstname']) { $fnameInput.prop('disabled', true); $fnameInput.blur(); }
2024-07-11 11:36:47 UTC	16384	IN	Data Raw: 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 6c 6e 61 6d 65 49 6e 70 75 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 76 61 6c 69 64 61 74 65 50 68 6f 6e 65 4e 75 6d 62 65 72 28 24 74 65 6c 49 6e 70 75 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 65 6d 61 69 6c 49 6e 70 75 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 70 61 73 73 49 6e 70 75 74 2e 76 61 6c 28 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 29 3b 0a 0a 20 20 20 20 24 72 65 67 42 74 6e 73 2e 72 65 62 69 6e 64 28 0a 20 20 20 20 20 20 20 20 27 6b 65 79 64 6f 77 6e 2e 72 65 67 42 74 6e 73 27 2c 0a 20 20 20 Data Ascii: (), $lnameInput.val().trim(), M.validatePhoneNumber($telInput.val().trim()), $emailInput.val().trim(), $passInput.val()); } ); $regBtns.rebind( 'keydown.regBtns',
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 20 68 61 73 54 6f 42 75 69 6c 64 50 6c 61 79 6c 69 73 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 21 69 73 43 68 61 6e 67 65 4f 72 64 65 72 20 26 26 20 74 68 69 73 2e 5f 69 73 46 65 74 63 68 41 6c 6c 6f 77 65 64 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 69 6c 65 2e 73 74 61 74 65 2e 69 73 52 65 61 64 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 2e 61 62 6f 72 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 67 69 76 65 20 22 66 69 6c 65 2e 61 62 6f 72 Data Ascii: hasToBuildPlaylist = false; } } else if (!isChangeOrder && this._isFetchAllowed()) { if (!file.state.isReady) { file.abort(); } // give "file.abor
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 20 65 6e 61 62 6c 65 64 20 2f 20 64 69 73 61 62 6c 65 64 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 67 65 74 44 65 66 61 75 6c 74 43 66 67 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 52 65 6e 64 65 72 20 73 6c 69 64 65 73 68 6f 77 20 73 65 74 74 69 6e 67 73 20 55 49 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 20 76 61 6c 75 65 73 0a 20 20 20 20 20 20 20 20 20 2a 20 53 65 74 74 69 6e 67 73 20 55 49 20 65 6c 65 6d 65 6e 74 73 20 77 69 6c 6c 20 62 65 Data Ascii: * @returns {Boolean} enabled / disabled / getDefaultCfg() { return this._defaultValue; } /* * Render slideshow settings UI according to config values * Settings UI elements will be
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 2a 20 52 65 6e 64 65 72 20 73 6c 69 64 65 73 68 6f 77 20 73 65 74 74 69 6e 67 73 20 55 49 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 20 76 61 6c 75 65 73 0a 20 20 20 20 20 20 20 20 20 2a 20 53 65 74 74 69 6e 67 73 20 55 49 20 65 6c 65 6d 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 76 69 64 65 64 20 77 69 74 68 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 20 65 76 65 6e 74 20 62 69 6e 64 69 6e 67 73 0a 20 20 20 20 20 20 20 20 20 2a 20 53 65 74 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 69 6e 20 63 61 73 65 20 75 6e 64 65 66 69 6e 65 64 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 24 63 6f 6e 74 61 69 6e 65 72 20 2d 20 6a 71 75 65 72 79 20 65 6c 65 6d 65 6e 74 20 63 6f 6e 74 61 69 Data Ascii: * Render slideshow settings UI according to config values * Settings UI elements will be provided with config change event bindings * Set default config in case undefined * @param {Object} $container - jquery element contai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49756	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:47 UTC	425	OUT	GET /4/css/mega-2_0e8588a249d6083898d049dfb2a913376c3f0434efe856bbfd93c62e6f82f42d.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:47 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:47 GMT Content-Type: text/css Content-Length: 240597 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-3abd5" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:47 UTC	16021	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 63 6f 64 65 6d 69 72 72 6f 72 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 74 78 74 65 64 69 74 6f 72 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 76 61 72 73 2f 74 68 65 6d 65 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 77 69 74 63 68 65 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 72 69 74 65 73 2f 66 6d 2d 75 6e 69 40 75 6e 69 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 72 69 74 65 73 2f 66 6d 2d 6d 69 6d 65 40 75 6e 69 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 72 69 74 65 73 2f 66 6d 2d 6d 69 6d 65 2d 39 30 40 75 6e 69 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 70 72 69 74 65 73 2f 66 6d 2d 6d 6f 6e 6f 40 6d 6f 6e 6f 2e 63 73 73 0a 20 2a 20 20 20 63 73 Data Ascii: /* Bundle Includes: * css/codemirror.css * css/txteditor.css * css/vars/theme.css * css/switches.css * css/sprites/fm-uni@uni.css * css/sprites/fm-mime@uni.css * css/sprites/fm-mime-90@uni.css * css/sprites/fm-mono@mono.css * cs
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 62 6f 72 64 65 72 3a 62 6f 72 64 65 72 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 63 6f 6c 6f 72 3a 63 6f 6c 6f 72 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 62 67 2d 63 6f 6c 6f 72 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 68 65 69 67 68 74 3a 68 65 69 67 68 74 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6f 70 61 63 69 74 79 3a 6f 70 61 63 69 74 79 20 32 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 61 64 64 69 6e 67 3a Data Ascii: border:border 200ms ease-in-out;--transition-color:color 200ms ease-in-out;--transition-bg-color:background-color 200ms ease-in-out;--transition-height:height 200ms ease-in-out;--transition-opacity:opacity 200ms ease-in-out;--transition-padding:
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 2d 2d 69 63 6f 6e 2d 61 63 74 69 76 65 2d 69 6e 76 65 72 74 65 64 3a 72 67 62 61 28 35 31 2c 20 35 31 2c 20 35 31 2c 20 76 61 72 28 2d 2d 69 63 6f 6e 2d 61 63 74 69 76 65 2d 61 6c 70 68 61 2c 20 31 29 29 3b 0a 0a 09 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6c 75 65 2d 69 6e 76 65 72 74 65 64 3a 72 67 62 61 28 34 33 2c 20 31 36 36 2c 20 32 32 32 2c 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 61 6c 70 68 61 2c 20 31 29 29 3b 0a 09 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 67 72 65 65 6e 2d 69 6e 76 65 72 74 65 64 3a 72 67 62 61 28 32 39 2c 20 31 37 36 2c 20 31 32 33 2c 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 61 6c 70 68 61 2c 20 31 29 29 3b 0a 09 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 72 61 6e 67 65 2d 69 6e 76 65 72 74 65 64 3a 72 67 62 61 28 32 Data Ascii: --icon-active-inverted:rgba(51, 51, 51, var(--icon-active-alpha, 1));--secondary-blue-inverted:rgba(43, 166, 222, var(--secondary-alpha, 1));--secondary-green-inverted:rgba(29, 176, 123, var(--secondary-alpha, 1));--secondary-orange-inverted:rgba(2
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 67 23 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 29 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 75 6e 69 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 2d 73 65 6c 65 63 74 65 64 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 75 6e 69 2d 62 65 66 6f 72 65 2e 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 2d 73 65 6c 65 63 74 65 64 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 75 6e 69 2e 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 2d 73 65 6c 65 63 74 65 64 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 72 79 2f 73 70 72 69 74 65 73 2d 66 6d 2d 75 6e 69 2d 75 6e 69 2e 39 31 37 36 36 31 31 38 66 66 30 36 30 38 35 31 2e 73 76 67 23 69 63 6f 6e 2d 67 61 6c 6c 65 72 79 2d Data Ascii: g#icon-gallery)}.sprite-fm-uni-after.icon-gallery-selected-after:after,.sprite-fm-uni-before.icon-gallery-selected-before:before,.sprite-fm-uni.icon-gallery-selected{background-image:url(../imagery/sprites-fm-uni-uni.91766118ff060851.svg#icon-gallery-
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 61 6d 65 72 61 2d 75 70 6c 6f 61 64 73 2d 32 34 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 69 6d 65 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 61 6d 65 72 61 2d 75 70 6c 6f 61 64 73 2d 32 34 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 72 79 2f 73 70 72 69 74 65 73 2d 66 6d 2d 6d 69 6d 65 2d 75 6e 69 2e 39 66 35 61 64 62 36 30 31 30 62 61 65 33 63 65 2e 73 76 67 23 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 61 6d 65 72 61 2d 75 70 6c 6f 61 64 73 2d 32 34 29 0a 7d 0a 2e 69 74 65 6d 2d 74 79 70 65 2d 69 63 6f 6e 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 68 61 74 2d 32 34 2c 2e 69 74 65 6d 2d 74 79 70 65 2d 69 63 6f 6e 2e 69 63 6f 6e 2d Data Ascii: icon-folder-camera-uploads-24-before:before,.sprite-fm-mime.icon-folder-camera-uploads-24{background-image:url(../imagery/sprites-fm-mime-uni.9f5adb6010bae3ce.svg#icon-folder-camera-uploads-24)}.item-type-icon.icon-folder-chat-24,.item-type-icon.icon-
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 72 6c 28 2e 2e 2f 69 6d 61 67 65 72 79 2f 73 70 72 69 74 65 73 2d 66 6d 2d 6d 69 6d 65 2d 39 30 2d 75 6e 69 2e 64 65 63 61 66 32 36 36 32 35 66 37 62 39 65 32 2e 73 76 67 23 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 70 75 62 6c 69 63 2d 39 30 29 0a 7d 0a 2e 69 74 65 6d 2d 74 79 70 65 2d 69 63 6f 6e 2d 39 30 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 73 79 6e 63 2d 39 30 2c 2e 69 74 65 6d 2d 74 79 70 65 2d 69 63 6f 6e 2d 39 30 2e 69 63 6f 6e 2d 72 75 62 62 69 73 68 2d 66 6f 6c 64 65 72 2d 73 79 6e 63 2d 39 30 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 69 6d 65 2d 39 30 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 73 79 6e 63 2d 39 30 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 69 6d 65 2d 39 30 2d 62 65 66 6f 72 65 2e 69 63 6f Data Ascii: rl(../imagery/sprites-fm-mime-90-uni.decaf26625f7b9e2.svg#icon-folder-public-90)}.item-type-icon-90.icon-folder-sync-90,.item-type-icon-90.icon-rubbish-folder-sync-90,.sprite-fm-mime-90-after.icon-folder-sync-90-after:after,.sprite-fm-mime-90-before.ico
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 6c 65 64 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 63 68 61 74 2d 66 69 6c 6c 65 64 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 35 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 63 68 61 74 2d 77 72 69 74 65 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 63 68 61 74 2d 77 72 69 74 65 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 36 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 63 68 61 74 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 63 68 61 74 3a Data Ascii: led-after:after,.sprite-fm-mono.icon-chat-filled:before{content:"\f2a5"}.sprite-fm-mono-after.icon-chat-write-after:after,.sprite-fm-mono.icon-chat-write:before{content:"\f2a6"}.sprite-fm-mono-after.icon-chat-after:after,.sprite-fm-mono.icon-chat:
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 32 35 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 68 65 61 72 74 2d 62 72 6f 6b 65 6e 2d 73 6d 61 6c 6c 2d 72 65 67 75 6c 61 72 2d 6f 75 74 6c 69 6e 65 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 68 65 61 72 74 2d 62 72 6f 6b 65 6e 2d 73 6d 61 6c 6c 2d 72 65 67 75 6c 61 72 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 32 36 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 68 6f 75 72 67 6c 61 73 73 2d 6e 65 77 2d 61 66 74 65 72 3a 61 66 74 65 72 Data Ascii: fm-mono.icon-globe:before{content:"\f325"}.sprite-fm-mono-after.icon-heart-broken-small-regular-outline-after:after,.sprite-fm-mono.icon-heart-broken-small-regular-outline:before{content:"\f326"}.sprite-fm-mono-after.icon-hourglass-new-after:after
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 6f 6e 2d 73 65 74 74 69 6e 67 73 2d 6f 75 74 6c 69 6e 65 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 33 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2e 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 62 65 66 6f 72 65 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 34 22 0a 7d 0a 2e 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 73 68 61 72 65 2d 30 32 2d 74 68 69 6e 2d 6f 75 74 6c 69 6e 65 2d 61 66 74 65 Data Ascii: on-settings-outline-after:after,.sprite-fm-mono.icon-settings-outline:before{content:"\f3b3"}.sprite-fm-mono-after.icon-settings-after:after,.sprite-fm-mono.icon-settings:before{content:"\f3b4"}.sprite-fm-mono-after.icon-share-02-thin-outline-afte
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 74 61 74 65 2d 72 65 73 74 72 69 63 74 65 64 2d 66 6f 6c 64 65 72 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 2d 66 6f 72 63 65 64 20 2e 73 70 72 69 74 65 2d 66 6d 2d 74 68 65 6d 65 2d 62 65 66 6f 72 65 2e 69 63 6f 6e 2d 65 6d 70 74 79 2d 73 74 61 74 65 2d 72 65 73 74 72 69 63 74 65 64 2d 66 6f 6c 64 65 72 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 2d 66 6f 72 63 65 64 20 2e 73 70 72 69 74 65 2d 66 6d 2d 74 68 65 6d 65 2e 69 63 6f 6e 2d 65 6d 70 74 79 2d 73 74 61 74 65 2d 72 65 73 74 72 69 63 74 65 64 2d 66 6f 6c 64 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 70 72 69 74 65 2d 66 6d 2d 74 68 65 6d 65 2d 61 66 74 65 72 2e 69 63 6f 6e 2d 65 6d 70 74 79 2d 73 74 61 74 65 2d 72 65 73 74 72 Data Ascii: tate-restricted-folder-after:after,.theme-dark-forced .sprite-fm-theme-before.icon-empty-state-restricted-folder-before:before,.theme-dark-forced .sprite-fm-theme.icon-empty-state-restricted-folder,.theme-dark .sprite-fm-theme-after.icon-empty-state-restr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49758	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:47 UTC	424	OUT	GET /4/js/mega-10_c1031f4cca0d2cad1a9074cd0879ca29d084e2eb528787879d9134c8fa495250.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:48 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:47 GMT Content-Type: application/javascript Content-Length: 511137 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7cca1" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:48 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 66 69 6c 65 54 65 78 74 45 64 69 74 6f 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 74 65 78 74 45 64 69 74 6f 72 55 49 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 78 68 72 32 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 71 75 65 75 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 75 74 69 6c 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 6d 65 74 68 73 2f 63 61 63 68 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 6d 65 74 68 73 2f 6d 65 6d 6f 72 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 74 72 61 6e 73 66 65 72 73 2f 6d 65 74 68 73 2f 66 69 6c 65 73 79 73 74 Data Ascii: /* Bundle Includes: * js/fm/fileTextEditor.js * js/fm/textEditorUI.js * js/transfers/xhr2.js * js/transfers/queue.js * js/transfers/utils.js * js/transfers/meths/cache.js * js/transfers/meths/memory.js * js/transfers/meths/filesyst
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 65 64 69 74 6f 72 43 6f 6e 74 61 69 6e 65 72 2e 72 65 62 69 6e 64 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 6d 6f 75 73 65 75 70 2e 74 78 74 2d 65 64 69 74 6f 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 65 78 74 45 64 69 74 6f 72 47 6c 6f 62 61 6c 43 6c 69 63 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 4d 65 6e 75 2e 63 6c 6f 73 65 28 66 69 6c 65 4d 65 6e 75 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 4d 65 6e 75 2e 63 6c 6f 73 65 28 66 6f 72 6d 61 74 4d 65 6e 75 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 Data Ascii: e; } ); $editorContainer.rebind( 'mouseup.txt-editor', function textEditorGlobalClick() { contextMenu.close(fileMenu); contextMenu.close(formatMenu); retu
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 45 4e 44 20 4d 45 47 41 20 4c 49 4d 49 54 45 44 20 43 4f 44 45 20 52 45 56 49 45 57 20 4c 49 43 45 4e 43 45 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 5f 78 68 72 54 72 61 6e 73 66 65 72 73 4c 6f 67 69 63 28 67 6c 6f 62 61 6c 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 76 61 72 20 78 68 72 54 69 6d 65 6f 75 74 20 3d 20 70 61 72 73 65 49 6e 74 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 78 68 72 54 69 6d 65 6f 75 74 29 20 7c 7c 20 31 32 65 34 3b 0a 20 20 20 20 76 61 72 20 6c 6f 67 67 65 72 20 3d 20 4d 65 67 61 4c 6f 67 67 65 72 2e 67 65 74 4c 6f 67 67 65 72 28 27 78 68 72 32 27 29 3b 0a 20 20 20 20 76 61 72 20 64 65 Data Ascii: ************** END MEGA LIMITED CODE REVIEW LICENCE *************** */(function _xhrTransfersLogic(global) { "use strict"; var xhrTimeout = parseInt(localStorage.xhrTimeout) \|\| 12e4; var logger = MegaLogger.getLogger('xhr2'); var de
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 28 27 70 61 75 73 65 27 29 3b 0a 7d 3b 0a 0a 4d 65 67 61 51 75 65 75 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 61 75 73 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 75 73 65 64 3b 0a 7d 3b 0a 0a 4d 65 67 61 51 75 65 75 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 41 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 61 73 6b 73 2c 20 6e 65 78 74 2c 20 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 43 43 51 75 65 75 65 43 68 65 63 6b 65 72 28 74 61 73 6b 2c 20 72 65 73 70 6f 6e 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 6c 65 6e 67 74 68 20 26 26 20 72 65 73 70 6f 6e 73 65 5b 30 5d 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0a 20 20 20 20 Data Ascii: ('pause');};MegaQueue.prototype.isPaused = function() { return this._paused;};MegaQueue.prototype.pushAll = function(tasks, next, error) { function CCQueueChecker(task, response) { if (response.length && response[0] === false) {
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6c 6d 61 6e 61 67 65 72 2e 6c 6f 67 67 65 72 2e 77 61 72 6e 28 60 64 6c 46 61 74 61 6c 45 72 72 6f 72 3a 20 24 7b 65 72 72 6f 72 7d 60 2c 20 64 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 2f 2f 20 53 65 74 20 74 72 61 6e 73 66 65 72 20 73 74 61 74 75 73 20 61 6e 64 20 61 62 6f 72 74 20 69 74 0a 20 20 20 20 73 65 74 54 72 61 6e 73 66 65 72 53 74 61 74 75 73 28 64 6c 2c 20 65 72 72 6f 72 2c 20 65 74 68 72 6f 77 2c 20 6c 6f 63 6b 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 6c 6f 63 6b 20 3a 20 74 Data Ascii: if (d) { dlmanager.logger.warn(`dlFatalError: ${error}`, dl); } } } }); // Set transfer status and abort it setTransferStatus(dl, error, ethrow, lock !== undefined ? lock : t
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 20 61 6e 79 20 70 61 74 65 6e 74 20 72 69 67 68 74 20 69 6e 20 72 65 73 70 65 63 74 0a 20 2a 20 20 20 20 6f 66 20 74 68 65 20 63 6f 64 65 20 28 69 6e 63 6c 75 64 69 6e 67 20 61 6e 79 20 6a 6f 69 6e 64 65 72 20 6f 72 20 63 6f 75 6e 74 65 72 63 6c 61 69 6d 29 2c 20 79 6f 75 72 20 6c 69 63 65 6e 63 65 20 74 6f 0a 20 2a 20 20 20 20 74 68 65 20 63 6f 64 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 65 72 6d 69 6e 61 74 65 64 2e 0a 20 2a 0a 20 2a 20 33 2e 20 54 48 45 20 43 4f 44 45 20 49 53 20 4d 41 44 45 20 41 56 41 49 4c 41 42 4c 45 20 22 41 53 2d 49 53 22 20 41 4e 44 20 57 49 54 48 4f 55 54 20 41 4e 59 20 45 58 50 52 45 53 53 20 4f 46 20 49 4d 50 4c 49 45 44 0a 20 2a 20 20 20 20 47 55 41 52 41 4e 54 45 45 53 20 41 53 20 54 4f 20 46 49 54 4e 45 Data Ascii: any patent right in respect * of the code (including any joinder or counterclaim), your licence to * the code is automatically terminated. * * 3. THE CODE IS MADE AVAILABLE "AS-IS" AND WITHOUT ANY EXPRESS OF IMPLIED * GUARANTEES AS TO FITNE
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 6e 53 65 63 75 72 69 74 79 45 72 72 6f 72 53 77 69 74 63 68 4d 65 74 68 6f 64 28 64 6c 2c 20 64 6c 5f 69 64 2c 20 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 63 68 65 63 6b 53 65 63 75 72 69 74 79 45 72 72 6f 72 28 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 62 6f 72 74 41 6e 64 53 74 61 72 74 4f 76 65 72 28 64 6c 2c 20 64 6c 5f 69 64 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 69 74 28 73 74 6f 72 61 Data Ascii: n true; } } function onSecurityErrorSwitchMethod(dl, dl_id, e) { if (checkSecurityError(e)) { abortAndStartOver(dl, dl_id, e); return true; } return false; } function clearit(stora
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6c 46 61 74 61 6c 45 72 72 6f 72 28 64 6c 2c 20 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6c 5f 66 77 2e 6f 6e 77 72 69 74 65 65 6e 64 20 3d 20 74 72 79 43 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 72 72 6f 72 20 3d 20 74 72 75 65 3b 0a 0a 20 Data Ascii: dlFatalError(dl, ex); } }; dl_fw.onwriteend = tryCatch(function() { var error = true;
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 73 2e 50 72 6f 67 72 65 73 73 2e 64 61 74 61 5b 74 68 69 73 2e 78 69 64 5d 3b 0a 20 20 20 20 69 66 20 28 21 70 62 78 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 21 72 65 70 6f 72 74 5f 64 6f 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 70 6f 72 74 5f 64 6f 6e 65 20 3d 20 21 74 68 69 73 2e 64 6f 6e 65 20 26 26 20 64 6c 51 75 65 75 65 2e 63 61 6e 45 78 70 61 6e 64 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 28 70 62 78 5b 31 5d 20 2d 20 70 62 78 5b 30 5d 29 20 2f 20 74 68 69 73 2e 50 72 6f 67 72 65 73 73 2e 73 70 65 65 64 20 3c 3d 20 64 6c 6d 61 6e 61 67 65 72 2e 64 6c 44 6f 6e 65 54 68 72 65 73 68 6f 6c 64 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 72 65 70 6f 72 74 5f 64 6f Data Ascii: s.Progress.data[this.xid]; if (!pbx) { return; } if (!report_done) { report_done = !this.done && dlQueue.canExpand() && (pbx[1] - pbx[0]) / this.Progress.speed <= dlmanager.dlDoneThreshold; } if (report_do
2024-07-11 11:36:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6c 2e 69 6f 2e 73 65 74 43 72 65 64 65 6e 74 69 61 6c 73 28 22 22 2c 20 30 2c 20 74 68 69 73 2e 64 6c 2e 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 72 61 6e 73 66 65 72 53 74 61 74 75 73 28 74 68 69 73 2e 64 6c 2c 20 65 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 66 61 74 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 64 6c 29 Data Ascii: return this.dl.io.setCredentials("", 0, this.dl.n); } catch (e) { setTransferStatus(this.dl, e, true); } } else if (fatal) { if (this.dl)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49761	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:48 UTC	613	OUT	GET /4/css/mega-3_1922102b66d4c2764a8cfa9bdbd87e007dc19b2a5b83a743f758ff17051c647e.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:48 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:48 GMT Content-Type: text/css Content-Length: 736213 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-b3bd5" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:48 UTC	16021	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 62 75 74 74 6f 6e 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 66 6d 2d 68 65 61 64 65 72 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 66 6d 2d 62 72 65 61 64 63 72 75 6d 62 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 66 6d 2d 6c 69 73 74 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 67 72 69 64 2d 74 61 62 6c 65 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 74 61 62 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 65 6d 70 74 79 2d 70 61 67 65 73 2e 63 73 73 0a 20 2a 20 20 Data Ascii: /* Bundle Includes: * css/buttons.css * css/components.css * css/ui/mcomponents.css * css/style.css * css/fm-header.css * css/fm-breadcrumb.css * css/fm-lists.css * css/grid-table.css * css/tabs.css * css/empty-pages.css *
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 69 2e 6d 6c 2d 30 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 0a 7d 0a 62 6f 64 79 2e 72 74 6c 20 2e 6d 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 69 2e 6d 72 2d 34 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 0a 7d 0a 62 6f 64 79 2e 72 74 6c 20 2e 6d 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 69 2e 6d 6c 2d 33 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 0a 7d 0a 2e 6d 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 6e 6f 74 28 2e 69 74 65 6d 2d 62 6f 6c 64 29 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 0a 7d 0a 2e 6d 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 69 74 65 6d 2d 62 6f 6c 64 7b 0a 09 66 6f 6e 74 Data Ascii: opdown-item i.ml-0{margin-right:0}body.rtl .m-dropdown-item i.mr-4{margin-left:1rem}body.rtl .m-dropdown-item i.ml-3{margin-right:.75rem}.m-dropdown-item:not(.item-bold){font-family:var(--text-font-family)}.m-dropdown-item.item-bold{font
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 75 6c 20 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 0a 09 63 6c 69 70 3a 72 65 63 74 28 30 2c 20 37 34 70 78 2c 20 31 34 38 70 78 2c 20 30 29 0a 7d 0a 2e 72 69 67 68 74 2d 63 20 73 70 61 6e 7b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 37 34 70 78 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 37 34 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 37 34 70 78 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 37 34 70 78 0a 7d 0a 2e 6c 65 66 74 2d 63 20 73 70 61 6e 7b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 Data Ascii: ul :nth-child(2n){clip:rect(0, 74px, 148px, 0)}.right-c span{-webkit-border-bottom-left-radius:74px;border-bottom-left-radius:74px;-webkit-border-top-left-radius:74px;border-top-left-radius:74px}.left-c span{-webkit-border-bottom-right-ra
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 72 2d 65 72 72 6f 72 29 3b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 32 35 43 46 22 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 0a 7d 0a 2e 70 72 6f 20 6c 69 3a 6e 6f 74 28 2e 6e 6f 2d 72 65 64 2d 64 6f 74 29 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 30 20 31 32 70 78 20 32 30 70 78 0a 7d 0a 73 74 72 6f 6e 67 2e 73 6d 61 6c 6c 2d 68 65 61 64 65 72 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 5f 73 61 6e 73 5f 70 72 6f 62 6f 6c 64 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 0a 7d 0a 2e 62 72 6f 77 73 65 72 73 2d 74 6f 70 2d 69 63 6f 6e Data Ascii: r-error);content:"\25CF";left:0;position:absolute}.pro li:not(.no-red-dot){padding:0 0 12px 20px}strong.small-header{display:block;font-family:source_sans_probold,Arial,sans-serif;font-weight:400;padding-bottom:4px}.browsers-top-icon
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 31 36 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 30 20 33 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 72 69 67 68 74 3a 38 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 09 74 6f 70 3a 34 70 78 3b 0a 09 7a 2d 69 6e 64 65 78 3a 31 30 0a 7d 0a 2e 75 6e 72 65 61 64 20 2e 6e 77 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2d 75 6e 72 65 61 64 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 0a 7d 0a 2e 6e 77 2d 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 6e 77 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2d 75 6e 72 65 61 64 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 20 30 25 2c 20 34 36 2e 37 25 2c 20 Data Ascii: e-height:12px;min-width:16px;padding:0 3px;position:absolute;right:8px;text-align:center;top:4px;z-index:10}.unread .nw-conversations-unread{display:block}.nw-contact-item .nw-conversations-unread{background-color:hsla(0, 0%, 46.7%,
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 74 61 74 75 73 2d 69 63 6f 6e 2e 73 74 61 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 70 78 20 2d 34 39 33 34 70 78 0a 7d 0a 2e 74 61 6b 65 6e 2d 64 6f 77 6e 20 2e 66 69 6c 65 2d 73 74 61 74 75 73 2d 69 63 6f 6e 2c 2e 74 61 6b 65 6e 2d 64 6f 77 6e 20 2e 66 69 6c 65 2d 73 74 61 74 75 73 2d 69 63 6f 6e 2e 73 74 61 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 70 78 20 2d 34 39 33 34 70 78 0a 7d 0a 2e 6f 75 74 2d 73 68 61 72 65 64 2d 62 6c 6f 63 6b 73 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 69 6e 66 6f 2d 62 6c 6f 63 6b 7b 0a 09 7a 2d 69 6e 64 65 78 3a 31 0a 7d 0a 2e 6f 75 74 2d 73 68 61 72 65 64 2d 62 6c 6f 63 6b 73 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 Data Ascii: tatus-icon.star{background-position:-8px -4934px}.taken-down .file-status-icon,.taken-down .file-status-icon.star{background-position:-9px -4934px}.out-shared-blocks-view .shared-folder-info-block{z-index:1}.out-shared-blocks-view .shared-fold
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 6e 64 65 78 3a 31 30 30 0a 7d 0a 2e 64 6f 77 6e 6c 6f 61 64 2d 73 61 76 65 2d 79 6f 75 72 2d 66 69 6c 65 20 6f 62 6a 65 63 74 7b 0a 09 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 0a 7d 0a 2e 66 6d 2d 64 69 61 6c 6f 67 2d 6e 65 77 2d 66 6f 6c 64 65 72 2d 69 6e 70 75 74 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 75 72 66 61 63 65 2d 67 72 65 79 2d 31 29 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 73 74 72 6f 6b 65 2d 67 72 65 79 2d 32 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c Data Ascii: ndex:100}.download-save-your-file object{cursor:pointer;width:100% !important}.fm-dialog-new-folder-input{background:var(--surface-grey-1);border:1px solid var(--stroke-grey-2);border-radius:4px;box-sizing:border-box;color:var(--text-col
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 30 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 0a 7d 0a 2e 61 76 61 74 61 72 2d 62 67 20 73 70 61 6e 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 70 78 29 3b 0a 09 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 35 70 78 29 3b 0a 09 68 65 69 67 68 74 3a 31 31 30 25 3b 0a 09 6c 65 66 74 3a 2d 35 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 2d 35 25 3b 0a 09 77 69 64 74 68 Data Ascii: olute;top:0;-webkit-transform:translateZ(0);width:100%}.avatar-bg span{background-position:50%;background-size:cover;display:block;filter:blur(10px);-webkit-filter:blur(15px);height:110%;left:-5%;position:absolute;top:-5%;width
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 66 6f 2d 62 6c 6f 63 6b 7b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 72 61 6e 67 65 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 2d 68 69 67 68 29 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 68 65 69 67 68 74 3a 33 36 70 78 3b 0a 09 6c 65 66 74 3a 31 32 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 74 6f 70 3a 36 37 70 78 3b 0a 09 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 34 70 78 29 0a 7d 0a 2e Data Ascii: fo-block{align-items:center;background-color:var(--secondary-orange);border-radius:8px;box-sizing:border-box;color:var(--text-color-white-high);display:flex;height:36px;left:12px;position:relative;top:67px;width:calc(100% - 24px)}.
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 6c 6f 61 74 3a 6c 65 66 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 38 70 78 20 34 70 78 20 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 6e 65 77 2d 61 66 66 69 6c 69 61 74 65 2d 73 74 61 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 6d 65 67 61 2f 6e 65 77 2d 61 66 66 69 6c 69 61 74 65 2d 73 70 72 69 74 65 2e 70 6e 67 3f 76 3d 36 39 34 34 36 39 32 34 32 32 38 38 35 39 38 36 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 37 38 70 78 20 2d 31 35 34 31 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a Data Ascii: loat:left;font-size:14px;line-height:25px;padding:20px 18px 4px 0;position:relative}.new-affiliate-star{background-image:url(../images/mega/new-affiliate-sprite.png?v=6944692422885986);background-position:-1478px -1541px;background-repeat:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49763	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:48 UTC	612	OUT	GET /4/js/mega-13_230200d24f6daf921d926ff4d88f646672c163e3f5478212c35961f60d815a0d.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:49 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:48 GMT Content-Type: application/javascript Content-Length: 506441 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7ba49" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:49 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 43 6f 6d 70 6f 6e 65 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 42 75 74 74 6f 6e 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 43 68 65 63 6b 62 6f 78 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 43 6f 6e 74 65 78 74 4d 65 6e 75 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d Data Ascii: /* Bundle Includes: * js/ui/mcomponents/classes/MComponent.js * js/ui/mcomponents/classes/MButton.js * js/ui/mcomponents/classes/MCheckbox.js * js/ui/mcomponents/classes/MContextMenu.js * js/ui/mcomponents/classes/MDialog.js * js/ui/mcom
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 27 20 3a 20 27 73 68 6f 77 27 5d 28 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 73 65 74 50 6f 73 69 74 69 6f 6e 42 79 43 6f 6f 72 64 69 6e 61 74 65 73 28 78 2c 20 79 2c 20 70 72 6f 70 6f 73 65 58 2c 20 70 72 6f 70 6f 73 65 59 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6d 69 6e 57 69 64 74 68 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 6c 2e 73 74 79 6c 65 2e 6d 69 6e 57 69 64 74 68 20 3d 20 74 68 69 73 2e 5f 6d 69 6e 57 69 64 74 68 20 2b 20 27 70 78 27 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 78 20 2b 20 74 68 69 73 2e 65 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 20 3e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ' : 'show'](); } setPositionByCoordinates(x, y, proposeX, proposeY) { if (this._minWidth > 0) { this.el.style.minWidth = this._minWidth + 'px'; } if (x + this.el.offsetWidth > window.innerWidth) {
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 74 6f 44 69 73 6d 69 73 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 67 65 74 20 6f 70 74 69 6f 6e 73 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 5b 5d 7d 20 6c 69 73 74 20 4f 70 74 69 6f 6e 73 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7c 66 75 6e 63 74 69 6f 6e 28 29 3a 20 53 74 72 69 6e 67 7c 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 20 6c 69 73 74 5b 5d 2e 6c 61 62 65 6c 20 4c 61 62 65 6c 20 6f 66 20 74 68 65 20 6f 70 74 69 6f 6e 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 46 75 6e 63 74 69 6f 6e 7d 20 6c 69 73 Data Ascii: toDismiss; } get options() { return this._options \|\| []; } /** * @param {Object[]} list Options to work with * @param {String\|function(): String\|HTMLElement} list[].label Label of the option * @param {Function} lis
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 6f 72 20 65 76 65 72 79 20 6e 65 77 20 4d 65 67 61 44 79 6e 61 6d 69 63 4c 69 73 74 20 74 68 61 74 20 67 65 74 73 20 69 6e 69 74 69 61 6c 69 73 65 64 2e 0a 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 74 79 70 65 20 7b 6e 75 6d 62 65 72 7d 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 76 61 72 20 6c 69 73 74 49 64 20 3d 20 30 3b 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 4d 65 67 61 44 79 6e 61 6d 69 63 4c 69 73 74 20 61 6c 6c 6f 77 73 20 66 6f 72 20 72 65 6e 64 65 72 69 6e 67 20 61 20 6c 69 73 74 20 69 6e 73 69 64 65 20 6f 66 20 61 20 76 69 65 77 70 6f 72 74 2e 20 4f 6e 6c 79 20 69 74 65 6d 73 20 77 68 69 63 68 20 61 72 65 20 77 69 74 68 69 6e 20 74 68 65 20 76 69 73 69 62 6c 65 20 72 61 6e 67 65 0a 20 20 20 20 20 2a 20 77 69 6c 6c 20 62 65 20 72 65 6e Data Ascii: or every new MegaDynamicList that gets initialised. * * @type {number} / var listId = 0; /* * MegaDynamicList allows for rendering a list inside of a viewport. Only items which are within the visible range * will be ren
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 74 68 69 73 2e 5f 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 74 65 6d 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 77 61 73 52 65 6e 64 65 72 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 50 73 2e 64 65 73 74 72 6f 79 28 74 68 69 73 2e 6c 69 73 74 43 6f 6e 74 61 69 6e 65 72 29 3b 0a 20 20 20 20 20 20 20 20 44 4f 4d 55 74 69 6c 73 2e 72 65 6d 6f 76 65 4e 6f 64 65 28 74 68 69 73 2e 63 6f 6e 74 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 6c 69 73 74 43 6f 6e 74 61 69 6e 65 72 2e 68 74 6d 6c 28 22 22 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 6f 6e 74 65 6e 74 20 3d 20 74 68 69 73 2e 63 6f 6e 74 65 6e 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 Data Ascii: this._unbindEvents(); this.items = []; this._wasRendered = false; Ps.destroy(this.listContainer); DOMUtils.removeNode(this.content); this.$listContainer.html(""); this.$content = this.content = undefined;
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 26 26 20 74 79 70 65 6f 66 20 69 74 65 6d 20 21 3d 3d 20 27 73 74 72 69 6e 67 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 20 3d 20 74 68 69 73 2e 69 64 4d 61 70 70 65 72 28 69 74 65 6d 29 20 7c 7c 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 74 65 6d 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 55 73 65 64 20 66 72 6f 6d 20 74 68 65 20 73 68 6f 72 74 63 75 74 20 6b 65 79 73 20 63 6f 64 65 2e 0a 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 6e 6f 64 65 49 64 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 73 65 74 5f 63 75 72 72 65 6e 74 6c 79 5f 73 65 6c 65 63 74 65 64 28 6e 6f 64 65 49 64 Data Ascii: && typeof item !== 'string') { item = this.idMapper(item) \|\| false; } } return item; } /** * Used from the shortcut keys code. * * @param nodeId */ set_currently_selected(nodeId
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 3d 20 30 20 26 26 20 21 65 2e 73 68 69 66 74 4b 65 79 20 26 26 20 21 65 2e 6d 65 74 61 4b 65 79 20 26 26 20 21 65 2e 63 74 72 6c 4b 65 79 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 65 2e 74 61 72 67 65 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 27 70 73 5f 5f 72 61 69 6c 2d 78 27 29 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 65 2e 74 61 72 67 65 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 27 70 73 5f 5f 72 61 69 6c 2d 79 27 29 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 6f 73 65 20 6e 6f 64 65 20 49 6e 66 6f 20 70 61 6e 65 6c 20 61 73 20 6e 6f 74 68 69 6e 67 20 73 65 6c 65 63 74 65 64 0a 20 20 20 20 20 20 20 Data Ascii: = 0 && !e.shiftKey && !e.metaKey && !e.ctrlKey && !e.target.classList.contains('ps__rail-x') && !e.target.classList.contains('ps__rail-y')) { // Close node Info panel as nothing selected
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 65 6c 4e 6f 64 65 2e 74 20 26 26 20 24 2e 73 65 6c 65 63 74 65 64 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 68 6f 77 42 74 6e 28 27 73 68 61 72 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 68 6f 77 42 74 6e 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 21 66 6f 6c 64 65 72 6c 69 6e 6b 20 26 26 20 4d 2e 63 75 72 72 65 6e 74 72 6f 6f 74 69 64 20 21 3d 3d 20 27 73 68 61 72 65 73 27 20 26 26 20 4d 2e 63 75 72 72 65 6e 74 64 69 72 69 64 20 21 3d 3d 20 27 73 68 61 72 Data Ascii: if (selNode.t && $.selected.length === 1) { __showBtn('share'); } __showBtn('link'); } else if (!folderlink && M.currentrootid !== 'shares' && M.currentdirid !== 'shar
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 68 6f 77 20 43 6f 6e 74 61 63 74 20 56 53 20 55 73 65 72 20 64 69 66 66 65 72 65 6e 63 65 20 64 69 61 6c 6f 67 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 61 63 74 56 73 55 73 65 72 44 69 61 6c 6f 67 28 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 20 20 76 61 72 20 24 64 69 61 6c 6f 67 20 3d 20 24 28 27 2e 61 64 64 2d 72 65 61 73 73 69 67 6e 2d 64 69 61 6c 6f 67 2e 75 73 65 72 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 64 69 61 6c 6f 67 27 29 3b 0a 0a 20 20 20 20 24 28 27 2e 64 69 66 2d 64 6c 67 2d 63 6f 6e 74 61 63 74 2d 61 64 64 2d 62 74 6e 27 2c 20 24 64 69 61 6c 6f 67 29 2e 72 65 62 69 6e 64 28 27 63 6c 69 63 6b 2e 64 6c 67 27 2c 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 43 6f 6e 74 61 63 74 43 6c 69 63 6b 48 61 6e 64 6c 65 72 Data Ascii: how Contact VS User difference dialog */function contactVsUserDialog() { "use strict"; var $dialog = $('.add-reassign-dialog.user-management-dialog'); $('.dif-dlg-contact-add-btn', $dialog).rebind('click.dlg', function addContactClickHandler
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 72 65 73 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 72 65 73 20 21 3d 3d 20 22 6e 6f 6e 65 22 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 66 6d 2d 72 65 6d 6f 76 65 2d 61 76 61 74 61 72 27 29 2e 73 68 6f 77 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 76 61 72 20 69 6d 61 67 65 43 72 6f 70 20 3d 20 6e 65 77 20 49 6d 61 67 65 55 70 6c 6f 61 64 41 6e 64 43 72 6f 70 28 24 28 22 23 61 76 61 74 61 72 63 72 6f 70 22 29 2e 66 69 6e 64 28 27 2e 69 6d 61 67 65 2d 75 70 6c 6f 61 64 2d 61 6e 64 2d 63 72 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 27 29 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 Data Ascii: if (res !== null && res !== undefined && res !== "none"){ $('#fm-remove-avatar').show(); } }); var imageCrop = new ImageUploadAndCrop($("#avatarcrop").find('.image-upload-and-crop-container'), {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49760	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:48 UTC	424	OUT	GET /4/js/mega-12_94cd0e56acb1d72a332a2f67a70fab76b5fc4698e19bfbba9141665ebda28f6b.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:49 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:49 GMT Content-Type: application/javascript Content-Length: 420464 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-66a70" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:49 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 66 69 6c 65 76 65 72 73 69 6f 6e 69 6e 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 66 69 6c 65 63 6f 6e 66 6c 69 63 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 67 64 70 72 2d 64 6f 77 6e 6c 6f 61 64 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 72 65 67 69 73 74 65 72 62 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 65 6d 61 69 6c 4e 6f 74 69 66 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 73 6c 69 64 65 73 68 6f 77 2f 66 69 6c 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 73 6c 69 64 65 73 68 6f 77 2f 6d 61 6e 61 67 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 73 6c 69 64 65 73 68 6f 77 2f 70 6c 61 79 6c 69 73 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f Data Ascii: /* Bundle Includes: * js/fm/fileversioning.js * js/fm/fileconflict.js * js/ui/gdpr-download.js * html/js/registerb.js * js/emailNotify.js * js/ui/slideshow/file.js * js/ui/slideshow/manager.js * js/ui/slideshow/playlist.js * js/
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 73 69 6d 70 6c 65 74 69 70 3d 22 24 7b 6c 5b 31 36 34 37 35 5d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 24 7b 6c 5b 31 36 34 37 35 5d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 76 72 76 5f 24 7b 76 2e 68 7d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 20 69 63 6f 6e 2d 76 65 72 73 69 6f 6e 73 2d 70 72 65 76 69 6f 75 73 20 64 69 73 61 62 6c 65 64 20 6e 6f 6e 63 6c 69 63 6b 61 62 6c 65 22 3e 3c 2f 69 Data Ascii: data-simpletip="${l[16475]}" aria-label="${l[16475]}" id="vrv_${v.h}"> <i class="sprite-fm-mono icon-versions-previous disabled nonclickable"></i
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 63 6b 73 70 61 63 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 76 65 72 73 69 6f 6e 69 6e 67 2e 63 6c 6f 73 65 46 69 6c 65 56 65 72 73 69 6f 6e 69 6e 67 44 69 61 6c 6f 67 28 77 69 6e 64 6f 77 2e 76 65 72 73 69 6f 6e 64 69 61 6c 6f 67 69 64 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 66 6d 2d 76 65 72 73 69 6f 6e 69 6e 67 20 2e 68 65 61 64 65 72 20 2e 62 75 74 74 6f 6e 2e 73 65 74 74 69 6e 67 73 27 29 2e 72 65 62 69 6e 64 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a Data Ascii: ckspace e.stopPropagation(); fileversioning.closeFileVersioningDialog(window.versiondialogid); } }); $('.fm-versioning .header .button.settings').rebind('click', function() {
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 6e 65 77 4f 6b 4e 6f 64 65 73 20 3d 20 6e 65 77 4f 6b 4e 6f 64 65 73 2e 63 6f 6e 63 61 74 28 72 65 73 2e 6f 6b 4e 6f 64 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6b 4e 6f 64 65 73 20 3d 20 6f 6b 4e 6f 64 65 73 2e 63 6f 6e 63 61 74 28 6e 65 77 4f 6b 4e 6f 64 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 6c 69 63 74 65 64 4e 6f 64 65 73 20 3d 20 63 6f 6e 66 6c 69 63 74 65 64 4e 6f 64 65 73 2e 63 6f 6e 63 61 74 28 6e 65 77 43 6f 6e 66 6c 69 63 74 65 64 4e 6f 64 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b Data Ascii: newOkNodes = newOkNodes.concat(res.okNodes); } } okNodes = okNodes.concat(newOkNodes); conflictedNodes = conflictedNodes.concat(newConflictedNodes); } return {
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 74 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 64 75 70 73 2c 20 74 61 72 67 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 64 75 70 73 20 7c 7c 20 28 21 64 75 70 73 2e 66 69 6c 65 73 20 26 26 20 21 64 75 70 73 2e 66 6f 6c 64 65 72 73 29 20 7c 7c 20 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 75 70 73 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 75 70 73 4b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 75 70 73 2e 66 69 6c 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 6c 6c 44 75 70 73 20 3d 20 64 75 70 73 4b 65 79 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 Data Ascii: tion: function(dups, target) { if (!dups \|\| (!dups.files && !dups.folders) \|\| !Object.keys(dups).length) { return; } var dupsKeys = Object.keys(dups.files); var allDups = dupsKeys.length;
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 72 5b 27 65 6d 61 69 6c 27 5d 29 3b 0a 20 20 20 20 20 20 20 20 24 65 6d 61 69 6c 49 6e 70 75 74 2e 70 72 6f 70 28 27 64 69 73 61 62 6c 65 64 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 24 65 6d 61 69 6c 49 6e 70 75 74 2e 62 6c 75 72 28 29 3b 0a 20 20 20 20 20 20 20 20 24 66 6e 61 6d 65 49 6e 70 75 74 2e 76 61 6c 28 75 5f 61 74 74 72 5b 27 66 69 72 73 74 6e 61 6d 65 27 5d 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 5f 61 74 74 72 5b 27 66 69 72 73 74 6e 61 6d 65 27 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 66 6e 61 6d 65 49 6e 70 75 74 2e 70 72 6f 70 28 27 64 69 73 61 62 6c 65 64 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 66 6e 61 6d 65 49 6e 70 75 74 2e 62 6c 75 72 28 29 3b 0a 20 20 20 20 20 20 20 20 7d Data Ascii: r['email']); $emailInput.prop('disabled', true); $emailInput.blur(); $fnameInput.val(u_attr['firstname']); if (u_attr['firstname']) { $fnameInput.prop('disabled', true); $fnameInput.blur(); }
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 6c 6e 61 6d 65 49 6e 70 75 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 76 61 6c 69 64 61 74 65 50 68 6f 6e 65 4e 75 6d 62 65 72 28 24 74 65 6c 49 6e 70 75 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 65 6d 61 69 6c 49 6e 70 75 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 70 61 73 73 49 6e 70 75 74 2e 76 61 6c 28 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 29 3b 0a 0a 20 20 20 20 24 72 65 67 42 74 6e 73 2e 72 65 62 69 6e 64 28 0a 20 20 20 20 20 20 20 20 27 6b 65 79 64 6f 77 6e 2e 72 65 67 42 74 6e 73 27 2c 0a 20 20 20 Data Ascii: (), $lnameInput.val().trim(), M.validatePhoneNumber($telInput.val().trim()), $emailInput.val().trim(), $passInput.val()); } ); $regBtns.rebind( 'keydown.regBtns',
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 68 61 73 54 6f 42 75 69 6c 64 50 6c 61 79 6c 69 73 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 21 69 73 43 68 61 6e 67 65 4f 72 64 65 72 20 26 26 20 74 68 69 73 2e 5f 69 73 46 65 74 63 68 41 6c 6c 6f 77 65 64 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 69 6c 65 2e 73 74 61 74 65 2e 69 73 52 65 61 64 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 2e 61 62 6f 72 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 67 69 76 65 20 22 66 69 6c 65 2e 61 62 6f 72 Data Ascii: hasToBuildPlaylist = false; } } else if (!isChangeOrder && this._isFetchAllowed()) { if (!file.state.isReady) { file.abort(); } // give "file.abor
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 20 65 6e 61 62 6c 65 64 20 2f 20 64 69 73 61 62 6c 65 64 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 67 65 74 44 65 66 61 75 6c 74 43 66 67 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 52 65 6e 64 65 72 20 73 6c 69 64 65 73 68 6f 77 20 73 65 74 74 69 6e 67 73 20 55 49 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 20 76 61 6c 75 65 73 0a 20 20 20 20 20 20 20 20 20 2a 20 53 65 74 74 69 6e 67 73 20 55 49 20 65 6c 65 6d 65 6e 74 73 20 77 69 6c 6c 20 62 65 Data Ascii: * @returns {Boolean} enabled / disabled / getDefaultCfg() { return this._defaultValue; } /* * Render slideshow settings UI according to config values * Settings UI elements will be
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 2a 20 52 65 6e 64 65 72 20 73 6c 69 64 65 73 68 6f 77 20 73 65 74 74 69 6e 67 73 20 55 49 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 20 76 61 6c 75 65 73 0a 20 20 20 20 20 20 20 20 20 2a 20 53 65 74 74 69 6e 67 73 20 55 49 20 65 6c 65 6d 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 76 69 64 65 64 20 77 69 74 68 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 20 65 76 65 6e 74 20 62 69 6e 64 69 6e 67 73 0a 20 20 20 20 20 20 20 20 20 2a 20 53 65 74 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 69 6e 20 63 61 73 65 20 75 6e 64 65 66 69 6e 65 64 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 24 63 6f 6e 74 61 69 6e 65 72 20 2d 20 6a 71 75 65 72 79 20 65 6c 65 6d 65 6e 74 20 63 6f 6e 74 61 69 Data Ascii: * Render slideshow settings UI according to config values * Settings UI elements will be provided with config change event bindings * Set default config in case undefined * @param {Object} $container - jquery element contai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49762	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:48 UTC	424	OUT	GET /4/js/mega-11_187f230e32b9f5a8b7ccaebdc95e13d34abefa2862e925b8a8bb1355aab74bf0.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:49 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:49 GMT Content-Type: application/javascript Content-Length: 500643 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7a3a3" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:49 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 70 72 6f 70 65 72 74 69 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 72 65 6d 6f 76 65 6e 6f 64 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 75 66 73 73 69 7a 65 63 61 63 68 65 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 72 6f 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 72 6f 70 6c 61 6e 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 6c 61 6e 70 72 69 63 69 6e 67 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 72 6f 70 61 79 2e 6a 73 0a 20 2a 20 20 20 68 74 6d 6c 2f 6a 73 2f 70 72 6f 70 61 79 2d 64 69 61 6c 6f 67 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 73 74 61 74 65 73 2d 63 6f 75 6e 74 72 69 65 73 2e 6a 73 0a 20 2a 20 20 Data Ascii: /* Bundle Includes: * js/fm/properties.js * js/fm/removenode.js * js/fm/ufssizecache.js * html/js/pro.js * html/js/proplan.js * html/js/planpricing.js * html/js/propay.js * html/js/propay-dialogs.js * js/states-countries.js *
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 69 72 69 64 5d 20 7c 7c 20 4d 2e 69 73 41 6c 62 75 6d 73 50 61 67 65 28 29 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 70 72 6f 70 65 72 74 69 65 73 2d 62 72 65 61 64 63 72 75 6d 62 27 2c 20 24 64 69 61 6c 6f 67 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 20 69 64 6c 65 20 73 6f 20 77 65 20 63 61 6e 20 63 61 6c 6c 20 72 65 6e 64 65 72 50 61 74 68 42 72 65 61 64 63 72 75 6d 62 73 20 6f 6e 6c 79 20 6f 6e 63 65 20 74 68 65 20 69 6e 66 6f 20 64 69 61 6c 6f 67 20 69 73 20 72 65 6e 64 65 72 65 64 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: irid] \|\| M.isAlbumsPage()) { $('.properties-breadcrumb', $dialog).addClass('hidden'); } else { // on idle so we can call renderPathBreadcrumbs only once the info dialog is rendered.
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 3d 3d 3d 20 4d 2e 63 75 72 72 65 6e 74 64 69 72 69 64 20 7c 7c 20 70 61 72 65 6e 74 20 3d 3d 3d 20 4d 2e 63 75 72 72 65 6e 74 43 75 73 74 6f 6d 56 69 65 77 2e 6e 6f 64 65 49 44 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 74 68 65 20 6e 6f 64 65 20 77 61 73 20 6d 6f 76 65 64 20 6f 75 74 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 76 69 65 77 70 6f 72 74 2c 20 73 6f 20 6c 65 74 73 20 72 65 6d 6f 76 65 20 69 74 20 66 72 6f 6d 20 74 68 65 20 4d 65 67 61 4c 69 73 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 6d 65 67 61 52 65 6e 64 65 72 2e 6d 65 67 61 4c 69 73 74 2e 72 65 6d 6f 76 65 28 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a Data Ascii: === M.currentdirid \|\| parent === M.currentCustomView.nodeID) { // the node was moved out of the current viewport, so lets remove it from the MegaList M.megaRender.megaList.remove(h); } } else {
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 69 74 20 69 66 20 6e 6f 74 20 63 6f 72 72 65 63 74 20 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 6f 6e 46 6f 6c 64 65 72 53 69 7a 65 43 68 61 6e 67 65 55 49 55 70 64 61 74 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 3b 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 63 6f 72 64 20 66 6f 6c 64 65 72 20 6e 6f 64 65 2c 20 70 6f 70 75 6c 61 74 65 73 20 4d 2e 74 72 65 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 6e 20 54 68 65 20 66 6f 6c 64 65 72 20 6e 6f 64 65 20 74 6f 20 61 64 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 42 6f 6f 6c 65 61 6e 7d 20 5b 69 67 6e 6f 72 65 44 42 5d 20 57 68 65 74 68 65 72 20 75 70 64 61 74 69 6e 67 20 6c 6f 63 61 6c 20 73 74 61 74 65 20 6f 6e 6c 79 0a 20 2a 2f 0a 55 46 53 53 69 7a 65 43 61 63 Data Ascii: it if not correct path M.onFolderSizeChangeUIUpdate(n); } }};/** * Record folder node, populates M.tree * @param {Object} n The folder node to add * @param {Boolean} [ignoreDB] Whether updating local state only */UFSSizeCac
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 61 63 63 6f 75 6e 74 2e 6c 61 73 74 75 70 64 61 74 65 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 44 6f 6e 27 74 20 73 68 6f 77 20 74 68 65 20 70 6c 61 6e 20 65 78 70 69 72 79 20 64 69 61 6c 6f 67 20 61 6e 79 6d 6f 72 65 20 66 6f 72 20 74 68 69 73 20 73 65 73 73 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 61 72 6d 2e 70 6c 61 6e 45 78 70 69 72 65 64 2e 6c 61 73 74 50 61 79 6d 65 6e 74 20 3d 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 66 20 6c 61 73 74 20 70 61 79 6d 65 6e 74 20 77 61 73 20 42 69 74 63 6f 69 6e 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 72 65 64 69 72 65 63 74 20 74 6f 20 74 68 65 20 61 63 Data Ascii: M.account.lastupdate = 0; } // Don't show the plan expiry dialog anymore for this session alarm.planExpired.lastPayment = null; // If last payment was Bitcoin, we need to redirect to the ac
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 6d 20 6d 6f 6e 74 68 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 7a 79 28 70 66 2e 70 6c 61 6e 73 2c 20 73 69 6d 70 6c 65 46 69 6c 74 65 72 4b 65 79 73 5b 6a 5d 20 2b 20 6d 6f 6e 74 68 73 54 61 67 2c 20 28 29 20 3d 3e 20 70 72 6f 2e 6d 65 6d 62 65 72 73 68 69 70 50 6c 61 6e 73 2e 66 69 6c 74 65 72 28 28 70 6c 61 6e 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6d 6f 6e 74 68 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 72 6f 2e 66 69 6c 74 65 72 2e 73 69 6d 70 6c 65 5b 73 69 6d 70 6c 65 46 69 6c 74 65 72 4b 65 79 73 5b 6a 5d 5d 2e 68 61 73 28 70 6c 61 6e 5b 70 72 6f 2e 55 54 51 41 5f 52 45 53 5f 49 4e 44 45 58 5f 41 43 43 4f Data Ascii: m months) lazy(pf.plans, simpleFilterKeys[j] + monthsTag, () => pro.membershipPlans.filter((plan) => { if (months) { return pro.filter.simple[simpleFilterKeys[j]].has(plan[pro.UTQA_RES_INDEX_ACCO
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 20 2f 2f 20 50 72 65 76 65 6e 74 20 49 70 68 6f 6e 65 20 75 72 6c 20 62 61 72 20 72 65 73 69 7a 69 6e 67 20 74 72 69 67 67 65 72 20 72 65 69 6e 69 74 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 57 69 64 74 68 20 3d 20 24 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 57 69 64 74 68 20 21 3d 3d 20 70 72 65 76 57 69 6e 64 6f 77 57 69 64 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 6f 2e 70 72 6f 70 6c 61 6e 2e 69 6e 69 74 50 6c 61 6e 53 6c 69 64 65 72 43 6f 6e 74 72 6f 6c 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 65 76 57 69 6e 64 6f 77 57 69 64 74 68 20 3d Data Ascii: // Prevent Iphone url bar resizing trigger reinit. var currentWindowWidth = $(window).width(); if (currentWindowWidth !== prevWindowWidth) { pro.proplan.initPlanSliderControls(); prevWindowWidth =
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 63 6f 6e 73 74 20 24 67 65 74 46 72 65 65 42 75 74 74 6f 6e 20 3d 20 24 28 27 2e 66 72 65 65 2d 62 75 74 74 6f 6e 27 2c 20 24 73 74 65 70 4f 6e 65 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 24 67 65 74 53 74 61 72 74 65 64 4e 6f 77 20 3d 20 24 28 27 23 67 65 74 2d 73 74 61 72 74 65 64 2d 62 74 6e 27 2c 20 24 73 74 65 70 4f 6e 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 6f 6e 49 64 6c 65 28 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 75 67 68 2c 20 61 20 72 61 63 65 20 77 69 74 68 20 63 6c 69 63 6b 55 52 4c 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 67 65 74 53 74 61 72 74 65 64 4e 6f 77 2e 72 65 62 69 6e 64 28 27 63 6c 69 63 6b 2e 6c 6f 67 27 2c 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: const $getFreeButton = $('.free-button', $stepOne); const $getStartedNow = $('#get-started-btn', $stepOne); onIdle(() => { // ugh, a race with clickURL $getStartedNow.rebind('click.log', () => {
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 65 73 74 61 6d 70 20 3d 3d 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 63 75 72 72 50 6c 61 6e 2e 61 64 64 43 6c 61 73 73 28 27 72 65 6e 65 77 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 63 75 72 72 50 6c 61 6e 2e 61 64 64 43 6c 61 73 73 28 27 72 65 6e 65 77 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 64 61 74 61 28 27 74 61 67 27 2c 20 6c 5b 32 30 37 35 39 5d 2e 72 65 70 6c 61 63 65 28 27 25 31 27 2c 20 74 69 6d 65 32 64 61 74 65 28 72 65 6e 65 77 54 69 6d 65 73 74 61 6d 70 2c 20 32 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 Data Ascii: estamp === 0) { $currPlan.addClass('renew'); } else { $currPlan.addClass('renew') .data('tag', l[20759].replace('%1', time2date(renewTimestamp, 2))); } }
2024-07-11 11:36:49 UTC	16384	IN	Data Raw: 6c 6f 67 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 70 61 73 73 77 6f 72 64 20 41 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 65 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 70 72 65 2d 66 69 6c 6c 65 64 20 69 6e 74 6f 20 74 68 65 20 64 69 61 6c 6f 67 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 4c 6f 67 69 6e 44 69 61 6c 6f 67 28 65 6d 61 69 6c 2c 20 70 61 73 73 77 6f 72 64 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 76 61 72 20 24 64 69 61 6c 6f 67 20 3d 20 24 28 27 2e 70 72 6f 2d 6c 6f 67 69 6e 2d 64 69 61 6c 6f 67 27 29 3b 0a 20 20 20 20 76 61 72 20 24 69 6e 70 75 74 73 20 3d 20 24 28 27 69 6e 70 75 74 27 2c 20 24 64 69 61 6c 6f 67 29 3b 0a 20 20 20 20 76 61 72 20 24 62 75 74 74 6f 6e 20 3d 20 24 28 27 Data Ascii: log * @param {String} password A password to be optionally pre-filled into the dialog */function showLoginDialog(email, password) { 'use strict'; var $dialog = $('.pro-login-dialog'); var $inputs = $('input', $dialog); var $button = $('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49765	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:50 UTC	612	OUT	GET /4/js/mega-14_07b863d3ef47c1f5a009ef1828dec72da158a5ac5f7003a9e6e04a9015720712.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:50 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:50 GMT Content-Type: application/javascript Content-Length: 469622 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-72a76" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:50 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 61 63 63 6f 75 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 61 63 63 6f 75 6e 74 2d 63 68 61 6e 67 65 2d 70 61 73 73 77 6f 72 64 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 61 63 63 6f 75 6e 74 2d 63 68 61 6e 67 65 2d 65 6d 61 69 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 64 69 61 6c 6f 67 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 64 72 6f 70 64 6f 77 6e 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6e 6f 64 65 2d 66 69 6c 74 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 69 6e 66 6f 2d 70 61 6e 65 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6e 6f 74 69 66 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 61 76 61 74 61 72 2e 6a 73 0a Data Ascii: /* Bundle Includes: * js/fm/account.js * js/fm/account-change-password.js * js/fm/account-change-email.js * js/fm/dialogs.js * js/ui/dropdowns.js * js/ui/node-filter.js * js/ui/info-panel.js * js/notify.js * js/vendor/avatar.js
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 20 69 66 20 28 62 5f 65 78 63 65 65 64 65 64 20 26 26 20 73 5f 65 78 63 65 65 64 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 42 61 6e 64 77 69 64 74 68 20 61 6e 64 20 53 74 6f 72 61 67 65 20 71 75 6f 74 61 20 65 78 63 65 65 64 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 63 68 61 72 74 2d 77 61 72 6e 69 6e 67 2e 73 74 6f 72 61 67 65 2d 61 6e 64 2d 62 61 6e 64 77 69 64 74 68 27 2c 20 24 63 68 61 72 74 73 42 6c 6f 63 6b 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 73 5f 65 78 63 65 65 64 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 74 6f Data Ascii: if (b_exceeded && s_exceeded) { // Bandwidth and Storage quota exceeded $('.chart-warning.storage-and-bandwidth', $chartsBlock).removeClass('hidden'); } else if (s_exceeded) { // Sto
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 72 20 24 6e 6f 74 41 67 61 69 6e 43 68 65 63 6b 62 6f 78 20 3d 20 24 28 27 2e 6e 6f 74 61 67 61 69 6e 27 2c 20 24 61 64 64 50 68 6f 6e 65 42 61 6e 6e 65 72 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4d 2e 6d 61 66 20 69 73 20 63 61 63 68 65 64 20 69 6e 20 69 74 73 20 67 65 74 74 65 72 2c 20 68 6f 77 65 76 65 72 2c 20 72 65 70 65 61 74 65 64 20 67 65 74 73 20 77 69 6c 6c 20 63 61 75 73 65 20 75 6e 6e 65 63 65 73 73 61 72 79 20 63 68 65 63 6b 73 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 63 68 20 3d 20 4d 2e 6d 61 66 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 68 69 64 65 4f 72 44 69 73 70 6c 61 79 42 61 6e 6e 65 72 20 3d 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 66 Data Ascii: r $notAgainCheckbox = $('.notagain', $addPhoneBanner); // M.maf is cached in its getter, however, repeated gets will cause unnecessary checks. var ach = M.maf; const hideOrDisplayBanner = () => { // If
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 33 38 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 76 61 6c 75 65 20 7c 7c 20 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 76 61 6c 75 65 29 20 3c 20 70 61 72 73 65 49 6e 74 28 6d 69 6e 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 6c 75 65 20 3d 20 6d 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 76 61 6c 75 65 29 20 3e 3d 20 70 61 72 73 65 49 6e 74 28 6d 61 78 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 6c 75 65 20 3d Data Ascii: 38) { if (!this.value \|\| parseInt(this.value) < parseInt(min)) { this.value = min; } else if (parseInt(this.value) >= parseInt(max)) { this.value =
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 65 71 75 65 73 74 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 69 6e 67 44 69 61 6c 6f 67 2e 68 69 64 65 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 69 6e 76 61 6c 69 64 20 32 46 41 20 63 6f 64 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 20 3d 3d 3d 20 45 46 41 49 4c 45 44 20 7c 7c 20 72 65 73 20 3d 3d 3d 20 45 45 58 50 49 52 45 44 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: equest, { callback: function(res) { loadingDialog.hide(); // Check for invalid 2FA code if (res === EFAILED \|\| res === EEXPIRED) {
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 65 78 74 61 72 65 61 2d 61 6e 64 2d 62 61 6e 6e 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 74 65 78 74 61 72 65 61 20 3d 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 2e 66 69 6e 64 28 27 74 65 78 74 61 72 65 61 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 61 6e 63 65 6c 52 65 61 73 6f 6e 20 3d 20 24 28 27 2e 63 61 6e 63 65 6c 2d 74 65 78 74 61 72 65 61 2d 62 6c 27 2c 20 74 68 69 73 2e 24 74 65 78 74 61 72 65 61 41 6e 64 45 72 72 6f 72 44 69 61 6c 6f 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 62 61 63 6b 67 72 6f 75 6e 64 4f 76 65 72 6c 61 79 20 3d 20 24 28 27 2e 66 6d 2d 64 69 61 6c 6f 67 2d 6f 76 65 72 6c 61 79 27 29 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: extarea-and-banner'); this.$textarea = this.$dialog.find('textarea'); this.$cancelReason = $('.cancel-textarea-bl', this.$textareaAndErrorDialog); this.$backgroundOverlay = $('.fm-dialog-overlay');
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 6c 6f 63 6b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 61 66 65 48 54 4d 4c 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 72 65 64 22 3e 40 40 3c 2f 73 70 61 6e 3e 27 2c 20 74 69 6d 65 32 64 61 74 65 28 61 63 63 6f 75 6e 74 2e 65 78 70 69 72 79 2c 20 32 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 68 6f 77 20 73 75 63 63 65 73 73 20 64 69 61 6c 6f 67 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 53 75 63 63 65 73 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 62 61 63 6b 67 Data Ascii: lock .safeHTML('<span class="red">@@</span>', time2date(account.expiry, 2)); // Show success dialog this.$dialogSuccess.removeClass('hidden'); this.$backg
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 24 4e 54 6f 67 67 6c 65 2e 68 61 73 43 6c 61 73 73 28 27 74 6f 67 67 6c 65 2d 6f 6e 27 29 20 3f 20 24 2e 66 6e 2e 61 64 64 43 6c 61 73 73 20 3a 20 24 2e 66 6e 2e 72 65 6d 6f 76 65 43 6c 61 73 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 70 70 6c 79 28 24 4e 54 6f 67 67 6c 65 41 6c 6c 2c 20 5b 27 74 6f 67 67 6c 65 2d 6f 6e 27 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ion(); } } else { ($NToggle.hasClass('toggle-on') ? $.fn.addClass : $.fn.removeClass) .apply($NToggleAll, ['toggle-on']);
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 65 72 2e 6e 61 6d 65 54 72 61 6e 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 70 41 64 64 72 65 73 73 20 3d 20 68 74 6d 6c 65 6e 74 69 74 69 65 73 28 65 6c 5b 33 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 75 6e 74 72 79 20 3d 20 63 6f 75 6e 74 72 79 64 65 74 61 69 6c 73 28 65 6c 5b 34 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 73 73 69 6f 6e 49 64 20 3d 20 65 6c 5b 36 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 61 74 75 73 20 3d 20 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 6c 61 62 65 6c 20 67 72 65 65 6e 22 3e 27 20 2b 20 6c 5b 37 36 36 35 5d 20 2b 20 27 3c 2f 73 70 61 6e 3e 27 3b 20 20 20 20 2f 2f 20 43 75 72 72 65 6e 74 0a 0a 20 20 20 20 20 20 20 20 20 Data Ascii: er.nameTrans; var ipAddress = htmlentities(el[3]); var country = countrydetails(el[4]); var sessionId = el[6]; var status = '<span class="status-label green">' + l[7665] + '</span>'; // Current
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 6c 57 61 72 6e 69 6e 67 27 2c 20 76 61 6c 20 3f 20 75 6e 64 65 66 69 6e 65 64 20 3a 20 31 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 70 61 73 73 52 65 6d 69 6e 64 65 72 3a 20 7b 0a 0a 20 20 20 20 20 20 20 20 72 65 6e 64 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 63 6f 75 6e 74 55 49 2e 69 6e 70 75 74 73 2e 73 77 69 74 63 68 2e 69 6e 69 74 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 23 70 72 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 70 72 64 27 2c 20 61 63 63 6f 75 6e 74 55 49 2e 24 63 6f 6e 74 65 6e 74 42 6c 6f Data Ascii: lWarning', val ? undefined : 1) ); } }, passReminder: { render: function() { 'use strict'; accountUI.inputs.switch.init( '#prd', $('#prd', accountUI.$contentBlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49764	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:50 UTC	424	OUT	GET /4/js/mega-13_230200d24f6daf921d926ff4d88f646672c163e3f5478212c35961f60d815a0d.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:50 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:50 GMT Content-Type: application/javascript Content-Length: 506441 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-7ba49" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:50 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 43 6f 6d 70 6f 6e 65 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 42 75 74 74 6f 6e 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 43 68 65 63 6b 62 6f 78 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 43 6f 6e 74 65 78 74 4d 65 6e 75 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6c 61 73 73 65 73 2f 4d 44 69 61 6c 6f 67 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6d 63 6f 6d Data Ascii: /* Bundle Includes: * js/ui/mcomponents/classes/MComponent.js * js/ui/mcomponents/classes/MButton.js * js/ui/mcomponents/classes/MCheckbox.js * js/ui/mcomponents/classes/MContextMenu.js * js/ui/mcomponents/classes/MDialog.js * js/ui/mcom
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 27 20 3a 20 27 73 68 6f 77 27 5d 28 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 73 65 74 50 6f 73 69 74 69 6f 6e 42 79 43 6f 6f 72 64 69 6e 61 74 65 73 28 78 2c 20 79 2c 20 70 72 6f 70 6f 73 65 58 2c 20 70 72 6f 70 6f 73 65 59 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6d 69 6e 57 69 64 74 68 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 6c 2e 73 74 79 6c 65 2e 6d 69 6e 57 69 64 74 68 20 3d 20 74 68 69 73 2e 5f 6d 69 6e 57 69 64 74 68 20 2b 20 27 70 78 27 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 78 20 2b 20 74 68 69 73 2e 65 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 20 3e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ' : 'show'](); } setPositionByCoordinates(x, y, proposeX, proposeY) { if (this._minWidth > 0) { this.el.style.minWidth = this._minWidth + 'px'; } if (x + this.el.offsetWidth > window.innerWidth) {
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 74 6f 44 69 73 6d 69 73 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 67 65 74 20 6f 70 74 69 6f 6e 73 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 5b 5d 7d 20 6c 69 73 74 20 4f 70 74 69 6f 6e 73 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7c 66 75 6e 63 74 69 6f 6e 28 29 3a 20 53 74 72 69 6e 67 7c 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 20 6c 69 73 74 5b 5d 2e 6c 61 62 65 6c 20 4c 61 62 65 6c 20 6f 66 20 74 68 65 20 6f 70 74 69 6f 6e 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 46 75 6e 63 74 69 6f 6e 7d 20 6c 69 73 Data Ascii: toDismiss; } get options() { return this._options \|\| []; } /** * @param {Object[]} list Options to work with * @param {String\|function(): String\|HTMLElement} list[].label Label of the option * @param {Function} lis
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 6f 72 20 65 76 65 72 79 20 6e 65 77 20 4d 65 67 61 44 79 6e 61 6d 69 63 4c 69 73 74 20 74 68 61 74 20 67 65 74 73 20 69 6e 69 74 69 61 6c 69 73 65 64 2e 0a 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 74 79 70 65 20 7b 6e 75 6d 62 65 72 7d 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 76 61 72 20 6c 69 73 74 49 64 20 3d 20 30 3b 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 4d 65 67 61 44 79 6e 61 6d 69 63 4c 69 73 74 20 61 6c 6c 6f 77 73 20 66 6f 72 20 72 65 6e 64 65 72 69 6e 67 20 61 20 6c 69 73 74 20 69 6e 73 69 64 65 20 6f 66 20 61 20 76 69 65 77 70 6f 72 74 2e 20 4f 6e 6c 79 20 69 74 65 6d 73 20 77 68 69 63 68 20 61 72 65 20 77 69 74 68 69 6e 20 74 68 65 20 76 69 73 69 62 6c 65 20 72 61 6e 67 65 0a 20 20 20 20 20 2a 20 77 69 6c 6c 20 62 65 20 72 65 6e Data Ascii: or every new MegaDynamicList that gets initialised. * * @type {number} / var listId = 0; /* * MegaDynamicList allows for rendering a list inside of a viewport. Only items which are within the visible range * will be ren
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 20 74 68 69 73 2e 5f 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 74 65 6d 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 77 61 73 52 65 6e 64 65 72 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 50 73 2e 64 65 73 74 72 6f 79 28 74 68 69 73 2e 6c 69 73 74 43 6f 6e 74 61 69 6e 65 72 29 3b 0a 20 20 20 20 20 20 20 20 44 4f 4d 55 74 69 6c 73 2e 72 65 6d 6f 76 65 4e 6f 64 65 28 74 68 69 73 2e 63 6f 6e 74 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 6c 69 73 74 43 6f 6e 74 61 69 6e 65 72 2e 68 74 6d 6c 28 22 22 29 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 6f 6e 74 65 6e 74 20 3d 20 74 68 69 73 2e 63 6f 6e 74 65 6e 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 Data Ascii: this._unbindEvents(); this.items = []; this._wasRendered = false; Ps.destroy(this.listContainer); DOMUtils.removeNode(this.content); this.$listContainer.html(""); this.$content = this.content = undefined;
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 20 26 26 20 74 79 70 65 6f 66 20 69 74 65 6d 20 21 3d 3d 20 27 73 74 72 69 6e 67 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 20 3d 20 74 68 69 73 2e 69 64 4d 61 70 70 65 72 28 69 74 65 6d 29 20 7c 7c 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 74 65 6d 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 55 73 65 64 20 66 72 6f 6d 20 74 68 65 20 73 68 6f 72 74 63 75 74 20 6b 65 79 73 20 63 6f 64 65 2e 0a 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 6e 6f 64 65 49 64 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 73 65 74 5f 63 75 72 72 65 6e 74 6c 79 5f 73 65 6c 65 63 74 65 64 28 6e 6f 64 65 49 64 Data Ascii: && typeof item !== 'string') { item = this.idMapper(item) \|\| false; } } return item; } /** * Used from the shortcut keys code. * * @param nodeId */ set_currently_selected(nodeId
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 3d 20 30 20 26 26 20 21 65 2e 73 68 69 66 74 4b 65 79 20 26 26 20 21 65 2e 6d 65 74 61 4b 65 79 20 26 26 20 21 65 2e 63 74 72 6c 4b 65 79 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 65 2e 74 61 72 67 65 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 27 70 73 5f 5f 72 61 69 6c 2d 78 27 29 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 65 2e 74 61 72 67 65 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 27 70 73 5f 5f 72 61 69 6c 2d 79 27 29 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 6f 73 65 20 6e 6f 64 65 20 49 6e 66 6f 20 70 61 6e 65 6c 20 61 73 20 6e 6f 74 68 69 6e 67 20 73 65 6c 65 63 74 65 64 0a 20 20 20 20 20 20 20 Data Ascii: = 0 && !e.shiftKey && !e.metaKey && !e.ctrlKey && !e.target.classList.contains('ps__rail-x') && !e.target.classList.contains('ps__rail-y')) { // Close node Info panel as nothing selected
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 65 6c 4e 6f 64 65 2e 74 20 26 26 20 24 2e 73 65 6c 65 63 74 65 64 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 68 6f 77 42 74 6e 28 27 73 68 61 72 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 68 6f 77 42 74 6e 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 21 66 6f 6c 64 65 72 6c 69 6e 6b 20 26 26 20 4d 2e 63 75 72 72 65 6e 74 72 6f 6f 74 69 64 20 21 3d 3d 20 27 73 68 61 72 65 73 27 20 26 26 20 4d 2e 63 75 72 72 65 6e 74 64 69 72 69 64 20 21 3d 3d 20 27 73 68 61 72 Data Ascii: if (selNode.t && $.selected.length === 1) { __showBtn('share'); } __showBtn('link'); } else if (!folderlink && M.currentrootid !== 'shares' && M.currentdirid !== 'shar
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 68 6f 77 20 43 6f 6e 74 61 63 74 20 56 53 20 55 73 65 72 20 64 69 66 66 65 72 65 6e 63 65 20 64 69 61 6c 6f 67 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 61 63 74 56 73 55 73 65 72 44 69 61 6c 6f 67 28 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 20 20 76 61 72 20 24 64 69 61 6c 6f 67 20 3d 20 24 28 27 2e 61 64 64 2d 72 65 61 73 73 69 67 6e 2d 64 69 61 6c 6f 67 2e 75 73 65 72 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 64 69 61 6c 6f 67 27 29 3b 0a 0a 20 20 20 20 24 28 27 2e 64 69 66 2d 64 6c 67 2d 63 6f 6e 74 61 63 74 2d 61 64 64 2d 62 74 6e 27 2c 20 24 64 69 61 6c 6f 67 29 2e 72 65 62 69 6e 64 28 27 63 6c 69 63 6b 2e 64 6c 67 27 2c 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 43 6f 6e 74 61 63 74 43 6c 69 63 6b 48 61 6e 64 6c 65 72 Data Ascii: how Contact VS User difference dialog */function contactVsUserDialog() { "use strict"; var $dialog = $('.add-reassign-dialog.user-management-dialog'); $('.dif-dlg-contact-add-btn', $dialog).rebind('click.dlg', function addContactClickHandler
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 72 65 73 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 72 65 73 20 21 3d 3d 20 22 6e 6f 6e 65 22 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 66 6d 2d 72 65 6d 6f 76 65 2d 61 76 61 74 61 72 27 29 2e 73 68 6f 77 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 76 61 72 20 69 6d 61 67 65 43 72 6f 70 20 3d 20 6e 65 77 20 49 6d 61 67 65 55 70 6c 6f 61 64 41 6e 64 43 72 6f 70 28 24 28 22 23 61 76 61 74 61 72 63 72 6f 70 22 29 2e 66 69 6e 64 28 27 2e 69 6d 61 67 65 2d 75 70 6c 6f 61 64 2d 61 6e 64 2d 63 72 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 27 29 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 Data Ascii: if (res !== null && res !== undefined && res !== "none"){ $('#fm-remove-avatar').show(); } }); var imageCrop = new ImageUploadAndCrop($("#avatarcrop").find('.image-upload-and-crop-container'), {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49767	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:50 UTC	612	OUT	GET /4/js/mega-15_e18287a396f86d96fba5714f7bb47e6322364acc3bdcb9a6ed94f382ca3df966.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:50 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:50 GMT Content-Type: application/javascript Content-Length: 466876 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-71fbc" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:50 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 61 66 66 69 6c 69 61 74 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 76 70 6e 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 67 61 6c 6c 65 72 79 2f 68 65 6c 70 65 72 73 2f 47 61 6c 6c 65 72 79 54 69 74 6c 65 43 6f 6e 74 72 6f 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 67 61 6c 6c 65 72 79 2f 68 65 6c 70 65 72 73 2f 47 61 6c 6c 65 72 79 45 6d 70 74 79 42 6c 6f 63 6b 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 67 61 6c 6c 65 72 79 2f 68 65 6c 70 65 72 73 2f 47 61 6c 6c 65 72 79 45 6d 70 74 79 50 68 6f 74 6f 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 67 61 6c 6c 65 72 79 2f 68 65 6c 70 65 72 73 2f 47 61 6c 6c 65 72 79 45 6d 70 74 79 49 6d 61 67 65 73 2e Data Ascii: /* Bundle Includes: * js/fm/affiliate.js * js/fm/vpn.js * js/fm/gallery/helpers/GalleryTitleControl.js * js/fm/gallery/helpers/GalleryEmptyBlock.js * js/fm/gallery/helpers/GalleryEmptyPhotos.js * js/fm/gallery/helpers/GalleryEmptyImages.
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 43 68 61 74 6c 69 6e 6b 44 69 61 6c 6f 67 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 69 6e 76 69 74 65 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 68 69 64 65 43 6f 6e 74 65 78 74 4d 65 6e 75 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4d 2e 69 73 49 6e 76 61 6c 69 64 55 73 65 72 53 74 61 74 75 73 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 61 63 74 41 64 64 44 69 61 6c 6f 67 28 66 61 6c Data Ascii: ChatlinkDialog(); }); break; case 'invite': $.hideContextMenu(); if (M.isInvalidUserStatus()) { return; } contactAddDialog(fal
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 2e 72 65 64 65 65 6d 2d 61 6c 6c 2d 62 74 6e 27 2c 20 24 73 74 65 70 31 29 2e 72 65 62 69 6e 64 28 27 63 6c 69 63 6b 2e 72 65 64 65 65 6d 41 6c 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 61 6d 6f 75 6e 74 2e 76 61 6c 28 62 61 6c 61 6e 63 65 2e 61 76 61 69 6c 61 62 6c 65 29 2e 74 72 69 67 67 65 72 28 27 69 6e 70 75 74 27 29 2e 74 72 69 67 67 65 72 28 27 62 6c 75 72 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 53 74 65 70 20 32 0a 20 20 20 20 20 20 20 20 76 61 72 20 24 73 74 65 70 32 20 3d 20 24 28 27 2e 63 65 6c 6c 73 2e 73 74 65 70 32 27 2c 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 29 3b 0a 20 20 Data Ascii: }); $('.redeem-all-btn', $step1).rebind('click.redeemAll', function() { $amount.val(balance.available).trigger('input').trigger('blur'); }); // Step 2 var $step2 = $('.cells.step2', this.$dialog);
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 3a 20 66 6f 72 6d 61 74 43 75 72 72 65 6e 63 79 28 6c 61 2c 20 63 2c 20 27 6e 61 72 72 6f 77 53 79 6d 62 6f 6c 27 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 3a 20 66 6f 72 6d 61 74 43 75 72 72 65 6e 63 79 28 66 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 66 3a 20 66 6f 72 6d 61 74 43 75 72 72 65 6e 63 79 28 6c 66 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 3a 20 63 20 7c 7c 20 27 45 55 52 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 3a 20 6d 6f 6e 74 68 73 54 78 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 73 74 6f 72 61 67 65 54 78 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 3a 20 62 61 6e 64 77 69 64 74 68 54 78 74 2c 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 67 65 74 43 75 72 72 65 6e 74 50 6c Data Ascii: : formatCurrency(la, c, 'narrowSymbol'), f: formatCurrency(f), lf: formatCurrency(lf), c: c \|\| 'EUR', m: monthsTxt, s: storageTxt, t: bandwidthTxt, }; }, getCurrentPl
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 65 6d 70 74 69 6f 6e 2e 72 65 71 75 65 73 74 73 2e 66 69 72 73 74 2e 63 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 71 31 20 3d 20 61 66 66 69 6c 69 61 74 65 52 65 64 65 6d 70 74 69 6f 6e 2e 72 65 71 75 65 73 74 73 2e 66 69 72 73 74 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 71 31 72 65 73 20 3d 20 61 66 66 69 6c 69 61 74 65 52 65 64 65 6d 70 74 69 6f 6e 2e 72 65 71 31 72 65 73 5b 30 5d 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 53 75 6d 6d 61 72 79 20 74 61 62 6c 65 20 75 70 64 61 74 65 0a 20 20 20 20 20 20 20 20 69 66 20 28 72 65 71 31 2e 63 20 21 3d 3d 20 27 45 55 52 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 72 65 71 75 65 73 74 65 64 2e 70 72 69 63 65 20 2e 65 75 72 6f 27 2c 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 29 2e 72 Data Ascii: emption.requests.first.c; var req1 = affiliateRedemption.requests.first; var req1res = affiliateRedemption.req1res[0]; // Summary table update if (req1.c !== 'EUR') { $('.requested.price .euro', this.$dialog).r
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 69 61 74 65 52 65 64 65 6d 70 74 69 6f 6e 2e 63 6c 65 61 72 44 79 6e 61 6d 69 63 49 6e 70 75 74 73 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4c 65 74 73 20 72 65 6d 6f 76 65 20 74 65 6d 70 6f 72 61 72 79 20 61 64 64 65 64 20 64 61 74 61 20 66 6f 72 20 61 66 66 74 72 63 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 66 69 6c 69 61 74 65 52 65 64 65 6d 70 74 69 6f 6e 2e 72 65 71 75 65 73 74 73 2e 73 65 63 6f 6e 64 20 3d 20 7b 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 73 2e 75 70 64 61 74 65 28 24 63 75 72 72 65 6e 74 53 74 65 70 5b 30 5d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 69 6e 70 75 74 27 2c 20 24 63 75 72 72 65 Data Ascii: iateRedemption.clearDynamicInputs(); // Lets remove temporary added data for afftrc. affiliateRedemption.requests.second = {}; Ps.update($currentStep[0]); $('input', $curre
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 73 73 28 27 2d 2d 6c 61 62 65 6c 2d 62 6c 75 65 2d 68 6f 76 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 69 76 69 64 65 72 43 6f 6c 6f 72 20 3d 20 24 63 74 78 2e 63 73 73 28 27 2d 2d 73 75 72 66 61 63 65 2d 67 72 65 79 2d 32 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 65 78 74 43 6f 6c 6f 72 20 3d 20 24 63 74 78 2e 63 73 73 28 27 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6c 6f 77 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 69 63 6b 73 4c 69 6d 69 74 20 3d 20 36 3b 0a 0a 20 20 20 20 20 20 20 20 24 63 74 78 2e 6f 75 74 65 72 48 65 69 67 68 74 28 31 38 36 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 54 4f 44 4f 3a 20 73 65 74 20 74 69 63 6b 73 4c 69 6d 69 74 3d 34 20 66 6f 72 20 61 6c 6c 20 6d 6f 6e 74 68 73 20 61 66 74 65 72 20 6c Data Ascii: ss('--label-blue-hover'); var dividerColor = $ctx.css('--surface-grey-2'); var textColor = $ctx.css('--text-color-low'); var ticksLimit = 6; $ctx.outerHeight(186); // TODO: set ticksLimit=4 for all months after l
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 63 6c 69 63 6b 61 62 6c 65 20 61 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 6f 72 20 6e 6f 74 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 73 65 74 20 69 73 43 6c 69 63 6b 61 62 6c 65 28 73 74 61 74 75 73 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 69 73 43 6c 69 63 6b 61 62 6c 65 20 3d 20 73 74 61 74 75 73 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 75 72 73 6f 72 2d 70 6f 69 6e 74 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 74 74 61 63 68 43 61 72 65 74 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 74 74 61 63 68 45 76 65 6e 74 28 27 63 6c 69 63 6b 27 2c 20 28 29 20 Data Ascii: clickable at the moment or not */ set isClickable(status) { this._isClickable = status; if (status) { this.el.classList.add('cursor-pointer'); this.attachCaret(); this.attachEvent('click', ()
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 20 20 20 20 20 3a 20 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 6e 74 72 69 65 73 29 20 3d 3e 20 4d 65 67 61 47 61 6c 6c 65 72 79 2e 68 61 6e 64 6c 65 49 6e 74 65 72 73 65 63 74 28 65 6e 74 72 69 65 73 2c 20 74 68 69 73 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6f 74 3a 20 74 68 69 73 2e 67 61 6c 6c 65 72 79 42 6c 6f 63 6b 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6f 74 4d 61 72 67 69 6e 3a 20 27 31 30 30 30 70 78 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 65 73 68 6f 6c 64 3a 20 30 2e 31 0a 20 20 20 20 20 20 20 20 20 Data Ascii: : new IntersectionObserver( (entries) => MegaGallery.handleIntersect(entries, this), { root: this.galleryBlock, rootMargin: '1000px', threshold: 0.1
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 69 66 20 28 74 69 6d 65 44 69 66 66 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 6f 75 70 2e 6e 2e 73 70 6c 69 63 65 28 73 61 6d 65 44 61 79 4e 6f 64 65 49 6e 64 65 78 2c 20 31 2c 20 6e 2e 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 69 73 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 64 61 79 20 6d 6f 6e 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 72 6f 75 70 2e 6e 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 20 26 26 20 74 68 69 73 2e 67 72 6f 75 70 73 2e 64 5b 64 74 73 5d 2e 6e 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 Data Ascii: if (timeDiff > 0) { group.n.splice(sameDayNodeIndex, 1, n.h); } // This is only one day month if (group.n.length === 1 && this.groups.d[dts].n.length > 1) { t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49766	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:50 UTC	425	OUT	GET /4/css/mega-3_1922102b66d4c2764a8cfa9bdbd87e007dc19b2a5b83a743f758ff17051c647e.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:50 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:50 GMT Content-Type: text/css Content-Length: 736213 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-b3bd5" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:50 UTC	16021	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 62 75 74 74 6f 6e 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 75 69 2f 6d 63 6f 6d 70 6f 6e 65 6e 74 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 66 6d 2d 68 65 61 64 65 72 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 66 6d 2d 62 72 65 61 64 63 72 75 6d 62 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 66 6d 2d 6c 69 73 74 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 67 72 69 64 2d 74 61 62 6c 65 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 74 61 62 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 65 6d 70 74 79 2d 70 61 67 65 73 2e 63 73 73 0a 20 2a 20 20 Data Ascii: /* Bundle Includes: * css/buttons.css * css/components.css * css/ui/mcomponents.css * css/style.css * css/fm-header.css * css/fm-breadcrumb.css * css/fm-lists.css * css/grid-table.css * css/tabs.css * css/empty-pages.css *
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 69 2e 6d 6c 2d 30 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 0a 7d 0a 62 6f 64 79 2e 72 74 6c 20 2e 6d 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 69 2e 6d 72 2d 34 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 0a 7d 0a 62 6f 64 79 2e 72 74 6c 20 2e 6d 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 69 2e 6d 6c 2d 33 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 0a 7d 0a 2e 6d 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 6e 6f 74 28 2e 69 74 65 6d 2d 62 6f 6c 64 29 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 0a 7d 0a 2e 6d 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 69 74 65 6d 2d 62 6f 6c 64 7b 0a 09 66 6f 6e 74 Data Ascii: opdown-item i.ml-0{margin-right:0}body.rtl .m-dropdown-item i.mr-4{margin-left:1rem}body.rtl .m-dropdown-item i.ml-3{margin-right:.75rem}.m-dropdown-item:not(.item-bold){font-family:var(--text-font-family)}.m-dropdown-item.item-bold{font
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 20 75 6c 20 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 0a 09 63 6c 69 70 3a 72 65 63 74 28 30 2c 20 37 34 70 78 2c 20 31 34 38 70 78 2c 20 30 29 0a 7d 0a 2e 72 69 67 68 74 2d 63 20 73 70 61 6e 7b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 37 34 70 78 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 37 34 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 37 34 70 78 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 37 34 70 78 0a 7d 0a 2e 6c 65 66 74 2d 63 20 73 70 61 6e 7b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 Data Ascii: ul :nth-child(2n){clip:rect(0, 74px, 148px, 0)}.right-c span{-webkit-border-bottom-left-radius:74px;border-bottom-left-radius:74px;-webkit-border-top-left-radius:74px;border-top-left-radius:74px}.left-c span{-webkit-border-bottom-right-ra
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 72 2d 65 72 72 6f 72 29 3b 0a 09 63 6f 6e 74 65 6e 74 3a 22 5c 32 35 43 46 22 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 0a 7d 0a 2e 70 72 6f 20 6c 69 3a 6e 6f 74 28 2e 6e 6f 2d 72 65 64 2d 64 6f 74 29 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 30 20 31 32 70 78 20 32 30 70 78 0a 7d 0a 73 74 72 6f 6e 67 2e 73 6d 61 6c 6c 2d 68 65 61 64 65 72 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 5f 73 61 6e 73 5f 70 72 6f 62 6f 6c 64 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 0a 7d 0a 2e 62 72 6f 77 73 65 72 73 2d 74 6f 70 2d 69 63 6f 6e Data Ascii: r-error);content:"\25CF";left:0;position:absolute}.pro li:not(.no-red-dot){padding:0 0 12px 20px}strong.small-header{display:block;font-family:source_sans_probold,Arial,sans-serif;font-weight:400;padding-bottom:4px}.browsers-top-icon
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 31 36 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 30 20 33 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 72 69 67 68 74 3a 38 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 09 74 6f 70 3a 34 70 78 3b 0a 09 7a 2d 69 6e 64 65 78 3a 31 30 0a 7d 0a 2e 75 6e 72 65 61 64 20 2e 6e 77 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2d 75 6e 72 65 61 64 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 0a 7d 0a 2e 6e 77 2d 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 6e 77 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2d 75 6e 72 65 61 64 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 20 30 25 2c 20 34 36 2e 37 25 2c 20 Data Ascii: e-height:12px;min-width:16px;padding:0 3px;position:absolute;right:8px;text-align:center;top:4px;z-index:10}.unread .nw-conversations-unread{display:block}.nw-contact-item .nw-conversations-unread{background-color:hsla(0, 0%, 46.7%,
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 74 61 74 75 73 2d 69 63 6f 6e 2e 73 74 61 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 70 78 20 2d 34 39 33 34 70 78 0a 7d 0a 2e 74 61 6b 65 6e 2d 64 6f 77 6e 20 2e 66 69 6c 65 2d 73 74 61 74 75 73 2d 69 63 6f 6e 2c 2e 74 61 6b 65 6e 2d 64 6f 77 6e 20 2e 66 69 6c 65 2d 73 74 61 74 75 73 2d 69 63 6f 6e 2e 73 74 61 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 70 78 20 2d 34 39 33 34 70 78 0a 7d 0a 2e 6f 75 74 2d 73 68 61 72 65 64 2d 62 6c 6f 63 6b 73 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 69 6e 66 6f 2d 62 6c 6f 63 6b 7b 0a 09 7a 2d 69 6e 64 65 78 3a 31 0a 7d 0a 2e 6f 75 74 2d 73 68 61 72 65 64 2d 62 6c 6f 63 6b 73 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 Data Ascii: tatus-icon.star{background-position:-8px -4934px}.taken-down .file-status-icon,.taken-down .file-status-icon.star{background-position:-9px -4934px}.out-shared-blocks-view .shared-folder-info-block{z-index:1}.out-shared-blocks-view .shared-fold
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 6e 64 65 78 3a 31 30 30 0a 7d 0a 2e 64 6f 77 6e 6c 6f 61 64 2d 73 61 76 65 2d 79 6f 75 72 2d 66 69 6c 65 20 6f 62 6a 65 63 74 7b 0a 09 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 0a 7d 0a 2e 66 6d 2d 64 69 61 6c 6f 67 2d 6e 65 77 2d 66 6f 6c 64 65 72 2d 69 6e 70 75 74 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 75 72 66 61 63 65 2d 67 72 65 79 2d 31 29 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 73 74 72 6f 6b 65 2d 67 72 65 79 2d 32 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c Data Ascii: ndex:100}.download-save-your-file object{cursor:pointer;width:100% !important}.fm-dialog-new-folder-input{background:var(--surface-grey-1);border:1px solid var(--stroke-grey-2);border-radius:4px;box-sizing:border-box;color:var(--text-col
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 30 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 0a 7d 0a 2e 61 76 61 74 61 72 2d 62 67 20 73 70 61 6e 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 70 78 29 3b 0a 09 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 35 70 78 29 3b 0a 09 68 65 69 67 68 74 3a 31 31 30 25 3b 0a 09 6c 65 66 74 3a 2d 35 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 2d 35 25 3b 0a 09 77 69 64 74 68 Data Ascii: olute;top:0;-webkit-transform:translateZ(0);width:100%}.avatar-bg span{background-position:50%;background-size:cover;display:block;filter:blur(10px);-webkit-filter:blur(15px);height:110%;left:-5%;position:absolute;top:-5%;width
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 66 6f 2d 62 6c 6f 63 6b 7b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 72 61 6e 67 65 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 2d 68 69 67 68 29 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 68 65 69 67 68 74 3a 33 36 70 78 3b 0a 09 6c 65 66 74 3a 31 32 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 74 6f 70 3a 36 37 70 78 3b 0a 09 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 34 70 78 29 0a 7d 0a 2e Data Ascii: fo-block{align-items:center;background-color:var(--secondary-orange);border-radius:8px;box-sizing:border-box;color:var(--text-color-white-high);display:flex;height:36px;left:12px;position:relative;top:67px;width:calc(100% - 24px)}.
2024-07-11 11:36:50 UTC	16384	IN	Data Raw: 6c 6f 61 74 3a 6c 65 66 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 38 70 78 20 34 70 78 20 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 6e 65 77 2d 61 66 66 69 6c 69 61 74 65 2d 73 74 61 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 6d 65 67 61 2f 6e 65 77 2d 61 66 66 69 6c 69 61 74 65 2d 73 70 72 69 74 65 2e 70 6e 67 3f 76 3d 36 39 34 34 36 39 32 34 32 32 38 38 35 39 38 36 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 37 38 70 78 20 2d 31 35 34 31 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a Data Ascii: loat:left;font-size:14px;line-height:25px;padding:20px 18px 4px 0;position:relative}.new-affiliate-star{background-image:url(../images/mega/new-affiliate-sprite.png?v=6944692422885986);background-position:-1478px -1541px;background-repeat:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49769	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:51 UTC	613	OUT	GET /4/css/mega-4_fa06e14b2baa149cd25ce0a79e30707cfcb371ec261a2b543075c519e35562af.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:52 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:52 GMT Content-Type: text/css Content-Length: 288323 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-46643" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:52 UTC	16021	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 73 68 61 72 65 2d 64 69 61 6c 6f 67 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 70 6f 70 75 70 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 64 61 74 61 2d 62 6c 6f 63 6b 73 2d 76 69 65 77 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 72 65 63 6f 76 65 72 79 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 65 74 74 69 6e 67 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 6d 65 64 69 61 2d 70 72 69 6e 74 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 61 66 66 69 6c 69 61 74 65 2d 70 72 6f 67 72 61 6d 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 61 63 6b 75 70 2d 63 65 6e 74 65 72 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 74 6f 70 2d 6d 65 6e 75 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 63 Data Ascii: /* Bundle Includes: * css/share-dialog.css * css/popups.css * css/data-blocks-view.css * css/recovery.css * css/settings.css * css/media-print.css * css/affiliate-program.css * css/backup-center.css * css/top-menu.css * css/c
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 3a 23 63 63 63 0a 7d 0a 2e 63 6f 6e 74 61 63 74 73 2d 73 65 61 72 63 68 2d 68 65 61 64 65 72 20 69 6e 70 75 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 63 6f 6e 74 61 63 74 73 2d 73 65 61 72 63 68 2d 68 65 61 64 65 72 20 69 6e 70 75 74 3a 66 6f 63 75 73 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 0a 09 63 6f 6c 6f 72 3a 23 63 63 63 3b 0a 09 6f 70 61 63 69 74 79 3a 31 0a 7d 0a 2e 63 6f 6e 74 61 63 74 73 2d 73 65 61 72 63 68 2d 68 65 61 64 65 72 20 69 6e 70 75 74 3a 66 6f 63 75 73 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 0a 09 63 6f 6c 6f 72 3a 23 63 63 63 0a 7d 0a 2e 63 6f 6e 74 61 63 74 73 2d 73 65 61 72 63 68 2d 68 65 61 64 65 72 3e 69 7b 0a 09 2d 2d 69 63 6f 6e 2d 73 69 7a 65 3a 32 34 70 78 3b 0a Data Ascii: :#ccc}.contacts-search-header input:-moz-placeholder,.contacts-search-header input:focus::-moz-placeholder{color:#ccc;opacity:1}.contacts-search-header input:focus:-ms-input-placeholder{color:#ccc}.contacts-search-header>i{--icon-size:24px;
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 73 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 69 6e 66 6f 2d 62 6c 6f 63 6b 2c 2e 73 68 61 72 65 64 2d 62 6c 6f 63 6b 73 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 69 6e 66 6f 2d 62 6c 6f 63 6b 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 75 72 66 61 63 65 2d 67 72 65 79 2d 32 29 3b 0a 09 70 61 64 64 69 6e 67 3a 38 70 78 20 36 70 78 20 36 70 78 20 35 30 70 78 0a 7d 0a 2e 64 61 74 61 2d 62 6c 6f 63 6b 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 61 63 63 65 73 73 7b 0a 09 2d 2d 6d 61 73 6b 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 69 63 6f 6e 2d 72 65 73 74 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 0a 09 66 6c 6f 61 74 3a 6c 65 66 74 3b 0a 09 68 65 Data Ascii: s-view .shared-folder-info-block,.shared-blocks-view .shared-folder-info-block{background:var(--surface-grey-2);padding:8px 6px 6px 50px}.data-block-view .shared-folder-access{--mask-color:var(--icon-rest);background-image:none;float:left;he
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 0a 7d 0a 2e 69 6d 70 72 6f 76 65 64 2d 72 65 63 6f 76 65 72 79 2d 73 74 65 70 73 20 2e 62 61 63 6b 75 70 2d 6b 65 79 2d 69 6e 66 6f 20 2e 62 61 63 6b 75 70 2d 6b 65 79 2d 69 6e 66 6f 2d 74 65 78 74 7b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 68 69 67 68 29 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 31 29 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 0a 7d 0a 2e 69 6d 70 72 6f 76 65 64 2d 72 65 63 6f 76 65 72 79 2d 73 74 65 70 73 20 2e 63 68 65 63 6b 2d 73 65 73 73 69 6f 6e 73 20 2e 63 68 65 63 6b 62 6f 78 4f 66 66 2c 2e 69 6d 70 72 6f 76 65 64 2d 72 65 63 6f 76 65 72 79 2d 73 74 65 70 73 20 2e 63 68 65 63 6b 2d 73 65 73 73 69 6f 6e 73 Data Ascii: ext-align:center}.improved-recovery-steps .backup-key-info .backup-key-info-text{color:var(--text-color-high);font:var(--text-body1);text-align:center}.improved-recovery-steps .check-sessions .checkboxOff,.improved-recovery-steps .check-sessions
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 75 72 66 61 63 65 2d 62 6c 61 63 6b 29 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 09 6f 70 61 63 69 74 79 3a 2e 32 3b 0a 09 77 69 64 74 68 3a 30 0a 7d 0a 2e 66 6d 2d 72 69 67 68 74 2d 61 63 63 6f 75 6e 74 2d 62 6c 6f 63 6b 20 2e 71 75 6f 74 61 2d 6e 6f 74 65 7b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6c 6f 77 29 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 32 29 3b 0a 09 6d 61 72 67 69 6e 3a 35 70 78 20 30 20 30 0a 7d 0a 2e 66 6d 2d 72 69 67 68 74 2d 61 63 63 6f 75 6e 74 2d 62 6c 6f 63 6b 20 2e 71 75 6f 74 61 2d 6e Data Ascii: ackground:var(--surface-black);height:100%;opacity:.2;width:0}.fm-right-account-block .quota-note{align-items:center;color:var(--text-color-low);display:inline-flex;font:var(--text-body2);margin:5px 0 0}.fm-right-account-block .quota-n
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 6e 66 6f 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 29 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 31 29 3b 0a 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 0a 09 70 61 64 64 69 6e 67 3a 32 70 78 20 31 36 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 32 38 38 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2d 70 72 6f 67 72 61 6d 23 66 6d 68 6f 6c 64 65 72 7b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 Data Ascii: nfo);border-radius:4px;color:var(--text-color-info);display:flex;flex-direction:row;font:var(--text-body1);justify-content:center;padding:2px 16px;text-align:center;width:288px}.affiliate-program#fmholder{min-width:600px}.affiliate
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 65 61 64 65 72 20 2e 69 6e 66 6f 2d 63 65 6c 6c 7b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 0a 7d 0a 2e 62 61 63 6b 75 70 2d 63 65 6e 74 65 72 20 2e 62 61 63 6b 75 70 2d 62 6f 64 79 20 2e 68 65 61 64 65 72 20 2e 73 74 61 74 75 73 2d 69 6e 66 6f 7b 0a 09 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 0a 7d 0a 2e 62 61 63 6b 75 70 2d 63 65 6e 74 65 72 20 2e 62 61 63 6b 75 70 2d 62 6f 64 79 20 2e 68 65 61 64 65 72 20 2e 73 74 61 74 75 73 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 38 70 78 0a 7d 0a 2e 62 61 63 6b 75 70 2d 63 65 6e 74 65 72 20 2e 62 61 63 6b 75 Data Ascii: eader .info-cell{align-items:center;display:inline-flex;overflow:hidden;text-overflow:ellipsis}.backup-center .backup-body .header .status-info{flex:0 0 auto}.backup-center .backup-body .header .status{padding:0 8px}.backup-center .backu
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 28 2d 2d 69 63 6f 6e 2d 72 65 73 74 29 3b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 75 72 66 61 63 65 2d 6d 61 69 6e 29 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6d 65 64 69 75 6d 29 3b 0a 09 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 31 29 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 0a 09 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f Data Ascii: (--icon-rest);align-items:center;background:var(--surface-main);border:none;border-radius:4px;color:var(--text-color-medium);cursor:pointer;display:flex;font:var(--text-body1);min-height:32px;outline:none;text-align:start;transitio
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 6f 72 3a 76 61 72 28 2d 2d 73 74 72 6f 6b 65 2d 6d 61 69 6e 29 0a 7d 0a 2e 73 69 6d 70 6c 65 74 69 70 2d 74 6f 6f 6c 74 69 70 2e 72 65 63 65 6e 74 73 2d 66 69 6c 65 2d 70 61 74 68 20 73 70 61 6e 20 69 7b 0a 09 2d 2d 69 63 6f 6e 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 09 2d 2d 6d 61 73 6b 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 74 72 6f 6b 65 2d 6d 61 69 6e 29 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 68 65 69 67 68 74 3a 31 36 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 30 20 34 70 78 20 32 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 09 77 69 64 74 68 3a 31 36 70 78 0a 7d 0a 2e 66 6d 2d 72 65 63 65 6e 74 73 20 2e 65 78 70 61 6e 64 2d 63 Data Ascii: or:var(--stroke-main)}.simpletip-tooltip.recents-file-path span i{--icon-size:16px;--mask-color:var(--stroke-main);display:inline-block;height:16px;margin:0 4px 2px;position:static;vertical-align:middle;width:16px}.fm-recents .expand-c
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 68 33 2d 62 6f 6c 64 29 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 74 6f 70 3a 30 0a 7d 0a 2e 72 69 67 68 74 2d 73 65 63 74 69 6f 6e 2e 75 70 67 72 61 64 65 2d 62 6c 6f 63 6b 20 2e 68 65 61 64 2d 74 69 74 6c 65 20 73 70 61 6e 2e 70 63 74 2d 75 73 65 64 7b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 29 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 68 31 2d 62 6f 6c 64 29 0a 7d 0a 2e 61 6c 6d 6f 73 74 2d 6f 76 65 72 71 75 6f 74 61 20 2e 72 69 67 68 74 2d 73 65 63 74 69 6f 6e 2e 75 70 67 72 61 64 65 2d 62 6c 6f 63 6b 20 2e 68 65 61 64 2d 74 69 74 6c 65 20 73 70 61 6e 2e 70 63 74 2d 75 73 65 64 7b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 77 Data Ascii: h3-bold);left:0;padding:0;top:0}.right-section.upgrade-block .head-title span.pct-used{color:var(--text-color-error);font:var(--text-h1-bold)}.almost-overquota .right-section.upgrade-block .head-title span.pct-used{color:var(--text-color-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49768	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:51 UTC	424	OUT	GET /4/js/mega-14_07b863d3ef47c1f5a009ef1828dec72da158a5ac5f7003a9e6e04a9015720712.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:52 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:52 GMT Content-Type: application/javascript Content-Length: 469622 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-72a76" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:52 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 61 63 63 6f 75 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 61 63 63 6f 75 6e 74 2d 63 68 61 6e 67 65 2d 70 61 73 73 77 6f 72 64 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 61 63 63 6f 75 6e 74 2d 63 68 61 6e 67 65 2d 65 6d 61 69 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 64 69 61 6c 6f 67 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 64 72 6f 70 64 6f 77 6e 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 6e 6f 64 65 2d 66 69 6c 74 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 75 69 2f 69 6e 66 6f 2d 70 61 6e 65 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 6e 6f 74 69 66 79 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 76 65 6e 64 6f 72 2f 61 76 61 74 61 72 2e 6a 73 0a Data Ascii: /* Bundle Includes: * js/fm/account.js * js/fm/account-change-password.js * js/fm/account-change-email.js * js/fm/dialogs.js * js/ui/dropdowns.js * js/ui/node-filter.js * js/ui/info-panel.js * js/notify.js * js/vendor/avatar.js
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 20 69 66 20 28 62 5f 65 78 63 65 65 64 65 64 20 26 26 20 73 5f 65 78 63 65 65 64 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 42 61 6e 64 77 69 64 74 68 20 61 6e 64 20 53 74 6f 72 61 67 65 20 71 75 6f 74 61 20 65 78 63 65 65 64 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 63 68 61 72 74 2d 77 61 72 6e 69 6e 67 2e 73 74 6f 72 61 67 65 2d 61 6e 64 2d 62 61 6e 64 77 69 64 74 68 27 2c 20 24 63 68 61 72 74 73 42 6c 6f 63 6b 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 73 5f 65 78 63 65 65 64 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 74 6f Data Ascii: if (b_exceeded && s_exceeded) { // Bandwidth and Storage quota exceeded $('.chart-warning.storage-and-bandwidth', $chartsBlock).removeClass('hidden'); } else if (s_exceeded) { // Sto
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 72 20 24 6e 6f 74 41 67 61 69 6e 43 68 65 63 6b 62 6f 78 20 3d 20 24 28 27 2e 6e 6f 74 61 67 61 69 6e 27 2c 20 24 61 64 64 50 68 6f 6e 65 42 61 6e 6e 65 72 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4d 2e 6d 61 66 20 69 73 20 63 61 63 68 65 64 20 69 6e 20 69 74 73 20 67 65 74 74 65 72 2c 20 68 6f 77 65 76 65 72 2c 20 72 65 70 65 61 74 65 64 20 67 65 74 73 20 77 69 6c 6c 20 63 61 75 73 65 20 75 6e 6e 65 63 65 73 73 61 72 79 20 63 68 65 63 6b 73 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 63 68 20 3d 20 4d 2e 6d 61 66 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 68 69 64 65 4f 72 44 69 73 70 6c 61 79 42 61 6e 6e 65 72 20 3d 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 66 Data Ascii: r $notAgainCheckbox = $('.notagain', $addPhoneBanner); // M.maf is cached in its getter, however, repeated gets will cause unnecessary checks. var ach = M.maf; const hideOrDisplayBanner = () => { // If
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 33 38 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 76 61 6c 75 65 20 7c 7c 20 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 76 61 6c 75 65 29 20 3c 20 70 61 72 73 65 49 6e 74 28 6d 69 6e 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 6c 75 65 20 3d 20 6d 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 76 61 6c 75 65 29 20 3e 3d 20 70 61 72 73 65 49 6e 74 28 6d 61 78 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 6c 75 65 20 3d Data Ascii: 38) { if (!this.value \|\| parseInt(this.value) < parseInt(min)) { this.value = min; } else if (parseInt(this.value) >= parseInt(max)) { this.value =
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 65 71 75 65 73 74 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 69 6e 67 44 69 61 6c 6f 67 2e 68 69 64 65 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 69 6e 76 61 6c 69 64 20 32 46 41 20 63 6f 64 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 20 3d 3d 3d 20 45 46 41 49 4c 45 44 20 7c 7c 20 72 65 73 20 3d 3d 3d 20 45 45 58 50 49 52 45 44 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: equest, { callback: function(res) { loadingDialog.hide(); // Check for invalid 2FA code if (res === EFAILED \|\| res === EEXPIRED) {
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 65 78 74 61 72 65 61 2d 61 6e 64 2d 62 61 6e 6e 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 74 65 78 74 61 72 65 61 20 3d 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 2e 66 69 6e 64 28 27 74 65 78 74 61 72 65 61 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 61 6e 63 65 6c 52 65 61 73 6f 6e 20 3d 20 24 28 27 2e 63 61 6e 63 65 6c 2d 74 65 78 74 61 72 65 61 2d 62 6c 27 2c 20 74 68 69 73 2e 24 74 65 78 74 61 72 65 61 41 6e 64 45 72 72 6f 72 44 69 61 6c 6f 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 62 61 63 6b 67 72 6f 75 6e 64 4f 76 65 72 6c 61 79 20 3d 20 24 28 27 2e 66 6d 2d 64 69 61 6c 6f 67 2d 6f 76 65 72 6c 61 79 27 29 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: extarea-and-banner'); this.$textarea = this.$dialog.find('textarea'); this.$cancelReason = $('.cancel-textarea-bl', this.$textareaAndErrorDialog); this.$backgroundOverlay = $('.fm-dialog-overlay');
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 6c 6f 63 6b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 61 66 65 48 54 4d 4c 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 72 65 64 22 3e 40 40 3c 2f 73 70 61 6e 3e 27 2c 20 74 69 6d 65 32 64 61 74 65 28 61 63 63 6f 75 6e 74 2e 65 78 70 69 72 79 2c 20 32 29 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 68 6f 77 20 73 75 63 63 65 73 73 20 64 69 61 6c 6f 67 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 53 75 63 63 65 73 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 62 61 63 6b 67 Data Ascii: lock .safeHTML('<span class="red">@@</span>', time2date(account.expiry, 2)); // Show success dialog this.$dialogSuccess.removeClass('hidden'); this.$backg
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 24 4e 54 6f 67 67 6c 65 2e 68 61 73 43 6c 61 73 73 28 27 74 6f 67 67 6c 65 2d 6f 6e 27 29 20 3f 20 24 2e 66 6e 2e 61 64 64 43 6c 61 73 73 20 3a 20 24 2e 66 6e 2e 72 65 6d 6f 76 65 43 6c 61 73 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 70 70 6c 79 28 24 4e 54 6f 67 67 6c 65 41 6c 6c 2c 20 5b 27 74 6f 67 67 6c 65 2d 6f 6e 27 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ion(); } } else { ($NToggle.hasClass('toggle-on') ? $.fn.addClass : $.fn.removeClass) .apply($NToggleAll, ['toggle-on']);
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 65 72 2e 6e 61 6d 65 54 72 61 6e 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 70 41 64 64 72 65 73 73 20 3d 20 68 74 6d 6c 65 6e 74 69 74 69 65 73 28 65 6c 5b 33 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 75 6e 74 72 79 20 3d 20 63 6f 75 6e 74 72 79 64 65 74 61 69 6c 73 28 65 6c 5b 34 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 73 73 69 6f 6e 49 64 20 3d 20 65 6c 5b 36 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 61 74 75 73 20 3d 20 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 6c 61 62 65 6c 20 67 72 65 65 6e 22 3e 27 20 2b 20 6c 5b 37 36 36 35 5d 20 2b 20 27 3c 2f 73 70 61 6e 3e 27 3b 20 20 20 20 2f 2f 20 43 75 72 72 65 6e 74 0a 0a 20 20 20 20 20 20 20 20 20 Data Ascii: er.nameTrans; var ipAddress = htmlentities(el[3]); var country = countrydetails(el[4]); var sessionId = el[6]; var status = '<span class="status-label green">' + l[7665] + '</span>'; // Current
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 6c 57 61 72 6e 69 6e 67 27 2c 20 76 61 6c 20 3f 20 75 6e 64 65 66 69 6e 65 64 20 3a 20 31 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 70 61 73 73 52 65 6d 69 6e 64 65 72 3a 20 7b 0a 0a 20 20 20 20 20 20 20 20 72 65 6e 64 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 63 6f 75 6e 74 55 49 2e 69 6e 70 75 74 73 2e 73 77 69 74 63 68 2e 69 6e 69 74 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 23 70 72 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 70 72 64 27 2c 20 61 63 63 6f 75 6e 74 55 49 2e 24 63 6f 6e 74 65 6e 74 42 6c 6f Data Ascii: lWarning', val ? undefined : 1) ); } }, passReminder: { render: function() { 'use strict'; accountUI.inputs.switch.init( '#prd', $('#prd', accountUI.$contentBlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49770	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:51 UTC	424	OUT	GET /4/js/mega-15_e18287a396f86d96fba5714f7bb47e6322364acc3bdcb9a6ed94f382ca3df966.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:52 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:52 GMT Content-Type: application/javascript Content-Length: 466876 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-71fbc" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:52 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 61 66 66 69 6c 69 61 74 65 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 76 70 6e 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 67 61 6c 6c 65 72 79 2f 68 65 6c 70 65 72 73 2f 47 61 6c 6c 65 72 79 54 69 74 6c 65 43 6f 6e 74 72 6f 6c 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 67 61 6c 6c 65 72 79 2f 68 65 6c 70 65 72 73 2f 47 61 6c 6c 65 72 79 45 6d 70 74 79 42 6c 6f 63 6b 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 67 61 6c 6c 65 72 79 2f 68 65 6c 70 65 72 73 2f 47 61 6c 6c 65 72 79 45 6d 70 74 79 50 68 6f 74 6f 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 67 61 6c 6c 65 72 79 2f 68 65 6c 70 65 72 73 2f 47 61 6c 6c 65 72 79 45 6d 70 74 79 49 6d 61 67 65 73 2e Data Ascii: /* Bundle Includes: * js/fm/affiliate.js * js/fm/vpn.js * js/fm/gallery/helpers/GalleryTitleControl.js * js/fm/gallery/helpers/GalleryEmptyBlock.js * js/fm/gallery/helpers/GalleryEmptyPhotos.js * js/fm/gallery/helpers/GalleryEmptyImages.
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 43 68 61 74 6c 69 6e 6b 44 69 61 6c 6f 67 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 69 6e 76 69 74 65 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 68 69 64 65 43 6f 6e 74 65 78 74 4d 65 6e 75 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4d 2e 69 73 49 6e 76 61 6c 69 64 55 73 65 72 53 74 61 74 75 73 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 61 63 74 41 64 64 44 69 61 6c 6f 67 28 66 61 6c Data Ascii: ChatlinkDialog(); }); break; case 'invite': $.hideContextMenu(); if (M.isInvalidUserStatus()) { return; } contactAddDialog(fal
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 2e 72 65 64 65 65 6d 2d 61 6c 6c 2d 62 74 6e 27 2c 20 24 73 74 65 70 31 29 2e 72 65 62 69 6e 64 28 27 63 6c 69 63 6b 2e 72 65 64 65 65 6d 41 6c 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 61 6d 6f 75 6e 74 2e 76 61 6c 28 62 61 6c 61 6e 63 65 2e 61 76 61 69 6c 61 62 6c 65 29 2e 74 72 69 67 67 65 72 28 27 69 6e 70 75 74 27 29 2e 74 72 69 67 67 65 72 28 27 62 6c 75 72 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 53 74 65 70 20 32 0a 20 20 20 20 20 20 20 20 76 61 72 20 24 73 74 65 70 32 20 3d 20 24 28 27 2e 63 65 6c 6c 73 2e 73 74 65 70 32 27 2c 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 29 3b 0a 20 20 Data Ascii: }); $('.redeem-all-btn', $step1).rebind('click.redeemAll', function() { $amount.val(balance.available).trigger('input').trigger('blur'); }); // Step 2 var $step2 = $('.cells.step2', this.$dialog);
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 3a 20 66 6f 72 6d 61 74 43 75 72 72 65 6e 63 79 28 6c 61 2c 20 63 2c 20 27 6e 61 72 72 6f 77 53 79 6d 62 6f 6c 27 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 3a 20 66 6f 72 6d 61 74 43 75 72 72 65 6e 63 79 28 66 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 66 3a 20 66 6f 72 6d 61 74 43 75 72 72 65 6e 63 79 28 6c 66 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 3a 20 63 20 7c 7c 20 27 45 55 52 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 3a 20 6d 6f 6e 74 68 73 54 78 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 73 74 6f 72 61 67 65 54 78 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 3a 20 62 61 6e 64 77 69 64 74 68 54 78 74 2c 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 67 65 74 43 75 72 72 65 6e 74 50 6c Data Ascii: : formatCurrency(la, c, 'narrowSymbol'), f: formatCurrency(f), lf: formatCurrency(lf), c: c \|\| 'EUR', m: monthsTxt, s: storageTxt, t: bandwidthTxt, }; }, getCurrentPl
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 65 6d 70 74 69 6f 6e 2e 72 65 71 75 65 73 74 73 2e 66 69 72 73 74 2e 63 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 71 31 20 3d 20 61 66 66 69 6c 69 61 74 65 52 65 64 65 6d 70 74 69 6f 6e 2e 72 65 71 75 65 73 74 73 2e 66 69 72 73 74 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 71 31 72 65 73 20 3d 20 61 66 66 69 6c 69 61 74 65 52 65 64 65 6d 70 74 69 6f 6e 2e 72 65 71 31 72 65 73 5b 30 5d 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 53 75 6d 6d 61 72 79 20 74 61 62 6c 65 20 75 70 64 61 74 65 0a 20 20 20 20 20 20 20 20 69 66 20 28 72 65 71 31 2e 63 20 21 3d 3d 20 27 45 55 52 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 72 65 71 75 65 73 74 65 64 2e 70 72 69 63 65 20 2e 65 75 72 6f 27 2c 20 74 68 69 73 2e 24 64 69 61 6c 6f 67 29 2e 72 Data Ascii: emption.requests.first.c; var req1 = affiliateRedemption.requests.first; var req1res = affiliateRedemption.req1res[0]; // Summary table update if (req1.c !== 'EUR') { $('.requested.price .euro', this.$dialog).r
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 69 61 74 65 52 65 64 65 6d 70 74 69 6f 6e 2e 63 6c 65 61 72 44 79 6e 61 6d 69 63 49 6e 70 75 74 73 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4c 65 74 73 20 72 65 6d 6f 76 65 20 74 65 6d 70 6f 72 61 72 79 20 61 64 64 65 64 20 64 61 74 61 20 66 6f 72 20 61 66 66 74 72 63 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 66 69 6c 69 61 74 65 52 65 64 65 6d 70 74 69 6f 6e 2e 72 65 71 75 65 73 74 73 2e 73 65 63 6f 6e 64 20 3d 20 7b 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 73 2e 75 70 64 61 74 65 28 24 63 75 72 72 65 6e 74 53 74 65 70 5b 30 5d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 69 6e 70 75 74 27 2c 20 24 63 75 72 72 65 Data Ascii: iateRedemption.clearDynamicInputs(); // Lets remove temporary added data for afftrc. affiliateRedemption.requests.second = {}; Ps.update($currentStep[0]); $('input', $curre
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 73 73 28 27 2d 2d 6c 61 62 65 6c 2d 62 6c 75 65 2d 68 6f 76 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 69 76 69 64 65 72 43 6f 6c 6f 72 20 3d 20 24 63 74 78 2e 63 73 73 28 27 2d 2d 73 75 72 66 61 63 65 2d 67 72 65 79 2d 32 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 65 78 74 43 6f 6c 6f 72 20 3d 20 24 63 74 78 2e 63 73 73 28 27 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6c 6f 77 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 69 63 6b 73 4c 69 6d 69 74 20 3d 20 36 3b 0a 0a 20 20 20 20 20 20 20 20 24 63 74 78 2e 6f 75 74 65 72 48 65 69 67 68 74 28 31 38 36 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 54 4f 44 4f 3a 20 73 65 74 20 74 69 63 6b 73 4c 69 6d 69 74 3d 34 20 66 6f 72 20 61 6c 6c 20 6d 6f 6e 74 68 73 20 61 66 74 65 72 20 6c Data Ascii: ss('--label-blue-hover'); var dividerColor = $ctx.css('--surface-grey-2'); var textColor = $ctx.css('--text-color-low'); var ticksLimit = 6; $ctx.outerHeight(186); // TODO: set ticksLimit=4 for all months after l
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 63 6c 69 63 6b 61 62 6c 65 20 61 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 6f 72 20 6e 6f 74 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 73 65 74 20 69 73 43 6c 69 63 6b 61 62 6c 65 28 73 74 61 74 75 73 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 69 73 43 6c 69 63 6b 61 62 6c 65 20 3d 20 73 74 61 74 75 73 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 75 72 73 6f 72 2d 70 6f 69 6e 74 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 74 74 61 63 68 43 61 72 65 74 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 74 74 61 63 68 45 76 65 6e 74 28 27 63 6c 69 63 6b 27 2c 20 28 29 20 Data Ascii: clickable at the moment or not */ set isClickable(status) { this._isClickable = status; if (status) { this.el.classList.add('cursor-pointer'); this.attachCaret(); this.attachEvent('click', ()
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 20 20 20 20 20 3a 20 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 6e 74 72 69 65 73 29 20 3d 3e 20 4d 65 67 61 47 61 6c 6c 65 72 79 2e 68 61 6e 64 6c 65 49 6e 74 65 72 73 65 63 74 28 65 6e 74 72 69 65 73 2c 20 74 68 69 73 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6f 74 3a 20 74 68 69 73 2e 67 61 6c 6c 65 72 79 42 6c 6f 63 6b 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6f 74 4d 61 72 67 69 6e 3a 20 27 31 30 30 30 70 78 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 65 73 68 6f 6c 64 3a 20 30 2e 31 0a 20 20 20 20 20 20 20 20 20 Data Ascii: : new IntersectionObserver( (entries) => MegaGallery.handleIntersect(entries, this), { root: this.galleryBlock, rootMargin: '1000px', threshold: 0.1
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 69 66 20 28 74 69 6d 65 44 69 66 66 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 6f 75 70 2e 6e 2e 73 70 6c 69 63 65 28 73 61 6d 65 44 61 79 4e 6f 64 65 49 6e 64 65 78 2c 20 31 2c 20 6e 2e 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 69 73 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 64 61 79 20 6d 6f 6e 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 72 6f 75 70 2e 6e 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 20 26 26 20 74 68 69 73 2e 67 72 6f 75 70 73 2e 64 5b 64 74 73 5d 2e 6e 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 Data Ascii: if (timeDiff > 0) { group.n.splice(sameDayNodeIndex, 1, n.h); } // This is only one day month if (group.n.length === 1 && this.groups.d[dts].n.length > 1) { t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49771	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:52 UTC	612	OUT	GET /4/js/mega-16_e1f30ff0208b23154355d46d096fe4dc0903b6d61f3e1b940cd2bc8fd68ff723.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:52 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:52 GMT Content-Type: application/javascript Content-Length: 393442 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-600e2" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:52 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 66 69 6c 65 6d 61 6e 61 67 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 75 74 69 6c 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 61 63 63 6f 75 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 63 6f 6e 74 61 63 74 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 66 69 6c 74 65 72 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 6d 65 6e 75 73 2e 6a 73 0a 20 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 46 69 6c 65 4d 61 6e 61 67 65 72 28 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 Data Ascii: /* Bundle Includes: * js/fm/filemanager.js * js/fm/utils.js * js/fm/megadata.js * js/fm/megadata/account.js * js/fm/megadata/contacts.js * js/fm/megadata/filters.js * js/fm/megadata/menus.js */function FileManager() { "use stri
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 63 2e 69 6e 64 65 78 4f 66 28 27 74 72 61 6e 73 66 65 72 73 27 29 20 3e 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 64 20 3d 20 27 64 6f 77 6e 6c 6f 61 64 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 63 20 26 26 20 63 2e 69 6e 64 65 78 4f 66 28 27 6a 73 2d 6c 70 62 74 6e 27 29 20 3e 20 2d 31 20 26 26 20 61 20 3d 3d 3d 20 27 64 72 6f 70 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: } else if (c.indexOf('transfers') > -1) { dd = 'download'; } } } else if (c && c.indexOf('js-lpbtn') > -1 && a === 'drop') {
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 20 3d 20 61 2e 63 6c 61 73 73 4c 69 73 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 20 26 26 20 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 2e 63 6f 6e 74 61 69 6e 73 28 27 64 72 6f 70 64 6f 77 6e 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 28 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 2e 63 6f 6e 74 61 69 6e 73 28 27 64 6f 77 6e 6c 6f 61 64 2d 69 74 65 6d 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 7c 20 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 2e 63 6f 6e 74 61 69 6e 73 28 27 6d 6f 76 65 2d 69 74 Data Ascii: currentNodeClass = a.classList; } if (currentNodeClass && currentNodeClass.contains('dropdown') && (currentNodeClass.contains('download-item') \|\| currentNodeClass.contains('move-it
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 65 77 6e 6f 64 65 73 5b 69 5d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 65 77 4e 6f 64 65 2e 68 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 63 6f 6e 74 61 63 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 65 77 4e 6f 64 65 2e 73 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 73 68 61 72 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 65 77 4e 6f 64 65 2e 70 20 26 26 20 6e 65 77 4e 6f 64 65 2e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 65 65 62 75 69 6c 64 5b 6e 65 77 4e 6f 64 65 2e 70 5d 20 3d 20 31 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 Data Ascii: ewnodes[i]; if (newNode.h.length === 11) { newcontact = true; } if (newNode.su) { newshare = true; } if (newNode.p && newNode.t) { treebuild[newNode.p] = 1; } if
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 75 73 65 72 5f 68 61 6e 64 6c 65 20 3d 20 24 2e 73 65 6c 65 63 74 65 64 20 26 26 20 24 2e 73 65 6c 65 63 74 65 64 5b 30 5d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 24 74 68 69 73 2e 69 73 28 27 2e 64 69 73 61 62 6c 65 64 27 29 20 26 26 20 75 73 65 72 5f 68 61 6e 64 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 67 61 43 68 61 74 2e 63 72 65 61 74 65 41 6e 64 53 68 6f 77 50 72 69 76 61 74 65 52 6f 6f 6d 28 75 73 65 72 5f 68 61 6e 64 6c 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6f 6d 2e 73 65 74 41 63 74 69 76 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f Data Ascii: user_handle = $.selected && $.selected[0]; if (!$this.is('.disabled') && user_handle) { megaChat.createAndShowPrivateRoom(user_handle) .then(function(room) { room.setActive(); ro
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 75 6e 64 65 66 69 6e 65 64 2c 20 6d 65 67 61 2e 62 61 63 6b 75 70 43 65 6e 74 65 72 2e 73 65 6c 65 63 74 65 64 53 79 6e 63 2e 6e 6f 64 65 48 61 6e 64 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 6e 6f 70 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 28 65 78 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 73 67 44 69 61 6c 6f 67 28 27 77 61 72 6e 69 6e 67 61 27 2c 20 6c 5b 31 33 35 5d 2c 20 6c 5b 34 37 5d 2c 20 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: undefined, mega.backupCenter.selectedSync.nodeHandle ) .then(nop) .catch((ex) => { msgDialog('warninga', l[135], l[47], ex);
2024-07-11 11:36:52 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 69 66 20 28 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 33 37 20 7c 7c 20 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 33 39 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 72 65 63 65 6e 74 73 52 65 6e 64 65 72 2e 6b 65 79 53 65 6c 65 63 74 50 72 65 76 4e 65 78 74 28 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 33 39 20 7c 20 30 20 7c 7c 20 2d 31 2c 20 65 2e 73 68 69 66 74 4b 65 79 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 75 70 20 6f 72 20 64 6f 77 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 33 38 20 7c 7c 20 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 34 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (e.keyCode === 37 \|\| e.keyCode === 39) { M.recentsRender.keySelectPrevNext(e.keyCode === 39 \| 0 \|\| -1, e.shiftKey); } // up or down else if (e.keyCode === 38 \|\| e.keyCode === 40) {
2024-07-11 11:36:53 UTC	16384	IN	Data Raw: 28 24 28 73 74 61 72 74 29 2e 69 6e 64 65 78 28 29 20 3e 20 24 28 65 6e 64 29 2e 69 6e 64 65 78 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 64 20 3d 20 73 74 61 72 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 72 74 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 75 69 2d 73 65 6c 65 63 74 65 64 27 2c 20 64 6f 6d 54 61 62 6c 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 75 69 2d 73 65 6c 65 63 74 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 5b 73 74 61 72 74 2c 20 65 6e 64 5d 29 2e 61 64 64 43 6c 61 73 73 Data Ascii: ($(start).index() > $(end).index()) { end = start; start = this; } $('.ui-selected', domTable).removeClass('ui-selected'); $([start, end]).addClass
2024-07-11 11:36:53 UTC	16384	IN	Data Raw: 66 6d 68 6f 6c 64 65 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 66 69 6c 65 73 2d 67 72 69 64 2d 76 69 65 77 2e 66 6d 27 2c 20 27 2e 66 6d 68 6f 6c 64 65 72 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6f 75 74 2d 73 68 61 72 65 73 2d 76 69 65 77 20 70 75 62 6c 69 63 2d 6c 69 6e 6b 73 2d 76 69 65 77 20 66 69 6c 65 2d 72 65 71 75 65 73 74 73 2d 76 69 65 77 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 63 75 72 72 65 6e 74 43 75 73 74 6f 6d 56 69 65 77 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4d 2e 69 73 47 61 6c 6c 65 72 79 50 61 67 65 28 29 20 7c 7c 20 4d 2e 69 73 41 6c 62 75 6d 73 50 61 67 65 28 29 29 Data Ascii: fmholder').removeClass('hidden'); $('.files-grid-view.fm', '.fmholder') .removeClass('out-shares-view public-links-view file-requests-view'); if (this.currentCustomView) { if (M.isGalleryPage() \|\| M.isAlbumsPage())
2024-07-11 11:36:53 UTC	16384	IN	Data Raw: 20 20 2f 2f 20 4f 70 65 6e 20 66 6f 6c 64 65 72 2f 66 69 6c 65 20 69 6e 20 66 69 6c 65 6d 61 6e 61 67 65 72 0a 20 20 20 20 6c 65 74 20 74 61 70 70 65 64 49 74 65 6d 49 64 20 3d 20 27 27 3b 0a 20 20 20 20 24 64 64 55 49 69 74 65 6d 2e 72 65 62 69 6e 64 28 27 64 62 6c 63 6c 69 63 6b 2e 6f 70 65 6e 54 61 72 67 65 74 20 74 6f 75 63 68 65 6e 64 2e 74 61 62 6c 65 74 4f 70 65 6e 54 61 72 67 65 74 27 2c 20 28 65 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 68 20 3d 20 24 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 61 74 74 72 28 27 69 64 27 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 20 3d 20 4d 2e 67 65 74 4e 6f 64 65 42 79 48 61 6e 64 6c 65 28 68 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 29 20 7b 0a 20 20 20 20 20 20 Data Ascii: // Open folder/file in filemanager let tappedItemId = ''; $ddUIitem.rebind('dblclick.openTarget touchend.tabletOpenTarget', (e) => { let h = $(e.currentTarget).attr('id'); const n = M.getNodeByHandle(h); if (!n) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49774	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:53 UTC	425	OUT	GET /4/css/mega-4_fa06e14b2baa149cd25ce0a79e30707cfcb371ec261a2b543075c519e35562af.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:54 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:54 GMT Content-Type: text/css Content-Length: 288323 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-46643" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:54 UTC	16021	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 73 68 61 72 65 2d 64 69 61 6c 6f 67 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 70 6f 70 75 70 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 64 61 74 61 2d 62 6c 6f 63 6b 73 2d 76 69 65 77 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 72 65 63 6f 76 65 72 79 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 73 65 74 74 69 6e 67 73 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 6d 65 64 69 61 2d 70 72 69 6e 74 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 61 66 66 69 6c 69 61 74 65 2d 70 72 6f 67 72 61 6d 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 62 61 63 6b 75 70 2d 63 65 6e 74 65 72 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 74 6f 70 2d 6d 65 6e 75 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 63 Data Ascii: /* Bundle Includes: * css/share-dialog.css * css/popups.css * css/data-blocks-view.css * css/recovery.css * css/settings.css * css/media-print.css * css/affiliate-program.css * css/backup-center.css * css/top-menu.css * css/c
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 3a 23 63 63 63 0a 7d 0a 2e 63 6f 6e 74 61 63 74 73 2d 73 65 61 72 63 68 2d 68 65 61 64 65 72 20 69 6e 70 75 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 63 6f 6e 74 61 63 74 73 2d 73 65 61 72 63 68 2d 68 65 61 64 65 72 20 69 6e 70 75 74 3a 66 6f 63 75 73 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 0a 09 63 6f 6c 6f 72 3a 23 63 63 63 3b 0a 09 6f 70 61 63 69 74 79 3a 31 0a 7d 0a 2e 63 6f 6e 74 61 63 74 73 2d 73 65 61 72 63 68 2d 68 65 61 64 65 72 20 69 6e 70 75 74 3a 66 6f 63 75 73 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 0a 09 63 6f 6c 6f 72 3a 23 63 63 63 0a 7d 0a 2e 63 6f 6e 74 61 63 74 73 2d 73 65 61 72 63 68 2d 68 65 61 64 65 72 3e 69 7b 0a 09 2d 2d 69 63 6f 6e 2d 73 69 7a 65 3a 32 34 70 78 3b 0a Data Ascii: :#ccc}.contacts-search-header input:-moz-placeholder,.contacts-search-header input:focus::-moz-placeholder{color:#ccc;opacity:1}.contacts-search-header input:focus:-ms-input-placeholder{color:#ccc}.contacts-search-header>i{--icon-size:24px;
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 73 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 69 6e 66 6f 2d 62 6c 6f 63 6b 2c 2e 73 68 61 72 65 64 2d 62 6c 6f 63 6b 73 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 69 6e 66 6f 2d 62 6c 6f 63 6b 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 75 72 66 61 63 65 2d 67 72 65 79 2d 32 29 3b 0a 09 70 61 64 64 69 6e 67 3a 38 70 78 20 36 70 78 20 36 70 78 20 35 30 70 78 0a 7d 0a 2e 64 61 74 61 2d 62 6c 6f 63 6b 2d 76 69 65 77 20 2e 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 61 63 63 65 73 73 7b 0a 09 2d 2d 6d 61 73 6b 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 69 63 6f 6e 2d 72 65 73 74 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 0a 09 66 6c 6f 61 74 3a 6c 65 66 74 3b 0a 09 68 65 Data Ascii: s-view .shared-folder-info-block,.shared-blocks-view .shared-folder-info-block{background:var(--surface-grey-2);padding:8px 6px 6px 50px}.data-block-view .shared-folder-access{--mask-color:var(--icon-rest);background-image:none;float:left;he
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 0a 7d 0a 2e 69 6d 70 72 6f 76 65 64 2d 72 65 63 6f 76 65 72 79 2d 73 74 65 70 73 20 2e 62 61 63 6b 75 70 2d 6b 65 79 2d 69 6e 66 6f 20 2e 62 61 63 6b 75 70 2d 6b 65 79 2d 69 6e 66 6f 2d 74 65 78 74 7b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 68 69 67 68 29 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 31 29 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 0a 7d 0a 2e 69 6d 70 72 6f 76 65 64 2d 72 65 63 6f 76 65 72 79 2d 73 74 65 70 73 20 2e 63 68 65 63 6b 2d 73 65 73 73 69 6f 6e 73 20 2e 63 68 65 63 6b 62 6f 78 4f 66 66 2c 2e 69 6d 70 72 6f 76 65 64 2d 72 65 63 6f 76 65 72 79 2d 73 74 65 70 73 20 2e 63 68 65 63 6b 2d 73 65 73 73 69 6f 6e 73 Data Ascii: ext-align:center}.improved-recovery-steps .backup-key-info .backup-key-info-text{color:var(--text-color-high);font:var(--text-body1);text-align:center}.improved-recovery-steps .check-sessions .checkboxOff,.improved-recovery-steps .check-sessions
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 75 72 66 61 63 65 2d 62 6c 61 63 6b 29 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 09 6f 70 61 63 69 74 79 3a 2e 32 3b 0a 09 77 69 64 74 68 3a 30 0a 7d 0a 2e 66 6d 2d 72 69 67 68 74 2d 61 63 63 6f 75 6e 74 2d 62 6c 6f 63 6b 20 2e 71 75 6f 74 61 2d 6e 6f 74 65 7b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6c 6f 77 29 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 32 29 3b 0a 09 6d 61 72 67 69 6e 3a 35 70 78 20 30 20 30 0a 7d 0a 2e 66 6d 2d 72 69 67 68 74 2d 61 63 63 6f 75 6e 74 2d 62 6c 6f 63 6b 20 2e 71 75 6f 74 61 2d 6e Data Ascii: ackground:var(--surface-black);height:100%;opacity:.2;width:0}.fm-right-account-block .quota-note{align-items:center;color:var(--text-color-low);display:inline-flex;font:var(--text-body2);margin:5px 0 0}.fm-right-account-block .quota-n
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 6e 66 6f 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 29 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 31 29 3b 0a 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 0a 09 70 61 64 64 69 6e 67 3a 32 70 78 20 31 36 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 32 38 38 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 2d 70 72 6f 67 72 61 6d 23 66 6d 68 6f 6c 64 65 72 7b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 0a 7d 0a 2e 61 66 66 69 6c 69 61 74 65 Data Ascii: nfo);border-radius:4px;color:var(--text-color-info);display:flex;flex-direction:row;font:var(--text-body1);justify-content:center;padding:2px 16px;text-align:center;width:288px}.affiliate-program#fmholder{min-width:600px}.affiliate
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 65 61 64 65 72 20 2e 69 6e 66 6f 2d 63 65 6c 6c 7b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 0a 7d 0a 2e 62 61 63 6b 75 70 2d 63 65 6e 74 65 72 20 2e 62 61 63 6b 75 70 2d 62 6f 64 79 20 2e 68 65 61 64 65 72 20 2e 73 74 61 74 75 73 2d 69 6e 66 6f 7b 0a 09 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 0a 7d 0a 2e 62 61 63 6b 75 70 2d 63 65 6e 74 65 72 20 2e 62 61 63 6b 75 70 2d 62 6f 64 79 20 2e 68 65 61 64 65 72 20 2e 73 74 61 74 75 73 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 38 70 78 0a 7d 0a 2e 62 61 63 6b 75 70 2d 63 65 6e 74 65 72 20 2e 62 61 63 6b 75 Data Ascii: eader .info-cell{align-items:center;display:inline-flex;overflow:hidden;text-overflow:ellipsis}.backup-center .backup-body .header .status-info{flex:0 0 auto}.backup-center .backup-body .header .status{padding:0 8px}.backup-center .backu
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 28 2d 2d 69 63 6f 6e 2d 72 65 73 74 29 3b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 75 72 66 61 63 65 2d 6d 61 69 6e 29 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6d 65 64 69 75 6d 29 3b 0a 09 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 31 29 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 0a 09 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f Data Ascii: (--icon-rest);align-items:center;background:var(--surface-main);border:none;border-radius:4px;color:var(--text-color-medium);cursor:pointer;display:flex;font:var(--text-body1);min-height:32px;outline:none;text-align:start;transitio
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 6f 72 3a 76 61 72 28 2d 2d 73 74 72 6f 6b 65 2d 6d 61 69 6e 29 0a 7d 0a 2e 73 69 6d 70 6c 65 74 69 70 2d 74 6f 6f 6c 74 69 70 2e 72 65 63 65 6e 74 73 2d 66 69 6c 65 2d 70 61 74 68 20 73 70 61 6e 20 69 7b 0a 09 2d 2d 69 63 6f 6e 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 09 2d 2d 6d 61 73 6b 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 74 72 6f 6b 65 2d 6d 61 69 6e 29 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 68 65 69 67 68 74 3a 31 36 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 30 20 34 70 78 20 32 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 09 77 69 64 74 68 3a 31 36 70 78 0a 7d 0a 2e 66 6d 2d 72 65 63 65 6e 74 73 20 2e 65 78 70 61 6e 64 2d 63 Data Ascii: or:var(--stroke-main)}.simpletip-tooltip.recents-file-path span i{--icon-size:16px;--mask-color:var(--stroke-main);display:inline-block;height:16px;margin:0 4px 2px;position:static;vertical-align:middle;width:16px}.fm-recents .expand-c
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 68 33 2d 62 6f 6c 64 29 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 74 6f 70 3a 30 0a 7d 0a 2e 72 69 67 68 74 2d 73 65 63 74 69 6f 6e 2e 75 70 67 72 61 64 65 2d 62 6c 6f 63 6b 20 2e 68 65 61 64 2d 74 69 74 6c 65 20 73 70 61 6e 2e 70 63 74 2d 75 73 65 64 7b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 29 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 68 31 2d 62 6f 6c 64 29 0a 7d 0a 2e 61 6c 6d 6f 73 74 2d 6f 76 65 72 71 75 6f 74 61 20 2e 72 69 67 68 74 2d 73 65 63 74 69 6f 6e 2e 75 70 67 72 61 64 65 2d 62 6c 6f 63 6b 20 2e 68 65 61 64 2d 74 69 74 6c 65 20 73 70 61 6e 2e 70 63 74 2d 75 73 65 64 7b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 77 Data Ascii: h3-bold);left:0;padding:0;top:0}.right-section.upgrade-block .head-title span.pct-used{color:var(--text-color-error);font:var(--text-h1-bold)}.almost-overquota .right-section.upgrade-block .head-title span.pct-used{color:var(--text-color-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49775	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:53 UTC	612	OUT	GET /4/js/mega-17_3a85d86ee65b0ea458f2d41270f2589ee1875995e684c8efff49b59f155efd79.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:54 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:53 GMT Content-Type: application/javascript Content-Length: 459681 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-703a1" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:54 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 6e 6f 64 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 6f 70 65 6e 66 6f 6c 64 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 72 65 6e 64 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 72 65 6e 64 65 72 2d 62 72 65 61 64 63 72 75 6d 62 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 73 68 61 72 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 73 6f 72 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 74 72 61 6e 73 66 65 72 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 Data Ascii: /* Bundle Includes: * js/fm/megadata/nodes.js * js/fm/megadata/openfolder.js * js/fm/megadata/render.js * js/fm/megadata/render-breadcrumbs.js * js/fm/megadata/shares.js * js/fm/megadata/sort.js * js/fm/megadata/transfers.js * js/f
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 70 61 74 68 20 3d 20 53 74 72 69 6e 67 28 70 61 74 68 20 7c 7c 20 74 68 69 73 2e 63 75 72 72 65 6e 74 64 69 72 69 64 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 63 75 73 74 6f 6d 56 69 65 77 20 3d 20 70 61 74 68 20 3d 3d 3d 20 74 68 69 73 2e 63 75 72 72 65 6e 74 64 69 72 69 64 20 3f 20 74 68 69 73 2e 63 75 72 72 65 6e 74 43 75 73 74 6f 6d 56 69 65 77 20 3a 20 74 68 69 73 2e 69 73 43 75 73 74 6f 6d 56 69 65 77 28 70 61 74 68 29 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 63 75 73 74 6f 6d 56 69 65 77 2e 74 79 70 65 20 3d 3d 3d 20 27 61 6c 62 75 6d 73 27 0a 20 20 20 20 20 20 20 20 26 26 20 21 74 79 70 65 0a 20 20 20 20 20 20 20 20 7c 7c 20 28 74 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 70 61 74 68 20 3d 3d Data Ascii: rn true; } path = String(path \|\| this.currentdirid); const customView = path === this.currentdirid ? this.currentCustomView : this.isCustomView(path); return customView.type === 'albums' && !type \|\| (type === 1 && path ==
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 70 72 6f 6d 69 73 65 73 29 2e 63 61 74 63 68 28 64 75 6d 70 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 6f 6e 73 74 20 63 6c 65 61 6e 45 6d 70 74 79 4d 65 72 67 65 64 46 6f 6c 64 65 72 73 20 3d 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6d 65 72 67 65 64 46 6f 6c 64 65 72 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 63 6c 65 61 6e 69 6e 67 20 65 6d 70 74 79 20 66 6f 6c 64 65 72 73 20 28 6d 6f 76 65 64 29 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 64 75 72 69 6e 67 20 6d 65 72 67 69 6e 67 20 66 6f 6c 64 65 72 73 20 6d 61 79 20 73 74 69 6c 6c 20 68 61 76 65 20 73 6f 6d 65 20 69 74 65 6d Data Ascii: await Promise.all(promises).catch(dump); } const cleanEmptyMergedFolders = () => { if (Object.keys(mergedFolder).length) { // cleaning empty folders (moved). // during merging folders may still have some item
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 0a 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 28 27 72 65 76 6f 6b 65 53 68 61 72 65 73 20 66 6f 72 20 25 73 20 6e 6f 64 65 73 2e 2e 2e 27 2c 20 68 61 6e 64 6c 65 73 2e 6c 65 6e 67 74 68 2c 20 68 61 6e 64 6c 65 73 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 6f 6e 73 74 20 70 65 6e 64 69 6e 67 20 3d 20 74 68 69 73 2e 63 6f 6c 6c 65 63 74 4e 6f 64 65 73 28 68 61 6e 64 6c 65 73 29 3b 0a 20 20 20 20 69 66 20 28 70 65 6e 64 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 61 77 61 69 74 20 70 65 6e 64 69 6e 67 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 6f 6e 73 74 20 6c 69 6e 6b 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 63 6f 6e 73 74 20 66 6f 6c 64 65 72 73 20 3d 20 5b 5d 3b 0a 0a 20 20 20 20 63 6f 6e 73 74 20 Data Ascii: if (d) { console.group('revokeShares for %s nodes...', handles.length, handles); } const pending = this.collectNodes(handles); if (pending) { await pending; } const links = []; const folders = []; const
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 6e 2e 68 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 75 70 64 61 74 65 44 6f 6d 4e 6f 64 65 50 6f 73 69 74 69 6f 6e 28 6e 2c 20 64 6f 6d 4e 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 3b 0a 0a 2f 2a 2a 0a 20 2a 20 4c 61 62 65 6c 69 6e 67 20 6f 66 20 6e 6f 64 65 73 20 75 70 64 61 74 65 73 20 44 4f 4d 20 61 6e 64 20 41 50 49 0a 20 2a 0a 20 2a 20 40 70 61 72 61 6d 20 7b 41 72 72 61 79 20 7c 20 73 74 72 69 6e 67 7d 20 68 61 6e 64 6c 65 73 20 53 65 6c 65 63 74 65 64 20 6e 6f 64 65 73 20 68 61 6e 64 6c 65 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 49 6e 74 65 67 65 72 7d 20 6e 65 77 4c 61 62 65 6c 53 74 61 74 65 20 4e 75 6d 65 72 69 63 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6e 65 77 20 6c 61 62 65 6c 0a 20 2a 2f 0a 4d Data Ascii: n.h); this.updateDomNodePosition(n, domNode); } }};/** * Labeling of nodes updates DOM and API * * @param {Array \| string} handles Selected nodes handles * @param {Integer} newLabelState Numeric value of the new label */M
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 74 72 65 65 20 3d 20 5b 2e 2e 2e 74 72 65 65 2c 20 2e 2e 2e 74 65 6d 70 52 5d 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 74 72 65 65 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 20 3d 20 7b 2e 2e 2e 74 68 69 73 2e 67 65 74 4e 6f 64 65 42 79 48 61 6e 64 6c 65 28 74 72 65 65 5b 69 5d 29 7d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 2e 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 4e 6f 64 65 20 6e 6f 74 20 66 6f 75 6e 64 27 2c 20 74 72 65 65 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: tree = [...tree, ...tempR]; } for (let i = 0; i < tree.length; i++) { const n = {...this.getNodeByHandle(tree[i])}; if (!n.h) { if (d) { console.warn('Node not found', tree[i]); }
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 72 65 6a 65 63 74 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 66 20 28 4d 2e 63 5b 74 61 72 67 65 74 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 5f 64 6f 6e 65 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 64 62 66 65 74 63 68 2e 67 65 74 28 74 61 72 67 65 74 29 2e 61 6c 77 61 79 73 28 5f 64 6f 6e 65 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 20 6e 65 77 20 66 6f 6c 64 65 72 20 6f 6e 20 74 68 65 20 63 6c 6f 75 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 70 61 74 68 73 20 4f 62 6a 65 63 74 20 63 6f 6e 74 61 69 6e 69 6e 67 20 66 6f 6c 64 65 72 73 20 6f 6e 20 6b 65 79 73 2c 20 6e 6f 64 65 20 68 61 6e 64 6c 65 73 20 77 69 6c 6c 20 62 65 20 66 69 6c 6c 65 64 20 61 Data Ascii: reject); }; if (M.c[target]) { _done(); } else { dbfetch.get(target).always(_done); }});/** * Create new folder on the cloud * @param {Object} paths Object containing folders on keys, node handles will be filled a
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 5d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 2e 68 20 3d 3d 3d 20 68 61 6e 64 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 20 3e 20 32 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 46 6f 75 6e 64 20 63 68 61 74 20 6e 6f 64 65 20 62 79 20 72 61 77 20 68 61 6e 64 6c 65 20 25 73 2c 20 79 6f 75 20 6d 61 79 20 70 72 6f 76 69 64 65 20 74 68 65 20 63 68 61 74 20 68 61 6e 64 6c 65 20 25 73 27 2c 20 6e 2e 68 2c 20 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d Data Ascii: ]; if (n.h === handle) { if (d > 2) { console.warn('Found chat node by raw handle %s, you may provide the chat handle %s', n.h, ch); } return n; } } }
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 69 6d 70 6f 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 2e 6e 20 3d 20 5b 6e 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 2e 74 20 3d 20 74 61 72 67 65 74 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 70 69 2e 73 63 72 65 71 28 72 65 71 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 6f 6c 76 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 28 65 78 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 75 6c 65 72 72 6f 72 28 6e 75 6c 6c 2c 20 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6a 65 63 74 28 Data Ascii: var _import = function(target) { req.n = [n]; req.t = target; api.screq(req) .then(resolve) .catch((ex) => { M.ulerror(null, ex); reject(
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 6f 63 6b 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 20 5b 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 5d 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 44 79 6e 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 72 27 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 44 79 6e 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 72 2c 20 27 69 6e 73 74 61 6e 63 65 73 27 2c 20 7b 76 61 6c 75 65 3a 20 6e 65 77 20 53 65 74 28 29 7d 29 3b 0a 0a 20 20 20 20 2f 2f 20 6d 61 70 20 68 61 6e 64 6c 65 20 74 6f 20 72 6f 6f 74 20 6e 61 6d Data Ascii: ock').removeClass('hidden'); } } get [Symbol.toStringTag]() { return 'DynContentLoader'; } } Object.defineProperty(DynContentLoader, 'instances', {value: new Set()}); // map handle to root nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49777	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:54 UTC	613	OUT	GET /4/css/mega-7_58c04ac027b15931acfb17be4a134e35c8bdd3b99109e617895713a42f32d84a.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:54 UTC	361	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:54 GMT Content-Type: text/css Content-Length: 41595 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-a27b" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:54 UTC	16023	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 74 6f 61 73 74 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 67 65 6e 65 72 61 6c 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 6d 65 67 61 69 6e 70 75 74 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 76 61 72 73 2f 74 65 78 74 2d 69 6e 70 75 74 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 72 65 74 69 6e 61 2d 69 6d 61 67 65 73 2e 63 73 73 0a 20 2a 2f 0a 0a 2e 74 6f 61 73 74 2d 72 61 63 6b 7b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 72 74 6c 20 2e 74 6f 61 73 74 2d 72 61 Data Ascii: /* Bundle Includes: * css/toast.css * css/general.css * css/megainput.css * css/vars/text-input.css * css/retina-images.css */.toast-rack{box-sizing:border-box;display:flex;flex-direction:column;position:relative}.rtl .toast-ra
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 72 64 65 72 2d 69 6e 66 6f 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 6e 6e 65 72 2d 74 65 78 74 2d 69 6e 66 6f 29 3b 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 31 29 3b 0a 09 70 61 64 64 69 6e 67 3a 32 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 09 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 0a 7d 0a 2e 6d 65 67 61 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 2e 6d 65 73 73 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 0a 09 6d 61 72 67 69 Data Ascii: rder-info);border-radius:4px;box-sizing:border-box;color:var(--banner-text-info);display:none;font:var(--text-body1);padding:2px;text-align:center;text-overflow:ellipsis;white-space:normal}.mega-input-wrapper .message-container{margi
2024-07-11 11:36:54 UTC	9188	IN	Data Raw: 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 37 32 70 78 20 61 75 74 6f 0a 7d 0a 2e 68 75 67 65 2d 69 63 6f 6e 2e 61 63 68 69 65 76 65 6d 65 6e 74 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 6d 65 67 61 2f 62 69 67 2d 61 63 68 69 65 76 65 6d 65 6e 74 73 40 32 78 2e 70 6e 67 3f 76 3d 31 36 32 36 34 39 33 66 61 35 61 32 35 35 64 37 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 34 33 36 70 78 20 61 75 74 6f 0a 7d 0a 2e 66 65 65 64 62 61 63 6b 2d 62 75 74 74 6f 6e 2c 2e 66 6d 2d 66 69 6c 65 73 2d 73 65 61 72 63 68 20 69 2e 73 65 61 72 63 68 2c 2e 69 6d 70 72 6f 76 65 64 2d 72 65 63 6f 76 65 72 79 2d 73 74 65 70 73 20 2e 6c 69 73 74 2d 70 6f 69 6e 74 20 62 2e 6d 65 67 61 73 79 6e 63 2d 6c 6f 67 6f Data Ascii: round-size:172px auto}.huge-icon.achievement{background-image:url(../images/mega/big-achievements@2x.png?v=1626493fa5a255d7);background-size:436px auto}.feedback-button,.fm-files-search i.search,.improved-recovery-steps .list-point b.megasync-logo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49776	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:54 UTC	424	OUT	GET /4/js/mega-16_e1f30ff0208b23154355d46d096fe4dc0903b6d61f3e1b940cd2bc8fd68ff723.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:54 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:54 GMT Content-Type: application/javascript Content-Length: 393442 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-600e2" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:54 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 66 69 6c 65 6d 61 6e 61 67 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 75 74 69 6c 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 61 63 63 6f 75 6e 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 63 6f 6e 74 61 63 74 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 66 69 6c 74 65 72 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 6d 65 6e 75 73 2e 6a 73 0a 20 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 46 69 6c 65 4d 61 6e 61 67 65 72 28 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 Data Ascii: /* Bundle Includes: * js/fm/filemanager.js * js/fm/utils.js * js/fm/megadata.js * js/fm/megadata/account.js * js/fm/megadata/contacts.js * js/fm/megadata/filters.js * js/fm/megadata/menus.js */function FileManager() { "use stri
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 63 2e 69 6e 64 65 78 4f 66 28 27 74 72 61 6e 73 66 65 72 73 27 29 20 3e 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 64 20 3d 20 27 64 6f 77 6e 6c 6f 61 64 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 63 20 26 26 20 63 2e 69 6e 64 65 78 4f 66 28 27 6a 73 2d 6c 70 62 74 6e 27 29 20 3e 20 2d 31 20 26 26 20 61 20 3d 3d 3d 20 27 64 72 6f 70 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: } else if (c.indexOf('transfers') > -1) { dd = 'download'; } } } else if (c && c.indexOf('js-lpbtn') > -1 && a === 'drop') {
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 20 3d 20 61 2e 63 6c 61 73 73 4c 69 73 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 20 26 26 20 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 2e 63 6f 6e 74 61 69 6e 73 28 27 64 72 6f 70 64 6f 77 6e 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 28 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 2e 63 6f 6e 74 61 69 6e 73 28 27 64 6f 77 6e 6c 6f 61 64 2d 69 74 65 6d 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 7c 20 63 75 72 72 65 6e 74 4e 6f 64 65 43 6c 61 73 73 2e 63 6f 6e 74 61 69 6e 73 28 27 6d 6f 76 65 2d 69 74 Data Ascii: currentNodeClass = a.classList; } if (currentNodeClass && currentNodeClass.contains('dropdown') && (currentNodeClass.contains('download-item') \|\| currentNodeClass.contains('move-it
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 65 77 6e 6f 64 65 73 5b 69 5d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 65 77 4e 6f 64 65 2e 68 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 63 6f 6e 74 61 63 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 65 77 4e 6f 64 65 2e 73 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 73 68 61 72 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 65 77 4e 6f 64 65 2e 70 20 26 26 20 6e 65 77 4e 6f 64 65 2e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 65 65 62 75 69 6c 64 5b 6e 65 77 4e 6f 64 65 2e 70 5d 20 3d 20 31 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 Data Ascii: ewnodes[i]; if (newNode.h.length === 11) { newcontact = true; } if (newNode.su) { newshare = true; } if (newNode.p && newNode.t) { treebuild[newNode.p] = 1; } if
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 75 73 65 72 5f 68 61 6e 64 6c 65 20 3d 20 24 2e 73 65 6c 65 63 74 65 64 20 26 26 20 24 2e 73 65 6c 65 63 74 65 64 5b 30 5d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 24 74 68 69 73 2e 69 73 28 27 2e 64 69 73 61 62 6c 65 64 27 29 20 26 26 20 75 73 65 72 5f 68 61 6e 64 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 67 61 43 68 61 74 2e 63 72 65 61 74 65 41 6e 64 53 68 6f 77 50 72 69 76 61 74 65 52 6f 6f 6d 28 75 73 65 72 5f 68 61 6e 64 6c 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6f 6d 2e 73 65 74 41 63 74 69 76 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f Data Ascii: user_handle = $.selected && $.selected[0]; if (!$this.is('.disabled') && user_handle) { megaChat.createAndShowPrivateRoom(user_handle) .then(function(room) { room.setActive(); ro
2024-07-11 11:36:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 75 6e 64 65 66 69 6e 65 64 2c 20 6d 65 67 61 2e 62 61 63 6b 75 70 43 65 6e 74 65 72 2e 73 65 6c 65 63 74 65 64 53 79 6e 63 2e 6e 6f 64 65 48 61 6e 64 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 6e 6f 70 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 28 65 78 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 73 67 44 69 61 6c 6f 67 28 27 77 61 72 6e 69 6e 67 61 27 2c 20 6c 5b 31 33 35 5d 2c 20 6c 5b 34 37 5d 2c 20 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: undefined, mega.backupCenter.selectedSync.nodeHandle ) .then(nop) .catch((ex) => { msgDialog('warninga', l[135], l[47], ex);
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 69 66 20 28 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 33 37 20 7c 7c 20 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 33 39 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 72 65 63 65 6e 74 73 52 65 6e 64 65 72 2e 6b 65 79 53 65 6c 65 63 74 50 72 65 76 4e 65 78 74 28 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 33 39 20 7c 20 30 20 7c 7c 20 2d 31 2c 20 65 2e 73 68 69 66 74 4b 65 79 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 75 70 20 6f 72 20 64 6f 77 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 33 38 20 7c 7c 20 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 34 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (e.keyCode === 37 \|\| e.keyCode === 39) { M.recentsRender.keySelectPrevNext(e.keyCode === 39 \| 0 \|\| -1, e.shiftKey); } // up or down else if (e.keyCode === 38 \|\| e.keyCode === 40) {
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 28 24 28 73 74 61 72 74 29 2e 69 6e 64 65 78 28 29 20 3e 20 24 28 65 6e 64 29 2e 69 6e 64 65 78 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 64 20 3d 20 73 74 61 72 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 72 74 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 75 69 2d 73 65 6c 65 63 74 65 64 27 2c 20 64 6f 6d 54 61 62 6c 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 75 69 2d 73 65 6c 65 63 74 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 5b 73 74 61 72 74 2c 20 65 6e 64 5d 29 2e 61 64 64 43 6c 61 73 73 Data Ascii: ($(start).index() > $(end).index()) { end = start; start = this; } $('.ui-selected', domTable).removeClass('ui-selected'); $([start, end]).addClass
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 66 6d 68 6f 6c 64 65 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 66 69 6c 65 73 2d 67 72 69 64 2d 76 69 65 77 2e 66 6d 27 2c 20 27 2e 66 6d 68 6f 6c 64 65 72 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6f 75 74 2d 73 68 61 72 65 73 2d 76 69 65 77 20 70 75 62 6c 69 63 2d 6c 69 6e 6b 73 2d 76 69 65 77 20 66 69 6c 65 2d 72 65 71 75 65 73 74 73 2d 76 69 65 77 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 63 75 72 72 65 6e 74 43 75 73 74 6f 6d 56 69 65 77 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4d 2e 69 73 47 61 6c 6c 65 72 79 50 61 67 65 28 29 20 7c 7c 20 4d 2e 69 73 41 6c 62 75 6d 73 50 61 67 65 28 29 29 Data Ascii: fmholder').removeClass('hidden'); $('.files-grid-view.fm', '.fmholder') .removeClass('out-shares-view public-links-view file-requests-view'); if (this.currentCustomView) { if (M.isGalleryPage() \|\| M.isAlbumsPage())
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 20 20 2f 2f 20 4f 70 65 6e 20 66 6f 6c 64 65 72 2f 66 69 6c 65 20 69 6e 20 66 69 6c 65 6d 61 6e 61 67 65 72 0a 20 20 20 20 6c 65 74 20 74 61 70 70 65 64 49 74 65 6d 49 64 20 3d 20 27 27 3b 0a 20 20 20 20 24 64 64 55 49 69 74 65 6d 2e 72 65 62 69 6e 64 28 27 64 62 6c 63 6c 69 63 6b 2e 6f 70 65 6e 54 61 72 67 65 74 20 74 6f 75 63 68 65 6e 64 2e 74 61 62 6c 65 74 4f 70 65 6e 54 61 72 67 65 74 27 2c 20 28 65 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 68 20 3d 20 24 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 61 74 74 72 28 27 69 64 27 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 20 3d 20 4d 2e 67 65 74 4e 6f 64 65 42 79 48 61 6e 64 6c 65 28 68 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 29 20 7b 0a 20 20 20 20 20 20 Data Ascii: // Open folder/file in filemanager let tappedItemId = ''; $ddUIitem.rebind('dblclick.openTarget touchend.tabletOpenTarget', (e) => { let h = $(e.currentTarget).attr('id'); const n = M.getNodeByHandle(h); if (!n) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49779	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:55 UTC	621	OUT	GET /4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:55 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:55 GMT Content-Type: application/javascript Content-Length: 443062 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-6c2b6" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:55 UTC	16007	IN	Data Raw: 2f 2a 21 20 61 73 6d 43 72 79 70 74 6f 2c 20 28 63 29 20 32 30 31 33 20 41 72 74 65 6d 20 53 20 56 79 62 6f 72 6e 6f 76 2c 20 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 20 65 78 70 6f 72 74 73 2c 20 67 6c 6f 62 61 6c 20 29 20 7b 0a 0a 66 75 6e 63 74 69 6f 6e 20 49 6c 6c 65 67 61 6c 53 74 61 74 65 45 72 72 6f 72 20 28 29 20 7b 20 76 61 72 20 65 72 72 20 3d 20 45 72 72 6f 72 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 20 74 68 69 73 2e 6d 65 73 73 61 67 65 20 3d 20 65 72 72 2e 6d 65 73 73 61 67 65 2c 20 74 68 69 73 2e 73 74 61 63 6b 20 3d 20 65 72 72 2e 73 74 61 63 6b 3b 20 7d 0a 49 6c 6c 65 67 61 6c 53 74 61 74 65 45 72 72 6f 72 2e 70 72 6f Data Ascii: /! asmCrypto, (c) 2013 Artem S Vybornov, opensource.org/licenses/MIT /(function ( exports, global ) {function IllegalStateError () { var err = Error.apply( this, arguments ); this.message = err.message, this.stack = err.stack; }IllegalStateError.pro
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 20 78 31 2c 20 78 32 2c 20 78 33 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 30 20 3d 20 78 30 7c 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 31 20 3d 20 78 31 7c 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 32 20 3d 20 78 32 7c 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 33 20 3d 20 78 33 7c 30 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 63 6f 72 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 30 30 30 2c 20 30 78 30 38 30 30 2c 20 30 78 31 30 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 30 20 5e 20 78 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: x1, x2, x3 ) { x0 = x0\|0; x1 = x1\|0; x2 = x2\|0; x3 = x3\|0; _core( 0x0000, 0x0800, 0x1000, R, I0 ^ x0,
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 69 73 5f 62 75 66 66 65 72 28 6b 65 79 29 20 7c 7c 20 69 73 5f 62 79 74 65 73 28 6b 65 79 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6b 65 79 20 3d 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6b 65 79 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 20 69 73 5f 73 74 72 69 6e 67 28 6b 65 79 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6b 65 79 20 3d 20 73 74 72 69 6e 67 5f 74 6f 5f 62 79 74 65 73 28 6b 65 79 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 75 6e 65 Data Ascii: !== undefined ) { if ( is_buffer(key) \|\| is_bytes(key) ) { key = new Uint8Array(key); } else if ( is_string(key) ) { key = string_to_bytes(key); } else { throw new TypeError("une
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 49 6c 6c 65 67 61 6c 53 74 61 74 65 45 72 72 6f 72 28 22 79 6f 75 20 73 68 6f 75 6c 64 20 73 70 65 63 69 66 79 20 65 69 74 68 65 72 20 61 64 61 74 61 20 6f 72 20 69 76 2c 20 6e 6f 74 20 62 6f 74 68 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 21 69 73 5f 6e 75 6d 62 65 72 28 63 6f 75 6e 74 65 72 29 20 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 63 6f 75 6e 74 65 72 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 63 6f 75 6e 74 65 72 20 3c 20 31 20 7c 7c 20 63 6f 75 6e 74 65 72 20 3e 3d 20 28 20 4d 61 74 68 2e 70 6f 77 28 20 32 2c 20 38 2a 6c 65 6e 67 74 68 53 69 7a 65 20 29 20 2d 20 Data Ascii: throw new IllegalStateError("you should specify either adata or iv, not both"); if ( !is_number(counter) ) throw new TypeError("counter must be a number"); if ( counter < 1 \|\| counter >= ( Math.pow( 2, 8*lengthSize ) -
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 6e 20 2b 20 64 6c 65 6e 20 3e 20 74 61 67 53 69 7a 65 20 3f 20 28 20 6c 65 6e 20 2b 20 64 6c 65 6e 20 2d 20 74 61 67 53 69 7a 65 20 29 20 26 20 2d 31 36 20 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 74 6c 65 6e 20 3d 20 6c 65 6e 20 2b 20 64 6c 65 6e 20 2d 20 72 6c 65 6e 2c 0a 20 20 20 20 20 20 20 20 77 6c 65 6e 20 3d 20 30 3b 0a 0a 20 20 20 20 69 66 20 28 20 28 28 63 6f 75 6e 74 65 72 2d 31 29 3c 3c 34 29 20 2b 20 6c 65 6e 20 2b 20 64 6c 65 6e 20 3e 20 5f 41 45 53 5f 47 43 4d 5f 64 61 74 61 5f 6d 61 78 4c 65 6e 67 74 68 20 29 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 63 6f 75 6e 74 65 72 20 6f 76 65 72 66 6c 6f 77 22 29 3b 0a 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 20 3d 20 6e 65 77 20 55 69 6e 74 38 41 Data Ascii: n + dlen > tagSize ? ( len + dlen - tagSize ) & -16 : 0, tlen = len + dlen - rlen, wlen = 0; if ( ((counter-1)<<4) + len + dlen > _AES_GCM_data_maxLength ) throw new RangeError("counter overflow"); var result = new Uint8A
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 5e 20 63 29 20 29 20 29 20 2b 20 28 20 62 3e 3e 3e 32 20 5e 20 62 3e 3e 3e 31 33 20 5e 20 62 3e 3e 3e 32 32 20 5e 20 62 3c 3c 33 30 20 5e 20 62 3c 3c 31 39 20 5e 20 62 3c 3c 31 30 20 29 20 29 7c 30 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 31 37 0a 20 20 20 20 20 20 20 20 77 31 20 3d 20 74 20 3d 20 28 20 28 20 77 32 3e 3e 3e 37 20 20 5e 20 77 32 3e 3e 3e 31 38 20 5e 20 77 32 3e 3e 3e 33 20 20 5e 20 77 32 3c 3c 32 35 20 5e 20 77 32 3c 3c 31 34 20 29 20 2b 20 28 20 77 31 35 3e 3e 3e 31 37 20 5e 20 77 31 35 3e 3e 3e 31 39 20 5e 20 77 31 35 3e 3e 3e 31 30 20 5e 20 77 31 35 3c 3c 31 35 20 5e 20 77 31 35 3c 3c 31 33 20 29 20 2b 20 77 31 20 2b 20 77 31 30 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 20 3d 20 28 20 74 20 2b 20 68 20 2b 20 28 20 65 3e 3e 3e 36 20 Data Ascii: ^ c) ) ) + ( b>>>2 ^ b>>>13 ^ b>>>22 ^ b<<30 ^ b<<19 ^ b<<10 ) )\|0; // 17 w1 = t = ( ( w2>>>7 ^ w2>>>18 ^ w2>>>3 ^ w2<<25 ^ w2<<14 ) + ( w15>>>17 ^ w15>>>19 ^ w15>>>10 ^ w15<<15 ^ w15<<13 ) + w1 + w10 )\|0; t = ( t + h + ( e>>>6
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 3c 31 39 20 5e 20 62 3c 3c 31 30 20 29 20 29 7c 30 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 35 34 0a 20 20 20 20 20 20 20 20 77 36 20 3d 20 74 20 3d 20 28 20 28 20 77 37 3e 3e 3e 37 20 20 5e 20 77 37 3e 3e 3e 31 38 20 5e 20 77 37 3e 3e 3e 33 20 20 5e 20 77 37 3c 3c 32 35 20 5e 20 77 37 3c 3c 31 34 20 29 20 2b 20 28 20 77 34 3e 3e 3e 31 37 20 5e 20 77 34 3e 3e 3e 31 39 20 5e 20 77 34 3e 3e 3e 31 30 20 5e 20 77 34 3c 3c 31 35 20 5e 20 77 34 3c 3c 31 33 20 29 20 2b 20 77 36 20 2b 20 77 31 35 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 20 3d 20 28 20 74 20 2b 20 68 20 2b 20 28 20 65 3e 3e 3e 36 20 5e 20 65 3e 3e 3e 31 31 20 5e 20 65 3e 3e 3e 32 35 20 5e 20 65 3c 3c 32 36 20 5e 20 65 3c 3c 32 31 20 5e 20 65 3c 3c 37 20 29 20 2b 20 20 28 20 67 20 5e 20 65 20 Data Ascii: <19 ^ b<<10 ) )\|0; // 54 w6 = t = ( ( w7>>>7 ^ w7>>>18 ^ w7>>>3 ^ w7<<25 ^ w7<<14 ) + ( w4>>>17 ^ w4>>>19 ^ w4>>>10 ^ w4<<15 ^ w4<<13 ) + w6 + w15 )\|0; t = ( t + h + ( e>>>6 ^ e>>>11 ^ e>>>25 ^ e<<26 ^ e<<21 ^ e<<7 ) + ( g ^ e
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 61 32 35 36 5f 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 69 73 68 20 3d 20 20 68 61 73 68 5f 66 69 6e 69 73 68 3b 0a 0a 76 61 72 20 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 20 3d 20 6e 75 6c 6c 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 5f 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 20 28 29 20 7b 0a 20 20 20 20 69 66 20 28 20 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 20 3d 3d 3d 20 6e 75 6c 6c 20 29 20 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 20 3d 20 6e 65 77 20 73 68 61 32 35 36 5f 63 6f 6e 73 74 72 75 63 74 6f 72 28 20 7b 20 68 65 61 70 53 69 7a 65 3a 20 30 78 31 30 30 30 30 30 20 7d 20 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 53 48 41 32 35 36 20 65 78 70 6f Data Ascii: a256_prototype.finish = hash_finish;var sha256_instance = null;function get_sha256_instance () { if ( sha256_instance === null ) sha256_instance = new sha256_constructor( { heapSize: 0x100000 } ); return sha256_instance;}/** * SHA256 expo
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 74 6c 20 3d 20 28 20 74 6c 20 2b 20 78 6c 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 68 20 3d 20 28 20 74 68 20 2b 20 28 28 28 65 68 20 3e 3e 3e 20 31 34 29 20 7c 20 28 65 6c 20 3c 3c 20 31 38 29 29 20 5e 20 28 28 65 68 20 3e 3e 3e 20 31 38 29 20 7c 20 28 65 6c 20 3c 3c 20 31 34 29 29 20 5e 20 28 28 65 68 20 3c 3c 20 32 33 29 20 7c 20 28 65 6c 20 3e 3e 3e 20 39 29 29 29 20 2b 20 28 28 74 6c 20 3e 3e 3e 20 30 29 20 3c 20 28 78 6c 20 3e 3e 3e 20 30 29 20 3f 20 31 20 3a 20 30 29 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 78 6c 20 3d 20 28 20 28 20 67 6c 20 5e 20 65 6c 20 26 20 28 66 6c 5e 67 6c 29 20 29 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 6c 20 3d 20 28 20 74 6c 20 2b 20 78 6c 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 68 20 3d Data Ascii: tl = ( tl + xl )\|0; th = ( th + (((eh >>> 14) \| (el << 18)) ^ ((eh >>> 18) \| (el << 14)) ^ ((eh << 23) \| (el >>> 9))) + ((tl >>> 0) < (xl >>> 0) ? 1 : 0) )\|0; xl = ( ( gl ^ el & (fl^gl) ) )\|0; tl = ( tl + xl )\|0; th =
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 68 20 2b 20 68 68 20 2b 20 28 28 74 6c 20 3e 3e 3e 20 30 29 20 3c 20 28 68 6c 20 3e 3e 3e 20 30 29 20 3f 20 31 20 3a 20 30 29 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 78 6c 20 3d 20 28 20 28 28 65 6c 20 3e 3e 3e 20 31 34 29 20 7c 20 28 65 68 20 3c 3c 20 31 38 29 29 20 5e 20 28 28 65 6c 20 3e 3e 3e 20 31 38 29 20 7c 20 28 65 68 20 3c 3c 20 31 34 29 29 20 5e 20 28 28 65 6c 20 3c 3c 20 32 33 29 20 7c 20 28 65 68 20 3e 3e 3e 20 39 29 29 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 6c 20 3d 20 28 20 74 6c 20 2b 20 78 6c 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 68 20 3d 20 28 20 74 68 20 2b 20 28 28 28 65 68 20 3e 3e 3e 20 31 34 29 20 7c 20 28 65 6c 20 3c 3c 20 31 38 29 29 20 5e 20 28 28 65 68 20 3e 3e 3e 20 31 38 29 20 7c 20 28 65 6c 20 3c 3c 20 31 34 29 Data Ascii: h + hh + ((tl >>> 0) < (hl >>> 0) ? 1 : 0) )\|0; xl = ( ((el >>> 14) \| (eh << 18)) ^ ((el >>> 18) \| (eh << 14)) ^ ((el << 23) \| (eh >>> 9)) )\|0; tl = ( tl + xl )\|0; th = ( th + (((eh >>> 14) \| (el << 18)) ^ ((eh >>> 18) \| (el << 14)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49778	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:55 UTC	424	OUT	GET /4/js/mega-17_3a85d86ee65b0ea458f2d41270f2589ee1875995e684c8efff49b59f155efd79.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:55 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:55 GMT Content-Type: application/javascript Content-Length: 459681 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-703a1" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:55 UTC	16007	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 6e 6f 64 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 6f 70 65 6e 66 6f 6c 64 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 72 65 6e 64 65 72 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 72 65 6e 64 65 72 2d 62 72 65 61 64 63 72 75 6d 62 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 73 68 61 72 65 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 73 6f 72 74 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 6d 2f 6d 65 67 61 64 61 74 61 2f 74 72 61 6e 73 66 65 72 73 2e 6a 73 0a 20 2a 20 20 20 6a 73 2f 66 Data Ascii: /* Bundle Includes: * js/fm/megadata/nodes.js * js/fm/megadata/openfolder.js * js/fm/megadata/render.js * js/fm/megadata/render-breadcrumbs.js * js/fm/megadata/shares.js * js/fm/megadata/sort.js * js/fm/megadata/transfers.js * js/f
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 70 61 74 68 20 3d 20 53 74 72 69 6e 67 28 70 61 74 68 20 7c 7c 20 74 68 69 73 2e 63 75 72 72 65 6e 74 64 69 72 69 64 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 63 75 73 74 6f 6d 56 69 65 77 20 3d 20 70 61 74 68 20 3d 3d 3d 20 74 68 69 73 2e 63 75 72 72 65 6e 74 64 69 72 69 64 20 3f 20 74 68 69 73 2e 63 75 72 72 65 6e 74 43 75 73 74 6f 6d 56 69 65 77 20 3a 20 74 68 69 73 2e 69 73 43 75 73 74 6f 6d 56 69 65 77 28 70 61 74 68 29 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 63 75 73 74 6f 6d 56 69 65 77 2e 74 79 70 65 20 3d 3d 3d 20 27 61 6c 62 75 6d 73 27 0a 20 20 20 20 20 20 20 20 26 26 20 21 74 79 70 65 0a 20 20 20 20 20 20 20 20 7c 7c 20 28 74 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 70 61 74 68 20 3d 3d Data Ascii: rn true; } path = String(path \|\| this.currentdirid); const customView = path === this.currentdirid ? this.currentCustomView : this.isCustomView(path); return customView.type === 'albums' && !type \|\| (type === 1 && path ==
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 70 72 6f 6d 69 73 65 73 29 2e 63 61 74 63 68 28 64 75 6d 70 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 6f 6e 73 74 20 63 6c 65 61 6e 45 6d 70 74 79 4d 65 72 67 65 64 46 6f 6c 64 65 72 73 20 3d 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6d 65 72 67 65 64 46 6f 6c 64 65 72 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 63 6c 65 61 6e 69 6e 67 20 65 6d 70 74 79 20 66 6f 6c 64 65 72 73 20 28 6d 6f 76 65 64 29 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 64 75 72 69 6e 67 20 6d 65 72 67 69 6e 67 20 66 6f 6c 64 65 72 73 20 6d 61 79 20 73 74 69 6c 6c 20 68 61 76 65 20 73 6f 6d 65 20 69 74 65 6d Data Ascii: await Promise.all(promises).catch(dump); } const cleanEmptyMergedFolders = () => { if (Object.keys(mergedFolder).length) { // cleaning empty folders (moved). // during merging folders may still have some item
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 0a 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 28 27 72 65 76 6f 6b 65 53 68 61 72 65 73 20 66 6f 72 20 25 73 20 6e 6f 64 65 73 2e 2e 2e 27 2c 20 68 61 6e 64 6c 65 73 2e 6c 65 6e 67 74 68 2c 20 68 61 6e 64 6c 65 73 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 6f 6e 73 74 20 70 65 6e 64 69 6e 67 20 3d 20 74 68 69 73 2e 63 6f 6c 6c 65 63 74 4e 6f 64 65 73 28 68 61 6e 64 6c 65 73 29 3b 0a 20 20 20 20 69 66 20 28 70 65 6e 64 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 61 77 61 69 74 20 70 65 6e 64 69 6e 67 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 6f 6e 73 74 20 6c 69 6e 6b 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 63 6f 6e 73 74 20 66 6f 6c 64 65 72 73 20 3d 20 5b 5d 3b 0a 0a 20 20 20 20 63 6f 6e 73 74 20 Data Ascii: if (d) { console.group('revokeShares for %s nodes...', handles.length, handles); } const pending = this.collectNodes(handles); if (pending) { await pending; } const links = []; const folders = []; const
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 6e 2e 68 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 75 70 64 61 74 65 44 6f 6d 4e 6f 64 65 50 6f 73 69 74 69 6f 6e 28 6e 2c 20 64 6f 6d 4e 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 3b 0a 0a 2f 2a 2a 0a 20 2a 20 4c 61 62 65 6c 69 6e 67 20 6f 66 20 6e 6f 64 65 73 20 75 70 64 61 74 65 73 20 44 4f 4d 20 61 6e 64 20 41 50 49 0a 20 2a 0a 20 2a 20 40 70 61 72 61 6d 20 7b 41 72 72 61 79 20 7c 20 73 74 72 69 6e 67 7d 20 68 61 6e 64 6c 65 73 20 53 65 6c 65 63 74 65 64 20 6e 6f 64 65 73 20 68 61 6e 64 6c 65 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 49 6e 74 65 67 65 72 7d 20 6e 65 77 4c 61 62 65 6c 53 74 61 74 65 20 4e 75 6d 65 72 69 63 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6e 65 77 20 6c 61 62 65 6c 0a 20 2a 2f 0a 4d Data Ascii: n.h); this.updateDomNodePosition(n, domNode); } }};/** * Labeling of nodes updates DOM and API * * @param {Array \| string} handles Selected nodes handles * @param {Integer} newLabelState Numeric value of the new label */M
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 74 72 65 65 20 3d 20 5b 2e 2e 2e 74 72 65 65 2c 20 2e 2e 2e 74 65 6d 70 52 5d 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 74 72 65 65 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 20 3d 20 7b 2e 2e 2e 74 68 69 73 2e 67 65 74 4e 6f 64 65 42 79 48 61 6e 64 6c 65 28 74 72 65 65 5b 69 5d 29 7d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 2e 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 4e 6f 64 65 20 6e 6f 74 20 66 6f 75 6e 64 27 2c 20 74 72 65 65 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: tree = [...tree, ...tempR]; } for (let i = 0; i < tree.length; i++) { const n = {...this.getNodeByHandle(tree[i])}; if (!n.h) { if (d) { console.warn('Node not found', tree[i]); }
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 72 65 6a 65 63 74 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 66 20 28 4d 2e 63 5b 74 61 72 67 65 74 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 5f 64 6f 6e 65 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 64 62 66 65 74 63 68 2e 67 65 74 28 74 61 72 67 65 74 29 2e 61 6c 77 61 79 73 28 5f 64 6f 6e 65 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 20 6e 65 77 20 66 6f 6c 64 65 72 20 6f 6e 20 74 68 65 20 63 6c 6f 75 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 70 61 74 68 73 20 4f 62 6a 65 63 74 20 63 6f 6e 74 61 69 6e 69 6e 67 20 66 6f 6c 64 65 72 73 20 6f 6e 20 6b 65 79 73 2c 20 6e 6f 64 65 20 68 61 6e 64 6c 65 73 20 77 69 6c 6c 20 62 65 20 66 69 6c 6c 65 64 20 61 Data Ascii: reject); }; if (M.c[target]) { _done(); } else { dbfetch.get(target).always(_done); }});/** * Create new folder on the cloud * @param {Object} paths Object containing folders on keys, node handles will be filled a
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 5d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 2e 68 20 3d 3d 3d 20 68 61 6e 64 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 20 3e 20 32 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 46 6f 75 6e 64 20 63 68 61 74 20 6e 6f 64 65 20 62 79 20 72 61 77 20 68 61 6e 64 6c 65 20 25 73 2c 20 79 6f 75 20 6d 61 79 20 70 72 6f 76 69 64 65 20 74 68 65 20 63 68 61 74 20 68 61 6e 64 6c 65 20 25 73 27 2c 20 6e 2e 68 2c 20 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d Data Ascii: ]; if (n.h === handle) { if (d > 2) { console.warn('Found chat node by raw handle %s, you may provide the chat handle %s', n.h, ch); } return n; } } }
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 69 6d 70 6f 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 2e 6e 20 3d 20 5b 6e 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 2e 74 20 3d 20 74 61 72 67 65 74 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 70 69 2e 73 63 72 65 71 28 72 65 71 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 6f 6c 76 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 28 65 78 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 2e 75 6c 65 72 72 6f 72 28 6e 75 6c 6c 2c 20 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6a 65 63 74 28 Data Ascii: var _import = function(target) { req.n = [n]; req.t = target; api.screq(req) .then(resolve) .catch((ex) => { M.ulerror(null, ex); reject(
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 6f 63 6b 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 20 5b 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 5d 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 44 79 6e 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 72 27 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 44 79 6e 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 72 2c 20 27 69 6e 73 74 61 6e 63 65 73 27 2c 20 7b 76 61 6c 75 65 3a 20 6e 65 77 20 53 65 74 28 29 7d 29 3b 0a 0a 20 20 20 20 2f 2f 20 6d 61 70 20 68 61 6e 64 6c 65 20 74 6f 20 72 6f 6f 74 20 6e 61 6d Data Ascii: ock').removeClass('hidden'); } } get [Symbol.toStringTag]() { return 'DynContentLoader'; } } Object.defineProperty(DynContentLoader, 'instances', {value: new Set()}); // map handle to root nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49782	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:55 UTC	632	OUT	GET /4/html/download.html-postbuild_2749a59feff4141009bb961edd622162e7589b7f6c446e9be297528f0cdff89d.html HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:55 UTC	362	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:55 GMT Content-Type: text/html Content-Length: 11912 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-2e88" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:55 UTC	11912	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 74 74 6f 6d 2d 70 61 67 65 20 64 6f 77 6e 6c 6f 61 64 20 73 63 72 6f 6c 6c 2d 62 6c 6f 63 6b 20 73 65 6c 65 63 74 61 62 6c 65 2d 74 78 74 22 3e 20 28 28 54 4f 50 29 29 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 77 6e 6c 6f 61 64 2d 63 6f 6e 74 65 6e 74 20 64 6f 77 6e 6c 6f 61 64 20 64 6f 77 6e 6c 6f 61 64 2d 70 61 67 65 22 3e 20 3c 64 69 76 20 69 64 3d 22 63 6f 6d 6d 65 72 63 69 61 6c 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 72 63 69 61 6c 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 68 69 64 64 65 6e 22 3e 20 3c 69 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 20 69 63 6f 6e 2d 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 22 3e 3c 2f 69 3e 20 3c 2f 64 69 76 3e 20 Data Ascii: <div class="bottom-page download scroll-block selectable-txt"> ((TOP)) <div class="download-content download download-page"> <div id="commercial-close-button" class="commercial-close-button hidden"> <i class="sprite-fm-mono icon-dialog-close"></i> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49781	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:55 UTC	425	OUT	GET /4/css/mega-7_58c04ac027b15931acfb17be4a134e35c8bdd3b99109e617895713a42f32d84a.css HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:55 UTC	361	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:55 GMT Content-Type: text/css Content-Length: 41595 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-a27b" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:55 UTC	16023	IN	Data Raw: 2f 2a 20 42 75 6e 64 6c 65 20 49 6e 63 6c 75 64 65 73 3a 0a 20 2a 20 20 20 63 73 73 2f 74 6f 61 73 74 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 67 65 6e 65 72 61 6c 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 6d 65 67 61 69 6e 70 75 74 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 76 61 72 73 2f 74 65 78 74 2d 69 6e 70 75 74 2e 63 73 73 0a 20 2a 20 20 20 63 73 73 2f 72 65 74 69 6e 61 2d 69 6d 61 67 65 73 2e 63 73 73 0a 20 2a 2f 0a 0a 2e 74 6f 61 73 74 2d 72 61 63 6b 7b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0a 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0a 7d 0a 2e 72 74 6c 20 2e 74 6f 61 73 74 2d 72 61 Data Ascii: /* Bundle Includes: * css/toast.css * css/general.css * css/megainput.css * css/vars/text-input.css * css/retina-images.css */.toast-rack{box-sizing:border-box;display:flex;flex-direction:column;position:relative}.rtl .toast-ra
2024-07-11 11:36:55 UTC	16384	IN	Data Raw: 72 64 65 72 2d 69 6e 66 6f 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 6e 6e 65 72 2d 74 65 78 74 2d 69 6e 66 6f 29 3b 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 09 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 62 6f 64 79 31 29 3b 0a 09 70 61 64 64 69 6e 67 3a 32 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 09 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 0a 7d 0a 2e 6d 65 67 61 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 2e 6d 65 73 73 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 0a 09 6d 61 72 67 69 Data Ascii: rder-info);border-radius:4px;box-sizing:border-box;color:var(--banner-text-info);display:none;font:var(--text-body1);padding:2px;text-align:center;text-overflow:ellipsis;white-space:normal}.mega-input-wrapper .message-container{margi
2024-07-11 11:36:55 UTC	9188	IN	Data Raw: 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 37 32 70 78 20 61 75 74 6f 0a 7d 0a 2e 68 75 67 65 2d 69 63 6f 6e 2e 61 63 68 69 65 76 65 6d 65 6e 74 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 6d 65 67 61 2f 62 69 67 2d 61 63 68 69 65 76 65 6d 65 6e 74 73 40 32 78 2e 70 6e 67 3f 76 3d 31 36 32 36 34 39 33 66 61 35 61 32 35 35 64 37 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 34 33 36 70 78 20 61 75 74 6f 0a 7d 0a 2e 66 65 65 64 62 61 63 6b 2d 62 75 74 74 6f 6e 2c 2e 66 6d 2d 66 69 6c 65 73 2d 73 65 61 72 63 68 20 69 2e 73 65 61 72 63 68 2c 2e 69 6d 70 72 6f 76 65 64 2d 72 65 63 6f 76 65 72 79 2d 73 74 65 70 73 20 2e 6c 69 73 74 2d 70 6f 69 6e 74 20 62 2e 6d 65 67 61 73 79 6e 63 2d 6c 6f 67 6f Data Ascii: round-size:172px auto}.huge-icon.achievement{background-image:url(../images/mega/big-achievements@2x.png?v=1626493fa5a255d7);background-size:436px auto}.feedback-button,.fm-files-search i.search,.improved-recovery-steps .list-point b.megasync-logo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49783	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:56 UTC	618	OUT	GET /4/html/js/download_7066fb3a9439ac4b7ab62485a20eef0196e9d0ec2a4038302f3eeda11453f2c5.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:56 UTC	375	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:56 GMT Content-Type: application/javascript Content-Length: 38615 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-96d7" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:56 UTC	16009	IN	Data Raw: 76 61 72 20 64 6c 70 61 67 65 5f 70 68 3b 0a 76 61 72 20 64 6c 70 61 67 65 5f 6b 65 79 3b 0a 76 61 72 20 66 64 6c 5f 66 69 6c 65 6e 61 6d 65 2c 20 66 64 6c 5f 66 69 6c 65 73 69 7a 65 2c 20 66 64 6c 5f 6b 65 79 2c 20 66 64 6c 5f 75 72 6c 2c 20 66 64 6c 5f 73 74 61 72 74 74 69 6d 65 3b 0a 76 61 72 20 64 6c 5f 69 6d 70 6f 72 74 3d 66 61 6c 73 65 3b 0a 76 61 72 20 64 6c 5f 61 74 74 72 3b 0a 76 61 72 20 64 6c 5f 6e 6f 64 65 3b 0a 76 61 72 20 66 64 6c 5f 71 75 65 75 65 5f 76 61 72 3d 66 61 6c 73 65 3b 0a 76 61 72 20 66 69 6c 65 53 69 7a 65 3b 0a 76 61 72 20 64 6c 52 65 73 75 6d 65 49 6e 66 6f 3b 0a 76 61 72 20 6d 65 64 69 61 43 6f 6c 6c 65 63 74 46 6e 3b 0a 76 61 72 20 6d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 20 3d 20 4d 61 74 68 2e 70 6f 77 28 32 2c 20 35 Data Ascii: var dlpage_ph;var dlpage_key;var fdl_filename, fdl_filesize, fdl_key, fdl_url, fdl_starttime;var dl_import=false;var dl_attr;var dl_node;var fdl_queue_var=false;var fileSize;var dlResumeInfo;var mediaCollectFn;var maxDownloadSize = Math.pow(2, 5
2024-07-11 11:36:56 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 61 74 63 68 64 6f 67 2e 71 75 65 72 79 28 27 64 6c 69 6e 67 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 6c 77 61 79 73 28 28 72 65 73 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 63 65 65 64 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 65 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: watchdog.query('dling') .always((res) => { var proceed = true; if (Array.isArray(res)) { res = Array.prototyp
2024-07-11 11:36:56 UTC	6222	IN	Data Raw: 62 70 73 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 70 65 65 64 20 20 3d 20 6e 75 6d 4f 66 42 79 74 65 73 28 62 70 73 2c 20 31 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 64 6f 77 6e 6c 6f 61 64 2e 73 70 65 65 64 2d 62 6c 6f 63 6b 20 2e 64 61 72 6b 2d 6e 75 6d 62 65 72 73 27 2c 20 24 64 6f 77 6c 6f 61 64 57 72 61 70 70 65 72 29 2e 74 65 78 74 28 73 70 65 65 64 2e 73 69 7a 65 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 64 6f 77 6e 6c 6f 61 64 2e 73 70 65 65 64 2d 62 6c 6f 63 6b 20 2e 6c 69 67 68 74 2d 74 78 74 27 2c 20 24 64 6f 77 6c 6f 61 64 57 72 61 70 70 65 72 29 2e 74 65 78 74 28 73 70 65 65 64 2e 75 6e 69 74 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 64 6f 77 6e 6c 6f 61 64 2e 65 74 61 2d 62 6c 6f 63 6b 20 2e 64 61 72 6b 2d 6e Data Ascii: bps; var speed = numOfBytes(bps, 1, true); $('.download.speed-block .dark-numbers', $dowloadWrapper).text(speed.size); $('.download.speed-block .light-txt', $dowloadWrapper).text(speed.unit); $('.download.eta-block .dark-n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49784	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:56 UTC	444	OUT	GET /4/html/download.html-postbuild_2749a59feff4141009bb961edd622162e7589b7f6c446e9be297528f0cdff89d.html HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:56 UTC	362	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:56 GMT Content-Type: text/html Content-Length: 11912 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-2e88" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:56 UTC	11912	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 74 74 6f 6d 2d 70 61 67 65 20 64 6f 77 6e 6c 6f 61 64 20 73 63 72 6f 6c 6c 2d 62 6c 6f 63 6b 20 73 65 6c 65 63 74 61 62 6c 65 2d 74 78 74 22 3e 20 28 28 54 4f 50 29 29 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 77 6e 6c 6f 61 64 2d 63 6f 6e 74 65 6e 74 20 64 6f 77 6e 6c 6f 61 64 20 64 6f 77 6e 6c 6f 61 64 2d 70 61 67 65 22 3e 20 3c 64 69 76 20 69 64 3d 22 63 6f 6d 6d 65 72 63 69 61 6c 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 72 63 69 61 6c 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 68 69 64 64 65 6e 22 3e 20 3c 69 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 66 6d 2d 6d 6f 6e 6f 20 69 63 6f 6e 2d 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 22 3e 3c 2f 69 3e 20 3c 2f 64 69 76 3e 20 Data Ascii: <div class="bottom-page download scroll-block selectable-txt"> ((TOP)) <div class="download-content download download-page"> <div id="commercial-close-button" class="commercial-close-button hidden"> <i class="sprite-fm-mono icon-dialog-close"></i> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49785	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:56 UTC	433	OUT	GET /4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:56 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:56 GMT Content-Type: application/javascript Content-Length: 443062 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-6c2b6" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:56 UTC	16007	IN	Data Raw: 2f 2a 21 20 61 73 6d 43 72 79 70 74 6f 2c 20 28 63 29 20 32 30 31 33 20 41 72 74 65 6d 20 53 20 56 79 62 6f 72 6e 6f 76 2c 20 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 20 65 78 70 6f 72 74 73 2c 20 67 6c 6f 62 61 6c 20 29 20 7b 0a 0a 66 75 6e 63 74 69 6f 6e 20 49 6c 6c 65 67 61 6c 53 74 61 74 65 45 72 72 6f 72 20 28 29 20 7b 20 76 61 72 20 65 72 72 20 3d 20 45 72 72 6f 72 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 20 74 68 69 73 2e 6d 65 73 73 61 67 65 20 3d 20 65 72 72 2e 6d 65 73 73 61 67 65 2c 20 74 68 69 73 2e 73 74 61 63 6b 20 3d 20 65 72 72 2e 73 74 61 63 6b 3b 20 7d 0a 49 6c 6c 65 67 61 6c 53 74 61 74 65 45 72 72 6f 72 2e 70 72 6f Data Ascii: /! asmCrypto, (c) 2013 Artem S Vybornov, opensource.org/licenses/MIT /(function ( exports, global ) {function IllegalStateError () { var err = Error.apply( this, arguments ); this.message = err.message, this.stack = err.stack; }IllegalStateError.pro
2024-07-11 11:36:56 UTC	16384	IN	Data Raw: 20 78 31 2c 20 78 32 2c 20 78 33 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 30 20 3d 20 78 30 7c 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 31 20 3d 20 78 31 7c 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 32 20 3d 20 78 32 7c 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 33 20 3d 20 78 33 7c 30 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 63 6f 72 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 30 30 30 2c 20 30 78 30 38 30 30 2c 20 30 78 31 30 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 30 20 5e 20 78 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: x1, x2, x3 ) { x0 = x0\|0; x1 = x1\|0; x2 = x2\|0; x3 = x3\|0; _core( 0x0000, 0x0800, 0x1000, R, I0 ^ x0,
2024-07-11 11:36:56 UTC	16384	IN	Data Raw: 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 69 73 5f 62 75 66 66 65 72 28 6b 65 79 29 20 7c 7c 20 69 73 5f 62 79 74 65 73 28 6b 65 79 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6b 65 79 20 3d 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6b 65 79 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 20 69 73 5f 73 74 72 69 6e 67 28 6b 65 79 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6b 65 79 20 3d 20 73 74 72 69 6e 67 5f 74 6f 5f 62 79 74 65 73 28 6b 65 79 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 75 6e 65 Data Ascii: !== undefined ) { if ( is_buffer(key) \|\| is_bytes(key) ) { key = new Uint8Array(key); } else if ( is_string(key) ) { key = string_to_bytes(key); } else { throw new TypeError("une
2024-07-11 11:36:56 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 49 6c 6c 65 67 61 6c 53 74 61 74 65 45 72 72 6f 72 28 22 79 6f 75 20 73 68 6f 75 6c 64 20 73 70 65 63 69 66 79 20 65 69 74 68 65 72 20 61 64 61 74 61 20 6f 72 20 69 76 2c 20 6e 6f 74 20 62 6f 74 68 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 21 69 73 5f 6e 75 6d 62 65 72 28 63 6f 75 6e 74 65 72 29 20 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 63 6f 75 6e 74 65 72 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 63 6f 75 6e 74 65 72 20 3c 20 31 20 7c 7c 20 63 6f 75 6e 74 65 72 20 3e 3d 20 28 20 4d 61 74 68 2e 70 6f 77 28 20 32 2c 20 38 2a 6c 65 6e 67 74 68 53 69 7a 65 20 29 20 2d 20 Data Ascii: throw new IllegalStateError("you should specify either adata or iv, not both"); if ( !is_number(counter) ) throw new TypeError("counter must be a number"); if ( counter < 1 \|\| counter >= ( Math.pow( 2, 8*lengthSize ) -
2024-07-11 11:36:56 UTC	16384	IN	Data Raw: 6e 20 2b 20 64 6c 65 6e 20 3e 20 74 61 67 53 69 7a 65 20 3f 20 28 20 6c 65 6e 20 2b 20 64 6c 65 6e 20 2d 20 74 61 67 53 69 7a 65 20 29 20 26 20 2d 31 36 20 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 74 6c 65 6e 20 3d 20 6c 65 6e 20 2b 20 64 6c 65 6e 20 2d 20 72 6c 65 6e 2c 0a 20 20 20 20 20 20 20 20 77 6c 65 6e 20 3d 20 30 3b 0a 0a 20 20 20 20 69 66 20 28 20 28 28 63 6f 75 6e 74 65 72 2d 31 29 3c 3c 34 29 20 2b 20 6c 65 6e 20 2b 20 64 6c 65 6e 20 3e 20 5f 41 45 53 5f 47 43 4d 5f 64 61 74 61 5f 6d 61 78 4c 65 6e 67 74 68 20 29 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 63 6f 75 6e 74 65 72 20 6f 76 65 72 66 6c 6f 77 22 29 3b 0a 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 20 3d 20 6e 65 77 20 55 69 6e 74 38 41 Data Ascii: n + dlen > tagSize ? ( len + dlen - tagSize ) & -16 : 0, tlen = len + dlen - rlen, wlen = 0; if ( ((counter-1)<<4) + len + dlen > _AES_GCM_data_maxLength ) throw new RangeError("counter overflow"); var result = new Uint8A
2024-07-11 11:36:56 UTC	16384	IN	Data Raw: 5e 20 63 29 20 29 20 29 20 2b 20 28 20 62 3e 3e 3e 32 20 5e 20 62 3e 3e 3e 31 33 20 5e 20 62 3e 3e 3e 32 32 20 5e 20 62 3c 3c 33 30 20 5e 20 62 3c 3c 31 39 20 5e 20 62 3c 3c 31 30 20 29 20 29 7c 30 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 31 37 0a 20 20 20 20 20 20 20 20 77 31 20 3d 20 74 20 3d 20 28 20 28 20 77 32 3e 3e 3e 37 20 20 5e 20 77 32 3e 3e 3e 31 38 20 5e 20 77 32 3e 3e 3e 33 20 20 5e 20 77 32 3c 3c 32 35 20 5e 20 77 32 3c 3c 31 34 20 29 20 2b 20 28 20 77 31 35 3e 3e 3e 31 37 20 5e 20 77 31 35 3e 3e 3e 31 39 20 5e 20 77 31 35 3e 3e 3e 31 30 20 5e 20 77 31 35 3c 3c 31 35 20 5e 20 77 31 35 3c 3c 31 33 20 29 20 2b 20 77 31 20 2b 20 77 31 30 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 20 3d 20 28 20 74 20 2b 20 68 20 2b 20 28 20 65 3e 3e 3e 36 20 Data Ascii: ^ c) ) ) + ( b>>>2 ^ b>>>13 ^ b>>>22 ^ b<<30 ^ b<<19 ^ b<<10 ) )\|0; // 17 w1 = t = ( ( w2>>>7 ^ w2>>>18 ^ w2>>>3 ^ w2<<25 ^ w2<<14 ) + ( w15>>>17 ^ w15>>>19 ^ w15>>>10 ^ w15<<15 ^ w15<<13 ) + w1 + w10 )\|0; t = ( t + h + ( e>>>6
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 3c 31 39 20 5e 20 62 3c 3c 31 30 20 29 20 29 7c 30 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 35 34 0a 20 20 20 20 20 20 20 20 77 36 20 3d 20 74 20 3d 20 28 20 28 20 77 37 3e 3e 3e 37 20 20 5e 20 77 37 3e 3e 3e 31 38 20 5e 20 77 37 3e 3e 3e 33 20 20 5e 20 77 37 3c 3c 32 35 20 5e 20 77 37 3c 3c 31 34 20 29 20 2b 20 28 20 77 34 3e 3e 3e 31 37 20 5e 20 77 34 3e 3e 3e 31 39 20 5e 20 77 34 3e 3e 3e 31 30 20 5e 20 77 34 3c 3c 31 35 20 5e 20 77 34 3c 3c 31 33 20 29 20 2b 20 77 36 20 2b 20 77 31 35 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 20 3d 20 28 20 74 20 2b 20 68 20 2b 20 28 20 65 3e 3e 3e 36 20 5e 20 65 3e 3e 3e 31 31 20 5e 20 65 3e 3e 3e 32 35 20 5e 20 65 3c 3c 32 36 20 5e 20 65 3c 3c 32 31 20 5e 20 65 3c 3c 37 20 29 20 2b 20 20 28 20 67 20 5e 20 65 20 Data Ascii: <19 ^ b<<10 ) )\|0; // 54 w6 = t = ( ( w7>>>7 ^ w7>>>18 ^ w7>>>3 ^ w7<<25 ^ w7<<14 ) + ( w4>>>17 ^ w4>>>19 ^ w4>>>10 ^ w4<<15 ^ w4<<13 ) + w6 + w15 )\|0; t = ( t + h + ( e>>>6 ^ e>>>11 ^ e>>>25 ^ e<<26 ^ e<<21 ^ e<<7 ) + ( g ^ e
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 61 32 35 36 5f 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 69 73 68 20 3d 20 20 68 61 73 68 5f 66 69 6e 69 73 68 3b 0a 0a 76 61 72 20 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 20 3d 20 6e 75 6c 6c 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 5f 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 20 28 29 20 7b 0a 20 20 20 20 69 66 20 28 20 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 20 3d 3d 3d 20 6e 75 6c 6c 20 29 20 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 20 3d 20 6e 65 77 20 73 68 61 32 35 36 5f 63 6f 6e 73 74 72 75 63 74 6f 72 28 20 7b 20 68 65 61 70 53 69 7a 65 3a 20 30 78 31 30 30 30 30 30 20 7d 20 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 68 61 32 35 36 5f 69 6e 73 74 61 6e 63 65 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 53 48 41 32 35 36 20 65 78 70 6f Data Ascii: a256_prototype.finish = hash_finish;var sha256_instance = null;function get_sha256_instance () { if ( sha256_instance === null ) sha256_instance = new sha256_constructor( { heapSize: 0x100000 } ); return sha256_instance;}/** * SHA256 expo
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 74 6c 20 3d 20 28 20 74 6c 20 2b 20 78 6c 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 68 20 3d 20 28 20 74 68 20 2b 20 28 28 28 65 68 20 3e 3e 3e 20 31 34 29 20 7c 20 28 65 6c 20 3c 3c 20 31 38 29 29 20 5e 20 28 28 65 68 20 3e 3e 3e 20 31 38 29 20 7c 20 28 65 6c 20 3c 3c 20 31 34 29 29 20 5e 20 28 28 65 68 20 3c 3c 20 32 33 29 20 7c 20 28 65 6c 20 3e 3e 3e 20 39 29 29 29 20 2b 20 28 28 74 6c 20 3e 3e 3e 20 30 29 20 3c 20 28 78 6c 20 3e 3e 3e 20 30 29 20 3f 20 31 20 3a 20 30 29 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 78 6c 20 3d 20 28 20 28 20 67 6c 20 5e 20 65 6c 20 26 20 28 66 6c 5e 67 6c 29 20 29 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 6c 20 3d 20 28 20 74 6c 20 2b 20 78 6c 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 68 20 3d Data Ascii: tl = ( tl + xl )\|0; th = ( th + (((eh >>> 14) \| (el << 18)) ^ ((eh >>> 18) \| (el << 14)) ^ ((eh << 23) \| (el >>> 9))) + ((tl >>> 0) < (xl >>> 0) ? 1 : 0) )\|0; xl = ( ( gl ^ el & (fl^gl) ) )\|0; tl = ( tl + xl )\|0; th =
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 68 20 2b 20 68 68 20 2b 20 28 28 74 6c 20 3e 3e 3e 20 30 29 20 3c 20 28 68 6c 20 3e 3e 3e 20 30 29 20 3f 20 31 20 3a 20 30 29 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 78 6c 20 3d 20 28 20 28 28 65 6c 20 3e 3e 3e 20 31 34 29 20 7c 20 28 65 68 20 3c 3c 20 31 38 29 29 20 5e 20 28 28 65 6c 20 3e 3e 3e 20 31 38 29 20 7c 20 28 65 68 20 3c 3c 20 31 34 29 29 20 5e 20 28 28 65 6c 20 3c 3c 20 32 33 29 20 7c 20 28 65 68 20 3e 3e 3e 20 39 29 29 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 6c 20 3d 20 28 20 74 6c 20 2b 20 78 6c 20 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 74 68 20 3d 20 28 20 74 68 20 2b 20 28 28 28 65 68 20 3e 3e 3e 20 31 34 29 20 7c 20 28 65 6c 20 3c 3c 20 31 38 29 29 20 5e 20 28 28 65 68 20 3e 3e 3e 20 31 38 29 20 7c 20 28 65 6c 20 3c 3c 20 31 34 29 Data Ascii: h + hh + ((tl >>> 0) < (hl >>> 0) ? 1 : 0) )\|0; xl = ( ((el >>> 14) \| (eh << 18)) ^ ((el >>> 18) \| (eh << 14)) ^ ((el << 23) \| (eh >>> 9)) )\|0; tl = ( tl + xl )\|0; th = ( th + (((eh >>> 14) \| (el << 18)) ^ ((eh >>> 18) \| (el << 14)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49786	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:56 UTC	430	OUT	GET /4/html/js/download_7066fb3a9439ac4b7ab62485a20eef0196e9d0ec2a4038302f3eeda11453f2c5.js HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	375	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: application/javascript Content-Length: 38615 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-96d7" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16009	IN	Data Raw: 76 61 72 20 64 6c 70 61 67 65 5f 70 68 3b 0a 76 61 72 20 64 6c 70 61 67 65 5f 6b 65 79 3b 0a 76 61 72 20 66 64 6c 5f 66 69 6c 65 6e 61 6d 65 2c 20 66 64 6c 5f 66 69 6c 65 73 69 7a 65 2c 20 66 64 6c 5f 6b 65 79 2c 20 66 64 6c 5f 75 72 6c 2c 20 66 64 6c 5f 73 74 61 72 74 74 69 6d 65 3b 0a 76 61 72 20 64 6c 5f 69 6d 70 6f 72 74 3d 66 61 6c 73 65 3b 0a 76 61 72 20 64 6c 5f 61 74 74 72 3b 0a 76 61 72 20 64 6c 5f 6e 6f 64 65 3b 0a 76 61 72 20 66 64 6c 5f 71 75 65 75 65 5f 76 61 72 3d 66 61 6c 73 65 3b 0a 76 61 72 20 66 69 6c 65 53 69 7a 65 3b 0a 76 61 72 20 64 6c 52 65 73 75 6d 65 49 6e 66 6f 3b 0a 76 61 72 20 6d 65 64 69 61 43 6f 6c 6c 65 63 74 46 6e 3b 0a 76 61 72 20 6d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 20 3d 20 4d 61 74 68 2e 70 6f 77 28 32 2c 20 35 Data Ascii: var dlpage_ph;var dlpage_key;var fdl_filename, fdl_filesize, fdl_key, fdl_url, fdl_starttime;var dl_import=false;var dl_attr;var dl_node;var fdl_queue_var=false;var fileSize;var dlResumeInfo;var mediaCollectFn;var maxDownloadSize = Math.pow(2, 5
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 61 74 63 68 64 6f 67 2e 71 75 65 72 79 28 27 64 6c 69 6e 67 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 6c 77 61 79 73 28 28 72 65 73 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 63 65 65 64 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 65 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: watchdog.query('dling') .always((res) => { var proceed = true; if (Array.isArray(res)) { res = Array.prototyp
2024-07-11 11:36:57 UTC	6222	IN	Data Raw: 62 70 73 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 70 65 65 64 20 20 3d 20 6e 75 6d 4f 66 42 79 74 65 73 28 62 70 73 2c 20 31 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 64 6f 77 6e 6c 6f 61 64 2e 73 70 65 65 64 2d 62 6c 6f 63 6b 20 2e 64 61 72 6b 2d 6e 75 6d 62 65 72 73 27 2c 20 24 64 6f 77 6c 6f 61 64 57 72 61 70 70 65 72 29 2e 74 65 78 74 28 73 70 65 65 64 2e 73 69 7a 65 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 64 6f 77 6e 6c 6f 61 64 2e 73 70 65 65 64 2d 62 6c 6f 63 6b 20 2e 6c 69 67 68 74 2d 74 78 74 27 2c 20 24 64 6f 77 6c 6f 61 64 57 72 61 70 70 65 72 29 2e 74 65 78 74 28 73 70 65 65 64 2e 75 6e 69 74 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e 64 6f 77 6e 6c 6f 61 64 2e 65 74 61 2d 62 6c 6f 63 6b 20 2e 64 61 72 6b 2d 6e Data Ascii: bps; var speed = numOfBytes(bps, 1, true); $('.download.speed-block .dark-numbers', $dowloadWrapper).text(speed.size); $('.download.speed-block .light-txt', $dowloadWrapper).text(speed.unit); $('.download.eta-block .dark-n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49787	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	610	OUT	GET /4/imagery/sprites-fm-illustration-sprite-wide.e397e234dc118de4.svg HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: image/svg+xml Content-Length: 68811 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-10ccb" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16017	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 34 30 30 30 22 20 68 65 69 67 68 74 3d 22 35 30 30 22 3e 3c 73 74 79 6c 65 3e 3c 21 5b 43 44 41 54 41 5b 2e 42 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 43 7b 66 69 6c 6c 2d 72 75 6c 65 3a 6e 6f 6e 7a 65 72 6f 7d 2e 44 7b 66 69 6c 6c 3a 23 30 30 63 30 61 36 7d 2e 45 7b 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3a 2e 32 7d 2e 46 7b 66 69 6c 6c 3a 23 30 30 30 7d 2e 47 7b 6d 61 73 6b 3a 75 72 6c 28 23 42 4a 29 7d 2e 48 7b 66 69 6c 6c 3a 23 66 34 64 31 63 36 7d 2e 49 7b 66 69 6c 6c 3a 23 66 31 63 39 62 64 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="4000" height="500"><style><![CDATA[.B{fill:#fff}.C{fill-rule:nonzero}.D{fill:#00c0a6}.E{fill-opacity:.2}.F{fill:#000}.G{mask:url(#BJ)}.H{fill:#f4d1c6}.I{fill:#f1c9bd
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 2e 31 30 37 20 30 20 32 2d 2e 38 39 31 20 32 2d 31 2e 39 39 36 56 36 32 2e 35 30 34 63 30 2d 2e 32 31 34 2e 32 35 2d 2e 33 32 31 2e 34 32 39 2d 2e 31 37 38 6c 31 37 2e 38 35 38 20 31 37 2e 38 31 38 63 31 2e 35 33 36 20 31 2e 35 33 32 20 34 2e 30 37 32 20 31 2e 35 33 32 20 35 2e 36 30 37 20 30 6c 31 37 2e 38 35 38 2d 31 37 2e 38 31 38 63 2e 31 34 33 2d 2e 31 34 33 2e 34 32 39 2d 2e 30 33 36 2e 34 32 39 2e 31 37 38 76 32 35 2e 39 30 37 63 30 20 31 2e 31 30 35 2e 38 39 33 20 31 2e 39 39 36 20 32 20 31 2e 39 39 36 68 38 2e 34 32 39 63 31 2e 31 30 37 20 30 20 32 2d 2e 38 39 31 20 32 2d 31 2e 39 39 36 56 34 32 2e 38 33 33 63 30 2d 31 2e 31 30 35 2d 2e 38 39 33 2d 31 2e 39 39 36 2d 32 2d 31 2e 39 39 36 68 2d 35 2e 37 38 36 63 2d 31 2e 30 33 36 2e 30 33 36 2d 32 Data Ascii: .107 0 2-.891 2-1.996V62.504c0-.214.25-.321.429-.178l17.858 17.818c1.536 1.532 4.072 1.532 5.607 0l17.858-17.818c.143-.143.429-.036.429.178v25.907c0 1.105.893 1.996 2 1.996h8.429c1.107 0 2-.891 2-1.996V42.833c0-1.105-.893-1.996-2-1.996h-5.786c-1.036.036-2
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 2e 32 32 36 2e 33 38 39 73 2d 2e 34 33 37 2e 36 30 31 2d 2e 34 37 36 20 31 2e 30 32 34 68 30 6c 2d 2e 34 30 34 20 34 2e 36 31 35 63 31 2e 30 39 36 2e 32 36 39 20 32 2e 31 34 34 2e 34 36 36 20 33 2e 31 34 34 2e 35 39 31 61 32 34 2e 36 33 20 32 34 2e 36 33 20 30 20 30 20 30 20 33 2e 30 35 38 2e 31 38 38 7a 6d 35 31 2e 34 30 34 2d 2e 34 36 32 76 2d 36 2e 32 30 32 48 39 34 2e 35 37 32 6c 32 31 2e 34 30 34 2d 33 30 2e 32 33 31 63 2e 35 2d 2e 37 33 31 2e 37 35 2d 31 2e 35 33 38 2e 37 35 2d 32 2e 34 32 33 68 30 76 2d 32 2e 38 35 36 48 38 35 2e 38 36 31 76 36 2e 31 37 33 68 32 30 2e 38 32 37 4c 38 35 2e 32 32 36 20 31 32 31 2e 37 36 61 34 2e 36 36 20 34 2e 36 36 20 30 20 30 20 30 2d 2e 35 31 39 2e 39 39 35 20 33 2e 31 31 20 33 2e 31 31 20 30 20 30 20 30 2d 2e 32 Data Ascii: .226.389s-.437.601-.476 1.024h0l-.404 4.615c1.096.269 2.144.466 3.144.591a24.63 24.63 0 0 0 3.058.188zm51.404-.462v-6.202H94.572l21.404-30.231c.5-.731.75-1.538.75-2.423h0v-2.856H85.861v6.173h20.827L85.226 121.76a4.66 4.66 0 0 0-.519.995 3.11 3.11 0 0 0-.2
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 73 6b 20 69 64 3d 22 42 56 22 20 63 6c 61 73 73 3d 22 42 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 6f 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 75 73 65 20 66 69 6c 6c 3d 22 23 33 38 38 65 33 63 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 6f 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 61 37 61 32 65 22 20 6d 61 73 6b 3d 22 75 72 6c 28 23 42 56 29 22 20 64 3d 22 4d 35 38 2e 33 33 33 20 30 68 35 39 2e 35 32 34 76 38 33 2e 34 31 37 48 35 38 2e 33 33 33 7a 22 2f 3e 3c 6d 61 73 6b 20 69 64 3d 22 42 57 22 20 63 6c 61 73 73 3d 22 42 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 75 73 65 20 66 69 6c 6c 3d 22 23 34 63 61 66 35 30 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 22 2f 3e 3c 70 61 74 Data Ascii: sk id="BV" class="B"><use xlink:href="#o"/></mask><use fill="#388e3c" xlink:href="#o"/><path fill="#2a7a2e" mask="url(#BV)" d="M58.333 0h59.524v83.417H58.333z"/><mask id="BW" class="B"><use xlink:href="#p"/></mask><use fill="#4caf50" xlink:href="#p"/><pat
2024-07-11 11:36:57 UTC	3642	IN	Data Raw: 65 28 32 39 2e 35 34 35 20 34 37 2e 37 32 37 29 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 42 6e 22 20 63 6c 61 73 73 3d 22 42 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 41 4a 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 41 4a 22 20 63 6c 61 73 73 3d 22 69 22 2f 3e 3c 67 20 6d 61 73 6b 3d 22 75 72 6c 28 23 42 6e 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 39 2e 30 39 31 20 31 31 2e 33 36 34 29 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 41 4b 22 20 63 6c 61 73 73 3d 22 4d 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 30 34 35 20 33 30 2e 36 36 36 63 32 2e 31 33 33 20 30 20 33 2e 39 39 33 2d 31 2e 39 30 36 20 34 2e 31 33 32 2d 32 2e 30 34 76 2d 32 2e 30 Data Ascii: e(29.545 47.727)"><mask id="Bn" class="B"><use xlink:href="#AJ"/></mask><use xlink:href="#AJ" class="i"/><g mask="url(#Bn)"><g transform="translate(9.091 11.364)"><use xlink:href="#AK" class="M"/><path d="M17.045 30.666c2.133 0 3.993-1.906 4.132-2.04v-2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	49791	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	593	OUT	GET /4/imagery/sprites-fm-uni-uni.91766118ff060851.svg HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: image/svg+xml Content-Length: 185560 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-2d4d8" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16016	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 30 22 20 68 65 69 67 68 74 3d 22 31 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 36 20 31 37 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 61 63 63 6f 75 6e 74 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="160" height="160" viewBox="0 0 176 176" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><view id="icon-accounts" viewBox="0 0 16 16"/><svg width="16" height="16" viewBox="0 0
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 2e 30 37 2e 32 30 35 2e 31 32 2e 32 30 35 2e 31 38 20 30 20 2e 31 31 34 2d 2e 31 31 39 2e 31 33 2d 2e 31 39 2e 31 33 61 2e 36 32 38 2e 36 32 38 20 30 20 30 20 31 2d 2e 32 39 36 2d 2e 30 38 37 6c 2d 2e 30 38 32 2d 2e 30 34 37 2d 2e 31 30 36 2e 33 33 35 2e 30 35 31 2e 30 33 63 2e 31 31 37 2e 30 37 2e 32 37 33 2e 31 30 38 2e 34 32 38 2e 31 30 38 2e 33 35 33 20 30 20 2e 35 39 2d 2e 31 39 38 2e 35 39 2d 2e 34 39 33 20 30 2d 2e 32 39 36 2d 2e 32 33 35 2d 2e 34 31 39 2d 2e 34 31 2d 2e 34 38 34 5a 4d 36 2e 32 34 20 36 2e 32 37 6c 2d 2e 33 39 38 2e 31 32 76 2e 32 33 38 68 2d 2e 32 31 35 76 2e 33 34 33 68 2e 32 31 35 76 2e 36 38 63 30 20 2e 31 39 2e 30 33 37 2e 33 32 34 2e 31 31 37 2e 34 31 35 61 2e 34 34 2e 34 34 20 30 20 30 20 30 20 2e 33 32 38 2e 31 33 31 63 2e Data Ascii: .07.205.12.205.18 0 .114-.119.13-.19.13a.628.628 0 0 1-.296-.087l-.082-.047-.106.335.051.03c.117.07.273.108.428.108.353 0 .59-.198.59-.493 0-.296-.235-.419-.41-.484ZM6.24 6.27l-.398.12v.238h-.215v.343h.215v.68c0 .19.037.324.117.415a.44.44 0 0 0 .328.131c.
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 43 45 43 45 43 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 33 45 33 45 33 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 69 64 3d 22 61 76 64 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 46 45 46 45 46 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 70 Data Ascii: op stop-color="#ECECEC" offset="0%"/><stop stop-color="#E3E3E3" offset="100%"/></linearGradient><linearGradient x1="50%" y1="0%" x2="50%" y2="100%" id="avd"><stop stop-color="#FFF" offset="0%"/><stop stop-color="#EFEFEF" offset="100%"/></linearGradient><p
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 22 37 31 2e 36 39 33 25 22 20 69 64 3d 22 61 79 64 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 30 36 42 35 39 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 44 46 32 32 32 37 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 32 36 2e 33 35 25 22 20 79 31 3d 22 38 31 2e 39 35 38 25 22 20 78 32 3d 22 34 39 2e 31 33 37 25 22 20 79 32 3d 22 33 38 2e 32 38 32 25 22 20 69 64 3d 22 61 79 65 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 33 38 38 42 34 31 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 34 43 Data Ascii: "71.693%" id="ayd"><stop stop-color="#F06B59" offset="0%"/><stop stop-color="#DF2227" offset="100%"/></linearGradient><linearGradient x1="26.35%" y1="81.958%" x2="49.137%" y2="38.282%" id="aye"><stop stop-color="#388B41" offset="0%"/><stop stop-color="#4C
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 33 33 63 2d 32 2e 33 36 20 30 2d 34 2e 36 31 32 2e 34 37 35 2d 36 2e 36 36 37 20 31 2e 33 33 34 76 35 2e 35 39 63 30 20 33 2e 38 36 37 20 36 2e 36 36 37 20 36 2e 34 31 20 36 2e 36 36 37 20 36 2e 34 31 73 36 2e 36 36 37 2d 32 2e 35 34 33 20 36 2e 36 36 37 2d 36 2e 34 31 76 2d 35 2e 35 39 41 31 37 2e 32 34 31 20 31 37 2e 32 34 31 20 30 20 30 20 30 20 38 20 31 2e 33 33 33 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 38 2e 33 35 37 63 30 20 2e 38 38 35 2d 2e 35 33 36 20 32 2e 33 30 33 2d 33 2e 30 38 36 20 34 2e 30 33 33 41 31 39 2e 36 30 33 20 31 39 2e 36 30 33 20 30 20 30 20 31 20 38 2e 30 30 31 20 31 34 61 31 39 2e 36 39 37 20 31 39 2e 36 39 37 20 30 20 30 20 31 2d 32 2e 39 35 36 2d 31 2e 36 33 38 43 32 2e 35 32 38 20 Data Ascii: 33c-2.36 0-4.612.475-6.667 1.334v5.59c0 3.867 6.667 6.41 6.667 6.41s6.667-2.543 6.667-6.41v-5.59A17.241 17.241 0 0 0 8 1.333" fill="#FFF"/><path d="M14 8.357c0 .885-.536 2.303-3.086 4.033A19.603 19.603 0 0 1 8.001 14a19.697 19.697 0 0 1-2.956-1.638C2.528
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 22 31 31 32 22 20 79 3d 22 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 69 64 3d 22 62 7a 63 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 41 46 41 46 41 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 70 61 74 68 20 69 64 3d 22 62 7a 61 22 20 64 3d 22 4d 30 20 30 68 31 36 76 31 36 48 30 7a 22 2f 3e 3c 2f 64 65 66 73 3e 3c 67 20 Data Ascii: "112" y="32" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="50%" y1="0%" x2="50%" y2="100%" id="bzc"><stop stop-color="#FFF" offset="0%"/><stop stop-color="#FAFAFA" offset="100%"/></linearGradient><path id="bza" d="M0 0h16v16H0z"/></defs><g
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 30 2e 36 36 37 41 35 2e 33 33 35 20 35 2e 33 33 35 20 30 20 30 20 31 20 30 20 35 2e 33 33 33 20 35 2e 33 33 35 20 35 2e 33 33 35 20 30 20 30 20 31 20 35 2e 33 33 33 20 30 61 35 2e 33 33 35 20 35 2e 33 33 35 20 30 20 30 20 31 20 35 2e 33 33 34 20 35 2e 33 33 33 20 35 2e 33 33 35 20 35 2e 33 33 35 20 30 20 30 20 31 2d 35 2e 33 33 34 20 35 2e 33 33 34 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 6b 63 29 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 2e 36 36 37 20 32 2e 36 36 37 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 36 36 37 20 39 2e 36 32 34 63 30 20 2e 30 38 36 2d 2e 30 37 2e 31 35 34 2d 2e 31 35 37 2e 31 35 34 68 2d 2e 36 37 33 61 2e 31 35 34 2e 31 35 34 20 30 20 30 20 31 2d 2e 31 35 37 2d 2e 31 35 34 56 37 2e 36 31 Data Ascii: 0.667A5.335 5.335 0 0 1 0 5.333 5.335 5.335 0 0 1 5.333 0a5.335 5.335 0 0 1 5.334 5.333 5.335 5.335 0 0 1-5.334 5.334Z" fill="url(#ckc)" transform="translate(2.667 2.667)"/><path d="M10.667 9.624c0 .086-.07.154-.157.154h-.673a.154.154 0 0 1-.157-.154V7.61
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 31 2e 30 31 31 2e 30 30 31 48 36 2e 35 39 34 6c 2e 30 31 31 2e 30 30 31 68 2e 30 30 34 6c 2e 30 30 37 2e 30 30 31 68 2e 30 31 6c 2e 30 31 31 2e 30 30 31 2e 30 31 31 2e 30 30 31 2e 30 31 2e 30 30 31 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 31 2e 30 31 2e 30 30 31 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 31 2e 30 31 2e 30 30 31 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 31 2e 30 31 2e 30 30 31 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 33 2e 30 31 31 2e Data Ascii: 1.011.001H6.594l.011.001h.004l.007.001h.01l.011.001.011.001.01.001.011.002.011.001.01.001.011.002.011.001.01.001.011.002.011.001.01.001.011.002.011.002.01.002.011.002.011.002.01.002.011.002.011.002.01.002.011.002.011.002.01.002.011.002.011.002.01.003.011.
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 37 34 37 2d 33 2e 33 38 20 31 2e 30 30 37 2d 31 2e 34 33 33 2d 2e 37 38 37 2d 32 2e 38 31 33 2d 31 2e 36 2d 33 2e 39 37 33 2d 32 2e 37 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 7a 63 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 35 2e 32 36 20 33 2e 30 32 2e 37 35 35 2e 39 32 34 2e 31 34 33 2e 31 38 2e 30 35 2e 30 36 33 63 2e 35 30 36 2e 36 35 33 2e 35 31 32 20 31 2e 30 35 33 2d 2e 34 31 34 20 31 2e 39 36 37 2d 2e 33 38 37 2e 33 38 2d 2e 32 39 34 2e 38 36 36 20 30 20 31 2e 31 36 6c 32 2e 38 39 33 20 32 2e 38 39 33 63 2e 32 39 33 2e 32 39 33 2e 37 38 2e 33 38 37 20 31 2e 31 36 20 30 20 2e 38 37 38 2d 2e 38 39 31 20 31 2e 32 38 32 2d 2e 39 32 20 31 2e 38 39 33 2d 2e 34 37 6c 2e 31 33 38 2e 31 30 36 2e 35 32 32 2e 34 32 31 2e 35 38 2e 34 37 36 63 2e 34 32 Data Ascii: 747-3.38 1.007-1.433-.787-2.813-1.6-3.973-2.76Z" fill="url(#czc)"/><path d="m5.26 3.02.755.924.143.18.05.063c.506.653.512 1.053-.414 1.967-.387.38-.294.866 0 1.16l2.893 2.893c.293.293.78.387 1.16 0 .878-.891 1.282-.92 1.893-.47l.138.106.522.421.58.476c.42
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 20 32 20 30 20 31 20 31 20 30 20 30 20 30 2d 32 20 30 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 35 2e 36 36 36 20 37 2e 34 30 35 20 32 2e 31 33 38 20 31 2e 30 39 2d 2e 32 37 32 2e 35 33 34 2d 32 2e 31 33 39 2d 31 2e 30 39 7a 4d 34 2e 39 37 20 37 2e 31 30 33 6c 32 2e 35 37 2d 31 2e 35 34 35 2e 33 31 2e 35 31 34 2d 32 2e 35 37 32 20 31 2e 35 34 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 73 69 64 65 62 61 72 2d 63 6f 6c 6c 61 70 73 65 2d 6c 65 66 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 31 34 34 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 79 3d 22 31 Data Ascii: 2 0 1 1 0 0 0-2 0Z"/><path d="m5.666 7.405 2.138 1.09-.272.534-2.139-1.09zM4.97 7.103l2.57-1.545.31.514-2.572 1.546z"/></g></g></g></g></svg><view id="icon-sidebar-collapse-left" viewBox="0 144 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" y="1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	49788	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	597	OUT	GET /4/imagery/sprites-fm-mime-90-uni.decaf26625f7b9e2.svg HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: image/svg+xml Content-Length: 89334 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-15cf6" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16017	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 30 22 20 68 65 69 67 68 74 3d 22 31 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 31 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 61 66 74 65 72 65 66 66 65 63 74 73 2d 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="160" height="160" viewBox="0 0 128 112" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><view id="icon-aftereffects-90" viewBox="0 0 16 16"/><svg width="16" height="16" viewBo
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 2e 38 33 33 20 31 32 2e 33 33 33 48 31 31 2e 35 61 2e 31 36 37 2e 31 36 37 20 30 20 31 20 31 20 30 20 2e 33 33 34 48 39 2e 38 33 33 61 2e 31 36 37 2e 31 36 37 20 30 20 30 20 31 20 30 2d 2e 33 33 34 5a 22 20 66 69 6c 6c 3d 22 23 37 37 37 22 2f 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 65 78 63 65 6c 2d 39 30 22 20 76 69 65 77 42 6f 78 3d 22 34 38 20 30 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 78 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 Data Ascii: .833 12.333H11.5a.167.167 0 1 1 0 .334H9.833a.167.167 0 0 1 0-.334Z" fill="#777"/></g></g></svg><view id="icon-excel-90" viewBox="48 0 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" x="48" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 22 20 78 3d 22 36 34 22 20 79 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 64 65 66 73 3e 3c 70 61 74 68 20 69 64 3d 22 61 74 61 22 20 64 3d 22 4d 30 20 30 68 31 36 76 31 36 48 30 7a 22 2f 3e 3c 2f 64 65 66 73 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 61 74 62 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 74 61 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 67 20 6d 61 73 6b 3d 22 75 72 6c 28 23 61 74 62 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 20 34 2e 36 36 37 68 31 32 76 38 61 2e 36 36 37 2e 36 36 37 20 30 20 30 20 31 2d 2e 36 36 37 2e 36 Data Ascii: " x="64" y="48" xmlns="http://www.w3.org/2000/svg"><defs><path id="ata" d="M0 0h16v16H0z"/></defs><g fill="none" fill-rule="evenodd"><mask id="atb" fill="#fff"><use xlink:href="#ata"/></mask><g mask="url(#atb)"><path d="M2 4.667h12v8a.667.667 0 0 1-.667.6
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 20 78 3d 22 38 30 22 20 79 3d 22 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 69 64 3d 22 62 64 63 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 41 41 46 35 41 35 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 38 35 45 38 38 43 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 Data Ascii: x="80" y="64" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="50%" y1="0%" x2="50%" y2="100%" id="bdc"><stop stop-color="#AAF5A5" offset="0%"/><stop stop-color="#85E88C" offset="100%"/></linearGradient><linearGradient x1="50%" y1="0%" x2="50
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 31 33 38 2e 38 34 32 2e 31 32 2d 2e 33 37 38 2e 31 32 2d 2e 35 36 37 2e 31 32 2d 2e 37 30 34 2d 2e 30 31 37 2d 2e 32 35 38 2d 2e 31 30 33 2d 2e 33 36 31 2d 2e 31 35 35 2d 2e 33 39 36 5a 22 20 66 69 6c 6c 3d 22 23 46 39 34 36 34 36 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 2f 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 70 68 6f 74 6f 73 68 6f 70 2d 39 30 22 20 76 69 65 77 42 6f 78 3d 22 39 36 20 31 36 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 78 3d 22 39 36 22 20 79 3d 22 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 Data Ascii: 138.842.12-.378.12-.567.12-.704-.017-.258-.103-.361-.155-.396Z" fill="#F94646" fill-rule="nonzero"/></g></g></svg><view id="icon-photoshop-90" viewBox="96 16 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" x="96" y="16" xmlns="http://www.w3.org/20
2024-07-11 11:36:57 UTC	7781	IN	Data Raw: 70 2d 63 6f 6c 6f 72 3d 22 23 45 31 44 30 46 44 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 69 64 3d 22 62 77 64 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 2e 39 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 Data Ascii: p-color="#E1D0FD" offset="100%"/></linearGradient><linearGradient x1="50%" y1="0%" x2="50%" y2="100%" id="bwd"><stop stop-color="#FFF" offset="0%"/><stop stop-color="#FFF" stop-opacity=".9" offset="100%"/></linearGradient><linearGradient x1="50%" y1="0%"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.17	49789	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	594	OUT	GET /4/images/mega/dialog-sprite.png?v=57a6bd1346996955 HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: image/png Content-Length: 30699 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-77eb" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16045	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 1d 08 08 03 00 00 00 4f 57 f9 92 00 00 02 f4 50 4c 54 45 00 00 00 0a 0a 0a f8 fc fd 67 6a 6a 0a 0a 0a ff ff ff ff ff ff 0c 0c 0c ff ff ff ff ff ff ff b9 00 c9 c5 c5 ff ff ff ff d9 76 f1 f0 e7 37 9a d7 f5 f4 f2 7d 8a 83 ff ff ff ff ff ff ff ff ff 2d a4 cb ff ff ff fd fd fd ff ff ff ff ff ff fe fe fe ff ff ff fe ff ff fe fe fe 05 03 03 b0 ec e9 b3 e8 e5 ff a6 00 7a 7c 7b 04 04 04 34 9f d6 ff f9 f2 ff c8 43 00 8a 7b e1 e1 e1 38 9b d4 ff ff fe e7 e7 e7 5b 5b 5c 9a 9a 9a 0a 0a 0a ef ec e9 45 a9 c3 0e 0e 0e fd fd fd 6e 6f 6f 01 01 01 9d a1 9c 05 05 04 91 a1 90 69 70 6b c8 c8 c8 9a 9a 9a 9b 9b 9b ff ce 43 52 55 54 ff b3 20 65 65 65 f3 f8 f7 2f 2f 2f e5 e5 e5 78 78 78 30 30 30 9a 9a 9a d3 d3 d3 f4 Data Ascii: PNGIHDROWPLTEgjjv7}-z\|{4C{8[[\EnooipkCRUT eee///xxx000
2024-07-11 11:36:57 UTC	14654	IN	Data Raw: d9 98 59 a3 39 09 9c 23 c2 3d 9b b5 11 7a fb 07 a7 be d6 f6 da 90 9c e6 3f f6 d5 9a 7d c5 d4 97 ab ca 35 fb 2c 45 63 66 9b c6 bd 57 bc fe cc 22 f4 b6 ad 7e 71 58 ff 6a fb 56 f5 47 ae 0e cf bb 46 f4 fa 3b be 18 52 b8 6f 2c ac dd 93 e6 f8 00 00 00 00 00 00 b8 b0 f5 fd d1 da 24 ad c5 fb c6 42 f1 be b1 50 bc 6f 2c 14 ef 1b 0b c5 fb 00 00 00 00 00 00 00 00 57 3b 05 ac 3e 89 ae be 0c a1 be 90 a3 be 14 a6 bf 98 08 00 00 00 00 00 00 00 00 80 bf b1 ea 86 13 ba 67 13 f1 34 2c 58 99 84 bb 61 91 c6 31 dc 0e cb 5e 4d c0 76 10 2f 9c 02 17 3d be 3c d8 85 6d 87 f3 74 0b 63 48 26 70 69 94 0b 05 76 76 ca 0d 06 be 9d cd 4e 21 90 c0 77 76 eb 98 35 8d 38 8c e3 f8 73 54 72 5b a0 8b 63 e0 02 59 4f 22 41 3a d9 b5 43 d1 22 1d 6a c8 1b 68 37 c5 2e 12 12 c8 eb 10 b2 74 eb d4 f5 36 Data Ascii: Y9#=z?}5,EcfW"~qXjVGF;Ro,$BPo,W;>g4,Xa1^Mv/=<mtcH&pivvN!wv58sTr[cYO"A:C"jh7.t6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49790	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	596	OUT	GET /4/images/mega/download-dialog.png?v=cf6daa0027e27782 HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: image/png Content-Length: 70369 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-112e1" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16044	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 55 00 00 05 53 08 03 00 00 00 12 a8 f2 d3 00 00 02 fd 50 4c 54 45 00 00 00 f5 f5 f5 ed ed ed fc fc fc ff a4 00 06 09 06 ff ae 00 0f 19 11 01 c2 ed 98 dd dd fd 63 00 00 b4 f3 fe 84 75 de 8f 65 01 ae ed f4 28 2a e6 20 21 00 c1 f9 fd e7 e1 00 ab ed 35 a5 cd ff 5c 50 f4 f4 f4 fb 8f 03 e5 e5 e5 f9 f9 f9 a0 9f 9f fc ca c8 00 94 e1 f9 8a 0c ac 06 05 e9 e9 e9 03 04 03 00 96 e1 ea 21 23 fa 9a 00 00 c2 f9 ca ca ca fa 24 27 00 94 e1 f8 9f 06 ff 97 8f eb 22 23 6e 70 6c dc 9c 06 c5 c5 c5 fb 97 00 ea ef f1 c4 6e 2b 5b d6 70 c9 03 11 fa fa fa d4 d4 d4 9b 9b 9b 9b 9b 9b ec ec ec 0b 98 3e da da d9 00 9f 3a 8f 73 45 d2 76 7a 53 9d 2c 95 b3 09 d5 cd b4 ff ff ff fb fd fc f8 f9 fa f9 fd f8 f6 f6 f6 da e8 ec 00 c6 b2 f5 Data Ascii: PNGIHDRUSPLTEcue(* !5\P!#$'"#npln+[p>:sEvzS,
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: c9 40 d3 17 78 50 b6 cc 02 cf f9 65 9c 84 84 d5 e3 61 8b cf 0e e6 86 56 7d 79 f0 8d 48 0a 3e 51 82 d6 c1 0a af da 5f 62 c4 04 f0 0b 5b 4e d9 21 25 b8 2a f6 9a c3 55 00 b9 24 32 34 bf 38 4e 93 0b 7a ec 55 50 55 e7 86 57 11 fa 97 1e 21 0c 5c 8a 9f d7 eb 1f 3b 14 7a 35 55 6f 40 8a 43 fa 81 84 06 48 68 ab 62 5d 84 e8 43 7f e1 89 da 3c 07 29 65 8e 8d 98 b8 0a 4a a1 22 13 49 85 3b 0b c4 64 e8 5f ae 7d e6 3e 52 8d f9 a0 9a 11 47 2a 4d 81 ee b4 ae 7a 98 3c 5c dd db b6 fa 85 b5 a4 bd 8b 2b 5b 53 5d bd 3b 94 1b 56 e1 38 68 ef 01 20 9a bb c7 c9 2c 38 d6 fe 36 18 8f aa bc c3 f9 74 fc ef ca 4b 88 cd 77 7d 92 94 9f a7 ee 01 5e 24 88 de 01 14 a9 98 00 89 6c 68 61 ce d5 a9 3f 44 da f8 82 a3 aa 52 72 25 3c d1 0e 45 68 35 1d 4e 70 66 81 23 fa ea ee 07 bf f1 b3 6f ba 2c 0e Data Ascii: @xPeaV}yH>Q_b[N!%U$248NzUPUW!\;z5Uo@CHhb]C<)eJ"I;d_}>RGMz<\+[S];V8h ,86tKw}^$lha?DRr%<Eh5Npf#o,
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: b1 55 1b bd d3 56 bd e9 f5 0c 50 8f 29 0e 46 21 16 a5 a7 34 5e 24 ab 8a d7 ad ff c8 eb 0e 4e 42 9c 77 b9 ac b2 4f 2a dc 8a da 2d 8a 0f 8f 9f 00 9a 54 56 bd d3 83 75 05 12 c6 e8 25 48 b2 00 d6 10 e6 4b 65 f9 cf 90 ef e6 b4 9a 5e a5 21 c3 4c ce b2 af e2 06 f0 80 41 07 35 7a 6f 34 77 d0 b1 f1 ad 83 ee a8 6f 4d 7a f2 4b 0e c8 a6 ac e2 aa 83 86 5a ea 8a 19 ff 5a 26 ab 9a c6 7d e8 3f 91 55 4e ab d7 c3 99 f1 ac 7a 7b ae b7 b2 ca d6 7a cd 88 e6 a7 56 e1 8a ba 3b c3 15 9c 4e 26 5a e4 19 61 a3 eb a5 4c 4d e0 c5 ef 4e 2f 34 75 be ac fa d0 1f 5c ed df 1c 06 01 dc 18 19 de 44 5a 0c 7d ff cc 7f 0b 9e ce 91 2e 0c 27 bf 5b c4 1c 8b 98 5b e6 ef 01 b6 eb 41 03 aa 3e bf 9d b8 af 6a 1b 7f fd 13 f4 59 f3 d2 dc 9a 13 39 ab ca ea 8e b4 09 2d 8c 10 72 02 06 0c 0b 53 7c 97 e5 2a Data Ascii: UVP)F!4^$NBwO-TVu%HKe^!LA5zo4woMzKZZ&}?UNz{zV;N&ZaLMN/4u\DZ}.'[[A>jY9-rS\|
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 8b 2b 18 68 41 95 73 3b 97 b8 07 27 6e ce 6d 57 b9 69 fd c9 05 16 31 ea 2f 1b 01 f1 cc 88 e2 0a 3d e4 84 2b f4 30 0a df 02 1e 3b a8 12 c1 0a 4d ab 9d 54 1b b6 f0 e2 d9 7d 40 45 d5 da 3c 8f 58 67 3b 12 da b1 37 31 a7 54 6a 35 4c 5b 12 75 55 fd c1 96 e3 a9 a7 66 6c 3b 4d 5d 93 c2 05 89 7a 3e 48 a6 a8 c1 f2 0e 75 09 b3 88 b5 1d 9a 02 e2 41 5c d5 61 17 44 0b aa ca ab 78 9b fd 08 54 d5 fc 66 45 6b ac 10 6a e2 d1 23 0b 90 79 d2 40 d8 16 8c b6 4e 03 99 d8 e1 ff 81 53 05 a2 d1 b2 da 6c 6b db be b4 70 d6 55 7b 50 e5 d3 19 52 49 33 93 29 e6 b2 0d 5f bd e4 a1 c9 43 d5 15 78 39 96 69 11 09 15 25 4e 21 53 20 dd fb 0f b1 0d e0 f5 fd 1a e3 49 32 4e 95 53 e5 19 50 05 09 07 f1 56 28 55 08 f8 95 3c b9 fc d2 82 aa 7c 05 25 c1 47 d3 d3 73 d5 63 54 a9 fc 9e d0 e0 70 65 78 a8 Data Ascii: +hAs;'nmWi1/=+0;MT}@E<Xg;71Tj5L[uUfl;M]z>HuA\aDxTfEkj#y@NSlkpU{PRI3)_Cx9i%N!S I2NSPV(U<\|%GscTpex
2024-07-11 11:36:57 UTC	5173	IN	Data Raw: 53 4b 60 f2 8b 30 ce 8c ca 02 3a 56 93 fe fa ba de 54 f1 49 c5 c2 88 c1 05 60 b6 0e d7 ab fa 2d ab 43 7e 29 c6 8d 99 ac 07 e8 48 ed 84 d5 4a 6b aa 90 db bf 0f 46 90 67 20 ca a2 c8 02 f6 aa de d4 d2 63 4e c8 bc b1 58 ad a6 bd 19 ac 33 55 08 70 6c ff ca 4a 95 71 40 50 01 18 b2 57 f5 a6 96 ea fc bf 18 e5 85 c5 6a 35 ed f1 75 9d a9 e2 41 75 96 2a 11 76 40 c4 6d 01 18 b0 57 65 5b 6e 59 7d c8 ff 13 e3 c6 fc 9b 4f fa 62 2b 95 a9 c2 56 aa 10 88 85 91 e4 09 88 f2 c5 e7 b7 41 7b 15 4f 2d 81 c9 05 73 c5 55 f7 94 2f b6 52 99 aa de a0 fa b3 91 c3 2f 00 d7 41 7b 55 96 fd 6a 59 2d f2 2b 18 23 57 c7 af c3 4c 78 33 58 65 aa b8 fd 2b 2a 55 c7 73 de 63 01 18 b4 57 f5 17 ed ef f2 5c 38 57 0d 10 d3 6d 06 2b 4c 15 f2 49 05 34 46 94 7b 68 a1 02 30 74 af fa c9 de 19 eb 36 72 03 Data Ascii: SK`0:VTI`-C~)HJkFg cNX3UplJq@PWj5uAuv@mWe[nY}Ob+VA{O-sU/R/A{UjY-+#WLx3Xe+UscW\8Wm+LI4F{h0t6r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49793	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	629	OUT	GET /4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: image/gif Content-Length: 8787 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-2253" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	8787	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 00 bf a5 ff ff ff 54 d3 c2 7a dd cf 9e e6 dc b2 eb e3 c0 ee e8 b6 ec e4 a8 e8 df 8e e2 d6 70 da cc 5e d6 c5 98 e4 da ca f1 eb cc f1 ec c6 f0 ea bc ed e6 8a e1 d5 58 d4 c3 50 d2 c1 94 e3 d8 ce f2 ed 4e d2 c0 d4 f3 ef a2 e7 dd 6a d9 ca d8 f4 f0 dc f5 f2 76 dc ce 66 d8 c8 80 de d1 ac e9 e1 84 df d3 e0 f6 f3 de f6 f2 e2 f7 f4 62 d7 c7 e8 f8 f6 44 cf bc ec f9 f7 4a d1 be 40 ce bb 30 ca b5 2c c9 b4 26 c8 b2 36 cc b7 3a cd b9 1c c5 ae 12 c3 ab 18 c4 ad 0e c2 a9 08 c0 a7 02 bf a5 22 c7 b0 fa fd fc ff ff ff f4 fb fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 Data Ascii: GIF89a Tzp^XPNjvfbDJ@0,&6:"!NETSCAPE2.0!Created with ajaxload.info!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	49795	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	558	OUT	GET /4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mega.nz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	355	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: application/octet-stream Content-Length: 90132 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-16014" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16029	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 60 14 00 14 00 00 00 04 56 1c 00 01 5f a0 00 02 02 8f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 50 3f 46 46 54 4d 1c 1a 83 7c 1b 84 bc 14 1c f8 52 06 60 00 a3 26 08 2a 09 82 73 11 08 0a 89 a4 48 88 9c 00 01 36 02 24 03 bc 6a 0b bc 70 00 04 20 05 92 31 07 81 96 1a 0c 56 3f 77 65 62 66 06 5b 03 f2 b3 d7 49 e4 04 31 87 6b ed f6 75 0e 31 f9 00 68 41 d4 cd fd b7 24 c3 bf 8d a1 2f 7e 4d 89 00 3d a8 1d 93 ad b5 4b c2 6a c1 12 b9 5c d3 9f e7 27 41 6d c3 3f 54 b5 82 aa c1 ec 1c ad 71 44 f2 7d 44 64 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ed 24 95 e1 aa 0d ac c0 60 72 62 f6 e2 4a 62 98 65 8e 62 24 cc 83 20 14 ab 8a 72 82 d3 0c 09 49 0e c4 e4 86 0a 52 4c 1d 95 72 cb ca 8e 1c ab 50 d5 92 65 49 70 8e 6c a8 55 28 2e Data Ascii: wOF2`V_P?FFTM\|R`&*sH6$jp 1V?webf[I1ku1hA$/~M=Kj\'Am?TqD}Dd$`rbJbeb$ rIRLrPeIplU(.
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 6a f5 5e cf 9d d0 81 ab 4a ca 66 f9 10 71 bc 5e 62 9f e8 83 6c 75 5c d8 3d 6c f7 fd 42 d3 7d 1c 6f f0 92 aa a1 a4 6d 79 32 36 9c 2a 1a 15 6e de 8f 75 8d 99 07 91 97 92 5a d5 04 a9 ec 25 b5 b6 29 29 da ca 64 6c 95 14 84 81 6c 6e 9a 18 f3 40 b6 34 43 12 91 20 bb 5b af ba 1b a4 d2 36 8a 2f 18 e4 f2 36 93 8a 6c 10 6e 8b 6d 13 95 0c db c1 0e 61 6c 27 9c 06 76 21 76 83 3d 82 6b 6f 89 a6 85 da dd e9 a2 a0 fd 94 03 22 d0 c1 52 12 ec f8 1f cc c3 77 dd 9a 60 eb e6 3d 83 a3 db f7 02 ce ee dd 3b 64 fa fd be c0 d5 83 1b 5d 2b ea f1 10 91 a6 6e 0a 5c 4f 6f 89 f3 bd bc 55 14 32 1f 0f 77 37 7d ff b1 f5 c9 18 4f 48 0f 00 2b 80 33 10 18 14 e0 0a 7f 7c 2b 12 04 0c 09 9c cf 7f 5c 89 cc 4d c6 f0 2b 82 36 a2 4a 67 3b eb 85 dd 41 41 b5 a3 5e 0d 36 bd 34 f1 e7 dd 2a e6 5a a1 8d Data Ascii: j^Jfq^blu\=lB}omy26nuZ%))dlln@4C [6/6lnmal'v!v=ko"Rw`=;d]+n\OoU2w7}OH+3\|+\M+6Jg;AA^64Z
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 47 ba 9c 1c 0f 9a 14 60 09 6a 5a a6 df d6 03 6b 6c e0 7d 63 bf c3 7e 25 f6 0c dd a3 6b 96 c9 e9 66 64 a9 21 09 c0 6d 88 19 cc 81 6f 53 87 73 95 53 95 bc 6c 28 ad e9 51 59 ea ce 6d 99 9e bd e0 3e d6 fc 53 9a 22 27 82 40 5d a9 43 d7 d0 26 b0 1c f2 3b d7 5e 88 1c 93 ec d8 56 35 76 cb 3a 5a 8f 47 74 6c 21 4e 0d 01 95 59 45 af 66 7a 59 47 c1 75 57 42 15 60 e1 02 05 59 2a f9 0c 9f 60 d3 07 28 7f 9e b9 1f eb 49 f9 a0 45 e1 34 14 9a 25 3d ad a5 46 ab 57 d6 06 83 bd ee 91 87 e5 08 3d 0a ba c0 3c 42 ef e1 ff c9 61 b1 12 36 4a 62 ec d3 cb 72 0d 5c fc 84 a1 bb 28 cd 61 08 e6 34 94 df a3 61 f6 ae 86 91 4b 47 2b f3 9b a0 6e 69 fb 44 9a 59 37 f4 81 b6 ce c6 f6 f8 39 c5 62 e5 3b 07 b8 86 74 a6 55 1a 41 0a 8f 22 d2 d6 ed ea 13 6e 60 9d c3 ff df 8b dc 50 ab 74 14 60 85 07 Data Ascii: G`jZkl}c~%kfd!moSsSl(QYm>S"'@]C&;^V5v:ZGtl!NYEfzYGuWB`Y*`(IE4%=FW=<Ba6Jbr\(a4aKG+niDY79b;tUA"n`Pt`
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 0a 5c 7a 85 7d 29 ca b5 f2 59 19 c0 db 4f 14 ec 7f 1a 98 51 30 1c f5 d1 f3 69 d1 cc 8d 08 d4 c1 3e ac 81 24 27 79 35 f9 94 a2 df dc 44 9e 18 20 8f 9f 67 58 8f 27 b0 0a 72 f5 2c 6e 34 8c da 7b 7b cc e2 5e 34 06 ef f8 53 d0 e4 ff 7f 82 91 7e a3 94 6a f4 b4 92 7b 1e 3c 37 cd 32 db 0c 9a 09 3e 2d a9 34 ab 48 91 69 2e 22 d7 88 4b c1 e7 02 6c 5a 96 21 01 4a cc 77 45 8b 39 b9 06 5d 8a 9d 08 c9 db a4 91 f7 6a cd 60 bf 71 4d bc 2f 7e b9 03 63 86 41 3a b6 ff 76 6d 42 c1 47 48 b4 a2 ac 92 07 0a f2 f0 09 80 d9 6b 67 90 e0 59 b0 5c 04 39 fd 5e 0b 42 6e 8a 96 e7 65 b5 23 0c 9e 9c 42 78 37 a0 c5 97 c9 f5 4e 92 fb fa ed 27 fc d9 f5 f3 75 31 d2 15 4b d9 7e 28 f4 ab ca 07 9b 0d 02 0f ff 3f d2 a7 3f 5b e8 81 ad 26 80 e7 12 7a 5c 7f b7 c0 9a 75 63 c6 cc 18 9c b0 de bd fe 52 Data Ascii: \z})YOQ0i>$'y5D gX'r,n4{{^4S~j{<72>-4Hi."KlZ!JwE9]j`qM/~cA:vmBGHkgY\9^Bne#Bx7N'u1K~(??[&z\ucR
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: c7 5a 52 42 56 b0 b3 3c 67 39 a5 33 df 37 24 8a ec 3e 4b ad cd 67 45 de 8c b5 8b 98 06 2a 1f f9 56 d9 e1 dd 29 fb 98 c0 95 5d be 5b 0f 25 cb 3a 60 c1 09 58 97 be 68 9b 54 b4 f0 99 5b bc 48 72 2c 88 49 45 42 2c 06 19 7e d1 a7 9a 07 bf 98 f7 92 4b ba 4b 2f c8 dc a3 39 54 5c 69 f7 c5 d7 85 e6 49 79 f8 0b b6 77 65 05 04 84 44 d4 89 a9 b0 16 24 21 34 8b c3 18 4b 43 c4 11 8e 55 27 ba 32 5e 5f 96 53 9c e1 dc 70 a1 d0 b9 e6 c9 de 53 20 97 cc 29 be f0 e0 28 35 b7 4f 57 6f 0f b9 bb cd 61 90 05 13 90 b3 0c 84 24 aa f9 c3 f1 80 c5 e7 24 a0 78 18 a6 fc 7b 12 27 6a c8 23 a7 e4 a4 18 08 08 49 a8 13 53 81 f6 39 09 69 6c 2c 0e 63 2c 21 e2 10 47 38 56 9d e8 ca 78 7d 15 5d f1 c7 5a 8c 32 47 48 05 da 5d 4a ed 3a 6d 1c 64 2c 61 52 e4 8f 17 0f 6c 3c 47 22 b3 32 4c c3 69 c7 4f Data Ascii: ZRBV<g937$>KgE*V)][%:`XhT[Hr,IEB,~KK/9T\iIyweD$!4KCU'2^_SpS )(5OWoa$$x{'j#IS9il,c,!G8Vx}]Z2GH]J:md,aRl<G"2LiO
2024-07-11 11:36:57 UTC	8567	IN	Data Raw: 8f 74 61 24 0f a4 2a 84 ea 24 71 ab 97 63 df a5 6d 6c b6 d5 d6 74 35 26 96 c0 b3 a2 ca 2b da 3b be 80 95 16 37 a2 a8 1a 55 9f 41 d5 b5 2b bb d5 78 d5 1d 5d ae 4e 1b 72 1e 32 da dc 4e cc 11 6d 0e 0d 7c aa 95 bc 29 ad cf de 93 56 4f 32 96 bd 75 1e ab 47 5a fa 08 d1 db 1d 50 d5 65 7a 7f 12 35 c0 45 df 4f 2f a8 2b 1f fb 6a 7f 5a ab 7c dc e5 18 c2 fb a5 bd 31 1f 68 fa 75 79 57 ab 7d 58 6c 1d d3 7b b6 ab 43 c0 36 59 02 44 d0 71 5c 90 b7 d5 98 be f2 7c a3 68 c7 ef d4 e1 4c 80 64 cb 7f ec 56 de f8 5a f3 7f 70 d6 32 f0 2d f1 3b 76 f9 eb cf fe c7 ee 69 fc af 7e 60 0e db fb 98 a0 be f9 ff 0f cc 79 66 14 f5 4e 53 33 8f 7c f4 77 3f 3b 3e 7b b2 cc 06 f0 74 1c fd e4 63 d4 ad 86 ab d7 df 36 6f 19 4b 96 2a 6f 6e 71 71 f0 a5 c8 cb 52 7d 56 aa c9 c3 a3 1a 55 45 80 da d4 75 Data Ascii: ta$$qcmlt5&+;7UA+x]Nr2Nm\|)VO2uGZPez5EO/+jZ\|1huyW}Xl{C6YDq\\|hLdVZp2-;vi~`yfNS3\|w?;>{tc6oKonqqR}VUEu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49796	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	564	OUT	GET /4/imagery/sprites-fm-mono.a67d0fb90e10bdab.woff2?h=dd3b1ae3a HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mega.nz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	355	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: application/octet-stream Content-Length: 65952 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-101a0" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16029	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 01 a0 00 0b 00 00 00 02 45 e8 00 01 01 4f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 ae 5e 0a 87 fe 48 86 83 65 01 36 02 24 03 8c 44 0b 86 24 00 04 20 05 84 0a 07 c3 5e 5b 9c c4 71 64 8c bb 61 ec 76 80 d9 3b 5f 34 b0 0a 76 cc 47 dc 0e 29 44 e8 3d 53 75 d4 f7 38 00 e0 2f 6d f6 ff ff 7f 76 52 19 43 9b 88 29 05 26 d3 eb af 57 bf ed 20 cf 10 b2 52 5b b1 c7 d4 68 63 dd 9e 82 8c e1 74 e6 99 2d c2 af ba 0e c9 23 da 12 6c 5b ad 24 46 d7 2b 9d 05 81 ce 3d dd 37 17 9f 45 7f 34 9a 3d 5d c7 4e 34 fc c9 8f 64 bf 78 e2 c5 ef bf 70 e2 8e a2 45 50 ca 5d 8a 27 b9 6c 05 99 5e ce 64 22 2e 90 4c 28 11 89 4a 12 93 e8 09 cb 8a 99 9d 10 5e aa c3 15 91 ad 42 8b be bd 57 ab 67 dd d7 4e f2 4e 04 6e 1f d3 7e Data Ascii: wOF2EOT`^He6$D$ ^[qdav;_4vG)D=Su8/mvRC)&W R[hct-#l[$F+=7E4=]N4dxpEP]'l^d".L(J^BWgNNn~
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 7a 81 0a 51 92 6d bf 31 90 53 30 7f f7 35 3c a5 80 cb 21 48 d0 5d 88 bc 49 c0 e0 86 3c d1 72 c4 eb e4 4e 27 32 f1 55 75 9a bd 29 bb 23 92 0c c4 22 2f 79 aa 2c c3 76 d4 da 3f 3a 11 1c fc d4 7b 48 8f 9e fc 14 16 97 9c 59 c6 ea 7b 5a e4 65 7e b0 80 9b 8c a6 58 97 72 7b 0d 76 b9 4e fc b0 fb 82 8c be a8 2b c5 24 05 c2 78 c6 aa a7 02 bd 2e 74 33 f1 9b 32 0f bc b6 b2 87 26 df bc 89 cb 19 98 fa b5 ab d2 4a 7c 26 4d 8b 3c 0a 8e 34 54 2e 21 f2 74 57 ad 62 5a 12 d7 67 69 bd f9 d3 4d 9a 44 7b f6 42 4d 70 53 2c 1f 29 ce f7 42 43 7b b9 92 69 d9 d0 56 a1 60 14 b7 b4 7e 27 90 75 85 0a c8 8a ca 87 0d 40 cd 4a 72 fc 08 d0 d9 7d 33 95 bc 6e 34 b1 76 58 ea ef 94 a9 e8 16 d1 88 e2 d6 91 41 6f 36 c6 73 4a 60 10 43 3d 6f 53 bf c4 ba f1 2b f7 38 a0 28 79 2f 16 6f 19 92 25 af d2 Data Ascii: zQm1S05<!H]I<rN'2Uu)#"/y,v?:{HY{Ze~Xr{vN+$x.t32&J\|&M<4T.!tWbZgiMD{BMpS,)BC{iV`~'u@Jr}3n4vXAo6sJ`C=oS+8(y/o%
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 49 09 cd 0c 0d 65 99 be 5f 86 5f 00 7d 5b e5 07 45 07 ff d9 bd dc 32 dd 72 39 36 05 4f 3f 07 12 69 3a 0f 99 69 f0 b5 69 43 d5 9f b4 05 06 fa cb 98 0e ab e7 7b ac a4 12 c3 c8 8b 54 1e 7f 7b 0e d3 d9 2a df ff 46 6c 1a 89 d0 ad fb 62 03 48 80 8f d9 a4 ad 57 b4 9e d7 bf c5 9d b5 fe 40 21 15 f6 d3 36 fc 0c c5 d7 25 89 1f 4d f7 90 d8 5f 83 29 e5 33 fc 43 5a 53 6b 8b 24 92 b1 b6 fb 3d e1 04 1a f5 4b 53 c1 48 04 b8 b5 d1 21 63 25 51 10 d7 68 d3 4a 56 8c 72 ec 85 b2 3c 25 27 6a 75 a9 6f fa ce 1a 2d f8 ce 93 c4 93 27 e1 e8 aa 52 a6 3e bd cc 40 6d cb 01 4a 85 8c 87 b8 5d a6 49 26 69 e5 9a 4c a0 84 9d b6 b2 b9 9c ec 46 c8 78 50 63 80 11 ca 93 21 dc 64 c3 0f d4 0f 4f b2 19 df 80 0f 88 ef 5a a8 cb 01 84 85 c8 2a ac 1a 48 f2 dc a8 19 c5 b0 fc 54 c4 7b 5a 3e 66 60 c1 ce Data Ascii: Ie__}[E2r96O?i:iiC{T{FlbHW@!6%M_)3CZSk$=KSH!c%QhJVr<%'juo-'R>@mJ]I&iLFxPc!dOZHT{Z>f`
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 6b c2 12 92 76 b2 7c cd 80 c1 25 1f 92 f1 76 de 36 d7 3a 1f 7b 6b 76 f5 43 5d cb 93 68 e2 8f 52 02 4d 26 e6 74 1f 35 6d 24 4f 77 22 89 2f 8a 1a 7e 88 4c eb f7 1d a1 96 56 7d 63 c5 15 94 f7 c7 4b a2 b3 21 65 00 99 22 d9 c5 d4 cd 07 35 5c f6 e0 90 fc 11 3c 9d 28 a6 5c 08 35 09 ce c4 ac 21 9e 40 16 cd 63 d6 eb 52 98 bd 4b 4b f4 ef 7b 13 42 43 82 ec cf 08 dd 33 78 fc ca 26 6e 50 56 6e fe 45 21 46 99 e1 64 a5 af 43 0e 3b 1b e5 77 c3 d4 f4 a3 81 a4 e2 fd 9f 3d 41 2a 5e 77 3a 8e 66 84 0d 65 0f d9 96 fe 6b b9 8a 8e 65 17 79 41 55 63 2b a2 e3 5d c7 f7 dd 19 cc 47 37 f7 42 df 67 14 7f 93 e8 8c 8d 2a e2 f1 c9 f5 72 6d e3 4d 2a 6b f7 c0 8b af b7 f5 a3 98 86 93 3b 73 dd 42 fd 40 e7 9e c1 f1 31 df c8 db 77 92 52 5a 40 61 55 d2 73 56 e7 38 7b fc 5a 43 0f ae a9 88 81 f7 Data Ascii: kv\|%v6:{kvC]hRM&t5m$Ow"/~LV}cK!e"5\<(\5!@cRKK{BC3x&nPVnE!FdC;w=A^w:fekeyAUc+]G7BgrmM*k;sB@1wRZ@aUsV8{ZC
2024-07-11 11:36:57 UTC	771	IN	Data Raw: 60 c7 d6 7b ca 0a f5 40 b0 5c 63 5a 51 fb 35 ec 71 bf 7f 09 58 c7 a5 70 d6 72 ab 80 8e 6c 2a 59 91 c4 98 63 c1 76 b9 ae 67 48 52 42 85 0e b8 56 14 aa 9f ab bb a4 43 30 b5 f0 e6 fb e4 8a 5a 8b 78 2f 82 1b 63 a5 b7 d9 ba d1 8f 94 d5 71 8d a5 f1 0c c5 cb c8 b5 74 33 1b 3c eb 63 40 a3 d9 2c fd 87 e1 89 c7 57 00 c7 ef ef a7 d3 b1 14 e9 54 d0 ef bb 61 5a 94 33 8b bd 7f ee a9 fd 2c b8 8e d8 d7 33 0e ed 7c 63 56 1b 35 99 38 3c e2 77 e4 2b ce 93 70 80 10 03 95 d2 27 4c ba a5 2f aa 0c e7 d6 ce 85 1f 93 4a 85 09 96 14 3e 8c 95 98 35 5e 33 bb 4b 5f 0b 5c a2 12 b4 e7 b4 8d 01 23 50 25 5a 99 86 40 ea e5 64 d6 82 14 95 c5 eb ef e6 62 1d 44 ea 28 c5 8e 7e b9 f1 9e d0 81 5a 11 ac a3 bb 72 39 31 2b 55 d4 66 cb 42 22 64 8f 8b eb 71 e3 e0 14 db fe 39 ec 5d d8 a9 a2 32 74 35 Data Ascii: `{@\cZQ5qXprl*YcvgHRBVC0Zx/cqt3<c@,WTaZ3,3\|cV58<w+p'L/J>5^3K_\#P%Z@dbD(~Zr91+UfB"dq9]2t5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	49797	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	549	OUT	GET /4/fonts/Lato-Regular.woff2?v=6343dd45044b0726 HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mega.nz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	356	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: application/octet-stream Content-Length: 182708 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-2c9b4" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16028	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 c9 b4 00 11 00 00 00 09 45 e8 00 02 c9 4e 00 02 03 d7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 8d ff 0e 1c d0 66 06 60 00 ab 24 08 81 66 09 97 17 11 08 0a 8e b1 60 8b f4 77 01 36 02 24 03 de 3c 13 84 80 02 0b de 40 00 04 20 05 ae 3d 07 81 d4 6f 0c 81 39 5b 10 77 f8 75 ff 91 a9 f6 1f 41 ce 85 2f 05 b0 48 22 03 b6 e3 74 a8 b1 b9 a5 76 d3 e5 f6 c6 d8 be b1 f7 d6 25 92 b8 18 49 08 8c 3f f9 b4 dd 6d 53 56 40 88 8c e5 25 25 29 79 50 19 16 29 d5 ad c2 de 8e 21 0d 07 a2 ea d7 9e ca 87 fe 1d 63 f7 18 80 08 fc a9 9a 83 34 2b 3b 86 b4 d6 01 a1 aa fd eb 67 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: wOF2ENf`$f`w6$<@ =o9[wuA/H"tv%I?mSV@%%)yP)!c4+;g
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: b2 a2 6a ba 61 02 0b 22 4c 28 e3 b6 e3 7a 08 bb f9 59 ab c8 1d c3 3d 1d 2a 5d b7 24 72 84 72 41 0d 79 a2 0a 09 42 92 98 6a b1 af 5c a0 b5 f0 a8 18 92 c1 c4 f7 4c d5 78 7a a7 c2 c5 d4 00 3a 76 7a 7f 21 91 ad 11 d5 12 ae 53 85 e7 1a c4 dc 80 99 1b 31 ab 63 d7 26 f7 8f 83 a6 e8 8e 2a ef 67 c5 9f 52 e8 07 3a 2c 1c 0b 8b 04 a1 6a 48 28 e2 92 cf cd e3 ed 05 13 aa 86 84 8c 1f e8 cf 77 fa 17 0a a9 31 8f 2c 16 52 7b 9f 56 78 7d a7 f0 d5 12 9e 9d f8 70 9d 35 b9 42 a9 52 6b b4 c3 11 0d f9 c7 12 88 ed e4 e1 04 24 e3 92 71 61 b2 c2 71 c9 b8 44 30 50 55 55 55 55 1f 1b 5f ea b3 b6 56 ec b9 f6 d5 0b 4d 48 11 c0 df bf 6c 4c 2e c1 96 14 4c c9 67 10 79 94 7c 48 81 58 a1 4c 89 6c 4e af cc 58 79 8a e8 0a 56 9d 4b 0d a0 0e 51 cf ff c2 39 db 52 73 cd f5 8e 77 6e da 25 05 44 4a Data Ascii: ja"L(zY=]$rrAyBj\Lxz:vz!S1c&gR:,jH(w1,R{Vx}p5BRk$qaqD0PUUUU_VMHlL.Lgy\|HXLlNXyVKQ9Rswn%DJ
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 9d a9 39 5b 1c 9d 9c 5d 29 f1 e5 6d 02 40 b3 c5 1a 9a 18 46 50 0c 27 48 8a 66 58 be d0 b5 28 c9 8a aa e9 6e 0f 0d 00 44 98 50 c6 85 54 da 58 c7 f5 ca 18 90 00 21 18 41 31 9c a0 e8 cc 38 cb f1 e7 af 85 8b f7 19 ae aa 02 51 23 0d 04 23 28 86 13 3a 92 a2 19 96 e3 05 11 48 fa d0 15 d0 2d 25 b0 95 10 51 9e 3b e8 05 c1 b8 92 4b 6c 88 a2 cb 40 b4 9c 7c 28 d6 df 18 f7 3b 29 1e 25 21 bd 8b b0 9c c5 4b 91 3e 8a a3 4a 69 20 f1 4a f5 ad fc 88 b5 62 13 3b 67 b9 28 dc f3 00 a2 98 a4 24 3b c4 43 06 f9 95 42 a5 64 f9 bc 9e c4 ad 9b af 04 c4 89 44 5c 92 9d 3e e9 a5 ca 44 14 15 a5 a2 1a b7 7a 07 4f 93 d1 2a ba 8a 1e 06 96 58 8f ba ef db 77 cf e5 4f e6 66 66 06 e0 0d e1 eb c2 35 21 6a c6 d6 22 55 6b 2c b7 09 50 73 d0 f1 d2 47 59 84 59 bf 31 24 e9 1f 92 31 93 61 23 8d 39 70 Data Ascii: 9[])m@FP'HfX(nDPTX!A18Q##(:H-%Q;Kl@\|(;)%!K>Ji Jb;g($;CBdD\>DzO*XwOff5!j"Uk,PsGYY1$1a#9p
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 92 6e dd 37 40 7f 82 43 b9 b9 37 b8 b7 c8 53 c8 23 de e6 3c e5 3e 64 09 86 7e 5f 4a 1c bc 11 48 5a 8a 39 f2 94 15 05 c9 ae 4c e7 fe 51 6b ad 2c 53 4e 43 81 32 e2 da 2e 16 60 50 79 39 8a bc 15 f2 7e f9 30 70 1c 5d d5 18 36 12 a5 00 00 00 00 00 d4 45 5f e0 dd 67 53 8e 20 af 50 7c fe 23 07 cf 17 b0 94 97 1f 97 f0 8d fe 66 38 36 f5 57 4e 5d 1a e0 ad b6 b2 38 fd 70 5c af cd c2 1a fa 6f 36 1d 60 23 eb c7 c3 3d 3e ef 4c 47 8e 1b cf 1c 81 7d 7d e8 15 af 7a 08 f6 11 9a 88 98 8a 86 96 95 fd 98 b5 ae 3b 2c 8f e1 cb 93 b7 cb 93 f7 47 f3 95 2d 13 b1 32 97 4c e2 93 49 eb ef 9c 84 c9 d9 df be ab 90 6d 74 81 02 23 11 07 46 8f b4 ef 81 7c f6 a2 c0 4a d9 6f b2 86 0e b0 53 1f 3d e2 e7 1d 43 83 d9 02 05 4e 03 57 44 d1 a4 85 34 5a dd 5f 51 20 63 41 da ec 0e 8a 66 58 8e 17 c4 Data Ascii: n7@C7S#<>d~_JHZ9LQk,SNC2.`Py9~0p]6E_gS P\|#f86WN]8p\o6`#=>LG}}z;,G-2LImt#F\|JoS=CNWD4Z_Q cAfX
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 0b 65 47 4b e1 9f 76 af f6 b0 96 a8 a5 03 08 c0 fc 01 99 ee bd 46 2d 0d 98 11 b5 57 58 1c a1 ec f9 36 6b 94 8e d5 fc 69 ba 35 59 41 a6 c7 2d 52 99 e8 f5 8b 1b 73 f9 e3 f3 c8 53 03 16 c4 64 15 a9 ee 98 be 61 b8 82 22 d2 f9 51 96 67 70 c2 1c cd ba 20 99 25 d1 a6 f9 fe 66 50 5e 8f c5 d9 c8 23 d3 eb 28 e4 05 09 3d ce 34 16 c0 cd 5a 4f 71 45 50 4b cd 4e e0 3a 2c b1 fd 0c 9f e2 db 34 7a fb 1a ce 82 49 83 6a 46 c6 20 72 3e 33 2f 51 99 39 51 b2 eb 80 10 70 6f af 94 a5 7f 36 15 fa 6e 28 5f e7 c3 fd e0 2d 3e 56 9f 35 8a 67 ea a2 84 6f e5 b2 2d 7c ca 07 35 d4 19 9e d3 54 a2 1c 22 38 29 80 a3 d8 33 97 5a a4 3d b4 68 36 2a 18 87 8d 1e 22 28 1c f1 03 6a e1 70 35 07 b6 b2 78 2b 30 3b e5 14 ea f2 fd e3 95 0b ff 9a e2 46 70 7e d0 bd 98 2d 2d 7b 2c 47 dc fe b4 45 73 ac c1 Data Ascii: eGKvF-WX6ki5YA-RsSda"Qgp %fP^#(=4ZOqEPKN:,4zIjF r>3/Q9Qpo6n(_->V5go-\|5T"8)3Z=h6*"(jp5x+0;Fp~--{,GEs
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: ec 7a 08 bd 3e 13 75 e7 c4 45 bf b8 01 f0 a8 82 b2 6c dc 94 0a 4d 15 98 db aa c7 e9 40 68 b3 5c b4 73 ea 02 6f 78 da 21 f6 d3 0f 2b 2a be 8e 82 4e cb d7 05 72 4f fc fe a4 43 9c 38 9b d0 d0 9a de 3a 53 28 6d 39 4a 7c b5 c7 b0 eb 61 d2 33 f9 1f 26 68 41 4b c0 fc 34 c2 7e 38 bd 49 f2 8c 09 64 c5 7b 3e cf b6 39 8d 8e 84 55 1f d4 a0 2b e5 87 51 b7 99 68 1d e2 47 2c fd 81 62 88 4e 15 85 d8 b0 3e 45 c3 45 4a 5b 95 10 70 a9 4d 56 73 92 29 4c ad 1d 33 69 7b 0a 85 6e bc b6 13 a2 51 d1 2b 30 c6 4f 42 59 d5 1c 31 f1 40 ef f3 7a 60 d0 f8 c3 27 eb 63 c7 09 de 94 a3 a9 2b cb 9a a3 0d c0 1d c4 a6 ae 1c db 5a 46 92 0b 3a ec 75 5c 0c 82 cf 8a 2c 6a 61 b3 3b bb 9e d0 9d e3 81 53 c5 ae 5a f5 55 a6 07 b7 28 20 dc 99 c5 90 4e d3 17 a7 b8 67 e8 6b 20 54 f6 1a b7 73 59 3d e2 91 Data Ascii: z>uElM@h\sox!+*NrOC8:S(m9J\|a3&hAK4~8Id{>9U+QhG,bN>EEJ[pMVs)L3i{nQ+0OBY1@z`'c+ZF:u\,ja;SZU( Ngk TsY=
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 9b f2 e1 91 8d 63 ca d2 97 9d 27 4b 20 01 c9 7f 54 72 42 72 4c 86 b9 03 f9 f2 0a e2 53 56 16 91 11 66 c2 35 48 0c 76 26 b4 85 fc 02 00 21 08 0b 24 31 b1 07 62 58 2e a1 c4 31 88 05 32 e1 8b 48 2c d0 eb 5e 75 6f 86 98 20 16 37 e9 ef 3d 52 9f 35 eb 3a da 0a e9 4b 54 d7 0e 9e 1d 75 96 1f 3b 0b a1 3e 89 73 1b ce 0c 0c 89 29 2d 87 9b 76 62 38 c7 67 3a 54 4d 0e a1 b7 c4 f7 5b cc de ab 5e d2 a3 cb 5e f8 2c c0 77 29 ee ab 66 dc 16 24 00 48 77 5c 41 44 96 a7 b6 47 ab f1 ba ec d9 00 8b 35 9a 81 e1 91 f1 53 0c cc d8 79 1a c5 fb 65 11 fc 24 f4 d9 32 d2 94 c8 a7 79 23 c6 1c 89 1a c5 a3 61 0b c0 f3 c8 45 13 94 b7 79 4a 01 f3 b3 90 a1 c1 f3 30 4f b5 ae f9 56 c8 ad a6 17 5d b5 bc dd e8 aa 2b ba 85 a4 8c a4 1c d8 8d f9 21 1e 8b 60 0c af 70 4b f8 c1 f3 e7 9c ed e3 c5 0f e8 Data Ascii: c'K TrBrLSVf5Hv&!$1bX.12H,^uo 7=R5:KTu;>s)-vb8g:TM[^^,w)f$Hw\ADG5Sye$2y#aEyJ0OV]+!`pK
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 7c e6 d0 9d 5b 08 5a 0f 95 f4 6c a6 cd d8 67 1d 23 5d 3e 7e b0 a4 55 45 4a b2 99 76 2e 9e 2b 87 13 dd bb 72 1e 6c 9e ca fb 1e 0d ea d4 62 c5 5a 07 d9 44 26 a8 13 d4 83 71 54 41 6b 77 66 57 92 54 8f 48 ba e9 b9 54 bc 31 49 bc 69 ce b8 9d 10 1c 2c 57 3c 3f 77 5c 5f f7 c6 9f af e8 d8 8a 14 47 ac 4d 50 06 f0 ba 91 55 93 04 db 75 ae ae f0 45 60 5c f5 43 9a f0 0e f3 04 19 72 4f cd ff 64 e9 51 22 d2 2e 7e 9c 71 a7 f8 3c b8 f7 f4 80 b5 6b 2d e3 18 96 af 60 09 9a 7c 62 2f 98 e9 e9 23 09 d3 b7 50 6a 63 88 fb 44 ad 47 90 2b 9b e5 80 84 c9 b9 87 b4 e1 9c de 1e 6a 0a 4b f0 06 88 47 a4 6f 61 d9 a9 76 97 87 95 c9 61 31 28 26 77 90 38 5a 3c 54 b4 d4 10 09 e3 07 49 87 12 05 7a 12 a7 ce 25 70 42 99 e6 46 8e c0 05 ca 37 16 65 2a 4e 7d 5d 62 9b 30 02 44 de d0 a1 71 c1 04 66 Data Ascii: \|[Zlg#]>~UEJv.+rlbZD&qTAkwfWTHT1Ii,W<?w\_GMPUuE`\CrOdQ".~q<k-`\|b/#PjcDG+jKGoava1(&w8Z<TIz%pBF7e*N}]b0Dqf
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 07 db b9 51 34 fd 36 1a c3 34 a7 7e a4 ad 7d 64 76 e4 e9 87 b3 03 8c c6 11 8b 83 a0 f0 a5 75 2c 65 8c d4 e1 15 fd d0 6b 9d 77 59 e2 42 43 cf 2e 7a 40 7e 82 9c c0 3f 7e 65 aa 06 da 9a 46 16 46 fe b8 07 31 ce 04 04 83 29 98 b9 5b 37 c6 c3 25 e5 12 dc 28 3c d8 e1 07 ea 22 0a 6b c8 56 78 78 9c 98 db 3b ba ff 29 25 6a 3b 6e 61 87 03 d5 ac 8d 0f de 7e da fb 98 d5 fd ab 17 0b 57 6a f8 c0 83 8d 61 2b 2a 2d fd 83 30 9f 4d 62 a8 e9 b7 ed 25 26 38 02 9b 47 06 e4 e9 0f 46 19 d7 b3 9f 02 05 37 bf 19 67 1a df f1 65 88 96 d0 e1 48 7d 9b 40 17 68 ce 34 72 8e 2a 92 8a 0f 1c 25 80 fe 10 08 64 cb f9 11 18 5e ef af cb 15 18 69 69 85 cc 0a e1 0e 7e 3c 5e 9d 10 30 fc 0c 8f 89 47 69 51 89 bc 20 a4 2e 26 fe 65 57 60 a4 36 1f dd 12 6c 00 86 f7 c8 ea 3c 0e ae c5 96 2b 3d 59 4b ed Data Ascii: Q464~}dvu,ekwYBC.z@~?~eFF1)[7%(<"kVxx;)%j;na~Wja+-0Mb%&8GF7geH}@h4r%d^ii~<^0GiQ .&eW`6l<+=YK
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 85 5e b2 ab d9 24 ec 30 c7 06 ce c4 02 24 de 2c 21 e2 d1 93 ab a9 30 bf ab 1f 17 7f cf 95 3c 63 0a 68 ac 7b 6f 1e f1 c5 a5 f9 9a d2 ef 5b 66 db 5a 6f e4 9d 36 8f a0 22 d0 5f bc 0c 23 08 69 4d ca 9e b6 b3 36 ce 7d 46 89 aa 7c dd 24 94 ba fd c4 3f ea 31 94 00 ae a4 ca 0d 77 06 06 cc 23 6b aa fa a6 5a 62 fd 8c da 8f f6 b5 ee 8c 10 9f f3 05 de 62 22 03 7d 9c f4 f4 c5 97 26 b3 26 83 fa 56 ce e8 e2 00 a9 05 aa c4 f2 47 c7 90 2a be 7f 6e 5c 7b 66 f1 c4 46 35 3b 1a fd 16 92 89 06 bd dd 87 47 c2 e7 35 ff 3f b6 7f e1 e6 46 e8 04 b8 bb 20 b6 25 0c 79 c1 17 d2 dd f7 0b b2 db 3e dd a5 d5 da 87 fa cd 06 f4 db c7 97 5e eb 0f b5 eb a7 a0 ea 07 45 5f 60 4a 95 09 b1 9f 7d 74 f1 c2 30 2e f3 5b 2b da ce e1 a2 32 e5 c9 88 db 35 1f d0 73 b9 84 78 9d 3a 13 2f 8a e0 f1 17 e4 10 Data Ascii: ^$0$,!0<ch{o[fZo6"_#iM6}F\|$?1w#kZbb"}&&VG*n\{fF5;G5?F %y>^E_`J}t0.[+25sx:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	49794	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	550	OUT	GET /4/fonts/Lato-Semibold.woff2?v=7194963095272d0e HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mega.nz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	356	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:57 GMT Content-Type: application/octet-stream Content-Length: 184076 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-2cf0c" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:57 UTC	16028	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 cf 0c 00 11 00 00 00 09 5f 70 00 02 ce a5 00 02 03 d7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 8d ff 38 1c d0 66 06 60 00 ab 24 08 81 66 09 97 17 11 08 0a 8e e3 6c 8c 99 71 01 36 02 24 03 de 3c 13 84 80 02 0b de 40 00 04 20 05 af 11 07 81 d4 6f 0c 81 39 5b 08 8a f8 7f a3 de a9 7f 2b 43 a3 f3 45 72 ce 4a 47 06 94 1d 39 0a 19 e4 32 a4 29 91 53 06 97 5c 60 4e 99 9f 1f 21 7f 21 43 0d 11 b3 1a 66 01 90 e4 38 c9 5d fb 4f 36 41 c4 18 ab 59 82 60 cd 53 c9 8c 28 25 ac ee ef 35 1d 63 54 c0 06 43 d5 ba fa b7 16 40 ff 8e b1 7b 04 40 98 d8 26 df 11 94 ba ec 18 e1 aa 23 22 1f b5 d5 d9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: wOF2_p8f`$flq6$<@ o9[+CErJG92)S\`N!!Cf8]O6AY`S(%5cTC@{@&#"
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 52 a7 e7 9c 26 4f a5 c0 a6 48 a2 84 a6 2c 49 85 87 2a 8b fa 4e 1b 37 42 83 44 93 4c 27 ed 52 f7 b4 d3 57 61 50 df 8a c0 33 84 30 92 67 ac d1 86 28 f1 d4 aa 3b be f5 9d f4 bc ec 38 04 7b af 74 1a 7b b9 0f de e4 05 29 c4 97 ae 33 a4 2f c7 f3 95 d3 2a a9 39 7c c8 ea 1f f1 a4 5b 95 3f fa c8 ff ed a5 0f b8 24 fe a4 a5 b5 99 76 22 11 fd 31 62 82 24 23 a5 a4 b4 d7 29 b6 63 ed 76 a5 b6 17 9c 78 01 97 5e f5 5e 53 7b 3f c6 fe cf 13 72 da 95 00 41 52 34 c3 ce 1d f4 41 c6 12 ca 00 b9 90 4a e3 04 20 c2 84 32 2e 6c a9 b4 e3 f6 d8 4c 09 c1 08 8a e1 04 99 e2 0e 18 96 e3 05 51 92 15 55 d3 69 92 61 39 5e 10 25 00 51 cc 22 8a aa e9 86 e9 f1 5a b6 e3 0a c8 2f 8a f6 0e 57 2e 31 2c 87 79 41 94 64 45 d5 74 c3 b4 ec 64 e3 1e 26 6d 3a 30 4c 68 21 1b 13 ca b8 90 ca 71 3d 5e 9f 4f Data Ascii: R&OH,IN7BDL'RWaP30g(;8{t{)3/9\|[?$v"1b$#)cvx^^S{?rAR4AJ 2.lLQUia9^%Q"Z/W.1,yAdEtd&m:0Lh!q=^O
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: e2 22 fc 1b da cb 7c 00 e6 04 64 12 26 d1 e9 54 e9 44 cf 34 66 89 7d 5b c6 f3 d3 ef 83 be f2 2e d8 97 93 b9 c5 dd 92 70 97 52 de 76 33 5d 36 5d b5 79 74 05 28 a5 d9 f1 82 01 53 1e 73 48 17 59 8d b5 46 b3 ce b8 97 d9 53 78 27 93 10 fd ff 29 4e 1a 4d 3f d7 c7 e1 40 62 1e 23 ee 8d 29 e0 a1 7e d2 6a b7 1e 77 76 0b b8 73 d4 89 72 e2 9c f1 f1 27 78 67 78 c7 5f aa bf 82 43 44 be 10 f1 5f 22 72 b7 45 77 85 87 e1 32 87 db 3c bc 7c fc 11 d0 24 d8 85 9e c4 22 83 88 db b4 8b 39 ae 6c dd 0d c7 04 cc 99 3b cd 1c f7 6b 0a 31 ec 8d 34 5f 99 fb 3d a7 76 5c cb b8 32 92 e5 83 58 cf bc 2a 8f a2 da c1 f3 f3 e6 c6 11 7b 66 73 59 3e 9a 20 01 1d c6 96 e5 78 31 92 ed ac a8 1a c2 3c 40 31 2c c7 03 41 94 64 05 22 ac 92 a6 2d b3 09 b5 37 ff eb d4 6b 00 05 03 bf 9c f9 03 96 bf ff 19 Data Ascii: "\|d&TD4f}[.pRv3]6]yt(SsHYFSx')NM?@b#)~jwvsr'xgx_CD_"rEw2<\|$"9l;k14_=v\2X*{fsY> x1<@1,Ad"-7k
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: aa 02 00 00 00 00 00 09 8e ce 94 41 61 7c 92 d0 4f 95 96 3c 78 c8 fe b4 65 2e 7e 95 d4 52 c8 df a4 93 4a fd ae 5a d2 6a 3b 97 20 9f 40 ba 29 d3 b6 2b 55 9c 5a 6c 15 64 55 a7 1d 36 86 8e 54 b5 39 b1 ec fe 05 05 ac f6 ef 99 d1 5b 5a fd 8d a8 e1 06 ad 64 a3 1f d0 7f 64 2e d3 82 fd d8 19 1b 94 31 87 44 5a 32 e4 28 50 a2 02 0d 60 b0 38 fd ca 80 11 92 b9 2c ba ac ee 85 50 bf 1f 40 bd a8 0b 63 b7 6a 0c ef d4 5e 0a 99 bc a7 89 a0 40 ea 41 9b 8e dd d1 0a 6a 1b 86 b3 f6 e9 fd 6d c0 66 7b 27 cb 6e 91 83 8e 0e b3 7d da dc 59 b6 f3 31 ae e6 5c 73 c7 3d cf 7f 3f 6f 7f f6 3e d8 e7 6f 7c 0d 11 fd 15 a0 02 e7 43 d0 30 01 52 6d 3a 13 83 c2 f1 88 a6 5c 9f ae ec a3 69 98 d7 d9 4b 9c 44 1e 5f 90 ab af c0 c0 d3 2c be d6 ef 46 9e 38 a1 1f 9c 17 ff 43 41 d2 f5 e0 5d f3 33 cc e3 Data Ascii: Aa\|O<xe.~RJZj; @)+UZldU6T9[Zdd.1DZ2(P`8,P@cj^@Ajmf{'n}Y1\s=?o>o\|C0Rm:\iKD_,F8CA]3
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 2c bf 9f 46 c2 bf 36 41 d5 24 27 aa 7c 4c ac b1 e3 d9 b1 db be e7 5c dd 2a cf d5 e8 93 cf b5 af ba f1 dc b8 e8 9b 3f 4a a2 77 6e ff 51 bb e7 fe 1f 93 87 9e 5c 38 0b d3 e5 2e a0 7c 10 61 e2 85 1d 2e a3 72 55 58 ee 2a 58 a3 8a 9e 5b ea 2f aa 66 ca 31 6f 57 63 87 1c 0a de aa 0b 09 22 9e 3b 94 91 a5 89 2a 89 b6 e3 c7 ee 51 c4 42 58 a2 bc f0 fc 99 63 5e 44 12 19 62 93 94 64 9c 20 21 21 3c 05 bb d9 35 e5 58 c8 20 3e 89 2a 56 5f a5 2b 3f fa a6 ba d3 b7 19 a1 fe 0d e7 ff 71 3a 53 3f e4 bf 99 49 d4 f7 dd 5c 8e a7 ea 5b b3 37 5b df a4 1f 7a b8 12 7f b6 af 46 d8 ef 7f 03 b7 b8 37 a4 ba d3 cc c4 5e b5 3c 9f 29 e8 6a 84 75 34 cf ce 90 2d 1c a3 35 2e 8e 74 01 1e f3 db 5c c3 cc ff fd 15 16 f8 27 6f 95 31 58 67 63 53 88 6d 09 76 e5 d8 57 e1 d0 80 63 f3 08 4e 3d 17 0f e8 Data Ascii: ,F6A$'\|L\?JwnQ\8.\|a.rUXX[/f1oWc";QBXc^Dbd !!<5X >V_+?q:S?I\[7[zF7^<)ju4-5.t\'o1XgcSmvWcN=
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 32 46 7b ae f1 b2 7d 7b 91 e6 64 44 df 85 4e ab 0f 2c fd 50 92 dc 3b 66 03 c4 20 66 11 46 a6 2c d5 01 70 f8 f0 40 06 84 9d 17 43 4b a8 fb 4a 11 ab 5e 0a 1a 02 bd 8a d5 44 ad c3 a2 1e 5e cd eb cf 82 fe 66 6a 70 bd 7e 35 f8 e9 a7 20 93 a1 31 79 b7 c3 62 63 f2 6d 6c e2 c0 34 b0 80 f9 f6 93 f8 be f2 23 ba 17 01 6b ef 8a 38 b0 b3 d9 a5 31 d9 56 0f fb 56 68 ce 91 8b f0 f2 75 de 82 bd 99 7f d7 ce 3a 04 ab 49 3b 6d ad 4d 00 af 00 39 5a f5 da 7b 6b f0 54 89 10 89 77 ea fe 9e 10 f1 4d 8e 51 27 dd 9b 10 6f d0 29 79 4f bb 7b d4 41 a1 c6 89 26 10 8d be 34 0d b0 cc 17 89 4a 44 f8 26 6d 1d 79 9a 3f 29 27 16 e2 59 bc ee af d4 a5 23 d7 0d bd 51 8f 6a d3 c7 8e cf f5 6a 45 15 95 9c 1a 41 d7 59 92 8d 15 ee c9 8c a9 2d 7d ce 12 90 11 1e 79 16 22 d0 1f 70 2b 6c 35 bd f3 df 7e Data Ascii: 2F{}{dDN,P;f fF,p@CKJ^D^fjp~5 1ybcml4#k81VVhu:I;mM9Z{kTwMQ'o)yO{A&4JD&my?)'Y#QjjEAY-}y"p+l5~
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 78 88 7e 7a ac f8 d7 62 69 78 3c 49 a4 4e ae 35 a8 5b 95 30 ab e8 c5 0f 44 4d 39 a7 b1 74 ef 06 f4 ca ad 7a 8a 90 ea fc 7d 97 75 8e fd 0a ec 87 4c 09 91 e9 bd 7c 03 c0 a1 1f bb d4 da 10 e0 ad 93 f3 8e 7f 01 2e e2 c4 f9 cf 4a e0 8f c5 7e 56 b4 12 f0 b3 3a dc dc bc d7 da 66 37 b1 69 49 71 98 25 e2 d5 34 4b 0c 70 74 df 2d d1 4e 9a e3 94 e2 5f 1d 14 89 53 35 5d f3 e0 38 b9 44 35 e0 75 41 d1 b3 1c e5 db e2 76 3a 91 1a 12 62 46 f3 34 9b d5 f8 20 5c 12 46 79 69 29 45 67 95 38 02 27 81 a3 0e 06 a6 77 98 a7 a8 e4 9f d5 a1 0f 44 6e c8 6c 7f 42 96 33 07 ea 48 98 bc 92 d9 31 17 01 59 27 b3 3b a9 9a 5f fc bc 42 a8 63 5c 04 dd 08 c1 e0 f7 bb 50 f8 6d 6c 95 0d f1 9e af 41 30 eb e3 68 6b 26 9f 27 8d 31 89 18 b4 e4 77 5b c1 de 5b 83 6e a5 09 6a d1 fa a4 f4 e6 05 0e 0c da Data Ascii: x~zbix<IN5[0DM9tz}uL\|.J~V:f7iIq%4Kpt-N_S5]8D5uAv:bF4 \Fyi)Eg8'wDnlB3H1Y';_Bc\PmlA0hk&'1w[[nj
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: e9 68 28 6a cd 80 30 98 b1 f4 60 4b 44 cd 47 46 18 26 e9 b4 bf bf 8e 16 56 b3 4d f8 e7 1b 2f b1 6d 57 7b 11 3e 3d f9 1f 7f d1 06 1d be 95 c3 72 58 ef 86 d4 15 ef e1 b7 0d 5a 0e ef 92 af c8 aa 0b c1 6a e9 68 c3 f2 c1 dc b1 5a bf a2 f2 1c dc 8b 74 1d f4 65 e6 e0 ba 0c 5d 4d 94 70 b0 5f b1 3c e1 87 3b 8d 08 d8 e1 2c 4b 52 de 94 e9 e6 cf 3b 9b d6 f4 c6 ad 90 9d ca 7f e3 c4 88 87 b9 da 17 a3 3c d5 e2 ac e1 1b 41 e8 2a b6 a9 4b f8 06 e3 05 1f d5 9f 65 cc 49 bb 82 d5 dc 11 ab 79 45 a9 df ac 51 ab f2 16 27 86 2d 25 42 fb a4 bd 34 6a 32 35 a2 36 b5 1c 7c 04 70 53 d4 fd 61 fd c7 76 74 66 ef cd 47 7c a1 c5 16 5d d6 e8 b6 41 76 a0 9e e0 fd 10 9f 06 43 fa fc ac dd c2 83 36 b3 e4 6a eb fc 2b fe 0d 9b b5 76 a1 fe c6 f9 21 ff 29 d6 ae 60 d1 99 ba 45 f8 48 e8 fb 2e af 0a Data Ascii: h(j0`KDGF&VM/mW{>=rXZjhZte]Mp_<;,KR;<A*KeIyEQ'-%B4j256\|pSavtfG\|]AvC6j+v!)`EH.
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 4a e2 0b b8 fa 28 22 93 18 fe 78 17 40 e8 84 c0 c8 fb 53 ef ef 50 e0 5a 7f 4d d8 e7 b8 e8 da fd 94 bd 25 69 74 ed f4 ef 1d 53 ba 73 0d c7 1f 6d 06 8c c2 88 81 a3 d5 9b d6 c0 60 3d f6 55 47 9d 0e 14 fd 6a 29 1d 85 e3 b1 5e 2b 45 44 23 4e 2c 7a d2 8a ce dd 76 cb de 99 e0 9c 48 58 9a b0 75 e6 06 87 81 ab 9c ee 2e 5d 40 c6 ae 5d f4 84 8b 66 3f 17 73 34 06 81 5a 09 c4 f5 ce f3 d3 e1 30 f4 cb f9 ef 0e d2 b1 fb a6 37 19 11 8a ed 7a e2 bd 79 68 40 59 37 fd 9c d1 dd 8d 45 c1 f5 34 bd 85 a9 a0 d9 9d bc 2f a6 b7 20 86 24 7a 6b 20 04 1d 7b af 56 37 d6 1b de fd f2 23 5d 6f 7c 85 94 c6 4d 06 79 25 74 95 4f 77 5f 5a 13 32 a9 c2 13 5c 8f ce fe 59 94 49 6b 41 26 9c 4b 6a 40 3f cc 14 b8 22 e3 dd 92 67 53 cb 57 25 a0 41 82 ac 87 44 80 bd 82 f0 af 3a 5a ff c0 0d fd 4f 48 a2 Data Ascii: J("x@SPZM%itSsm`=UGj)^+ED#N,zvHXu.]@]f?s4Z07zyh@Y7E4/ $zk {V7#]o\|My%tOw_Z2\YIkA&Kj@?"gSW%AD:ZOH
2024-07-11 11:36:57 UTC	16384	IN	Data Raw: 3f 4d 3d 55 e1 d1 d1 4a 1f e4 85 77 88 17 04 c3 13 d0 70 55 fd 0e 5b b1 7f bd 55 fd cb 31 59 a7 14 58 c4 12 ff 4c 9e 12 61 94 d5 6a 9c 2a 47 59 a5 35 bb aa b7 35 e3 fc 6a 2d 88 2f 93 29 e9 4c ae 42 2c 94 1a 38 74 b6 ac 21 78 5e ff 11 b5 e3 c7 76 21 19 d8 11 11 b4 41 8d ad 37 3b aa 48 6a 43 3d dd 91 81 af 97 69 09 85 5a 85 1b 42 72 c2 ce 3e 85 d4 de 81 f6 22 70 43 34 14 62 9e b9 d0 b8 dc d9 be 6b c9 a1 88 46 32 34 55 6c 0f 48 5c eb 32 19 99 e7 2e c1 1a c0 f6 9f 1f 0b d4 50 16 74 6a 52 a3 b2 86 68 cd be 25 9d 11 c0 51 dd 11 e4 07 ee 38 03 1f 97 e9 20 49 e8 6d c1 6f ed 8e 08 22 b5 77 c1 57 0a 9d fb 42 6a c2 b5 6f ce c2 cf 96 c1 62 16 b4 0c 3d 9e 08 1f 37 fe 80 ba ed 8d 3e 51 47 3f fa f8 72 b7 75 f3 22 59 88 75 2e ac 8d 70 34 65 ad ee ad 82 ba 8b 2b 4a 96 ec Data Ascii: ?M=UJwpU[U1YXLaj*GY55j-/)LB,8t!x^v!A7;HjC=iZBr>"pC4bkF24UlH\2.PtjRh%Q8 Imo"wWBjob=7>QG?ru"Yu.p4e+J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.17	49792	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-11 11:36:57 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=189177 Date: Thu, 11 Jul 2024 11:36:57 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.17	49798	31.216.144.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	452	OUT	GET /sw.js?v=1 HTTP/1.1 Host: mega.nz Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://mega.nz/file/3LZ0hLYB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	238	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3573 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:36:57 UTC	3573	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 65 72 76 69 63 65 20 77 6f 72 6b 65 72 20 66 6f 72 20 6d 65 67 61 2e 6e 7a 2e 0a 20 2a 2f 0a 28 28 29 20 3d 3e 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 63 6f 6e 73 74 20 6c 6f 67 67 65 72 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 67 28 2e 2e 2e 61 72 67 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 72 69 6e 74 28 27 6c 6f 67 27 2c 20 2e 2e 2e 61 72 67 73 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 77 61 72 6e 28 2e 2e 2e 61 72 67 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 72 69 6e 74 28 27 77 61 72 6e 27 2c 20 2e 2e 2e 61 72 67 73 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 72 72 6f 72 28 2e 2e 2e Data Ascii: /** * Service worker for mega.nz. */(() => { 'use strict'; const logger = { log(...args) { this.print('log', ...args); }, warn(...args) { this.print('warn', ...args); }, error(...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	49800	66.203.125.16	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:57 UTC	649	OUT	POST /cs?id=215118645&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive Content-Length: 20 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:57 UTC	20	OUT	Data Raw: 5b 7b 22 61 22 3a 22 67 70 73 61 22 2c 22 6e 22 3a 30 7d 5d Data Ascii: [{"a":"gpsa","n":0}]
2024-07-11 11:36:57 UTC	327	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 4 Content-Length: 4 Connection: close
2024-07-11 11:36:57 UTC	4	IN	Data Raw: 5b 2d 39 5d Data Ascii: [-9]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	49802	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	402	OUT	GET /4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:58 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:58 GMT Content-Type: image/gif Content-Length: 8787 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-2253" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:58 UTC	8787	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 00 bf a5 ff ff ff 54 d3 c2 7a dd cf 9e e6 dc b2 eb e3 c0 ee e8 b6 ec e4 a8 e8 df 8e e2 d6 70 da cc 5e d6 c5 98 e4 da ca f1 eb cc f1 ec c6 f0 ea bc ed e6 8a e1 d5 58 d4 c3 50 d2 c1 94 e3 d8 ce f2 ed 4e d2 c0 d4 f3 ef a2 e7 dd 6a d9 ca d8 f4 f0 dc f5 f2 76 dc ce 66 d8 c8 80 de d1 ac e9 e1 84 df d3 e0 f6 f3 de f6 f2 e2 f7 f4 62 d7 c7 e8 f8 f6 44 cf bc ec f9 f7 4a d1 be 40 ce bb 30 ca b5 2c c9 b4 26 c8 b2 36 cc b7 3a cd b9 1c c5 ae 12 c3 ab 18 c4 ad 0e c2 a9 08 c0 a7 02 bf a5 22 c7 b0 fa fd fc ff ff ff f4 fb fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 Data Ascii: GIF89a Tzp^XPNjvfbDJ@0,&6:"!NETSCAPE2.0!Created with ajaxload.info!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	49803	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	394	OUT	GET /4/images/mega/dialog-sprite.png?v=57a6bd1346996955 HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:58 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:58 GMT Content-Type: image/png Content-Length: 30699 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-77eb" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:58 UTC	16045	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 1d 08 08 03 00 00 00 4f 57 f9 92 00 00 02 f4 50 4c 54 45 00 00 00 0a 0a 0a f8 fc fd 67 6a 6a 0a 0a 0a ff ff ff ff ff ff 0c 0c 0c ff ff ff ff ff ff ff b9 00 c9 c5 c5 ff ff ff ff d9 76 f1 f0 e7 37 9a d7 f5 f4 f2 7d 8a 83 ff ff ff ff ff ff ff ff ff 2d a4 cb ff ff ff fd fd fd ff ff ff ff ff ff fe fe fe ff ff ff fe ff ff fe fe fe 05 03 03 b0 ec e9 b3 e8 e5 ff a6 00 7a 7c 7b 04 04 04 34 9f d6 ff f9 f2 ff c8 43 00 8a 7b e1 e1 e1 38 9b d4 ff ff fe e7 e7 e7 5b 5b 5c 9a 9a 9a 0a 0a 0a ef ec e9 45 a9 c3 0e 0e 0e fd fd fd 6e 6f 6f 01 01 01 9d a1 9c 05 05 04 91 a1 90 69 70 6b c8 c8 c8 9a 9a 9a 9b 9b 9b ff ce 43 52 55 54 ff b3 20 65 65 65 f3 f8 f7 2f 2f 2f e5 e5 e5 78 78 78 30 30 30 9a 9a 9a d3 d3 d3 f4 Data Ascii: PNGIHDROWPLTEgjjv7}-z\|{4C{8[[\EnooipkCRUT eee///xxx000
2024-07-11 11:36:58 UTC	14654	IN	Data Raw: d9 98 59 a3 39 09 9c 23 c2 3d 9b b5 11 7a fb 07 a7 be d6 f6 da 90 9c e6 3f f6 d5 9a 7d c5 d4 97 ab ca 35 fb 2c 45 63 66 9b c6 bd 57 bc fe cc 22 f4 b6 ad 7e 71 58 ff 6a fb 56 f5 47 ae 0e cf bb 46 f4 fa 3b be 18 52 b8 6f 2c ac dd 93 e6 f8 00 00 00 00 00 00 b8 b0 f5 fd d1 da 24 ad c5 fb c6 42 f1 be b1 50 bc 6f 2c 14 ef 1b 0b c5 fb 00 00 00 00 00 00 00 00 57 3b 05 ac 3e 89 ae be 0c a1 be 90 a3 be 14 a6 bf 98 08 00 00 00 00 00 00 00 00 80 bf b1 ea 86 13 ba 67 13 f1 34 2c 58 99 84 bb 61 91 c6 31 dc 0e cb 5e 4d c0 76 10 2f 9c 02 17 3d be 3c d8 85 6d 87 f3 74 0b 63 48 26 70 69 94 0b 05 76 76 ca 0d 06 be 9d cd 4e 21 90 c0 77 76 eb 98 35 8d 38 8c e3 f8 73 54 72 5b a0 8b 63 e0 02 59 4f 22 41 3a d9 b5 43 d1 22 1d 6a c8 1b 68 37 c5 2e 12 12 c8 eb 10 b2 74 eb d4 f5 36 Data Ascii: Y9#=z?}5,EcfW"~qXjVGF;Ro,$BPo,W;>g4,Xa1^Mv/=<mtcH&pivvN!wv58sTr[cYO"A:C"jh7.t6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	49804	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	410	OUT	GET /4/imagery/sprites-fm-illustration-sprite-wide.e397e234dc118de4.svg HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:58 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:58 GMT Content-Type: image/svg+xml Content-Length: 68811 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-10ccb" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:58 UTC	16017	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 34 30 30 30 22 20 68 65 69 67 68 74 3d 22 35 30 30 22 3e 3c 73 74 79 6c 65 3e 3c 21 5b 43 44 41 54 41 5b 2e 42 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 43 7b 66 69 6c 6c 2d 72 75 6c 65 3a 6e 6f 6e 7a 65 72 6f 7d 2e 44 7b 66 69 6c 6c 3a 23 30 30 63 30 61 36 7d 2e 45 7b 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3a 2e 32 7d 2e 46 7b 66 69 6c 6c 3a 23 30 30 30 7d 2e 47 7b 6d 61 73 6b 3a 75 72 6c 28 23 42 4a 29 7d 2e 48 7b 66 69 6c 6c 3a 23 66 34 64 31 63 36 7d 2e 49 7b 66 69 6c 6c 3a 23 66 31 63 39 62 64 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="4000" height="500"><style><![CDATA[.B{fill:#fff}.C{fill-rule:nonzero}.D{fill:#00c0a6}.E{fill-opacity:.2}.F{fill:#000}.G{mask:url(#BJ)}.H{fill:#f4d1c6}.I{fill:#f1c9bd
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 2e 31 30 37 20 30 20 32 2d 2e 38 39 31 20 32 2d 31 2e 39 39 36 56 36 32 2e 35 30 34 63 30 2d 2e 32 31 34 2e 32 35 2d 2e 33 32 31 2e 34 32 39 2d 2e 31 37 38 6c 31 37 2e 38 35 38 20 31 37 2e 38 31 38 63 31 2e 35 33 36 20 31 2e 35 33 32 20 34 2e 30 37 32 20 31 2e 35 33 32 20 35 2e 36 30 37 20 30 6c 31 37 2e 38 35 38 2d 31 37 2e 38 31 38 63 2e 31 34 33 2d 2e 31 34 33 2e 34 32 39 2d 2e 30 33 36 2e 34 32 39 2e 31 37 38 76 32 35 2e 39 30 37 63 30 20 31 2e 31 30 35 2e 38 39 33 20 31 2e 39 39 36 20 32 20 31 2e 39 39 36 68 38 2e 34 32 39 63 31 2e 31 30 37 20 30 20 32 2d 2e 38 39 31 20 32 2d 31 2e 39 39 36 56 34 32 2e 38 33 33 63 30 2d 31 2e 31 30 35 2d 2e 38 39 33 2d 31 2e 39 39 36 2d 32 2d 31 2e 39 39 36 68 2d 35 2e 37 38 36 63 2d 31 2e 30 33 36 2e 30 33 36 2d 32 Data Ascii: .107 0 2-.891 2-1.996V62.504c0-.214.25-.321.429-.178l17.858 17.818c1.536 1.532 4.072 1.532 5.607 0l17.858-17.818c.143-.143.429-.036.429.178v25.907c0 1.105.893 1.996 2 1.996h8.429c1.107 0 2-.891 2-1.996V42.833c0-1.105-.893-1.996-2-1.996h-5.786c-1.036.036-2
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 2e 32 32 36 2e 33 38 39 73 2d 2e 34 33 37 2e 36 30 31 2d 2e 34 37 36 20 31 2e 30 32 34 68 30 6c 2d 2e 34 30 34 20 34 2e 36 31 35 63 31 2e 30 39 36 2e 32 36 39 20 32 2e 31 34 34 2e 34 36 36 20 33 2e 31 34 34 2e 35 39 31 61 32 34 2e 36 33 20 32 34 2e 36 33 20 30 20 30 20 30 20 33 2e 30 35 38 2e 31 38 38 7a 6d 35 31 2e 34 30 34 2d 2e 34 36 32 76 2d 36 2e 32 30 32 48 39 34 2e 35 37 32 6c 32 31 2e 34 30 34 2d 33 30 2e 32 33 31 63 2e 35 2d 2e 37 33 31 2e 37 35 2d 31 2e 35 33 38 2e 37 35 2d 32 2e 34 32 33 68 30 76 2d 32 2e 38 35 36 48 38 35 2e 38 36 31 76 36 2e 31 37 33 68 32 30 2e 38 32 37 4c 38 35 2e 32 32 36 20 31 32 31 2e 37 36 61 34 2e 36 36 20 34 2e 36 36 20 30 20 30 20 30 2d 2e 35 31 39 2e 39 39 35 20 33 2e 31 31 20 33 2e 31 31 20 30 20 30 20 30 2d 2e 32 Data Ascii: .226.389s-.437.601-.476 1.024h0l-.404 4.615c1.096.269 2.144.466 3.144.591a24.63 24.63 0 0 0 3.058.188zm51.404-.462v-6.202H94.572l21.404-30.231c.5-.731.75-1.538.75-2.423h0v-2.856H85.861v6.173h20.827L85.226 121.76a4.66 4.66 0 0 0-.519.995 3.11 3.11 0 0 0-.2
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 73 6b 20 69 64 3d 22 42 56 22 20 63 6c 61 73 73 3d 22 42 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 6f 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 75 73 65 20 66 69 6c 6c 3d 22 23 33 38 38 65 33 63 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 6f 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 61 37 61 32 65 22 20 6d 61 73 6b 3d 22 75 72 6c 28 23 42 56 29 22 20 64 3d 22 4d 35 38 2e 33 33 33 20 30 68 35 39 2e 35 32 34 76 38 33 2e 34 31 37 48 35 38 2e 33 33 33 7a 22 2f 3e 3c 6d 61 73 6b 20 69 64 3d 22 42 57 22 20 63 6c 61 73 73 3d 22 42 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 75 73 65 20 66 69 6c 6c 3d 22 23 34 63 61 66 35 30 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 22 2f 3e 3c 70 61 74 Data Ascii: sk id="BV" class="B"><use xlink:href="#o"/></mask><use fill="#388e3c" xlink:href="#o"/><path fill="#2a7a2e" mask="url(#BV)" d="M58.333 0h59.524v83.417H58.333z"/><mask id="BW" class="B"><use xlink:href="#p"/></mask><use fill="#4caf50" xlink:href="#p"/><pat
2024-07-11 11:36:58 UTC	3642	IN	Data Raw: 65 28 32 39 2e 35 34 35 20 34 37 2e 37 32 37 29 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 42 6e 22 20 63 6c 61 73 73 3d 22 42 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 41 4a 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 41 4a 22 20 63 6c 61 73 73 3d 22 69 22 2f 3e 3c 67 20 6d 61 73 6b 3d 22 75 72 6c 28 23 42 6e 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 39 2e 30 39 31 20 31 31 2e 33 36 34 29 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 41 4b 22 20 63 6c 61 73 73 3d 22 4d 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 30 34 35 20 33 30 2e 36 36 36 63 32 2e 31 33 33 20 30 20 33 2e 39 39 33 2d 31 2e 39 30 36 20 34 2e 31 33 32 2d 32 2e 30 34 76 2d 32 2e 30 Data Ascii: e(29.545 47.727)"><mask id="Bn" class="B"><use xlink:href="#AJ"/></mask><use xlink:href="#AJ" class="i"/><g mask="url(#Bn)"><g transform="translate(9.091 11.364)"><use xlink:href="#AK" class="M"/><path d="M17.045 30.666c2.133 0 3.993-1.906 4.132-2.04v-2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	49805	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	397	OUT	GET /4/imagery/sprites-fm-mime-90-uni.decaf26625f7b9e2.svg HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:58 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:58 GMT Content-Type: image/svg+xml Content-Length: 89334 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-15cf6" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:58 UTC	16017	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 30 22 20 68 65 69 67 68 74 3d 22 31 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 31 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 61 66 74 65 72 65 66 66 65 63 74 73 2d 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="160" height="160" viewBox="0 0 128 112" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><view id="icon-aftereffects-90" viewBox="0 0 16 16"/><svg width="16" height="16" viewBo
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 2e 38 33 33 20 31 32 2e 33 33 33 48 31 31 2e 35 61 2e 31 36 37 2e 31 36 37 20 30 20 31 20 31 20 30 20 2e 33 33 34 48 39 2e 38 33 33 61 2e 31 36 37 2e 31 36 37 20 30 20 30 20 31 20 30 2d 2e 33 33 34 5a 22 20 66 69 6c 6c 3d 22 23 37 37 37 22 2f 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 65 78 63 65 6c 2d 39 30 22 20 76 69 65 77 42 6f 78 3d 22 34 38 20 30 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 78 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 Data Ascii: .833 12.333H11.5a.167.167 0 1 1 0 .334H9.833a.167.167 0 0 1 0-.334Z" fill="#777"/></g></g></svg><view id="icon-excel-90" viewBox="48 0 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" x="48" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 22 20 78 3d 22 36 34 22 20 79 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 64 65 66 73 3e 3c 70 61 74 68 20 69 64 3d 22 61 74 61 22 20 64 3d 22 4d 30 20 30 68 31 36 76 31 36 48 30 7a 22 2f 3e 3c 2f 64 65 66 73 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 61 74 62 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 74 61 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 67 20 6d 61 73 6b 3d 22 75 72 6c 28 23 61 74 62 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 20 34 2e 36 36 37 68 31 32 76 38 61 2e 36 36 37 2e 36 36 37 20 30 20 30 20 31 2d 2e 36 36 37 2e 36 Data Ascii: " x="64" y="48" xmlns="http://www.w3.org/2000/svg"><defs><path id="ata" d="M0 0h16v16H0z"/></defs><g fill="none" fill-rule="evenodd"><mask id="atb" fill="#fff"><use xlink:href="#ata"/></mask><g mask="url(#atb)"><path d="M2 4.667h12v8a.667.667 0 0 1-.667.6
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 20 78 3d 22 38 30 22 20 79 3d 22 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 69 64 3d 22 62 64 63 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 41 41 46 35 41 35 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 38 35 45 38 38 43 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 Data Ascii: x="80" y="64" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="50%" y1="0%" x2="50%" y2="100%" id="bdc"><stop stop-color="#AAF5A5" offset="0%"/><stop stop-color="#85E88C" offset="100%"/></linearGradient><linearGradient x1="50%" y1="0%" x2="50
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 31 33 38 2e 38 34 32 2e 31 32 2d 2e 33 37 38 2e 31 32 2d 2e 35 36 37 2e 31 32 2d 2e 37 30 34 2d 2e 30 31 37 2d 2e 32 35 38 2d 2e 31 30 33 2d 2e 33 36 31 2d 2e 31 35 35 2d 2e 33 39 36 5a 22 20 66 69 6c 6c 3d 22 23 46 39 34 36 34 36 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 2f 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 70 68 6f 74 6f 73 68 6f 70 2d 39 30 22 20 76 69 65 77 42 6f 78 3d 22 39 36 20 31 36 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 78 3d 22 39 36 22 20 79 3d 22 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 Data Ascii: 138.842.12-.378.12-.567.12-.704-.017-.258-.103-.361-.155-.396Z" fill="#F94646" fill-rule="nonzero"/></g></g></svg><view id="icon-photoshop-90" viewBox="96 16 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" x="96" y="16" xmlns="http://www.w3.org/20
2024-07-11 11:36:58 UTC	7781	IN	Data Raw: 70 2d 63 6f 6c 6f 72 3d 22 23 45 31 44 30 46 44 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 69 64 3d 22 62 77 64 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 2e 39 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 Data Ascii: p-color="#E1D0FD" offset="100%"/></linearGradient><linearGradient x1="50%" y1="0%" x2="50%" y2="100%" id="bwd"><stop stop-color="#FFF" offset="0%"/><stop stop-color="#FFF" stop-opacity=".9" offset="100%"/></linearGradient><linearGradient x1="50%" y1="0%"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	49806	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	396	OUT	GET /4/images/mega/download-dialog.png?v=cf6daa0027e27782 HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:58 GMT Content-Type: image/png Content-Length: 70369 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-112e1" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:58 UTC	16044	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 55 00 00 05 53 08 03 00 00 00 12 a8 f2 d3 00 00 02 fd 50 4c 54 45 00 00 00 f5 f5 f5 ed ed ed fc fc fc ff a4 00 06 09 06 ff ae 00 0f 19 11 01 c2 ed 98 dd dd fd 63 00 00 b4 f3 fe 84 75 de 8f 65 01 ae ed f4 28 2a e6 20 21 00 c1 f9 fd e7 e1 00 ab ed 35 a5 cd ff 5c 50 f4 f4 f4 fb 8f 03 e5 e5 e5 f9 f9 f9 a0 9f 9f fc ca c8 00 94 e1 f9 8a 0c ac 06 05 e9 e9 e9 03 04 03 00 96 e1 ea 21 23 fa 9a 00 00 c2 f9 ca ca ca fa 24 27 00 94 e1 f8 9f 06 ff 97 8f eb 22 23 6e 70 6c dc 9c 06 c5 c5 c5 fb 97 00 ea ef f1 c4 6e 2b 5b d6 70 c9 03 11 fa fa fa d4 d4 d4 9b 9b 9b 9b 9b 9b ec ec ec 0b 98 3e da da d9 00 9f 3a 8f 73 45 d2 76 7a 53 9d 2c 95 b3 09 d5 cd b4 ff ff ff fb fd fc f8 f9 fa f9 fd f8 f6 f6 f6 da e8 ec 00 c6 b2 f5 Data Ascii: PNGIHDRUSPLTEcue(* !5\P!#$'"#npln+[p>:sEvzS,
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: c9 40 d3 17 78 50 b6 cc 02 cf f9 65 9c 84 84 d5 e3 61 8b cf 0e e6 86 56 7d 79 f0 8d 48 0a 3e 51 82 d6 c1 0a af da 5f 62 c4 04 f0 0b 5b 4e d9 21 25 b8 2a f6 9a c3 55 00 b9 24 32 34 bf 38 4e 93 0b 7a ec 55 50 55 e7 86 57 11 fa 97 1e 21 0c 5c 8a 9f d7 eb 1f 3b 14 7a 35 55 6f 40 8a 43 fa 81 84 06 48 68 ab 62 5d 84 e8 43 7f e1 89 da 3c 07 29 65 8e 8d 98 b8 0a 4a a1 22 13 49 85 3b 0b c4 64 e8 5f ae 7d e6 3e 52 8d f9 a0 9a 11 47 2a 4d 81 ee b4 ae 7a 98 3c 5c dd db b6 fa 85 b5 a4 bd 8b 2b 5b 53 5d bd 3b 94 1b 56 e1 38 68 ef 01 20 9a bb c7 c9 2c 38 d6 fe 36 18 8f aa bc c3 f9 74 fc ef ca 4b 88 cd 77 7d 92 94 9f a7 ee 01 5e 24 88 de 01 14 a9 98 00 89 6c 68 61 ce d5 a9 3f 44 da f8 82 a3 aa 52 72 25 3c d1 0e 45 68 35 1d 4e 70 66 81 23 fa ea ee 07 bf f1 b3 6f ba 2c 0e Data Ascii: @xPeaV}yH>Q_b[N!%U$248NzUPUW!\;z5Uo@CHhb]C<)eJ"I;d_}>RGMz<\+[S];V8h ,86tKw}^$lha?DRr%<Eh5Npf#o,
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: b1 55 1b bd d3 56 bd e9 f5 0c 50 8f 29 0e 46 21 16 a5 a7 34 5e 24 ab 8a d7 ad ff c8 eb 0e 4e 42 9c 77 b9 ac b2 4f 2a dc 8a da 2d 8a 0f 8f 9f 00 9a 54 56 bd d3 83 75 05 12 c6 e8 25 48 b2 00 d6 10 e6 4b 65 f9 cf 90 ef e6 b4 9a 5e a5 21 c3 4c ce b2 af e2 06 f0 80 41 07 35 7a 6f 34 77 d0 b1 f1 ad 83 ee a8 6f 4d 7a f2 4b 0e c8 a6 ac e2 aa 83 86 5a ea 8a 19 ff 5a 26 ab 9a c6 7d e8 3f 91 55 4e ab d7 c3 99 f1 ac 7a 7b ae b7 b2 ca d6 7a cd 88 e6 a7 56 e1 8a ba 3b c3 15 9c 4e 26 5a e4 19 61 a3 eb a5 4c 4d e0 c5 ef 4e 2f 34 75 be ac fa d0 1f 5c ed df 1c 06 01 dc 18 19 de 44 5a 0c 7d ff cc 7f 0b 9e ce 91 2e 0c 27 bf 5b c4 1c 8b 98 5b e6 ef 01 b6 eb 41 03 aa 3e bf 9d b8 af 6a 1b 7f fd 13 f4 59 f3 d2 dc 9a 13 39 ab ca ea 8e b4 09 2d 8c 10 72 02 06 0c 0b 53 7c 97 e5 2a Data Ascii: UVP)F!4^$NBwO-TVu%HKe^!LA5zo4woMzKZZ&}?UNz{zV;N&ZaLMN/4u\DZ}.'[[A>jY9-rS\|
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 8b 2b 18 68 41 95 73 3b 97 b8 07 27 6e ce 6d 57 b9 69 fd c9 05 16 31 ea 2f 1b 01 f1 cc 88 e2 0a 3d e4 84 2b f4 30 0a df 02 1e 3b a8 12 c1 0a 4d ab 9d 54 1b b6 f0 e2 d9 7d 40 45 d5 da 3c 8f 58 67 3b 12 da b1 37 31 a7 54 6a 35 4c 5b 12 75 55 fd c1 96 e3 a9 a7 66 6c 3b 4d 5d 93 c2 05 89 7a 3e 48 a6 a8 c1 f2 0e 75 09 b3 88 b5 1d 9a 02 e2 41 5c d5 61 17 44 0b aa ca ab 78 9b fd 08 54 d5 fc 66 45 6b ac 10 6a e2 d1 23 0b 90 79 d2 40 d8 16 8c b6 4e 03 99 d8 e1 ff 81 53 05 a2 d1 b2 da 6c 6b db be b4 70 d6 55 7b 50 e5 d3 19 52 49 33 93 29 e6 b2 0d 5f bd e4 a1 c9 43 d5 15 78 39 96 69 11 09 15 25 4e 21 53 20 dd fb 0f b1 0d e0 f5 fd 1a e3 49 32 4e 95 53 e5 19 50 05 09 07 f1 56 28 55 08 f8 95 3c b9 fc d2 82 aa 7c 05 25 c1 47 d3 d3 73 d5 63 54 a9 fc 9e d0 e0 70 65 78 a8 Data Ascii: +hAs;'nmWi1/=+0;MT}@E<Xg;71Tj5L[uUfl;M]z>HuA\aDxTfEkj#y@NSlkpU{PRI3)_Cx9i%N!S I2NSPV(U<\|%GscTpex
2024-07-11 11:36:58 UTC	5173	IN	Data Raw: 53 4b 60 f2 8b 30 ce 8c ca 02 3a 56 93 fe fa ba de 54 f1 49 c5 c2 88 c1 05 60 b6 0e d7 ab fa 2d ab 43 7e 29 c6 8d 99 ac 07 e8 48 ed 84 d5 4a 6b aa 90 db bf 0f 46 90 67 20 ca a2 c8 02 f6 aa de d4 d2 63 4e c8 bc b1 58 ad a6 bd 19 ac 33 55 08 70 6c ff ca 4a 95 71 40 50 01 18 b2 57 f5 a6 96 ea fc bf 18 e5 85 c5 6a 35 ed f1 75 9d a9 e2 41 75 96 2a 11 76 40 c4 6d 01 18 b0 57 65 5b 6e 59 7d c8 ff 13 e3 c6 fc 9b 4f fa 62 2b 95 a9 c2 56 aa 10 88 85 91 e4 09 88 f2 c5 e7 b7 41 7b 15 4f 2d 81 c9 05 73 c5 55 f7 94 2f b6 52 99 aa de a0 fa b3 91 c3 2f 00 d7 41 7b 55 96 fd 6a 59 2d f2 2b 18 23 57 c7 af c3 4c 78 33 58 65 aa b8 fd 2b 2a 55 c7 73 de 63 01 18 b4 57 f5 17 ed ef f2 5c 38 57 0d 10 d3 6d 06 2b 4c 15 f2 49 05 34 46 94 7b 68 a1 02 30 74 af fa c9 de 19 eb 36 72 03 Data Ascii: SK`0:VTI`-C~)HJkFg cNX3UplJq@PWj5uAuv@mWe[nY}Ob+VA{O-sU/R/A{UjY-+#WLx3Xe+UscW\8Wm+LI4F{h0t6r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	49808	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-11 11:36:58 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=189153 Date: Thu, 11 Jul 2024 11:36:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-11 11:36:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	49807	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	393	OUT	GET /4/imagery/sprites-fm-uni-uni.91766118ff060851.svg HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:58 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:58 GMT Content-Type: image/svg+xml Content-Length: 185560 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close Vary: Accept-Encoding ETag: "668f2fad-2d4d8" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:58 UTC	16016	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 30 22 20 68 65 69 67 68 74 3d 22 31 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 36 20 31 37 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 61 63 63 6f 75 6e 74 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="160" height="160" viewBox="0 0 176 176" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><view id="icon-accounts" viewBox="0 0 16 16"/><svg width="16" height="16" viewBox="0 0
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 2e 30 37 2e 32 30 35 2e 31 32 2e 32 30 35 2e 31 38 20 30 20 2e 31 31 34 2d 2e 31 31 39 2e 31 33 2d 2e 31 39 2e 31 33 61 2e 36 32 38 2e 36 32 38 20 30 20 30 20 31 2d 2e 32 39 36 2d 2e 30 38 37 6c 2d 2e 30 38 32 2d 2e 30 34 37 2d 2e 31 30 36 2e 33 33 35 2e 30 35 31 2e 30 33 63 2e 31 31 37 2e 30 37 2e 32 37 33 2e 31 30 38 2e 34 32 38 2e 31 30 38 2e 33 35 33 20 30 20 2e 35 39 2d 2e 31 39 38 2e 35 39 2d 2e 34 39 33 20 30 2d 2e 32 39 36 2d 2e 32 33 35 2d 2e 34 31 39 2d 2e 34 31 2d 2e 34 38 34 5a 4d 36 2e 32 34 20 36 2e 32 37 6c 2d 2e 33 39 38 2e 31 32 76 2e 32 33 38 68 2d 2e 32 31 35 76 2e 33 34 33 68 2e 32 31 35 76 2e 36 38 63 30 20 2e 31 39 2e 30 33 37 2e 33 32 34 2e 31 31 37 2e 34 31 35 61 2e 34 34 2e 34 34 20 30 20 30 20 30 20 2e 33 32 38 2e 31 33 31 63 2e Data Ascii: .07.205.12.205.18 0 .114-.119.13-.19.13a.628.628 0 0 1-.296-.087l-.082-.047-.106.335.051.03c.117.07.273.108.428.108.353 0 .59-.198.59-.493 0-.296-.235-.419-.41-.484ZM6.24 6.27l-.398.12v.238h-.215v.343h.215v.68c0 .19.037.324.117.415a.44.44 0 0 0 .328.131c.
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 43 45 43 45 43 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 33 45 33 45 33 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 69 64 3d 22 61 76 64 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 46 45 46 45 46 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 70 Data Ascii: op stop-color="#ECECEC" offset="0%"/><stop stop-color="#E3E3E3" offset="100%"/></linearGradient><linearGradient x1="50%" y1="0%" x2="50%" y2="100%" id="avd"><stop stop-color="#FFF" offset="0%"/><stop stop-color="#EFEFEF" offset="100%"/></linearGradient><p
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 22 37 31 2e 36 39 33 25 22 20 69 64 3d 22 61 79 64 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 30 36 42 35 39 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 44 46 32 32 32 37 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 32 36 2e 33 35 25 22 20 79 31 3d 22 38 31 2e 39 35 38 25 22 20 78 32 3d 22 34 39 2e 31 33 37 25 22 20 79 32 3d 22 33 38 2e 32 38 32 25 22 20 69 64 3d 22 61 79 65 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 33 38 38 42 34 31 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 34 43 Data Ascii: "71.693%" id="ayd"><stop stop-color="#F06B59" offset="0%"/><stop stop-color="#DF2227" offset="100%"/></linearGradient><linearGradient x1="26.35%" y1="81.958%" x2="49.137%" y2="38.282%" id="aye"><stop stop-color="#388B41" offset="0%"/><stop stop-color="#4C
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 33 33 63 2d 32 2e 33 36 20 30 2d 34 2e 36 31 32 2e 34 37 35 2d 36 2e 36 36 37 20 31 2e 33 33 34 76 35 2e 35 39 63 30 20 33 2e 38 36 37 20 36 2e 36 36 37 20 36 2e 34 31 20 36 2e 36 36 37 20 36 2e 34 31 73 36 2e 36 36 37 2d 32 2e 35 34 33 20 36 2e 36 36 37 2d 36 2e 34 31 76 2d 35 2e 35 39 41 31 37 2e 32 34 31 20 31 37 2e 32 34 31 20 30 20 30 20 30 20 38 20 31 2e 33 33 33 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 38 2e 33 35 37 63 30 20 2e 38 38 35 2d 2e 35 33 36 20 32 2e 33 30 33 2d 33 2e 30 38 36 20 34 2e 30 33 33 41 31 39 2e 36 30 33 20 31 39 2e 36 30 33 20 30 20 30 20 31 20 38 2e 30 30 31 20 31 34 61 31 39 2e 36 39 37 20 31 39 2e 36 39 37 20 30 20 30 20 31 2d 32 2e 39 35 36 2d 31 2e 36 33 38 43 32 2e 35 32 38 20 Data Ascii: 33c-2.36 0-4.612.475-6.667 1.334v5.59c0 3.867 6.667 6.41 6.667 6.41s6.667-2.543 6.667-6.41v-5.59A17.241 17.241 0 0 0 8 1.333" fill="#FFF"/><path d="M14 8.357c0 .885-.536 2.303-3.086 4.033A19.603 19.603 0 0 1 8.001 14a19.697 19.697 0 0 1-2.956-1.638C2.528
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 22 31 31 32 22 20 79 3d 22 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 35 30 25 22 20 79 31 3d 22 30 25 22 20 78 32 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 69 64 3d 22 62 7a 63 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 41 46 41 46 41 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 70 61 74 68 20 69 64 3d 22 62 7a 61 22 20 64 3d 22 4d 30 20 30 68 31 36 76 31 36 48 30 7a 22 2f 3e 3c 2f 64 65 66 73 3e 3c 67 20 Data Ascii: "112" y="32" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="50%" y1="0%" x2="50%" y2="100%" id="bzc"><stop stop-color="#FFF" offset="0%"/><stop stop-color="#FAFAFA" offset="100%"/></linearGradient><path id="bza" d="M0 0h16v16H0z"/></defs><g
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 30 2e 36 36 37 41 35 2e 33 33 35 20 35 2e 33 33 35 20 30 20 30 20 31 20 30 20 35 2e 33 33 33 20 35 2e 33 33 35 20 35 2e 33 33 35 20 30 20 30 20 31 20 35 2e 33 33 33 20 30 61 35 2e 33 33 35 20 35 2e 33 33 35 20 30 20 30 20 31 20 35 2e 33 33 34 20 35 2e 33 33 33 20 35 2e 33 33 35 20 35 2e 33 33 35 20 30 20 30 20 31 2d 35 2e 33 33 34 20 35 2e 33 33 34 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 6b 63 29 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 2e 36 36 37 20 32 2e 36 36 37 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 36 36 37 20 39 2e 36 32 34 63 30 20 2e 30 38 36 2d 2e 30 37 2e 31 35 34 2d 2e 31 35 37 2e 31 35 34 68 2d 2e 36 37 33 61 2e 31 35 34 2e 31 35 34 20 30 20 30 20 31 2d 2e 31 35 37 2d 2e 31 35 34 56 37 2e 36 31 Data Ascii: 0.667A5.335 5.335 0 0 1 0 5.333 5.335 5.335 0 0 1 5.333 0a5.335 5.335 0 0 1 5.334 5.333 5.335 5.335 0 0 1-5.334 5.334Z" fill="url(#ckc)" transform="translate(2.667 2.667)"/><path d="M10.667 9.624c0 .086-.07.154-.157.154h-.673a.154.154 0 0 1-.157-.154V7.61
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 31 2e 30 31 31 2e 30 30 31 48 36 2e 35 39 34 6c 2e 30 31 31 2e 30 30 31 68 2e 30 30 34 6c 2e 30 30 37 2e 30 30 31 68 2e 30 31 6c 2e 30 31 31 2e 30 30 31 2e 30 31 31 2e 30 30 31 2e 30 31 2e 30 30 31 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 31 2e 30 31 2e 30 30 31 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 31 2e 30 31 2e 30 30 31 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 31 2e 30 31 2e 30 30 31 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 31 2e 30 30 32 2e 30 31 2e 30 30 33 2e 30 31 31 2e Data Ascii: 1.011.001H6.594l.011.001h.004l.007.001h.01l.011.001.011.001.01.001.011.002.011.001.01.001.011.002.011.001.01.001.011.002.011.001.01.001.011.002.011.002.01.002.011.002.011.002.01.002.011.002.011.002.01.002.011.002.011.002.01.002.011.002.011.002.01.003.011.
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 37 34 37 2d 33 2e 33 38 20 31 2e 30 30 37 2d 31 2e 34 33 33 2d 2e 37 38 37 2d 32 2e 38 31 33 2d 31 2e 36 2d 33 2e 39 37 33 2d 32 2e 37 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 7a 63 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 35 2e 32 36 20 33 2e 30 32 2e 37 35 35 2e 39 32 34 2e 31 34 33 2e 31 38 2e 30 35 2e 30 36 33 63 2e 35 30 36 2e 36 35 33 2e 35 31 32 20 31 2e 30 35 33 2d 2e 34 31 34 20 31 2e 39 36 37 2d 2e 33 38 37 2e 33 38 2d 2e 32 39 34 2e 38 36 36 20 30 20 31 2e 31 36 6c 32 2e 38 39 33 20 32 2e 38 39 33 63 2e 32 39 33 2e 32 39 33 2e 37 38 2e 33 38 37 20 31 2e 31 36 20 30 20 2e 38 37 38 2d 2e 38 39 31 20 31 2e 32 38 32 2d 2e 39 32 20 31 2e 38 39 33 2d 2e 34 37 6c 2e 31 33 38 2e 31 30 36 2e 35 32 32 2e 34 32 31 2e 35 38 2e 34 37 36 63 2e 34 32 Data Ascii: 747-3.38 1.007-1.433-.787-2.813-1.6-3.973-2.76Z" fill="url(#czc)"/><path d="m5.26 3.02.755.924.143.18.05.063c.506.653.512 1.053-.414 1.967-.387.38-.294.866 0 1.16l2.893 2.893c.293.293.78.387 1.16 0 .878-.891 1.282-.92 1.893-.47l.138.106.522.421.58.476c.42
2024-07-11 11:36:58 UTC	16384	IN	Data Raw: 20 32 20 30 20 31 20 31 20 30 20 30 20 30 2d 32 20 30 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 35 2e 36 36 36 20 37 2e 34 30 35 20 32 2e 31 33 38 20 31 2e 30 39 2d 2e 32 37 32 2e 35 33 34 2d 32 2e 31 33 39 2d 31 2e 30 39 7a 4d 34 2e 39 37 20 37 2e 31 30 33 6c 32 2e 35 37 2d 31 2e 35 34 35 2e 33 31 2e 35 31 34 2d 32 2e 35 37 32 20 31 2e 35 34 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 3c 76 69 65 77 20 69 64 3d 22 69 63 6f 6e 2d 73 69 64 65 62 61 72 2d 63 6f 6c 6c 61 70 73 65 2d 6c 65 66 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 31 34 34 20 31 36 20 31 36 22 2f 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 79 3d 22 31 Data Ascii: 2 0 1 1 0 0 0-2 0Z"/><path d="m5.666 7.405 2.138 1.09-.272.534-2.139-1.09zM4.97 7.103l2.57-1.545.31.514-2.572 1.546z"/></g></g></g></g></svg><view id="icon-sidebar-collapse-left" viewBox="0 144 16 16"/><svg width="16" height="16" viewBox="0 0 16 16" y="1

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.17	49809	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4788 Host: login.live.com
2024-07-11 11:36:58 UTC	4788	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-11 11:36:59 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 11 Jul 2024 11:35:59 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: 48cf57df-d782-411f-a3ca-ed79c4c271b8 PPServer: PPV: 30 H: SN1PEPF0002F1A9 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 11 Jul 2024 11:36:58 GMT Connection: close Content-Length: 11153
2024-07-11 11:36:59 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	49810	66.203.125.14	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:58 UTC	400	OUT	GET /cs?id=215118645&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:59 UTC	327	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 2 Content-Length: 2 Connection: close
2024-07-11 11:36:59 UTC	2	IN	Data Raw: 2d 32 Data Ascii: -2

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.17	49811	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:59 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-07-11 11:36:59 UTC	209	IN	HTTP/1.1 400 Bad Request X-MSEdge-Ref: Ref A: CB15538162E9474D82CE2714D6D4C656 Ref B: EWR311000103039 Ref C: 2024-07-11T11:36:59Z Date: Thu, 11 Jul 2024 11:36:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.17	49812	162.208.16.210	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:59 UTC	593	OUT	GET /4/images/mega/icons-sprite.png?v=48528e60724d858e HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:59 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:36:59 GMT Content-Type: image/png Content-Length: 118009 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-1ccf9" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:36:59 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 06 00 00 09 32 08 06 00 00 00 2b 31 30 e0 00 00 01 26 69 43 43 50 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 00 00 28 cf 63 60 60 32 70 74 71 72 65 12 60 60 c8 cd 2b 29 0a 72 77 52 88 88 8c 52 60 3f cf c0 c6 c0 cc 00 06 89 c9 c5 05 8e 01 01 3e 20 76 5e 7e 5e 2a 03 06 f8 76 8d 81 11 44 5f d6 05 99 c5 40 1a e0 4a 2e 28 2a 01 d2 7f 80 d8 28 25 b5 38 99 81 81 d1 00 c8 ce 2e 2f 29 00 8a 33 ce 01 b2 45 92 b2 c1 ec 0d 20 76 51 48 90 33 90 7d 04 c8 e6 4b 87 b0 af 80 d8 49 10 f6 13 10 bb 08 e8 09 20 fb 0b 48 7d 3a 98 cd c4 01 36 07 c2 96 01 b1 4b 52 2b 40 f6 32 38 e7 17 54 16 65 a6 67 94 28 18 5a 5a 5a 2a 38 a6 e4 27 a5 2a 04 57 16 97 a4 e6 16 2b 78 e6 25 e7 17 15 e4 17 25 96 a4 a6 00 d5 42 dc 07 06 82 Data Ascii: PNGIHDR2+10&iCCPAdobe RGB (1998)(c``2ptqre``+)rwRR`?> v^~^vD_@J.((%8./)3E vQH3}KI H}:6KR+@28Teg(ZZZ8'W+x%%B
2024-07-11 11:36:59 UTC	16384	IN	Data Raw: 7b 49 1f 69 4a d3 1a 5c 26 f9 96 fc af 66 45 af 5e bd 66 f4 eb d7 cf dd a7 4f 9f 62 b3 6f df be 64 27 9b 0a dd 52 77 60 10 ce 16 03 7d 41 8d 93 93 93 9b 87 ea fd e1 f9 9e 4e e7 56 69 12 05 f6 3e 88 28 64 4b cf 03 c5 f9 57 88 33 9b d0 1f 7b ba 06 82 d0 d4 d4 cc a6 35 be 46 7c 75 5b f0 b9 67 80 9f 79 39 11 85 7c e9 96 9c 23 4e 47 f6 08 bd ee e5 9a 76 72 7e b6 04 80 fe 53 ea c7 5a 30 f1 5f c2 c0 8a dd bb 77 6f 7f 99 0d 31 c8 33 1f 13 71 08 15 61 c8 f2 10 7b 22 ec 85 41 e1 3c d8 5d 8f ca 3c 09 15 3b 57 7c 6d c7 c0 34 1c 4f 67 85 f7 72 4d 3c 7d 0e c2 34 11 95 82 b0 76 81 0e ce 84 32 5d 5d 2a 78 9e 29 34 5d 9a f8 14 e6 7b b9 a6 9b 9c 37 98 e3 31 38 93 59 18 58 e1 b1 9f 0e 66 7a 12 05 b1 10 de c7 35 f3 91 26 2f 08 c2 90 2b 7f 26 cb 87 30 8c 03 97 7b 88 39 a1 c2 Data Ascii: {IiJ\&fE^fObod'Rw`}ANVi>(dKW3{5F\|u[gy9\|#NGvr~SZ0_wo13qa{"A<]<;W\|m4OgrM<}4v2]]*x)4]{718YXfz5&/+&0{9
2024-07-11 11:36:59 UTC	16384	IN	Data Raw: 87 e3 d1 12 34 24 42 9f 92 42 71 f2 09 c3 10 f0 1d 06 1e b5 88 02 43 99 7f 0d 9e aa 4f 49 a1 38 f9 84 e1 45 59 66 7a 82 44 25 a6 28 fc 57 16 53 2d 08 1a a2 4f 49 a1 38 f9 84 81 2b ff 7e 22 41 31 bf e1 82 9d 12 98 62 17 97 ff d6 27 a4 50 9c 80 48 ae e8 dd a0 41 83 f2 c6 d2 fe dc c7 71 2e 3c 1c 11 02 75 3a 52 5c 04 15 4c 4b fb 97 93 40 4d 11 45 f9 a2 ca 22 0e 06 b8 fe 7f 7f cd 7f 85 e2 5f 88 a0 00 c4 c7 c7 77 6c d7 ae dd 10 f0 93 84 84 84 e9 12 fc 67 5c 87 0e 1d ae c2 b9 d3 28 1a 41 14 84 f2 60 0a 38 1c fc 4c e2 59 4e 06 5f 05 ff 23 31 3e ca fa fb 85 d1 62 29 e4 4b cc 00 c6 01 a8 a6 e5 40 a1 38 8e a8 56 ad 5a 9d de be 7d fb d7 c1 83 12 cf f5 20 04 61 05 b6 ab b1 3d d8 b1 63 c7 0c 6c 37 81 c3 c1 6a 0e 8b 42 14 18 07 7e 20 f1 54 58 97 f7 81 2b 24 2a db 61 89 Data Ascii: 4$BBqCOI8EYfzD%(WS-OI8+~"A1b'PHAq.<u:R\LK@ME"_wlg\(A`8LYN_#1>b)K@8VZ} a=cl7jB~ TX+$*a
2024-07-11 11:36:59 UTC	16384	IN	Data Raw: 2a 5c 81 38 d8 3d 57 82 73 20 60 35 b0 77 64 05 d8 d6 d3 60 26 b3 b3 71 f0 e0 c1 35 49 5c f7 e1 43 0f 3d c4 0c 9f fc dc 73 cf 95 0f 60 26 46 c0 5c 1f 83 8a 34 11 15 ec 08 2a 13 07 39 f5 e4 cc 4a 5f d7 b1 57 60 fe fc f9 ad 70 dd ca b5 6b d7 66 a1 02 de 19 e8 67 85 fb ba 01 df 7d 94 5d a2 ec 7d 30 7c 20 10 84 c1 b0 0e 72 c4 b9 c8 61 d9 57 9b db f4 68 66 b4 00 7f e3 b5 b8 af 9b ec b6 04 f1 9b 15 a5 29 41 ab e1 a0 34 2f 7a 49 77 25 0b 7b 53 f0 0c 19 0e 7d 4c c6 3e 3c 6e c7 2c 4b 0a 03 ca 75 7e 30 85 c1 cb 33 ba cd 22 0e 86 30 94 91 01 4e 4d c0 8f a4 59 b6 1c 6c 64 cb 8d a0 d2 0d e1 38 05 8a 02 fe b8 d7 76 dc b0 61 c3 1a 1b e2 80 07 ba d0 ce b9 12 22 46 55 71 3f 3f a0 92 53 8c 16 a0 19 d3 83 c7 64 98 f3 f1 76 30 ad 09 8e 55 c0 7d 9d 86 fb 7b 07 69 e9 34 fd d3 Data Ascii: \8=Ws `5wd`&q5I\C=s`&F\49J_W`pkfg}]}0\| raWhf)A4/zIw%{S}L><n,Ku~03"0NMYld8va"FUq??Sdv0U}{i4
2024-07-11 11:36:59 UTC	16384	IN	Data Raw: d8 4f e8 21 03 84 e0 47 18 7b 45 53 d9 3b 49 30 f4 70 83 3c 0c 84 1f e3 51 fe fd 81 03 07 56 b5 48 18 7a 71 ac 3b 8d 3b 93 8e 6f 29 f7 60 2a fb b0 29 ef f0 07 38 1e 7c c7 97 23 14 79 09 03 cd 8a 24 51 40 99 5f 21 08 27 10 26 fc 01 cf e1 3e 77 e2 60 b7 30 b0 a7 70 33 27 73 4f f0 f2 66 77 46 ea 2f 61 e0 72 af f2 e8 05 79 87 7d 3d 89 83 af 85 81 46 22 60 e4 ef 40 00 c6 63 f9 87 31 9f 00 a3 7f d8 9c a0 c4 be 6f 0d a1 c4 69 70 1a 38 0e 9f 7b 15 39 61 80 91 cf a6 21 49 3d a7 40 46 cf b9 84 ae 6e 92 94 7f 19 bc 0a 47 59 4a 44 e2 73 82 45 c2 b0 cc 4d 0e a1 93 9b d8 7a ab 9b f2 8d ec 12 06 6c ef 84 fd b3 60 e8 03 b1 5c 0b 51 78 0a e2 30 0b bc c7 d5 5c 05 3b 85 81 47 78 6e 00 67 83 03 d8 cb 1a c0 9f 6f 74 15 7a f9 43 18 b8 cc 6b a6 8b c1 41 4f e2 e0 6b 61 a0 a1 49 Data Ascii: O!G{ES;I0p<QVHzq;;o)`*)8\|#y$Q@_!'&>w`0p3'sOfwF/ary}=F"`@c1oip8{9a!I=@FnGYJDsEMzl`\Qx0\;GxngotzCkAOkaI
2024-07-11 11:36:59 UTC	16384	IN	Data Raw: bd c1 15 86 61 b2 40 ba 89 4a 0f 1d 9e f1 e6 76 70 c3 4d 54 fa 71 43 02 e1 36 72 53 7b cf e0 73 34 dd 1b 51 30 79 79 7a 58 f1 49 80 3d 8f c1 8c 83 9c 33 b9 5c 15 15 14 f3 e7 31 74 e4 07 79 d0 15 b6 51 3e 3b dd 34 3e ae 7e 80 08 c3 3f 7c ab f1 ad de ce b1 e7 e7 1d 6c e3 90 a3 4b 20 b8 dc 2e ea 37 83 cf 51 f3 02 1c 4f e7 29 83 bd a0 40 7c 1e 03 5d 90 b6 83 ef 83 f5 54 51 42 71 7f 82 13 8f 3e 0c cd ef c3 32 e8 44 f2 71 55 02 e0 3f 50 72 f5 69 7a f0 6e 01 ae c8 43 cd a3 15 01 76 7e ea 15 e6 56 70 9e da 5e 23 00 fe 87 59 18 ce f0 04 ad c7 8b cc ad d6 a6 3f 34 4f 9e f9 28 10 f8 54 18 0e f1 4c cd ab 8a f2 1f 9a 65 98 6c d1 21 9f c7 ce 33 0c 9b c5 49 f7 10 88 30 68 3b 39 e7 11 55 d4 ff d0 70 ce 96 2e c8 ef 63 cc f8 69 b8 cb 59 20 ea 4a f7 10 5c c4 c2 d0 94 93 dd Data Ascii: a@JvpMTqC6rS{s4Q0yyzXI=3\1tyQ>;4>~?\|lK .7QO)@\|]TQBq>2DqU?PriznCv~Vp^#Y?4O(TLel!3I0h;9Up.ciY J\
2024-07-11 11:36:59 UTC	16384	IN	Data Raw: 29 29 a9 b2 0f 12 91 fe b9 ed 5a 70 51 81 04 be 1a c7 e8 75 79 3d 90 9e 8a 44 cf 59 a8 ce 75 a3 19 98 11 4a 15 ad 07 03 91 18 c4 c7 c7 df 8d a5 4f f3 34 7e 79 50 8b 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 03 b4 84 8e 9d b4 b8 4b 3f d7 e2 3b ac d5 e2 3a 1c 75 d0 b1 8e 6d d8 e7 d7 ba 8d 55 9d b4 54 f5 b9 96 a2 d6 62 79 d4 41 e7 fa e7 b4 cf f6 fa 0c 40 7d fa e3 b7 fb a1 0e 4f a1 2e 44 5a a7 6d 03 94 3c 59 59 50 0c 04 a1 ed 65 8d b4 f8 f6 19 5a 5c 7b cd 23 a9 0c ca da 5a b7 14 d5 08 c6 9f 81 a5 e6 91 ce 32 96 d7 4d 1b 8c fa f4 c3 6f 3d e5 78 6b bb 7b 52 99 c1 4a de c5 20 28 Data Ascii: ))ZpQuy=DYuJO4~yP@ @ @ @ @ @ @ @ @ @ @ K?;:umUTbyA@}O.DZm<YYPeZ\{#Z2Mo=xk{RJ (
2024-07-11 11:36:59 UTC	3662	IN	Data Raw: 6e 37 f5 24 24 48 c3 88 ae 87 1e a2 ee 97 5e a2 ee 67 9e a1 ae 3b ee 20 c7 a2 c5 74 74 fd 16 ef fe f7 66 55 ea 75 6c 06 18 c3 50 f2 3f 0e 9f 15 98 75 ab 87 3c f9 78 f1 d5 57 5f 3d bd a3 a3 a3 25 4d 44 0c fb cb 5b 29 a7 c6 22 64 95 97 fd 4a aa 68 a5 c4 4a 8b 34 8c f8 f9 cf 7f 7e b3 c9 73 9b f4 e4 88 ba 2a 31 94 31 b0 2a da 9c 94 5c 6b a7 0d 25 56 ca 6a ec a0 e6 8e 1e ea e9 3b 45 2d 62 99 dd ec 3e b6 3c cf b2 61 59 81 e5 0a 3d ea 93 5f d0 6f 02 95 55 5d f4 71 ac 8b 56 ad 71 f9 9c e0 0f d7 b9 68 c5 c7 0e 5a 95 22 c2 b5 56 37 59 3a 7b a5 fa b4 ba 74 ad 4f 74 6d 7a bd b4 3f 67 93 5b 92 b2 ff a3 af 95 52 73 ae c5 fb ba d1 d9 45 09 d5 76 ca 6f ea 20 8b db 53 97 36 a7 ee c7 26 20 63 58 22 42 f8 86 86 06 49 bc ae d4 4d 7d 9c 5a 44 5a 90 75 f3 35 86 ea 6a ea 7e ea Data Ascii: n7$$H^g; ttfUulP?u<xW_=%MD[)"dJhJ4~s11\k%Vj;E-b><aY=_oU]qVqhZ"V7Y:{tOtmz?g[RsEvo S6& cX"BIM}ZDZu5j~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.17	49814	66.203.125.16	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:36:59 UTC	649	OUT	POST /cs?id=215118646&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive Content-Length: 55 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:36:59 UTC	55	OUT	Data Raw: 5b 7b 22 61 22 3a 22 61 63 68 22 7d 2c 7b 22 70 22 3a 5b 22 33 4c 5a 30 68 4c 59 42 22 5d 2c 22 6e 22 3a 5b 5d 2c 22 73 22 3a 30 2c 22 61 22 3a 22 71 62 71 22 7d 5d Data Ascii: [{"a":"ach"},{"p":["3LZ0hLYB"],"n":[],"s":0,"a":"qbq"}]
2024-07-11 11:37:00 UTC	327	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 5 Content-Length: 5 Connection: close
2024-07-11 11:37:00 UTC	5	IN	Data Raw: 5b 31 2c 30 5d Data Ascii: [1,0]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.17	49816	2.23.209.155	443

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:00 UTC	2571	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAdS%2BGHudbb5WIkBD%2BXZIP42DGg6aEgVvjQEo5UYaTfYoxVdOzP%2B2Um%2BzOZjg1ebCcBcH2LlA/8M6ZsuXhx/KpY7VgkX6acOlgXFt4zL/qk/27FqOLgUr920WSMV9wTYEpZoRGQTK0vjeI7mlEZHdjkzlwPqfkPfAUrx3Y1dPhyBoVvnAv3KxOkz6O8MrX%2BFew9E20PJK9iSFYNPR74/Ag8NfNJCxXk99h324DlglYqdSpdb%2BMTXaWlohhr3k5qt2u8Zb0wV5oZtiujOPShh2PzNlMl8zTM7ZItnVGT1HUK2Js/bGv1tdmEWW5md%2BiqdFH6MnkCqlTWortneBwkr99LsDZgAACI0a/ebQFehjqAGeOBjA7aroBpBQDbMUocRDjqMaAB9%2BXZ1RH3kpCxEYvWhchiQo4hyGlPEBjS91aHUkv9nwMSoUw4jvR1s3ODnJxB8rVokLzLa7Y/c6I8ocEiRs7F5sKap3VVaNzZ%2BY4/FYfxSFZEyvzoTvRL7bh9MpAyYvqBo0N5a736QabxqU9KVGZpmSFQKeeZSUsF3ON%2BfPpx7XsOdkKLhh/F%2BpTyvLtUKUeZrytD9IPB974eSxlrZdPevG2iTm2exVipfJBOx/dchMbBm/jQqkpyq0DdL/4ZaZkCMxhkSIf8039MG1kYaPmNooBf0JRsNQs7lm/nrKy%2BoUyC3pNCppmMkMdeqWh7M4kfhL0tuPlJ%2BV5wMN0jt6HYM9n/VQUMnTTr06JPSdAeNN9YzG08Iw/HiGyDUn3I%2BENJcpqlTUZrozo27WMIUVR2hW3VNUPBvliR51jckH5ydYZG8IHDXs%2BGP9efPqPB81DMA4UnCFwLofiVRJuWpVJBgwSfIKHj8sWrIvSkfUqRiBbPrX863os/0tb%2Bp89JTdmE4WPH15zBxoDr5Nk9VQxp4O7hbq1 [TRUNCATED] X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1720697816 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: A71CA88E59BB42708F000623B42E87D2 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-07-11 11:37:00 UTC	1147	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 668fc3dcf68f48528672903771319afd X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Thu, 11 Jul 2024 11:37:00 GMT Connection: close Set-Cookie: _EDGE_S=SID=39CE2B9B1F4264730EA03F221E336599&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Tue, 05-Aug-2025 11:37:00 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=39CE2B9B1F4264730EA03F221E336599; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.1bd01702.1720697820.271fe52
2024-07-11 11:37:00 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.17	49817	185.206.25.71	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:00 UTC	393	OUT	GET /4/images/mega/icons-sprite.png?v=48528e60724d858e HTTP/1.1 Host: na.static.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:00 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 11:37:00 GMT Content-Type: image/png Content-Length: 118009 Last-Modified: Thu, 11 Jul 2024 01:04:45 GMT Connection: close ETag: "668f2fad-1ccf9" Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Accept-Ranges: bytes
2024-07-11 11:37:00 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 06 00 00 09 32 08 06 00 00 00 2b 31 30 e0 00 00 01 26 69 43 43 50 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 00 00 28 cf 63 60 60 32 70 74 71 72 65 12 60 60 c8 cd 2b 29 0a 72 77 52 88 88 8c 52 60 3f cf c0 c6 c0 cc 00 06 89 c9 c5 05 8e 01 01 3e 20 76 5e 7e 5e 2a 03 06 f8 76 8d 81 11 44 5f d6 05 99 c5 40 1a e0 4a 2e 28 2a 01 d2 7f 80 d8 28 25 b5 38 99 81 81 d1 00 c8 ce 2e 2f 29 00 8a 33 ce 01 b2 45 92 b2 c1 ec 0d 20 76 51 48 90 33 90 7d 04 c8 e6 4b 87 b0 af 80 d8 49 10 f6 13 10 bb 08 e8 09 20 fb 0b 48 7d 3a 98 cd c4 01 36 07 c2 96 01 b1 4b 52 2b 40 f6 32 38 e7 17 54 16 65 a6 67 94 28 18 5a 5a 5a 2a 38 a6 e4 27 a5 2a 04 57 16 97 a4 e6 16 2b 78 e6 25 e7 17 15 e4 17 25 96 a4 a6 00 d5 42 dc 07 06 82 Data Ascii: PNGIHDR2+10&iCCPAdobe RGB (1998)(c``2ptqre``+)rwRR`?> v^~^vD_@J.((%8./)3E vQH3}KI H}:6KR+@28Teg(ZZZ8'W+x%%B
2024-07-11 11:37:00 UTC	16384	IN	Data Raw: 7b 49 1f 69 4a d3 1a 5c 26 f9 96 fc af 66 45 af 5e bd 66 f4 eb d7 cf dd a7 4f 9f 62 b3 6f df be 64 27 9b 0a dd 52 77 60 10 ce 16 03 7d 41 8d 93 93 93 9b 87 ea fd e1 f9 9e 4e e7 56 69 12 05 f6 3e 88 28 64 4b cf 03 c5 f9 57 88 33 9b d0 1f 7b ba 06 82 d0 d4 d4 cc a6 35 be 46 7c 75 5b f0 b9 67 80 9f 79 39 11 85 7c e9 96 9c 23 4e 47 f6 08 bd ee e5 9a 76 72 7e b6 04 80 fe 53 ea c7 5a 30 f1 5f c2 c0 8a dd bb 77 6f 7f 99 0d 31 c8 33 1f 13 71 08 15 61 c8 f2 10 7b 22 ec 85 41 e1 3c d8 5d 8f ca 3c 09 15 3b 57 7c 6d c7 c0 34 1c 4f 67 85 f7 72 4d 3c 7d 0e c2 34 11 95 82 b0 76 81 0e ce 84 32 5d 5d 2a 78 9e 29 34 5d 9a f8 14 e6 7b b9 a6 9b 9c 37 98 e3 31 38 93 59 18 58 e1 b1 9f 0e 66 7a 12 05 b1 10 de c7 35 f3 91 26 2f 08 c2 90 2b 7f 26 cb 87 30 8c 03 97 7b 88 39 a1 c2 Data Ascii: {IiJ\&fE^fObod'Rw`}ANVi>(dKW3{5F\|u[gy9\|#NGvr~SZ0_wo13qa{"A<]<;W\|m4OgrM<}4v2]]*x)4]{718YXfz5&/+&0{9
2024-07-11 11:37:00 UTC	16384	IN	Data Raw: 87 e3 d1 12 34 24 42 9f 92 42 71 f2 09 c3 10 f0 1d 06 1e b5 88 02 43 99 7f 0d 9e aa 4f 49 a1 38 f9 84 e1 45 59 66 7a 82 44 25 a6 28 fc 57 16 53 2d 08 1a a2 4f 49 a1 38 f9 84 81 2b ff 7e 22 41 31 bf e1 82 9d 12 98 62 17 97 ff d6 27 a4 50 9c 80 48 ae e8 dd a0 41 83 f2 c6 d2 fe dc c7 71 2e 3c 1c 11 02 75 3a 52 5c 04 15 4c 4b fb 97 93 40 4d 11 45 f9 a2 ca 22 0e 06 b8 fe 7f 7f cd 7f 85 e2 5f 88 a0 00 c4 c7 c7 77 6c d7 ae dd 10 f0 93 84 84 84 e9 12 fc 67 5c 87 0e 1d ae c2 b9 d3 28 1a 41 14 84 f2 60 0a 38 1c fc 4c e2 59 4e 06 5f 05 ff 23 31 3e ca fa fb 85 d1 62 29 e4 4b cc 00 c6 01 a8 a6 e5 40 a1 38 8e a8 56 ad 5a 9d de be 7d fb d7 c1 83 12 cf f5 20 04 61 05 b6 ab b1 3d d8 b1 63 c7 0c 6c 37 81 c3 c1 6a 0e 8b 42 14 18 07 7e 20 f1 54 58 97 f7 81 2b 24 2a db 61 89 Data Ascii: 4$BBqCOI8EYfzD%(WS-OI8+~"A1b'PHAq.<u:R\LK@ME"_wlg\(A`8LYN_#1>b)K@8VZ} a=cl7jB~ TX+$*a
2024-07-11 11:37:00 UTC	16384	IN	Data Raw: 2a 5c 81 38 d8 3d 57 82 73 20 60 35 b0 77 64 05 d8 d6 d3 60 26 b3 b3 71 f0 e0 c1 35 49 5c f7 e1 43 0f 3d c4 0c 9f fc dc 73 cf 95 0f 60 26 46 c0 5c 1f 83 8a 34 11 15 ec 08 2a 13 07 39 f5 e4 cc 4a 5f d7 b1 57 60 fe fc f9 ad 70 dd ca b5 6b d7 66 a1 02 de 19 e8 67 85 fb ba 01 df 7d 94 5d a2 ec 7d 30 7c 20 10 84 c1 b0 0e 72 c4 b9 c8 61 d9 57 9b db f4 68 66 b4 00 7f e3 b5 b8 af 9b ec b6 04 f1 9b 15 a5 29 41 ab e1 a0 34 2f 7a 49 77 25 0b 7b 53 f0 0c 19 0e 7d 4c c6 3e 3c 6e c7 2c 4b 0a 03 ca 75 7e 30 85 c1 cb 33 ba cd 22 0e 86 30 94 91 01 4e 4d c0 8f a4 59 b6 1c 6c 64 cb 8d a0 d2 0d e1 38 05 8a 02 fe b8 d7 76 dc b0 61 c3 1a 1b e2 80 07 ba d0 ce b9 12 22 46 55 71 3f 3f a0 92 53 8c 16 a0 19 d3 83 c7 64 98 f3 f1 76 30 ad 09 8e 55 c0 7d 9d 86 fb 7b 07 69 e9 34 fd d3 Data Ascii: \8=Ws `5wd`&q5I\C=s`&F\49J_W`pkfg}]}0\| raWhf)A4/zIw%{S}L><n,Ku~03"0NMYld8va"FUq??Sdv0U}{i4
2024-07-11 11:37:00 UTC	16384	IN	Data Raw: d8 4f e8 21 03 84 e0 47 18 7b 45 53 d9 3b 49 30 f4 70 83 3c 0c 84 1f e3 51 fe fd 81 03 07 56 b5 48 18 7a 71 ac 3b 8d 3b 93 8e 6f 29 f7 60 2a fb b0 29 ef f0 07 38 1e 7c c7 97 23 14 79 09 03 cd 8a 24 51 40 99 5f 21 08 27 10 26 fc 01 cf e1 3e 77 e2 60 b7 30 b0 a7 70 33 27 73 4f f0 f2 66 77 46 ea 2f 61 e0 72 af f2 e8 05 79 87 7d 3d 89 83 af 85 81 46 22 60 e4 ef 40 00 c6 63 f9 87 31 9f 00 a3 7f d8 9c a0 c4 be 6f 0d a1 c4 69 70 1a 38 0e 9f 7b 15 39 61 80 91 cf a6 21 49 3d a7 40 46 cf b9 84 ae 6e 92 94 7f 19 bc 0a 47 59 4a 44 e2 73 82 45 c2 b0 cc 4d 0e a1 93 9b d8 7a ab 9b f2 8d ec 12 06 6c ef 84 fd b3 60 e8 03 b1 5c 0b 51 78 0a e2 30 0b bc c7 d5 5c 05 3b 85 81 47 78 6e 00 67 83 03 d8 cb 1a c0 9f 6f 74 15 7a f9 43 18 b8 cc 6b a6 8b c1 41 4f e2 e0 6b 61 a0 a1 49 Data Ascii: O!G{ES;I0p<QVHzq;;o)`*)8\|#y$Q@_!'&>w`0p3'sOfwF/ary}=F"`@c1oip8{9a!I=@FnGYJDsEMzl`\Qx0\;GxngotzCkAOkaI
2024-07-11 11:37:00 UTC	16384	IN	Data Raw: bd c1 15 86 61 b2 40 ba 89 4a 0f 1d 9e f1 e6 76 70 c3 4d 54 fa 71 43 02 e1 36 72 53 7b cf e0 73 34 dd 1b 51 30 79 79 7a 58 f1 49 80 3d 8f c1 8c 83 9c 33 b9 5c 15 15 14 f3 e7 31 74 e4 07 79 d0 15 b6 51 3e 3b dd 34 3e ae 7e 80 08 c3 3f 7c ab f1 ad de ce b1 e7 e7 1d 6c e3 90 a3 4b 20 b8 dc 2e ea 37 83 cf 51 f3 02 1c 4f e7 29 83 bd a0 40 7c 1e 03 5d 90 b6 83 ef 83 f5 54 51 42 71 7f 82 13 8f 3e 0c cd ef c3 32 e8 44 f2 71 55 02 e0 3f 50 72 f5 69 7a f0 6e 01 ae c8 43 cd a3 15 01 76 7e ea 15 e6 56 70 9e da 5e 23 00 fe 87 59 18 ce f0 04 ad c7 8b cc ad d6 a6 3f 34 4f 9e f9 28 10 f8 54 18 0e f1 4c cd ab 8a f2 1f 9a 65 98 6c d1 21 9f c7 ce 33 0c 9b c5 49 f7 10 88 30 68 3b 39 e7 11 55 d4 ff d0 70 ce 96 2e c8 ef 63 cc f8 69 b8 cb 59 20 ea 4a f7 10 5c c4 c2 d0 94 93 dd Data Ascii: a@JvpMTqC6rS{s4Q0yyzXI=3\1tyQ>;4>~?\|lK .7QO)@\|]TQBq>2DqU?PriznCv~Vp^#Y?4O(TLel!3I0h;9Up.ciY J\
2024-07-11 11:37:00 UTC	16384	IN	Data Raw: 29 29 a9 b2 0f 12 91 fe b9 ed 5a 70 51 81 04 be 1a c7 e8 75 79 3d 90 9e 8a 44 cf 59 a8 ce 75 a3 19 98 11 4a 15 ad 07 03 91 18 c4 c7 c7 df 8d a5 4f f3 34 7e 79 50 8b 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 03 b4 84 8e 9d b4 b8 4b 3f d7 e2 3b ac d5 e2 3a 1c 75 d0 b1 8e 6d d8 e7 d7 ba 8d 55 9d b4 54 f5 b9 96 a2 d6 62 79 d4 41 e7 fa e7 b4 cf f6 fa 0c 40 7d fa e3 b7 fb a1 0e 4f a1 2e 44 5a a7 6d 03 94 3c 59 59 50 0c 04 a1 ed 65 8d b4 f8 f6 19 5a 5c 7b cd 23 a9 0c ca da 5a b7 14 d5 08 c6 9f 81 a5 e6 91 ce 32 96 d7 4d 1b 8c fa f4 c3 6f 3d e5 78 6b bb 7b 52 99 c1 4a de c5 20 28 Data Ascii: ))ZpQuy=DYuJO4~yP@ @ @ @ @ @ @ @ @ @ @ K?;:umUTbyA@}O.DZm<YYPeZ\{#Z2Mo=xk{RJ (
2024-07-11 11:37:00 UTC	3662	IN	Data Raw: 6e 37 f5 24 24 48 c3 88 ae 87 1e a2 ee 97 5e a2 ee 67 9e a1 ae 3b ee 20 c7 a2 c5 74 74 fd 16 ef fe f7 66 55 ea 75 6c 06 18 c3 50 f2 3f 0e 9f 15 98 75 ab 87 3c f9 78 f1 d5 57 5f 3d bd a3 a3 a3 25 4d 44 0c fb cb 5b 29 a7 c6 22 64 95 97 fd 4a aa 68 a5 c4 4a 8b 34 8c f8 f9 cf 7f 7e b3 c9 73 9b f4 e4 88 ba 2a 31 94 31 b0 2a da 9c 94 5c 6b a7 0d 25 56 ca 6a ec a0 e6 8e 1e ea e9 3b 45 2d 62 99 dd ec 3e b6 3c cf b2 61 59 81 e5 0a 3d ea 93 5f d0 6f 02 95 55 5d f4 71 ac 8b 56 ad 71 f9 9c e0 0f d7 b9 68 c5 c7 0e 5a 95 22 c2 b5 56 37 59 3a 7b a5 fa b4 ba 74 ad 4f 74 6d 7a bd b4 3f 67 93 5b 92 b2 ff a3 af 95 52 73 ae c5 fb ba d1 d9 45 09 d5 76 ca 6f ea 20 8b db 53 97 36 a7 ee c7 26 20 63 58 22 42 f8 86 86 06 49 bc ae d4 4d 7d 9c 5a 44 5a 90 75 f3 35 86 ea 6a ea 7e ea Data Ascii: n7$$H^g; ttfUulP?u<xW_=%MD[)"dJhJ4~s11\k%Vj;E-b><aY=_oU]qVqhZ"V7Y:{tOtmz?g[RsEvo S6& cX"BIM}ZDZu5j~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.17	49819	66.203.125.16	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:00 UTC	649	OUT	POST /cs?id=215118647&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive Content-Length: 46 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:00 UTC	46	OUT	Data Raw: 5b 7b 22 61 22 3a 22 67 22 2c 22 76 22 3a 32 2c 22 67 22 3a 31 2c 22 73 73 6c 22 3a 31 2c 22 70 22 3a 22 33 4c 5a 30 68 4c 59 42 22 7d 5d Data Ascii: [{"a":"g","v":2,"g":1,"ssl":1,"p":"3LZ0hLYB"}]
2024-07-11 11:37:01 UTC	331	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 341 Content-Length: 341 Connection: close
2024-07-11 11:37:01 UTC	341	IN	Data Raw: 5b 7b 22 73 22 3a 36 35 31 39 34 31 31 2c 22 61 74 22 3a 22 6a 4f 7a 46 6d 76 54 39 68 38 44 74 46 5f 6f 4a 56 68 4b 6a 64 72 53 63 5a 42 51 62 4f 56 56 50 46 6f 55 2d 68 45 63 4c 42 7a 74 56 58 31 70 55 6c 32 35 47 74 6b 52 6b 77 54 55 57 39 2d 45 6b 50 61 77 5a 59 6d 55 2d 56 35 4d 37 47 68 32 46 6f 35 5a 58 4c 51 22 2c 22 6d 73 64 22 3a 31 2c 22 74 6c 22 3a 30 2c 22 67 22 3a 22 68 74 74 70 73 3a 2f 2f 67 66 73 32 34 30 6e 31 30 31 2e 75 73 65 72 73 74 6f 72 61 67 65 2e 6d 65 67 61 2e 63 6f 2e 6e 7a 2f 64 6c 2f 64 59 5f 50 5f 64 6c 2d 79 4c 45 64 78 41 65 4a 62 66 4e 54 72 5f 4a 51 43 63 74 54 33 48 53 63 30 38 43 65 57 76 6e 59 4d 51 54 4b 76 44 47 4d 5f 57 59 54 57 69 48 73 71 47 70 62 71 34 41 37 75 5a 36 6c 54 62 63 41 32 45 37 71 35 4a 76 30 4c 4c Data Ascii: [{"s":6519411,"at":"jOzFmvT9h8DtF_oJVhKjdrScZBQbOVVPFoU-hEcLBztVX1pUl25GtkRkwTUW9-EkPawZYmU-V5M7Gh2Fo5ZXLQ","msd":1,"tl":0,"g":"https://gfs240n101.userstorage.mega.co.nz/dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.17	49818	66.203.125.14	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:00 UTC	400	OUT	GET /cs?id=215118646&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:01 UTC	327	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 2 Content-Length: 2 Connection: close
2024-07-11 11:37:01 UTC	2	IN	Data Raw: 2d 32 Data Ascii: -2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.17	49825	66.203.125.14	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:01 UTC	400	OUT	GET /cs?id=215118647&j=a2c194a15c94c200&v=3&lang=en&domain=meganz HTTP/1.1 Host: g.api.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:02 UTC	327	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 2 Content-Length: 2 Connection: close
2024-07-11 11:37:02 UTC	2	IN	Data Raw: 2d 32 Data Ascii: -2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.17	49821	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:02 UTC	703	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/0-131071 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:03 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 131072 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:03 UTC	16061	IN	Data Raw: ad 49 3c f1 1a 0a c7 71 75 c0 b2 1d 7b c7 93 eb 79 79 16 88 80 ea 9d 15 7b 9d 7c 94 0f f9 b4 75 ee fe 0b fc 33 b4 4e f1 24 c4 4e 3b 17 27 74 91 e4 5a 65 3a 68 20 82 80 a3 67 95 fc 51 13 91 61 84 d9 95 fe 00 6c af 94 e8 e5 8c 8d 87 5b 9a 96 89 49 62 f6 01 93 fe fd 2f 03 5e d0 01 54 57 a4 8e 17 6a f7 41 b7 2b 01 72 48 d3 e8 19 c2 d7 6a ad c3 05 12 58 61 07 ad 9c fb 04 7e de ee 84 3b 0a 98 6e 08 0e bb a1 49 74 c6 ac 19 58 c5 99 f3 f3 29 8c 0d 51 96 50 e5 ae 23 50 da e6 7e 47 96 ae 31 ed e3 3a 8f 73 db a9 dc 8c 49 e3 b5 5e f7 ef e6 ac 5d 43 dd 1b 83 f6 06 b6 e2 09 d3 66 5b 45 6e 57 a7 50 54 65 04 a8 e7 68 69 42 0b 4e 9c 5a b7 6a 5c ee bd 17 6e d1 f5 56 7e 84 7a 01 75 21 cd 47 c2 fc ce 06 19 2f d5 a9 f6 bd 26 70 71 b5 31 fa c7 f2 c4 8e 2a 58 7c b8 7f ee 94 54 Data Ascii: I<qu{yy{\|u3N$N;'tZe:h gQal[Ib/^TWjA+rHjXa~;nItX)QP#P~G1:sI^]Cf[EnWPTehiBNZj\nV~zu!G/&pq1*X\|T
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 0b 9e c3 6f 65 18 4b 18 74 0a f4 9a 72 dc 1b 0c 39 87 f9 da 8a ba 4b 35 0f 0f 00 85 80 f3 f0 17 50 01 ea 22 98 93 30 5c 0c 2d 74 90 19 18 47 81 e3 1d c8 52 a1 51 d7 14 ab 52 9a 30 b9 85 d7 e1 b5 50 0a 4a 22 af 70 17 99 41 9b 04 3d 30 76 42 15 17 64 d0 51 37 d0 27 a4 a1 e4 cf 2d 1c c3 78 d5 46 b2 a3 9d 9d 02 40 07 8f ce d0 36 56 0a 20 ba ef 93 15 76 18 45 87 86 34 0e 93 03 36 95 a3 e9 42 54 9b 2e 8f df 4e da 8a 4a 8b 15 9e ee 51 2b d9 f1 1f c0 f3 ef c6 e1 8c d6 2f a0 6f ed 0e a6 a6 29 4c e3 2f ad cd 69 8d fc 09 08 56 d8 ac 37 01 ec 29 31 0a 20 97 04 57 15 76 60 ae 24 9a 40 fd 8e a6 81 3e 59 50 0f 2c 37 19 6a d7 8d a2 52 f4 c5 a8 4d 7b 8c 0b 7b f2 8f 16 7c c0 8d ca 1e 3c a8 0f 8e 01 0e 6d 02 d6 92 70 34 50 f5 30 ee bc c3 55 77 17 a7 a2 1f b5 e9 86 7f d4 3c Data Ascii: oeKtr9K5P"0\-tGRQR0PJ"pA=0vBdQ7'-xF@6V vE46BT.NJQ+/o)L/iV7)1 Wv`$@>YP,7jRM{{\|<mp4P0Uw<
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 2a 49 a1 51 46 84 bf a5 c2 14 4d 4c de 74 9f 82 2f be 2e 97 2a d5 3b 5a e7 78 da 7b f9 aa 78 a0 20 e9 65 eb 18 ed c7 0f 05 40 2d d8 e2 b9 d3 89 3f 61 1f aa 30 4f b3 29 8b 67 74 cf d3 b7 e9 45 36 8c af 8a 41 75 36 49 e5 5a 93 34 77 de 90 44 cb 67 42 db 8d 86 3c 9b 7c f3 31 61 2d aa e0 c0 68 31 67 6b 6d 8d 5e 5e ee 91 f3 ee ad 50 a9 0e be ab b3 41 f2 06 19 b6 17 d8 a2 eb 8b 6a d9 b9 82 5a dc 65 97 2f 39 89 1a 5b 18 ca ef dd 3f 41 bc 13 b7 ce 55 6e bc 79 ed d3 b2 a2 72 35 85 d3 46 22 b6 a1 24 55 96 4a 6c 9b 17 dd bf 7b 58 16 33 9e dc 7e 7a 30 27 44 06 8d 78 69 a0 3f a5 dc 6a 4c 9c b3 6e 15 5d 4f bf bc 3c da a0 8a b9 91 2d 1f 64 85 5d 3c 86 54 25 27 44 2d 9d 32 2f b3 77 20 ad 8f 5e 26 ad 9d da 34 2a ec 04 e8 b5 60 92 78 f5 9f c0 69 b3 82 0a c9 76 94 46 f5 7a Data Ascii: IQFMLt/.;Zx{x e@-?a0O)gtE6Au6IZ4wDgB<\|1a-h1gkm^^PAjZe/9[?AUnyr5F"$UJl{X3~z0'Dxi?jLn]O<-d]<T%'D-2/w ^&4*`xivFz
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 77 bc fe 63 b3 01 97 6f 38 52 39 66 18 a0 bc d2 18 6c df e0 ad 83 cf bc b3 c7 47 26 1a db 98 a2 c8 51 9d 14 b3 b7 99 f9 62 63 33 09 f9 16 e6 af a3 35 00 18 8e b9 2d 7a db ed ba 77 f5 2d f2 06 fd 01 27 cc 92 7b 60 8f 10 f0 83 7d 4d b5 01 26 68 ff 17 1d 66 c8 57 7c e9 06 21 70 b7 a0 b2 cd 8c 6e 2d 9b 35 e9 e9 4a 1b dd 6e 38 57 e2 b1 ae d3 af 4d b7 15 51 e4 b6 05 5a ce e6 3d 6f 54 66 59 a7 ee 6c 00 cb 6b 07 c4 ad a8 65 3f 58 f7 c1 57 5d 9e cf 7c 8d ec 04 61 7e 8b 2f 5c 1d b7 05 07 39 8e 7f 62 02 ec 69 b5 b1 20 3f a1 0d 85 8b bd b0 31 33 ec 1d 90 93 77 ce 3e 67 de 7f 7d 85 ed 4d 79 40 f8 36 5b b3 a5 c4 60 79 4d 8e cb 1d e4 05 c9 aa 02 00 be 4a d6 2e da 62 45 6d 62 01 9f d5 d8 a5 e3 89 85 cf 9b 11 25 00 c0 98 ca 50 e3 d1 61 7c d1 e9 95 6b af 02 9c 0f 82 2d fb Data Ascii: wco8R9flG&Qbc35-zw-'{`}M&hfW\|!pn-5Jn8WMQZ=oTfYlke?XW]\|a~/\9bi ?13w>g}My@6[`yMJ.bEmb%Pa\|k-
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: b4 54 ae c9 c3 15 55 54 3a d2 1b 3f 40 c8 29 4f 41 81 19 3c 58 eb 33 22 ef da 7d a9 59 52 fb b7 bc f2 69 13 e7 04 13 dd 78 70 86 6b e1 5b 02 00 5c 0e 4b 37 3d 88 d8 8f ff 58 e3 74 cc ec 34 ba f4 e3 d0 d9 0e 0e aa 52 95 ee cf d6 dc 2d 78 09 57 2b 5a 30 30 42 be bb 6a 84 5d 41 e4 be a5 62 00 27 0e 42 68 1e e5 e8 35 c5 98 81 9b 66 8e ac f3 de 6e e7 2b 5d 66 b6 1d 29 94 5c b9 1d d6 e1 79 23 6e 42 3b 27 26 2a 2e 1b 1d af 7e 6d 9d 2b 23 4b b3 cb 8b 5a cc 83 d4 6c d3 7c 16 7c bd 30 b8 f5 ce 09 eb f7 b5 c7 6b 1e 6a 2c eb 6a 8c 97 09 f6 f1 11 a8 a1 b9 29 1d 77 92 3e 8e ef f3 8d a5 2c 71 5d 1e cc e5 3f d6 6c 8c 26 00 35 63 61 71 c9 f3 e1 bc 3e 61 7e c2 96 3b 84 84 14 53 5f fa 54 10 e4 29 4a 8e 76 da bd ee 1b 54 76 e6 52 c9 84 26 b1 fd 78 37 95 29 15 dc 95 16 44 71 Data Ascii: TUT:?@)OA<X3"}YRixpk[\K7=Xt4R-xW+Z00Bj]Ab'Bh5fn+]f)\y#nB;'&*.~m+#KZl\|\|0kj,j)w>,q]?l&5caq>a~;S_T)JvTvR&x7)Dq
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: b9 cc 88 05 0e ac 07 8d 3c e9 31 c4 82 ea c9 f7 ca b5 29 e7 8a 52 4d 73 c7 ca 6f 3f 2c 51 ca ff b1 ac 52 7b 6b 68 06 b4 5d 9c 97 27 0e d5 50 04 c8 80 f2 87 5e 30 ce c5 0f ce f4 90 72 8f e8 63 5d 51 9d 80 6c 0c 1f 21 8c 1a 9b ea 0d 3b 8e 26 6b e8 a2 db 6c 0e 3d c1 8b 2a 7e 56 b8 dc c0 ad 02 b2 78 49 fb b9 46 fc e4 c5 c3 d3 5a 0e ac 06 ca 96 db 8f 1a 60 58 fa 6c a3 cd cd 10 a1 2b ba f4 49 83 fa b6 2b 37 1c f8 28 72 0f bb 95 d9 b0 17 d9 02 a9 57 8a 34 48 08 8c 6e 81 80 a2 8b 4c 32 67 a8 43 05 32 63 4a 19 e7 7d 6b 70 e1 41 5c 4a a2 91 5a 98 fc 0a 56 28 af 92 89 13 1d 9b 5f 5e d7 53 9e 21 7a 5b 5b f7 2a a5 77 1e eb 10 d5 be 79 05 ff ea dc de 20 6d 7e 82 fd 89 e8 16 37 4d df 1c 0c 28 ac 9d f7 dc cc ce 78 44 8b c9 3f f5 19 ff 21 85 67 d2 bb f9 c9 36 24 a5 f4 c9 Data Ascii: <1)RMso?,QR{kh]'P^0rc]Ql!;&kl=~VxIFZ`Xl+I+7(rW4HnL2gC2cJ}kpA\JZV(_^S!z[[wy m~7M(xD?!g6$
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: d1 69 e8 7f 19 1f 39 cb 86 c8 bc 32 5f c2 34 d4 c7 e5 06 49 4c 5f 57 90 92 ff 6d 6d 17 7e 84 26 b4 06 8b 17 29 37 12 f0 43 44 04 69 39 e8 73 fb eb e7 65 cd c5 e0 9b d5 8a 28 23 60 94 56 56 1a 3e 65 52 53 50 60 c4 6d a0 d2 92 b3 ac 38 74 69 ab b7 3e 2b 98 66 03 54 57 51 23 93 f1 1f c9 a9 d4 fe dd ee 38 f5 e8 14 3e b0 af 34 50 57 19 b8 30 c1 2d 92 c0 c9 1a fc 82 32 bd ad 97 03 97 73 23 e1 ea 42 f9 5f 78 4d bf d2 28 28 e5 30 70 a4 6a 56 cd 5b 0f e9 a7 c1 d6 3f c8 4d f3 38 df 20 02 14 8a d2 08 36 6d eb cb 2b 02 99 f4 34 e6 d9 10 62 4c af 4c 42 a0 0b 3b f5 1a 8b c5 ce de 4c 34 fd e8 5c 18 5a 6f ee f8 33 f6 c0 81 b3 39 fe e7 01 ea cb a4 6b b2 9a 3d c5 3e d2 7c 4f 72 5d 26 1b 0e 23 38 c7 23 1c 5c 7a 96 67 d9 25 50 4e 6d 06 c5 62 13 aa 8b 9c 77 75 53 3f 07 04 ae Data Ascii: i92_4IL_Wmm~&)7CDi9se(#`VV>eRSP`m8ti>+fTWQ#8>4PW0-2s#B_xM((0pjV[?M8 6m+4bLLB;L4\Zo39k=>\|Or]&#8#\zg%PNmbwuS?
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: ff 6a 25 15 22 81 e8 b4 c7 08 6f d3 55 d4 55 75 a7 cb ad db 15 30 f5 f1 a7 fa 7e b1 38 5d 4a 71 ae b5 af d7 f7 54 cd a8 ef 62 be 9e c4 77 88 c7 55 e0 bf 5a 67 82 04 64 fb 24 24 8d dd 84 c9 15 f8 6e 53 fc f9 90 bd 66 ba 9f 3b 18 d2 b8 79 b9 a4 d4 85 c0 89 e1 5f 09 04 8d 57 9c 53 80 d5 18 4b d1 bc 2d b5 db d3 77 66 bc 60 57 a0 98 ef 13 bc 29 e7 68 7d 9a 0c e7 86 52 f3 98 c3 02 ef df 66 b2 70 d3 b2 ee a3 9b 74 4f 09 f8 90 6e a5 fc 78 d9 f2 36 6f d3 ba a2 d0 b3 63 6a 09 a2 2c ef 9f 8f ee 62 1d 21 a8 0e bb 9a c9 b2 ea 89 aa 02 b9 d9 3e 4e 50 1e db 9d 97 cb ca b8 70 a3 65 15 8c b9 47 46 84 bc 34 56 cf 75 64 cb bd 5f 9d 48 65 e4 fa fd f7 d1 7c 2b 43 98 64 5d 46 02 0b f4 5b 79 3c c2 3c 20 85 5b d6 02 8a e1 9e 7c a3 3f 2c 61 e4 7e 3f bd 3f 4a fd 1d 22 21 a8 c1 5b Data Ascii: j%"oUUu0~8]JqTbwUZgd$$nSf;y_WSK-wf`W)h}RfptOnx6ocj,b!>NPpeGF4Vud_He\|+Cd]F[y<< [\|?,a~??J"![
2024-07-11 11:37:03 UTC	323	IN	Data Raw: e1 17 53 d8 3f 65 99 36 1a 85 c5 de 10 6f e6 ac ee 1a 33 62 6c 10 d8 2a df bf 09 2e ad 9f c6 a1 0e 09 13 c1 bf 70 64 20 45 ea b5 50 aa 46 23 14 59 5d 4e 27 fd ae ba bc 57 bf ce bf b2 89 4b 42 d2 18 01 8f 02 47 e5 c4 18 50 15 77 d0 d6 a3 b9 44 ee 41 49 45 bc 79 c2 95 20 38 94 0b 90 7b 09 9e 61 7d 76 93 c0 b8 6c c8 91 1c 92 90 61 75 20 c2 fb e0 54 6f 55 5d bd 50 9a 05 be 4b 44 9b 4d 3f 5d b5 35 0b 3e d3 8e 89 61 f2 03 9b ef 2f cd 4c 15 fc d0 a3 c3 85 25 3d a2 a8 be a4 d6 71 3e 3a b1 b3 55 2d 1e 38 f1 ea 29 e2 8b e8 00 f8 5f 8b 6c df a9 42 1a 32 f2 1e 9a 67 16 73 f5 fb 71 9c d0 a0 d9 1c 61 8c ff c0 9c df 92 df 98 2b 02 14 e4 27 3a e3 3e 09 fd b1 87 34 68 4f 70 1a f0 e8 4f 38 24 49 e7 8b e2 54 7f 90 1c 71 6b 61 9c 38 f0 27 62 28 ee 78 56 ef 7a 94 55 0f 97 a4 Data Ascii: S?e6o3bl*.pd EPF#Y]N'WKBGPwDAIEy 8{a}vlau ToU]PKDM?]5>a/L%=q>:U-8)_lB2gsqa+':>4hOpO8$ITqka8'b(xVzU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.17	49824	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:02 UTC	708	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/131072-393215 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:03 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 262144 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:03 UTC	16061	IN	Data Raw: 52 63 56 37 f6 93 9c ff 3f 35 b9 e6 4a cf ad 9a d2 62 20 63 7b 04 99 67 f1 9a cc d9 3c 62 85 43 7e 93 9c dd 49 39 1e 88 27 12 96 ef 78 1d cf ea 1c 6e 12 aa 1d 25 02 1c 3a bc 35 69 5c 35 ca 20 81 e3 80 f3 7c 08 03 81 46 02 48 0f 69 2c ff cb c4 d2 d1 e4 02 08 19 e6 d1 fb 69 29 3d 1d bb 91 f0 a7 ee 1c f4 b6 10 d5 23 4f 0d 40 1f cf 7d f1 10 3f 44 4f 0e b2 c6 8f 82 03 bb b9 78 0b 88 69 2e 0c 7f 6f bf e9 b5 ca e1 ed 60 e5 38 46 18 ef 63 9f 2b 06 aa db d0 d5 16 a1 e1 2c b0 fc f0 c8 a7 8f ef 89 87 8a 8d 2f 04 89 0a ba 0f 7c fd f0 d1 e3 b9 71 b8 7b c3 bf 0b 90 79 f8 92 b1 4c 15 13 e0 8a cd 9e 85 50 dc 7b 91 d7 a3 75 39 2b 0f 5d ba 08 ef 8c 6c 45 d4 65 6e 3a 97 61 93 e2 8d 04 9a 13 d3 81 3b 9b 3e 78 e3 ff 62 03 0a 2a 20 f9 07 b9 e1 3d 2a e3 8a 27 fb 5b e5 42 d7 85 Data Ascii: RcV7?5Jb c{g<bC~I9'xn%:5i\5 \|FHi,i)=#O@}?DOxi.o`8Fc+,/\|q{yLP{u9+]lEen:a;>xb* =*'[B
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: d2 8f 34 c7 64 09 0f 6e 0a f7 3b bc f3 94 a8 7a 91 9b 20 26 a8 52 63 44 33 2a 89 83 14 a5 d2 8f fe 95 2a 4a e5 89 bb 13 b1 00 1b 54 89 8a a1 46 5a c6 92 31 0f 3b 5d b2 ba 9e 28 e3 06 3e 23 f0 03 c6 60 8b 6b d6 3d bb 80 98 3e 77 3a 88 cf 8f 2a 0d 32 fb a2 cb 30 f0 4d f1 a4 3f e2 db 27 71 11 54 a5 a2 cd 4a 32 75 ec a2 cc 47 a6 12 f6 e0 72 11 18 95 eb ef 88 4f c7 04 93 06 9a 91 3a e0 12 08 98 1b 88 16 de fb 96 65 64 1b 03 91 6c 4b fa b3 db ce 55 4d b2 69 ab 3e e7 c7 ec cf 3c bd 91 7b e0 38 a4 11 35 fd f3 84 25 2e d6 18 fd c4 28 fe 66 63 b9 15 7b b0 5d c2 fe df 7b d7 ab 18 70 92 91 e1 bc c9 26 e9 ff 32 1d cb 01 7a 16 d4 35 ee 43 04 3d 89 51 93 dc a3 55 fb 39 1d c2 e4 3d b1 33 88 48 6e 9c 5e 4c 2f ca f5 44 b5 c4 7b 37 92 69 f7 d3 66 fb 57 50 5e 40 3f a6 30 e0 Data Ascii: 4dn;z &RcD3*JTFZ1;](>#`k=>w:20M?'qTJ2uGrO:edlKUMi><{85%.(fc{]{p&2z5C=QU9=3Hn^L/D{7ifWP^@?0
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: a1 b6 32 1e 50 32 a6 9b 99 d1 cc f2 44 4f b0 8a 67 54 9f 0a 1f 54 e5 e0 91 04 13 3b 0a 0c e6 61 5a 56 17 e0 a7 64 b0 3a e6 3c e0 43 b7 fe 53 87 d1 ad 90 97 32 46 8f 7d 75 26 fb 32 79 75 64 10 9b 54 2f da a2 c9 dc 8a c9 60 b2 3a 2a 68 2e 45 a5 45 72 b5 d5 8e e9 c1 e5 e5 99 8e 62 e4 a6 5c 9b 85 6c 56 85 ee 84 9e a7 ef 37 ea 2b 77 d3 3f af 50 7d 82 ce 2a 68 2e e2 23 33 90 fb bf d3 20 46 0c 48 eb c7 fb ba 9f 6c 81 b6 42 7b 2b 4c 28 2e 65 dd d2 1b ab 20 ad 8d c6 ea de f9 88 c8 cd 57 90 bb 69 8b 19 9b b1 39 28 9c bc 29 9c 1f b9 fe f0 76 9d 52 18 2f fe 9a 23 35 e0 51 84 9b 59 cb e7 43 82 46 0a 70 71 67 a8 1c 84 66 19 52 24 1c f6 04 95 ba 33 f5 5b 39 cf 12 e6 bf 28 5f f3 e6 13 39 aa 28 09 1e d9 fd 61 8a 31 54 9d ac 05 d8 57 87 2f bf 5e 0c 12 e9 33 3d 41 a8 49 6c Data Ascii: 2P2DOgTT;aZVd:<CS2F}u&2yudT/`:h.EErb\lV7+w?P}h.#3 FHlB{+L(.e Wi9()vR/#5QYCFpqgfR$3[9(_9(a1TW/^3=AIl
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 7b 15 af 00 be ac ed ad e8 f7 c9 8f 40 9e 74 4a f9 6b 8d a0 4c 3c bb d6 e5 a3 a2 03 8e 34 bf d5 c8 3f 63 8c 8d 9b 71 6c b1 90 c6 8c 40 6f 51 1b 85 52 9b 78 e2 98 96 0d 9f 7c cd 7c ef c8 d9 61 e0 b8 fc 40 f9 d0 f8 6b 25 84 16 d5 f2 ee 39 8c 9c aa 6e af 88 22 bc 75 14 15 f6 42 26 b0 e5 ec 51 8d 4f 79 29 e5 4c 13 2d e6 98 30 22 23 18 85 f3 98 f0 0e 36 98 ca 05 01 6a 6e 7c f8 b9 97 da e6 fe cc fe 9f 49 11 a8 d9 e6 0a f7 84 8c 16 b4 76 5e 15 c8 d9 0a 3d c3 e9 e5 e2 91 96 27 86 43 3a 9f 38 d5 9c 0d 17 13 fb 81 8d 9e 4d cb 5d 6e 90 f0 29 36 60 b5 d1 da a8 b1 43 3f 50 7f 54 01 6b fa 1b 94 30 93 83 7e 92 3f 16 91 58 02 fb f0 9b af b7 e4 9d 79 83 17 47 18 8b f4 03 29 86 81 e0 b2 fa 6a ef 6d 10 a7 a8 c2 8f 17 fd f5 8f 0d d3 10 17 94 44 af 8d 2a b7 e6 8c 04 fd 6f ca Data Ascii: {@tJkL<4?cql@oQRx\|\|a@k%9n"uB&QOy)L-0"#6jn\|Iv^='C:8M]n)6`C?PTk0~?XyG)jmD*o
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 14 af 6d d7 f0 0f 35 4e 14 d6 ca 32 ee 01 4c cd 10 5c 76 8a a8 e9 9c 9c be 0d df 40 68 64 c1 3f b1 0a ac f8 fa 6f 29 2d 04 96 e3 b6 74 d9 dc 8d bb 4c d7 4c 19 8a fa 8d 3c aa 71 e6 df 4d ec 04 ef 04 c8 1a 2f 33 5f 65 b3 90 c9 d8 92 b1 69 e1 8c 38 93 71 93 d5 d3 77 3f 11 89 89 e6 cb c5 45 ba 8e 2e 8d f7 0b 44 79 d7 22 94 bc 77 7b 8d 2e f6 ae d8 f1 88 80 fb a7 1b 8d 2c 29 96 b4 03 ed 36 a9 5c 77 f1 79 ec 9b 4b aa 77 95 03 c8 3e 77 65 7e c8 ed 4e 1a 12 93 d1 7b 36 21 0e 8f 79 43 5a e9 d5 ba 15 9e a0 20 4a 2c dd 28 9e 3b 9d 25 14 34 e4 b6 ec b6 82 37 83 18 ae 6a f8 52 64 82 b3 0e c4 c1 48 fb 58 ba f8 d0 49 7f cc 15 85 05 26 03 ff bf d5 b8 15 84 96 d8 12 4e 8d df 4a 97 89 97 b9 98 62 a9 19 aa dd 89 e7 cc 0c 5e c1 fe fc bd 0c b7 00 b3 27 4f 9e f3 e1 c5 89 87 eb Data Ascii: m5N2L\v@hd?o)-tLL<qM/3_ei8qw?E.Dy"w{.,)6\wyKw>we~N{6!yCZ J,(;%47jRdHXI&NJb^'O
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: e0 fe ce a7 cf ed 89 d7 55 ed c3 a7 37 60 8d 87 83 3d cc 8f be c9 92 5f 30 50 3c 93 15 dd ef 7b eb 1c e6 cc 2b 8b 72 6d 00 00 e8 39 ad b2 6a 66 1b 2a ae 7b 4f 2a cd ed dc 21 f1 78 8b 26 ca 26 97 da 15 d8 6e 60 6e 95 c1 90 14 56 43 cc e3 2b 80 62 10 06 8a 52 91 2a e0 76 d6 4e 8c da f7 7a b7 10 7e 18 aa 6e 1b 28 92 7d 46 db 82 31 54 0e ef 11 11 80 bb 0b 59 af 19 ed 72 ce 77 e9 7e a0 52 45 8b b5 a3 ba 77 29 2e a0 04 30 62 e6 f3 12 96 28 1b 2f 8f be a2 7b 9c b2 81 72 29 3e f0 5e e7 2a 1a 7b 6b 68 ea ee ba 36 cf 9c 12 a3 02 fd 13 e2 72 2d cc f4 c8 72 78 17 8b 70 29 df 83 4d 3a 90 4e b1 4d 2c ce 45 fd 69 bf 68 98 56 39 84 4f e4 c6 9e 21 a6 31 38 ae 00 28 34 a8 19 eb dc 58 b1 08 2f 4e a7 a6 c3 7d cc 6f a4 f5 75 c3 e4 c3 ea 7c 9f c9 45 8a b1 03 08 99 00 b8 41 cf Data Ascii: U7`=_0P<{+rm9jf{O!x&&n`nVC+bRvNz~n(}F1TYrw~REw).0b(/{r)>^{kh6r-rxp)M:NM,EihV9O!18(4X/N}ou\|EA
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 5a 01 ca e2 1a c1 ea ed 8f 74 65 d5 6d fe 3f c7 13 ae 87 7e 99 24 4c 3b ca 10 dd 69 d7 c3 5c 46 8a e8 aa ff cb 6c 35 5d 8c 4c be a4 d5 39 3c 0b 2b a8 be cb ec dd 0d 08 64 78 32 72 f8 8b 24 c4 f3 04 b6 a0 c2 5a 09 bf 03 29 81 4b fb 91 de f9 27 21 06 2c e4 27 fd c7 dd fe 5f 9c cf 64 be 3c 6f 8e 00 d0 c9 fe aa 47 38 bb b0 d2 df 08 3e 53 49 d6 ac a3 c3 f2 e2 f8 c2 24 c2 c1 63 93 4d 50 37 0f e1 93 3d 71 4c d2 8f 3c 03 3f e3 ff 3a 96 d0 48 30 40 e1 20 1c 5a 96 98 43 75 7d 7b 47 ae 03 d7 66 c8 c4 8a 41 54 df 83 27 4c 9c e2 f8 2f be a3 0e 2f 1c 17 61 1a cf 41 7a fe 3f 4e 3c 9f bc 92 c4 4c a0 c5 4c 41 f2 48 37 84 1f 77 e8 4a 43 99 fb 5c cb 4d e1 0f ab 1c cb 92 dc 0f f6 5c 6c 5d 69 a8 75 01 5e 71 01 a7 85 ae 5c 58 47 9a b2 a7 40 8a 44 bb fb d6 f2 2d 3b 44 08 f6 84 Data Ascii: Ztem?~$L;i\Fl5]L9<+dx2r$Z)K'!,'_d<oG8>SI$cMP7=qL<?:H0@ ZCu}{GfAT'L//aAz?N<LLAH7wJC\M\l]iu^q\XG@D-;D
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 70 6f dc 82 99 a4 d0 d5 1b 13 a8 ec b1 e0 82 e9 66 e4 29 01 0f 5b 00 db 68 4b b4 27 8e 7f 90 54 83 c2 7a 3e 44 e3 ef 46 c9 f7 2d 3b 35 42 14 8e 5d 77 96 c1 b5 f0 10 93 d4 bd 85 ce d9 3a 23 b2 97 80 b5 9b 54 4b 94 75 e6 f9 07 4a 7b 0b 8b 9d 7d d1 79 92 34 7f 87 f1 49 06 1f cd 27 0b 6c 5f 04 61 5f 8c a6 e6 b8 7d 2b dd dc 77 f0 43 43 2d 14 04 ae 1c f3 04 97 19 c1 d5 2d c2 ff 15 59 c1 c7 32 11 2b ea 1a c8 b8 aa df 76 4c 8d fe 9b d6 3b 26 9a 45 5b b8 81 00 d9 8a fc 4f 5d fb 36 31 84 22 c9 8d e6 92 64 71 d2 05 1f f5 6c fb f0 c1 f8 00 70 60 98 23 99 ec 53 d5 87 b7 de 2d 3e c8 01 96 5a 53 1e 48 b5 3b 8b 04 60 78 a0 86 fa ec d0 b7 40 f2 dc e7 be 70 c5 13 c6 c7 f0 01 f5 51 9c 91 b2 63 f3 d9 d0 3e 4b 92 d4 a6 9b fc 85 f1 7f 94 04 4f d2 1f 4e 5f 87 cd 16 4a c7 2a 46 Data Ascii: pof)[hK'Tz>DF-;5B]w:#TKuJ{}y4I'l_a_}+wCC--Y2+vL;&E[O]61"dqlp`#S->ZSH;`x@pQc>KON_J*F
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 72 f9 79 60 62 f2 36 30 3c 86 19 bc 49 41 36 e2 3f 94 65 d7 3f ee f4 22 d7 49 00 1b 53 07 ec 88 ce f1 41 85 3b e3 04 66 2a cd d7 29 b2 88 f9 ea 01 03 8e 34 a4 db 33 e9 27 00 3d 2e 63 1d 7b 08 be ca e3 33 97 41 07 0d 84 72 a6 ff bb 16 11 a7 2f 49 56 dc 13 4e 98 18 a5 4e 45 4a 64 5b 3c 48 16 86 90 ba 7f 7c d0 aa b9 56 65 0a 33 d8 ae c7 f8 db fb c6 f5 9e 56 f2 69 9b 57 85 c9 0a 61 20 42 f7 72 3b e3 15 59 fe 8b 7c 3f ac df 5d 18 f7 85 ba eb df af 9f 52 e5 46 6f c3 ec c6 70 cb 6e d1 35 c7 5a 8a c8 85 47 89 1d bf d2 1c 12 fb fe 1d c0 a2 11 6c 8d 49 02 98 d1 65 d3 4d 0e 03 01 7b 81 d9 89 be cb 71 d2 d6 32 4f e5 cc d3 43 b4 98 df c7 5a 0b 94 a7 b9 5a 3b e3 e7 64 2d e1 cc 42 b5 dc 49 8f 49 b7 87 90 8a cd e7 17 ee e5 f8 0d 8d 1d 34 89 93 aa 9c 65 12 c8 a1 d1 85 63 Data Ascii: ry`b60<IA6?e?"ISA;f*)43'=.c{3Ar/IVNNEJd[<H\|Ve3ViWa Br;Y\|?]RFopn5ZGlIeM{q2OCZZ;d-BII4ec
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: f3 75 4a f2 03 c0 15 63 37 41 61 89 3e f7 fd b0 3f 45 9b 75 99 5a 6b b2 d1 12 2d ba f5 fb cb 85 a2 88 54 ad a6 7b 40 4c 02 5f ac 42 fb f5 a7 3b c5 c9 53 1a ff da f6 56 90 5b 66 b2 4e d5 12 0f 2a d1 1f 1d a4 1a 1e c1 b1 7d 7c ad eb 6f 3f 7e ae bb 70 8b 8d 33 32 28 23 c3 89 82 8c bf 5f 2b 19 ff 29 38 fc 4b f7 87 87 cb 0b 1c b8 dc 57 1b a3 d5 41 61 78 49 4c 58 ba d3 94 30 a6 b0 04 77 c5 0e 5c 89 54 02 71 fa ee b9 18 12 3c c6 ce 29 b6 a4 c5 e4 05 29 71 30 a4 f9 e6 71 da ba be 55 e7 ba 24 6e 7a 84 18 3f dd 07 5c a0 a2 f2 c4 99 d9 af 23 33 22 38 40 37 e2 b3 00 37 c8 a7 8a 78 d5 6e fa 23 87 63 bc c2 ed 88 08 cf b0 aa e1 3d 58 b8 c4 e4 a1 64 5e af 37 f9 1e 90 fe 15 a3 37 db e5 e2 e8 2b 9f e4 87 0d 10 f8 74 43 d1 03 af 3b a4 92 03 8d b4 3b 0d 63 8c 58 c2 8c 9b 64 Data Ascii: uJc7Aa>?EuZk-T{@L_B;SV[fN*}\|o?~p32(#_+)8KWAaxILX0w\Tq<))q0qU$nz?\#3"8@77xn#c=Xd^77+tC;;cXd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.17	49823	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:02 UTC	708	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/393216-786431 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:03 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 393216 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:03 UTC	16061	IN	Data Raw: f2 a8 4f 7b 76 95 88 70 15 b8 60 b9 f8 90 22 30 de f5 5d e8 d0 e0 d3 6e 8c 19 75 3d 44 10 2d 65 13 b2 1d 1d ca cb e2 56 31 10 b7 df 11 3f 09 f0 ca 30 63 d3 1b c4 8c 75 1b 2f fe cc b9 79 0d 2b 18 2a 40 23 9f e1 36 27 b8 03 0f 4b c1 35 4c 3a 40 29 03 00 9f c8 9c 37 89 21 e7 15 1c c1 5a 50 aa 29 ab c2 e1 f6 d4 3d 57 82 b5 7c 97 aa 71 6f 2a f0 72 7f 8c 21 eb 9b b2 53 c2 cf da 95 9f eb 25 b9 2e 63 8c 6f 4b b1 d4 8d 02 f8 c2 5f 44 7f 1f d7 4f db d8 fd 43 84 06 40 2a fa 71 5b 15 92 14 e7 f1 59 5b 55 95 fc 9b 61 28 ee d6 1e 71 3b 65 59 ab 82 c6 1a 85 bd e2 37 f4 1e 60 43 ac 60 a1 fb f6 11 c8 22 54 38 34 83 41 16 36 8d 52 61 cb 96 6a c4 6a 2e 0b ee 8c 6f 69 63 c2 8e 16 05 d4 ed fa eb 46 98 73 37 75 f2 19 9c 39 1c 84 73 94 cc 22 9c a1 55 f0 c0 99 a9 50 13 72 33 14 Data Ascii: O{vp`"0]nu=D-eV1?0cu/y+@#6'K5L:@)7!ZP)=W\|qor!S%.coK_DOC@*q[Y[Ua(q;eY7`C`"T84A6Rajj.oicFs7u9s"UPr3
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: cd 98 46 75 59 79 c5 0d 22 d1 45 2f e8 31 77 9e 7d 5b 2d a5 3c 60 9f 5d a3 7e 5f 8d 39 0c 1f 49 86 d5 96 10 ac 2b 4a 04 46 57 6f 1e 9f 18 e9 1c af cb 37 70 97 14 3e c0 a9 b3 37 57 5d 4f 8b 4c 38 bd 2c 70 90 e6 5c 2a 16 f7 eb 69 01 1d 68 fc e1 a1 4a 49 7f fb ab 3e 16 60 92 f4 5b 82 62 17 98 9b 74 8e bf e6 10 b7 9b 08 a4 98 31 6c cb 24 39 73 93 32 89 a3 47 12 18 95 47 38 eb 6b a3 da 39 bb 5c 9d cb 9c f2 00 62 cf df 4d 29 2b 23 b7 53 44 a1 eb 70 ca c5 ae 29 a5 26 f2 63 19 2c 7c df 8f b2 94 95 94 d2 22 58 32 48 a3 f1 ff d7 c0 09 c0 c6 da 65 2a ff fa 93 36 7e 5c ab 02 34 d1 41 8c 4b c8 1d 24 48 7c 34 3f b1 d6 c0 d6 69 14 79 b1 c5 c4 8d 09 5e f6 76 ba 35 90 72 ec 1c 6b 23 e5 09 3d 9d c8 81 55 ca 49 9d 48 79 8f b1 ab 7f 30 f4 0e f9 7a 23 4e 1c 5b 28 a2 32 a9 7d Data Ascii: FuYy"E/1w}[-<`]~_9I+JFWo7p>7W]OL8,p\ihJI>`[bt1l$9s2GG8k9\bM)+#SDp)&c,\|"X2He6~\4AK$H\|4?iy^v5rk#=UIHy0z#N[(2}
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 73 2d 5a 33 97 8d e5 39 57 7f 57 e4 19 c5 06 58 4a 6d 9c e0 fe ac 46 76 50 89 b8 4e d5 1a dd c6 27 57 b4 d5 f8 99 7c c0 2e fc d7 b2 d8 35 aa 6a a7 28 95 a6 17 6b 26 90 68 1e 1d ad 51 00 e0 0d 84 1d d8 61 01 be a2 29 03 0f 1b c0 82 e8 28 91 71 45 4a 0b b9 0e 3e 52 14 c7 c2 b0 42 89 07 10 a1 79 58 ba 87 31 65 f7 80 d4 81 ee aa 5e 4e ad e8 ff 7d e8 ba 76 23 a6 ce cd e0 1e 96 b1 bc 64 f7 e2 32 51 96 e2 ad 09 56 d5 40 3c d6 10 db 9e 3d 6e a4 87 75 28 96 e3 91 b3 1e d7 a8 cb 74 a3 d5 3f 42 f0 30 29 7a 84 5b d2 9e ed d5 2f 33 3f 2f 36 c4 c1 76 d4 ee 43 c9 00 68 8b e5 4d 16 07 3f 78 e7 c7 85 cd e9 7a 6c 1d 74 bb db 85 0c 7f ea 28 48 6c 0a 02 37 19 f3 c1 16 04 ff 83 e1 64 b6 f6 d3 3d ea d3 9e 35 0a 09 b9 0a 7f 8a d6 0a ed ca 37 fc db 11 2b 9f 9d 46 e3 87 cb da 26 Data Ascii: s-Z39WWXJmFvPN'W\|.5j(k&hQa)(qEJ>RByX1e^N}v#d2QV@<=nu(t?B0)z[/3?/6vChM?xzlt(Hl7d=57+F&
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: c8 7b e6 73 23 e2 51 7d 2e 5b d0 df 60 6b c4 96 61 8d 5d 47 04 2d c5 3c 45 2e 38 db 0b 31 12 c0 84 99 64 4d a1 fd 04 f1 be 2e 08 db e6 11 2f b1 a9 70 58 72 e7 0b 08 2e f8 a6 80 fb d3 0d b0 cf 37 88 3c ec 7f 77 41 8c 11 6b 3f 92 e4 4e dc ae ea a5 85 83 12 9f 3b ca f3 26 13 67 7a f9 82 16 b8 64 19 d2 94 14 29 93 5b f5 8b 84 f7 c4 4b 45 88 dc 29 30 e2 18 15 a9 3c 06 80 64 3f fe c1 aa 6f ef fb b9 54 2b 46 c7 99 35 0d 6d d5 ab 55 cc 4f 83 47 5a aa 9b 40 3b bc 1c 98 9a 02 1a fc 77 33 4e 3b 1b 0d 35 f9 ff 97 96 ac 99 60 0d 4a f6 83 d4 93 56 96 5c 56 97 b0 0c 38 9a a6 32 f5 e3 02 fd 6b f6 3b 43 d6 b6 f8 49 ae 57 eb 15 ae d4 a6 00 1d 01 88 36 fd 62 9e 62 6e b3 d4 16 bb c8 6f 08 ca 34 8b e1 9b d5 00 f2 d6 08 23 be d0 d6 d6 7b c2 56 b2 bb 88 94 18 5e 8d e1 40 15 f4 Data Ascii: {s#Q}.[`ka]G-<E.81dM./pXr.7<wAk?N;&gzd)[KE)0<d?oT+F5mUOGZ@;w3N;5`JV\V82k;CIW6bbno4#{V^@
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 28 1c 43 a8 50 d2 96 5a 54 b1 9e 25 65 59 22 9f 8e 4e b0 f8 16 de 9c 8f fe ce df 20 33 bf 06 d8 6c a3 3d 69 6d a2 2b 86 4d bb 94 6b 4e 15 64 a9 a1 93 f3 f4 09 ae 2e db 0d e5 4c 93 92 a1 fe 72 00 7d 66 b6 80 be 1d e4 a3 2e 5d 96 a7 5f 05 dc f1 60 a5 8b b6 49 a8 5d f9 d7 59 7e e6 c9 28 91 10 08 84 df c6 b7 ba 53 80 2c 9f d4 b1 c3 b8 cc 44 d8 18 cc 5b 45 5a a5 56 f2 d8 30 a5 88 f2 6c 03 cd f8 0f f6 9d b5 ae 73 b3 ca 57 fd d8 80 65 22 6b 07 ce d9 00 d4 a8 3e 5e 9c ab 65 cd 2d 08 37 c9 b3 e8 9f d6 8c 37 8f 7d d2 2c 6d d2 e4 94 1e cc 11 9f d5 32 0c ac b1 36 55 59 ad c0 1e 1f 2d dc da 0c 90 d7 82 ee fe ab 01 8d 10 4d e1 a7 99 59 e9 fa 2c 49 9e e2 a1 8f 77 72 ac 2d 72 ec 36 ea e2 39 de 3f 30 44 d9 67 e1 a2 67 36 65 27 cb d5 6f 65 2e 26 5e 72 ce b9 8f 6d f8 02 40 Data Ascii: (CPZT%eY"N 3l=im+MkNd.Lr}f.]_`I]Y~(S,D[EZV0lsWe"k>^e-77},m26UY-MY,Iwr-r69?0Dgg6e'oe.&^rm@
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: d1 25 d9 5e 9b 0f 59 99 c6 12 63 44 ed f0 39 f7 45 81 71 e3 38 e8 00 b8 7c 6d a8 88 cc 2e 9e e6 7d fc 57 63 c1 d7 32 d5 24 38 6b 13 9f 68 e5 89 6c 69 93 65 82 37 a9 48 36 7a 7e 2e 85 b2 c0 4a 7a 9c 6f 5f e8 0d e4 34 d3 12 69 18 25 1f 66 96 0f 8f 6b ae c3 4d f6 46 de 45 f3 d9 02 13 46 b1 96 1f 1d 9b f7 d8 44 15 49 d3 83 c0 48 20 69 19 b1 1c 82 a0 37 6a 2e dc 47 76 16 b1 aa 0d 22 78 b2 04 c7 1c a5 4d 2e f8 fd ae cd f5 56 62 b4 11 ec 50 86 c3 67 da aa 1b cf d2 77 9a 14 16 76 c6 f8 8b fc 96 a8 b4 99 5d 0d 14 8a 95 4d 51 2b b8 df f0 a8 fd d8 64 ff a2 00 56 cc de df d6 5c d6 b1 e5 6e a6 10 12 3e 45 2c 7e 9a b1 22 69 80 0a 72 68 a7 a8 f6 37 64 e9 2a 19 cf 79 2f 13 67 a0 e3 55 23 20 31 4b 5f 00 39 c5 f3 91 63 46 2a 1f 79 2e 0d af 1e 41 3c 28 1c 89 ed b8 56 07 b5 Data Ascii: %^YcD9Eq8\|m.}Wc2$8khlie7H6z~.Jzo_4i%fkMFEFDIH i7j.Gv"xM.VbPgwv]MQ+dV\n>E,~"irh7dy/gU# 1K_9cFy.A<(V
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 91 94 74 c8 a4 b8 26 07 55 69 62 bd 07 20 2d 92 a6 93 1a 8c 8b e9 06 66 a6 13 48 e0 6a 11 87 8c 64 f9 5b f1 2a 0c cc fd 2e dd 21 c1 d6 cd d6 48 d0 c0 af e8 7e d8 0b 94 c3 e6 7e 10 9a 09 f9 24 4f 04 31 37 a8 6b c7 e9 c7 2e ab be 71 c3 82 27 4c 79 96 d3 c4 9d a6 e3 69 a6 08 b4 e3 8b a4 6c 8b a3 39 41 51 a9 19 3f 6b 55 3c d1 23 1a 47 af ac 1f ec 86 7e 99 7a b4 d7 22 4a 20 01 e9 1a 34 b0 30 41 f9 6c 3e de bb 78 75 51 64 37 29 f4 5e ff 4a ae 7c af f4 c4 5e 2c 6b d5 0d 78 0e 6c 41 ec 38 93 e0 79 50 46 3f 61 28 94 d1 e5 c8 0c 9e e2 d4 b7 a6 3d ac 52 0d de 65 c0 38 18 19 ce fa 23 42 d2 a8 d8 b9 92 ad 09 96 e4 3e e2 8a 95 3e 74 5f 58 b7 45 46 3c 4a ca ed 24 f9 90 ac 0d 10 f7 f9 fc b2 ad 0f 76 99 58 d2 eb 42 7b fa cf 74 46 e5 a8 7e ce db 4a 80 6d 17 41 6d de 51 a5 Data Ascii: t&Uib -fHjd[*.!H~~$O17k.q'Lyil9AQ?kU<#G~z"J 40Al>xuQd7)^J\|^,kxlA8yPF?a(=Re8#B>>t_XEF<J$vXB{tF~JmAmQ
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 2e a3 bb f1 8d ea 75 bd 78 2d 29 0b 93 a6 c1 0a 9e d2 11 c1 6c 60 9c bc 11 0d de c8 b9 f3 4a e0 ec 0c 35 37 1a 5a 50 01 13 ab 72 81 ec 4a b3 f7 de 80 cd 1d b1 62 ac da 5d 5f 8b 9e 61 7d 84 9f 44 0f d3 91 3a e5 71 c0 d1 b8 34 3b 21 32 d9 dc 5b 2c 3e 04 8e 57 c5 fb c1 b7 8b d0 c5 9a b3 ec 1d 78 3b 34 36 f5 92 98 d3 86 4f d3 4f e5 d5 d1 71 d1 6d 41 d1 c4 0f a2 9a 09 e5 96 52 14 6d cb a4 73 7e 95 cf dd ed 29 de fc 5d 22 38 36 f1 93 df 1e 39 4f e4 81 ba 4a e1 f6 d3 c1 7a 7b 78 85 ad e8 d3 2a a9 f1 06 77 85 31 5f 97 e5 7e 8f 17 a0 e1 49 d6 a9 79 44 73 fb d5 26 a7 f3 b7 99 d4 e1 ee 46 9e 7f 58 4b 24 1a aa a7 77 2d a9 57 6c 53 1a 32 20 34 71 2a 14 28 63 8c 46 98 6f 5d de 75 c5 f8 84 0e e0 5c 39 71 f7 87 2b 70 9d b4 f5 67 66 0a 21 bb 8f 2d 60 99 66 c5 64 e6 94 d7 Data Ascii: .ux-)l`J57ZPrJb]_a}D:q4;!2[,>Wx;46OOqmARms~)]"869OJz{xw1_~IyDs&FXK$w-WlS2 4q(cFo]u\9q+pgf!-`fd
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: f1 28 e0 91 2b 23 f1 96 d4 1a 44 55 b4 b6 d0 d3 fb b7 69 c2 f2 a7 7d 6d 25 74 29 69 1e 1a 37 b4 c9 7b c4 63 0d c4 e3 78 18 21 69 0d c8 89 28 b3 57 1f 3f f0 b8 19 af 1a 25 7d 7b 6c 6c b1 0a a7 fc de 5d bc fd 93 94 d0 d5 48 4e 84 3f 23 41 7a d4 1c 2d 3c ec 0d 18 23 87 07 fc 0e 7c 92 d7 9b a3 4c d5 a8 6b 6d fe fb 53 38 6b 3c 6a 23 6e 96 97 8b 94 55 99 1d 8d ca d0 91 7d 90 4a 3e bd 5b 8e 84 f3 87 29 a3 bc 80 02 2a d5 b0 e5 79 9d e6 12 85 8e b5 b5 55 0d 43 5d 81 ef 36 ff 22 e9 13 51 83 35 bb 9f fb 3f 57 79 cf 5d 48 79 9e 8d 2a 4b 33 7f d6 3f ee 7d 9b 3e 7e 1d 5f e1 7f 20 bb 5e e6 43 5a 8b 8d 36 0a 3c 28 24 e4 ab 72 0c 3e 68 28 1b 82 be b4 3b 7e 55 a5 27 2e 9d fa 75 dc 6b c6 55 6d 25 6b 21 ea a3 ca 25 30 19 0b 14 f2 57 7f 59 c0 c8 7d b1 a1 a7 95 3f e6 63 7c e6 Data Ascii: (+#DUi}m%t)i7{cx!i(W?%}{ll]HN?#Az-<#\|LkmS8k<j#nU}J>[)yUC]6"Q5?Wy]HyK3?}>~_ ^CZ6<($r>h(;~U'.ukUm%k!%0WY}?c\|
2024-07-11 11:37:04 UTC	16384	IN	Data Raw: b9 f9 cb f8 35 9f 6f 1c c4 c7 18 86 9b 88 32 80 4a 4a 86 e7 a0 64 5f 5b b2 42 39 2d e2 48 b1 a2 08 1b a6 ec 2b e9 b8 fa 36 56 db 74 b2 49 f1 60 37 91 b8 b3 bd 24 48 6a 6c a2 85 42 4b 5f 98 a0 f7 7b b6 a7 8d 7c c3 60 bf 77 79 ea 20 fc c0 56 93 f6 47 a8 04 d6 54 42 28 a0 f1 63 02 78 9c 9f 26 0b 4b a0 66 b4 eb 7a fe 7e 4b b5 88 19 6e 52 09 4a 86 90 4e 4a ef 2d 22 ec 09 80 51 7d 90 ea d5 1c 12 04 0c c7 5e 77 d3 58 19 44 4f 4d 11 84 05 ef 8b f1 a0 a1 52 ef d6 42 dd 95 12 ee db 7b 53 2c 55 bc 6c 71 62 f0 4c a9 b1 db 10 00 49 a1 2b 0b e6 11 00 ec 63 42 2f 3b ea 24 ad 72 14 2d ef 33 95 1d 37 ee 95 b7 9b 62 34 a7 16 74 96 66 fc 97 e9 97 01 53 11 0e 88 ec 8f 1f b9 b5 14 2f ad a6 95 c9 a8 d9 22 1c 23 f3 c9 d8 36 b1 46 53 32 0d 20 8c 2b b8 fe 8f 75 e0 fb b0 03 3f 20 Data Ascii: 5o2JJd_[B9-H+6VtI`7$HjlBK_{\|`wy VGTB(cx&Kfz~KnRJNJ-"Q}^wXDOMRB{S,UlqbLI+cB/;$r-37b4tfS/"#6FS2 +u?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.17	49822	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:02 UTC	709	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/786432-1310719 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:03 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 524288 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:03 UTC	16061	IN	Data Raw: 36 06 80 22 0c fb 5c 66 4d 16 5e 7d 6a 21 a3 76 04 e4 ac b0 6e c7 13 13 df 3d 09 a7 05 c4 e2 f7 d3 9d 39 db 14 67 0e 84 a4 dc 0a ba 4c 7b 8f a2 d0 86 4f d3 fe 6c ef 17 de 2b 4d 19 18 bb 6d 61 ff 44 b4 78 ef 5f 3e 71 ab e9 5b f8 9d 00 03 4e 58 14 04 67 b5 85 30 5c 1f e4 e6 3d 81 25 38 c0 5f ae 76 15 be 68 94 c3 f4 c5 e8 54 90 5b 4e e5 80 f8 1f a8 2c 06 2e a8 90 8c 8c 90 d7 b9 00 d2 c2 0c 00 66 73 6f 05 20 ca 7f 82 ea c1 3c 72 65 c4 35 06 c0 d8 b9 d2 2c 4d c6 76 c7 ed db e1 fe 90 37 4b ec 37 d0 75 c1 a5 bd ce 7d 0d 6a ed d2 58 65 2d 89 d1 90 81 4d 0e f2 57 ea f7 4f 24 30 1d 2d 93 24 4c 24 4a 1f ea f8 ff f4 84 ec 8a ac 89 d9 ea f1 67 88 8d a5 3c 30 d4 f4 7c 01 14 74 95 f3 82 13 9b f0 7a 88 78 f8 07 47 4d 1c 7b 72 a6 cf 0b 6e 2f ae ce 71 48 b0 12 96 f0 6f 70 Data Ascii: 6"\fM^}j!vn=9gL{Ol+MmaDx_>q[NXg0\=%8_vhT[N,.fso <re5,Mv7K7u}jXe-MWO$0-$L$Jg<0\|tzxGM{rn/qHop
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 83 a2 52 50 8b d7 23 3d 68 64 56 cc 1b 96 25 ca 15 2c bf b6 27 fe 80 fe 88 b6 b2 6e 58 c9 46 a3 c1 db fc 48 c0 67 58 68 29 e6 ff 49 9f 63 f8 b9 85 65 3b 5d c7 86 3f c7 dd 8c d8 01 76 83 75 73 88 2b 8e 6a 61 b0 cf f8 41 d5 f4 7d 98 f9 4f 47 0b f7 34 b3 39 78 95 e0 61 73 21 02 b0 0a d5 59 64 43 f8 d1 74 fb 00 ad e4 e7 f4 be 89 3f 08 c0 d8 81 9c 36 52 58 e3 2d d7 d9 f2 55 79 96 9c e6 39 e8 ee b3 e3 5e ce 9f bf f9 a5 cd 16 b2 d9 4f e4 99 ca 21 c2 ee c4 61 c0 f2 06 33 e7 08 4a bf 6d 8e cf 1c 9c 9d fc 59 26 80 c7 aa 21 f0 2e 18 e6 a3 6c 2d ef 5d 0a 2f a4 b1 9e c6 58 5c d4 f4 78 61 95 18 d0 b6 27 9b be 47 c3 87 53 52 a3 bd af 65 67 47 a5 12 90 37 d1 a5 17 b5 c1 87 02 f7 0e 63 12 5d 33 e7 aa 37 69 02 2b 09 3a 5f d3 a5 ae 58 0c e1 62 9b 31 5c 81 d8 e3 ec 24 1b d7 Data Ascii: RP#=hdV%,'nXFHgXh)Ice;]?vus+jaA}OG49xas!YdCt?6RX-Uy9^O!a3JmY&!.l-]/X\xa'GSRegG7c]37i+:_Xb1\$
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: e5 a2 18 1a 23 49 01 d4 44 17 3c 57 92 e2 69 b2 92 36 91 4f 7b 26 1f bd d6 b2 fb cc 51 6b 58 91 c0 0a d6 82 45 49 2f 2a 81 3d 0d 32 73 ff 1c 73 a9 20 4e ed b8 75 54 a0 a6 d8 8a b3 25 16 a9 ad 97 c9 0c 7e 2b 65 3b 8a 22 75 65 1e 47 eb 8a 6c 15 98 46 e6 0e af 80 a2 47 53 fa 7d 8a d2 6b 81 31 8c c1 89 ee 81 54 ed a0 0e 21 cb eb 0c 10 72 9e 2c dc b4 91 85 26 b8 30 74 5b 9e 8d f3 7f d2 3e b0 35 12 84 58 40 d1 54 55 50 7b ab 7d b7 76 1f c7 27 7c 61 8a ae 3b 0e 00 b3 31 0e 95 d7 a8 79 de 4b 9b 86 88 47 2b 0d 80 67 bd be 42 94 14 61 a3 3d 33 59 08 ff 1b 2e 28 08 b6 9c 7c 15 63 90 ba 03 51 c1 ad aa d0 df 44 38 f1 38 46 19 81 70 1d ab bf 57 4a e6 15 af 72 05 e6 69 38 86 33 a1 cb 39 49 5e ce 51 05 31 fd d2 c1 d0 4b e3 6c 1e 55 1f f1 e5 eb c4 d6 f5 95 4d a1 a2 53 da Data Ascii: #ID<Wi6O{&QkXEI/*=2ss NuT%~+e;"ueGlFGS}k1T!r,&0t[>5X@TUP{}v'\|a;1yKG+gBa=3Y.(\|cQD88FpWJri839I^Q1KlUMS
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 83 9f d3 5b 09 b4 a2 19 93 e7 b6 da 7d e6 ef f2 f3 30 ae 50 3f 13 d0 da e8 16 8e bf af 6c 33 76 24 db 39 60 29 0a 5a 84 5d e7 0b cc 94 d3 7a 73 59 bd 74 9f cc 33 79 aa 8b fe e4 2f f0 6e d7 b0 66 b9 8e 48 85 3c 5e 6b ce 41 95 76 48 cb dd f2 fc d3 a6 64 13 1d 29 50 b4 52 ac 5d f1 ca 98 25 0f c3 af 81 30 d4 72 6a 27 24 73 96 a1 6a 11 a2 90 16 92 02 ce dc c3 ba 12 19 91 72 d9 eb 8c cb 02 5b 3c 87 03 25 4c 7c ee f8 b2 dc 38 a6 78 65 0d 8f ac 6a ee 77 05 eb df 37 0a a7 0a 8f 05 42 f8 f0 46 9a 8f 70 8c 28 88 35 97 a4 4e 2f 76 78 59 db 6f 5a c0 b1 88 1c de c7 81 b7 86 fc 16 0a c3 bd 3e d8 e0 4e 5e 83 69 4a 3f b3 d0 ec 17 f9 ff a4 2e aa 1f b1 0b e3 0e f2 57 a4 22 71 01 2d 59 a3 2e da 30 29 3f 30 8e 6b ec d6 ad a6 5c ea cb cc 33 66 d3 11 58 05 66 61 1d 6a cc 3e f1 Data Ascii: [}0P?l3v$9`)Z]zsYt3y/nfH<^kAvHd)PR]%0rj'$sjr[<%L\|8xejw7BFp(5N/vxYoZ>N^iJ?.W"q-Y.0)?0k\3fXfaj>
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 47 d6 f5 f9 ce a8 15 d9 e8 0e f6 a8 2e ed d5 71 c1 d2 13 4e 6b 90 aa a7 b7 c7 b4 59 07 ea c1 40 bf 8c f6 80 6b cb 52 7b 34 54 fe d6 65 83 87 ec c4 17 56 72 bd f7 c3 94 7e d1 b7 2f 62 36 87 0d e9 0e 39 99 57 91 d3 dd f9 39 aa 0e 5e ba 86 46 f8 fc 7f a4 ce c7 58 a4 4e c4 72 f5 1e d5 ea ab ae 70 87 eb be 02 78 50 b8 a4 5a d5 35 c0 9e d8 e0 d5 01 28 b7 57 ff b8 8f 6b 96 ec a0 7f 07 b8 96 b8 66 54 e3 4e 8d 84 5c b7 62 d5 16 ef 31 02 0d 2f 2c b3 fc 83 36 3b cb 69 75 6a 6c dd 43 32 59 83 48 05 3d 19 65 a0 f5 03 b0 14 ff ee e5 0a c9 bc ae 11 e7 4e 32 69 ac d3 ea eb b3 c6 13 27 fe c7 75 f9 78 47 80 6e 1a 00 66 ac 35 f9 bf 28 9b 4f c6 0d c0 b1 93 50 3d 3c 2a ea d7 93 eb 73 e0 79 0e 91 62 c9 65 10 58 8e 15 2d f6 0e fa 15 fe 77 b0 52 7e 26 59 a8 69 13 5b df 0a 20 50 Data Ascii: G.qNkY@kR{4TeVr~/b69W9^FXNrpxPZ5(WkfTN\b1/,6;iujlC2YH=eN2i'uxGnf5(OP=<*sybeX-wR~&Yi[ P
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 14 11 ed 2f 14 25 c8 6e 29 34 c2 11 b0 ca 3e 9d d6 19 c2 cf 84 54 9b 25 52 3e 50 13 2b 11 9c c8 ac d7 74 81 1e bd 44 af 44 0e 71 33 e7 36 56 c6 86 fa 60 1c 43 04 3a 96 c0 7a 2f f0 7a 5d af 86 ac ee 7d 56 45 d1 68 9b 63 99 cd bb 5a 4f 01 5b a9 a6 eb 30 38 4e 56 33 8f c0 64 2c 92 f2 2b a7 bc 25 60 8c 63 6c 21 25 81 d5 e6 81 5d 7c 1d 69 20 b9 c6 51 d0 11 ec 4b 31 9e b6 1b 50 5b cf ed 6a b9 da 69 60 39 30 bf c2 b5 11 e0 7b 6f b2 39 c8 0a 62 25 59 15 6c e8 e6 61 42 59 58 fd dc 20 2b 3d 9e 1b a2 82 e0 d2 e2 6d 2a fc 79 ee e3 23 dc 53 78 93 73 97 54 e5 98 d6 4f 95 a7 11 5d fa bc 46 34 79 1a 45 10 90 c6 00 a0 b9 79 a1 8b e6 f5 94 53 c2 bb 0b a2 85 7e e6 f3 14 75 f6 8f ca 62 c6 a7 71 51 1b 66 1b 8f 3a f7 77 07 14 d2 25 df f8 b2 12 cd e0 6f 83 2c e3 ba 2d ea 40 04 Data Ascii: /%n)4>T%R>P+tDDq36V`C:z/z]}VEhcZO[08NV3d,+%`cl!%]\|i QK1P[ji`90{o9b%YlaBYX +=m*y#SxsTO]F4yEyS~ubqQf:w%o,-@
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 74 f4 75 c5 d3 b4 22 6d bb 10 87 6d d3 2f 79 26 b5 ab 04 e9 f1 11 f9 96 1c 09 d0 33 b3 2f 27 87 f7 1c 85 ad e6 15 4f 6e 51 a0 8b c9 09 33 6b c1 f6 22 15 53 ad e9 34 14 11 2e 0f 59 1b bf 57 e7 25 53 92 a3 a8 78 a0 39 cb ad f4 8b d2 f0 dc b1 0f 97 dd 66 3f 0c b4 cf 26 ad 7b ee c7 19 f4 4d f0 52 60 17 07 c2 0f 9d 38 42 60 40 90 9d 43 35 0c 07 75 82 68 13 ef 9c 7b 5e 75 55 c0 53 2b 6d d5 7b 2a 03 6a 89 9f 83 df ce 8b 9c a2 db ca e0 6b 45 c8 e6 57 cb 64 ea 71 ce c7 14 1b 64 8c b4 da 25 bc 12 25 36 51 03 f5 ba 91 c0 2c 22 d4 f0 72 27 6f 64 a0 cb 7e 64 8d 41 32 24 5c 1e 11 ff d2 00 d8 0b c4 12 25 9e b0 cf 7e e4 08 33 20 e8 70 a8 80 d6 33 8c 15 a9 ec d2 8e 74 64 3b eb b1 6c 3b d6 f2 6a 22 bb 2b 06 e0 be 4d 59 c0 74 a3 01 a0 42 43 14 e8 f0 c4 ea b0 2c c7 69 be 7b Data Ascii: tu"mm/y&3/'OnQ3k"S4.YW%Sx9f?&{MR`8B`@C5uh{^uUS+m{*jkEWdqd%%6Q,"r'od~dA2$\%~3 p3td;l;j"+MYtBC,i{
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: 05 c6 75 36 49 b0 ba 52 cc 30 07 ea 31 c3 5f c1 a4 47 ae e4 9d 48 47 03 31 f2 24 56 65 da c1 07 a8 cb db 43 20 b2 66 9d b1 09 03 0d a8 4c 89 ba b7 1e c6 ce 52 99 13 45 83 b5 c5 30 84 9e fa da 68 70 b1 d0 16 b2 bb 73 60 b9 d8 ba 1f 49 43 27 c4 a0 21 74 81 b3 44 d3 1f 95 ce fb cc 6d 93 d6 47 a5 71 6c c9 75 68 bf a0 32 0d d6 45 74 ed 6f 45 20 0c 58 e2 d4 f7 79 3c fb c2 59 4d c6 97 29 83 28 6b f7 49 a4 4c 01 2e bb 40 95 23 e3 a0 d8 f6 31 20 fd 8f 47 c5 af c4 ba 28 b8 fc 4d 5d c7 ce 8f a5 e2 59 5d 76 6a b8 5e e9 5f de 04 95 37 fc 15 f0 5c f6 31 60 30 82 5b 2e cb c0 4f 01 c9 1a 41 76 0f d7 e5 1a 89 4f 56 28 6e 27 6a 05 70 c0 b1 3b f1 65 6d 7c d9 50 20 9c 55 e1 76 31 95 f4 a6 82 40 10 4f a9 de ba f2 a4 58 36 9f a9 87 81 20 d9 26 90 b9 fc f6 78 60 c6 e7 ca 4d 65 Data Ascii: u6IR01_GHG1$VeC fLRE0hps`IC'!tDmGqluh2EtoE Xy<YM)(kIL.@#1 G(M]Y]vj^_7\1`0[.OAvOV(n'jp;em\|P Uv1@OX6 &x`Me
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: c4 00 ae 34 ff 6b 5b c2 01 f5 58 69 70 00 1b 1f 14 95 5b f2 d0 37 4f d1 8b e2 c5 a7 8e af 0c 8f f7 cf 8a 72 a0 ad 32 e7 d6 9e 92 9f 0d 35 32 fe 92 4f 34 64 09 e2 c4 19 3d 79 61 e2 c8 df 01 07 31 40 68 21 e8 12 b8 4c c4 82 b8 65 44 79 93 23 6e 63 32 2f 7f 02 b5 85 6b ad ca 53 c2 96 a3 ca 20 9c f6 8b 4e 17 a4 20 71 ce e8 92 eb 3c 7f 77 40 a4 35 ea f7 7f a5 76 99 3b 68 70 c9 6b ca 08 5d ee 83 36 30 5d ea f5 ca 05 91 02 cc b7 1a e2 56 9e 72 13 f8 2d 4f de a9 54 c1 f8 90 db 4f a5 30 c8 85 1b b9 33 26 a8 f6 b6 5e bf 51 a8 85 4f eb b0 85 88 7d fb 0f 6d d7 2d a6 c4 af f9 34 10 a8 c0 e7 82 e3 08 a6 4e 0e f1 d2 a2 ee 01 03 86 a2 41 1e 01 4d 2e 71 fb 20 f8 0d 20 1a 3d a5 14 eb 91 2e 0a ba e9 c1 bd bc ea db e0 45 84 5e ee 3c 53 54 71 1c c3 48 64 00 0e ed 7a cd 3a 85 Data Ascii: 4k[Xip[7Or252O4d=ya1@h!LeDy#nc2/kS N q<w@5v;hpk]60]Vr-OTO03&^QO}m-4NAM.q =.E^<STqHdz:
2024-07-11 11:37:03 UTC	16384	IN	Data Raw: ec 6b 73 db 97 5c ac d9 1d 35 bd d0 30 ed 86 47 d6 d9 f9 f6 03 b6 e8 26 45 7e 1e 8e 04 c1 00 35 8d d4 46 c8 5d be 2c d4 cc 8a d8 17 3e 51 46 fb 11 94 8c 3d 04 83 5c de b8 eb 6a 9b 73 10 b0 f9 60 29 61 fe f4 b3 4c f9 28 3f dd ac c9 33 86 a7 2b 95 74 14 0e b0 bd ec 38 bc 3e f8 5d 6e 31 3c 2f 8f ab 47 12 51 69 41 e0 dc 11 3d 43 92 59 75 0b 72 53 ca 3d 6b 91 ed 5b 28 c4 db 8e 25 bd e9 0e b0 f2 a6 83 75 6f ba 43 22 68 79 91 18 f6 10 7b 2c fc a9 25 4e d8 b6 08 6e 74 3e 00 25 8f 3e 74 ad 71 6a d2 79 c3 66 b8 c1 9e a6 65 5e 74 49 e0 36 4b b6 6e c0 38 85 17 3e 81 40 35 ee fe 83 01 70 7e 10 d1 7f 49 cd e1 2e ec f2 41 ca 93 48 83 f6 2e 92 ef bb e2 3c 23 42 1b 65 b1 75 32 88 5a be d9 e4 cd 12 96 1d 1a 46 f9 c7 d2 81 0c 06 9a ca 42 51 fc 09 94 6a 53 fc 78 af 84 b7 aa Data Ascii: ks\50G&E~5F],>QF=\js`)aL(?3+t8>]n1</GQiA=CYurS=k[(%uoC"hy{,%Nnt>%>tqjyfe^tI6Kn8>@5p~I.AH.<#Beu2ZFBQjSx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.17	49826	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	710	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/1310720-1966079 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 655360 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16061	IN	Data Raw: 4a 1a 0f c5 6d c4 d6 2e 81 9e 1f 7c 74 41 1d 24 45 e0 65 38 00 08 8e 4f fc de 92 15 1e 82 f5 49 50 e5 34 5e 27 d9 be eb e4 43 1b a1 b7 44 cf c3 73 81 09 cb 9a ed 44 bd 27 0a 33 71 10 f5 8c 44 c0 77 37 c5 3d ea 7b b1 e5 c4 92 5f 37 13 5b 93 2f 3c 98 18 3f da 07 5a 20 6d fe bb 71 0f 71 23 e3 77 16 50 49 ca f0 21 d4 43 3c de 43 27 39 fa 97 66 2b 4b 04 5c 65 cb 5e a9 65 2e e4 7e a7 53 25 c0 bb 17 44 e2 c8 09 72 a5 2e 8c d6 09 54 34 a6 e7 ec ed 58 d9 f0 9c 65 2a 5f cc 37 27 87 8f 7e 22 6d 56 7e 94 09 86 93 38 ef e4 22 e5 4d 10 53 15 fe 9e 52 fa e5 a7 5b 02 f2 25 24 f1 86 20 f6 ce d9 51 4f ab d9 cb 00 e7 4e 9a 23 44 3b 8b 12 a1 91 c1 af ce e8 5d d3 6e fe d6 cc ce 05 b4 5a cd 76 f1 46 96 a3 7b 31 8a 72 b7 a1 6b 41 a9 8c 1e d7 bb be d3 6a ad 9f e6 66 45 68 70 84 Data Ascii: Jm.\|tA$Ee8OIP4^'CDsD'3qDw7={_7[/<?Z mqq#wPI!C<C'9f+K\e^e.~S%Dr.T4Xe*_7'~"mV~8"MSR[%$ QON#D;]nZvF{1rkAjfEhp
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 3d 32 10 91 be d2 a5 0d e4 87 da 9d 95 e5 39 8e cb 1a 34 81 36 28 a9 80 a3 8d b1 d2 32 38 fe e7 1c 64 e4 32 63 42 d0 7e f4 60 a9 d0 03 36 6a 91 c0 80 63 1b c5 cb 76 aa e9 ab 2c 56 47 fc 93 4e 96 01 36 7c 35 d6 6a 2f c6 6d 4a ee 12 e4 89 59 30 31 e6 8f 40 58 88 e1 2e 2e dc 81 c6 f9 ed e8 2f ea 60 d1 0f e5 b9 a8 b1 4d d4 46 4b 28 83 7f e6 61 af 57 4d 5d c1 23 c4 6f 78 cf 71 cb 16 f3 13 ea 34 66 a8 e0 76 1f 41 fe 26 2d 12 58 fd 39 64 1c 94 6b cb ac 6b 0e 3e 82 c0 2e 10 e7 07 5f c5 6f 5c 1b cc 7e 38 6d 6a 83 4d 9f fa 22 2b 51 04 05 dc f3 96 77 30 62 f8 e1 42 8a 08 1e ce f8 12 d7 db 3a 76 c2 61 c9 89 16 01 ef fb a8 f0 01 60 44 c4 2f 40 d5 0b f5 db 20 9e 3b 9d 3b fa fd 11 8f 08 8c 79 6b 66 83 ce e4 a5 fd e3 a0 f1 d5 7b 0b be 6b 33 3a 59 3d d9 6e 98 c9 1f 2f 3f Data Ascii: =2946(28d2cB~`6jcv,VGN6\|5j/mJY01@X../`MFK(aWM]#oxq4fvA&-X9dkk>._o\~8mjM"+Qw0bB:va`D/@ ;;ykf{k3:Y=n/?
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: a3 a3 0f 7f 16 0f cd 3c 5a b8 e0 50 71 07 f0 67 db 52 ad 58 92 e1 c9 5a b1 d8 71 74 c1 1c 01 56 7c f6 7e 97 24 66 95 83 2a 10 2c f3 1c 5f 1d c8 bd 73 69 26 da 38 b4 f8 a5 b0 a3 74 0e 75 12 65 c0 96 47 d6 a6 c4 5f 22 5a ba da f5 1c a3 11 61 57 a1 36 00 91 81 6c aa 0b 95 7d 15 65 71 be 41 94 86 a7 3c 62 63 56 5f 60 e7 9d a7 a1 07 af 91 f7 75 28 03 bf 69 3f fa 45 83 ad 1d 6e 9c c4 9c ca 16 df 78 43 3d 21 75 a2 f4 c3 a8 ce bb f5 18 9d ed b5 0d be 99 4a 6b 41 45 3a bc 3d 4f 80 9f c2 1d db 4e f1 3d 00 97 42 51 70 18 26 3c c8 99 eb 1a 84 d5 02 eb 1d c9 8f 87 df c9 bf 77 e0 82 cd 29 ff 29 14 1c 6c 6b 1b 8f 1b 3a 29 f3 71 7d 83 40 37 98 6c cd e3 23 86 57 ee de da 0b a9 2d 57 ef d0 56 08 40 e0 31 55 97 ff 95 79 5c d3 1d 68 35 8d cf 05 65 54 1f 84 c8 17 89 d2 62 e9 Data Ascii: <ZPqgRXZqtV\|~$f*,_si&8tueG_"ZaW6l}eqA<bcV_`u(i?EnxC=!uJkAE:=ON=BQp&<w))lk:)q}@7l#W-WV@1Uy\h5eTb
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 07 25 58 48 ed b8 2e 70 83 39 98 d1 fd 5e e2 49 f2 63 88 f7 7c 5f 74 39 58 8e df 35 ea 43 32 64 b1 e3 ea eb 58 95 fe 34 27 73 ff 23 43 47 a7 65 2a df 20 68 90 ab 32 fc a6 40 65 d9 9b 63 7d 87 02 1f 09 b1 09 a5 4d 71 86 8c d0 c3 04 2f 65 8e 7f d2 d8 85 75 80 c1 a9 91 d8 94 ba a8 04 04 62 67 2c a5 7e 8f a7 32 75 b9 20 8f 06 99 c4 e2 2b 45 39 b4 70 0f c5 57 7c 55 d2 2c 03 34 01 c3 77 08 0a a1 46 31 cc 83 c0 f6 35 72 b0 03 32 e0 ad ea c5 80 40 e1 9c bb 6b 0c 3e 07 f6 40 ba 77 c5 28 92 ba bc 55 39 4d 05 79 57 dc 83 71 14 4e c6 75 31 83 44 60 c0 d5 78 f5 a7 4a 8b 7b 68 3b 76 2d fa 50 31 81 4c 90 05 b6 da b8 97 7d c2 93 16 b6 5d d2 9a e0 5a 81 29 ff 8b 1d 4d 8c bc 5a 31 ec 95 ce 3b ae ff 13 41 4a cd 1b e8 37 17 bb 4c 88 f4 20 02 84 66 2e aa d2 56 4f 79 fc ef 35 Data Ascii: %XH.p9^Ic\|_t9X5C2dX4's#CGe* h2@ec}Mq/eubg,~2u +E9pW\|U,4wF15r2@k>@w(U9MyWqNu1D`xJ{h;v-P1L}]Z)MZ1;AJ7L f.VOy5
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: de 3d a0 9f c3 5b a1 9e 01 eb b4 50 1f 57 ec 1c 9c 68 ce 64 f2 7f e2 2a 21 0d ad 44 8f 4f 6a b1 11 5f 78 34 dc 39 ad 89 69 72 11 f9 68 27 07 97 27 36 d6 cb 8e 35 88 77 02 11 1f f2 d6 a7 b5 49 41 66 9b 3e 88 55 45 b9 0d d2 69 1a aa 6c 8c 6f 69 b3 c8 c7 be 90 c0 0d ea ff 91 de 28 c3 c2 ee 4d b6 e4 52 4b 24 05 60 de 0e 11 32 76 ed 4c b7 d6 af 5d 87 23 ec 85 5e ae c4 d7 f3 6d ce 32 8b 40 47 7e 4d af b6 b2 52 37 2b b6 3c 66 88 5d e6 22 ab 18 c7 70 26 9b c5 22 a8 4c e3 e6 05 fe 92 b6 0a 83 8d 04 d8 d9 e8 2e 0a 59 39 12 84 3e e9 af 35 f5 91 6a 6b 71 0c bc a0 82 03 32 d8 72 40 62 94 c8 e8 f2 65 17 a5 67 6e 50 73 c6 0e d3 0b 54 ef c8 f7 db cb c2 71 55 e8 ab e2 8e 01 ef c9 8f 21 23 98 c1 24 09 02 3d 86 e7 96 7d 94 88 2c 07 15 bf 73 74 53 9c 1d 57 9c a0 e0 5f ad de Data Ascii: =[PWhd*!DOj_x49irh''65wIAf>UEiloi(MRK$`2vL]#^m2@G~MR7+<f]"p&"L.Y9>5jkq2r@begnPsTqU!#$=},stSW_
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 14 cf 79 d6 9f 93 3b 2a 24 9d 1f cb 7f 96 92 47 31 f1 ad 17 52 3e 50 2e 97 f3 d9 f9 4d 82 1e dc ca 76 99 40 37 7a 1a bb 9f 87 3f d3 1a 15 f7 91 6c f9 48 19 62 4e 31 06 88 c0 8d 56 9a bc 9b 9b 80 73 85 2e 3d 90 30 34 4e 6f ad 2d c5 be f0 33 99 e4 0a ea b2 b3 e8 bf c2 52 70 2e 9a 3e 68 84 81 39 4e c9 32 07 27 9a 9a 65 dc ea 54 00 bb f6 f1 a8 bf 00 a9 84 e2 e6 cc e3 8d c4 c7 fc cd a3 4d 65 cc c1 46 b1 8a 31 48 aa 02 49 2f db f2 f3 3f 64 76 31 f8 06 1c cf d7 2c 89 81 74 02 c0 3f 23 70 03 29 b7 89 d4 df 7d c8 43 82 9a 36 6a a3 02 54 80 0a ed 41 8f c8 1c e6 a3 a5 51 4c a1 c6 48 95 43 b9 6a 81 c6 aa da 02 08 ad c9 1a b3 99 25 d2 7a 6b 88 56 cf 3e 10 2b b0 f2 fe fb 5c 92 f7 eb 14 26 a0 2d 31 3a 29 45 18 8f c7 0f d0 0a 8a 2f 75 30 5d 7f 8a a9 78 7d 6b bc a2 51 75 Data Ascii: y;*$G1R>P.Mv@7z?lHbN1Vs.=04No-3Rp.>h9N2'eTMeF1HI/?dv1,t?#p)}C6jTAQLHCj%zkV>+\&-1:)E/u0]x}kQu
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 41 e4 cf 28 3a ac 1b aa b6 40 5a b1 88 26 12 8f 63 5c 31 6d 99 bb 14 f5 c3 b6 be 8e c7 54 b1 d0 78 d4 c1 c9 0c 97 46 3e 11 42 d3 d7 e7 10 95 63 fe 01 de 26 7d 94 2d 17 42 f9 7f 47 0c b1 88 82 a5 56 7d e9 79 55 da 59 f1 bb 57 6d 7a a4 71 6e a8 4c 96 69 a9 e2 6b a9 9f 2b 16 35 1c ff c6 c9 98 a0 49 f5 dd 34 cc 10 67 c5 cd 2d da b0 ad a3 1f 7e 8c 56 32 4d f6 e4 9f 87 72 af 69 c5 e8 6d 15 38 84 a9 35 de b2 09 48 0a 02 54 b3 e4 8f 75 b5 d8 d5 14 52 09 94 91 b6 d0 e8 0c 3d fb 79 cd ea 0a 2f 97 38 86 45 92 ec 20 dd f3 ea 94 91 e7 a5 a0 3e 53 de 08 c9 6e 39 bb fb 17 6a f1 a0 6d d2 a9 cf d3 63 79 1e b2 38 18 90 e4 46 e4 48 92 13 4a 5d b2 cf 61 0b 59 0a 8a 66 2f 72 63 1c cd 0d 54 46 02 11 45 5c 07 f8 58 95 95 31 3c 46 05 79 8d 42 54 e8 b1 56 8f fa b8 87 1c eb 3c b7 Data Ascii: A(:@Z&c\1mTxF>Bc&}-BGV}yUYWmzqnLik+5I4g-~V2Mrim85HTuR=y/8E >Sn9jmcy8FHJ]aYf/rcTFE\X1<FyBTV<
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 39 f2 a2 04 f8 4e 0e cb 7f 97 fa 5d f2 22 6f d8 e3 38 f3 7b dd 48 7d d5 02 da 1b e1 8f fc 24 a6 c9 b8 71 7a 12 4f 51 e8 86 cb 6b 99 35 97 92 43 50 1d 70 5d 63 05 17 82 cb b6 5d c3 99 a4 87 ad c1 71 0d bc 52 26 5b 7d 97 3e 6a 95 90 5e 1c 7a 48 59 93 19 ef 9e 27 29 bc 35 9b 49 7b a2 44 6f ce d6 de 82 d0 b8 ce 16 6b 0b db 78 2f e1 06 af 39 f1 17 51 c4 3f 58 2a 4c 62 67 d3 f8 d4 42 a2 b8 93 11 d3 9c bc f3 03 b5 c7 4d 28 61 ad 21 50 d9 6a ee 9d 13 3c 02 6f e1 11 92 92 a3 92 26 93 6c c2 65 ff 7e be 59 da 7f 60 ca 09 e5 b3 a7 7c 1a 77 d4 ca aa 6e e1 9e d2 f2 af c7 65 9a 32 97 4a 6c 96 bd 70 d1 80 6c 31 e3 7c 6c 99 98 2e c8 9a 5f 18 c5 8d c7 a6 5f 66 ba f9 e4 42 ba b4 59 ea e3 07 a3 75 f6 ca 63 e4 92 4a f9 3d 1d f6 d2 f0 9b 04 93 9a c5 ae 2b fb 89 ca 47 af ee 55 Data Ascii: 9N]"o8{H}$qzOQk5CPp]c]qR&[}>j^zHY')5I{Dokx/9Q?X*LbgBM(a!Pj<o&le~Y`\|wne2Jlpl1\|l.__fBYucJ=+GU
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: d9 4b fe b1 82 7e 57 a3 f7 c0 81 91 f2 39 ec 95 9b 8c 43 3b 6e f1 8f 4f f9 22 8b ba cc ca 05 2b af f2 d8 b2 bd c0 d1 85 97 ce b3 42 66 2f 7e 31 ad 96 20 33 6b 93 25 df 2d 85 8c 29 b5 8f c8 fb 4b 58 a0 a9 fc 32 be 2d 70 82 9b 23 56 2c 71 0d 50 b0 df 7f bc 1f d0 4c 08 f9 54 b1 bf 34 d5 a2 94 2a e4 5d 8b e7 d1 11 c8 4c 7b b2 77 ca 19 f9 6c 54 b7 11 ad bd fb aa 9f 87 87 72 6e 16 70 3d 6a 29 f3 9b b5 fd e8 4c e6 d7 36 10 6b ab 0e 2f 3a 57 68 37 90 64 1b 70 0f 15 0e 34 36 54 ae 11 62 7e b7 e9 64 e6 e1 0c c4 63 b0 1b 18 ac e5 88 06 7f 75 6b 2f d2 48 05 e2 99 10 27 e9 b0 9b 8c cc 67 61 39 40 74 d1 61 08 fb df a7 32 7c 8e 41 75 17 4d 3b 1f 52 37 80 cd 16 bd c0 6c 6e 11 cc 65 d1 ce 6e c7 64 32 39 fd 12 86 8b 9e f2 b7 2d 50 fe f0 9e 2a ce 6b 1f a0 5b eb fe 1e d1 c6 Data Ascii: K~W9C;nO"+Bf/~1 3k%-)KX2-p#V,qPLT4]L{wlTrnp=j)L6k/:Wh7dp46Tb~dcuk/H'ga9@ta2\|AuM;R7lnend29-Pk[
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 2e 2e cf 4e b3 f9 cc 4a 4b 54 c6 03 06 ac aa 30 62 46 9d ea 14 b7 46 27 1b 6c 67 c4 c1 1e d7 ec d5 5e b4 5b 5d a3 45 14 28 d8 c1 0e d2 4f d0 b5 2f 78 50 7b 87 13 98 ea 74 96 c2 3c a0 0a f1 1e 96 3d 13 45 75 d0 cb 10 18 35 90 9a 5d 60 b6 82 74 48 f5 b1 1d 88 52 c0 4e eb d8 ee 02 5c 1d f9 f1 5c df 1a 9b 4c b8 ba 51 f5 cf d8 bd b3 7e 7f 36 8f b8 0b 96 26 b0 8e fd 3b e4 8f 77 28 dc 7f 6d 13 e1 00 f2 2e 59 15 a0 a1 40 e6 50 07 5a c5 e8 f3 6e 93 98 2e cf 46 e0 cc 73 82 55 77 0a 18 e8 b0 61 74 6c e8 65 8e e2 5f 90 0a 79 83 20 f7 57 86 d6 2f 43 10 4f f1 94 51 46 ce 60 79 25 97 bb 7b 3b ae b4 1d ae c8 7d 83 63 2e 15 1f 6b 10 56 37 cc 39 63 b8 88 dd cb b6 52 9e a9 64 89 02 eb f9 15 cb b4 f5 09 b5 1a a6 1c 43 37 ff 99 df d6 c3 74 9f e2 31 c7 1c c7 dd a8 d0 78 25 d9 Data Ascii: ..NJKT0bFF'lg^[]E(O/xP{t<=Eu5]`tHRN\\LQ~6&;w(m.Y@PZn.FsUwatle_y W/COQF`y%{;}c.kV79cRdC7t1x%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.17	49827	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	710	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/1966080-2752511 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 786432 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16061	IN	Data Raw: 63 d2 68 c4 3a b2 54 bf a9 2a 28 68 e7 8e 8e ce 68 07 25 45 55 1a 8a d2 5c 43 48 c4 2c 7a 50 40 a7 0a a7 18 6f fa c3 9f 95 ef 9e 17 ba 07 67 2d 64 84 ae ec 91 87 03 08 1e 35 64 f4 53 51 f7 d8 03 c0 a1 92 92 3f cc f6 f4 29 a0 48 2a be f3 db 3b 32 68 c1 5a ca e3 79 6d 60 d0 70 54 d2 36 fb 5c e2 6d 54 eb 1e 65 32 da 0d 5b 6e df 77 22 34 41 5d 65 72 89 3f a9 b2 8c 10 b3 13 d0 d5 72 3b 63 74 66 57 6b 19 c1 fa df 59 71 47 7a 68 ee b0 21 dc 7b 20 87 d4 09 72 e6 38 50 e5 72 68 36 c6 e0 7f 5e 37 2a 60 68 b5 aa 95 f6 c1 f4 fe 9f 6d 43 6a 44 e0 2b 62 d2 16 75 77 73 0a d5 06 fd 43 55 06 33 af 33 7a 9a ba 48 d8 6e c3 a8 9b 32 0d 67 6c c7 05 0b cb 40 ac 2e 6b 6a 88 45 2b f4 76 3c 33 3e 79 44 52 23 16 bc 5c 19 46 d1 3a a2 d8 05 3d 31 3c 87 1a 5c 21 ea 31 15 ba fa 95 9c Data Ascii: ch:T(hh%EU\CH,zP@og-d5dSQ?)H;2hZym`pT6\mTe2[nw"4A]er?r;ctfWkYqGzh!{ r8Prh6^7*`hmCjD+buwsCU33zHn2gl@.kjE+v<3>yDR#\F:=1<\!1
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 8d e0 af ba 51 74 a9 38 87 aa da a0 8a 49 63 11 7a 8e cb 8d 88 62 51 e8 df 79 79 97 66 a0 b5 ed 9d 73 3b 9f 5d 20 72 64 80 5d b2 9b cd 3a 04 cc 7e 1a ba 42 9a 50 1b 1a 0b a8 c4 71 7b 8f 74 c6 88 96 79 22 1b 27 ea dc 09 84 7b 81 ce 2a 11 00 b0 cf 2d 5f 74 65 e3 84 ad ee ab 09 90 20 c4 e4 a0 6c 4c e5 7e b4 50 ba 40 6f e7 e1 29 6b 08 69 74 92 2b ba 4c ae 47 2a b7 f6 97 a1 5a 2d 58 a1 e9 f5 c5 bf 89 02 43 b0 ad b8 86 32 e8 f8 1c 20 8b 4d f8 f2 7a 53 eb 02 6a 57 97 b3 c4 42 57 2a c1 62 77 46 5d 40 7e fe 3d 21 b8 f9 c4 75 1b 41 54 38 ee 2d c1 0e a9 a5 77 bb 46 78 df bb 4f 53 98 cd a4 5d 25 d6 13 b0 c8 c3 62 16 b8 39 18 28 ff 51 7d 0b 83 24 a2 8f de dd b5 6a 2f d7 fe 1d 65 b6 ef 83 a4 1f f9 0f d8 87 fd b7 d7 b3 f0 c5 2e d5 44 b3 f0 77 e1 ef 02 16 6f a8 bb c5 e9 Data Ascii: Qt8IczbQyyfs;] rd]:~BPq{ty"'{-_te lL~P@o)kit+LGZ-XC2 MzSjWBW*bwF]@~=!uAT8-wFxOS]%b9(Q}$j/e.Dwo
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: be d5 94 f6 f2 e6 e8 8b d9 c3 b7 dc 71 f5 b0 08 10 ae 8a f4 aa 85 95 bc 87 b0 04 11 04 2c 4a 3e 57 64 8a c9 e7 42 ee e8 53 2c ab a8 62 23 45 8d 58 9a 23 da 36 44 ab d9 0e 3f d3 5e b0 1c 05 14 8b 16 18 5b 00 cd 85 cd 4f 9f 15 44 1d ae d8 cf 51 42 ad ca b2 f1 dc 72 36 53 a2 c3 65 c1 f1 c0 35 0a 73 73 3e 55 30 bc 98 7a 65 99 79 2c 25 d7 40 83 f0 35 39 5a 07 b4 d0 77 a5 f0 d4 d2 5b d4 55 90 87 f2 e9 cb 4e 45 29 7a ca 30 43 03 da 5f 94 46 f9 ec 4f bb 2e 60 c6 0d 98 b2 aa f9 0f be 2d a5 80 67 2d 24 94 26 8e 0c 3e 7a 4d 4f f9 3b 2c 2d f5 45 20 1a cd 09 52 33 d9 85 0f 9a 50 0f ea 1b 01 6d 6e 6c 20 52 85 66 bd a1 06 51 5b 82 45 b4 5f 3b 74 25 57 27 aa 29 e5 74 bc 2f 66 44 18 b5 c9 0d b1 05 66 35 75 37 67 62 6e 18 ad b6 0d a6 05 9e cf 49 6f a2 c3 09 34 0e 84 1b 35 Data Ascii: q,J>WdBS,b#EX#6D?^[ODQBr6Se5ss>U0zey,%@59Zw[UNE)z0C_FO.`-g-$&>zMO;,-E R3Pmnl RfQ[E_;t%W')t/fDf5u7gbnIo45
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: c4 f2 17 dc 28 a5 97 2a b4 65 14 22 57 06 b3 df 16 eb 8b 2f e0 66 f0 92 ff e9 e5 04 54 24 68 7e 44 18 81 96 9f d9 19 b7 6e 8e 50 4e 47 9e 12 88 f6 15 54 c0 69 12 67 e1 93 03 42 11 be 55 f5 9a 9a 0b 44 bc 35 2f c4 1d 76 5a c0 c2 6a 96 7e 08 48 ba 6b 97 af 02 8a 31 d4 8b 09 a7 7e 2b dc 8c e8 12 6c d7 66 d2 f4 90 9a 33 33 b6 b6 e7 91 f1 d6 ef c3 9d 12 19 af be a4 44 98 b5 3e ba 0e 38 85 40 28 a8 aa 4a e6 0e 80 9e d3 52 35 38 f4 e2 ea e5 29 00 b1 ce 0e 6a 7c 98 66 44 5e 1b bb 48 7f ae bb 45 5c 61 72 43 fe f5 8f 0b dd 30 52 db 5e 1d 6e 7b 43 00 9f 20 60 d1 14 be 8e b0 79 60 ef 28 40 2c 52 9c b2 1c 8d 23 c7 e8 12 c7 7d 7a ab 8c 81 59 79 54 21 54 a7 3c ea cb a3 7f df d4 0e 87 7f 07 61 ca 09 06 5e 04 bf ca 02 92 3a 79 e1 39 95 d7 be 3a 0a 70 00 95 98 bf d1 64 5b Data Ascii: (*e"W/fT$h~DnPNGTigBUD5/vZj~Hk1~+lf33D>8@(JR58)j\|fD^HE\arC0R^n{C `y`(@,R#}zYyT!T<a^:y9:pd[
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: da c9 a2 63 3f 66 31 5c 90 ee 5c 02 d3 6c 03 e4 7b c0 df d6 8a fc 14 6e 22 89 77 fa 11 99 4f 52 18 0d de 12 ea a3 74 6a b6 33 ee 75 1b 55 cc 4a 8b 27 b0 f6 dd 1c 81 fc f1 e1 82 b5 52 58 d5 3b 1c f5 05 21 de 79 ec 8a ce 31 1d fd 7b 5b b8 dd 47 2c 63 92 80 aa 79 2a 7b 6a e9 22 d3 69 59 79 8e 8b cb de 90 58 60 8d 25 a2 43 19 4b d2 46 9d fc 20 21 4d 04 17 0e de 86 9e af ed 67 e6 ff 8e 21 13 e7 18 fb 18 ef f4 97 92 03 20 5f 12 9d 45 90 a1 36 d5 a5 a9 b7 92 43 23 45 00 d4 8d c0 d6 f8 63 e9 4e 5b a0 51 98 97 4d b1 b5 a5 0e e8 fb eb 00 7e 40 f9 d4 b4 d0 31 64 a9 1f e8 87 b4 3a 3c 27 6e 9a 5b 6b c4 e6 76 93 b6 7d d2 9f 22 c1 98 98 ba 76 7b f2 4c a2 ec 98 df 30 95 5d 9f c0 ae 4c 7d f1 c0 5a ed d0 19 2d 4f 46 72 58 98 1b e9 be 98 e8 e8 bd eb 86 14 26 34 9d 0e af 9a Data Ascii: c?f1\\l{n"wORtj3uUJ'RX;!y1{[G,cy*{j"iYyX`%CKF !Mg! _E6C#EcN[QM~@1d:<'n[kv}"v{L0]L}Z-OFrX&4
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 5b bf f1 43 69 57 35 e4 27 a1 d1 ab c7 ab 88 16 40 25 9a 63 1f c1 06 3d fc cd c2 d5 9c 36 a6 13 63 ad f1 ee d0 29 47 90 8f 97 39 99 5f aa 3d 42 07 bc 97 8d 6e 02 6b dc 18 ec c4 d2 59 b6 a5 b7 e1 cb 56 12 57 ef cf 17 8b c8 4b cf eb 5f 97 db 99 c2 6e a9 77 1c c1 9b a0 8a 27 d4 a4 be 11 4b 0d 9a 13 31 a5 97 6e af 90 85 26 97 cd 05 00 0b 36 17 4c 78 59 46 04 09 45 77 e6 b1 55 ad eb 6c 34 59 79 cc 06 cc 1b c4 96 a5 d5 e9 28 45 5b 18 4a c4 bd a4 5d 29 4a ac 7c af 2c 4a c5 c9 63 48 1b 78 6c 97 40 36 6f 10 f9 5a 57 4a b9 d9 10 45 67 53 a8 42 03 56 63 a0 ba f4 cb 94 be 9f 35 ef d9 e7 40 47 88 dc a8 d9 15 d4 6e cf 8f af 92 d0 90 5b 92 ff 76 1a b3 20 3c ef b2 59 bf 77 04 23 1a 36 f4 41 19 ca f2 ec ea f7 bf f6 f7 2c 82 33 5b 3c a8 dd b3 72 f5 7d b3 d7 a5 9f 43 81 53 Data Ascii: [CiW5'@%c=6c)G9_=BnkYVWK_nw'K1n&6LxYFEwUl4Yy(E[J])J\|,JcHxl@6oZWJEgSBVc5@Gn[v <Yw#6A,3[<r}CS
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 41 d3 4a 79 ec 08 fb db b4 48 79 e4 ab c7 51 f1 d4 02 24 44 b1 a7 3f 4c 47 e9 2c 4e c6 6a a3 9a 34 15 22 c1 4e 59 c4 d5 61 54 87 62 ee b7 41 9d 85 ed dd 6f 3e 26 44 61 e2 02 3e b3 d6 ad a4 d1 83 13 f8 38 c9 dd 65 be 71 89 0b cc 21 22 ac 53 1f 33 bc 93 27 85 2d 08 21 c7 be 4b 67 d1 0a 93 01 cf df 30 13 4a e2 a0 1c b4 1a 22 0f 2c 6b a2 93 cc f4 8b 43 db 35 f6 2b a3 50 06 33 59 b7 d9 ce 32 90 3d 81 d6 52 a7 1d 07 fb 08 50 89 75 28 b1 3d 65 ad 19 fc 2a e3 00 ae 65 02 d4 f3 ef f6 aa b9 e9 87 de c7 9a c1 61 50 2c 61 94 95 23 8c d7 c4 7d eb 11 13 3a bd 73 62 07 da eb dc 46 b1 3a 03 69 e7 85 43 b9 f2 6b 0e e8 46 b2 a7 01 e7 7e e9 41 53 78 3b fd 7c 6c eb fb 46 91 a9 88 2e 87 cf 19 64 f1 0f a1 be 94 2a 11 91 78 3e 5b 88 19 13 19 a4 7b 77 5d 20 e1 62 5e 97 db f1 85 Data Ascii: AJyHyQ$D?LG,Nj4"NYaTbAo>&Da>8eq!"S3'-!Kg0J",kC5+P3Y2=RPu(=eeaP,a#}:sbF:iCkF~ASx;\|lF.dx>[{w] b^
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: a6 82 56 f7 6b f9 1f 82 34 f9 3b b1 7b 4f 0a 80 63 a1 c3 71 24 65 69 07 be de 3e 66 2a 1d 84 4e c1 09 1c 00 3e a4 0f 9e 7c fa cc 2d 3d 26 1e 88 fc 16 05 93 c1 5b f9 1a 05 cd 33 24 d2 64 af 3e 11 42 9a 15 c1 ae 8a ee ec 78 ab 25 8f 3c ac de 01 2b 05 b4 25 dd 6a 3f 69 df 47 c4 87 bd 81 63 69 c3 31 86 34 5b 85 4a 3e b1 4d b4 07 29 cc 05 8c 42 7b ca 78 fa 16 05 98 e5 47 14 38 a5 5e 48 c6 f6 35 40 f5 95 a2 ba 74 b4 93 eb 24 55 9e fd a3 53 5b 00 39 0a 68 29 4b af 15 b2 22 93 d6 64 ca 5f 89 e7 22 b2 fe 66 12 4c 9b 6c 52 21 75 52 72 02 5a 25 09 f4 da 37 70 fb 92 65 bc 10 4a bf 9b 6d 1f 8b ee d0 96 b5 bb ea 7b 20 b3 51 35 e5 34 51 98 0a e3 9d 9b dd 50 43 47 8a a0 58 8a e8 c4 0e 78 e1 c6 b0 76 03 f8 5a 1b ce 5e ae 91 e0 77 0b 59 58 12 ed 1e db e4 cf 85 19 63 60 ca Data Ascii: Vk4;{Ocq$ei>f*N>\|-=&[3$d>Bx%<+%j?iGci14[J>M)B{xG8^H5@t$US[9h)K"d_"fLlR!uRrZ%7peJm{ Q54QPCGXxvZ^wYXc`
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 0b e4 1d 42 62 db 2d 0b fc 88 ed dd 99 2e 81 4b d6 17 d7 85 65 ce ef ac 96 57 21 9b 2a 41 91 27 65 bc 48 27 1e 9e 57 26 38 06 e4 49 14 c3 54 97 3f ac 66 d6 65 51 d0 e3 c3 82 96 d9 e9 b7 a0 9f e5 9c b8 a1 b9 96 8e 6d 09 5d 9d f9 67 76 1f e5 1c 8e 7c 94 0b 99 a1 62 a1 4f f8 97 7f 92 e9 f3 d6 79 35 80 93 09 b6 2e 06 56 1e 6f ff a3 b8 cf 66 e4 56 a7 ca 1c 6e 77 f5 8d 17 64 f5 c1 36 bb c7 07 04 e2 35 00 ba bb 2d c7 d3 36 9c ec b9 6e 35 ca b2 7d f2 f0 be a7 d3 4f b0 67 94 e2 ab 04 e6 df ad 28 5c 5e b5 39 0a bd 1d 42 f9 db dd 73 a1 00 c6 37 ae 5c 49 c2 f6 63 e3 14 63 99 6e df 89 13 e3 bf 8a 32 ed 20 2c 86 8d a5 24 9b a4 87 0c 07 66 59 84 03 62 0e 75 df fc 1e cf 1f e3 23 88 19 3d 7a b2 1e 00 c7 49 4a 3a 4b e0 f9 6e 83 da e4 b0 34 3d 70 b7 a6 7e ce 1f 91 7a 91 c9 Data Ascii: Bb-.KeW!*A'eH'W&8IT?feQm]gv\|bOy5.VofVnwd65-6n5}Og(\^9Bs7\Iccn2 ,$fYbu#=zIJ:Kn4=p~z
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: e2 02 22 35 76 b1 0a d7 e9 fd 26 4c d4 e2 27 b6 d8 e0 8c 0b 9f 46 a9 58 cb f2 b0 73 ed 96 61 a4 43 b7 02 29 5e 33 8a 16 8e 58 2c 16 2a 65 15 cc cd 20 ab 59 05 16 6d 0e ec f2 c2 9b 18 1a 14 dd 6a 97 34 db 06 40 69 24 d6 dd d3 77 8c 23 71 ca 24 53 c9 ea a4 0d 41 87 42 6f c0 06 e3 7d 46 c2 01 a5 f1 25 47 fb 8c 17 8a e0 67 68 83 96 3f 2a 15 d9 42 02 a8 a4 2a 17 e5 ad 1d fd a2 f2 ce 6a 52 35 83 73 4a 7f 23 68 6f a2 57 b9 c6 9c 27 9b c5 3d 5a bb 70 60 84 c7 d7 a3 b2 cc f0 a7 4d 71 5b b6 4f 74 7c af 38 49 9e 28 aa dc 0d e6 c1 b6 65 62 64 32 3f 1b db 7f 99 a7 12 d2 43 10 26 8f 26 da e6 9d f6 06 70 f6 df aa 6c 7d 82 c6 4c 2a d4 e4 90 cb d0 5a 1e bf 12 bf fc ab df 61 6c 49 30 52 ac 11 d9 58 85 db d7 56 91 00 6e 15 77 8b 6c 80 21 5f b5 7a d1 7a 1a 01 33 28 70 f1 e9 Data Ascii: "5v&L'FXsaC)^3X,e Ymj4@i$w#q$SABo}F%Ggh?BjR5sJ#hoW'=Zp`Mq[Ot\|8I(ebd2?C&&pl}LZalI0RXVnwl!_zz3(p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.17	49829	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	495	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/0-131071 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 131072 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16061	IN	Data Raw: ad 49 3c f1 1a 0a c7 71 75 c0 b2 1d 7b c7 93 eb 79 79 16 88 80 ea 9d 15 7b 9d 7c 94 0f f9 b4 75 ee fe 0b fc 33 b4 4e f1 24 c4 4e 3b 17 27 74 91 e4 5a 65 3a 68 20 82 80 a3 67 95 fc 51 13 91 61 84 d9 95 fe 00 6c af 94 e8 e5 8c 8d 87 5b 9a 96 89 49 62 f6 01 93 fe fd 2f 03 5e d0 01 54 57 a4 8e 17 6a f7 41 b7 2b 01 72 48 d3 e8 19 c2 d7 6a ad c3 05 12 58 61 07 ad 9c fb 04 7e de ee 84 3b 0a 98 6e 08 0e bb a1 49 74 c6 ac 19 58 c5 99 f3 f3 29 8c 0d 51 96 50 e5 ae 23 50 da e6 7e 47 96 ae 31 ed e3 3a 8f 73 db a9 dc 8c 49 e3 b5 5e f7 ef e6 ac 5d 43 dd 1b 83 f6 06 b6 e2 09 d3 66 5b 45 6e 57 a7 50 54 65 04 a8 e7 68 69 42 0b 4e 9c 5a b7 6a 5c ee bd 17 6e d1 f5 56 7e 84 7a 01 75 21 cd 47 c2 fc ce 06 19 2f d5 a9 f6 bd 26 70 71 b5 31 fa c7 f2 c4 8e 2a 58 7c b8 7f ee 94 54 Data Ascii: I<qu{yy{\|u3N$N;'tZe:h gQal[Ib/^TWjA+rHjXa~;nItX)QP#P~G1:sI^]Cf[EnWPTehiBNZj\nV~zu!G/&pq1*X\|T
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 0b 9e c3 6f 65 18 4b 18 74 0a f4 9a 72 dc 1b 0c 39 87 f9 da 8a ba 4b 35 0f 0f 00 85 80 f3 f0 17 50 01 ea 22 98 93 30 5c 0c 2d 74 90 19 18 47 81 e3 1d c8 52 a1 51 d7 14 ab 52 9a 30 b9 85 d7 e1 b5 50 0a 4a 22 af 70 17 99 41 9b 04 3d 30 76 42 15 17 64 d0 51 37 d0 27 a4 a1 e4 cf 2d 1c c3 78 d5 46 b2 a3 9d 9d 02 40 07 8f ce d0 36 56 0a 20 ba ef 93 15 76 18 45 87 86 34 0e 93 03 36 95 a3 e9 42 54 9b 2e 8f df 4e da 8a 4a 8b 15 9e ee 51 2b d9 f1 1f c0 f3 ef c6 e1 8c d6 2f a0 6f ed 0e a6 a6 29 4c e3 2f ad cd 69 8d fc 09 08 56 d8 ac 37 01 ec 29 31 0a 20 97 04 57 15 76 60 ae 24 9a 40 fd 8e a6 81 3e 59 50 0f 2c 37 19 6a d7 8d a2 52 f4 c5 a8 4d 7b 8c 0b 7b f2 8f 16 7c c0 8d ca 1e 3c a8 0f 8e 01 0e 6d 02 d6 92 70 34 50 f5 30 ee bc c3 55 77 17 a7 a2 1f b5 e9 86 7f d4 3c Data Ascii: oeKtr9K5P"0\-tGRQR0PJ"pA=0vBdQ7'-xF@6V vE46BT.NJQ+/o)L/iV7)1 Wv`$@>YP,7jRM{{\|<mp4P0Uw<
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 2a 49 a1 51 46 84 bf a5 c2 14 4d 4c de 74 9f 82 2f be 2e 97 2a d5 3b 5a e7 78 da 7b f9 aa 78 a0 20 e9 65 eb 18 ed c7 0f 05 40 2d d8 e2 b9 d3 89 3f 61 1f aa 30 4f b3 29 8b 67 74 cf d3 b7 e9 45 36 8c af 8a 41 75 36 49 e5 5a 93 34 77 de 90 44 cb 67 42 db 8d 86 3c 9b 7c f3 31 61 2d aa e0 c0 68 31 67 6b 6d 8d 5e 5e ee 91 f3 ee ad 50 a9 0e be ab b3 41 f2 06 19 b6 17 d8 a2 eb 8b 6a d9 b9 82 5a dc 65 97 2f 39 89 1a 5b 18 ca ef dd 3f 41 bc 13 b7 ce 55 6e bc 79 ed d3 b2 a2 72 35 85 d3 46 22 b6 a1 24 55 96 4a 6c 9b 17 dd bf 7b 58 16 33 9e dc 7e 7a 30 27 44 06 8d 78 69 a0 3f a5 dc 6a 4c 9c b3 6e 15 5d 4f bf bc 3c da a0 8a b9 91 2d 1f 64 85 5d 3c 86 54 25 27 44 2d 9d 32 2f b3 77 20 ad 8f 5e 26 ad 9d da 34 2a ec 04 e8 b5 60 92 78 f5 9f c0 69 b3 82 0a c9 76 94 46 f5 7a Data Ascii: IQFMLt/.;Zx{x e@-?a0O)gtE6Au6IZ4wDgB<\|1a-h1gkm^^PAjZe/9[?AUnyr5F"$UJl{X3~z0'Dxi?jLn]O<-d]<T%'D-2/w ^&4*`xivFz
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 77 bc fe 63 b3 01 97 6f 38 52 39 66 18 a0 bc d2 18 6c df e0 ad 83 cf bc b3 c7 47 26 1a db 98 a2 c8 51 9d 14 b3 b7 99 f9 62 63 33 09 f9 16 e6 af a3 35 00 18 8e b9 2d 7a db ed ba 77 f5 2d f2 06 fd 01 27 cc 92 7b 60 8f 10 f0 83 7d 4d b5 01 26 68 ff 17 1d 66 c8 57 7c e9 06 21 70 b7 a0 b2 cd 8c 6e 2d 9b 35 e9 e9 4a 1b dd 6e 38 57 e2 b1 ae d3 af 4d b7 15 51 e4 b6 05 5a ce e6 3d 6f 54 66 59 a7 ee 6c 00 cb 6b 07 c4 ad a8 65 3f 58 f7 c1 57 5d 9e cf 7c 8d ec 04 61 7e 8b 2f 5c 1d b7 05 07 39 8e 7f 62 02 ec 69 b5 b1 20 3f a1 0d 85 8b bd b0 31 33 ec 1d 90 93 77 ce 3e 67 de 7f 7d 85 ed 4d 79 40 f8 36 5b b3 a5 c4 60 79 4d 8e cb 1d e4 05 c9 aa 02 00 be 4a d6 2e da 62 45 6d 62 01 9f d5 d8 a5 e3 89 85 cf 9b 11 25 00 c0 98 ca 50 e3 d1 61 7c d1 e9 95 6b af 02 9c 0f 82 2d fb Data Ascii: wco8R9flG&Qbc35-zw-'{`}M&hfW\|!pn-5Jn8WMQZ=oTfYlke?XW]\|a~/\9bi ?13w>g}My@6[`yMJ.bEmb%Pa\|k-
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: b4 54 ae c9 c3 15 55 54 3a d2 1b 3f 40 c8 29 4f 41 81 19 3c 58 eb 33 22 ef da 7d a9 59 52 fb b7 bc f2 69 13 e7 04 13 dd 78 70 86 6b e1 5b 02 00 5c 0e 4b 37 3d 88 d8 8f ff 58 e3 74 cc ec 34 ba f4 e3 d0 d9 0e 0e aa 52 95 ee cf d6 dc 2d 78 09 57 2b 5a 30 30 42 be bb 6a 84 5d 41 e4 be a5 62 00 27 0e 42 68 1e e5 e8 35 c5 98 81 9b 66 8e ac f3 de 6e e7 2b 5d 66 b6 1d 29 94 5c b9 1d d6 e1 79 23 6e 42 3b 27 26 2a 2e 1b 1d af 7e 6d 9d 2b 23 4b b3 cb 8b 5a cc 83 d4 6c d3 7c 16 7c bd 30 b8 f5 ce 09 eb f7 b5 c7 6b 1e 6a 2c eb 6a 8c 97 09 f6 f1 11 a8 a1 b9 29 1d 77 92 3e 8e ef f3 8d a5 2c 71 5d 1e cc e5 3f d6 6c 8c 26 00 35 63 61 71 c9 f3 e1 bc 3e 61 7e c2 96 3b 84 84 14 53 5f fa 54 10 e4 29 4a 8e 76 da bd ee 1b 54 76 e6 52 c9 84 26 b1 fd 78 37 95 29 15 dc 95 16 44 71 Data Ascii: TUT:?@)OA<X3"}YRixpk[\K7=Xt4R-xW+Z00Bj]Ab'Bh5fn+]f)\y#nB;'&*.~m+#KZl\|\|0kj,j)w>,q]?l&5caq>a~;S_T)JvTvR&x7)Dq
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: b9 cc 88 05 0e ac 07 8d 3c e9 31 c4 82 ea c9 f7 ca b5 29 e7 8a 52 4d 73 c7 ca 6f 3f 2c 51 ca ff b1 ac 52 7b 6b 68 06 b4 5d 9c 97 27 0e d5 50 04 c8 80 f2 87 5e 30 ce c5 0f ce f4 90 72 8f e8 63 5d 51 9d 80 6c 0c 1f 21 8c 1a 9b ea 0d 3b 8e 26 6b e8 a2 db 6c 0e 3d c1 8b 2a 7e 56 b8 dc c0 ad 02 b2 78 49 fb b9 46 fc e4 c5 c3 d3 5a 0e ac 06 ca 96 db 8f 1a 60 58 fa 6c a3 cd cd 10 a1 2b ba f4 49 83 fa b6 2b 37 1c f8 28 72 0f bb 95 d9 b0 17 d9 02 a9 57 8a 34 48 08 8c 6e 81 80 a2 8b 4c 32 67 a8 43 05 32 63 4a 19 e7 7d 6b 70 e1 41 5c 4a a2 91 5a 98 fc 0a 56 28 af 92 89 13 1d 9b 5f 5e d7 53 9e 21 7a 5b 5b f7 2a a5 77 1e eb 10 d5 be 79 05 ff ea dc de 20 6d 7e 82 fd 89 e8 16 37 4d df 1c 0c 28 ac 9d f7 dc cc ce 78 44 8b c9 3f f5 19 ff 21 85 67 d2 bb f9 c9 36 24 a5 f4 c9 Data Ascii: <1)RMso?,QR{kh]'P^0rc]Ql!;&kl=~VxIFZ`Xl+I+7(rW4HnL2gC2cJ}kpA\JZV(_^S!z[[wy m~7M(xD?!g6$
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: d1 69 e8 7f 19 1f 39 cb 86 c8 bc 32 5f c2 34 d4 c7 e5 06 49 4c 5f 57 90 92 ff 6d 6d 17 7e 84 26 b4 06 8b 17 29 37 12 f0 43 44 04 69 39 e8 73 fb eb e7 65 cd c5 e0 9b d5 8a 28 23 60 94 56 56 1a 3e 65 52 53 50 60 c4 6d a0 d2 92 b3 ac 38 74 69 ab b7 3e 2b 98 66 03 54 57 51 23 93 f1 1f c9 a9 d4 fe dd ee 38 f5 e8 14 3e b0 af 34 50 57 19 b8 30 c1 2d 92 c0 c9 1a fc 82 32 bd ad 97 03 97 73 23 e1 ea 42 f9 5f 78 4d bf d2 28 28 e5 30 70 a4 6a 56 cd 5b 0f e9 a7 c1 d6 3f c8 4d f3 38 df 20 02 14 8a d2 08 36 6d eb cb 2b 02 99 f4 34 e6 d9 10 62 4c af 4c 42 a0 0b 3b f5 1a 8b c5 ce de 4c 34 fd e8 5c 18 5a 6f ee f8 33 f6 c0 81 b3 39 fe e7 01 ea cb a4 6b b2 9a 3d c5 3e d2 7c 4f 72 5d 26 1b 0e 23 38 c7 23 1c 5c 7a 96 67 d9 25 50 4e 6d 06 c5 62 13 aa 8b 9c 77 75 53 3f 07 04 ae Data Ascii: i92_4IL_Wmm~&)7CDi9se(#`VV>eRSP`m8ti>+fTWQ#8>4PW0-2s#B_xM((0pjV[?M8 6m+4bLLB;L4\Zo39k=>\|Or]&#8#\zg%PNmbwuS?
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: ff 6a 25 15 22 81 e8 b4 c7 08 6f d3 55 d4 55 75 a7 cb ad db 15 30 f5 f1 a7 fa 7e b1 38 5d 4a 71 ae b5 af d7 f7 54 cd a8 ef 62 be 9e c4 77 88 c7 55 e0 bf 5a 67 82 04 64 fb 24 24 8d dd 84 c9 15 f8 6e 53 fc f9 90 bd 66 ba 9f 3b 18 d2 b8 79 b9 a4 d4 85 c0 89 e1 5f 09 04 8d 57 9c 53 80 d5 18 4b d1 bc 2d b5 db d3 77 66 bc 60 57 a0 98 ef 13 bc 29 e7 68 7d 9a 0c e7 86 52 f3 98 c3 02 ef df 66 b2 70 d3 b2 ee a3 9b 74 4f 09 f8 90 6e a5 fc 78 d9 f2 36 6f d3 ba a2 d0 b3 63 6a 09 a2 2c ef 9f 8f ee 62 1d 21 a8 0e bb 9a c9 b2 ea 89 aa 02 b9 d9 3e 4e 50 1e db 9d 97 cb ca b8 70 a3 65 15 8c b9 47 46 84 bc 34 56 cf 75 64 cb bd 5f 9d 48 65 e4 fa fd f7 d1 7c 2b 43 98 64 5d 46 02 0b f4 5b 79 3c c2 3c 20 85 5b d6 02 8a e1 9e 7c a3 3f 2c 61 e4 7e 3f bd 3f 4a fd 1d 22 21 a8 c1 5b Data Ascii: j%"oUUu0~8]JqTbwUZgd$$nSf;y_WSK-wf`W)h}RfptOnx6ocj,b!>NPpeGF4Vud_He\|+Cd]F[y<< [\|?,a~??J"![
2024-07-11 11:37:05 UTC	323	IN	Data Raw: e1 17 53 d8 3f 65 99 36 1a 85 c5 de 10 6f e6 ac ee 1a 33 62 6c 10 d8 2a df bf 09 2e ad 9f c6 a1 0e 09 13 c1 bf 70 64 20 45 ea b5 50 aa 46 23 14 59 5d 4e 27 fd ae ba bc 57 bf ce bf b2 89 4b 42 d2 18 01 8f 02 47 e5 c4 18 50 15 77 d0 d6 a3 b9 44 ee 41 49 45 bc 79 c2 95 20 38 94 0b 90 7b 09 9e 61 7d 76 93 c0 b8 6c c8 91 1c 92 90 61 75 20 c2 fb e0 54 6f 55 5d bd 50 9a 05 be 4b 44 9b 4d 3f 5d b5 35 0b 3e d3 8e 89 61 f2 03 9b ef 2f cd 4c 15 fc d0 a3 c3 85 25 3d a2 a8 be a4 d6 71 3e 3a b1 b3 55 2d 1e 38 f1 ea 29 e2 8b e8 00 f8 5f 8b 6c df a9 42 1a 32 f2 1e 9a 67 16 73 f5 fb 71 9c d0 a0 d9 1c 61 8c ff c0 9c df 92 df 98 2b 02 14 e4 27 3a e3 3e 09 fd b1 87 34 68 4f 70 1a f0 e8 4f 38 24 49 e7 8b e2 54 7f 90 1c 71 6b 61 9c 38 f0 27 62 28 ee 78 56 ef 7a 94 55 0f 97 a4 Data Ascii: S?e6o3bl*.pd EPF#Y]N'WKBGPwDAIEy 8{a}vlau ToU]PKDM?]5>a/L%=q>:U-8)_lB2gsqa+':>4hOpO8$ITqka8'b(xVzU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.17	49828	31.216.144.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	528	OUT	GET /decrypter.js HTTP/1.1 Host: mega.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://mega.nz/file/3LZ0hLYB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	238	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2039 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	2039	IN	Data Raw: 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 61 65 73 61 73 6d 2e 6a 73 27 29 3b 0a 0a 70 6f 73 74 4d 65 73 73 61 67 65 20 3d 20 73 65 6c 66 2e 77 65 62 6b 69 74 50 6f 73 74 4d 65 73 73 61 67 65 20 7c 7c 20 73 65 6c 66 2e 70 6f 73 74 4d 65 73 73 61 67 65 3b 0a 0a 76 61 72 20 68 65 61 70 20 3d 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 78 32 30 30 30 30 30 29 2c 20 2f 2f 20 66 69 72 73 74 20 76 61 6c 69 64 20 68 65 61 70 20 73 69 7a 65 20 61 66 74 65 72 20 30 78 31 30 31 30 30 30 0a 20 20 20 20 61 73 6d 20 3d 20 61 65 73 5f 61 73 6d 28 73 65 6c 66 2c 20 6e 75 6c 6c 2c 20 68 65 61 70 2e 62 75 66 66 65 72 29 2c 0a 20 20 20 20 6e 6f 6e 63 65 20 3d 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 38 29 2c 0a 20 20 20 20 69 76 20 20 3d 20 6e 65 77 20 55 Data Ascii: importScripts('aesasm.js');postMessage = self.webkitPostMessage \|\| self.postMessage;var heap = new Uint8Array(0x200000), // first valid heap size after 0x101000 asm = aes_asm(self, null, heap.buffer), nonce = new Uint8Array(8), iv = new U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.17	49832	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	710	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/2752512-3670015 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 917504 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16061	IN	Data Raw: f2 91 46 59 63 0a 04 14 d5 0b 3c 20 59 db bc 28 af 32 88 0f 7d 8f 30 d5 e9 69 4c 2d 69 45 e8 47 c3 ae 4d d1 9b 39 d7 5d 14 68 e9 bc 03 ca f2 31 85 d2 59 1b ca e1 60 4f 93 c7 84 12 e5 cc 89 4c aa 13 1c 81 77 eb 7a 9d 16 01 92 e4 d2 40 58 b1 65 c7 dd f9 c8 3c bc d4 3f be 26 57 23 00 3a 4e fa dd 9b 17 1d 70 ef f9 0f 7c 78 0f 4d 6e 2f 6b 35 46 b9 07 b4 da 5c 9f 91 c9 64 6e 56 3f d8 6c d4 15 f7 44 82 e8 ca 54 02 35 3e 37 e2 1f 28 67 eb 73 aa 7d 80 04 8b 27 bb 3b e3 cb ba d3 e0 37 6c d6 27 28 36 09 01 81 0e 4f 5e eb 1b 51 2e aa c8 de c2 40 b2 df d6 16 19 c1 48 44 b6 af 5f 5a 85 60 59 22 b5 21 bd 6f e8 b6 66 a5 f9 a1 37 3d 9b 37 20 67 c5 16 9d c6 b0 33 40 8f 8d 12 31 b0 a7 b6 cd be 0f ae 48 73 ee ef 8c 71 01 98 03 78 d0 8c 3c c6 26 c7 4e cd de 67 14 48 72 1f 53 Data Ascii: FYc< Y(2}0iL-iEGM9]h1Y`OLwz@Xe<?&W#:Np\|xMn/k5F\dnV?lDT5>7(gs}';7l'(6O^Q.@HD_Z`Y"!of7=7 g3@1Hsqx<&NgHrS
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 0a d4 71 12 d2 16 50 85 7e 87 87 ef c8 52 ad bc 36 d2 8b 92 8c 33 48 d5 2b 49 88 9b 87 a9 41 38 35 ca 7d 9f cf 8e 1c b5 2d 67 fa d6 f7 46 96 7f b0 e0 58 cc c6 6c 6a d8 a3 bd 2d fb 3a 3f 79 5c e2 0b cc 32 f7 03 cf ef 0b c3 64 04 69 fe 03 7a ac 15 04 05 a1 6d 4e 26 9d 9a f1 9e fe a1 38 2c e9 e5 7b 65 06 54 77 1e 09 2e 59 54 cf 39 85 01 50 8a e6 12 09 55 b3 08 6e 0f 4b d0 d8 33 4b 0b 20 dd d5 c3 a0 db b0 38 54 35 e7 59 70 05 1a b8 fc 12 2e bd 49 23 29 d9 be eb 4b 27 04 69 0f 57 eb b6 86 90 28 7a aa 79 dc b2 75 1b fb ce ec b1 6e 39 b6 bc da 9e 6b 73 87 b8 0c 17 d1 5e 46 15 b0 13 b3 fb 8f 54 7b 76 cc 1f e2 b2 f7 00 7c 2c 7c 67 fd 17 a8 9c db 36 b4 84 d2 93 87 43 a5 d7 55 83 bb a8 f7 50 1a 98 66 a2 95 2d 81 22 11 06 2c e6 f5 f7 bc 15 f8 bc 6c 49 94 52 7f 17 52 Data Ascii: qP~R63H+IA85}-gFXlj-:?y\2dizmN&8,{eTw.YT9PUnK3K 8T5Yp.I#)K'iW(zyun9ks^FT{v\|,\|g6CUPf-",lIRR
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 39 2d e9 dc eb de 26 61 72 92 b2 66 60 e8 24 87 66 cf 1a d0 aa ee 0e e8 b2 7b 3d 9f 32 29 72 82 6d bf 01 1e 35 ba 8b 24 9a 81 08 c1 7a e8 3b 6f b4 5d a1 9c 12 48 c6 4b b8 e5 7c dd d1 38 2d 15 c7 d9 59 ee 9d b4 23 8a 3b 70 b6 c5 9a 82 36 bf e4 5b ef dd 03 95 e8 18 33 25 99 26 48 06 04 4a 92 f6 a2 1f f5 77 bf 8b b7 78 22 6f eb 3d 5d 5b 59 56 fa ef ab d6 7f 41 b4 2c 5a e8 8d 2a 73 8c 6d 18 42 94 c8 1c 97 56 f1 f5 22 65 c6 d0 7f ae 9e 83 8b 91 55 68 d3 73 15 48 df 37 e2 51 9b 58 85 99 b0 7b 0b 2a fc 5d 38 d7 f7 3b 7b 28 a5 f4 26 96 2c 5d ea 23 3a 15 77 c5 55 17 17 36 57 e6 5c 8b 41 13 2a e9 17 36 9d 75 6c 5d 63 75 1f d2 d5 1b b9 d0 ef 5c c0 0a 4a 62 2f 5f b2 fb 31 82 22 86 94 54 55 1b 48 89 e9 91 db e7 2f 58 16 36 94 b0 bb 49 e3 3f 0c 64 96 19 8c ee a4 db a9 Data Ascii: 9-&arf`$f{=2)rm5$z;o]HK\|8-Y#;p6[3%&HJwx"o=][YVA,ZsmBV"eUhsH7QX{]8;{(&,]#:wU6W\A*6ul]cu\Jb/_1"TUH/X6I?d
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: b1 87 d2 a8 64 3c 9f 85 7c 47 65 86 ef 28 56 ec 06 a5 74 dc 85 f9 76 f5 7b 5c 48 e4 b2 4b a4 3b ba 36 47 96 f5 d3 d0 51 c7 55 55 f2 a2 2c 31 8b 75 b8 89 78 28 b4 8e d4 af 50 88 9f 54 d7 20 16 29 cc f1 05 7f 16 1c d1 d2 22 9e 57 30 f5 48 e1 e5 3f 9e 52 dd ac 98 3e 82 34 34 37 cf 09 ba b0 27 63 df 3d 35 d2 01 1b 7f a8 17 28 41 70 74 b5 46 6b d1 93 ba 0b a0 31 c3 25 e4 9c 88 a9 3a ad bc 9a 03 6c 50 45 6f 53 77 f6 98 84 4f d1 54 46 65 cc 02 5b b9 c0 33 51 15 0d f4 42 27 9d 3e 28 7c db fe 0b 2c fa ec cd 56 15 5a 61 56 55 7d 64 6e a2 12 d8 c9 50 a9 ac 3e e7 0d 41 c0 94 3b 2c 07 6f fa 4c e7 45 34 7e c6 72 51 18 63 02 f0 64 75 a1 7a 31 a6 ed 1f 1b f9 30 5e 9f b7 c0 fb 07 3d 73 c1 f7 a0 77 bb 69 41 d2 53 bd ca 90 50 76 d0 b8 4c ee 4b 39 f4 07 92 ae b7 0a 19 8b a4 Data Ascii: d<\|Ge(Vtv{\HK;6GQUU,1ux(PT )"W0H?R>447'c=5(AptFk1%:lPEoSwOTFe[3QB'>(\|,VZaVU}dnP>A;,oLE4~rQcduz10^=swiASPvLK9
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 60 cb e4 ae 5f 7b 11 50 db 6c 12 e4 51 60 97 88 88 b1 92 28 43 cc 6c 05 a6 d5 23 b4 75 df 63 41 4f 83 3d 90 10 3c e1 5c 89 7e 91 2b 80 32 de 74 ee fe cb e7 20 a5 e4 72 78 b2 58 bb 10 60 fc e4 6a 54 f8 30 47 a4 8a 83 ae d6 53 29 85 94 87 f8 99 c6 11 a0 77 81 2b d3 31 d0 50 01 62 31 68 83 c6 6e bc 4d b8 68 b7 eb a9 42 d3 dc f1 e9 b4 b7 9e d9 b9 a0 a2 3a 3e 0c 75 11 a5 73 37 40 90 0d 78 68 06 91 c5 6f 26 c5 3a 49 07 ba c1 99 ba 5d e8 bc fb f5 05 c0 16 74 c8 6a e4 a9 55 31 55 bd f1 0d ce 68 4a 93 de 7c 80 96 c4 3b dd f8 b5 24 85 f8 6e b0 01 a5 5f 70 ac 20 25 76 32 e2 79 c9 80 85 f9 9e ff 8c 7a f2 2c b8 5b d8 e5 1f ef c2 d7 8b 0a e4 44 8a 0d 61 9f c3 b6 45 83 e5 bc a9 b9 c3 c3 11 a2 57 f3 ac 26 8c d2 6d 88 24 4e fb 9f d7 a1 f4 df 77 ba 62 92 0d b8 e1 06 6b a2 Data Ascii: `_{PlQ`(Cl#ucAO=<\~+2t rxX`jT0GS)w+1Pb1hnMhB:>us7@xho&:I]tjU1UhJ\|;$n_p %v2yz,[DaEW&m$Nwbk
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: fd 63 d8 ec de 2e 7d aa 85 61 d5 0e f4 d6 74 5a 1b 51 ce 01 a6 59 23 7b 17 47 23 e9 f2 45 e6 92 65 34 29 28 2e 7e 05 36 02 5e a6 69 20 6c bb b4 25 fa 09 a9 43 fd d6 ed 5a d6 8b c4 58 d0 8b 97 f9 51 8b 02 7c 03 f1 d8 11 7a 7b b1 84 75 4e 82 7c f3 79 9b ec c3 68 c3 09 03 5f 23 0e 3c c9 2f 49 a9 3e 9b ef ac 69 c4 c1 f4 0d 84 1c 56 7f 27 33 0c 92 ca d6 a2 2d 14 ca e6 d8 3b 72 c2 75 de 8b 80 05 5c f8 6e d5 c1 1c c6 1b d6 24 d9 33 5a 75 d2 ac f2 38 32 76 fa 85 fe 30 ed c8 d8 2f 27 a1 a7 c3 37 81 fb 01 65 b1 97 5d 37 b0 4f 70 d9 2a 78 e2 c1 2d a2 b2 11 3e e9 55 6b a1 26 bb 62 5d bb 5f f7 69 a0 26 c4 d6 61 27 6c 5c 30 2a 9d fc c2 2e 65 18 95 9e 12 5a c5 1e 44 92 90 d0 c4 fa 1a f1 de d1 23 a6 03 3a 80 07 28 74 e8 89 87 69 5f 27 e1 e9 64 f4 24 8e 9e 17 7c e2 33 55 Data Ascii: c.}atZQY#{G#Ee4)(.~6^i l%CZXQ\|z{uN\|yh_#</I>iV'3-;ru\n$3Zu82v0/'7e]7Opx->Uk&b]_i&a'l\0.eZD#:(ti_'d$\|3U
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 8b 83 c4 22 46 1a 37 72 54 5f 84 00 9e b8 3e 8c e8 1e 0f 28 4d 74 c1 9f c9 6e da 18 43 1d 95 50 39 64 5b df c9 9b 34 08 a6 ad bb a8 32 bb 28 55 c7 ea 57 88 cb 4f be 2b aa 51 f8 31 c5 79 49 22 78 49 02 83 28 11 a0 ff 9f 34 df ab 70 07 b2 3d 99 39 57 fb b8 28 c2 32 50 c8 08 dc a6 52 e2 de e0 1d 90 85 ed 4b cd e3 44 0a a2 6f e2 c5 19 eb 32 99 83 56 cf 42 4d cc ff 4f 16 0f b6 dc 1d 74 95 e4 43 97 70 9d f6 b7 16 b7 53 ac 96 31 d4 fe 1a 57 ca 6f 03 a8 cc 2c cc e1 0e b1 f5 16 0f f2 75 31 0d 5c 16 99 63 a3 6f be a8 f8 49 7d c9 5d 68 8d 7b b2 3e c2 7f 81 ad e0 61 ab 96 2b c8 3f 83 28 a7 86 99 c0 46 cf 88 a0 a5 a9 87 c3 d1 6d 73 1c 11 b4 0c d1 e6 75 ad f2 3e 94 47 b8 e8 0f 21 b0 0c 22 35 03 63 c3 cd 1c 1e 4d b9 9c 65 7d 2e c1 33 e1 db 08 cd ca 04 51 1f be aa ab b3 Data Ascii: "F7rT_>(MtnCP9d[42(UWO+Q1yI"xI(4p=9W(2PRKDo2VBMOtCpS1Wo,u1\coI}]h{>a+?(Fmsu>G!"5cMe}.3Q
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 2a 77 e4 0b b2 3f 0d c4 ba 6f 98 f6 eb 7d ca 4a c7 80 aa a1 0d 01 2c 80 55 b4 e3 3f 78 69 29 ba bd df 88 65 e7 7b be 82 d5 42 9b 3b 93 6b 15 cb 00 4f f1 6b b8 8f d2 6e 7a 3a fd 4a 7e a9 f3 c4 8b 05 d9 5b da af 93 e0 26 5d 7a b2 18 6c e3 e9 30 bd 9b ce 3d 79 23 45 8d 16 8d 6c 50 11 1c a5 86 d8 a6 66 bc f4 53 68 a7 68 08 5c 36 06 46 07 4c c3 01 d4 a5 da 13 44 ab 50 39 da 8c 8c 05 1f a1 b0 e8 e7 d2 05 50 4d b1 b8 98 5d 35 b9 5c bb 92 53 3d d9 ae 6c ae c9 68 13 0a 35 bb 6a ec 1b e4 0f d8 98 46 23 4c 82 13 41 21 4c 80 52 0a ec f9 41 5a af 3c 07 52 e4 9a 18 cb a3 2a 54 0b 3e 6b 59 38 44 ca 43 91 d3 38 6e 37 7f f8 a1 5f 1e 0e 69 cf a1 9a 42 1b 66 01 bd 00 66 82 24 44 6d 1a 52 d6 cc aa c6 93 eb 8e 05 24 b0 86 29 38 f1 0c fc 2e a1 c4 8c e3 8e 82 fe 72 13 22 e4 e0 Data Ascii: w?o}J,U?xi)e{B;kOknz:J~[&]zl0=y#ElPfShh\6FLDP9PM]5\S=lh5jF#LA!LRAZ<RT>kY8DC8n7_iBff$DmR$)8.r"
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 66 bf 6f 57 2c bd ba 92 3a 39 c2 59 91 c0 e4 1b 72 6d 37 a9 9a 64 a6 be 47 8e 2d b7 3b e9 20 b7 26 3e fe 50 bb 53 9f c4 11 3b bf 81 55 11 53 17 70 aa b5 e6 01 0a 57 57 51 9f 96 37 e5 a8 20 de 1d 18 15 82 8f d3 a0 06 29 bd b2 30 c7 30 6d 28 1f e6 f3 a6 71 87 3b a1 bd 5c ed 35 b0 cd 50 83 cd 83 6b 28 a8 5e 28 8c 56 89 2c ce 17 43 3d 78 e2 0c 6f 0d 89 a0 cf c7 91 e4 5a 1d b2 41 89 e8 43 9e 50 bc 50 8f f1 07 7c 44 bc 45 d8 41 11 75 5e 92 74 2e 9b 87 cd a9 de d6 c7 b4 05 b1 21 ed 51 ac 2e 25 12 31 3b b9 e3 1d 5d f7 23 01 19 92 61 c3 04 d0 7a 5a bf 7e b4 3b 2b 70 49 da 05 0a fe 5a dc c2 17 4d 74 c4 d9 6a 73 84 6d a0 db 5d 82 70 17 f7 1a a3 2b f4 58 af e9 d6 7e d1 f7 cc 2c 79 5a fb 25 7f f7 1e 2f 9e 73 b2 36 f0 18 3a e5 8c a0 e1 32 6a ec bd f0 53 8e 8d 87 4e 92 Data Ascii: foW,:9Yrm7dG-; &>PS;USpWWQ7 )00m(q;\5Pk(^(V,C=xoZACPP\|DEAu^t.!Q.%1;]#azZ~;+pIZMtjsm]p+X~,yZ%/s6:2jSN
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: c4 a3 33 9e 79 d0 1f a1 48 93 ad 18 4e 70 a9 75 55 26 e8 2f 4e fe d2 22 4b 21 57 14 ee 38 87 cb b7 99 89 56 86 2b f3 e5 c5 74 d9 80 09 4f 94 31 fe 81 4e 06 44 dd 45 c3 8a 8f d3 59 cd eb cd 17 80 5c 1f 77 44 cf 6a 74 e3 d7 89 0b 11 c2 3a 70 3b 0c 9c 7a 62 b9 86 fe e7 61 d7 63 0f f8 02 5c de b7 39 60 6b a7 7b a1 ba b3 5c 68 e3 6f 2a 8c db d9 8f 6e ac ba 94 37 1b 20 2c c4 ca b4 13 99 87 90 a6 fc 92 d2 9d ad da c6 d7 f9 a9 12 33 2e 6f bc 43 a0 b4 41 da f8 6e 04 f4 db d6 ba 39 8f 25 73 5a 47 ad 40 d8 3d 64 44 87 e5 cc 58 c4 08 87 44 34 ac 92 9d 6f 1b 92 08 58 36 88 50 0f 27 f4 ba fd ea 76 c5 a6 40 c4 4a 97 35 14 00 81 11 0d 7f e2 bb 74 b4 eb 96 65 d0 36 25 3c f4 75 96 c5 93 2b 1f cb 43 f0 99 c9 cb d0 7f 3d 82 ac a1 a6 ee 60 9c fc a8 7a d0 2f fb 64 40 25 77 07 Data Ascii: 3yHNpuU&/N"K!W8V+tO1NDEY\wDjt:p;zbac\9`k{\ho*n7 ,3.oCAn9%sZG@=dDXD4oX6P'v@J5te6%<u+C=`z/d@%w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.17	49830	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	500	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/131072-393215 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 262144 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16061	IN	Data Raw: 52 63 56 37 f6 93 9c ff 3f 35 b9 e6 4a cf ad 9a d2 62 20 63 7b 04 99 67 f1 9a cc d9 3c 62 85 43 7e 93 9c dd 49 39 1e 88 27 12 96 ef 78 1d cf ea 1c 6e 12 aa 1d 25 02 1c 3a bc 35 69 5c 35 ca 20 81 e3 80 f3 7c 08 03 81 46 02 48 0f 69 2c ff cb c4 d2 d1 e4 02 08 19 e6 d1 fb 69 29 3d 1d bb 91 f0 a7 ee 1c f4 b6 10 d5 23 4f 0d 40 1f cf 7d f1 10 3f 44 4f 0e b2 c6 8f 82 03 bb b9 78 0b 88 69 2e 0c 7f 6f bf e9 b5 ca e1 ed 60 e5 38 46 18 ef 63 9f 2b 06 aa db d0 d5 16 a1 e1 2c b0 fc f0 c8 a7 8f ef 89 87 8a 8d 2f 04 89 0a ba 0f 7c fd f0 d1 e3 b9 71 b8 7b c3 bf 0b 90 79 f8 92 b1 4c 15 13 e0 8a cd 9e 85 50 dc 7b 91 d7 a3 75 39 2b 0f 5d ba 08 ef 8c 6c 45 d4 65 6e 3a 97 61 93 e2 8d 04 9a 13 d3 81 3b 9b 3e 78 e3 ff 62 03 0a 2a 20 f9 07 b9 e1 3d 2a e3 8a 27 fb 5b e5 42 d7 85 Data Ascii: RcV7?5Jb c{g<bC~I9'xn%:5i\5 \|FHi,i)=#O@}?DOxi.o`8Fc+,/\|q{yLP{u9+]lEen:a;>xb* =*'[B
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: d2 8f 34 c7 64 09 0f 6e 0a f7 3b bc f3 94 a8 7a 91 9b 20 26 a8 52 63 44 33 2a 89 83 14 a5 d2 8f fe 95 2a 4a e5 89 bb 13 b1 00 1b 54 89 8a a1 46 5a c6 92 31 0f 3b 5d b2 ba 9e 28 e3 06 3e 23 f0 03 c6 60 8b 6b d6 3d bb 80 98 3e 77 3a 88 cf 8f 2a 0d 32 fb a2 cb 30 f0 4d f1 a4 3f e2 db 27 71 11 54 a5 a2 cd 4a 32 75 ec a2 cc 47 a6 12 f6 e0 72 11 18 95 eb ef 88 4f c7 04 93 06 9a 91 3a e0 12 08 98 1b 88 16 de fb 96 65 64 1b 03 91 6c 4b fa b3 db ce 55 4d b2 69 ab 3e e7 c7 ec cf 3c bd 91 7b e0 38 a4 11 35 fd f3 84 25 2e d6 18 fd c4 28 fe 66 63 b9 15 7b b0 5d c2 fe df 7b d7 ab 18 70 92 91 e1 bc c9 26 e9 ff 32 1d cb 01 7a 16 d4 35 ee 43 04 3d 89 51 93 dc a3 55 fb 39 1d c2 e4 3d b1 33 88 48 6e 9c 5e 4c 2f ca f5 44 b5 c4 7b 37 92 69 f7 d3 66 fb 57 50 5e 40 3f a6 30 e0 Data Ascii: 4dn;z &RcD3*JTFZ1;](>#`k=>w:20M?'qTJ2uGrO:edlKUMi><{85%.(fc{]{p&2z5C=QU9=3Hn^L/D{7ifWP^@?0
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: a1 b6 32 1e 50 32 a6 9b 99 d1 cc f2 44 4f b0 8a 67 54 9f 0a 1f 54 e5 e0 91 04 13 3b 0a 0c e6 61 5a 56 17 e0 a7 64 b0 3a e6 3c e0 43 b7 fe 53 87 d1 ad 90 97 32 46 8f 7d 75 26 fb 32 79 75 64 10 9b 54 2f da a2 c9 dc 8a c9 60 b2 3a 2a 68 2e 45 a5 45 72 b5 d5 8e e9 c1 e5 e5 99 8e 62 e4 a6 5c 9b 85 6c 56 85 ee 84 9e a7 ef 37 ea 2b 77 d3 3f af 50 7d 82 ce 2a 68 2e e2 23 33 90 fb bf d3 20 46 0c 48 eb c7 fb ba 9f 6c 81 b6 42 7b 2b 4c 28 2e 65 dd d2 1b ab 20 ad 8d c6 ea de f9 88 c8 cd 57 90 bb 69 8b 19 9b b1 39 28 9c bc 29 9c 1f b9 fe f0 76 9d 52 18 2f fe 9a 23 35 e0 51 84 9b 59 cb e7 43 82 46 0a 70 71 67 a8 1c 84 66 19 52 24 1c f6 04 95 ba 33 f5 5b 39 cf 12 e6 bf 28 5f f3 e6 13 39 aa 28 09 1e d9 fd 61 8a 31 54 9d ac 05 d8 57 87 2f bf 5e 0c 12 e9 33 3d 41 a8 49 6c Data Ascii: 2P2DOgTT;aZVd:<CS2F}u&2yudT/`:h.EErb\lV7+w?P}h.#3 FHlB{+L(.e Wi9()vR/#5QYCFpqgfR$3[9(_9(a1TW/^3=AIl
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 7b 15 af 00 be ac ed ad e8 f7 c9 8f 40 9e 74 4a f9 6b 8d a0 4c 3c bb d6 e5 a3 a2 03 8e 34 bf d5 c8 3f 63 8c 8d 9b 71 6c b1 90 c6 8c 40 6f 51 1b 85 52 9b 78 e2 98 96 0d 9f 7c cd 7c ef c8 d9 61 e0 b8 fc 40 f9 d0 f8 6b 25 84 16 d5 f2 ee 39 8c 9c aa 6e af 88 22 bc 75 14 15 f6 42 26 b0 e5 ec 51 8d 4f 79 29 e5 4c 13 2d e6 98 30 22 23 18 85 f3 98 f0 0e 36 98 ca 05 01 6a 6e 7c f8 b9 97 da e6 fe cc fe 9f 49 11 a8 d9 e6 0a f7 84 8c 16 b4 76 5e 15 c8 d9 0a 3d c3 e9 e5 e2 91 96 27 86 43 3a 9f 38 d5 9c 0d 17 13 fb 81 8d 9e 4d cb 5d 6e 90 f0 29 36 60 b5 d1 da a8 b1 43 3f 50 7f 54 01 6b fa 1b 94 30 93 83 7e 92 3f 16 91 58 02 fb f0 9b af b7 e4 9d 79 83 17 47 18 8b f4 03 29 86 81 e0 b2 fa 6a ef 6d 10 a7 a8 c2 8f 17 fd f5 8f 0d d3 10 17 94 44 af 8d 2a b7 e6 8c 04 fd 6f ca Data Ascii: {@tJkL<4?cql@oQRx\|\|a@k%9n"uB&QOy)L-0"#6jn\|Iv^='C:8M]n)6`C?PTk0~?XyG)jmD*o
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 14 af 6d d7 f0 0f 35 4e 14 d6 ca 32 ee 01 4c cd 10 5c 76 8a a8 e9 9c 9c be 0d df 40 68 64 c1 3f b1 0a ac f8 fa 6f 29 2d 04 96 e3 b6 74 d9 dc 8d bb 4c d7 4c 19 8a fa 8d 3c aa 71 e6 df 4d ec 04 ef 04 c8 1a 2f 33 5f 65 b3 90 c9 d8 92 b1 69 e1 8c 38 93 71 93 d5 d3 77 3f 11 89 89 e6 cb c5 45 ba 8e 2e 8d f7 0b 44 79 d7 22 94 bc 77 7b 8d 2e f6 ae d8 f1 88 80 fb a7 1b 8d 2c 29 96 b4 03 ed 36 a9 5c 77 f1 79 ec 9b 4b aa 77 95 03 c8 3e 77 65 7e c8 ed 4e 1a 12 93 d1 7b 36 21 0e 8f 79 43 5a e9 d5 ba 15 9e a0 20 4a 2c dd 28 9e 3b 9d 25 14 34 e4 b6 ec b6 82 37 83 18 ae 6a f8 52 64 82 b3 0e c4 c1 48 fb 58 ba f8 d0 49 7f cc 15 85 05 26 03 ff bf d5 b8 15 84 96 d8 12 4e 8d df 4a 97 89 97 b9 98 62 a9 19 aa dd 89 e7 cc 0c 5e c1 fe fc bd 0c b7 00 b3 27 4f 9e f3 e1 c5 89 87 eb Data Ascii: m5N2L\v@hd?o)-tLL<qM/3_ei8qw?E.Dy"w{.,)6\wyKw>we~N{6!yCZ J,(;%47jRdHXI&NJb^'O
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: e0 fe ce a7 cf ed 89 d7 55 ed c3 a7 37 60 8d 87 83 3d cc 8f be c9 92 5f 30 50 3c 93 15 dd ef 7b eb 1c e6 cc 2b 8b 72 6d 00 00 e8 39 ad b2 6a 66 1b 2a ae 7b 4f 2a cd ed dc 21 f1 78 8b 26 ca 26 97 da 15 d8 6e 60 6e 95 c1 90 14 56 43 cc e3 2b 80 62 10 06 8a 52 91 2a e0 76 d6 4e 8c da f7 7a b7 10 7e 18 aa 6e 1b 28 92 7d 46 db 82 31 54 0e ef 11 11 80 bb 0b 59 af 19 ed 72 ce 77 e9 7e a0 52 45 8b b5 a3 ba 77 29 2e a0 04 30 62 e6 f3 12 96 28 1b 2f 8f be a2 7b 9c b2 81 72 29 3e f0 5e e7 2a 1a 7b 6b 68 ea ee ba 36 cf 9c 12 a3 02 fd 13 e2 72 2d cc f4 c8 72 78 17 8b 70 29 df 83 4d 3a 90 4e b1 4d 2c ce 45 fd 69 bf 68 98 56 39 84 4f e4 c6 9e 21 a6 31 38 ae 00 28 34 a8 19 eb dc 58 b1 08 2f 4e a7 a6 c3 7d cc 6f a4 f5 75 c3 e4 c3 ea 7c 9f c9 45 8a b1 03 08 99 00 b8 41 cf Data Ascii: U7`=_0P<{+rm9jf{O!x&&n`nVC+bRvNz~n(}F1TYrw~REw).0b(/{r)>^{kh6r-rxp)M:NM,EihV9O!18(4X/N}ou\|EA
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 5a 01 ca e2 1a c1 ea ed 8f 74 65 d5 6d fe 3f c7 13 ae 87 7e 99 24 4c 3b ca 10 dd 69 d7 c3 5c 46 8a e8 aa ff cb 6c 35 5d 8c 4c be a4 d5 39 3c 0b 2b a8 be cb ec dd 0d 08 64 78 32 72 f8 8b 24 c4 f3 04 b6 a0 c2 5a 09 bf 03 29 81 4b fb 91 de f9 27 21 06 2c e4 27 fd c7 dd fe 5f 9c cf 64 be 3c 6f 8e 00 d0 c9 fe aa 47 38 bb b0 d2 df 08 3e 53 49 d6 ac a3 c3 f2 e2 f8 c2 24 c2 c1 63 93 4d 50 37 0f e1 93 3d 71 4c d2 8f 3c 03 3f e3 ff 3a 96 d0 48 30 40 e1 20 1c 5a 96 98 43 75 7d 7b 47 ae 03 d7 66 c8 c4 8a 41 54 df 83 27 4c 9c e2 f8 2f be a3 0e 2f 1c 17 61 1a cf 41 7a fe 3f 4e 3c 9f bc 92 c4 4c a0 c5 4c 41 f2 48 37 84 1f 77 e8 4a 43 99 fb 5c cb 4d e1 0f ab 1c cb 92 dc 0f f6 5c 6c 5d 69 a8 75 01 5e 71 01 a7 85 ae 5c 58 47 9a b2 a7 40 8a 44 bb fb d6 f2 2d 3b 44 08 f6 84 Data Ascii: Ztem?~$L;i\Fl5]L9<+dx2r$Z)K'!,'_d<oG8>SI$cMP7=qL<?:H0@ ZCu}{GfAT'L//aAz?N<LLAH7wJC\M\l]iu^q\XG@D-;D
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 70 6f dc 82 99 a4 d0 d5 1b 13 a8 ec b1 e0 82 e9 66 e4 29 01 0f 5b 00 db 68 4b b4 27 8e 7f 90 54 83 c2 7a 3e 44 e3 ef 46 c9 f7 2d 3b 35 42 14 8e 5d 77 96 c1 b5 f0 10 93 d4 bd 85 ce d9 3a 23 b2 97 80 b5 9b 54 4b 94 75 e6 f9 07 4a 7b 0b 8b 9d 7d d1 79 92 34 7f 87 f1 49 06 1f cd 27 0b 6c 5f 04 61 5f 8c a6 e6 b8 7d 2b dd dc 77 f0 43 43 2d 14 04 ae 1c f3 04 97 19 c1 d5 2d c2 ff 15 59 c1 c7 32 11 2b ea 1a c8 b8 aa df 76 4c 8d fe 9b d6 3b 26 9a 45 5b b8 81 00 d9 8a fc 4f 5d fb 36 31 84 22 c9 8d e6 92 64 71 d2 05 1f f5 6c fb f0 c1 f8 00 70 60 98 23 99 ec 53 d5 87 b7 de 2d 3e c8 01 96 5a 53 1e 48 b5 3b 8b 04 60 78 a0 86 fa ec d0 b7 40 f2 dc e7 be 70 c5 13 c6 c7 f0 01 f5 51 9c 91 b2 63 f3 d9 d0 3e 4b 92 d4 a6 9b fc 85 f1 7f 94 04 4f d2 1f 4e 5f 87 cd 16 4a c7 2a 46 Data Ascii: pof)[hK'Tz>DF-;5B]w:#TKuJ{}y4I'l_a_}+wCC--Y2+vL;&E[O]61"dqlp`#S->ZSH;`x@pQc>KON_J*F
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 72 f9 79 60 62 f2 36 30 3c 86 19 bc 49 41 36 e2 3f 94 65 d7 3f ee f4 22 d7 49 00 1b 53 07 ec 88 ce f1 41 85 3b e3 04 66 2a cd d7 29 b2 88 f9 ea 01 03 8e 34 a4 db 33 e9 27 00 3d 2e 63 1d 7b 08 be ca e3 33 97 41 07 0d 84 72 a6 ff bb 16 11 a7 2f 49 56 dc 13 4e 98 18 a5 4e 45 4a 64 5b 3c 48 16 86 90 ba 7f 7c d0 aa b9 56 65 0a 33 d8 ae c7 f8 db fb c6 f5 9e 56 f2 69 9b 57 85 c9 0a 61 20 42 f7 72 3b e3 15 59 fe 8b 7c 3f ac df 5d 18 f7 85 ba eb df af 9f 52 e5 46 6f c3 ec c6 70 cb 6e d1 35 c7 5a 8a c8 85 47 89 1d bf d2 1c 12 fb fe 1d c0 a2 11 6c 8d 49 02 98 d1 65 d3 4d 0e 03 01 7b 81 d9 89 be cb 71 d2 d6 32 4f e5 cc d3 43 b4 98 df c7 5a 0b 94 a7 b9 5a 3b e3 e7 64 2d e1 cc 42 b5 dc 49 8f 49 b7 87 90 8a cd e7 17 ee e5 f8 0d 8d 1d 34 89 93 aa 9c 65 12 c8 a1 d1 85 63 Data Ascii: ry`b60<IA6?e?"ISA;f*)43'=.c{3Ar/IVNNEJd[<H\|Ve3ViWa Br;Y\|?]RFopn5ZGlIeM{q2OCZZ;d-BII4ec
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: f3 75 4a f2 03 c0 15 63 37 41 61 89 3e f7 fd b0 3f 45 9b 75 99 5a 6b b2 d1 12 2d ba f5 fb cb 85 a2 88 54 ad a6 7b 40 4c 02 5f ac 42 fb f5 a7 3b c5 c9 53 1a ff da f6 56 90 5b 66 b2 4e d5 12 0f 2a d1 1f 1d a4 1a 1e c1 b1 7d 7c ad eb 6f 3f 7e ae bb 70 8b 8d 33 32 28 23 c3 89 82 8c bf 5f 2b 19 ff 29 38 fc 4b f7 87 87 cb 0b 1c b8 dc 57 1b a3 d5 41 61 78 49 4c 58 ba d3 94 30 a6 b0 04 77 c5 0e 5c 89 54 02 71 fa ee b9 18 12 3c c6 ce 29 b6 a4 c5 e4 05 29 71 30 a4 f9 e6 71 da ba be 55 e7 ba 24 6e 7a 84 18 3f dd 07 5c a0 a2 f2 c4 99 d9 af 23 33 22 38 40 37 e2 b3 00 37 c8 a7 8a 78 d5 6e fa 23 87 63 bc c2 ed 88 08 cf b0 aa e1 3d 58 b8 c4 e4 a1 64 5e af 37 f9 1e 90 fe 15 a3 37 db e5 e2 e8 2b 9f e4 87 0d 10 f8 74 43 d1 03 af 3b a4 92 03 8d b4 3b 0d 63 8c 58 c2 8c 9b 64 Data Ascii: uJc7Aa>?EuZk-T{@L_B;SV[fN*}\|o?~p32(#_+)8KWAaxILX0w\Tq<))q0qU$nz?\#3"8@77xn#c=Xd^77+tC;;cXd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.17	49831	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	710	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/3670016-4718591 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	324	IN	HTTP/1.1 200 OK Content-Length: 1048576 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16060	IN	Data Raw: 7c d7 35 c1 a1 d1 3e d9 6a a3 0c 56 b4 30 40 d0 54 95 ee a1 46 05 57 2e 08 2b 46 b5 a1 e7 91 72 1e 7d 68 42 66 00 92 16 7e b2 4f 2b 27 e7 37 a8 92 5d 1b e5 7d 4f 0f ec 52 3c 12 d3 19 0e 23 ac 06 de 7c 47 32 06 b6 6e 8c ae 9b 9c 5d d8 7c 11 c4 00 4b 2f fc 63 a2 f4 bc 2a c5 ca 72 f9 1c 3b 8b 37 fb 79 dc 98 c1 88 82 5e 83 05 b9 fd b8 3e 5f 74 e2 68 db 80 f2 ad 96 79 2e 23 1a b5 d1 0d 22 c8 29 9d 21 8d 67 04 be 52 18 af de 12 5e d1 ab ec a8 3d 7a 77 f2 d0 b7 39 f1 ce c5 c1 c0 b4 c5 61 80 63 b9 55 64 f6 cd 13 3b ad df cf 7d 0d ea f7 99 82 21 0d 1b f3 dc 81 b0 29 b6 5b 3d 51 4d 6d 79 e8 89 ec da c4 47 fc 04 79 4a ae b0 d5 66 78 91 e3 01 7d 4d a5 96 a2 7b bf 03 b1 e5 70 46 4a 58 31 f8 d2 e6 fa d6 d8 07 91 4e 33 29 9a 01 b7 fb ba 4f 20 da 98 9c 40 51 65 81 55 4c Data Ascii: \|5>jV0@TFW.+Fr}hBf~O+'7]}OR<#\|G2n]\|K/c*r;7y^>_thy.#")!gR^=zw9acUd;}!)[=QMmyGyJfx}M{pFJX1N3)O @QeUL
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 5b 59 1b 05 a1 c7 53 08 a4 6c 82 a4 1f 57 dc 58 40 d4 7e 4d 48 da 9e 2c 36 03 a9 0e 0f d8 ca d4 65 e5 17 a3 d0 d3 b0 70 fe 5d bf 54 39 3f a1 0f a7 ec ae 3e 32 91 9d 00 03 83 e9 c3 bc a6 f2 86 51 57 9a b5 45 b5 8e a2 1b e1 7c 77 58 19 b0 44 7b a4 36 e2 3b 12 95 03 53 89 95 44 c4 22 8b f2 dc a6 5b dd 07 bb 3d 7e 2d 23 fb 1d db a6 7e d0 bf f9 4d 68 51 bf e9 0a e5 2d 5f fa 45 55 b2 76 a4 83 30 7d f1 dc 92 01 fb 9f 37 80 fa dc 6a 43 07 39 fb 54 52 62 8c d9 29 e9 ed fe 92 1d 4d 1b 59 54 7e bf 4f fb 62 12 d6 92 17 54 d3 20 b1 9d 3e e5 88 b2 bf 72 5e 06 66 d5 24 d0 8d a1 95 43 59 02 80 66 8d fe 09 29 a9 5b 46 57 f7 3c d4 ba 7b b6 e9 85 41 53 8a 0b 78 66 6b 44 cd 2c ce 5c e8 35 7f 43 d2 61 c5 81 7f f5 b2 6f 02 4e c5 a4 27 fa 53 40 63 fd cb 4a 81 6a 55 92 be 0b 0c Data Ascii: [YSlWX@~MH,6ep]T9?>2QWE\|wXD{6;SD"[=~-#~MhQ-_EUv0}7jC9TRb)MYT~ObT >r^f$CYf)[FW<{ASxfkD,\5CaoN'S@cJjU
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 8a 5b 35 58 a9 f8 f6 38 6b b2 26 65 0f bc 09 40 c8 99 48 6d 64 79 38 04 60 60 58 06 d4 e4 cb 87 3b 21 a3 6d bd a7 98 cd e1 dc eb dd 28 62 0e c7 a5 4a 2c a8 ee f0 41 86 06 9e 54 e8 4a 25 b1 66 09 90 54 a9 d6 6a af b8 c3 4d 1a 6e f5 6e d6 66 a4 0b 25 1c b6 d5 6c aa f7 c4 68 a8 2c b3 ae 3d 6b 04 a4 f3 98 34 db fc 89 83 a5 5c 4e c5 e9 fe a2 6c 09 57 2b a9 1f 17 6d 8c 4b d9 de dc 39 37 8c 96 99 50 e9 83 78 32 c8 80 9f 3a 15 ad 5c 2d c6 0e 00 8f 66 cb de 04 60 9b 5e ad b8 71 64 c5 8f ca cb 1b ae 55 c1 d8 3a 69 8e ae 92 72 46 d3 ad b7 39 d6 6a 44 a1 3a 04 18 92 52 9b 95 6c 77 b6 7d 15 83 ed 0a a0 56 cd 04 39 61 9d b3 93 db cb 4f f6 41 db 01 62 db 5a 91 7b 27 b0 53 bb 92 ab 98 14 86 6a 5a 03 e0 3e 66 7e c9 57 72 25 a6 cc 8a d5 29 49 17 73 0f 09 83 86 68 3c 09 42 Data Ascii: [5X8k&e@Hmdy8``X;!m(bJ,ATJ%fTjMnnf%lh,=k4\NlW+mK97Px2:\-f`^qdU:irF9jD:Rlw}V9aOAbZ{'SjZ>f~Wr%)Ish<B
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: cb 29 b2 d4 09 66 6b 8d 02 7e 16 3e b3 ed 41 57 65 38 3b 26 c4 d6 6b a2 55 f7 0b c3 7b 39 b3 79 19 aa 51 c9 dd ca 64 e4 71 0c 94 7b 0b c3 95 c9 9b ff b6 b3 37 b1 ef 73 4c 7d fa 6d 9e 62 b3 e7 05 df d9 9f 18 6d a1 2d f0 5d 21 a4 aa 97 e4 0c d8 63 3e a0 4e 09 d1 b5 5a 4b 23 50 b7 bb fd 77 6a 29 f3 cc 9b 95 62 84 12 7d 78 e4 f8 ea 2e 9f 51 72 1f 9b 70 c2 db 86 fb 63 4d a2 a8 31 39 52 96 fc 1b 23 76 f3 b3 57 04 4e 0c b2 6e b4 6f bc 9a f3 f9 78 33 86 e8 e5 61 00 9d 02 32 68 1d 81 85 76 d3 ec a8 aa ca 98 63 67 88 b1 e6 72 aa c3 a3 e2 a6 a0 e6 ca 78 d9 d5 f7 91 ea f6 c2 9c 44 37 4f e0 39 94 15 63 ab 04 d4 13 cc f2 0b d1 41 8d 9c ba 39 d2 51 cb 89 71 db 5f b3 bc 60 63 a5 74 43 84 7d d4 f4 f7 e6 91 89 6a 93 64 74 2f 50 19 73 0d 5d df 6a 8d 78 b3 40 8e 26 11 6b 19 Data Ascii: )fk~>AWe8;&kU{9yQdq{7sL}mbm-]!c>NZK#Pwj)b}x.QrpcM19R#vWNnox3a2hvcgrxD7O9cA9Qq_`ctC}jdt/Ps]jx@&k
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 11 4c e7 16 2c 49 cd d7 4c f6 43 a2 8e e6 c7 ab 81 97 02 3d ea b9 64 61 1d a3 cd 16 0e 44 b7 a9 97 c3 b3 ab e0 d9 46 f1 37 26 fb 75 9a 08 8d 7e 7f 0f f7 0a 31 73 d1 26 ec 5b 1c c0 12 35 fa 70 c1 eb af 3e d9 fc 24 50 cc 07 ee 5c 5d ea de d4 72 5a 74 14 8d 2a c9 87 f7 c2 21 a6 4e a0 96 5a 29 8f cd 20 dd 4c 1e 2e 3a 69 e6 1e 4c c8 72 4a 47 2d ab 98 77 0a 04 12 92 be ed 34 71 28 91 40 ca 6f 5a 7b 27 42 0c de 08 d6 f6 65 a5 d4 41 9e 0b ee 55 c7 e7 bc 65 2c bb e7 79 45 15 c2 78 74 a9 df 6a ca 0a 84 1a e0 f8 ee 5f 9f ec 1c b3 aa 4b 91 35 51 76 57 44 8f 88 78 ee 36 fd 0c cd a6 1b a1 d3 32 a8 f5 69 6e 38 83 63 cf 09 ac a6 e6 bc 29 a7 74 82 5c 62 cd f7 30 9d d9 0c cd bf 79 b5 d8 5b 37 24 fe a0 37 d1 f1 13 0a 1e dd fa 11 21 37 21 73 67 6e 9a 62 82 f2 62 9c 6c 71 86 Data Ascii: L,ILC=daDF7&u~1s&[5p>$P\]rZt*!NZ) L.:iLrJG-w4q(@oZ{'BeAUe,yExtj_K5QvWDx62in8c)t\b0y[7$7!7!sgnbblq
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 72 3b 89 68 8e 05 03 24 de fa 03 76 d8 87 07 fa eb da 9c ec 5c ed 42 b8 8a 04 bf f9 53 eb a7 e8 96 47 2e 90 7b bf dd ae 89 ae c9 ad cf 84 e3 f7 c8 eb 57 91 b1 a0 c5 e0 75 86 a5 6c 99 1c b3 c9 38 1f 4b b7 b5 0d 65 a4 20 3b 24 5d 7a d6 10 32 9f 53 79 32 da b1 90 57 47 89 d0 9a c4 e7 59 fc f2 f8 33 ab 4c af 35 ba 65 25 5c 66 d2 59 5d ed ee 6b 22 91 c8 e6 7b aa 83 4f 47 be 19 d2 0e 34 80 3e ae 3d 72 bc 3d e7 e7 d6 e2 7b 7d d3 62 eb 6a 7e ff 49 9f 9b 3a 17 d7 ea 41 30 82 17 db d4 68 6e 5e f9 af c8 02 df d9 ef 07 46 9f 3a 0e 42 24 e9 9b 90 af db 5a f3 47 16 02 ba d8 fe 66 d9 bf 4a 68 02 b7 da 9c 4e f5 0f 6d 8c 24 23 7d 10 72 c8 6b a8 83 cb 0b 3c 5f 3a 40 bd db 81 1e a1 fb e9 e2 ff 1b ea df 4d 3d a7 a6 5d 12 d4 01 a3 ed 2a 85 fe d5 f0 cd 4b 8d 85 91 44 44 15 6d Data Ascii: r;h$v\BSG.{Wul8Ke ;$]z2Sy2WGY3L5e%\fY]k"{OG4>=r={}bj~I:A0hn^F:B$ZGfJhNm$#}rk<_:@M=]*KDDm
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: ff f9 ef 2a 4f 85 1d 91 d5 b9 d3 a3 db cf 1e 62 f3 f6 98 fa 3e b1 77 3c d1 94 88 d7 a6 9b 5a 68 43 d9 e6 5a 8f 30 08 c0 67 70 4b c3 9b bc 79 2f 37 86 c7 43 da 41 f5 ef 21 fd fd ae 35 90 9c ab b5 83 64 6f d2 cf bb bd d1 4f ec 19 8f 37 a4 40 25 35 80 53 54 f9 19 ab dc f5 0b de df 03 d5 5e 94 58 f6 e4 76 85 b6 95 e9 1c c9 e5 3d 0a 36 33 f3 76 16 d5 62 8b 1a 1f c0 e4 ec 7f 1e 9a 1f 76 93 8d a1 c7 d6 8f 12 82 25 4e 9b 0d 74 33 38 99 f4 e2 39 42 29 6c 9b 5b ac b3 c2 96 49 98 1d c5 01 cc 5d b1 d0 30 72 72 1b e9 7c 97 64 7f 1a 09 54 4d 38 16 c0 e3 74 a0 38 8e d3 8e d8 d2 a0 fe e5 0e c3 f6 f7 84 1c 2c 15 a8 0f c2 a4 b0 55 6f a4 06 63 ad ff e0 e5 ea 87 bd 61 8b 86 ca fa fc 7c ac 12 84 b8 92 76 2f 62 a6 e6 6d af 0e 5d 39 45 8b 67 f7 45 c0 a3 52 31 44 00 ac 88 77 f1 Data Ascii: *Ob>w<ZhCZ0gpKy/7CA!5doO7@%5ST^Xv=63vbv%Nt389B)l[I]0rr\|dTM8t8,Uoca\|v/bm]9EgER1Dw
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: a3 64 86 05 88 7f b5 8f b1 50 04 6a 27 e8 5d 46 ec 5b aa 64 89 dd 4e d9 1c cb c2 7d 49 e1 7b 49 ae ad 7a a6 65 30 97 52 3d b8 d3 b7 75 88 86 b5 5f e0 51 dd 05 15 96 f5 76 67 3a 6c 55 e0 4b c6 fe e7 9f 09 50 7f b1 70 66 91 4e 21 a2 fe fa 1e c0 01 ff c5 8d e9 32 ad 36 4a 17 f3 80 4e 25 1c da ca eb 65 24 f2 ab 2a bc 56 5a 51 bf 15 57 b1 08 06 ed e7 30 ff d3 0a 99 83 81 e0 d7 39 b9 07 41 df 65 31 3e 44 ad 96 b2 c6 46 b6 ff 88 03 14 89 ce 55 40 3d a4 a1 95 30 5c 7d 9d a2 0f 58 10 8b 82 1a 05 b4 dd 98 17 2a 4b 29 63 d1 b1 ec e3 8a 25 11 07 e8 10 96 0e 93 49 1f 2d be 2c 97 0a 1d f6 0f cd fc 54 5e 82 70 2b 33 3c 74 5f 23 e6 ff 44 75 5d 18 41 09 88 eb 4e ce 18 98 89 8f 73 30 83 08 9d 4b 22 06 81 1f 85 ed 6b b2 39 f9 97 03 53 54 b1 fa 47 b3 be 00 5e ab 6d f6 a5 68 Data Ascii: dPj']F[dN}I{Ize0R=u_Qvg:lUKPpfN!26JN%e$VZQW09Ae1>DFU@=0\}XK)c%I-,T^p+3<t_#Du]ANs0K"k9STG^mh
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 81 c5 c2 af 54 b8 91 a1 f5 8b c0 4e 45 9c 80 b0 e6 da b3 19 e6 f2 9c 8d ef 14 9e 22 e4 19 87 bd e8 51 98 25 e5 83 b5 7b 97 5d 0c 0f 44 40 4e 41 2f 53 cc 56 7d 3d 0a be 89 9e 36 76 92 6e ae 96 64 bc 3d 30 b1 e6 ad 7b 15 f7 aa 3b 1e 79 47 e7 af 00 26 3a 67 c2 30 e2 de f8 4e a3 be e0 da 46 6a 6e 72 7f c8 7c c9 08 90 d2 b4 df 2f d5 7f ee 41 80 14 7c 9f 19 a0 0f c8 35 ec 10 1b 39 e7 91 52 81 04 fa 4d 55 41 67 3f f9 11 e4 e6 ca 0e b3 9a 9d d7 56 7e be f7 4c 16 1b 02 67 eb 8d 11 4a 3d 38 52 da 05 f6 d6 72 fc 18 9f 78 01 2c 88 1e 6f c5 2b 1d 5d f1 e5 b7 14 64 d9 bb a4 d1 34 2f 5e bc ca e7 7b 95 8a 3f db f7 f0 c5 e5 be 79 a7 19 16 3c 5b 2c db e8 b6 e8 e7 bb 3a d9 80 5e 89 ea 80 b9 99 82 fb 3f 48 4f c9 f4 36 dc 9d 8b 16 9b 15 f5 a9 32 91 38 0c 3e 29 0a 2b 73 d5 29 Data Ascii: TNE"Q%{]D@NA/SV}=6vnd=0{;yG&:g0NFjnr\|/A\|59RMUAg?V~LgJ=8Rrx,o+]d4/^{?y<[,:^?HO628>)+s)
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: d0 ff 7f 82 bf 6e 4f d5 64 d9 a4 6d 93 35 27 90 67 2e e5 4a 8f 32 fa 8b 0d 80 40 eb f2 82 8a dd 77 ba db 49 67 b6 fe 4b 20 55 df 1a 73 0a 90 27 b5 b9 a4 87 dd 22 6a a3 7a a1 18 94 aa 87 1f 45 67 0e cb 5a 71 be bd 72 b7 ca f1 ab f9 c4 7d fd 96 7c 04 75 cb 56 dc b1 de 0b 99 98 70 c7 46 38 c7 5f a2 25 36 d7 af 8a 03 a0 39 c8 df 12 89 ed 69 47 ed ec 1c d0 aa bf 14 1e e6 e1 e8 e3 56 4b 2b 9d a2 db 4b b4 98 cb f7 1f 80 8d a0 47 ba 50 84 8f 73 a9 e0 9a 18 cd ff e3 ad 1f e6 9c d9 e1 90 f2 46 6c a2 22 f8 f2 e8 51 73 0c a2 cb 78 16 d8 2b 75 64 95 44 70 e6 a3 f5 86 b4 88 09 7b 12 8c 1c c7 c6 90 93 4a 6a 83 71 2b 15 89 c5 92 c4 3b 06 67 70 d7 cf 3f b9 3b 3b b6 d7 db ff f4 d9 61 9c 49 cb 98 87 9a 6f e4 b4 2a 88 c3 16 23 9c 9a 6f d7 ea 50 75 41 10 da df b6 ac aa c3 4c Data Ascii: nOdm5'g.J2@wIgK Us'"jzEgZqr}\|uVpF8_%69iGVK+KGPsFl"Qsx+udDp{Jjq+;gp?;;aIo*#oPuAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.17	49834	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	710	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/4718592-5767167 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	324	IN	HTTP/1.1 200 OK Content-Length: 1048576 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16060	IN	Data Raw: e0 af c5 82 b8 ac d7 ca 7c a0 3e 30 45 44 08 d8 a5 a5 63 23 2c 0e b2 20 9c e8 0b e9 92 d4 b1 24 e2 dd 06 6e d4 7d 77 65 ff 0d 5a 38 e7 40 1d e1 c9 60 19 bf b7 f1 9f 38 1e 61 19 09 14 37 87 b3 be 09 5e b4 50 d6 10 01 13 b2 cc b9 ce 7a d5 8e 50 46 32 d1 94 d5 ea 82 1b a5 f8 16 37 93 7a db 0d b2 0d 0d c5 0b d3 fc 05 6e 53 ac 07 28 90 29 21 20 f2 c9 b7 9b b4 ed 17 1c 5e 6b a0 1f d6 38 aa d8 77 8d df 47 a5 c5 b2 a7 a9 eb 07 0e 63 e6 0f bc 74 57 d7 df 91 f5 74 cf 36 42 7d 82 02 4b 10 a1 7b b2 9a c0 fe 66 25 b1 c8 6e a9 f4 c8 c9 35 5b 17 eb 90 92 1b ae 6f e9 21 29 fa f7 aa 24 23 18 eb 69 e9 60 e5 80 cb a0 1c 68 c8 77 1d 16 a9 6f 79 4f 96 70 a9 f8 e5 cf f7 9d 7e 2b 28 0a c1 8a a6 0b d3 8b 7c 6a 06 ba 3b da fe 58 8e b4 3c 41 29 14 23 10 58 3d 95 59 47 2d be c2 e7 Data Ascii: \|>0EDc#, $n}weZ8@`8a7^PzPF27znS()! ^k8wGctWt6B}K{f%n5[o!)$#i`hwoyOp~+(\|j;X<A)#X=YG-
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: fc 4e b9 ae 81 99 e3 10 a2 99 f6 aa 17 64 06 b3 f2 18 3f 40 91 48 25 80 29 4c db 26 dd 39 8b a8 a1 e7 68 4c 2d dc ce e9 44 91 6e c7 66 80 4d 25 89 a1 88 da 87 07 81 5c e8 9e 42 6b 5c d8 71 e1 e0 1a 85 d8 4e 1f 87 bf a2 89 ba e5 90 90 0e 51 00 04 3a 8c d1 7c c7 b3 5e 7c 08 2d 15 bb 50 e5 a1 80 3a c3 5a 34 a4 d5 41 40 63 11 bd bf 58 cb 91 b6 30 3b b6 3a 15 70 09 df fb 91 28 54 94 71 7d d8 25 e8 3e 82 31 d9 a9 83 17 dd 81 e3 f9 ba 58 11 24 16 7e 13 6b f4 87 79 65 e5 8c 4b a0 93 26 e1 ea f7 26 6c 53 af 10 85 7a 3b ff 3e ac 48 46 a1 a6 7d ae c4 58 bf 92 77 f2 86 32 bc a5 fb 6f 96 54 c0 d0 67 06 d8 38 68 4c 0f 07 70 e2 dd 17 e3 07 c6 e2 9f 1a a9 62 29 ba 64 3e bf ea 8e 52 d5 41 9a ab b7 87 b7 e1 98 d0 cb e2 8e 8f 46 48 d3 bb 0b 9e fd 83 ff c5 fd 8f 46 b1 da cd Data Ascii: Nd?@H%)L&9hL-DnfM%\Bk\qNQ:\|^\|-P:Z4A@cX0;:p(Tq}%>1X$~kyeK&&lSz;>HF}Xw2oTg8hLpb)d>RAFHF
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 04 b9 1c be 77 e2 9f f0 ae f2 2d d6 1a 2f ee e7 6b 3f 4c 5c fd a9 6b 5e 51 d8 94 c7 77 d6 83 32 a3 a1 b1 0c ec 5b 08 36 cc 73 78 38 dc e4 7e 7f eb ed 8c 5b 68 82 57 94 67 0c 89 0a 0c 4d 51 27 dd ca f0 60 b4 3f 00 6a 39 b4 31 f2 ad fd 2e 60 1c 7f 7f 63 a0 36 8e 80 20 64 0f 68 9d cb fb 29 98 57 2a 24 c2 0a d1 df f0 3f 61 4c 38 7f 8c 0f 43 67 12 64 3f 71 b8 87 8d 27 bd 5d 2a 5e d0 5f bd 71 08 22 2b 2f e8 b9 f1 ed 81 c2 e2 b0 30 98 74 25 22 ac 09 d9 95 88 27 03 0d ef fb 79 12 c0 ad 29 7e 9f 27 23 58 e6 b4 67 fe 4f 9b bd ad 80 05 99 b0 82 8f 16 3e 15 0e 44 f2 62 39 23 b5 6a e0 be e2 53 f2 23 08 c9 1a b2 94 a4 5d b0 e7 e2 fc 6b 65 66 0c 57 7c d8 23 93 01 4c fd 5e 33 dc ad a5 4e f0 e3 24 ea fd e5 6d 90 53 e1 86 f3 62 0f 21 35 33 1b ac cb dd 6c fd 18 ae 05 62 8f Data Ascii: w-/k?L\k^Qw2[6sx8~[hWgMQ'`?j91.`c6 dh)W$?aL8Cgd?q']^_q"+/0t%"'y)~'#XgO>Db9#jS#]kefW\|#L^3N$mSb!53lb
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 7f cc 42 42 1f 10 8a 58 0a b2 e0 ab f3 ab 26 5c 38 5d f1 87 54 f4 80 70 ce 40 de a0 d3 76 c1 1b d8 32 cb 39 32 11 78 c6 50 0d 17 72 e3 f5 6e 99 31 3f cd 3b 70 16 8b a6 2f 91 5e 87 a1 ed 9c ec bb 8e 67 1e 5a 45 70 05 47 7d ca 65 b7 97 78 2b f3 d3 13 a9 5d 9b 47 3f 3a 44 3b 8f 64 b7 da 5e cc fe eb b2 13 1d 71 c2 3f c1 62 02 46 25 a2 e7 7c 3f 24 0a 4a f7 93 9e fb 80 7f 6d 17 22 4c 43 fb 8d 7c 24 7d e3 fd cc 4f 31 6f 4e 82 8c 8b 20 4a 58 ad 38 4d d2 4e 5f fd 11 95 2d ed d4 e0 31 79 49 b4 56 90 b8 0d 38 21 42 b7 5b b6 a5 52 12 d3 64 16 ec 7c c2 a9 44 11 1d 84 e7 40 13 23 4d 3c 6f fb 69 cd d7 93 f1 44 f7 d9 d8 7e f4 82 b8 c8 03 1a 9c 3f 3f e6 7c 60 8e 88 2d 29 40 77 62 dc 9a 6c ff 90 52 c5 11 c0 5b cb d9 40 92 9e 1f c5 96 8f 86 31 5a 95 2b 1d 30 9e a9 df eb d8 Data Ascii: BBX&\8]Tp@v292xPrn1?;p/^gZEpG}ex+]G?:D;d^q?bF%\|?$Jm"LC\|$}O1oN JX8MN_-1yIV8!B[Rd\|D@#M<oiD~??\|`-)@wblR[@1Z+0
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 10 59 9b 68 d2 38 04 76 d6 72 87 04 1a 18 02 39 34 60 4e 0d 45 30 1c b0 a5 6f 08 62 71 86 c4 db 7c 83 29 42 40 26 1a 44 0b 12 04 82 3a 6e 24 a0 0c c5 df 8c 04 90 f0 35 dc b6 89 a8 2d 23 b7 88 78 49 74 ae f0 b0 5a aa 79 47 89 a0 a0 89 41 c8 7b 54 16 67 99 7c bf d8 af bb 07 bb 23 53 a3 62 e1 47 ff 13 00 bb b4 ea b0 32 be 90 51 39 8d 0e a8 5b 9e 63 3f 13 05 2c 62 55 2e 77 d1 bd 2b da 6a f5 f8 b1 02 7c 95 07 7d 59 65 e7 8e b2 86 f7 9e cc 1f ab 4b 14 12 63 ae 3a fb d3 ee 5a 24 01 d6 0d b0 02 f9 fa 3e 83 b9 9e fd 25 ca 35 60 51 be a6 a8 f5 99 00 c1 ec 45 50 d6 26 1e c3 57 03 19 db d2 08 df 6e dd 85 b2 39 ce 02 6a e2 c9 a6 08 d2 46 65 9f 5a ac 29 96 4a ff 53 db 81 90 74 ac 43 65 79 12 48 b3 34 ed df f8 43 a9 f2 01 fc 5f 56 49 c0 b1 35 d9 0f 05 be f6 ad 00 01 e4 Data Ascii: Yh8vr94`NE0obq\|)B@&D:n$5-#xItZyGA{Tg\|#SbG2Q9[c?,bU.w+j\|}YeKc:Z$>%5`QEP&Wn9jFeZ)JStCeyH4C_VI5
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 64 e1 8e 78 1c 1c 8c 66 2f 73 21 e3 3e a6 54 09 3c d0 8d db a8 26 ad 08 c0 14 4e a3 98 bf 41 1c 0c f8 8d cd 63 f5 14 1b 00 5e ce da 9f 5d a0 e5 0f 84 8e a7 f6 c7 a4 57 3a 5e 25 c8 33 bd bd af 88 31 e8 51 79 8a 74 b3 cb 7b c4 30 1a b0 a4 24 16 56 0c a2 4a 00 ab 88 18 6c 9a f1 07 ae d5 2d 5f e7 20 92 32 aa 28 b5 81 49 f3 57 99 f6 d3 e4 89 aa 50 56 ca 3b 27 90 f0 b0 d5 30 a6 b6 c3 53 5d a3 39 f2 43 65 72 b2 9e 98 d6 b3 1e c2 53 a8 0b ab 76 0c 67 92 ba 4b 5c 31 32 fa 6e 24 79 04 f6 eb a6 08 6f 42 d3 a8 82 09 3e c6 63 28 8a ce 48 f3 a3 a7 3c 60 35 40 3e 05 8d 87 07 40 d5 31 50 75 1a f2 e9 46 12 e3 af 4e d2 15 61 64 bc b7 f4 98 43 76 39 0c 5a b4 cd 2c 7f c4 0e d8 d4 6d ac 39 0f e3 f3 9e ce b6 4e 5a f4 94 87 45 a4 30 41 2d 22 56 cf 18 9b bb de 9d 59 a5 ad 4d 5f Data Ascii: dxf/s!>T<&NAc^]W:^%31Qyt{0$VJl-_ 2(IWPV;'0S]9CerSvgK\12n$yoB>c(H<`5@>@1PuFNadCv9Z,m9NZE0A-"VYM_
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: dc e6 3e 3d c2 f7 64 13 10 5f cc a0 17 f7 48 98 96 22 ce 4c e4 1c 53 a7 b3 fd 41 e9 b7 cc 10 ab 0a c6 14 3e 79 a4 11 34 e1 cc 87 44 e3 fa 1b 2c e5 64 ca c3 b4 4f 2e 13 13 36 75 d4 ca ee 8a 0f 7e 40 d9 13 81 93 22 a7 dc eb 40 9c 6a e6 82 60 59 68 5f a0 bb 51 5f 6e 92 6d 83 cf fc 3d 21 91 15 84 d0 79 48 11 47 5c b2 1c 33 e7 9c 55 92 61 48 fd c8 77 5d d6 c7 53 0b 4a 38 3a be 71 95 84 19 63 5b 87 2c f6 3c c4 64 1c fe 25 cd 44 4b 5d 55 58 66 7c 60 83 c4 cb 4f 17 5f 77 90 82 e2 ad 8e ac c3 5b 3c ed 9a e3 30 2f 68 bc 05 d6 b3 5f 18 c4 fd db 35 4e 9e ac e3 79 3f dd 53 00 7c bc 17 2c 59 b9 37 4d bc b7 49 e4 58 11 df 6c be 87 e2 d5 3b d0 d2 de fc ea d4 bf b4 9b 38 7f bb 0c d9 1f b8 a3 99 bc 83 09 29 2b 5e a1 c3 5f 6c 71 ed a3 64 3c ee 3e 5b 3c 7c 58 e9 ff 9a f8 8f Data Ascii: >=d_H"LSA>y4D,dO.6u~@"@j`Yh_Q_nm=!yHG\3UaHw]SJ8:qc[,<d%DK]UXf\|`O_w[<0/h_5Ny?S\|,Y7MIXl;8)+^_lqd<>[<\|X
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: da 63 41 2e e5 c6 ed 9c dc 04 11 b3 93 94 9d 95 9c 14 2c 97 e9 2c 8d 10 d4 d1 7c aa ba 86 93 63 bd 58 3a 1f a4 e5 c4 39 53 02 73 21 ee e2 37 ba d3 f0 a3 99 2f b3 df 42 7b 0b 6e 2a c0 79 76 48 81 9d a8 cc 24 0f c2 a6 c6 67 c5 ac 50 ea 12 37 2b 95 51 bd ee e6 4f 88 3e 38 b2 c3 4a 87 6b 8c 0a f8 2d ef d7 61 9a 1c 8f ab 28 36 12 cd 48 15 97 5d 32 01 ea 9a c8 7d 59 9d cb 2f 2a 53 7c 7e 3a 7f 31 d5 d5 38 c3 db f0 3e cb cb f0 c1 cd 92 7f da 77 c2 3e 28 5d c3 0c e7 12 93 d1 ef e5 dd 3f 55 a9 a0 7a 3b b3 57 2d 10 31 45 95 3e 55 d1 1b d3 3d be 99 71 55 7b af b8 27 92 f5 6f 2e 56 63 3d 3f fa df 10 2d 07 54 02 cb 30 93 05 18 71 f1 06 ea 67 04 a6 34 c0 15 ef d0 53 01 c4 89 34 bb 0d a0 a8 b0 64 d9 67 1b b8 ae 74 b1 32 ac bb a0 5f b8 2c e5 3a 5e 9e 9e 93 61 d7 cc 38 c4 Data Ascii: cA.,,\|cX:9Ss!7/B{nyvH$gP7+QO>8Jk-a(6H]2}Y/S\|~:18>w>(]?Uz;W-1E>U=qU{'o.Vc=?-T0qg4S4dgt2_,:^a8
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: e2 05 58 52 0f aa e4 5e 7c 8b 04 52 01 9d b3 24 81 1f d7 63 1d d2 3e 32 06 cc b6 29 fc 6f 16 72 4b 58 11 37 49 4c 12 4a 1c a0 6c ea 60 c7 bf 94 e3 0d 86 01 09 4d 3f 3b 56 5b b8 6c 92 3d ef d9 b6 e0 81 f3 51 fc f7 d8 cd 6c e0 27 14 2b c6 9d e0 22 9f 4a be 25 42 70 de 82 a0 81 00 39 c0 84 d2 77 40 bd a1 6c e6 d8 53 5c b7 1b 9f 07 2e a8 d6 80 9b 8d af b5 17 83 b3 b2 27 b3 82 74 6f f3 a4 b3 2d cc eb fb ae b1 d0 6e 54 cc 75 a8 f1 bc 9b 53 03 fa be c4 d8 71 1e 50 eb 73 0b cf f6 da 00 a2 05 0e 0b eb 2a af d0 c5 7c ef f3 ee 4a ee 97 d6 3b 59 59 cb 61 ae e6 e3 b8 51 b0 f3 17 14 04 18 1d a6 7e 5e 01 b7 5f c7 61 45 71 9f 78 c9 51 ea a8 ef 1d a0 c0 1c 98 a1 f3 7c 45 74 d9 d5 c4 50 36 22 69 54 29 88 2f 31 03 29 95 53 c7 04 d6 7e 45 b7 76 58 27 fa f3 7b 0e 28 b2 79 00 Data Ascii: XR^\|R$c>2)orKX7ILJl`M?;V[l=Ql'+"J%Bp9w@lS\.'to-nTuSqPs*\|J;YYaQ~^_aEqxQ\|EtP6"iT)/1)S~EvX'{(y
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 6a c1 81 1f a8 3e d4 9a 31 ee aa 19 f6 04 89 2c ad e5 ef 3a ff 35 17 db df c3 c8 cb c5 d8 ef 23 26 2b 22 e4 77 47 df c3 82 21 fd 50 62 11 73 bd 6c da dd 4a cb 3c 46 e6 fe f6 c8 0d 2e ec 1d 8c 13 5a 49 47 63 ee 8e b2 25 35 d6 48 20 eb 4f 92 17 bc 98 e4 64 11 d9 93 b0 48 1f 83 5d 6c 65 a2 67 17 8c 79 12 c2 dd 66 f0 36 f4 c9 5e 0a d3 6b cf 4c 68 4b 60 7e 4c 95 6e 7a b0 fc 44 73 60 d1 38 cc 57 fa 50 24 7a ba ae ca 2d 14 50 26 b0 13 46 1a 23 9d b9 a5 d5 a3 51 23 5e 28 b3 97 9d 92 47 d7 db 44 11 9f 7a 46 7b 36 67 de 99 21 75 62 15 b9 bb 02 e0 79 30 0d 25 ad e5 e0 43 b5 b8 b2 85 06 99 0c 51 57 16 db 24 f8 0d 1a e4 b8 0d 1c 41 47 d8 46 77 5c 6d 8c 3b c2 7e f7 a4 c0 a0 84 a3 97 87 95 fc 0e cb df 94 69 5b 25 a7 1d 86 3e 22 98 b6 7b 8a 9b b1 a5 8f 17 9f 96 1f 00 9a Data Ascii: j>1,:5#&+"wG!PbslJ<F.ZIGc%5H OdH]legyf6^kLhK`~LnzDs`8WP$z-P&F#Q#^(GDzF{6g!uby0%CQW$AGFw\m;~i[%>"{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.17	49833	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	500	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/393216-786431 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 393216 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16061	IN	Data Raw: f2 a8 4f 7b 76 95 88 70 15 b8 60 b9 f8 90 22 30 de f5 5d e8 d0 e0 d3 6e 8c 19 75 3d 44 10 2d 65 13 b2 1d 1d ca cb e2 56 31 10 b7 df 11 3f 09 f0 ca 30 63 d3 1b c4 8c 75 1b 2f fe cc b9 79 0d 2b 18 2a 40 23 9f e1 36 27 b8 03 0f 4b c1 35 4c 3a 40 29 03 00 9f c8 9c 37 89 21 e7 15 1c c1 5a 50 aa 29 ab c2 e1 f6 d4 3d 57 82 b5 7c 97 aa 71 6f 2a f0 72 7f 8c 21 eb 9b b2 53 c2 cf da 95 9f eb 25 b9 2e 63 8c 6f 4b b1 d4 8d 02 f8 c2 5f 44 7f 1f d7 4f db d8 fd 43 84 06 40 2a fa 71 5b 15 92 14 e7 f1 59 5b 55 95 fc 9b 61 28 ee d6 1e 71 3b 65 59 ab 82 c6 1a 85 bd e2 37 f4 1e 60 43 ac 60 a1 fb f6 11 c8 22 54 38 34 83 41 16 36 8d 52 61 cb 96 6a c4 6a 2e 0b ee 8c 6f 69 63 c2 8e 16 05 d4 ed fa eb 46 98 73 37 75 f2 19 9c 39 1c 84 73 94 cc 22 9c a1 55 f0 c0 99 a9 50 13 72 33 14 Data Ascii: O{vp`"0]nu=D-eV1?0cu/y+@#6'K5L:@)7!ZP)=W\|qor!S%.coK_DOC@*q[Y[Ua(q;eY7`C`"T84A6Rajj.oicFs7u9s"UPr3
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: cd 98 46 75 59 79 c5 0d 22 d1 45 2f e8 31 77 9e 7d 5b 2d a5 3c 60 9f 5d a3 7e 5f 8d 39 0c 1f 49 86 d5 96 10 ac 2b 4a 04 46 57 6f 1e 9f 18 e9 1c af cb 37 70 97 14 3e c0 a9 b3 37 57 5d 4f 8b 4c 38 bd 2c 70 90 e6 5c 2a 16 f7 eb 69 01 1d 68 fc e1 a1 4a 49 7f fb ab 3e 16 60 92 f4 5b 82 62 17 98 9b 74 8e bf e6 10 b7 9b 08 a4 98 31 6c cb 24 39 73 93 32 89 a3 47 12 18 95 47 38 eb 6b a3 da 39 bb 5c 9d cb 9c f2 00 62 cf df 4d 29 2b 23 b7 53 44 a1 eb 70 ca c5 ae 29 a5 26 f2 63 19 2c 7c df 8f b2 94 95 94 d2 22 58 32 48 a3 f1 ff d7 c0 09 c0 c6 da 65 2a ff fa 93 36 7e 5c ab 02 34 d1 41 8c 4b c8 1d 24 48 7c 34 3f b1 d6 c0 d6 69 14 79 b1 c5 c4 8d 09 5e f6 76 ba 35 90 72 ec 1c 6b 23 e5 09 3d 9d c8 81 55 ca 49 9d 48 79 8f b1 ab 7f 30 f4 0e f9 7a 23 4e 1c 5b 28 a2 32 a9 7d Data Ascii: FuYy"E/1w}[-<`]~_9I+JFWo7p>7W]OL8,p\ihJI>`[bt1l$9s2GG8k9\bM)+#SDp)&c,\|"X2He6~\4AK$H\|4?iy^v5rk#=UIHy0z#N[(2}
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 73 2d 5a 33 97 8d e5 39 57 7f 57 e4 19 c5 06 58 4a 6d 9c e0 fe ac 46 76 50 89 b8 4e d5 1a dd c6 27 57 b4 d5 f8 99 7c c0 2e fc d7 b2 d8 35 aa 6a a7 28 95 a6 17 6b 26 90 68 1e 1d ad 51 00 e0 0d 84 1d d8 61 01 be a2 29 03 0f 1b c0 82 e8 28 91 71 45 4a 0b b9 0e 3e 52 14 c7 c2 b0 42 89 07 10 a1 79 58 ba 87 31 65 f7 80 d4 81 ee aa 5e 4e ad e8 ff 7d e8 ba 76 23 a6 ce cd e0 1e 96 b1 bc 64 f7 e2 32 51 96 e2 ad 09 56 d5 40 3c d6 10 db 9e 3d 6e a4 87 75 28 96 e3 91 b3 1e d7 a8 cb 74 a3 d5 3f 42 f0 30 29 7a 84 5b d2 9e ed d5 2f 33 3f 2f 36 c4 c1 76 d4 ee 43 c9 00 68 8b e5 4d 16 07 3f 78 e7 c7 85 cd e9 7a 6c 1d 74 bb db 85 0c 7f ea 28 48 6c 0a 02 37 19 f3 c1 16 04 ff 83 e1 64 b6 f6 d3 3d ea d3 9e 35 0a 09 b9 0a 7f 8a d6 0a ed ca 37 fc db 11 2b 9f 9d 46 e3 87 cb da 26 Data Ascii: s-Z39WWXJmFvPN'W\|.5j(k&hQa)(qEJ>RByX1e^N}v#d2QV@<=nu(t?B0)z[/3?/6vChM?xzlt(Hl7d=57+F&
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: c8 7b e6 73 23 e2 51 7d 2e 5b d0 df 60 6b c4 96 61 8d 5d 47 04 2d c5 3c 45 2e 38 db 0b 31 12 c0 84 99 64 4d a1 fd 04 f1 be 2e 08 db e6 11 2f b1 a9 70 58 72 e7 0b 08 2e f8 a6 80 fb d3 0d b0 cf 37 88 3c ec 7f 77 41 8c 11 6b 3f 92 e4 4e dc ae ea a5 85 83 12 9f 3b ca f3 26 13 67 7a f9 82 16 b8 64 19 d2 94 14 29 93 5b f5 8b 84 f7 c4 4b 45 88 dc 29 30 e2 18 15 a9 3c 06 80 64 3f fe c1 aa 6f ef fb b9 54 2b 46 c7 99 35 0d 6d d5 ab 55 cc 4f 83 47 5a aa 9b 40 3b bc 1c 98 9a 02 1a fc 77 33 4e 3b 1b 0d 35 f9 ff 97 96 ac 99 60 0d 4a f6 83 d4 93 56 96 5c 56 97 b0 0c 38 9a a6 32 f5 e3 02 fd 6b f6 3b 43 d6 b6 f8 49 ae 57 eb 15 ae d4 a6 00 1d 01 88 36 fd 62 9e 62 6e b3 d4 16 bb c8 6f 08 ca 34 8b e1 9b d5 00 f2 d6 08 23 be d0 d6 d6 7b c2 56 b2 bb 88 94 18 5e 8d e1 40 15 f4 Data Ascii: {s#Q}.[`ka]G-<E.81dM./pXr.7<wAk?N;&gzd)[KE)0<d?oT+F5mUOGZ@;w3N;5`JV\V82k;CIW6bbno4#{V^@
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 28 1c 43 a8 50 d2 96 5a 54 b1 9e 25 65 59 22 9f 8e 4e b0 f8 16 de 9c 8f fe ce df 20 33 bf 06 d8 6c a3 3d 69 6d a2 2b 86 4d bb 94 6b 4e 15 64 a9 a1 93 f3 f4 09 ae 2e db 0d e5 4c 93 92 a1 fe 72 00 7d 66 b6 80 be 1d e4 a3 2e 5d 96 a7 5f 05 dc f1 60 a5 8b b6 49 a8 5d f9 d7 59 7e e6 c9 28 91 10 08 84 df c6 b7 ba 53 80 2c 9f d4 b1 c3 b8 cc 44 d8 18 cc 5b 45 5a a5 56 f2 d8 30 a5 88 f2 6c 03 cd f8 0f f6 9d b5 ae 73 b3 ca 57 fd d8 80 65 22 6b 07 ce d9 00 d4 a8 3e 5e 9c ab 65 cd 2d 08 37 c9 b3 e8 9f d6 8c 37 8f 7d d2 2c 6d d2 e4 94 1e cc 11 9f d5 32 0c ac b1 36 55 59 ad c0 1e 1f 2d dc da 0c 90 d7 82 ee fe ab 01 8d 10 4d e1 a7 99 59 e9 fa 2c 49 9e e2 a1 8f 77 72 ac 2d 72 ec 36 ea e2 39 de 3f 30 44 d9 67 e1 a2 67 36 65 27 cb d5 6f 65 2e 26 5e 72 ce b9 8f 6d f8 02 40 Data Ascii: (CPZT%eY"N 3l=im+MkNd.Lr}f.]_`I]Y~(S,D[EZV0lsWe"k>^e-77},m26UY-MY,Iwr-r69?0Dgg6e'oe.&^rm@
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: d1 25 d9 5e 9b 0f 59 99 c6 12 63 44 ed f0 39 f7 45 81 71 e3 38 e8 00 b8 7c 6d a8 88 cc 2e 9e e6 7d fc 57 63 c1 d7 32 d5 24 38 6b 13 9f 68 e5 89 6c 69 93 65 82 37 a9 48 36 7a 7e 2e 85 b2 c0 4a 7a 9c 6f 5f e8 0d e4 34 d3 12 69 18 25 1f 66 96 0f 8f 6b ae c3 4d f6 46 de 45 f3 d9 02 13 46 b1 96 1f 1d 9b f7 d8 44 15 49 d3 83 c0 48 20 69 19 b1 1c 82 a0 37 6a 2e dc 47 76 16 b1 aa 0d 22 78 b2 04 c7 1c a5 4d 2e f8 fd ae cd f5 56 62 b4 11 ec 50 86 c3 67 da aa 1b cf d2 77 9a 14 16 76 c6 f8 8b fc 96 a8 b4 99 5d 0d 14 8a 95 4d 51 2b b8 df f0 a8 fd d8 64 ff a2 00 56 cc de df d6 5c d6 b1 e5 6e a6 10 12 3e 45 2c 7e 9a b1 22 69 80 0a 72 68 a7 a8 f6 37 64 e9 2a 19 cf 79 2f 13 67 a0 e3 55 23 20 31 4b 5f 00 39 c5 f3 91 63 46 2a 1f 79 2e 0d af 1e 41 3c 28 1c 89 ed b8 56 07 b5 Data Ascii: %^YcD9Eq8\|m.}Wc2$8khlie7H6z~.Jzo_4i%fkMFEFDIH i7j.Gv"xM.VbPgwv]MQ+dV\n>E,~"irh7dy/gU# 1K_9cFy.A<(V
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 91 94 74 c8 a4 b8 26 07 55 69 62 bd 07 20 2d 92 a6 93 1a 8c 8b e9 06 66 a6 13 48 e0 6a 11 87 8c 64 f9 5b f1 2a 0c cc fd 2e dd 21 c1 d6 cd d6 48 d0 c0 af e8 7e d8 0b 94 c3 e6 7e 10 9a 09 f9 24 4f 04 31 37 a8 6b c7 e9 c7 2e ab be 71 c3 82 27 4c 79 96 d3 c4 9d a6 e3 69 a6 08 b4 e3 8b a4 6c 8b a3 39 41 51 a9 19 3f 6b 55 3c d1 23 1a 47 af ac 1f ec 86 7e 99 7a b4 d7 22 4a 20 01 e9 1a 34 b0 30 41 f9 6c 3e de bb 78 75 51 64 37 29 f4 5e ff 4a ae 7c af f4 c4 5e 2c 6b d5 0d 78 0e 6c 41 ec 38 93 e0 79 50 46 3f 61 28 94 d1 e5 c8 0c 9e e2 d4 b7 a6 3d ac 52 0d de 65 c0 38 18 19 ce fa 23 42 d2 a8 d8 b9 92 ad 09 96 e4 3e e2 8a 95 3e 74 5f 58 b7 45 46 3c 4a ca ed 24 f9 90 ac 0d 10 f7 f9 fc b2 ad 0f 76 99 58 d2 eb 42 7b fa cf 74 46 e5 a8 7e ce db 4a 80 6d 17 41 6d de 51 a5 Data Ascii: t&Uib -fHjd[*.!H~~$O17k.q'Lyil9AQ?kU<#G~z"J 40Al>xuQd7)^J\|^,kxlA8yPF?a(=Re8#B>>t_XEF<J$vXB{tF~JmAmQ
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 2e a3 bb f1 8d ea 75 bd 78 2d 29 0b 93 a6 c1 0a 9e d2 11 c1 6c 60 9c bc 11 0d de c8 b9 f3 4a e0 ec 0c 35 37 1a 5a 50 01 13 ab 72 81 ec 4a b3 f7 de 80 cd 1d b1 62 ac da 5d 5f 8b 9e 61 7d 84 9f 44 0f d3 91 3a e5 71 c0 d1 b8 34 3b 21 32 d9 dc 5b 2c 3e 04 8e 57 c5 fb c1 b7 8b d0 c5 9a b3 ec 1d 78 3b 34 36 f5 92 98 d3 86 4f d3 4f e5 d5 d1 71 d1 6d 41 d1 c4 0f a2 9a 09 e5 96 52 14 6d cb a4 73 7e 95 cf dd ed 29 de fc 5d 22 38 36 f1 93 df 1e 39 4f e4 81 ba 4a e1 f6 d3 c1 7a 7b 78 85 ad e8 d3 2a a9 f1 06 77 85 31 5f 97 e5 7e 8f 17 a0 e1 49 d6 a9 79 44 73 fb d5 26 a7 f3 b7 99 d4 e1 ee 46 9e 7f 58 4b 24 1a aa a7 77 2d a9 57 6c 53 1a 32 20 34 71 2a 14 28 63 8c 46 98 6f 5d de 75 c5 f8 84 0e e0 5c 39 71 f7 87 2b 70 9d b4 f5 67 66 0a 21 bb 8f 2d 60 99 66 c5 64 e6 94 d7 Data Ascii: .ux-)l`J57ZPrJb]_a}D:q4;!2[,>Wx;46OOqmARms~)]"869OJz{xw1_~IyDs&FXK$w-WlS2 4q(cFo]u\9q+pgf!-`fd
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: f1 28 e0 91 2b 23 f1 96 d4 1a 44 55 b4 b6 d0 d3 fb b7 69 c2 f2 a7 7d 6d 25 74 29 69 1e 1a 37 b4 c9 7b c4 63 0d c4 e3 78 18 21 69 0d c8 89 28 b3 57 1f 3f f0 b8 19 af 1a 25 7d 7b 6c 6c b1 0a a7 fc de 5d bc fd 93 94 d0 d5 48 4e 84 3f 23 41 7a d4 1c 2d 3c ec 0d 18 23 87 07 fc 0e 7c 92 d7 9b a3 4c d5 a8 6b 6d fe fb 53 38 6b 3c 6a 23 6e 96 97 8b 94 55 99 1d 8d ca d0 91 7d 90 4a 3e bd 5b 8e 84 f3 87 29 a3 bc 80 02 2a d5 b0 e5 79 9d e6 12 85 8e b5 b5 55 0d 43 5d 81 ef 36 ff 22 e9 13 51 83 35 bb 9f fb 3f 57 79 cf 5d 48 79 9e 8d 2a 4b 33 7f d6 3f ee 7d 9b 3e 7e 1d 5f e1 7f 20 bb 5e e6 43 5a 8b 8d 36 0a 3c 28 24 e4 ab 72 0c 3e 68 28 1b 82 be b4 3b 7e 55 a5 27 2e 9d fa 75 dc 6b c6 55 6d 25 6b 21 ea a3 ca 25 30 19 0b 14 f2 57 7f 59 c0 c8 7d b1 a1 a7 95 3f e6 63 7c e6 Data Ascii: (+#DUi}m%t)i7{cx!i(W?%}{ll]HN?#Az-<#\|LkmS8k<j#nU}J>[)yUC]6"Q5?Wy]HyK3?}>~_ ^CZ6<($r>h(;~U'.ukUm%k!%0WY}?c\|
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: b9 f9 cb f8 35 9f 6f 1c c4 c7 18 86 9b 88 32 80 4a 4a 86 e7 a0 64 5f 5b b2 42 39 2d e2 48 b1 a2 08 1b a6 ec 2b e9 b8 fa 36 56 db 74 b2 49 f1 60 37 91 b8 b3 bd 24 48 6a 6c a2 85 42 4b 5f 98 a0 f7 7b b6 a7 8d 7c c3 60 bf 77 79 ea 20 fc c0 56 93 f6 47 a8 04 d6 54 42 28 a0 f1 63 02 78 9c 9f 26 0b 4b a0 66 b4 eb 7a fe 7e 4b b5 88 19 6e 52 09 4a 86 90 4e 4a ef 2d 22 ec 09 80 51 7d 90 ea d5 1c 12 04 0c c7 5e 77 d3 58 19 44 4f 4d 11 84 05 ef 8b f1 a0 a1 52 ef d6 42 dd 95 12 ee db 7b 53 2c 55 bc 6c 71 62 f0 4c a9 b1 db 10 00 49 a1 2b 0b e6 11 00 ec 63 42 2f 3b ea 24 ad 72 14 2d ef 33 95 1d 37 ee 95 b7 9b 62 34 a7 16 74 96 66 fc 97 e9 97 01 53 11 0e 88 ec 8f 1f b9 b5 14 2f ad a6 95 c9 a8 d9 22 1c 23 f3 c9 d8 36 b1 46 53 32 0d 20 8c 2b b8 fe 8f 75 e0 fb b0 03 3f 20 Data Ascii: 5o2JJd_[B9-H+6VtI`7$HjlBK_{\|`wy VGTB(cx&Kfz~KnRJNJ-"Q}^wXDOMRB{S,UlqbLI+cB/;$r-37b4tfS/"#6FS2 +u?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.17	49835	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	710	OUT	POST /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/5767168-6519410 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mega.nz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mega.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 752243 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16061	IN	Data Raw: a8 4e a6 06 41 ec 58 42 75 41 64 8d fa 3d df b4 da 4e b7 7a c5 e7 d8 15 bb cc c0 d8 06 f8 90 1d f5 d1 21 e3 d0 1c 86 22 48 20 7d 03 bd 85 8a 80 e5 87 bc f6 c3 fb 71 22 b5 58 39 3f 33 17 93 88 7c b9 ad 4d 35 07 bc d4 bc 0c bb 5a cb 37 72 d3 71 36 40 1b 3a c7 dc ae c9 f2 ec c9 44 4b b1 69 f9 9d d8 8f 26 b9 0e 53 68 36 ef 25 2a 2c b7 56 fa cf 7f 00 15 1d 7f c4 9b f1 1a 61 d0 63 21 f9 39 d0 c4 92 f8 11 fe 08 1e 2c 7b ae aa a1 84 e8 99 0f a1 c9 72 c8 c3 69 14 2e 45 9f b9 da dc f7 2b a0 d1 5b b2 00 c9 bc 7c cc 59 56 e8 2f d3 22 07 a7 73 37 ef 2f 89 3c d2 28 df 09 a4 95 34 16 8d fa 33 8d 5f 67 f4 cd fa 9f 8f d8 3b 29 c6 b2 66 8e 68 f3 d8 46 b9 d0 6a 15 a6 ef 48 c1 ea 29 e9 31 2d 43 8f 94 61 ef 17 34 ef 09 dd 78 8b 94 6c d1 b9 eb e2 e0 11 e9 69 e1 76 88 15 25 02 Data Ascii: NAXBuAd=Nz!"H }q"X9?3\|M5Z7rq6@:DKi&Sh6%*,Vac!9,{ri.E+[\|YV/"s7/<(43_g;)fhFjH)1-Ca4xliv%
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 4b ac d7 38 57 5a 3d a6 e9 be 7c e1 3b cf 22 b0 4a d7 43 05 36 97 12 a7 21 ab 1f 3a 71 4d 6e 1b 9b 8d e6 ff ae 0f 3b 1e 3d 71 a9 12 95 08 ed 52 fb d2 85 b3 8b 92 fd c9 b1 e1 c2 fe a2 8b ca 84 e8 f8 25 7e f1 53 01 0c e7 a5 e5 b1 d0 f2 3f e3 20 56 3a 5f cb 96 52 a5 d2 f1 bf b9 ae 4a 11 ac 4d d4 81 45 5b 52 70 4e 89 74 2d 66 4f 3a c6 7d 9a 17 19 82 b0 d5 aa f6 bb c9 a5 49 91 f2 3d 61 7a 6b f2 b7 09 3f b3 55 c6 70 4e 9d 96 15 98 06 08 45 48 b4 9d 06 a7 c7 f1 28 f5 4f 15 f9 9e a3 15 bf 03 56 0a b0 fd ae 55 46 a2 2e de 28 fa e2 92 40 b8 b0 70 db 8e ec a2 93 1f 6c e3 b2 f7 dd 82 84 1a cd 97 4e 91 34 fe bf 53 6d e7 33 31 89 85 0b b7 82 81 f3 e4 d0 cb 36 94 34 97 0e 70 a5 3f 80 c9 9a 36 a1 d6 5a aa 90 0c 9f dd 07 a1 3c 80 87 e2 6f 16 45 85 0a 7f ee 54 61 0d 38 f0 Data Ascii: K8WZ=\|;"JC6!:qMn;=qR%~S? V:_RJME[RpNt-fO:}I=azk?UpNEH(OVUF.(@plN4Sm3164p?6Z<oETa8
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: e5 82 9e 47 71 0f 99 96 59 74 9d c6 bc 52 17 2b 26 c2 2f ed 62 a6 7e 5c 7e 00 47 6b 59 d9 7a 7f c8 dd 30 61 04 1a 73 3b 6e 8c d1 03 c6 45 ee 6f 10 0f 9c bd f9 d7 2a d2 93 0b 9e 3f 23 aa db 7e 24 53 7b 3d 0f fb fd 5d 4d 65 ae 76 20 e9 13 bf ef 0a 87 5d 93 5f d3 94 4c 97 6f ca 36 17 79 e5 f7 6a 43 ef db c0 b7 5e f2 f6 dd 88 b2 34 be 70 41 b5 ff 7a ba ef 21 63 08 1d a4 4e 25 f0 9e 06 d1 b9 59 ae 79 a9 b8 16 04 c2 d0 2f b3 25 2f 8c 40 22 14 f7 d5 24 76 2e 44 fb d0 c1 78 59 ac e6 ec de 1b 0c 7f 06 0a 40 d1 53 30 f7 a2 b3 9f cc 9d 94 d4 54 09 31 51 ac d7 47 08 e5 34 e6 75 0f e1 f5 de 7d 29 e4 76 45 30 e5 8d 96 07 47 2e e0 d1 15 a4 ac 9e fc 3c 8a 3b 45 9e c1 7e 17 1f 8b 2a 27 e0 61 70 fc 29 12 2c a4 59 54 41 bc 5c b3 31 7c 89 b8 49 6c 16 f5 db 48 92 f8 2d ed 54 Data Ascii: GqYtR+&/b~\~GkYz0as;nEo?#~$S{=]Mev ]_Lo6yjC^4pAz!cN%Yy/%/@"$v.DxY@S0T1QG4u})vE0G.<;E~'ap),YTA\1\|IlH-T
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 81 39 b8 c0 27 15 4d fd e0 6d b3 26 4c 09 e4 63 2a aa a2 7a c3 2d 30 a0 f1 6c bf 64 c9 bb 53 5a 61 32 9e 1f 4a 32 48 30 60 8f 32 93 0c 36 b7 a0 88 fa ca 35 9e 95 42 e7 32 3a de 29 c9 a8 e8 9f f2 05 d1 ce bc 9b 12 9b a0 04 27 7f d0 7f 19 48 c0 6e 01 a7 7a 8a 95 2e 4e f1 55 2d 40 bb f0 c9 ed fd 36 d5 06 e1 7c 36 20 7c fd 8d b0 8c 6d 93 bc 68 12 62 17 ef d6 f4 94 a1 3b 73 22 93 1a 33 ad 50 63 4c cc c7 b9 c4 e0 76 cd 86 b1 e4 41 c5 bd 66 e8 62 51 77 eb d6 7a 12 bf b8 f6 a3 dd 11 8f 61 5a 44 9d 04 35 01 fd e6 12 20 a6 d8 d1 05 49 22 bd d2 61 33 9a 5d 66 26 8f fe ca e5 53 34 a2 fd d7 90 4e 39 79 55 2a 58 95 b8 ab a5 a6 b1 81 de 69 4b 15 4e 09 a9 1f 9e 29 e4 4d 14 68 06 4b 64 8a 6c de 8a 77 24 e8 44 a9 3f 03 e8 fa 28 f2 d5 f5 bf 9d 2c ab f9 94 f6 e1 e8 bb 93 d6 Data Ascii: 9'Mm&Lcz-0ldSZa2J2H0`265B2:)'Hnz.NU-@6\|6 \|mhb;s"3PcLvAfbQwzaZD5 I"a3]f&S4N9yUXiKN)MhKdlw$D?(,
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: d5 75 58 06 32 c8 16 fd 27 46 9d 9d 7b dd f5 30 ef 5d cb 8e a2 2f d2 72 8f f9 58 ed 60 cd 90 a2 78 36 3e c3 a5 e6 bf 9d b8 4a c1 44 20 0c 4a 23 8b ae bd 89 8c da d6 f7 b5 ee 22 13 1e d3 51 b5 17 35 29 e1 cc c8 aa 0d da 81 c5 b1 c2 4d 96 43 8e f1 1b 63 b0 93 a8 4d b5 92 5a 5d 45 0d 8a ba d8 74 32 18 31 86 56 65 5a 57 f8 43 7e ef d7 47 ba 48 a6 97 ee 9b 29 fb cc c2 dc 3a 0d 84 7f 03 f6 1f 68 66 82 60 08 5e 03 d5 4b 70 19 da 01 8c b2 dc c6 13 2e 27 6d 64 c9 fa 11 f9 a1 fd cb 7d 99 21 1f 98 7a 59 ad ed 08 85 12 70 8b 92 42 32 c0 c5 43 8e cf 25 c0 50 83 01 82 20 64 50 da ab 75 ab bb 7f 1f d0 b5 52 ed a3 a3 ac e6 e7 9e fc ab bf 4e 4c ca ee 95 f3 76 e1 b9 fa 59 35 67 4e d4 e3 d8 79 3b 97 ef be 2d 62 58 63 5e c9 f8 fb 1b c8 86 1c 4c a0 de 4b 8a 13 8c 7e b8 ea 11 Data Ascii: uX2'F{0]/rX`x6>JD J#"Q5)MCcMZ]Et21VeZWC~GH):hf`^Kp.'md}!zYpB2C%P dPuRNLvY5gNy;-bXc^LK~
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: f0 37 8f 49 ce 1a 91 ac 34 be e7 0f 40 19 91 2a f6 cc bd 4e 04 04 fc 92 d9 ac 47 a8 7b 14 81 fc b1 cd c5 a2 24 87 98 96 5b 7d df 54 54 a3 40 92 43 fc 90 c0 e5 cb c3 ae 0e 21 f0 5d 71 e5 5d 16 1d 88 18 2b aa 7a 5b 12 d6 50 e9 56 69 56 93 a7 85 19 1e 87 24 c4 fe 31 40 0d 8e fe 20 f0 9a 6c b6 3c 15 51 c9 69 94 ff 39 6c c0 0e 54 57 c6 66 41 de cf 40 a1 c3 a9 c3 92 4c a0 dd f7 95 ce b5 c5 d0 0a 80 d3 52 ad 32 a1 a0 da 8f 50 e8 77 b1 11 86 7b ed a1 d9 16 b1 8e df 51 c2 5f d0 f2 29 c4 f5 6d 27 6e b5 b1 f3 87 6f d0 53 58 68 48 8a 5d 46 14 24 f8 78 fe 00 ac 0e 56 24 f8 40 95 69 2d 0c 94 7a 84 a3 7e 6d 7e ce ce c3 ff 54 fd d0 15 6a 78 8a 67 cb cd 1e 55 e9 8e 3c a5 4e 32 c7 4d 76 45 c4 fb 69 94 9f 6f fb 34 a3 29 ff 75 3c 4b 5b 2f 35 19 dd 34 3c 35 8d 7f 7c 91 a8 7d Data Ascii: 7I4@*NG{$[}TT@C!]q]+z[PViV$1@ l<Qi9lTWfA@LR2Pw{Q_)m'noSXhH]F$xV$@i-z~m~TjxgU<N2MvEio4)u<K[/54<5\|}
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: d5 98 b9 41 de ce 2d 5c b3 72 f6 03 15 d4 c4 31 7d 79 6d 90 75 31 e4 d9 c9 5d 21 00 40 7a ff 25 48 2e c0 3d 8d 9f e5 78 15 ec ba 54 27 15 5f 2a 1b 34 8e 0d 10 83 0e 78 27 88 1e 61 80 fa 38 19 89 5b 80 3a 25 1a 12 2e a4 61 cf 71 c8 10 07 e7 5a e0 c2 63 f6 37 34 e6 ad 11 c5 a0 5d f4 af 2e 22 92 cc 20 02 09 f2 61 b8 c3 0f 24 95 52 5c 2f e0 b0 a8 5b ae 03 d3 2d 45 87 57 88 08 52 77 14 09 07 46 1a 87 f4 8d 3d 23 98 c0 ee 9a 3b dc 31 f3 78 74 67 5f 89 02 52 e9 ca b0 2d 11 ea 7d 4f 1b 6c f5 cd 32 25 14 6a 96 6d 9d 4d b8 36 b5 a0 c9 80 ed c6 49 f3 cb d0 02 28 3c f0 15 44 81 4b af fc 5c 2d e4 4b 1c f9 ce 51 a1 ab 8b 1c 1e f5 c9 0c 4e ab e3 57 f9 ed a0 24 ff c6 4d 46 24 9f 9a ef ff 6c 7d ce cb e6 f7 a0 59 95 31 3f 31 a1 51 9b 08 57 9b b4 82 8c 08 b8 00 2d f9 74 1b Data Ascii: A-\r1}ymu1]!@z%H.=xT'_*4x'a8[:%.aqZc74]." a$R\/[-EWRwF=#;1xtg_R-}Ol2%jmM6I(<DK\-KQNW$MF$l}Y1?1QW-t
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: fe b2 c3 92 ee 7e 6b 97 24 1b 37 d2 d4 8d aa 59 b3 1e 31 8e 04 a5 72 3f 09 13 25 dc ec 73 da d0 2f e4 ac 61 37 b2 56 08 75 82 81 8c 63 39 aa 34 40 24 e4 9e de 9a 65 92 db 37 68 64 72 7d 21 08 d7 13 36 dd 81 a1 c4 1d 37 5a 2a 70 f2 05 16 53 6b 2f bb 2a eb 7e 5d 9d dd 6c 84 ea 61 94 bc f8 87 e2 1d c0 f6 9a 8a d1 ae d5 32 88 e4 8d b9 57 53 bb b5 0c a5 03 ef c0 27 cf 8b 94 e8 dc 13 b4 38 26 3a d5 c0 46 46 3d ba 71 c4 b7 23 be ee 4d 63 00 e1 17 9b 10 c9 5d f8 29 49 3c c9 10 04 cf 15 17 ec 30 d0 aa 6b 13 f5 e5 ae 2f 6b bf 20 38 38 e4 da b7 2e b7 05 68 9f 93 4f 82 9b 90 76 cb f7 ee 05 79 b4 a5 e3 a4 21 47 a0 be 6a 89 98 48 f9 e5 4f ef 17 26 ed 58 e8 b0 54 91 57 92 15 e2 47 d0 69 56 33 00 c3 98 b1 8b 0d 27 70 ed d3 a2 54 80 df d3 34 66 8c 5c c2 a6 a9 8c 31 cf ff Data Ascii: ~k$7Y1r?%s/a7Vuc94@$e7hdr}!67ZpSk/~]la2WS'8&:FF=q#Mc])I<0k/k 88.hOvy!GjHO&XTWGiV3'pT4f\1
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: e5 db ed 29 81 14 33 dd a5 3c 10 56 ca 6d 7c c6 cb e8 74 cd 79 41 2b d6 0d fc 5c 50 e7 90 97 53 38 3e eb bd ab 73 60 eb 73 fa e3 54 70 e9 f1 e6 4d 19 92 90 57 80 07 61 79 8f 93 33 e6 68 af ff 36 bc 24 e4 16 5b 16 98 9d 5e a5 e0 48 12 64 c5 27 15 f0 3e 0b b8 f0 f7 5e 37 b4 57 88 4a c9 7c 2f 7a 18 ba 5e 05 3b 20 f9 8c 72 2a 33 0b a9 e7 9b fd d9 f2 5a 41 d7 7d 13 29 36 d6 7a 7e 02 d5 d7 1a 22 b9 23 70 74 78 07 48 3e 18 f9 8b 41 34 6b 89 f4 0e df 06 87 59 65 4e 1b bb 5b b5 eb 54 7c 6a 1b 55 15 80 14 1e 77 be d8 ba d8 10 8c 93 11 71 f9 df 1e c4 73 2d 56 e7 43 bb a0 28 b9 88 ce e6 40 4b 3a 6b ed 5d 17 90 a3 9a 6b 80 96 9f 4c 89 44 b6 f8 b0 49 2b 77 b5 2c fe aa 58 fd 43 0f 46 d8 b6 5c 09 a3 0b ff 55 96 73 7f 45 18 a5 ea b1 b0 4b 33 ac fc cd 62 26 ec 84 7a e5 ca Data Ascii: )3<Vm\|tyA+\PS8>s`sTpMWay3h6$[^Hd'>^7WJ\|/z^; r*3ZA})6z~"#ptxH>A4kYeN[T\|jUwqs-VC(@K:k]kLDI+w,XCF\UsEK3b&z
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 43 79 50 b2 e4 89 be b0 17 4b 43 bb 0a b2 57 6e 32 1c 1c 2b e3 e6 30 40 b2 c1 a2 f7 6b 40 f4 7a f0 68 6f 4e db f8 39 4a c7 2d 13 7f 3d 35 7c 59 41 1c 16 79 17 eb 50 7b cb a0 fc b6 78 e1 f7 e2 d2 fa a4 76 ee eb 71 b8 ec d8 19 de 2b 34 9c fa 67 1c e4 65 59 1a 2c 2d 69 67 f3 1d fb d3 5f 10 67 ce 06 4b fa 95 69 61 bb f8 19 da 95 18 a2 0b 56 40 e9 01 ff ca 68 8f bc 86 01 10 b6 74 13 2a 9b 3b 49 e9 a7 0d ef 78 1b ff aa be 2f 9d 75 f5 b0 d1 5e a3 d9 f8 62 57 fd fe 98 1d a5 c1 9a b6 0e 90 f1 e0 d6 fc ef 4f 2d 6c 90 68 ea 4a 7a db db 36 37 d1 cf 70 61 53 ca 2e 85 c1 7e c9 84 a6 f7 73 67 e4 56 f7 11 ab 57 94 7e 55 96 16 c0 de 26 b5 5d 59 d8 76 44 99 aa 0a b3 ea 6d 8a a9 91 00 54 1a 2f 93 8a b5 b6 83 10 0f a8 07 ef ca 85 de 65 5a 47 98 88 e7 52 ab a3 36 3c 7d 05 5d Data Ascii: CyPKCWn2+0@k@zhoN9J-=5\|YAyP{xvq+4geY,-ig_gKiaV@ht*;Ix/u^bWO-lhJz67paS.~sgVW~U&]YvDmT/eZGR6<}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.17	49836	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:04 UTC	501	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/786432-1310719 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:05 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 524288 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:05 UTC	16061	IN	Data Raw: 36 06 80 22 0c fb 5c 66 4d 16 5e 7d 6a 21 a3 76 04 e4 ac b0 6e c7 13 13 df 3d 09 a7 05 c4 e2 f7 d3 9d 39 db 14 67 0e 84 a4 dc 0a ba 4c 7b 8f a2 d0 86 4f d3 fe 6c ef 17 de 2b 4d 19 18 bb 6d 61 ff 44 b4 78 ef 5f 3e 71 ab e9 5b f8 9d 00 03 4e 58 14 04 67 b5 85 30 5c 1f e4 e6 3d 81 25 38 c0 5f ae 76 15 be 68 94 c3 f4 c5 e8 54 90 5b 4e e5 80 f8 1f a8 2c 06 2e a8 90 8c 8c 90 d7 b9 00 d2 c2 0c 00 66 73 6f 05 20 ca 7f 82 ea c1 3c 72 65 c4 35 06 c0 d8 b9 d2 2c 4d c6 76 c7 ed db e1 fe 90 37 4b ec 37 d0 75 c1 a5 bd ce 7d 0d 6a ed d2 58 65 2d 89 d1 90 81 4d 0e f2 57 ea f7 4f 24 30 1d 2d 93 24 4c 24 4a 1f ea f8 ff f4 84 ec 8a ac 89 d9 ea f1 67 88 8d a5 3c 30 d4 f4 7c 01 14 74 95 f3 82 13 9b f0 7a 88 78 f8 07 47 4d 1c 7b 72 a6 cf 0b 6e 2f ae ce 71 48 b0 12 96 f0 6f 70 Data Ascii: 6"\fM^}j!vn=9gL{Ol+MmaDx_>q[NXg0\=%8_vhT[N,.fso <re5,Mv7K7u}jXe-MWO$0-$L$Jg<0\|tzxGM{rn/qHop
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 83 a2 52 50 8b d7 23 3d 68 64 56 cc 1b 96 25 ca 15 2c bf b6 27 fe 80 fe 88 b6 b2 6e 58 c9 46 a3 c1 db fc 48 c0 67 58 68 29 e6 ff 49 9f 63 f8 b9 85 65 3b 5d c7 86 3f c7 dd 8c d8 01 76 83 75 73 88 2b 8e 6a 61 b0 cf f8 41 d5 f4 7d 98 f9 4f 47 0b f7 34 b3 39 78 95 e0 61 73 21 02 b0 0a d5 59 64 43 f8 d1 74 fb 00 ad e4 e7 f4 be 89 3f 08 c0 d8 81 9c 36 52 58 e3 2d d7 d9 f2 55 79 96 9c e6 39 e8 ee b3 e3 5e ce 9f bf f9 a5 cd 16 b2 d9 4f e4 99 ca 21 c2 ee c4 61 c0 f2 06 33 e7 08 4a bf 6d 8e cf 1c 9c 9d fc 59 26 80 c7 aa 21 f0 2e 18 e6 a3 6c 2d ef 5d 0a 2f a4 b1 9e c6 58 5c d4 f4 78 61 95 18 d0 b6 27 9b be 47 c3 87 53 52 a3 bd af 65 67 47 a5 12 90 37 d1 a5 17 b5 c1 87 02 f7 0e 63 12 5d 33 e7 aa 37 69 02 2b 09 3a 5f d3 a5 ae 58 0c e1 62 9b 31 5c 81 d8 e3 ec 24 1b d7 Data Ascii: RP#=hdV%,'nXFHgXh)Ice;]?vus+jaA}OG49xas!YdCt?6RX-Uy9^O!a3JmY&!.l-]/X\xa'GSRegG7c]37i+:_Xb1\$
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: e5 a2 18 1a 23 49 01 d4 44 17 3c 57 92 e2 69 b2 92 36 91 4f 7b 26 1f bd d6 b2 fb cc 51 6b 58 91 c0 0a d6 82 45 49 2f 2a 81 3d 0d 32 73 ff 1c 73 a9 20 4e ed b8 75 54 a0 a6 d8 8a b3 25 16 a9 ad 97 c9 0c 7e 2b 65 3b 8a 22 75 65 1e 47 eb 8a 6c 15 98 46 e6 0e af 80 a2 47 53 fa 7d 8a d2 6b 81 31 8c c1 89 ee 81 54 ed a0 0e 21 cb eb 0c 10 72 9e 2c dc b4 91 85 26 b8 30 74 5b 9e 8d f3 7f d2 3e b0 35 12 84 58 40 d1 54 55 50 7b ab 7d b7 76 1f c7 27 7c 61 8a ae 3b 0e 00 b3 31 0e 95 d7 a8 79 de 4b 9b 86 88 47 2b 0d 80 67 bd be 42 94 14 61 a3 3d 33 59 08 ff 1b 2e 28 08 b6 9c 7c 15 63 90 ba 03 51 c1 ad aa d0 df 44 38 f1 38 46 19 81 70 1d ab bf 57 4a e6 15 af 72 05 e6 69 38 86 33 a1 cb 39 49 5e ce 51 05 31 fd d2 c1 d0 4b e3 6c 1e 55 1f f1 e5 eb c4 d6 f5 95 4d a1 a2 53 da Data Ascii: #ID<Wi6O{&QkXEI/*=2ss NuT%~+e;"ueGlFGS}k1T!r,&0t[>5X@TUP{}v'\|a;1yKG+gBa=3Y.(\|cQD88FpWJri839I^Q1KlUMS
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 83 9f d3 5b 09 b4 a2 19 93 e7 b6 da 7d e6 ef f2 f3 30 ae 50 3f 13 d0 da e8 16 8e bf af 6c 33 76 24 db 39 60 29 0a 5a 84 5d e7 0b cc 94 d3 7a 73 59 bd 74 9f cc 33 79 aa 8b fe e4 2f f0 6e d7 b0 66 b9 8e 48 85 3c 5e 6b ce 41 95 76 48 cb dd f2 fc d3 a6 64 13 1d 29 50 b4 52 ac 5d f1 ca 98 25 0f c3 af 81 30 d4 72 6a 27 24 73 96 a1 6a 11 a2 90 16 92 02 ce dc c3 ba 12 19 91 72 d9 eb 8c cb 02 5b 3c 87 03 25 4c 7c ee f8 b2 dc 38 a6 78 65 0d 8f ac 6a ee 77 05 eb df 37 0a a7 0a 8f 05 42 f8 f0 46 9a 8f 70 8c 28 88 35 97 a4 4e 2f 76 78 59 db 6f 5a c0 b1 88 1c de c7 81 b7 86 fc 16 0a c3 bd 3e d8 e0 4e 5e 83 69 4a 3f b3 d0 ec 17 f9 ff a4 2e aa 1f b1 0b e3 0e f2 57 a4 22 71 01 2d 59 a3 2e da 30 29 3f 30 8e 6b ec d6 ad a6 5c ea cb cc 33 66 d3 11 58 05 66 61 1d 6a cc 3e f1 Data Ascii: [}0P?l3v$9`)Z]zsYt3y/nfH<^kAvHd)PR]%0rj'$sjr[<%L\|8xejw7BFp(5N/vxYoZ>N^iJ?.W"q-Y.0)?0k\3fXfaj>
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 47 d6 f5 f9 ce a8 15 d9 e8 0e f6 a8 2e ed d5 71 c1 d2 13 4e 6b 90 aa a7 b7 c7 b4 59 07 ea c1 40 bf 8c f6 80 6b cb 52 7b 34 54 fe d6 65 83 87 ec c4 17 56 72 bd f7 c3 94 7e d1 b7 2f 62 36 87 0d e9 0e 39 99 57 91 d3 dd f9 39 aa 0e 5e ba 86 46 f8 fc 7f a4 ce c7 58 a4 4e c4 72 f5 1e d5 ea ab ae 70 87 eb be 02 78 50 b8 a4 5a d5 35 c0 9e d8 e0 d5 01 28 b7 57 ff b8 8f 6b 96 ec a0 7f 07 b8 96 b8 66 54 e3 4e 8d 84 5c b7 62 d5 16 ef 31 02 0d 2f 2c b3 fc 83 36 3b cb 69 75 6a 6c dd 43 32 59 83 48 05 3d 19 65 a0 f5 03 b0 14 ff ee e5 0a c9 bc ae 11 e7 4e 32 69 ac d3 ea eb b3 c6 13 27 fe c7 75 f9 78 47 80 6e 1a 00 66 ac 35 f9 bf 28 9b 4f c6 0d c0 b1 93 50 3d 3c 2a ea d7 93 eb 73 e0 79 0e 91 62 c9 65 10 58 8e 15 2d f6 0e fa 15 fe 77 b0 52 7e 26 59 a8 69 13 5b df 0a 20 50 Data Ascii: G.qNkY@kR{4TeVr~/b69W9^FXNrpxPZ5(WkfTN\b1/,6;iujlC2YH=eN2i'uxGnf5(OP=<*sybeX-wR~&Yi[ P
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 14 11 ed 2f 14 25 c8 6e 29 34 c2 11 b0 ca 3e 9d d6 19 c2 cf 84 54 9b 25 52 3e 50 13 2b 11 9c c8 ac d7 74 81 1e bd 44 af 44 0e 71 33 e7 36 56 c6 86 fa 60 1c 43 04 3a 96 c0 7a 2f f0 7a 5d af 86 ac ee 7d 56 45 d1 68 9b 63 99 cd bb 5a 4f 01 5b a9 a6 eb 30 38 4e 56 33 8f c0 64 2c 92 f2 2b a7 bc 25 60 8c 63 6c 21 25 81 d5 e6 81 5d 7c 1d 69 20 b9 c6 51 d0 11 ec 4b 31 9e b6 1b 50 5b cf ed 6a b9 da 69 60 39 30 bf c2 b5 11 e0 7b 6f b2 39 c8 0a 62 25 59 15 6c e8 e6 61 42 59 58 fd dc 20 2b 3d 9e 1b a2 82 e0 d2 e2 6d 2a fc 79 ee e3 23 dc 53 78 93 73 97 54 e5 98 d6 4f 95 a7 11 5d fa bc 46 34 79 1a 45 10 90 c6 00 a0 b9 79 a1 8b e6 f5 94 53 c2 bb 0b a2 85 7e e6 f3 14 75 f6 8f ca 62 c6 a7 71 51 1b 66 1b 8f 3a f7 77 07 14 d2 25 df f8 b2 12 cd e0 6f 83 2c e3 ba 2d ea 40 04 Data Ascii: /%n)4>T%R>P+tDDq36V`C:z/z]}VEhcZO[08NV3d,+%`cl!%]\|i QK1P[ji`90{o9b%YlaBYX +=m*y#SxsTO]F4yEyS~ubqQf:w%o,-@
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 74 f4 75 c5 d3 b4 22 6d bb 10 87 6d d3 2f 79 26 b5 ab 04 e9 f1 11 f9 96 1c 09 d0 33 b3 2f 27 87 f7 1c 85 ad e6 15 4f 6e 51 a0 8b c9 09 33 6b c1 f6 22 15 53 ad e9 34 14 11 2e 0f 59 1b bf 57 e7 25 53 92 a3 a8 78 a0 39 cb ad f4 8b d2 f0 dc b1 0f 97 dd 66 3f 0c b4 cf 26 ad 7b ee c7 19 f4 4d f0 52 60 17 07 c2 0f 9d 38 42 60 40 90 9d 43 35 0c 07 75 82 68 13 ef 9c 7b 5e 75 55 c0 53 2b 6d d5 7b 2a 03 6a 89 9f 83 df ce 8b 9c a2 db ca e0 6b 45 c8 e6 57 cb 64 ea 71 ce c7 14 1b 64 8c b4 da 25 bc 12 25 36 51 03 f5 ba 91 c0 2c 22 d4 f0 72 27 6f 64 a0 cb 7e 64 8d 41 32 24 5c 1e 11 ff d2 00 d8 0b c4 12 25 9e b0 cf 7e e4 08 33 20 e8 70 a8 80 d6 33 8c 15 a9 ec d2 8e 74 64 3b eb b1 6c 3b d6 f2 6a 22 bb 2b 06 e0 be 4d 59 c0 74 a3 01 a0 42 43 14 e8 f0 c4 ea b0 2c c7 69 be 7b Data Ascii: tu"mm/y&3/'OnQ3k"S4.YW%Sx9f?&{MR`8B`@C5uh{^uUS+m{*jkEWdqd%%6Q,"r'od~dA2$\%~3 p3td;l;j"+MYtBC,i{
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: 05 c6 75 36 49 b0 ba 52 cc 30 07 ea 31 c3 5f c1 a4 47 ae e4 9d 48 47 03 31 f2 24 56 65 da c1 07 a8 cb db 43 20 b2 66 9d b1 09 03 0d a8 4c 89 ba b7 1e c6 ce 52 99 13 45 83 b5 c5 30 84 9e fa da 68 70 b1 d0 16 b2 bb 73 60 b9 d8 ba 1f 49 43 27 c4 a0 21 74 81 b3 44 d3 1f 95 ce fb cc 6d 93 d6 47 a5 71 6c c9 75 68 bf a0 32 0d d6 45 74 ed 6f 45 20 0c 58 e2 d4 f7 79 3c fb c2 59 4d c6 97 29 83 28 6b f7 49 a4 4c 01 2e bb 40 95 23 e3 a0 d8 f6 31 20 fd 8f 47 c5 af c4 ba 28 b8 fc 4d 5d c7 ce 8f a5 e2 59 5d 76 6a b8 5e e9 5f de 04 95 37 fc 15 f0 5c f6 31 60 30 82 5b 2e cb c0 4f 01 c9 1a 41 76 0f d7 e5 1a 89 4f 56 28 6e 27 6a 05 70 c0 b1 3b f1 65 6d 7c d9 50 20 9c 55 e1 76 31 95 f4 a6 82 40 10 4f a9 de ba f2 a4 58 36 9f a9 87 81 20 d9 26 90 b9 fc f6 78 60 c6 e7 ca 4d 65 Data Ascii: u6IR01_GHG1$VeC fLRE0hps`IC'!tDmGqluh2EtoE Xy<YM)(kIL.@#1 G(M]Y]vj^_7\1`0[.OAvOV(n'jp;em\|P Uv1@OX6 &x`Me
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: c4 00 ae 34 ff 6b 5b c2 01 f5 58 69 70 00 1b 1f 14 95 5b f2 d0 37 4f d1 8b e2 c5 a7 8e af 0c 8f f7 cf 8a 72 a0 ad 32 e7 d6 9e 92 9f 0d 35 32 fe 92 4f 34 64 09 e2 c4 19 3d 79 61 e2 c8 df 01 07 31 40 68 21 e8 12 b8 4c c4 82 b8 65 44 79 93 23 6e 63 32 2f 7f 02 b5 85 6b ad ca 53 c2 96 a3 ca 20 9c f6 8b 4e 17 a4 20 71 ce e8 92 eb 3c 7f 77 40 a4 35 ea f7 7f a5 76 99 3b 68 70 c9 6b ca 08 5d ee 83 36 30 5d ea f5 ca 05 91 02 cc b7 1a e2 56 9e 72 13 f8 2d 4f de a9 54 c1 f8 90 db 4f a5 30 c8 85 1b b9 33 26 a8 f6 b6 5e bf 51 a8 85 4f eb b0 85 88 7d fb 0f 6d d7 2d a6 c4 af f9 34 10 a8 c0 e7 82 e3 08 a6 4e 0e f1 d2 a2 ee 01 03 86 a2 41 1e 01 4d 2e 71 fb 20 f8 0d 20 1a 3d a5 14 eb 91 2e 0a ba e9 c1 bd bc ea db e0 45 84 5e ee 3c 53 54 71 1c c3 48 64 00 0e ed 7a cd 3a 85 Data Ascii: 4k[Xip[7Or252O4d=ya1@h!LeDy#nc2/kS N q<w@5v;hpk]60]Vr-OTO03&^QO}m-4NAM.q =.E^<STqHdz:
2024-07-11 11:37:05 UTC	16384	IN	Data Raw: ec 6b 73 db 97 5c ac d9 1d 35 bd d0 30 ed 86 47 d6 d9 f9 f6 03 b6 e8 26 45 7e 1e 8e 04 c1 00 35 8d d4 46 c8 5d be 2c d4 cc 8a d8 17 3e 51 46 fb 11 94 8c 3d 04 83 5c de b8 eb 6a 9b 73 10 b0 f9 60 29 61 fe f4 b3 4c f9 28 3f dd ac c9 33 86 a7 2b 95 74 14 0e b0 bd ec 38 bc 3e f8 5d 6e 31 3c 2f 8f ab 47 12 51 69 41 e0 dc 11 3d 43 92 59 75 0b 72 53 ca 3d 6b 91 ed 5b 28 c4 db 8e 25 bd e9 0e b0 f2 a6 83 75 6f ba 43 22 68 79 91 18 f6 10 7b 2c fc a9 25 4e d8 b6 08 6e 74 3e 00 25 8f 3e 74 ad 71 6a d2 79 c3 66 b8 c1 9e a6 65 5e 74 49 e0 36 4b b6 6e c0 38 85 17 3e 81 40 35 ee fe 83 01 70 7e 10 d1 7f 49 cd e1 2e ec f2 41 ca 93 48 83 f6 2e 92 ef bb e2 3c 23 42 1b 65 b1 75 32 88 5a be d9 e4 cd 12 96 1d 1a 46 f9 c7 d2 81 0c 06 9a ca 42 51 fc 09 94 6a 53 fc 78 af 84 b7 aa Data Ascii: ks\50G&E~5F],>QF=\js`)aL(?3+t8>]n1</GQiA=CYurS=k[(%uoC"hy{,%Nnt>%>tqjyfe^tI6Kn8>@5p~I.AH.<#Beu2ZFBQjSx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.17	49837	31.216.144.5	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:05 UTC	390	OUT	GET /aesasm.js HTTP/1.1 Host: mega.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mega.nz/decrypter.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:06 UTC	240	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 126274 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:06 UTC	16144	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 61 73 6d 43 72 79 70 74 6f 0a 20 2a 20 4d 6f 64 75 6c 65 20 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 76 69 62 6f 72 6e 6f 66 66 2f 61 73 6d 63 72 79 70 74 6f 2e 6a 73 2f 62 6c 6f 62 2f 72 65 6c 65 61 73 65 2f 73 72 63 2f 61 65 73 2f 61 65 73 2e 61 73 6d 2e 6a 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 41 72 74 65 6d 20 53 20 56 79 62 6f 72 6e 6f 76 0a 20 2a 20 0a 20 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 0a 20 2a 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 Data Ascii: /** * asmCrypto * Module from https://github.com/vibornoff/asmcrypto.js/blob/release/src/aes/aes.asm.js * Copyright (c) 2013 Artem S Vybornov * * Permission is hereby granted, free of charge, to any person obtaining a copy of * this software and a
2024-07-11 11:37:06 UTC	16384	IN	Data Raw: 38 43 20 3d 20 30 2c 20 52 38 44 20 3d 20 30 2c 20 52 38 45 20 3d 20 30 2c 20 52 38 46 20 3d 20 30 2c 20 2f 2f 20 72 6f 75 6e 64 20 38 20 6b 65 79 0a 20 20 20 20 20 20 20 20 52 39 30 20 3d 20 30 2c 20 52 39 31 20 3d 20 30 2c 20 52 39 32 20 3d 20 30 2c 20 52 39 33 20 3d 20 30 2c 20 52 39 34 20 3d 20 30 2c 20 52 39 35 20 3d 20 30 2c 20 52 39 36 20 3d 20 30 2c 20 52 39 37 20 3d 20 30 2c 20 52 39 38 20 3d 20 30 2c 20 52 39 39 20 3d 20 30 2c 20 52 39 41 20 3d 20 30 2c 20 52 39 42 20 3d 20 30 2c 20 52 39 43 20 3d 20 30 2c 20 52 39 44 20 3d 20 30 2c 20 52 39 45 20 3d 20 30 2c 20 52 39 46 20 3d 20 30 2c 20 2f 2f 20 72 6f 75 6e 64 20 39 20 6b 65 79 0a 20 20 20 20 20 20 20 20 52 41 30 20 3d 20 30 2c 20 52 41 31 20 3d 20 30 2c 20 52 41 32 20 3d 20 30 2c 20 52 41 33 Data Ascii: 8C = 0, R8D = 0, R8E = 0, R8F = 0, // round 8 key R90 = 0, R91 = 0, R92 = 0, R93 = 0, R94 = 0, R95 = 0, R96 = 0, R97 = 0, R98 = 0, R99 = 0, R9A = 0, R9B = 0, R9C = 0, R9D = 0, R9E = 0, R9F = 0, // round 9 key RA0 = 0, RA1 = 0, RA2 = 0, RA3
2024-07-11 11:37:06 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 74 36 20 3d 20 48 45 41 50 5b 73 62 6f 78 7c 73 34 5d 20 5e 20 48 45 41 50 5b 73 62 6f 78 7c 73 39 5d 20 5e 20 48 45 41 50 5b 78 32 5f 73 62 6f 78 7c 73 45 5d 20 5e 20 48 45 41 50 5b 78 33 5f 73 62 6f 78 7c 73 33 5d 20 5e 20 52 33 36 3b 0a 20 20 20 20 20 20 20 20 74 37 20 3d 20 48 45 41 50 5b 78 33 5f 73 62 6f 78 7c 73 34 5d 20 5e 20 48 45 41 50 5b 73 62 6f 78 7c 73 39 5d 20 5e 20 48 45 41 50 5b 73 62 6f 78 7c 73 45 5d 20 5e 20 48 45 41 50 5b 78 32 5f 73 62 6f 78 7c 73 33 5d 20 5e 20 52 33 37 3b 0a 20 20 20 20 20 20 20 20 74 38 20 3d 20 48 45 41 50 5b 78 32 5f 73 62 6f 78 7c 73 38 5d 20 5e 20 48 45 41 50 5b 78 33 5f 73 62 6f 78 7c 73 44 5d 20 5e 20 48 45 41 50 5b 73 62 6f 78 7c 73 32 5d 20 5e 20 48 45 41 50 5b 73 62 6f 78 7c 73 37 Data Ascii: t6 = HEAP[sbox\|s4] ^ HEAP[sbox\|s9] ^ HEAP[x2_sbox\|sE] ^ HEAP[x3_sbox\|s3] ^ R36; t7 = HEAP[x3_sbox\|s4] ^ HEAP[sbox\|s9] ^ HEAP[sbox\|sE] ^ HEAP[x2_sbox\|s3] ^ R37; t8 = HEAP[x2_sbox\|s8] ^ HEAP[x3_sbox\|sD] ^ HEAP[sbox\|s2] ^ HEAP[sbox\|s7
2024-07-11 11:37:06 UTC	16384	IN	Data Raw: 36 5d 20 5e 20 52 45 45 3b 0a 20 20 20 20 20 20 20 20 53 46 20 3d 20 48 45 41 50 5b 73 62 6f 78 7c 74 42 5d 20 5e 20 52 45 46 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 64 65 63 72 79 70 74 20 28 20 73 30 2c 20 73 31 2c 20 73 32 2c 20 73 33 2c 20 73 34 2c 20 73 35 2c 20 73 36 2c 20 73 37 2c 20 73 38 2c 20 73 39 2c 20 73 41 2c 20 73 42 2c 20 73 43 2c 20 73 44 2c 20 73 45 2c 20 73 46 20 29 20 7b 0a 20 20 20 20 20 20 20 20 73 30 20 3d 20 73 30 20 7c 20 30 3b 0a 20 20 20 20 20 20 20 20 73 31 20 3d 20 73 31 20 7c 20 30 3b 0a 20 20 20 20 20 20 20 20 73 32 20 3d 20 73 32 20 7c 20 30 3b 0a 20 20 20 20 20 20 20 20 73 33 20 3d 20 73 33 20 7c 20 30 3b 0a 20 20 20 20 20 20 20 20 73 34 20 3d 20 73 34 20 7c 20 30 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: 6] ^ REE; SF = HEAP[sbox\|tB] ^ REF; } function _decrypt ( s0, s1, s2, s3, s4, s5, s6, s7, s8, s9, sA, sB, sC, sD, sE, sF ) { s0 = s0 \| 0; s1 = s1 \| 0; s2 = s2 \| 0; s3 = s3 \| 0; s4 = s4 \| 0;
2024-07-11 11:37:06 UTC	16384	IN	Data Raw: 37 5d 20 5e 20 52 35 37 3b 0a 20 20 20 20 20 20 20 20 74 38 20 3d 20 48 45 41 50 5b 69 6e 76 5f 73 62 6f 78 7c 73 38 5d 20 5e 20 52 35 38 3b 0a 20 20 20 20 20 20 20 20 74 39 20 3d 20 48 45 41 50 5b 69 6e 76 5f 73 62 6f 78 7c 73 39 5d 20 5e 20 52 35 39 3b 0a 20 20 20 20 20 20 20 20 74 41 20 3d 20 48 45 41 50 5b 69 6e 76 5f 73 62 6f 78 7c 73 41 5d 20 5e 20 52 35 41 3b 0a 20 20 20 20 20 20 20 20 74 42 20 3d 20 48 45 41 50 5b 69 6e 76 5f 73 62 6f 78 7c 73 42 5d 20 5e 20 52 35 42 3b 0a 20 20 20 20 20 20 20 20 74 43 20 3d 20 48 45 41 50 5b 69 6e 76 5f 73 62 6f 78 7c 73 43 5d 20 5e 20 52 35 43 3b 0a 20 20 20 20 20 20 20 20 74 44 20 3d 20 48 45 41 50 5b 69 6e 76 5f 73 62 6f 78 7c 73 44 5d 20 5e 20 52 35 44 3b 0a 20 20 20 20 20 20 20 20 74 45 20 3d 20 48 45 41 50 Data Ascii: 7] ^ R57; t8 = HEAP[inv_sbox\|s8] ^ R58; t9 = HEAP[inv_sbox\|s9] ^ R59; tA = HEAP[inv_sbox\|sA] ^ R5A; tB = HEAP[inv_sbox\|sB] ^ R5B; tC = HEAP[inv_sbox\|sC] ^ R5C; tD = HEAP[inv_sbox\|sD] ^ R5D; tE = HEAP
2024-07-11 11:37:06 UTC	16384	IN	Data Raw: 66 66 73 65 74 7c 31 32 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 44 20 5e 20 48 45 41 50 5b 6f 66 66 73 65 74 7c 31 33 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 45 20 5e 20 48 45 41 50 5b 6f 66 66 73 65 74 7c 31 34 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 46 20 5e 20 48 45 41 50 5b 6f 66 66 73 65 74 7c 31 35 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 45 41 50 5b 6f 66 66 73 65 74 5d 20 3d 20 53 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 45 41 50 5b 6f 66 66 73 65 74 7c 31 5d 20 3d 20 53 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 45 41 50 5b 6f 66 66 73 65 74 7c 32 5d 20 3d 20 53 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 45 41 50 5b 6f Data Ascii: ffset\|12], SD ^ HEAP[offset\|13], SE ^ HEAP[offset\|14], SF ^ HEAP[offset\|15] ); HEAP[offset] = S0; HEAP[offset\|1] = S1; HEAP[offset\|2] = S2; HEAP[o
2024-07-11 11:37:06 UTC	16384	IN	Data Raw: 2c 20 69 76 38 20 3d 20 30 2c 20 69 76 39 20 3d 20 30 2c 20 69 76 41 20 3d 20 30 2c 20 69 76 42 20 3d 20 30 2c 20 69 76 43 20 3d 20 30 2c 20 69 76 44 20 3d 20 30 2c 20 69 76 45 20 3d 20 30 2c 20 69 76 46 20 3d 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 30 20 3d 20 30 2c 20 73 31 20 3d 20 30 2c 20 73 32 20 3d 20 30 2c 20 73 33 20 3d 20 30 2c 20 73 34 20 3d 20 30 2c 20 73 35 20 3d 20 30 2c 20 73 36 20 3d 20 30 2c 20 73 37 20 3d 20 30 2c 20 73 38 20 3d 20 30 2c 20 73 39 20 3d 20 30 2c 20 73 41 20 3d 20 30 2c 20 73 42 20 3d 20 30 2c 20 73 43 20 3d 20 30 2c 20 73 44 20 3d 20 30 2c 20 73 45 20 3d 20 30 2c 20 73 46 20 3d 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 63 72 79 70 74 65 64 20 3d 20 30 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 Data Ascii: , iv8 = 0, iv9 = 0, ivA = 0, ivB = 0, ivC = 0, ivD = 0, ivE = 0, ivF = 0, s0 = 0, s1 = 0, s2 = 0, s3 = 0, s4 = 0, s5 = 0, s6 = 0, s7 = 0, s8 = 0, s9 = 0, sA = 0, sB = 0, sC = 0, sD = 0, sE = 0, sF = 0, decrypted = 0; if (
2024-07-11 11:37:06 UTC	11826	IN	Data Raw: 45 41 50 5b 6f 66 66 73 65 74 7c 31 33 5d 20 3c 3c 20 31 36 29 20 7c 20 28 48 45 41 50 5b 6f 66 66 73 65 74 7c 31 34 5d 20 3c 3c 20 38 29 20 7c 20 48 45 41 50 5b 6f 66 66 73 65 74 7c 31 35 5d 20 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 20 3d 20 28 6f 66 66 73 65 74 2b 31 36 29 7c 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 3d 20 28 6c 65 6e 67 74 68 2d 31 36 29 7c 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 72 6f 63 65 73 73 65 64 20 3d 20 28 70 72 6f 63 65 73 73 65 64 2b 31 36 29 7c 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 53 30 20 3d 20 5a 30 20 3e 3e 3e 20 32 34 2c 20 53 31 20 3d 20 28 5a 30 20 3e 3e 3e 20 31 36 29 20 26 20 32 35 35 2c Data Ascii: EAP[offset\|13] << 16) \| (HEAP[offset\|14] << 8) \| HEAP[offset\|15] ) ); offset = (offset+16)\|0, length = (length-16)\|0, processed = (processed+16)\|0; } S0 = Z0 >>> 24, S1 = (Z0 >>> 16) & 255,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.17	49838	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:06 UTC	502	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/1310720-1966079 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:07 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 655360 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:07 UTC	16061	IN	Data Raw: 4a 1a 0f c5 6d c4 d6 2e 81 9e 1f 7c 74 41 1d 24 45 e0 65 38 00 08 8e 4f fc de 92 15 1e 82 f5 49 50 e5 34 5e 27 d9 be eb e4 43 1b a1 b7 44 cf c3 73 81 09 cb 9a ed 44 bd 27 0a 33 71 10 f5 8c 44 c0 77 37 c5 3d ea 7b b1 e5 c4 92 5f 37 13 5b 93 2f 3c 98 18 3f da 07 5a 20 6d fe bb 71 0f 71 23 e3 77 16 50 49 ca f0 21 d4 43 3c de 43 27 39 fa 97 66 2b 4b 04 5c 65 cb 5e a9 65 2e e4 7e a7 53 25 c0 bb 17 44 e2 c8 09 72 a5 2e 8c d6 09 54 34 a6 e7 ec ed 58 d9 f0 9c 65 2a 5f cc 37 27 87 8f 7e 22 6d 56 7e 94 09 86 93 38 ef e4 22 e5 4d 10 53 15 fe 9e 52 fa e5 a7 5b 02 f2 25 24 f1 86 20 f6 ce d9 51 4f ab d9 cb 00 e7 4e 9a 23 44 3b 8b 12 a1 91 c1 af ce e8 5d d3 6e fe d6 cc ce 05 b4 5a cd 76 f1 46 96 a3 7b 31 8a 72 b7 a1 6b 41 a9 8c 1e d7 bb be d3 6a ad 9f e6 66 45 68 70 84 Data Ascii: Jm.\|tA$Ee8OIP4^'CDsD'3qDw7={_7[/<?Z mqq#wPI!C<C'9f+K\e^e.~S%Dr.T4Xe*_7'~"mV~8"MSR[%$ QON#D;]nZvF{1rkAjfEhp
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 3d 32 10 91 be d2 a5 0d e4 87 da 9d 95 e5 39 8e cb 1a 34 81 36 28 a9 80 a3 8d b1 d2 32 38 fe e7 1c 64 e4 32 63 42 d0 7e f4 60 a9 d0 03 36 6a 91 c0 80 63 1b c5 cb 76 aa e9 ab 2c 56 47 fc 93 4e 96 01 36 7c 35 d6 6a 2f c6 6d 4a ee 12 e4 89 59 30 31 e6 8f 40 58 88 e1 2e 2e dc 81 c6 f9 ed e8 2f ea 60 d1 0f e5 b9 a8 b1 4d d4 46 4b 28 83 7f e6 61 af 57 4d 5d c1 23 c4 6f 78 cf 71 cb 16 f3 13 ea 34 66 a8 e0 76 1f 41 fe 26 2d 12 58 fd 39 64 1c 94 6b cb ac 6b 0e 3e 82 c0 2e 10 e7 07 5f c5 6f 5c 1b cc 7e 38 6d 6a 83 4d 9f fa 22 2b 51 04 05 dc f3 96 77 30 62 f8 e1 42 8a 08 1e ce f8 12 d7 db 3a 76 c2 61 c9 89 16 01 ef fb a8 f0 01 60 44 c4 2f 40 d5 0b f5 db 20 9e 3b 9d 3b fa fd 11 8f 08 8c 79 6b 66 83 ce e4 a5 fd e3 a0 f1 d5 7b 0b be 6b 33 3a 59 3d d9 6e 98 c9 1f 2f 3f Data Ascii: =2946(28d2cB~`6jcv,VGN6\|5j/mJY01@X../`MFK(aWM]#oxq4fvA&-X9dkk>._o\~8mjM"+Qw0bB:va`D/@ ;;ykf{k3:Y=n/?
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: a3 a3 0f 7f 16 0f cd 3c 5a b8 e0 50 71 07 f0 67 db 52 ad 58 92 e1 c9 5a b1 d8 71 74 c1 1c 01 56 7c f6 7e 97 24 66 95 83 2a 10 2c f3 1c 5f 1d c8 bd 73 69 26 da 38 b4 f8 a5 b0 a3 74 0e 75 12 65 c0 96 47 d6 a6 c4 5f 22 5a ba da f5 1c a3 11 61 57 a1 36 00 91 81 6c aa 0b 95 7d 15 65 71 be 41 94 86 a7 3c 62 63 56 5f 60 e7 9d a7 a1 07 af 91 f7 75 28 03 bf 69 3f fa 45 83 ad 1d 6e 9c c4 9c ca 16 df 78 43 3d 21 75 a2 f4 c3 a8 ce bb f5 18 9d ed b5 0d be 99 4a 6b 41 45 3a bc 3d 4f 80 9f c2 1d db 4e f1 3d 00 97 42 51 70 18 26 3c c8 99 eb 1a 84 d5 02 eb 1d c9 8f 87 df c9 bf 77 e0 82 cd 29 ff 29 14 1c 6c 6b 1b 8f 1b 3a 29 f3 71 7d 83 40 37 98 6c cd e3 23 86 57 ee de da 0b a9 2d 57 ef d0 56 08 40 e0 31 55 97 ff 95 79 5c d3 1d 68 35 8d cf 05 65 54 1f 84 c8 17 89 d2 62 e9 Data Ascii: <ZPqgRXZqtV\|~$f*,_si&8tueG_"ZaW6l}eqA<bcV_`u(i?EnxC=!uJkAE:=ON=BQp&<w))lk:)q}@7l#W-WV@1Uy\h5eTb
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 07 25 58 48 ed b8 2e 70 83 39 98 d1 fd 5e e2 49 f2 63 88 f7 7c 5f 74 39 58 8e df 35 ea 43 32 64 b1 e3 ea eb 58 95 fe 34 27 73 ff 23 43 47 a7 65 2a df 20 68 90 ab 32 fc a6 40 65 d9 9b 63 7d 87 02 1f 09 b1 09 a5 4d 71 86 8c d0 c3 04 2f 65 8e 7f d2 d8 85 75 80 c1 a9 91 d8 94 ba a8 04 04 62 67 2c a5 7e 8f a7 32 75 b9 20 8f 06 99 c4 e2 2b 45 39 b4 70 0f c5 57 7c 55 d2 2c 03 34 01 c3 77 08 0a a1 46 31 cc 83 c0 f6 35 72 b0 03 32 e0 ad ea c5 80 40 e1 9c bb 6b 0c 3e 07 f6 40 ba 77 c5 28 92 ba bc 55 39 4d 05 79 57 dc 83 71 14 4e c6 75 31 83 44 60 c0 d5 78 f5 a7 4a 8b 7b 68 3b 76 2d fa 50 31 81 4c 90 05 b6 da b8 97 7d c2 93 16 b6 5d d2 9a e0 5a 81 29 ff 8b 1d 4d 8c bc 5a 31 ec 95 ce 3b ae ff 13 41 4a cd 1b e8 37 17 bb 4c 88 f4 20 02 84 66 2e aa d2 56 4f 79 fc ef 35 Data Ascii: %XH.p9^Ic\|_t9X5C2dX4's#CGe* h2@ec}Mq/eubg,~2u +E9pW\|U,4wF15r2@k>@w(U9MyWqNu1D`xJ{h;v-P1L}]Z)MZ1;AJ7L f.VOy5
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: de 3d a0 9f c3 5b a1 9e 01 eb b4 50 1f 57 ec 1c 9c 68 ce 64 f2 7f e2 2a 21 0d ad 44 8f 4f 6a b1 11 5f 78 34 dc 39 ad 89 69 72 11 f9 68 27 07 97 27 36 d6 cb 8e 35 88 77 02 11 1f f2 d6 a7 b5 49 41 66 9b 3e 88 55 45 b9 0d d2 69 1a aa 6c 8c 6f 69 b3 c8 c7 be 90 c0 0d ea ff 91 de 28 c3 c2 ee 4d b6 e4 52 4b 24 05 60 de 0e 11 32 76 ed 4c b7 d6 af 5d 87 23 ec 85 5e ae c4 d7 f3 6d ce 32 8b 40 47 7e 4d af b6 b2 52 37 2b b6 3c 66 88 5d e6 22 ab 18 c7 70 26 9b c5 22 a8 4c e3 e6 05 fe 92 b6 0a 83 8d 04 d8 d9 e8 2e 0a 59 39 12 84 3e e9 af 35 f5 91 6a 6b 71 0c bc a0 82 03 32 d8 72 40 62 94 c8 e8 f2 65 17 a5 67 6e 50 73 c6 0e d3 0b 54 ef c8 f7 db cb c2 71 55 e8 ab e2 8e 01 ef c9 8f 21 23 98 c1 24 09 02 3d 86 e7 96 7d 94 88 2c 07 15 bf 73 74 53 9c 1d 57 9c a0 e0 5f ad de Data Ascii: =[PWhd*!DOj_x49irh''65wIAf>UEiloi(MRK$`2vL]#^m2@G~MR7+<f]"p&"L.Y9>5jkq2r@begnPsTqU!#$=},stSW_
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 14 cf 79 d6 9f 93 3b 2a 24 9d 1f cb 7f 96 92 47 31 f1 ad 17 52 3e 50 2e 97 f3 d9 f9 4d 82 1e dc ca 76 99 40 37 7a 1a bb 9f 87 3f d3 1a 15 f7 91 6c f9 48 19 62 4e 31 06 88 c0 8d 56 9a bc 9b 9b 80 73 85 2e 3d 90 30 34 4e 6f ad 2d c5 be f0 33 99 e4 0a ea b2 b3 e8 bf c2 52 70 2e 9a 3e 68 84 81 39 4e c9 32 07 27 9a 9a 65 dc ea 54 00 bb f6 f1 a8 bf 00 a9 84 e2 e6 cc e3 8d c4 c7 fc cd a3 4d 65 cc c1 46 b1 8a 31 48 aa 02 49 2f db f2 f3 3f 64 76 31 f8 06 1c cf d7 2c 89 81 74 02 c0 3f 23 70 03 29 b7 89 d4 df 7d c8 43 82 9a 36 6a a3 02 54 80 0a ed 41 8f c8 1c e6 a3 a5 51 4c a1 c6 48 95 43 b9 6a 81 c6 aa da 02 08 ad c9 1a b3 99 25 d2 7a 6b 88 56 cf 3e 10 2b b0 f2 fe fb 5c 92 f7 eb 14 26 a0 2d 31 3a 29 45 18 8f c7 0f d0 0a 8a 2f 75 30 5d 7f 8a a9 78 7d 6b bc a2 51 75 Data Ascii: y;*$G1R>P.Mv@7z?lHbN1Vs.=04No-3Rp.>h9N2'eTMeF1HI/?dv1,t?#p)}C6jTAQLHCj%zkV>+\&-1:)E/u0]x}kQu
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 41 e4 cf 28 3a ac 1b aa b6 40 5a b1 88 26 12 8f 63 5c 31 6d 99 bb 14 f5 c3 b6 be 8e c7 54 b1 d0 78 d4 c1 c9 0c 97 46 3e 11 42 d3 d7 e7 10 95 63 fe 01 de 26 7d 94 2d 17 42 f9 7f 47 0c b1 88 82 a5 56 7d e9 79 55 da 59 f1 bb 57 6d 7a a4 71 6e a8 4c 96 69 a9 e2 6b a9 9f 2b 16 35 1c ff c6 c9 98 a0 49 f5 dd 34 cc 10 67 c5 cd 2d da b0 ad a3 1f 7e 8c 56 32 4d f6 e4 9f 87 72 af 69 c5 e8 6d 15 38 84 a9 35 de b2 09 48 0a 02 54 b3 e4 8f 75 b5 d8 d5 14 52 09 94 91 b6 d0 e8 0c 3d fb 79 cd ea 0a 2f 97 38 86 45 92 ec 20 dd f3 ea 94 91 e7 a5 a0 3e 53 de 08 c9 6e 39 bb fb 17 6a f1 a0 6d d2 a9 cf d3 63 79 1e b2 38 18 90 e4 46 e4 48 92 13 4a 5d b2 cf 61 0b 59 0a 8a 66 2f 72 63 1c cd 0d 54 46 02 11 45 5c 07 f8 58 95 95 31 3c 46 05 79 8d 42 54 e8 b1 56 8f fa b8 87 1c eb 3c b7 Data Ascii: A(:@Z&c\1mTxF>Bc&}-BGV}yUYWmzqnLik+5I4g-~V2Mrim85HTuR=y/8E >Sn9jmcy8FHJ]aYf/rcTFE\X1<FyBTV<
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 39 f2 a2 04 f8 4e 0e cb 7f 97 fa 5d f2 22 6f d8 e3 38 f3 7b dd 48 7d d5 02 da 1b e1 8f fc 24 a6 c9 b8 71 7a 12 4f 51 e8 86 cb 6b 99 35 97 92 43 50 1d 70 5d 63 05 17 82 cb b6 5d c3 99 a4 87 ad c1 71 0d bc 52 26 5b 7d 97 3e 6a 95 90 5e 1c 7a 48 59 93 19 ef 9e 27 29 bc 35 9b 49 7b a2 44 6f ce d6 de 82 d0 b8 ce 16 6b 0b db 78 2f e1 06 af 39 f1 17 51 c4 3f 58 2a 4c 62 67 d3 f8 d4 42 a2 b8 93 11 d3 9c bc f3 03 b5 c7 4d 28 61 ad 21 50 d9 6a ee 9d 13 3c 02 6f e1 11 92 92 a3 92 26 93 6c c2 65 ff 7e be 59 da 7f 60 ca 09 e5 b3 a7 7c 1a 77 d4 ca aa 6e e1 9e d2 f2 af c7 65 9a 32 97 4a 6c 96 bd 70 d1 80 6c 31 e3 7c 6c 99 98 2e c8 9a 5f 18 c5 8d c7 a6 5f 66 ba f9 e4 42 ba b4 59 ea e3 07 a3 75 f6 ca 63 e4 92 4a f9 3d 1d f6 d2 f0 9b 04 93 9a c5 ae 2b fb 89 ca 47 af ee 55 Data Ascii: 9N]"o8{H}$qzOQk5CPp]c]qR&[}>j^zHY')5I{Dokx/9Q?X*LbgBM(a!Pj<o&le~Y`\|wne2Jlpl1\|l.__fBYucJ=+GU
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: d9 4b fe b1 82 7e 57 a3 f7 c0 81 91 f2 39 ec 95 9b 8c 43 3b 6e f1 8f 4f f9 22 8b ba cc ca 05 2b af f2 d8 b2 bd c0 d1 85 97 ce b3 42 66 2f 7e 31 ad 96 20 33 6b 93 25 df 2d 85 8c 29 b5 8f c8 fb 4b 58 a0 a9 fc 32 be 2d 70 82 9b 23 56 2c 71 0d 50 b0 df 7f bc 1f d0 4c 08 f9 54 b1 bf 34 d5 a2 94 2a e4 5d 8b e7 d1 11 c8 4c 7b b2 77 ca 19 f9 6c 54 b7 11 ad bd fb aa 9f 87 87 72 6e 16 70 3d 6a 29 f3 9b b5 fd e8 4c e6 d7 36 10 6b ab 0e 2f 3a 57 68 37 90 64 1b 70 0f 15 0e 34 36 54 ae 11 62 7e b7 e9 64 e6 e1 0c c4 63 b0 1b 18 ac e5 88 06 7f 75 6b 2f d2 48 05 e2 99 10 27 e9 b0 9b 8c cc 67 61 39 40 74 d1 61 08 fb df a7 32 7c 8e 41 75 17 4d 3b 1f 52 37 80 cd 16 bd c0 6c 6e 11 cc 65 d1 ce 6e c7 64 32 39 fd 12 86 8b 9e f2 b7 2d 50 fe f0 9e 2a ce 6b 1f a0 5b eb fe 1e d1 c6 Data Ascii: K~W9C;nO"+Bf/~1 3k%-)KX2-p#V,qPLT4]L{wlTrnp=j)L6k/:Wh7dp46Tb~dcuk/H'ga9@ta2\|AuM;R7lnend29-Pk[
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 2e 2e cf 4e b3 f9 cc 4a 4b 54 c6 03 06 ac aa 30 62 46 9d ea 14 b7 46 27 1b 6c 67 c4 c1 1e d7 ec d5 5e b4 5b 5d a3 45 14 28 d8 c1 0e d2 4f d0 b5 2f 78 50 7b 87 13 98 ea 74 96 c2 3c a0 0a f1 1e 96 3d 13 45 75 d0 cb 10 18 35 90 9a 5d 60 b6 82 74 48 f5 b1 1d 88 52 c0 4e eb d8 ee 02 5c 1d f9 f1 5c df 1a 9b 4c b8 ba 51 f5 cf d8 bd b3 7e 7f 36 8f b8 0b 96 26 b0 8e fd 3b e4 8f 77 28 dc 7f 6d 13 e1 00 f2 2e 59 15 a0 a1 40 e6 50 07 5a c5 e8 f3 6e 93 98 2e cf 46 e0 cc 73 82 55 77 0a 18 e8 b0 61 74 6c e8 65 8e e2 5f 90 0a 79 83 20 f7 57 86 d6 2f 43 10 4f f1 94 51 46 ce 60 79 25 97 bb 7b 3b ae b4 1d ae c8 7d 83 63 2e 15 1f 6b 10 56 37 cc 39 63 b8 88 dd cb b6 52 9e a9 64 89 02 eb f9 15 cb b4 f5 09 b5 1a a6 1c 43 37 ff 99 df d6 c3 74 9f e2 31 c7 1c c7 dd a8 d0 78 25 d9 Data Ascii: ..NJKT0bFF'lg^[]E(O/xP{t<=Eu5]`tHRN\\LQ~6&;w(m.Y@PZn.FsUwatle_y W/COQF`y%{;}c.kV79cRdC7t1x%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.17	49839	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:06 UTC	502	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/1966080-2752511 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:07 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 786432 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:07 UTC	16061	IN	Data Raw: 63 d2 68 c4 3a b2 54 bf a9 2a 28 68 e7 8e 8e ce 68 07 25 45 55 1a 8a d2 5c 43 48 c4 2c 7a 50 40 a7 0a a7 18 6f fa c3 9f 95 ef 9e 17 ba 07 67 2d 64 84 ae ec 91 87 03 08 1e 35 64 f4 53 51 f7 d8 03 c0 a1 92 92 3f cc f6 f4 29 a0 48 2a be f3 db 3b 32 68 c1 5a ca e3 79 6d 60 d0 70 54 d2 36 fb 5c e2 6d 54 eb 1e 65 32 da 0d 5b 6e df 77 22 34 41 5d 65 72 89 3f a9 b2 8c 10 b3 13 d0 d5 72 3b 63 74 66 57 6b 19 c1 fa df 59 71 47 7a 68 ee b0 21 dc 7b 20 87 d4 09 72 e6 38 50 e5 72 68 36 c6 e0 7f 5e 37 2a 60 68 b5 aa 95 f6 c1 f4 fe 9f 6d 43 6a 44 e0 2b 62 d2 16 75 77 73 0a d5 06 fd 43 55 06 33 af 33 7a 9a ba 48 d8 6e c3 a8 9b 32 0d 67 6c c7 05 0b cb 40 ac 2e 6b 6a 88 45 2b f4 76 3c 33 3e 79 44 52 23 16 bc 5c 19 46 d1 3a a2 d8 05 3d 31 3c 87 1a 5c 21 ea 31 15 ba fa 95 9c Data Ascii: ch:T(hh%EU\CH,zP@og-d5dSQ?)H;2hZym`pT6\mTe2[nw"4A]er?r;ctfWkYqGzh!{ r8Prh6^7*`hmCjD+buwsCU33zHn2gl@.kjE+v<3>yDR#\F:=1<\!1
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 8d e0 af ba 51 74 a9 38 87 aa da a0 8a 49 63 11 7a 8e cb 8d 88 62 51 e8 df 79 79 97 66 a0 b5 ed 9d 73 3b 9f 5d 20 72 64 80 5d b2 9b cd 3a 04 cc 7e 1a ba 42 9a 50 1b 1a 0b a8 c4 71 7b 8f 74 c6 88 96 79 22 1b 27 ea dc 09 84 7b 81 ce 2a 11 00 b0 cf 2d 5f 74 65 e3 84 ad ee ab 09 90 20 c4 e4 a0 6c 4c e5 7e b4 50 ba 40 6f e7 e1 29 6b 08 69 74 92 2b ba 4c ae 47 2a b7 f6 97 a1 5a 2d 58 a1 e9 f5 c5 bf 89 02 43 b0 ad b8 86 32 e8 f8 1c 20 8b 4d f8 f2 7a 53 eb 02 6a 57 97 b3 c4 42 57 2a c1 62 77 46 5d 40 7e fe 3d 21 b8 f9 c4 75 1b 41 54 38 ee 2d c1 0e a9 a5 77 bb 46 78 df bb 4f 53 98 cd a4 5d 25 d6 13 b0 c8 c3 62 16 b8 39 18 28 ff 51 7d 0b 83 24 a2 8f de dd b5 6a 2f d7 fe 1d 65 b6 ef 83 a4 1f f9 0f d8 87 fd b7 d7 b3 f0 c5 2e d5 44 b3 f0 77 e1 ef 02 16 6f a8 bb c5 e9 Data Ascii: Qt8IczbQyyfs;] rd]:~BPq{ty"'{-_te lL~P@o)kit+LGZ-XC2 MzSjWBW*bwF]@~=!uAT8-wFxOS]%b9(Q}$j/e.Dwo
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: be d5 94 f6 f2 e6 e8 8b d9 c3 b7 dc 71 f5 b0 08 10 ae 8a f4 aa 85 95 bc 87 b0 04 11 04 2c 4a 3e 57 64 8a c9 e7 42 ee e8 53 2c ab a8 62 23 45 8d 58 9a 23 da 36 44 ab d9 0e 3f d3 5e b0 1c 05 14 8b 16 18 5b 00 cd 85 cd 4f 9f 15 44 1d ae d8 cf 51 42 ad ca b2 f1 dc 72 36 53 a2 c3 65 c1 f1 c0 35 0a 73 73 3e 55 30 bc 98 7a 65 99 79 2c 25 d7 40 83 f0 35 39 5a 07 b4 d0 77 a5 f0 d4 d2 5b d4 55 90 87 f2 e9 cb 4e 45 29 7a ca 30 43 03 da 5f 94 46 f9 ec 4f bb 2e 60 c6 0d 98 b2 aa f9 0f be 2d a5 80 67 2d 24 94 26 8e 0c 3e 7a 4d 4f f9 3b 2c 2d f5 45 20 1a cd 09 52 33 d9 85 0f 9a 50 0f ea 1b 01 6d 6e 6c 20 52 85 66 bd a1 06 51 5b 82 45 b4 5f 3b 74 25 57 27 aa 29 e5 74 bc 2f 66 44 18 b5 c9 0d b1 05 66 35 75 37 67 62 6e 18 ad b6 0d a6 05 9e cf 49 6f a2 c3 09 34 0e 84 1b 35 Data Ascii: q,J>WdBS,b#EX#6D?^[ODQBr6Se5ss>U0zey,%@59Zw[UNE)z0C_FO.`-g-$&>zMO;,-E R3Pmnl RfQ[E_;t%W')t/fDf5u7gbnIo45
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: c4 f2 17 dc 28 a5 97 2a b4 65 14 22 57 06 b3 df 16 eb 8b 2f e0 66 f0 92 ff e9 e5 04 54 24 68 7e 44 18 81 96 9f d9 19 b7 6e 8e 50 4e 47 9e 12 88 f6 15 54 c0 69 12 67 e1 93 03 42 11 be 55 f5 9a 9a 0b 44 bc 35 2f c4 1d 76 5a c0 c2 6a 96 7e 08 48 ba 6b 97 af 02 8a 31 d4 8b 09 a7 7e 2b dc 8c e8 12 6c d7 66 d2 f4 90 9a 33 33 b6 b6 e7 91 f1 d6 ef c3 9d 12 19 af be a4 44 98 b5 3e ba 0e 38 85 40 28 a8 aa 4a e6 0e 80 9e d3 52 35 38 f4 e2 ea e5 29 00 b1 ce 0e 6a 7c 98 66 44 5e 1b bb 48 7f ae bb 45 5c 61 72 43 fe f5 8f 0b dd 30 52 db 5e 1d 6e 7b 43 00 9f 20 60 d1 14 be 8e b0 79 60 ef 28 40 2c 52 9c b2 1c 8d 23 c7 e8 12 c7 7d 7a ab 8c 81 59 79 54 21 54 a7 3c ea cb a3 7f df d4 0e 87 7f 07 61 ca 09 06 5e 04 bf ca 02 92 3a 79 e1 39 95 d7 be 3a 0a 70 00 95 98 bf d1 64 5b Data Ascii: (*e"W/fT$h~DnPNGTigBUD5/vZj~Hk1~+lf33D>8@(JR58)j\|fD^HE\arC0R^n{C `y`(@,R#}zYyT!T<a^:y9:pd[
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: da c9 a2 63 3f 66 31 5c 90 ee 5c 02 d3 6c 03 e4 7b c0 df d6 8a fc 14 6e 22 89 77 fa 11 99 4f 52 18 0d de 12 ea a3 74 6a b6 33 ee 75 1b 55 cc 4a 8b 27 b0 f6 dd 1c 81 fc f1 e1 82 b5 52 58 d5 3b 1c f5 05 21 de 79 ec 8a ce 31 1d fd 7b 5b b8 dd 47 2c 63 92 80 aa 79 2a 7b 6a e9 22 d3 69 59 79 8e 8b cb de 90 58 60 8d 25 a2 43 19 4b d2 46 9d fc 20 21 4d 04 17 0e de 86 9e af ed 67 e6 ff 8e 21 13 e7 18 fb 18 ef f4 97 92 03 20 5f 12 9d 45 90 a1 36 d5 a5 a9 b7 92 43 23 45 00 d4 8d c0 d6 f8 63 e9 4e 5b a0 51 98 97 4d b1 b5 a5 0e e8 fb eb 00 7e 40 f9 d4 b4 d0 31 64 a9 1f e8 87 b4 3a 3c 27 6e 9a 5b 6b c4 e6 76 93 b6 7d d2 9f 22 c1 98 98 ba 76 7b f2 4c a2 ec 98 df 30 95 5d 9f c0 ae 4c 7d f1 c0 5a ed d0 19 2d 4f 46 72 58 98 1b e9 be 98 e8 e8 bd eb 86 14 26 34 9d 0e af 9a Data Ascii: c?f1\\l{n"wORtj3uUJ'RX;!y1{[G,cy*{j"iYyX`%CKF !Mg! _E6C#EcN[QM~@1d:<'n[kv}"v{L0]L}Z-OFrX&4
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 5b bf f1 43 69 57 35 e4 27 a1 d1 ab c7 ab 88 16 40 25 9a 63 1f c1 06 3d fc cd c2 d5 9c 36 a6 13 63 ad f1 ee d0 29 47 90 8f 97 39 99 5f aa 3d 42 07 bc 97 8d 6e 02 6b dc 18 ec c4 d2 59 b6 a5 b7 e1 cb 56 12 57 ef cf 17 8b c8 4b cf eb 5f 97 db 99 c2 6e a9 77 1c c1 9b a0 8a 27 d4 a4 be 11 4b 0d 9a 13 31 a5 97 6e af 90 85 26 97 cd 05 00 0b 36 17 4c 78 59 46 04 09 45 77 e6 b1 55 ad eb 6c 34 59 79 cc 06 cc 1b c4 96 a5 d5 e9 28 45 5b 18 4a c4 bd a4 5d 29 4a ac 7c af 2c 4a c5 c9 63 48 1b 78 6c 97 40 36 6f 10 f9 5a 57 4a b9 d9 10 45 67 53 a8 42 03 56 63 a0 ba f4 cb 94 be 9f 35 ef d9 e7 40 47 88 dc a8 d9 15 d4 6e cf 8f af 92 d0 90 5b 92 ff 76 1a b3 20 3c ef b2 59 bf 77 04 23 1a 36 f4 41 19 ca f2 ec ea f7 bf f6 f7 2c 82 33 5b 3c a8 dd b3 72 f5 7d b3 d7 a5 9f 43 81 53 Data Ascii: [CiW5'@%c=6c)G9_=BnkYVWK_nw'K1n&6LxYFEwUl4Yy(E[J])J\|,JcHxl@6oZWJEgSBVc5@Gn[v <Yw#6A,3[<r}CS
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 41 d3 4a 79 ec 08 fb db b4 48 79 e4 ab c7 51 f1 d4 02 24 44 b1 a7 3f 4c 47 e9 2c 4e c6 6a a3 9a 34 15 22 c1 4e 59 c4 d5 61 54 87 62 ee b7 41 9d 85 ed dd 6f 3e 26 44 61 e2 02 3e b3 d6 ad a4 d1 83 13 f8 38 c9 dd 65 be 71 89 0b cc 21 22 ac 53 1f 33 bc 93 27 85 2d 08 21 c7 be 4b 67 d1 0a 93 01 cf df 30 13 4a e2 a0 1c b4 1a 22 0f 2c 6b a2 93 cc f4 8b 43 db 35 f6 2b a3 50 06 33 59 b7 d9 ce 32 90 3d 81 d6 52 a7 1d 07 fb 08 50 89 75 28 b1 3d 65 ad 19 fc 2a e3 00 ae 65 02 d4 f3 ef f6 aa b9 e9 87 de c7 9a c1 61 50 2c 61 94 95 23 8c d7 c4 7d eb 11 13 3a bd 73 62 07 da eb dc 46 b1 3a 03 69 e7 85 43 b9 f2 6b 0e e8 46 b2 a7 01 e7 7e e9 41 53 78 3b fd 7c 6c eb fb 46 91 a9 88 2e 87 cf 19 64 f1 0f a1 be 94 2a 11 91 78 3e 5b 88 19 13 19 a4 7b 77 5d 20 e1 62 5e 97 db f1 85 Data Ascii: AJyHyQ$D?LG,Nj4"NYaTbAo>&Da>8eq!"S3'-!Kg0J",kC5+P3Y2=RPu(=eeaP,a#}:sbF:iCkF~ASx;\|lF.dx>[{w] b^
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: a6 82 56 f7 6b f9 1f 82 34 f9 3b b1 7b 4f 0a 80 63 a1 c3 71 24 65 69 07 be de 3e 66 2a 1d 84 4e c1 09 1c 00 3e a4 0f 9e 7c fa cc 2d 3d 26 1e 88 fc 16 05 93 c1 5b f9 1a 05 cd 33 24 d2 64 af 3e 11 42 9a 15 c1 ae 8a ee ec 78 ab 25 8f 3c ac de 01 2b 05 b4 25 dd 6a 3f 69 df 47 c4 87 bd 81 63 69 c3 31 86 34 5b 85 4a 3e b1 4d b4 07 29 cc 05 8c 42 7b ca 78 fa 16 05 98 e5 47 14 38 a5 5e 48 c6 f6 35 40 f5 95 a2 ba 74 b4 93 eb 24 55 9e fd a3 53 5b 00 39 0a 68 29 4b af 15 b2 22 93 d6 64 ca 5f 89 e7 22 b2 fe 66 12 4c 9b 6c 52 21 75 52 72 02 5a 25 09 f4 da 37 70 fb 92 65 bc 10 4a bf 9b 6d 1f 8b ee d0 96 b5 bb ea 7b 20 b3 51 35 e5 34 51 98 0a e3 9d 9b dd 50 43 47 8a a0 58 8a e8 c4 0e 78 e1 c6 b0 76 03 f8 5a 1b ce 5e ae 91 e0 77 0b 59 58 12 ed 1e db e4 cf 85 19 63 60 ca Data Ascii: Vk4;{Ocq$ei>f*N>\|-=&[3$d>Bx%<+%j?iGci14[J>M)B{xG8^H5@t$US[9h)K"d_"fLlR!uRrZ%7peJm{ Q54QPCGXxvZ^wYXc`
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 0b e4 1d 42 62 db 2d 0b fc 88 ed dd 99 2e 81 4b d6 17 d7 85 65 ce ef ac 96 57 21 9b 2a 41 91 27 65 bc 48 27 1e 9e 57 26 38 06 e4 49 14 c3 54 97 3f ac 66 d6 65 51 d0 e3 c3 82 96 d9 e9 b7 a0 9f e5 9c b8 a1 b9 96 8e 6d 09 5d 9d f9 67 76 1f e5 1c 8e 7c 94 0b 99 a1 62 a1 4f f8 97 7f 92 e9 f3 d6 79 35 80 93 09 b6 2e 06 56 1e 6f ff a3 b8 cf 66 e4 56 a7 ca 1c 6e 77 f5 8d 17 64 f5 c1 36 bb c7 07 04 e2 35 00 ba bb 2d c7 d3 36 9c ec b9 6e 35 ca b2 7d f2 f0 be a7 d3 4f b0 67 94 e2 ab 04 e6 df ad 28 5c 5e b5 39 0a bd 1d 42 f9 db dd 73 a1 00 c6 37 ae 5c 49 c2 f6 63 e3 14 63 99 6e df 89 13 e3 bf 8a 32 ed 20 2c 86 8d a5 24 9b a4 87 0c 07 66 59 84 03 62 0e 75 df fc 1e cf 1f e3 23 88 19 3d 7a b2 1e 00 c7 49 4a 3a 4b e0 f9 6e 83 da e4 b0 34 3d 70 b7 a6 7e ce 1f 91 7a 91 c9 Data Ascii: Bb-.KeW!*A'eH'W&8IT?feQm]gv\|bOy5.VofVnwd65-6n5}Og(\^9Bs7\Iccn2 ,$fYbu#=zIJ:Kn4=p~z
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: e2 02 22 35 76 b1 0a d7 e9 fd 26 4c d4 e2 27 b6 d8 e0 8c 0b 9f 46 a9 58 cb f2 b0 73 ed 96 61 a4 43 b7 02 29 5e 33 8a 16 8e 58 2c 16 2a 65 15 cc cd 20 ab 59 05 16 6d 0e ec f2 c2 9b 18 1a 14 dd 6a 97 34 db 06 40 69 24 d6 dd d3 77 8c 23 71 ca 24 53 c9 ea a4 0d 41 87 42 6f c0 06 e3 7d 46 c2 01 a5 f1 25 47 fb 8c 17 8a e0 67 68 83 96 3f 2a 15 d9 42 02 a8 a4 2a 17 e5 ad 1d fd a2 f2 ce 6a 52 35 83 73 4a 7f 23 68 6f a2 57 b9 c6 9c 27 9b c5 3d 5a bb 70 60 84 c7 d7 a3 b2 cc f0 a7 4d 71 5b b6 4f 74 7c af 38 49 9e 28 aa dc 0d e6 c1 b6 65 62 64 32 3f 1b db 7f 99 a7 12 d2 43 10 26 8f 26 da e6 9d f6 06 70 f6 df aa 6c 7d 82 c6 4c 2a d4 e4 90 cb d0 5a 1e bf 12 bf fc ab df 61 6c 49 30 52 ac 11 d9 58 85 db d7 56 91 00 6e 15 77 8b 6c 80 21 5f b5 7a d1 7a 1a 01 33 28 70 f1 e9 Data Ascii: "5v&L'FXsaC)^3X,e Ymj4@i$w#q$SABo}F%Ggh?BjR5sJ#hoW'=Zp`Mq[Ot\|8I(ebd2?C&&pl}LZalI0RXVnwl!_zz3(p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.17	49840	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:06 UTC	502	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/5767168-6519410 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:07 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 752243 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:07 UTC	16061	IN	Data Raw: a8 4e a6 06 41 ec 58 42 75 41 64 8d fa 3d df b4 da 4e b7 7a c5 e7 d8 15 bb cc c0 d8 06 f8 90 1d f5 d1 21 e3 d0 1c 86 22 48 20 7d 03 bd 85 8a 80 e5 87 bc f6 c3 fb 71 22 b5 58 39 3f 33 17 93 88 7c b9 ad 4d 35 07 bc d4 bc 0c bb 5a cb 37 72 d3 71 36 40 1b 3a c7 dc ae c9 f2 ec c9 44 4b b1 69 f9 9d d8 8f 26 b9 0e 53 68 36 ef 25 2a 2c b7 56 fa cf 7f 00 15 1d 7f c4 9b f1 1a 61 d0 63 21 f9 39 d0 c4 92 f8 11 fe 08 1e 2c 7b ae aa a1 84 e8 99 0f a1 c9 72 c8 c3 69 14 2e 45 9f b9 da dc f7 2b a0 d1 5b b2 00 c9 bc 7c cc 59 56 e8 2f d3 22 07 a7 73 37 ef 2f 89 3c d2 28 df 09 a4 95 34 16 8d fa 33 8d 5f 67 f4 cd fa 9f 8f d8 3b 29 c6 b2 66 8e 68 f3 d8 46 b9 d0 6a 15 a6 ef 48 c1 ea 29 e9 31 2d 43 8f 94 61 ef 17 34 ef 09 dd 78 8b 94 6c d1 b9 eb e2 e0 11 e9 69 e1 76 88 15 25 02 Data Ascii: NAXBuAd=Nz!"H }q"X9?3\|M5Z7rq6@:DKi&Sh6%*,Vac!9,{ri.E+[\|YV/"s7/<(43_g;)fhFjH)1-Ca4xliv%
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 4b ac d7 38 57 5a 3d a6 e9 be 7c e1 3b cf 22 b0 4a d7 43 05 36 97 12 a7 21 ab 1f 3a 71 4d 6e 1b 9b 8d e6 ff ae 0f 3b 1e 3d 71 a9 12 95 08 ed 52 fb d2 85 b3 8b 92 fd c9 b1 e1 c2 fe a2 8b ca 84 e8 f8 25 7e f1 53 01 0c e7 a5 e5 b1 d0 f2 3f e3 20 56 3a 5f cb 96 52 a5 d2 f1 bf b9 ae 4a 11 ac 4d d4 81 45 5b 52 70 4e 89 74 2d 66 4f 3a c6 7d 9a 17 19 82 b0 d5 aa f6 bb c9 a5 49 91 f2 3d 61 7a 6b f2 b7 09 3f b3 55 c6 70 4e 9d 96 15 98 06 08 45 48 b4 9d 06 a7 c7 f1 28 f5 4f 15 f9 9e a3 15 bf 03 56 0a b0 fd ae 55 46 a2 2e de 28 fa e2 92 40 b8 b0 70 db 8e ec a2 93 1f 6c e3 b2 f7 dd 82 84 1a cd 97 4e 91 34 fe bf 53 6d e7 33 31 89 85 0b b7 82 81 f3 e4 d0 cb 36 94 34 97 0e 70 a5 3f 80 c9 9a 36 a1 d6 5a aa 90 0c 9f dd 07 a1 3c 80 87 e2 6f 16 45 85 0a 7f ee 54 61 0d 38 f0 Data Ascii: K8WZ=\|;"JC6!:qMn;=qR%~S? V:_RJME[RpNt-fO:}I=azk?UpNEH(OVUF.(@plN4Sm3164p?6Z<oETa8
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: e5 82 9e 47 71 0f 99 96 59 74 9d c6 bc 52 17 2b 26 c2 2f ed 62 a6 7e 5c 7e 00 47 6b 59 d9 7a 7f c8 dd 30 61 04 1a 73 3b 6e 8c d1 03 c6 45 ee 6f 10 0f 9c bd f9 d7 2a d2 93 0b 9e 3f 23 aa db 7e 24 53 7b 3d 0f fb fd 5d 4d 65 ae 76 20 e9 13 bf ef 0a 87 5d 93 5f d3 94 4c 97 6f ca 36 17 79 e5 f7 6a 43 ef db c0 b7 5e f2 f6 dd 88 b2 34 be 70 41 b5 ff 7a ba ef 21 63 08 1d a4 4e 25 f0 9e 06 d1 b9 59 ae 79 a9 b8 16 04 c2 d0 2f b3 25 2f 8c 40 22 14 f7 d5 24 76 2e 44 fb d0 c1 78 59 ac e6 ec de 1b 0c 7f 06 0a 40 d1 53 30 f7 a2 b3 9f cc 9d 94 d4 54 09 31 51 ac d7 47 08 e5 34 e6 75 0f e1 f5 de 7d 29 e4 76 45 30 e5 8d 96 07 47 2e e0 d1 15 a4 ac 9e fc 3c 8a 3b 45 9e c1 7e 17 1f 8b 2a 27 e0 61 70 fc 29 12 2c a4 59 54 41 bc 5c b3 31 7c 89 b8 49 6c 16 f5 db 48 92 f8 2d ed 54 Data Ascii: GqYtR+&/b~\~GkYz0as;nEo?#~$S{=]Mev ]_Lo6yjC^4pAz!cN%Yy/%/@"$v.DxY@S0T1QG4u})vE0G.<;E~'ap),YTA\1\|IlH-T
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 81 39 b8 c0 27 15 4d fd e0 6d b3 26 4c 09 e4 63 2a aa a2 7a c3 2d 30 a0 f1 6c bf 64 c9 bb 53 5a 61 32 9e 1f 4a 32 48 30 60 8f 32 93 0c 36 b7 a0 88 fa ca 35 9e 95 42 e7 32 3a de 29 c9 a8 e8 9f f2 05 d1 ce bc 9b 12 9b a0 04 27 7f d0 7f 19 48 c0 6e 01 a7 7a 8a 95 2e 4e f1 55 2d 40 bb f0 c9 ed fd 36 d5 06 e1 7c 36 20 7c fd 8d b0 8c 6d 93 bc 68 12 62 17 ef d6 f4 94 a1 3b 73 22 93 1a 33 ad 50 63 4c cc c7 b9 c4 e0 76 cd 86 b1 e4 41 c5 bd 66 e8 62 51 77 eb d6 7a 12 bf b8 f6 a3 dd 11 8f 61 5a 44 9d 04 35 01 fd e6 12 20 a6 d8 d1 05 49 22 bd d2 61 33 9a 5d 66 26 8f fe ca e5 53 34 a2 fd d7 90 4e 39 79 55 2a 58 95 b8 ab a5 a6 b1 81 de 69 4b 15 4e 09 a9 1f 9e 29 e4 4d 14 68 06 4b 64 8a 6c de 8a 77 24 e8 44 a9 3f 03 e8 fa 28 f2 d5 f5 bf 9d 2c ab f9 94 f6 e1 e8 bb 93 d6 Data Ascii: 9'Mm&Lcz-0ldSZa2J2H0`265B2:)'Hnz.NU-@6\|6 \|mhb;s"3PcLvAfbQwzaZD5 I"a3]f&S4N9yUXiKN)MhKdlw$D?(,
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: d5 75 58 06 32 c8 16 fd 27 46 9d 9d 7b dd f5 30 ef 5d cb 8e a2 2f d2 72 8f f9 58 ed 60 cd 90 a2 78 36 3e c3 a5 e6 bf 9d b8 4a c1 44 20 0c 4a 23 8b ae bd 89 8c da d6 f7 b5 ee 22 13 1e d3 51 b5 17 35 29 e1 cc c8 aa 0d da 81 c5 b1 c2 4d 96 43 8e f1 1b 63 b0 93 a8 4d b5 92 5a 5d 45 0d 8a ba d8 74 32 18 31 86 56 65 5a 57 f8 43 7e ef d7 47 ba 48 a6 97 ee 9b 29 fb cc c2 dc 3a 0d 84 7f 03 f6 1f 68 66 82 60 08 5e 03 d5 4b 70 19 da 01 8c b2 dc c6 13 2e 27 6d 64 c9 fa 11 f9 a1 fd cb 7d 99 21 1f 98 7a 59 ad ed 08 85 12 70 8b 92 42 32 c0 c5 43 8e cf 25 c0 50 83 01 82 20 64 50 da ab 75 ab bb 7f 1f d0 b5 52 ed a3 a3 ac e6 e7 9e fc ab bf 4e 4c ca ee 95 f3 76 e1 b9 fa 59 35 67 4e d4 e3 d8 79 3b 97 ef be 2d 62 58 63 5e c9 f8 fb 1b c8 86 1c 4c a0 de 4b 8a 13 8c 7e b8 ea 11 Data Ascii: uX2'F{0]/rX`x6>JD J#"Q5)MCcMZ]Et21VeZWC~GH):hf`^Kp.'md}!zYpB2C%P dPuRNLvY5gNy;-bXc^LK~
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: f0 37 8f 49 ce 1a 91 ac 34 be e7 0f 40 19 91 2a f6 cc bd 4e 04 04 fc 92 d9 ac 47 a8 7b 14 81 fc b1 cd c5 a2 24 87 98 96 5b 7d df 54 54 a3 40 92 43 fc 90 c0 e5 cb c3 ae 0e 21 f0 5d 71 e5 5d 16 1d 88 18 2b aa 7a 5b 12 d6 50 e9 56 69 56 93 a7 85 19 1e 87 24 c4 fe 31 40 0d 8e fe 20 f0 9a 6c b6 3c 15 51 c9 69 94 ff 39 6c c0 0e 54 57 c6 66 41 de cf 40 a1 c3 a9 c3 92 4c a0 dd f7 95 ce b5 c5 d0 0a 80 d3 52 ad 32 a1 a0 da 8f 50 e8 77 b1 11 86 7b ed a1 d9 16 b1 8e df 51 c2 5f d0 f2 29 c4 f5 6d 27 6e b5 b1 f3 87 6f d0 53 58 68 48 8a 5d 46 14 24 f8 78 fe 00 ac 0e 56 24 f8 40 95 69 2d 0c 94 7a 84 a3 7e 6d 7e ce ce c3 ff 54 fd d0 15 6a 78 8a 67 cb cd 1e 55 e9 8e 3c a5 4e 32 c7 4d 76 45 c4 fb 69 94 9f 6f fb 34 a3 29 ff 75 3c 4b 5b 2f 35 19 dd 34 3c 35 8d 7f 7c 91 a8 7d Data Ascii: 7I4@*NG{$[}TT@C!]q]+z[PViV$1@ l<Qi9lTWfA@LR2Pw{Q_)m'noSXhH]F$xV$@i-z~m~TjxgU<N2MvEio4)u<K[/54<5\|}
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: d5 98 b9 41 de ce 2d 5c b3 72 f6 03 15 d4 c4 31 7d 79 6d 90 75 31 e4 d9 c9 5d 21 00 40 7a ff 25 48 2e c0 3d 8d 9f e5 78 15 ec ba 54 27 15 5f 2a 1b 34 8e 0d 10 83 0e 78 27 88 1e 61 80 fa 38 19 89 5b 80 3a 25 1a 12 2e a4 61 cf 71 c8 10 07 e7 5a e0 c2 63 f6 37 34 e6 ad 11 c5 a0 5d f4 af 2e 22 92 cc 20 02 09 f2 61 b8 c3 0f 24 95 52 5c 2f e0 b0 a8 5b ae 03 d3 2d 45 87 57 88 08 52 77 14 09 07 46 1a 87 f4 8d 3d 23 98 c0 ee 9a 3b dc 31 f3 78 74 67 5f 89 02 52 e9 ca b0 2d 11 ea 7d 4f 1b 6c f5 cd 32 25 14 6a 96 6d 9d 4d b8 36 b5 a0 c9 80 ed c6 49 f3 cb d0 02 28 3c f0 15 44 81 4b af fc 5c 2d e4 4b 1c f9 ce 51 a1 ab 8b 1c 1e f5 c9 0c 4e ab e3 57 f9 ed a0 24 ff c6 4d 46 24 9f 9a ef ff 6c 7d ce cb e6 f7 a0 59 95 31 3f 31 a1 51 9b 08 57 9b b4 82 8c 08 b8 00 2d f9 74 1b Data Ascii: A-\r1}ymu1]!@z%H.=xT'_*4x'a8[:%.aqZc74]." a$R\/[-EWRwF=#;1xtg_R-}Ol2%jmM6I(<DK\-KQNW$MF$l}Y1?1QW-t
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: fe b2 c3 92 ee 7e 6b 97 24 1b 37 d2 d4 8d aa 59 b3 1e 31 8e 04 a5 72 3f 09 13 25 dc ec 73 da d0 2f e4 ac 61 37 b2 56 08 75 82 81 8c 63 39 aa 34 40 24 e4 9e de 9a 65 92 db 37 68 64 72 7d 21 08 d7 13 36 dd 81 a1 c4 1d 37 5a 2a 70 f2 05 16 53 6b 2f bb 2a eb 7e 5d 9d dd 6c 84 ea 61 94 bc f8 87 e2 1d c0 f6 9a 8a d1 ae d5 32 88 e4 8d b9 57 53 bb b5 0c a5 03 ef c0 27 cf 8b 94 e8 dc 13 b4 38 26 3a d5 c0 46 46 3d ba 71 c4 b7 23 be ee 4d 63 00 e1 17 9b 10 c9 5d f8 29 49 3c c9 10 04 cf 15 17 ec 30 d0 aa 6b 13 f5 e5 ae 2f 6b bf 20 38 38 e4 da b7 2e b7 05 68 9f 93 4f 82 9b 90 76 cb f7 ee 05 79 b4 a5 e3 a4 21 47 a0 be 6a 89 98 48 f9 e5 4f ef 17 26 ed 58 e8 b0 54 91 57 92 15 e2 47 d0 69 56 33 00 c3 98 b1 8b 0d 27 70 ed d3 a2 54 80 df d3 34 66 8c 5c c2 a6 a9 8c 31 cf ff Data Ascii: ~k$7Y1r?%s/a7Vuc94@$e7hdr}!67ZpSk/~]la2WS'8&:FF=q#Mc])I<0k/k 88.hOvy!GjHO&XTWGiV3'pT4f\1
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: e5 db ed 29 81 14 33 dd a5 3c 10 56 ca 6d 7c c6 cb e8 74 cd 79 41 2b d6 0d fc 5c 50 e7 90 97 53 38 3e eb bd ab 73 60 eb 73 fa e3 54 70 e9 f1 e6 4d 19 92 90 57 80 07 61 79 8f 93 33 e6 68 af ff 36 bc 24 e4 16 5b 16 98 9d 5e a5 e0 48 12 64 c5 27 15 f0 3e 0b b8 f0 f7 5e 37 b4 57 88 4a c9 7c 2f 7a 18 ba 5e 05 3b 20 f9 8c 72 2a 33 0b a9 e7 9b fd d9 f2 5a 41 d7 7d 13 29 36 d6 7a 7e 02 d5 d7 1a 22 b9 23 70 74 78 07 48 3e 18 f9 8b 41 34 6b 89 f4 0e df 06 87 59 65 4e 1b bb 5b b5 eb 54 7c 6a 1b 55 15 80 14 1e 77 be d8 ba d8 10 8c 93 11 71 f9 df 1e c4 73 2d 56 e7 43 bb a0 28 b9 88 ce e6 40 4b 3a 6b ed 5d 17 90 a3 9a 6b 80 96 9f 4c 89 44 b6 f8 b0 49 2b 77 b5 2c fe aa 58 fd 43 0f 46 d8 b6 5c 09 a3 0b ff 55 96 73 7f 45 18 a5 ea b1 b0 4b 33 ac fc cd 62 26 ec 84 7a e5 ca Data Ascii: )3<Vm\|tyA+\PS8>s`sTpMWay3h6$[^Hd'>^7WJ\|/z^; r*3ZA})6z~"#ptxH>A4kYeN[T\|jUwqs-VC(@K:k]kLDI+w,XCF\UsEK3b&z
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 43 79 50 b2 e4 89 be b0 17 4b 43 bb 0a b2 57 6e 32 1c 1c 2b e3 e6 30 40 b2 c1 a2 f7 6b 40 f4 7a f0 68 6f 4e db f8 39 4a c7 2d 13 7f 3d 35 7c 59 41 1c 16 79 17 eb 50 7b cb a0 fc b6 78 e1 f7 e2 d2 fa a4 76 ee eb 71 b8 ec d8 19 de 2b 34 9c fa 67 1c e4 65 59 1a 2c 2d 69 67 f3 1d fb d3 5f 10 67 ce 06 4b fa 95 69 61 bb f8 19 da 95 18 a2 0b 56 40 e9 01 ff ca 68 8f bc 86 01 10 b6 74 13 2a 9b 3b 49 e9 a7 0d ef 78 1b ff aa be 2f 9d 75 f5 b0 d1 5e a3 d9 f8 62 57 fd fe 98 1d a5 c1 9a b6 0e 90 f1 e0 d6 fc ef 4f 2d 6c 90 68 ea 4a 7a db db 36 37 d1 cf 70 61 53 ca 2e 85 c1 7e c9 84 a6 f7 73 67 e4 56 f7 11 ab 57 94 7e 55 96 16 c0 de 26 b5 5d 59 d8 76 44 99 aa 0a b3 ea 6d 8a a9 91 00 54 1a 2f 93 8a b5 b6 83 10 0f a8 07 ef ca 85 de 65 5a 47 98 88 e7 52 ab a3 36 3c 7d 05 5d Data Ascii: CyPKCWn2+0@k@zhoN9J-=5\|YAyP{xvq+4geY,-ig_gKiaV@ht*;Ix/u^bWO-lhJz67paS.~sgVW~U&]YvDmT/eZGR6<}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.17	49843	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:06 UTC	502	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/2752512-3670015 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:07 UTC	323	IN	HTTP/1.1 200 OK Content-Length: 917504 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:07 UTC	16061	IN	Data Raw: f2 91 46 59 63 0a 04 14 d5 0b 3c 20 59 db bc 28 af 32 88 0f 7d 8f 30 d5 e9 69 4c 2d 69 45 e8 47 c3 ae 4d d1 9b 39 d7 5d 14 68 e9 bc 03 ca f2 31 85 d2 59 1b ca e1 60 4f 93 c7 84 12 e5 cc 89 4c aa 13 1c 81 77 eb 7a 9d 16 01 92 e4 d2 40 58 b1 65 c7 dd f9 c8 3c bc d4 3f be 26 57 23 00 3a 4e fa dd 9b 17 1d 70 ef f9 0f 7c 78 0f 4d 6e 2f 6b 35 46 b9 07 b4 da 5c 9f 91 c9 64 6e 56 3f d8 6c d4 15 f7 44 82 e8 ca 54 02 35 3e 37 e2 1f 28 67 eb 73 aa 7d 80 04 8b 27 bb 3b e3 cb ba d3 e0 37 6c d6 27 28 36 09 01 81 0e 4f 5e eb 1b 51 2e aa c8 de c2 40 b2 df d6 16 19 c1 48 44 b6 af 5f 5a 85 60 59 22 b5 21 bd 6f e8 b6 66 a5 f9 a1 37 3d 9b 37 20 67 c5 16 9d c6 b0 33 40 8f 8d 12 31 b0 a7 b6 cd be 0f ae 48 73 ee ef 8c 71 01 98 03 78 d0 8c 3c c6 26 c7 4e cd de 67 14 48 72 1f 53 Data Ascii: FYc< Y(2}0iL-iEGM9]h1Y`OLwz@Xe<?&W#:Np\|xMn/k5F\dnV?lDT5>7(gs}';7l'(6O^Q.@HD_Z`Y"!of7=7 g3@1Hsqx<&NgHrS
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 0a d4 71 12 d2 16 50 85 7e 87 87 ef c8 52 ad bc 36 d2 8b 92 8c 33 48 d5 2b 49 88 9b 87 a9 41 38 35 ca 7d 9f cf 8e 1c b5 2d 67 fa d6 f7 46 96 7f b0 e0 58 cc c6 6c 6a d8 a3 bd 2d fb 3a 3f 79 5c e2 0b cc 32 f7 03 cf ef 0b c3 64 04 69 fe 03 7a ac 15 04 05 a1 6d 4e 26 9d 9a f1 9e fe a1 38 2c e9 e5 7b 65 06 54 77 1e 09 2e 59 54 cf 39 85 01 50 8a e6 12 09 55 b3 08 6e 0f 4b d0 d8 33 4b 0b 20 dd d5 c3 a0 db b0 38 54 35 e7 59 70 05 1a b8 fc 12 2e bd 49 23 29 d9 be eb 4b 27 04 69 0f 57 eb b6 86 90 28 7a aa 79 dc b2 75 1b fb ce ec b1 6e 39 b6 bc da 9e 6b 73 87 b8 0c 17 d1 5e 46 15 b0 13 b3 fb 8f 54 7b 76 cc 1f e2 b2 f7 00 7c 2c 7c 67 fd 17 a8 9c db 36 b4 84 d2 93 87 43 a5 d7 55 83 bb a8 f7 50 1a 98 66 a2 95 2d 81 22 11 06 2c e6 f5 f7 bc 15 f8 bc 6c 49 94 52 7f 17 52 Data Ascii: qP~R63H+IA85}-gFXlj-:?y\2dizmN&8,{eTw.YT9PUnK3K 8T5Yp.I#)K'iW(zyun9ks^FT{v\|,\|g6CUPf-",lIRR
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 39 2d e9 dc eb de 26 61 72 92 b2 66 60 e8 24 87 66 cf 1a d0 aa ee 0e e8 b2 7b 3d 9f 32 29 72 82 6d bf 01 1e 35 ba 8b 24 9a 81 08 c1 7a e8 3b 6f b4 5d a1 9c 12 48 c6 4b b8 e5 7c dd d1 38 2d 15 c7 d9 59 ee 9d b4 23 8a 3b 70 b6 c5 9a 82 36 bf e4 5b ef dd 03 95 e8 18 33 25 99 26 48 06 04 4a 92 f6 a2 1f f5 77 bf 8b b7 78 22 6f eb 3d 5d 5b 59 56 fa ef ab d6 7f 41 b4 2c 5a e8 8d 2a 73 8c 6d 18 42 94 c8 1c 97 56 f1 f5 22 65 c6 d0 7f ae 9e 83 8b 91 55 68 d3 73 15 48 df 37 e2 51 9b 58 85 99 b0 7b 0b 2a fc 5d 38 d7 f7 3b 7b 28 a5 f4 26 96 2c 5d ea 23 3a 15 77 c5 55 17 17 36 57 e6 5c 8b 41 13 2a e9 17 36 9d 75 6c 5d 63 75 1f d2 d5 1b b9 d0 ef 5c c0 0a 4a 62 2f 5f b2 fb 31 82 22 86 94 54 55 1b 48 89 e9 91 db e7 2f 58 16 36 94 b0 bb 49 e3 3f 0c 64 96 19 8c ee a4 db a9 Data Ascii: 9-&arf`$f{=2)rm5$z;o]HK\|8-Y#;p6[3%&HJwx"o=][YVA,ZsmBV"eUhsH7QX{]8;{(&,]#:wU6W\A*6ul]cu\Jb/_1"TUH/X6I?d
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: b1 87 d2 a8 64 3c 9f 85 7c 47 65 86 ef 28 56 ec 06 a5 74 dc 85 f9 76 f5 7b 5c 48 e4 b2 4b a4 3b ba 36 47 96 f5 d3 d0 51 c7 55 55 f2 a2 2c 31 8b 75 b8 89 78 28 b4 8e d4 af 50 88 9f 54 d7 20 16 29 cc f1 05 7f 16 1c d1 d2 22 9e 57 30 f5 48 e1 e5 3f 9e 52 dd ac 98 3e 82 34 34 37 cf 09 ba b0 27 63 df 3d 35 d2 01 1b 7f a8 17 28 41 70 74 b5 46 6b d1 93 ba 0b a0 31 c3 25 e4 9c 88 a9 3a ad bc 9a 03 6c 50 45 6f 53 77 f6 98 84 4f d1 54 46 65 cc 02 5b b9 c0 33 51 15 0d f4 42 27 9d 3e 28 7c db fe 0b 2c fa ec cd 56 15 5a 61 56 55 7d 64 6e a2 12 d8 c9 50 a9 ac 3e e7 0d 41 c0 94 3b 2c 07 6f fa 4c e7 45 34 7e c6 72 51 18 63 02 f0 64 75 a1 7a 31 a6 ed 1f 1b f9 30 5e 9f b7 c0 fb 07 3d 73 c1 f7 a0 77 bb 69 41 d2 53 bd ca 90 50 76 d0 b8 4c ee 4b 39 f4 07 92 ae b7 0a 19 8b a4 Data Ascii: d<\|Ge(Vtv{\HK;6GQUU,1ux(PT )"W0H?R>447'c=5(AptFk1%:lPEoSwOTFe[3QB'>(\|,VZaVU}dnP>A;,oLE4~rQcduz10^=swiASPvLK9
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 60 cb e4 ae 5f 7b 11 50 db 6c 12 e4 51 60 97 88 88 b1 92 28 43 cc 6c 05 a6 d5 23 b4 75 df 63 41 4f 83 3d 90 10 3c e1 5c 89 7e 91 2b 80 32 de 74 ee fe cb e7 20 a5 e4 72 78 b2 58 bb 10 60 fc e4 6a 54 f8 30 47 a4 8a 83 ae d6 53 29 85 94 87 f8 99 c6 11 a0 77 81 2b d3 31 d0 50 01 62 31 68 83 c6 6e bc 4d b8 68 b7 eb a9 42 d3 dc f1 e9 b4 b7 9e d9 b9 a0 a2 3a 3e 0c 75 11 a5 73 37 40 90 0d 78 68 06 91 c5 6f 26 c5 3a 49 07 ba c1 99 ba 5d e8 bc fb f5 05 c0 16 74 c8 6a e4 a9 55 31 55 bd f1 0d ce 68 4a 93 de 7c 80 96 c4 3b dd f8 b5 24 85 f8 6e b0 01 a5 5f 70 ac 20 25 76 32 e2 79 c9 80 85 f9 9e ff 8c 7a f2 2c b8 5b d8 e5 1f ef c2 d7 8b 0a e4 44 8a 0d 61 9f c3 b6 45 83 e5 bc a9 b9 c3 c3 11 a2 57 f3 ac 26 8c d2 6d 88 24 4e fb 9f d7 a1 f4 df 77 ba 62 92 0d b8 e1 06 6b a2 Data Ascii: `_{PlQ`(Cl#ucAO=<\~+2t rxX`jT0GS)w+1Pb1hnMhB:>us7@xho&:I]tjU1UhJ\|;$n_p %v2yz,[DaEW&m$Nwbk
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: fd 63 d8 ec de 2e 7d aa 85 61 d5 0e f4 d6 74 5a 1b 51 ce 01 a6 59 23 7b 17 47 23 e9 f2 45 e6 92 65 34 29 28 2e 7e 05 36 02 5e a6 69 20 6c bb b4 25 fa 09 a9 43 fd d6 ed 5a d6 8b c4 58 d0 8b 97 f9 51 8b 02 7c 03 f1 d8 11 7a 7b b1 84 75 4e 82 7c f3 79 9b ec c3 68 c3 09 03 5f 23 0e 3c c9 2f 49 a9 3e 9b ef ac 69 c4 c1 f4 0d 84 1c 56 7f 27 33 0c 92 ca d6 a2 2d 14 ca e6 d8 3b 72 c2 75 de 8b 80 05 5c f8 6e d5 c1 1c c6 1b d6 24 d9 33 5a 75 d2 ac f2 38 32 76 fa 85 fe 30 ed c8 d8 2f 27 a1 a7 c3 37 81 fb 01 65 b1 97 5d 37 b0 4f 70 d9 2a 78 e2 c1 2d a2 b2 11 3e e9 55 6b a1 26 bb 62 5d bb 5f f7 69 a0 26 c4 d6 61 27 6c 5c 30 2a 9d fc c2 2e 65 18 95 9e 12 5a c5 1e 44 92 90 d0 c4 fa 1a f1 de d1 23 a6 03 3a 80 07 28 74 e8 89 87 69 5f 27 e1 e9 64 f4 24 8e 9e 17 7c e2 33 55 Data Ascii: c.}atZQY#{G#Ee4)(.~6^i l%CZXQ\|z{uN\|yh_#</I>iV'3-;ru\n$3Zu82v0/'7e]7Opx->Uk&b]_i&a'l\0.eZD#:(ti_'d$\|3U
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 8b 83 c4 22 46 1a 37 72 54 5f 84 00 9e b8 3e 8c e8 1e 0f 28 4d 74 c1 9f c9 6e da 18 43 1d 95 50 39 64 5b df c9 9b 34 08 a6 ad bb a8 32 bb 28 55 c7 ea 57 88 cb 4f be 2b aa 51 f8 31 c5 79 49 22 78 49 02 83 28 11 a0 ff 9f 34 df ab 70 07 b2 3d 99 39 57 fb b8 28 c2 32 50 c8 08 dc a6 52 e2 de e0 1d 90 85 ed 4b cd e3 44 0a a2 6f e2 c5 19 eb 32 99 83 56 cf 42 4d cc ff 4f 16 0f b6 dc 1d 74 95 e4 43 97 70 9d f6 b7 16 b7 53 ac 96 31 d4 fe 1a 57 ca 6f 03 a8 cc 2c cc e1 0e b1 f5 16 0f f2 75 31 0d 5c 16 99 63 a3 6f be a8 f8 49 7d c9 5d 68 8d 7b b2 3e c2 7f 81 ad e0 61 ab 96 2b c8 3f 83 28 a7 86 99 c0 46 cf 88 a0 a5 a9 87 c3 d1 6d 73 1c 11 b4 0c d1 e6 75 ad f2 3e 94 47 b8 e8 0f 21 b0 0c 22 35 03 63 c3 cd 1c 1e 4d b9 9c 65 7d 2e c1 33 e1 db 08 cd ca 04 51 1f be aa ab b3 Data Ascii: "F7rT_>(MtnCP9d[42(UWO+Q1yI"xI(4p=9W(2PRKDo2VBMOtCpS1Wo,u1\coI}]h{>a+?(Fmsu>G!"5cMe}.3Q
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 2a 77 e4 0b b2 3f 0d c4 ba 6f 98 f6 eb 7d ca 4a c7 80 aa a1 0d 01 2c 80 55 b4 e3 3f 78 69 29 ba bd df 88 65 e7 7b be 82 d5 42 9b 3b 93 6b 15 cb 00 4f f1 6b b8 8f d2 6e 7a 3a fd 4a 7e a9 f3 c4 8b 05 d9 5b da af 93 e0 26 5d 7a b2 18 6c e3 e9 30 bd 9b ce 3d 79 23 45 8d 16 8d 6c 50 11 1c a5 86 d8 a6 66 bc f4 53 68 a7 68 08 5c 36 06 46 07 4c c3 01 d4 a5 da 13 44 ab 50 39 da 8c 8c 05 1f a1 b0 e8 e7 d2 05 50 4d b1 b8 98 5d 35 b9 5c bb 92 53 3d d9 ae 6c ae c9 68 13 0a 35 bb 6a ec 1b e4 0f d8 98 46 23 4c 82 13 41 21 4c 80 52 0a ec f9 41 5a af 3c 07 52 e4 9a 18 cb a3 2a 54 0b 3e 6b 59 38 44 ca 43 91 d3 38 6e 37 7f f8 a1 5f 1e 0e 69 cf a1 9a 42 1b 66 01 bd 00 66 82 24 44 6d 1a 52 d6 cc aa c6 93 eb 8e 05 24 b0 86 29 38 f1 0c fc 2e a1 c4 8c e3 8e 82 fe 72 13 22 e4 e0 Data Ascii: w?o}J,U?xi)e{B;kOknz:J~[&]zl0=y#ElPfShh\6FLDP9PM]5\S=lh5jF#LA!LRAZ<RT>kY8DC8n7_iBff$DmR$)8.r"
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 66 bf 6f 57 2c bd ba 92 3a 39 c2 59 91 c0 e4 1b 72 6d 37 a9 9a 64 a6 be 47 8e 2d b7 3b e9 20 b7 26 3e fe 50 bb 53 9f c4 11 3b bf 81 55 11 53 17 70 aa b5 e6 01 0a 57 57 51 9f 96 37 e5 a8 20 de 1d 18 15 82 8f d3 a0 06 29 bd b2 30 c7 30 6d 28 1f e6 f3 a6 71 87 3b a1 bd 5c ed 35 b0 cd 50 83 cd 83 6b 28 a8 5e 28 8c 56 89 2c ce 17 43 3d 78 e2 0c 6f 0d 89 a0 cf c7 91 e4 5a 1d b2 41 89 e8 43 9e 50 bc 50 8f f1 07 7c 44 bc 45 d8 41 11 75 5e 92 74 2e 9b 87 cd a9 de d6 c7 b4 05 b1 21 ed 51 ac 2e 25 12 31 3b b9 e3 1d 5d f7 23 01 19 92 61 c3 04 d0 7a 5a bf 7e b4 3b 2b 70 49 da 05 0a fe 5a dc c2 17 4d 74 c4 d9 6a 73 84 6d a0 db 5d 82 70 17 f7 1a a3 2b f4 58 af e9 d6 7e d1 f7 cc 2c 79 5a fb 25 7f f7 1e 2f 9e 73 b2 36 f0 18 3a e5 8c a0 e1 32 6a ec bd f0 53 8e 8d 87 4e 92 Data Ascii: foW,:9Yrm7dG-; &>PS;USpWWQ7 )00m(q;\5Pk(^(V,C=xoZACPP\|DEAu^t.!Q.%1;]#azZ~;+pIZMtjsm]p+X~,yZ%/s6:2jSN
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: c4 a3 33 9e 79 d0 1f a1 48 93 ad 18 4e 70 a9 75 55 26 e8 2f 4e fe d2 22 4b 21 57 14 ee 38 87 cb b7 99 89 56 86 2b f3 e5 c5 74 d9 80 09 4f 94 31 fe 81 4e 06 44 dd 45 c3 8a 8f d3 59 cd eb cd 17 80 5c 1f 77 44 cf 6a 74 e3 d7 89 0b 11 c2 3a 70 3b 0c 9c 7a 62 b9 86 fe e7 61 d7 63 0f f8 02 5c de b7 39 60 6b a7 7b a1 ba b3 5c 68 e3 6f 2a 8c db d9 8f 6e ac ba 94 37 1b 20 2c c4 ca b4 13 99 87 90 a6 fc 92 d2 9d ad da c6 d7 f9 a9 12 33 2e 6f bc 43 a0 b4 41 da f8 6e 04 f4 db d6 ba 39 8f 25 73 5a 47 ad 40 d8 3d 64 44 87 e5 cc 58 c4 08 87 44 34 ac 92 9d 6f 1b 92 08 58 36 88 50 0f 27 f4 ba fd ea 76 c5 a6 40 c4 4a 97 35 14 00 81 11 0d 7f e2 bb 74 b4 eb 96 65 d0 36 25 3c f4 75 96 c5 93 2b 1f cb 43 f0 99 c9 cb d0 7f 3d 82 ac a1 a6 ee 60 9c fc a8 7a d0 2f fb 64 40 25 77 07 Data Ascii: 3yHNpuU&/N"K!W8V+tO1NDEY\wDjt:p;zbac\9`k{\ho*n7 ,3.oCAn9%sZG@=dDXD4oX6P'v@J5te6%<u+C=`z/d@%w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.17	49841	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:06 UTC	502	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/4718592-5767167 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:07 UTC	324	IN	HTTP/1.1 200 OK Content-Length: 1048576 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:07 UTC	16060	IN	Data Raw: e0 af c5 82 b8 ac d7 ca 7c a0 3e 30 45 44 08 d8 a5 a5 63 23 2c 0e b2 20 9c e8 0b e9 92 d4 b1 24 e2 dd 06 6e d4 7d 77 65 ff 0d 5a 38 e7 40 1d e1 c9 60 19 bf b7 f1 9f 38 1e 61 19 09 14 37 87 b3 be 09 5e b4 50 d6 10 01 13 b2 cc b9 ce 7a d5 8e 50 46 32 d1 94 d5 ea 82 1b a5 f8 16 37 93 7a db 0d b2 0d 0d c5 0b d3 fc 05 6e 53 ac 07 28 90 29 21 20 f2 c9 b7 9b b4 ed 17 1c 5e 6b a0 1f d6 38 aa d8 77 8d df 47 a5 c5 b2 a7 a9 eb 07 0e 63 e6 0f bc 74 57 d7 df 91 f5 74 cf 36 42 7d 82 02 4b 10 a1 7b b2 9a c0 fe 66 25 b1 c8 6e a9 f4 c8 c9 35 5b 17 eb 90 92 1b ae 6f e9 21 29 fa f7 aa 24 23 18 eb 69 e9 60 e5 80 cb a0 1c 68 c8 77 1d 16 a9 6f 79 4f 96 70 a9 f8 e5 cf f7 9d 7e 2b 28 0a c1 8a a6 0b d3 8b 7c 6a 06 ba 3b da fe 58 8e b4 3c 41 29 14 23 10 58 3d 95 59 47 2d be c2 e7 Data Ascii: \|>0EDc#, $n}weZ8@`8a7^PzPF27znS()! ^k8wGctWt6B}K{f%n5[o!)$#i`hwoyOp~+(\|j;X<A)#X=YG-
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: fc 4e b9 ae 81 99 e3 10 a2 99 f6 aa 17 64 06 b3 f2 18 3f 40 91 48 25 80 29 4c db 26 dd 39 8b a8 a1 e7 68 4c 2d dc ce e9 44 91 6e c7 66 80 4d 25 89 a1 88 da 87 07 81 5c e8 9e 42 6b 5c d8 71 e1 e0 1a 85 d8 4e 1f 87 bf a2 89 ba e5 90 90 0e 51 00 04 3a 8c d1 7c c7 b3 5e 7c 08 2d 15 bb 50 e5 a1 80 3a c3 5a 34 a4 d5 41 40 63 11 bd bf 58 cb 91 b6 30 3b b6 3a 15 70 09 df fb 91 28 54 94 71 7d d8 25 e8 3e 82 31 d9 a9 83 17 dd 81 e3 f9 ba 58 11 24 16 7e 13 6b f4 87 79 65 e5 8c 4b a0 93 26 e1 ea f7 26 6c 53 af 10 85 7a 3b ff 3e ac 48 46 a1 a6 7d ae c4 58 bf 92 77 f2 86 32 bc a5 fb 6f 96 54 c0 d0 67 06 d8 38 68 4c 0f 07 70 e2 dd 17 e3 07 c6 e2 9f 1a a9 62 29 ba 64 3e bf ea 8e 52 d5 41 9a ab b7 87 b7 e1 98 d0 cb e2 8e 8f 46 48 d3 bb 0b 9e fd 83 ff c5 fd 8f 46 b1 da cd Data Ascii: Nd?@H%)L&9hL-DnfM%\Bk\qNQ:\|^\|-P:Z4A@cX0;:p(Tq}%>1X$~kyeK&&lSz;>HF}Xw2oTg8hLpb)d>RAFHF
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 04 b9 1c be 77 e2 9f f0 ae f2 2d d6 1a 2f ee e7 6b 3f 4c 5c fd a9 6b 5e 51 d8 94 c7 77 d6 83 32 a3 a1 b1 0c ec 5b 08 36 cc 73 78 38 dc e4 7e 7f eb ed 8c 5b 68 82 57 94 67 0c 89 0a 0c 4d 51 27 dd ca f0 60 b4 3f 00 6a 39 b4 31 f2 ad fd 2e 60 1c 7f 7f 63 a0 36 8e 80 20 64 0f 68 9d cb fb 29 98 57 2a 24 c2 0a d1 df f0 3f 61 4c 38 7f 8c 0f 43 67 12 64 3f 71 b8 87 8d 27 bd 5d 2a 5e d0 5f bd 71 08 22 2b 2f e8 b9 f1 ed 81 c2 e2 b0 30 98 74 25 22 ac 09 d9 95 88 27 03 0d ef fb 79 12 c0 ad 29 7e 9f 27 23 58 e6 b4 67 fe 4f 9b bd ad 80 05 99 b0 82 8f 16 3e 15 0e 44 f2 62 39 23 b5 6a e0 be e2 53 f2 23 08 c9 1a b2 94 a4 5d b0 e7 e2 fc 6b 65 66 0c 57 7c d8 23 93 01 4c fd 5e 33 dc ad a5 4e f0 e3 24 ea fd e5 6d 90 53 e1 86 f3 62 0f 21 35 33 1b ac cb dd 6c fd 18 ae 05 62 8f Data Ascii: w-/k?L\k^Qw2[6sx8~[hWgMQ'`?j91.`c6 dh)W$?aL8Cgd?q']^_q"+/0t%"'y)~'#XgO>Db9#jS#]kefW\|#L^3N$mSb!53lb
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 7f cc 42 42 1f 10 8a 58 0a b2 e0 ab f3 ab 26 5c 38 5d f1 87 54 f4 80 70 ce 40 de a0 d3 76 c1 1b d8 32 cb 39 32 11 78 c6 50 0d 17 72 e3 f5 6e 99 31 3f cd 3b 70 16 8b a6 2f 91 5e 87 a1 ed 9c ec bb 8e 67 1e 5a 45 70 05 47 7d ca 65 b7 97 78 2b f3 d3 13 a9 5d 9b 47 3f 3a 44 3b 8f 64 b7 da 5e cc fe eb b2 13 1d 71 c2 3f c1 62 02 46 25 a2 e7 7c 3f 24 0a 4a f7 93 9e fb 80 7f 6d 17 22 4c 43 fb 8d 7c 24 7d e3 fd cc 4f 31 6f 4e 82 8c 8b 20 4a 58 ad 38 4d d2 4e 5f fd 11 95 2d ed d4 e0 31 79 49 b4 56 90 b8 0d 38 21 42 b7 5b b6 a5 52 12 d3 64 16 ec 7c c2 a9 44 11 1d 84 e7 40 13 23 4d 3c 6f fb 69 cd d7 93 f1 44 f7 d9 d8 7e f4 82 b8 c8 03 1a 9c 3f 3f e6 7c 60 8e 88 2d 29 40 77 62 dc 9a 6c ff 90 52 c5 11 c0 5b cb d9 40 92 9e 1f c5 96 8f 86 31 5a 95 2b 1d 30 9e a9 df eb d8 Data Ascii: BBX&\8]Tp@v292xPrn1?;p/^gZEpG}ex+]G?:D;d^q?bF%\|?$Jm"LC\|$}O1oN JX8MN_-1yIV8!B[Rd\|D@#M<oiD~??\|`-)@wblR[@1Z+0
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 10 59 9b 68 d2 38 04 76 d6 72 87 04 1a 18 02 39 34 60 4e 0d 45 30 1c b0 a5 6f 08 62 71 86 c4 db 7c 83 29 42 40 26 1a 44 0b 12 04 82 3a 6e 24 a0 0c c5 df 8c 04 90 f0 35 dc b6 89 a8 2d 23 b7 88 78 49 74 ae f0 b0 5a aa 79 47 89 a0 a0 89 41 c8 7b 54 16 67 99 7c bf d8 af bb 07 bb 23 53 a3 62 e1 47 ff 13 00 bb b4 ea b0 32 be 90 51 39 8d 0e a8 5b 9e 63 3f 13 05 2c 62 55 2e 77 d1 bd 2b da 6a f5 f8 b1 02 7c 95 07 7d 59 65 e7 8e b2 86 f7 9e cc 1f ab 4b 14 12 63 ae 3a fb d3 ee 5a 24 01 d6 0d b0 02 f9 fa 3e 83 b9 9e fd 25 ca 35 60 51 be a6 a8 f5 99 00 c1 ec 45 50 d6 26 1e c3 57 03 19 db d2 08 df 6e dd 85 b2 39 ce 02 6a e2 c9 a6 08 d2 46 65 9f 5a ac 29 96 4a ff 53 db 81 90 74 ac 43 65 79 12 48 b3 34 ed df f8 43 a9 f2 01 fc 5f 56 49 c0 b1 35 d9 0f 05 be f6 ad 00 01 e4 Data Ascii: Yh8vr94`NE0obq\|)B@&D:n$5-#xItZyGA{Tg\|#SbG2Q9[c?,bU.w+j\|}YeKc:Z$>%5`QEP&Wn9jFeZ)JStCeyH4C_VI5
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 64 e1 8e 78 1c 1c 8c 66 2f 73 21 e3 3e a6 54 09 3c d0 8d db a8 26 ad 08 c0 14 4e a3 98 bf 41 1c 0c f8 8d cd 63 f5 14 1b 00 5e ce da 9f 5d a0 e5 0f 84 8e a7 f6 c7 a4 57 3a 5e 25 c8 33 bd bd af 88 31 e8 51 79 8a 74 b3 cb 7b c4 30 1a b0 a4 24 16 56 0c a2 4a 00 ab 88 18 6c 9a f1 07 ae d5 2d 5f e7 20 92 32 aa 28 b5 81 49 f3 57 99 f6 d3 e4 89 aa 50 56 ca 3b 27 90 f0 b0 d5 30 a6 b6 c3 53 5d a3 39 f2 43 65 72 b2 9e 98 d6 b3 1e c2 53 a8 0b ab 76 0c 67 92 ba 4b 5c 31 32 fa 6e 24 79 04 f6 eb a6 08 6f 42 d3 a8 82 09 3e c6 63 28 8a ce 48 f3 a3 a7 3c 60 35 40 3e 05 8d 87 07 40 d5 31 50 75 1a f2 e9 46 12 e3 af 4e d2 15 61 64 bc b7 f4 98 43 76 39 0c 5a b4 cd 2c 7f c4 0e d8 d4 6d ac 39 0f e3 f3 9e ce b6 4e 5a f4 94 87 45 a4 30 41 2d 22 56 cf 18 9b bb de 9d 59 a5 ad 4d 5f Data Ascii: dxf/s!>T<&NAc^]W:^%31Qyt{0$VJl-_ 2(IWPV;'0S]9CerSvgK\12n$yoB>c(H<`5@>@1PuFNadCv9Z,m9NZE0A-"VYM_
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: dc e6 3e 3d c2 f7 64 13 10 5f cc a0 17 f7 48 98 96 22 ce 4c e4 1c 53 a7 b3 fd 41 e9 b7 cc 10 ab 0a c6 14 3e 79 a4 11 34 e1 cc 87 44 e3 fa 1b 2c e5 64 ca c3 b4 4f 2e 13 13 36 75 d4 ca ee 8a 0f 7e 40 d9 13 81 93 22 a7 dc eb 40 9c 6a e6 82 60 59 68 5f a0 bb 51 5f 6e 92 6d 83 cf fc 3d 21 91 15 84 d0 79 48 11 47 5c b2 1c 33 e7 9c 55 92 61 48 fd c8 77 5d d6 c7 53 0b 4a 38 3a be 71 95 84 19 63 5b 87 2c f6 3c c4 64 1c fe 25 cd 44 4b 5d 55 58 66 7c 60 83 c4 cb 4f 17 5f 77 90 82 e2 ad 8e ac c3 5b 3c ed 9a e3 30 2f 68 bc 05 d6 b3 5f 18 c4 fd db 35 4e 9e ac e3 79 3f dd 53 00 7c bc 17 2c 59 b9 37 4d bc b7 49 e4 58 11 df 6c be 87 e2 d5 3b d0 d2 de fc ea d4 bf b4 9b 38 7f bb 0c d9 1f b8 a3 99 bc 83 09 29 2b 5e a1 c3 5f 6c 71 ed a3 64 3c ee 3e 5b 3c 7c 58 e9 ff 9a f8 8f Data Ascii: >=d_H"LSA>y4D,dO.6u~@"@j`Yh_Q_nm=!yHG\3UaHw]SJ8:qc[,<d%DK]UXf\|`O_w[<0/h_5Ny?S\|,Y7MIXl;8)+^_lqd<>[<\|X
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: da 63 41 2e e5 c6 ed 9c dc 04 11 b3 93 94 9d 95 9c 14 2c 97 e9 2c 8d 10 d4 d1 7c aa ba 86 93 63 bd 58 3a 1f a4 e5 c4 39 53 02 73 21 ee e2 37 ba d3 f0 a3 99 2f b3 df 42 7b 0b 6e 2a c0 79 76 48 81 9d a8 cc 24 0f c2 a6 c6 67 c5 ac 50 ea 12 37 2b 95 51 bd ee e6 4f 88 3e 38 b2 c3 4a 87 6b 8c 0a f8 2d ef d7 61 9a 1c 8f ab 28 36 12 cd 48 15 97 5d 32 01 ea 9a c8 7d 59 9d cb 2f 2a 53 7c 7e 3a 7f 31 d5 d5 38 c3 db f0 3e cb cb f0 c1 cd 92 7f da 77 c2 3e 28 5d c3 0c e7 12 93 d1 ef e5 dd 3f 55 a9 a0 7a 3b b3 57 2d 10 31 45 95 3e 55 d1 1b d3 3d be 99 71 55 7b af b8 27 92 f5 6f 2e 56 63 3d 3f fa df 10 2d 07 54 02 cb 30 93 05 18 71 f1 06 ea 67 04 a6 34 c0 15 ef d0 53 01 c4 89 34 bb 0d a0 a8 b0 64 d9 67 1b b8 ae 74 b1 32 ac bb a0 5f b8 2c e5 3a 5e 9e 9e 93 61 d7 cc 38 c4 Data Ascii: cA.,,\|cX:9Ss!7/B{nyvH$gP7+QO>8Jk-a(6H]2}Y/S\|~:18>w>(]?Uz;W-1E>U=qU{'o.Vc=?-T0qg4S4dgt2_,:^a8
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: e2 05 58 52 0f aa e4 5e 7c 8b 04 52 01 9d b3 24 81 1f d7 63 1d d2 3e 32 06 cc b6 29 fc 6f 16 72 4b 58 11 37 49 4c 12 4a 1c a0 6c ea 60 c7 bf 94 e3 0d 86 01 09 4d 3f 3b 56 5b b8 6c 92 3d ef d9 b6 e0 81 f3 51 fc f7 d8 cd 6c e0 27 14 2b c6 9d e0 22 9f 4a be 25 42 70 de 82 a0 81 00 39 c0 84 d2 77 40 bd a1 6c e6 d8 53 5c b7 1b 9f 07 2e a8 d6 80 9b 8d af b5 17 83 b3 b2 27 b3 82 74 6f f3 a4 b3 2d cc eb fb ae b1 d0 6e 54 cc 75 a8 f1 bc 9b 53 03 fa be c4 d8 71 1e 50 eb 73 0b cf f6 da 00 a2 05 0e 0b eb 2a af d0 c5 7c ef f3 ee 4a ee 97 d6 3b 59 59 cb 61 ae e6 e3 b8 51 b0 f3 17 14 04 18 1d a6 7e 5e 01 b7 5f c7 61 45 71 9f 78 c9 51 ea a8 ef 1d a0 c0 1c 98 a1 f3 7c 45 74 d9 d5 c4 50 36 22 69 54 29 88 2f 31 03 29 95 53 c7 04 d6 7e 45 b7 76 58 27 fa f3 7b 0e 28 b2 79 00 Data Ascii: XR^\|R$c>2)orKX7ILJl`M?;V[l=Ql'+"J%Bp9w@lS\.'to-nTuSqPs*\|J;YYaQ~^_aEqxQ\|EtP6"iT)/1)S~EvX'{(y
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 6a c1 81 1f a8 3e d4 9a 31 ee aa 19 f6 04 89 2c ad e5 ef 3a ff 35 17 db df c3 c8 cb c5 d8 ef 23 26 2b 22 e4 77 47 df c3 82 21 fd 50 62 11 73 bd 6c da dd 4a cb 3c 46 e6 fe f6 c8 0d 2e ec 1d 8c 13 5a 49 47 63 ee 8e b2 25 35 d6 48 20 eb 4f 92 17 bc 98 e4 64 11 d9 93 b0 48 1f 83 5d 6c 65 a2 67 17 8c 79 12 c2 dd 66 f0 36 f4 c9 5e 0a d3 6b cf 4c 68 4b 60 7e 4c 95 6e 7a b0 fc 44 73 60 d1 38 cc 57 fa 50 24 7a ba ae ca 2d 14 50 26 b0 13 46 1a 23 9d b9 a5 d5 a3 51 23 5e 28 b3 97 9d 92 47 d7 db 44 11 9f 7a 46 7b 36 67 de 99 21 75 62 15 b9 bb 02 e0 79 30 0d 25 ad e5 e0 43 b5 b8 b2 85 06 99 0c 51 57 16 db 24 f8 0d 1a e4 b8 0d 1c 41 47 d8 46 77 5c 6d 8c 3b c2 7e f7 a4 c0 a0 84 a3 97 87 95 fc 0e cb df 94 69 5b 25 a7 1d 86 3e 22 98 b6 7b 8a 9b b1 a5 8f 17 9f 96 1f 00 9a Data Ascii: j>1,:5#&+"wG!PbslJ<F.ZIGc%5H OdH]legyf6^kLhK`~LnzDs`8WP$z-P&F#Q#^(GDzF{6g!uby0%CQW$AGFw\m;~i[%>"{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.17	49842	69.30.89.11	443	6860	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:06 UTC	502	OUT	GET /dl/dY_P_dl-yLEdxAeJbfNTr_JQCctT3HSc08CeWvnYMQTKvDGM_WYTWiHsqGpbq4A7uZ6lTbcA2E7q5Jv0LLeKCVNgqPagfptin2L3KLfG8dZhIVHJXCBe-EK97LRjMw/3670016-4718591 HTTP/1.1 Host: gfs240n101.userstorage.mega.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 11:37:07 UTC	324	IN	HTTP/1.1 200 OK Content-Length: 1048576 Content-Type: application/octet-stream Content-Disposition: attachment Cache-Control: private Content-Transfer-Encoding: binary Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Connection: close
2024-07-11 11:37:07 UTC	16060	IN	Data Raw: 7c d7 35 c1 a1 d1 3e d9 6a a3 0c 56 b4 30 40 d0 54 95 ee a1 46 05 57 2e 08 2b 46 b5 a1 e7 91 72 1e 7d 68 42 66 00 92 16 7e b2 4f 2b 27 e7 37 a8 92 5d 1b e5 7d 4f 0f ec 52 3c 12 d3 19 0e 23 ac 06 de 7c 47 32 06 b6 6e 8c ae 9b 9c 5d d8 7c 11 c4 00 4b 2f fc 63 a2 f4 bc 2a c5 ca 72 f9 1c 3b 8b 37 fb 79 dc 98 c1 88 82 5e 83 05 b9 fd b8 3e 5f 74 e2 68 db 80 f2 ad 96 79 2e 23 1a b5 d1 0d 22 c8 29 9d 21 8d 67 04 be 52 18 af de 12 5e d1 ab ec a8 3d 7a 77 f2 d0 b7 39 f1 ce c5 c1 c0 b4 c5 61 80 63 b9 55 64 f6 cd 13 3b ad df cf 7d 0d ea f7 99 82 21 0d 1b f3 dc 81 b0 29 b6 5b 3d 51 4d 6d 79 e8 89 ec da c4 47 fc 04 79 4a ae b0 d5 66 78 91 e3 01 7d 4d a5 96 a2 7b bf 03 b1 e5 70 46 4a 58 31 f8 d2 e6 fa d6 d8 07 91 4e 33 29 9a 01 b7 fb ba 4f 20 da 98 9c 40 51 65 81 55 4c Data Ascii: \|5>jV0@TFW.+Fr}hBf~O+'7]}OR<#\|G2n]\|K/c*r;7y^>_thy.#")!gR^=zw9acUd;}!)[=QMmyGyJfx}M{pFJX1N3)O @QeUL
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 5b 59 1b 05 a1 c7 53 08 a4 6c 82 a4 1f 57 dc 58 40 d4 7e 4d 48 da 9e 2c 36 03 a9 0e 0f d8 ca d4 65 e5 17 a3 d0 d3 b0 70 fe 5d bf 54 39 3f a1 0f a7 ec ae 3e 32 91 9d 00 03 83 e9 c3 bc a6 f2 86 51 57 9a b5 45 b5 8e a2 1b e1 7c 77 58 19 b0 44 7b a4 36 e2 3b 12 95 03 53 89 95 44 c4 22 8b f2 dc a6 5b dd 07 bb 3d 7e 2d 23 fb 1d db a6 7e d0 bf f9 4d 68 51 bf e9 0a e5 2d 5f fa 45 55 b2 76 a4 83 30 7d f1 dc 92 01 fb 9f 37 80 fa dc 6a 43 07 39 fb 54 52 62 8c d9 29 e9 ed fe 92 1d 4d 1b 59 54 7e bf 4f fb 62 12 d6 92 17 54 d3 20 b1 9d 3e e5 88 b2 bf 72 5e 06 66 d5 24 d0 8d a1 95 43 59 02 80 66 8d fe 09 29 a9 5b 46 57 f7 3c d4 ba 7b b6 e9 85 41 53 8a 0b 78 66 6b 44 cd 2c ce 5c e8 35 7f 43 d2 61 c5 81 7f f5 b2 6f 02 4e c5 a4 27 fa 53 40 63 fd cb 4a 81 6a 55 92 be 0b 0c Data Ascii: [YSlWX@~MH,6ep]T9?>2QWE\|wXD{6;SD"[=~-#~MhQ-_EUv0}7jC9TRb)MYT~ObT >r^f$CYf)[FW<{ASxfkD,\5CaoN'S@cJjU
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 8a 5b 35 58 a9 f8 f6 38 6b b2 26 65 0f bc 09 40 c8 99 48 6d 64 79 38 04 60 60 58 06 d4 e4 cb 87 3b 21 a3 6d bd a7 98 cd e1 dc eb dd 28 62 0e c7 a5 4a 2c a8 ee f0 41 86 06 9e 54 e8 4a 25 b1 66 09 90 54 a9 d6 6a af b8 c3 4d 1a 6e f5 6e d6 66 a4 0b 25 1c b6 d5 6c aa f7 c4 68 a8 2c b3 ae 3d 6b 04 a4 f3 98 34 db fc 89 83 a5 5c 4e c5 e9 fe a2 6c 09 57 2b a9 1f 17 6d 8c 4b d9 de dc 39 37 8c 96 99 50 e9 83 78 32 c8 80 9f 3a 15 ad 5c 2d c6 0e 00 8f 66 cb de 04 60 9b 5e ad b8 71 64 c5 8f ca cb 1b ae 55 c1 d8 3a 69 8e ae 92 72 46 d3 ad b7 39 d6 6a 44 a1 3a 04 18 92 52 9b 95 6c 77 b6 7d 15 83 ed 0a a0 56 cd 04 39 61 9d b3 93 db cb 4f f6 41 db 01 62 db 5a 91 7b 27 b0 53 bb 92 ab 98 14 86 6a 5a 03 e0 3e 66 7e c9 57 72 25 a6 cc 8a d5 29 49 17 73 0f 09 83 86 68 3c 09 42 Data Ascii: [5X8k&e@Hmdy8``X;!m(bJ,ATJ%fTjMnnf%lh,=k4\NlW+mK97Px2:\-f`^qdU:irF9jD:Rlw}V9aOAbZ{'SjZ>f~Wr%)Ish<B
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: cb 29 b2 d4 09 66 6b 8d 02 7e 16 3e b3 ed 41 57 65 38 3b 26 c4 d6 6b a2 55 f7 0b c3 7b 39 b3 79 19 aa 51 c9 dd ca 64 e4 71 0c 94 7b 0b c3 95 c9 9b ff b6 b3 37 b1 ef 73 4c 7d fa 6d 9e 62 b3 e7 05 df d9 9f 18 6d a1 2d f0 5d 21 a4 aa 97 e4 0c d8 63 3e a0 4e 09 d1 b5 5a 4b 23 50 b7 bb fd 77 6a 29 f3 cc 9b 95 62 84 12 7d 78 e4 f8 ea 2e 9f 51 72 1f 9b 70 c2 db 86 fb 63 4d a2 a8 31 39 52 96 fc 1b 23 76 f3 b3 57 04 4e 0c b2 6e b4 6f bc 9a f3 f9 78 33 86 e8 e5 61 00 9d 02 32 68 1d 81 85 76 d3 ec a8 aa ca 98 63 67 88 b1 e6 72 aa c3 a3 e2 a6 a0 e6 ca 78 d9 d5 f7 91 ea f6 c2 9c 44 37 4f e0 39 94 15 63 ab 04 d4 13 cc f2 0b d1 41 8d 9c ba 39 d2 51 cb 89 71 db 5f b3 bc 60 63 a5 74 43 84 7d d4 f4 f7 e6 91 89 6a 93 64 74 2f 50 19 73 0d 5d df 6a 8d 78 b3 40 8e 26 11 6b 19 Data Ascii: )fk~>AWe8;&kU{9yQdq{7sL}mbm-]!c>NZK#Pwj)b}x.QrpcM19R#vWNnox3a2hvcgrxD7O9cA9Qq_`ctC}jdt/Ps]jx@&k
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 11 4c e7 16 2c 49 cd d7 4c f6 43 a2 8e e6 c7 ab 81 97 02 3d ea b9 64 61 1d a3 cd 16 0e 44 b7 a9 97 c3 b3 ab e0 d9 46 f1 37 26 fb 75 9a 08 8d 7e 7f 0f f7 0a 31 73 d1 26 ec 5b 1c c0 12 35 fa 70 c1 eb af 3e d9 fc 24 50 cc 07 ee 5c 5d ea de d4 72 5a 74 14 8d 2a c9 87 f7 c2 21 a6 4e a0 96 5a 29 8f cd 20 dd 4c 1e 2e 3a 69 e6 1e 4c c8 72 4a 47 2d ab 98 77 0a 04 12 92 be ed 34 71 28 91 40 ca 6f 5a 7b 27 42 0c de 08 d6 f6 65 a5 d4 41 9e 0b ee 55 c7 e7 bc 65 2c bb e7 79 45 15 c2 78 74 a9 df 6a ca 0a 84 1a e0 f8 ee 5f 9f ec 1c b3 aa 4b 91 35 51 76 57 44 8f 88 78 ee 36 fd 0c cd a6 1b a1 d3 32 a8 f5 69 6e 38 83 63 cf 09 ac a6 e6 bc 29 a7 74 82 5c 62 cd f7 30 9d d9 0c cd bf 79 b5 d8 5b 37 24 fe a0 37 d1 f1 13 0a 1e dd fa 11 21 37 21 73 67 6e 9a 62 82 f2 62 9c 6c 71 86 Data Ascii: L,ILC=daDF7&u~1s&[5p>$P\]rZt*!NZ) L.:iLrJG-w4q(@oZ{'BeAUe,yExtj_K5QvWDx62in8c)t\b0y[7$7!7!sgnbblq
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 72 3b 89 68 8e 05 03 24 de fa 03 76 d8 87 07 fa eb da 9c ec 5c ed 42 b8 8a 04 bf f9 53 eb a7 e8 96 47 2e 90 7b bf dd ae 89 ae c9 ad cf 84 e3 f7 c8 eb 57 91 b1 a0 c5 e0 75 86 a5 6c 99 1c b3 c9 38 1f 4b b7 b5 0d 65 a4 20 3b 24 5d 7a d6 10 32 9f 53 79 32 da b1 90 57 47 89 d0 9a c4 e7 59 fc f2 f8 33 ab 4c af 35 ba 65 25 5c 66 d2 59 5d ed ee 6b 22 91 c8 e6 7b aa 83 4f 47 be 19 d2 0e 34 80 3e ae 3d 72 bc 3d e7 e7 d6 e2 7b 7d d3 62 eb 6a 7e ff 49 9f 9b 3a 17 d7 ea 41 30 82 17 db d4 68 6e 5e f9 af c8 02 df d9 ef 07 46 9f 3a 0e 42 24 e9 9b 90 af db 5a f3 47 16 02 ba d8 fe 66 d9 bf 4a 68 02 b7 da 9c 4e f5 0f 6d 8c 24 23 7d 10 72 c8 6b a8 83 cb 0b 3c 5f 3a 40 bd db 81 1e a1 fb e9 e2 ff 1b ea df 4d 3d a7 a6 5d 12 d4 01 a3 ed 2a 85 fe d5 f0 cd 4b 8d 85 91 44 44 15 6d Data Ascii: r;h$v\BSG.{Wul8Ke ;$]z2Sy2WGY3L5e%\fY]k"{OG4>=r={}bj~I:A0hn^F:B$ZGfJhNm$#}rk<_:@M=]*KDDm
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: ff f9 ef 2a 4f 85 1d 91 d5 b9 d3 a3 db cf 1e 62 f3 f6 98 fa 3e b1 77 3c d1 94 88 d7 a6 9b 5a 68 43 d9 e6 5a 8f 30 08 c0 67 70 4b c3 9b bc 79 2f 37 86 c7 43 da 41 f5 ef 21 fd fd ae 35 90 9c ab b5 83 64 6f d2 cf bb bd d1 4f ec 19 8f 37 a4 40 25 35 80 53 54 f9 19 ab dc f5 0b de df 03 d5 5e 94 58 f6 e4 76 85 b6 95 e9 1c c9 e5 3d 0a 36 33 f3 76 16 d5 62 8b 1a 1f c0 e4 ec 7f 1e 9a 1f 76 93 8d a1 c7 d6 8f 12 82 25 4e 9b 0d 74 33 38 99 f4 e2 39 42 29 6c 9b 5b ac b3 c2 96 49 98 1d c5 01 cc 5d b1 d0 30 72 72 1b e9 7c 97 64 7f 1a 09 54 4d 38 16 c0 e3 74 a0 38 8e d3 8e d8 d2 a0 fe e5 0e c3 f6 f7 84 1c 2c 15 a8 0f c2 a4 b0 55 6f a4 06 63 ad ff e0 e5 ea 87 bd 61 8b 86 ca fa fc 7c ac 12 84 b8 92 76 2f 62 a6 e6 6d af 0e 5d 39 45 8b 67 f7 45 c0 a3 52 31 44 00 ac 88 77 f1 Data Ascii: *Ob>w<ZhCZ0gpKy/7CA!5doO7@%5ST^Xv=63vbv%Nt389B)l[I]0rr\|dTM8t8,Uoca\|v/bm]9EgER1Dw
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: a3 64 86 05 88 7f b5 8f b1 50 04 6a 27 e8 5d 46 ec 5b aa 64 89 dd 4e d9 1c cb c2 7d 49 e1 7b 49 ae ad 7a a6 65 30 97 52 3d b8 d3 b7 75 88 86 b5 5f e0 51 dd 05 15 96 f5 76 67 3a 6c 55 e0 4b c6 fe e7 9f 09 50 7f b1 70 66 91 4e 21 a2 fe fa 1e c0 01 ff c5 8d e9 32 ad 36 4a 17 f3 80 4e 25 1c da ca eb 65 24 f2 ab 2a bc 56 5a 51 bf 15 57 b1 08 06 ed e7 30 ff d3 0a 99 83 81 e0 d7 39 b9 07 41 df 65 31 3e 44 ad 96 b2 c6 46 b6 ff 88 03 14 89 ce 55 40 3d a4 a1 95 30 5c 7d 9d a2 0f 58 10 8b 82 1a 05 b4 dd 98 17 2a 4b 29 63 d1 b1 ec e3 8a 25 11 07 e8 10 96 0e 93 49 1f 2d be 2c 97 0a 1d f6 0f cd fc 54 5e 82 70 2b 33 3c 74 5f 23 e6 ff 44 75 5d 18 41 09 88 eb 4e ce 18 98 89 8f 73 30 83 08 9d 4b 22 06 81 1f 85 ed 6b b2 39 f9 97 03 53 54 b1 fa 47 b3 be 00 5e ab 6d f6 a5 68 Data Ascii: dPj']F[dN}I{Ize0R=u_Qvg:lUKPpfN!26JN%e$VZQW09Ae1>DFU@=0\}XK)c%I-,T^p+3<t_#Du]ANs0K"k9STG^mh
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: 81 c5 c2 af 54 b8 91 a1 f5 8b c0 4e 45 9c 80 b0 e6 da b3 19 e6 f2 9c 8d ef 14 9e 22 e4 19 87 bd e8 51 98 25 e5 83 b5 7b 97 5d 0c 0f 44 40 4e 41 2f 53 cc 56 7d 3d 0a be 89 9e 36 76 92 6e ae 96 64 bc 3d 30 b1 e6 ad 7b 15 f7 aa 3b 1e 79 47 e7 af 00 26 3a 67 c2 30 e2 de f8 4e a3 be e0 da 46 6a 6e 72 7f c8 7c c9 08 90 d2 b4 df 2f d5 7f ee 41 80 14 7c 9f 19 a0 0f c8 35 ec 10 1b 39 e7 91 52 81 04 fa 4d 55 41 67 3f f9 11 e4 e6 ca 0e b3 9a 9d d7 56 7e be f7 4c 16 1b 02 67 eb 8d 11 4a 3d 38 52 da 05 f6 d6 72 fc 18 9f 78 01 2c 88 1e 6f c5 2b 1d 5d f1 e5 b7 14 64 d9 bb a4 d1 34 2f 5e bc ca e7 7b 95 8a 3f db f7 f0 c5 e5 be 79 a7 19 16 3c 5b 2c db e8 b6 e8 e7 bb 3a d9 80 5e 89 ea 80 b9 99 82 fb 3f 48 4f c9 f4 36 dc 9d 8b 16 9b 15 f5 a9 32 91 38 0c 3e 29 0a 2b 73 d5 29 Data Ascii: TNE"Q%{]D@NA/SV}=6vnd=0{;yG&:g0NFjnr\|/A\|59RMUAg?V~LgJ=8Rrx,o+]d4/^{?y<[,:^?HO628>)+s)
2024-07-11 11:37:07 UTC	16384	IN	Data Raw: d0 ff 7f 82 bf 6e 4f d5 64 d9 a4 6d 93 35 27 90 67 2e e5 4a 8f 32 fa 8b 0d 80 40 eb f2 82 8a dd 77 ba db 49 67 b6 fe 4b 20 55 df 1a 73 0a 90 27 b5 b9 a4 87 dd 22 6a a3 7a a1 18 94 aa 87 1f 45 67 0e cb 5a 71 be bd 72 b7 ca f1 ab f9 c4 7d fd 96 7c 04 75 cb 56 dc b1 de 0b 99 98 70 c7 46 38 c7 5f a2 25 36 d7 af 8a 03 a0 39 c8 df 12 89 ed 69 47 ed ec 1c d0 aa bf 14 1e e6 e1 e8 e3 56 4b 2b 9d a2 db 4b b4 98 cb f7 1f 80 8d a0 47 ba 50 84 8f 73 a9 e0 9a 18 cd ff e3 ad 1f e6 9c d9 e1 90 f2 46 6c a2 22 f8 f2 e8 51 73 0c a2 cb 78 16 d8 2b 75 64 95 44 70 e6 a3 f5 86 b4 88 09 7b 12 8c 1c c7 c6 90 93 4a 6a 83 71 2b 15 89 c5 92 c4 3b 06 67 70 d7 cf 3f b9 3b 3b b6 d7 db ff f4 d9 61 9c 49 cb 98 87 9a 6f e4 b4 2a 88 c3 16 23 9c 9a 6f d7 ea 50 75 41 10 da df b6 ac aa c3 4c Data Ascii: nOdm5'g.J2@wIgK Us'"jzEgZqr}\|uVpF8_%69iGVK+KGPsFl"Qsx+udDp{Jjq+;gp?;;aIo*#oPuAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.17	49844	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-07-11 11:37:24 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MXKGpzF+w7wuE73&MD=+YFfDOv1 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-11 11:37:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f4d62ba1-3faf-4702-b49e-973059b14fb9 MS-RequestId: d07037f8-fb6d-46c7-990c-5eba82e38333 MS-CV: ykXdEokKEE6u2Zyt.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 11 Jul 2024 11:37:23 GMT Connection: close Content-Length: 30005
2024-07-11 11:37:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-07-11 11:37:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	07:36:32
Start date:	11/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	07:36:33
Start date:	11/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1884,i,6659997199172310811,18304377769233346356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	07:36:56
Start date:	11/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5580 --field-trial-handle=1884,i,6659997199172310811,18304377769233346356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	07:37:01
Start date:	11/07/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Imagebase:	0x7ff7c27c0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	07:37:15
Start date:	11/07/2024
Path:	C:\Program Files\7-Zip\7zG.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\" -an -ai#7zMap13162:70:7zEvent14778
Imagebase:	0xac0000
File size:	700'416 bytes
MD5 hash:	50F289DF0C19484E970849AAC4E6F977
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	07:37:20
Start date:	11/07/2024
Path:	C:\Users\user\Desktop\chrome.exe.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\chrome.exe.exe"
Imagebase:	0x7ff72dcc0000
File size:	3'679'232 bytes
MD5 hash:	B19E0418F436A10BFB7BEBA2008438E9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000013.00000000.1499192068.0000000000082000.00000002.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_DCRat_1, Description: Yara detected DCRat, Source: 00000013.00000002.1551997778.0000000012C48000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_zgRAT_1, Description: Yara detected zgRAT, Source: C:\Users\user\Desktop\chrome.exe.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\Desktop\chrome.exe.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	07:37:21
Start date:	11/07/2024
Path:	C:\Users\user\Desktop\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\chrome.exe"
Imagebase:	0x890000
File size:	4'608 bytes
MD5 hash:	1BE1CE6E2BA8D48D6B7723D1CEE60835
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	07:37:24
Start date:	11/07/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 11 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /f
Imagebase:	0x7ff6d3220000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	07:37:24
Start date:	11/07/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks.exe /create /tn "WmiPrvSE" /sc ONLOGON /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /rl HIGHEST /f
Imagebase:	0x7ff6d3220000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	07:37:24
Start date:	11/07/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks.exe /create /tn "WmiPrvSEW" /sc MINUTE /mo 13 /tr "'C:\Users\user\AppData\Local\WmiPrvSE.exe'" /rl HIGHEST /f
Imagebase:	0x7ff6d3220000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	07:37:24
Start date:	11/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat" "
Imagebase:	0x7ff79f390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	07:37:24
Start date:	11/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff772470000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	07:37:24
Start date:	11/07/2024
Path:	C:\Windows\System32\chcp.com
Wow64 process (32bit):	false
Commandline:	chcp 65001
Imagebase:	0x7ff63bff0000
File size:	14'848 bytes
MD5 hash:	33395C4732A49065EA72590B14B64F32
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	07:37:24
Start date:	11/07/2024
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	ping -n 10 localhost
Imagebase:	0x7ff724e30000
File size:	22'528 bytes
MD5 hash:	2F46799D79D22AC72C241EC0322B011D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	07:37:28
Start date:	11/07/2024
Path:	C:\Users\user\Desktop\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\chrome.exe"
Imagebase:	0xf40000
File size:	4'608 bytes
MD5 hash:	1BE1CE6E2BA8D48D6B7723D1CEE60835
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	07:37:29
Start date:	11/07/2024
Path:	C:\Windows\System32\OpenWith.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\OpenWith.exe -Embedding
Imagebase:	0x7ff6e3d70000
File size:	123'984 bytes
MD5 hash:	E4A834784FA08C17D47A1E72429C5109
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	07:37:31
Start date:	11/07/2024
Path:	C:\Users\user\Desktop\chrome.exe.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\chrome.exe.exe"
Imagebase:	0xa20000
File size:	3'679'232 bytes
MD5 hash:	B19E0418F436A10BFB7BEBA2008438E9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	07:37:34
Start date:	11/07/2024
Path:	C:\Users\user\AppData\Local\WmiPrvSE.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\WmiPrvSE.exe"
Imagebase:	0xf60000
File size:	3'679'232 bytes
MD5 hash:	B19E0418F436A10BFB7BEBA2008438E9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_zgRAT_1, Description: Yara detected zgRAT, Source: C:\Users\user\AppData\Local\WmiPrvSE.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\WmiPrvSE.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	5.1%
Dynamic/Decrypted Code Coverage:	58.3%
Signature Coverage:	0%
Total number of Nodes:	12
Total number of Limit Nodes:	0

Executed Functions

Function 00007FF9BB92FF00 Relevance: 1.7, APIs: 1, Instructions: 172
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ResumeThread.KERNEL32 ref: 00007FF9BB930001

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: fab21219be2269e9a33f531d9cab0defbe169e708872df6b409c07f5f2635ed9
Instruction ID: 746a96239ab91d8b70613df510755788e936a9a7bc5391781442ca017a3af5a8
Opcode Fuzzy Hash: fab21219be2269e9a33f531d9cab0defbe169e708872df6b409c07f5f2635ed9
Instruction Fuzzy Hash: 00516C7090C78C8FDB56DFA8C854BE9BFB0EF56310F1441ABD049DB292DA78A846CB11

Function 00007FF9BB930069 Relevance: 1.6, APIs: 1, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindCloseChangeNotification.KERNEL32 ref: 00007FF9BB930141

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 211e2d0e3c9b998c1a42bd2f524369621de71080df544ad4dd20cb98134f8995
Instruction ID: 9684ac3e81ea1e4831a3472295fba3224314a914d9cd529b3c875558c34d5f36
Opcode Fuzzy Hash: 211e2d0e3c9b998c1a42bd2f524369621de71080df544ad4dd20cb98134f8995
Instruction Fuzzy Hash: 09414A70D0865C8FDB59DFA8C885BEDBBF0FB5A310F1041AAD049E7292DA74A985CB41

Function 00007FF9BB92E75D Relevance: 1.6, APIs: 1, Instructions: 141
threadinjectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SuspendThread.KERNEL32 ref: 00007FF9BB92E831

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID: SuspendThread
String ID:
API String ID: 3178671153-0
Opcode ID: 11ee0e9d5b909686b04a38906ce2b0903f6caa84911bb1145883c0c377f99f0d
Instruction ID: a0a65460da6a46c667b1e48aa7de9765ca3897b42ed976b30743cd7c9c40db5a
Opcode Fuzzy Hash: 11ee0e9d5b909686b04a38906ce2b0903f6caa84911bb1145883c0c377f99f0d
Instruction Fuzzy Hash: EB413C70D08A5C8FDB58DFA8D885BADBBF0FB56310F10416AD049E7292DA70A446CF45

Function 00007FF9BB931D15 Relevance: 1.6, APIs: 1, Instructions: 133
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesW.KERNEL32 ref: 00007FF9BB931DE2

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 0d21461e776a2f7610376813afa1ccbfb28c279a755b1852fd36d0d8631ec3a3
Instruction ID: 3783d81653da4fa3a6403f786d6088cf4a22be63296aad6c4efb6dfd3a72534b
Opcode Fuzzy Hash: 0d21461e776a2f7610376813afa1ccbfb28c279a755b1852fd36d0d8631ec3a3
Instruction Fuzzy Hash: 0F41D770E08A5C8FDB98DF98D485BEDBBB0FB5A310F10416AD049E7252DA71A985CB41

Function 00007FF9BBE5AF58 Relevance: 1.4, Strings: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

, xrefs: 00007FF9BBE5AFC2

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: cb5baf8b2830be18f277a8050aaa824f273713a7e9214f170bfd580b4c31a29b
Instruction ID: 1e57af0fc11c578205ee4f660425e8ea039aaf0bc248ece378e2a23e80522fc5
Opcode Fuzzy Hash: cb5baf8b2830be18f277a8050aaa824f273713a7e9214f170bfd580b4c31a29b
Instruction Fuzzy Hash: 8D515E71D0854A8FEB59DF98D8916BDBBB1FF54300F1040BAD10AE72E2DA786A45CB90

Function 00007FF9BB77A523 Relevance: 1.3, Strings: 1, Instructions: 52
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

/, xrefs: 00007FF9BB773C43

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID: /
API String ID: 0-2043925204
Opcode ID: c35b443366a7305ed16328e851b6c981989946d1850ca2ffdda7fab7b3e0c8db
Instruction ID: 5a37edaf820e20bdd578fa52e36e3661b32e334ee55edf7e3b6869b58988c491
Opcode Fuzzy Hash: c35b443366a7305ed16328e851b6c981989946d1850ca2ffdda7fab7b3e0c8db
Instruction Fuzzy Hash: 3D211D719056698FEBA0DF18CD887A9B3F1FB54311F1002E9C109E36E2DB742A85CF44

Function 00007FF9BBE50101 Relevance: .4, Instructions: 400
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 352d409a1fb7b0c33eb5f43fc5f612bd6d036fa39483f4c37389a64651da2701
Instruction ID: 33a3be2b237e1ea273baef9095fe2e192100301ca1cbd3e9c4dc73c78a044edc
Opcode Fuzzy Hash: 352d409a1fb7b0c33eb5f43fc5f612bd6d036fa39483f4c37389a64651da2701
Instruction Fuzzy Hash: 0CD1ED3090DB068FE36ADF28D49167577E1FF44314B1445BEE28AC36F3DAA9B9428781

Function 00007FF9BBE57400 Relevance: .4, Instructions: 363
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1fdbc4170f70fedfd236aa6f70dc5306609eab40b79c494f415bf1dbcd1e9cf5
Instruction ID: 9b1124a55506ec5548661034b69c0abe8ef20956f5bd3a5458879c1832e46464
Opcode Fuzzy Hash: 1fdbc4170f70fedfd236aa6f70dc5306609eab40b79c494f415bf1dbcd1e9cf5
Instruction Fuzzy Hash: 2AC17430618A1D8FDB89DF1CC499AB9B3E2FF59314B5041A9D04ED72A2DA34FD52CB80

Function 00007FF9BBE5B1BF Relevance: .4, Instructions: 358
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16a91a249cd578bceed602903e5d776bb257eda5084d437fa5f62ce9b31a78e3
Instruction ID: 1806329df09173a025756405407cab561d76d84d1c5a0dcab3560819212a7c1c
Opcode Fuzzy Hash: 16a91a249cd578bceed602903e5d776bb257eda5084d437fa5f62ce9b31a78e3
Instruction Fuzzy Hash: FED17F305186568FEB4ACF18C0D06B937A1FF45311B5445BDD94BCB6AADB78F982CB80

Function 00007FF9BBE58B88 Relevance: .3, Instructions: 334
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2734a70bf9cd6e6833131fbfeb95d75bfad0fd043eec93917c87f208f90d0332
Instruction ID: 9cb728b9cee590c0c36e600f450ccc617f7c343fc7f02bd4cb88c7f410961dd2
Opcode Fuzzy Hash: 2734a70bf9cd6e6833131fbfeb95d75bfad0fd043eec93917c87f208f90d0332
Instruction Fuzzy Hash: 8FA1DE61A09E4A4FE7D6EB2C485877427E2FF99310B4940FAD14DCB2F2DD18AD45C781

Function 00007FF9BBE58238 Relevance: .3, Instructions: 322
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acc413d448abdf318cd7a6d1cdd8ad247642521a43c0cfd9aeb8f5c4e6462874
Instruction ID: 3790d8d51fd9790358358b9af1536c54c5499f37f5cd32094f175882a54f37eb
Opcode Fuzzy Hash: acc413d448abdf318cd7a6d1cdd8ad247642521a43c0cfd9aeb8f5c4e6462874
Instruction Fuzzy Hash: 2A319E31E0CA1ACEE766EF5894513B8B6A1BF45314F54407ADA0EC61F2DEAD7A04CA81

Function 00007FF9BBE5DBA7 Relevance: .3, Instructions: 314
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79e5577eee44daf99c24146c658e456ba0dcc99d3ac3be300f66144a9a11593a
Instruction ID: fb40365f629e908725ec8653c9803becc0134d9c2df0e499440e51fcbf5c49f5
Opcode Fuzzy Hash: 79e5577eee44daf99c24146c658e456ba0dcc99d3ac3be300f66144a9a11593a
Instruction Fuzzy Hash: E931F322C1C65796E222FF6CA5116F8A740BF11720F5484BBD14EC71E3EC9CB9819AC9

Function 00007FF9BB770DA4 Relevance: .3, Instructions: 309
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8965565211ce981716b9579bfe8e2a8c6b4eea9b13733ff2da795070412ac8c
Instruction ID: 46792ae2786c70a2d410ef79d0de2f083411ad0f650cfb8f0abb041fb1418079
Opcode Fuzzy Hash: f8965565211ce981716b9579bfe8e2a8c6b4eea9b13733ff2da795070412ac8c
Instruction Fuzzy Hash: 60B191B1918A8A8FE748EB5CC8557B97BF1FB96310F0401BAD00DD76E6DBB82915C780

Function 00007FF9BBE5DB8F Relevance: .3, Instructions: 305
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f92872717e7943c49a727d050eb74a736c8ba6001378254e383968f8c76902c
Instruction ID: d636d7bb640d00e33634c8bc0828df1106277d39b07abce25f0336dc91cd922c
Opcode Fuzzy Hash: 5f92872717e7943c49a727d050eb74a736c8ba6001378254e383968f8c76902c
Instruction Fuzzy Hash: 4A21D612D0D55786F276EE6C2811BBC6640BF25720F1480BAD64EC61F2DCCCBA8197D1

Function 00007FF9BBE5DBF7 Relevance: .3, Instructions: 295
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ea599e61b675ded17c29eab55793b1081c2d961207f3bb828d4b7029d54e69f
Instruction ID: db1d999014d7e57c15c267dd4d0dd917ad8e0671b0139776ec456e2e8868b75c
Opcode Fuzzy Hash: 2ea599e61b675ded17c29eab55793b1081c2d961207f3bb828d4b7029d54e69f
Instruction Fuzzy Hash: 0021C512D0D5978AF266EB6C3552AF85640BF21620F1480BBD24EC71F2DC8CBA8597DA

Function 00007FF9BBE5F746 Relevance: .3, Instructions: 261COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b333ce31fe965911b86d2abe044166690d1ed827c6d6e78c026f3a97344a689
Instruction ID: b706f105dba4b383e1b289c18ea936d5a23391635bec69ce2427e49ee779ef58
Opcode Fuzzy Hash: 4b333ce31fe965911b86d2abe044166690d1ed827c6d6e78c026f3a97344a689
Instruction Fuzzy Hash: 1181583191CA024BE729DE5C94552B977E4FF45310F14017ED98EC72F2DE68B90287C1

Function 00007FF9BBE59FB6 Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15feb4265cc18f920fcc27a4bc8da0d43a980c83be2dae0bb0ae74c175b67e5f
Instruction ID: e9b3bf62ae12110e74da28dbb82802131a9b5dea19b0694ac9e402ea6311c3a3
Opcode Fuzzy Hash: 15feb4265cc18f920fcc27a4bc8da0d43a980c83be2dae0bb0ae74c175b67e5f
Instruction Fuzzy Hash: 7571003191CA468BE72AEE1C98452B577E1FF49310B10547FD68EC31F2DE68BA02C791

Function 00007FF9BBE5D8A9 Relevance: .3, Instructions: 252COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa36a3b702db0fb3856d08294b2a81fa187c76d9583da814d2dfe06299f41f2c
Instruction ID: 447307a5c7c59143bec6f28391bcab85ead6ae8af7ebe970099b56b22cd68871
Opcode Fuzzy Hash: aa36a3b702db0fb3856d08294b2a81fa187c76d9583da814d2dfe06299f41f2c
Instruction Fuzzy Hash: A5712A3190C9494FE76AEE1C8846BB577D0FF48310B1482B9D55EC75F2DE98BA0A87C1

Function 00007FF9BBE57ED7 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f71f4eeb8e40aa32ad217b8153fe8cb7e80e244876e13ade6c922462a61e94f
Instruction ID: 8550eab97180c9c32b29c1a12fff8adb8fe13f8faf2aea81b7d30372381156e9
Opcode Fuzzy Hash: 8f71f4eeb8e40aa32ad217b8153fe8cb7e80e244876e13ade6c922462a61e94f
Instruction Fuzzy Hash: B271D23190C8494FE769EE1C8C566B937C0FF48310B1402B9D65EC75F2DE68BA16C6E1

Function 00007FF9BBE5C201 Relevance: .2, Instructions: 222COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d276a754ed2df980b8283bc6b6c748fa46ce5c5dd96ce5176ff992ee9b6ff05e
Instruction ID: 5e5f0f5d278a4e5f56ebaee542df19e4bd46a4bc9605dff79bbe101c3cf4a43c
Opcode Fuzzy Hash: d276a754ed2df980b8283bc6b6c748fa46ce5c5dd96ce5176ff992ee9b6ff05e
Instruction Fuzzy Hash: 7E819E3091CB468FE366DF18D5A577177A1FF04304B5055BAC58AC7AF2CAE9B942CB80

Function 00007FF9BBE5B21B Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b26b829387aca7b0f35921fea3ed5e35b9464905e40603eb0247be321229bf8d
Instruction ID: 9631c10183cd42e3bf9bbe6876253a368dd2365e02a5443400fe3090b02e4706
Opcode Fuzzy Hash: b26b829387aca7b0f35921fea3ed5e35b9464905e40603eb0247be321229bf8d
Instruction Fuzzy Hash: 32818170518A458FEB0DCF18D0D06B537A1FF49315B5041BDDA4ACB6AADB78F992CB80

Function 00007FF9BBE5E46B Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4983d4215615f1514de1fddf50f6824e9158a34dec6cf9f9810cf4b63089781f
Instruction ID: c8cbe37c5115adca235ee7f327d0c4eb5481a6fcf4b9b534150cd5b4983b9efe
Opcode Fuzzy Hash: 4983d4215615f1514de1fddf50f6824e9158a34dec6cf9f9810cf4b63089781f
Instruction Fuzzy Hash: 0E71C23091CA4A8EEB5ADF6888547B97BA1FF45340F1405BAD10ED71F2EEA87A41C781

Function 00007FF9BBE5ABC7 Relevance: .2, Instructions: 211COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5558994482a6c138f5ec96e28037821faf03380b8a34b4b289685eeab02768f4
Instruction ID: cb837f2935e2227f2069f4eb31923b219ceca6a1a5b37262040e5a645d39e598
Opcode Fuzzy Hash: 5558994482a6c138f5ec96e28037821faf03380b8a34b4b289685eeab02768f4
Instruction Fuzzy Hash: AA71027050CA868FE74AEF28D4906A4BBA0FF15310F5451BAC04EC7AE7DB68B951CBD0

Function 00007FF9BB7708E8 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45b8c542e29ab6be25cb73aa339241e0ac617b74edc3d0859bec02cbe6eb30f4
Instruction ID: 3d9bbdad7e65c1a39f6ec2658b9d05b05a2c4445570fefc86c7b10806332caae
Opcode Fuzzy Hash: 45b8c542e29ab6be25cb73aa339241e0ac617b74edc3d0859bec02cbe6eb30f4
Instruction Fuzzy Hash: D0714D31A0861D9FCF44EF6CD484AEDBBF1FF59324B1541A6E449E72A2DA34E940CB84

Function 00007FF9BBE571EB Relevance: .2, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cc437858ca158777b2bcb417de9bbcc23ae5f72212a8b5bdae6140382d3fa82
Instruction ID: 068b76d4fdde798a7b03eccd1e818101a3282a2d3e0a0209899d4cdccf8eb3e1
Opcode Fuzzy Hash: 7cc437858ca158777b2bcb417de9bbcc23ae5f72212a8b5bdae6140382d3fa82
Instruction Fuzzy Hash: A951A070918A4E8EEB96DF6884546BC7BB1FF55300F5404BAD10EE71F2EE787A518B80

Function 00007FF9BBE5D4DD Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 839eac699aa7a53cec7d9a6bebf1a7fa3322a20f53c919921aab89e00298c3b9
Instruction ID: d3051db109887c2aa1fe366fe31e5f333a6ed02e6f2c85046ea2e87b9b83ff5e
Opcode Fuzzy Hash: 839eac699aa7a53cec7d9a6bebf1a7fa3322a20f53c919921aab89e00298c3b9
Instruction Fuzzy Hash: 3B419221D0DA9A9FD701FB6CE8619EDBBA0EF06328F1440B7E00DDB1E3DD1869458799

Function 00007FF9BB770942 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b4509a84b44187fe30fa684b239dff7ae6c870933e3da312d45ff458c10ffda
Instruction ID: 352eaae56da406b623b3e4157115a5acf382554e7b6a0a2f22f66881d8348d15
Opcode Fuzzy Hash: 3b4509a84b44187fe30fa684b239dff7ae6c870933e3da312d45ff458c10ffda
Instruction Fuzzy Hash: 54518B71908A5D9FDB44EFA8E4846ECBBA1FF99325F10017AD00DE3292DE346881CB84

Function 00007FF9BB770960 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ba11cd3b61c58b723c3d701b75f617eeb7442e32fa6b9d337a86c9dd279b13b
Instruction ID: d595344df1537776f24c13421ae7d7f4183a543b4d7ac070341f7c01eb2f3952
Opcode Fuzzy Hash: 2ba11cd3b61c58b723c3d701b75f617eeb7442e32fa6b9d337a86c9dd279b13b
Instruction Fuzzy Hash: 5D418B71918A5D9FEB44EFA8D485AECBBE1FF58325F10017AD00DE3292CE346881CB84

Function 00007FF9BBE5CCB0 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e22acd6dafee5167bf418519c4f90b08320f24816eca6e067d4284dc6a09a3ea
Instruction ID: 33faa2be720084706cd739c6e41bff1aeaad0be37638ed054e4f7e2c718f73e4
Opcode Fuzzy Hash: e22acd6dafee5167bf418519c4f90b08320f24816eca6e067d4284dc6a09a3ea
Instruction Fuzzy Hash: 4541DF32A18D4A8BF755EB6840557FA77A2FF85340F00417AD54EDB2E2DEB879028BC0

Function 00007FF9BBE57B5C Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ebbbba2d7abc464fc16b07999f9907c1a3e102258190b993a0e8f3e80573aa3
Instruction ID: 0ae6ea2606bb8442148368c5cbaed6cef11e7eb9f7f4f5a29dc8df58ec825744
Opcode Fuzzy Hash: 8ebbbba2d7abc464fc16b07999f9907c1a3e102258190b993a0e8f3e80573aa3
Instruction Fuzzy Hash: E041C43184E2C94FE743D72898556E93FA1FB83324F0841FAD189DA0B3D6996626C792

Function 00007FF9BBE5C7B7 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a79b32f6c02725a5822090bc68eaf69c871d2d9d5df83bc5ec0d0b63c1d1e84
Instruction ID: 1477d1600ef9df67c953f8f376603b6a833c1435e7274f4386fe9d44a8d9e4f4
Opcode Fuzzy Hash: 1a79b32f6c02725a5822090bc68eaf69c871d2d9d5df83bc5ec0d0b63c1d1e84
Instruction Fuzzy Hash: 8841523160C9188FDF89FF58D469EA4B7E1FBA932470401AAD04EC76A2DE24FD45CB81

Function 00007FF9BBE50727 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ee36766fa7cee935bef8c6c70e9eb4a74c47c9daefd196f937aa7fdf283a826
Instruction ID: e9a7107da536a54305183313591f3146e0eb27248e0c530a4e6c6e9f1419f9d6
Opcode Fuzzy Hash: 9ee36766fa7cee935bef8c6c70e9eb4a74c47c9daefd196f937aa7fdf283a826
Instruction Fuzzy Hash: AF414232A0C9188FDF59FF28D496EA5B7E1FBA9324704016AD14EC31A2DE25FC55CB81

Function 00007FF9BBE5B550 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f09dc0c59cdc1e6488c1f04f0df3a856ae0305d1a69e32599a54961bfc11d9c
Instruction ID: 06dfe9be8c02f8e199e69603039b311a0f2762baa1948e6d4073bf47dc68986d
Opcode Fuzzy Hash: 3f09dc0c59cdc1e6488c1f04f0df3a856ae0305d1a69e32599a54961bfc11d9c
Instruction Fuzzy Hash: 21418930D086598FEB9ADF2884647AC7BB1FF59300F1040BAD10DD32E2DEB86A448B81

Function 00007FF9BBE5C861 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a7ffa5c1f7c1829c476788cfc02361f6274c776d536cd3c8c21011b08e03a7c
Instruction ID: 567ed9a6fc159684141c2d764451038827560540a179fdbb96bcbbc994f1b7dd
Opcode Fuzzy Hash: 0a7ffa5c1f7c1829c476788cfc02361f6274c776d536cd3c8c21011b08e03a7c
Instruction Fuzzy Hash: 6131533160CA188FDF89FF18D469EA4B7E1FBA931470401AAD04EC76A2DE24FD45CB91

Function 00007FF9BBE507D1 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8212c309cb07e5ef689a38813ba235e1220ec4f1a915131a6cd22a0f8c30140
Instruction ID: bc441be05b39be1914e2cff79640f08b0d2cd9f81809e7d555aafd217216cdb5
Opcode Fuzzy Hash: a8212c309cb07e5ef689a38813ba235e1220ec4f1a915131a6cd22a0f8c30140
Instruction Fuzzy Hash: CB314232A0CA188FDB59FF28C495EA4B7E1FB6931470402AED04EC71A2DE25FC55CB91

Function 00007FF9BBE5C7FB Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db5f8895a931243bcc53043132da72363d70c9ffaebbaade86d621b8d8344e8d
Instruction ID: 3f48ae266fcfb2fa3f3eeed21b6d7ba3fe1418370b504e85a8508e6a0c290fb4
Opcode Fuzzy Hash: db5f8895a931243bcc53043132da72363d70c9ffaebbaade86d621b8d8344e8d
Instruction Fuzzy Hash: 5131543160C9198FDF89FF58D469EA4B7E2FBA931470401AAD04EC76A2DE24FD45CB81

Function 00007FF9BBE5076B Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7fa2b912d770f8863c2105685b005b07ec8d29ad5fe6ff6455004b8fb100721
Instruction ID: 8dd65a8c3b6689d74cc4f6149e4301831e9d60d02e4775ac031d786916ed2266
Opcode Fuzzy Hash: c7fa2b912d770f8863c2105685b005b07ec8d29ad5fe6ff6455004b8fb100721
Instruction Fuzzy Hash: C331433260C9198FDB59FF28D095EA4B7E1FB6931470401AED04EC71A2DE25FC55CB81

Function 00007FF9BB770998 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21e850c02960f59e58cb93249370819fe5beba2a3a607e63e97dd586e49462a4
Instruction ID: 1fddcc8c00b90d1b715e6c0eb8d80cd355b2e1f397820fd1dad8d81045226c51
Opcode Fuzzy Hash: 21e850c02960f59e58cb93249370819fe5beba2a3a607e63e97dd586e49462a4
Instruction Fuzzy Hash: E341287091495D8FDF84EF98C494AEDBBF1FF98315F10016AD40DE36A1CA74A981CB80

Function 00007FF9BBE58A6A Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f51a4271af390d68c6c478507aa18f09d145cbf3a4f302a47a00758e01b0015d
Instruction ID: 24e31ae363d6d18c1670a4cc452526b27ffff3bd8e40c602d52555a56c9bd346
Opcode Fuzzy Hash: f51a4271af390d68c6c478507aa18f09d145cbf3a4f302a47a00758e01b0015d
Instruction Fuzzy Hash: 1B21A51195DAC60FE7579B2818256A53FA2EF97210B0941F7D588C71F3DD4CA9058391

Function 00007FF9BBE678AD Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1903851d5c98ce33261dcf3d00615d20576baca316b6dcfbf61b2f92f5b1512f
Instruction ID: 82cf92bf190ac7dce748cdbf80ffa0710e23c824aea00c9ca855fb6478be73c9
Opcode Fuzzy Hash: 1903851d5c98ce33261dcf3d00615d20576baca316b6dcfbf61b2f92f5b1512f
Instruction Fuzzy Hash: E4313E3160CA188FDF89FF18C499EA5B7E2FB6931070441AAD04EC7292DE34E845CB81

Function 00007FF9BBE57B9A Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e218e2f78a4d7cb6f89a336fd88d8fba51e28f4a30a51e049fd504ed26bb757
Instruction ID: cf75ce557dd6263df3a03eff82688fbf4844b56cf97b1a5cf196d37d9ce616ce
Opcode Fuzzy Hash: 1e218e2f78a4d7cb6f89a336fd88d8fba51e28f4a30a51e049fd504ed26bb757
Instruction Fuzzy Hash: 0E31932084E3C54FE743D73898587A93FA1BF43324F1800EAE1C5DA4F3D6991625C792

Function 00007FF9BBE50535 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83b3cec278d9edf351468442c8c2c29b5878de5d8bc5c29a1c42dea135a2bd07
Instruction ID: 324c2127633e17a02d2f15028a53d2fbfd93b6af1be86ccdeb42b9ab4b487204
Opcode Fuzzy Hash: 83b3cec278d9edf351468442c8c2c29b5878de5d8bc5c29a1c42dea135a2bd07
Instruction Fuzzy Hash: F5310A30D1890ECFEBAADF5884556BD77A1FF48300F54017AE20ED65F2DAB87A509B81

Function 00007FF9BBE599BB Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db5d909bccd27238a51220d311cd6e6d1087d5f95a41c99ee0a8a8413ce55fb2
Instruction ID: eb23528d57af3d391cbc4050a4993920fcf6b99d46a96a41bce7fbd97325f8d4
Opcode Fuzzy Hash: db5d909bccd27238a51220d311cd6e6d1087d5f95a41c99ee0a8a8413ce55fb2
Instruction Fuzzy Hash: 2F312A71A18A1A8FDB59EF5CD491AA8B7A2FF58750B504139D10ED36E2CF24BD12CBC0

Function 00007FF9BBE5F679 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90addf16f0e71207bc9c55ddecbcba396a4ba286c06feb47891be97dafcb0e48
Instruction ID: 816824bb42857507165dd6e9a32c21c771670d7022b73c2a2b0e0f5a5e226f67
Opcode Fuzzy Hash: 90addf16f0e71207bc9c55ddecbcba396a4ba286c06feb47891be97dafcb0e48
Instruction Fuzzy Hash: FE21374291DAC64FE742EB6C48686A27BE0FF56264B0445FBD489CB1F3EE987805C3C1

Function 00007FF9BB772ECC Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5db67f8b185168e0afeadf80870bd5ddeeca549dd98a5385122c74371ce599ed
Instruction ID: 8e3a90ece2e49a1a43e211ac9105073951a7df6e3f9fef2abca045cdd1dd6c13
Opcode Fuzzy Hash: 5db67f8b185168e0afeadf80870bd5ddeeca549dd98a5385122c74371ce599ed
Instruction Fuzzy Hash: AA317B7090491C8FDFA8DF14C895AE9B7F1FBA8305F1042EAD00DE36A1DA766A95CF40

Function 00007FF9BBE5C635 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4730512d9599deda525c88fbbdfc3783821bf9a3c43149815c212cf62be6a4fe
Instruction ID: a1fbd56d157e67fd4902b08277a7938eb49a93eee7e76e652ef88cab916e3484
Opcode Fuzzy Hash: 4730512d9599deda525c88fbbdfc3783821bf9a3c43149815c212cf62be6a4fe
Instruction Fuzzy Hash: FA31F530A1850A8FDB9ADF5884656BD7BB0FF44700F50117AD60ED26F1DAE8BB409B82

Function 00007FF9BBE5F191 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86691fd1210210471af1b924bf28688787f515c5ed2fd358796755fff2e86bbd
Instruction ID: 491992726c9edd1bdf7aded8427f6f7f047fee678baf7ca48eebbc3b83d39cda
Opcode Fuzzy Hash: 86691fd1210210471af1b924bf28688787f515c5ed2fd358796755fff2e86bbd
Instruction Fuzzy Hash: 29219F31E289198BDB44EF1CD591AA9B3A2FF88350B004179C54ED72E2CF64BC12CBC0

Function 00007FF9BBE58988 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90c8441ad2845b28ace2e51197ae734a36f0cc2c7365eedbbe9117efe00dd216
Instruction ID: a5d4da72dda08a4ba270c3022b2a807b33909738d8b89d5fce56e4e001f86bb3
Opcode Fuzzy Hash: 90c8441ad2845b28ace2e51197ae734a36f0cc2c7365eedbbe9117efe00dd216
Instruction Fuzzy Hash: 2C312970D1891E8AEB95DF8CC4416BDBBB1FF98310F604176D10EE22E2DE687942DB81

Function 00007FF9BBE59412 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 964431e330189ce22aeb6baff2b12b4f6ecafd38a2d5ce7496bf19c650fe17a8
Instruction ID: 37e6a380aba61477000d8c8ad621f7592656a4612e1b5455314f19aea4180661
Opcode Fuzzy Hash: 964431e330189ce22aeb6baff2b12b4f6ecafd38a2d5ce7496bf19c650fe17a8
Instruction Fuzzy Hash: 7531E734A0891D9FDF99DF58C495AEDB7B2FB58310F0041AED04EE76A1CA75AE418B40

Function 00007FF9BBE5E0E2 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbd6b1a8d2e89b92cdf266ecbecd8a3c53f9f6c3234e76721759ae762f8da886
Instruction ID: 86feda8e7bb8d9495b6df12f4050989e1b330eac1d94a1fd72f234e3e61da84d
Opcode Fuzzy Hash: cbd6b1a8d2e89b92cdf266ecbecd8a3c53f9f6c3234e76721759ae762f8da886
Instruction Fuzzy Hash: E421E731E1891D9FDF99DF58C495AA9B7B2FF58300F0041AAD00EE32A1DA74AA40CB80

Function 00007FF9BB770C0D Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b3772b91506ac284286f74ce93a13274f86590f7db41f803799adef630ed2c1
Instruction ID: 9d2bcdf283a110410a95d38a9ed355dc2c40c0da653508cd5cefcac625fea455
Opcode Fuzzy Hash: 2b3772b91506ac284286f74ce93a13274f86590f7db41f803799adef630ed2c1
Instruction Fuzzy Hash: EA21E27291D64A8EE701EB69C8492F97BA0FF42311F0446B3D109C61F2CEB83619CB81

Function 00007FF9BBE59058 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 844ef1d5257f3465dc1d1a3fbb4e098dd9babe6d8a69125467cbfbe5a0fc71ae
Instruction ID: ffc6f3b5b0aaffcbf68f7514fadbe3d24f7186d28e55676ff8fcf6727ff0da94
Opcode Fuzzy Hash: 844ef1d5257f3465dc1d1a3fbb4e098dd9babe6d8a69125467cbfbe5a0fc71ae
Instruction Fuzzy Hash: A1216D34E1891E8FDB95DF58D860AFDBBB1FF88300F500479D10AE32E1DA75A9558B90

Function 00007FF9BBE5F245 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c46043431b3849e22d82ea76d0b639022e2407abecda7455f83bddd5e9161f8
Instruction ID: 55902d08494d0c2429d2b6240458a8bdc576fa28d8a50bd89e70855c7a2860e7
Opcode Fuzzy Hash: 1c46043431b3849e22d82ea76d0b639022e2407abecda7455f83bddd5e9161f8
Instruction Fuzzy Hash: 6811CD71E09A498FEB45EFA8A8553EC77A0FF49310F1401BAC54AC32E2CE686802C781

Function 00007FF9BB770C25 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27471fe7e8177272498b4481eeb873d737d5c6d69295f6ddb693d32cee691878
Instruction ID: 285b1f84597e8242cadca2b780375bbc5a5c0bd0ec5eaf014b3384200c3625fe
Opcode Fuzzy Hash: 27471fe7e8177272498b4481eeb873d737d5c6d69295f6ddb693d32cee691878
Instruction Fuzzy Hash: 3511367690E6DA8FE302EB78CC952E97BA0EF02310F0945B7D441DB1E3CA78254ACB55

Function 00007FF9BBE59A9F Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df139125f81f928acef1037be9f4909bd6a9457efa93597bf3cc6d76248bc0db
Instruction ID: bae8f9bd7023a59f5109a3b52b31fe8ff848a19b120de91fb3370dcaf43e658c
Opcode Fuzzy Hash: df139125f81f928acef1037be9f4909bd6a9457efa93597bf3cc6d76248bc0db
Instruction Fuzzy Hash: 8B119A75A18A494FEB99EF6C98523E8B7A1FF59310F4401B9D249D32E2DA68A8018790

Function 00007FF9BBE59111 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bad377ba4098c9ab478e6b4fce37a7d4dcbcb2cfe80436a6eb65332fa63dfd56
Instruction ID: 6cc0f840c16eb2c4427e3fa112ec1517edeb35532959e5aaba2cb8193d943689
Opcode Fuzzy Hash: bad377ba4098c9ab478e6b4fce37a7d4dcbcb2cfe80436a6eb65332fa63dfd56
Instruction Fuzzy Hash: 8011B229D0D1A386F627DE9C2B196FD2521BF85750F1A01BAD60ECA1F6CC8C3A4513D2

Function 00007FF9BBE53908 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a08fcf7e908ba32281aa764bd2d4f9e7589fc8e3e663d827431ca2c765758765
Instruction ID: 0cdca57c20f005a5af711450ba6a31287acfe4a59abcb9fcb32055a427c6da1e
Opcode Fuzzy Hash: a08fcf7e908ba32281aa764bd2d4f9e7589fc8e3e663d827431ca2c765758765
Instruction Fuzzy Hash: 8211E036A09A4E4BFBA6D95C94442FD7796EF45350F00013AD28ED31F2EE99391992C1

Function 00007FF9BB770B95 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3a53b76b7f3f04239e2232283368eeeb091e36020ac64d139bd5c777ab88574
Instruction ID: 1adb8e360557e550f8a9561e7a5b9bb21d8d3856f52b92e8b16195aa70400923
Opcode Fuzzy Hash: a3a53b76b7f3f04239e2232283368eeeb091e36020ac64d139bd5c777ab88574
Instruction Fuzzy Hash: B511593092864ECFDB40EF6CD8866E937E4FF59314F040566E85DC35A1DB74A664CB81

Function 00007FF9BBE5A5D0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc5ab304ce321e6763694475d9aef5d45f190cc14b555081d6f62dc941d7cb33
Instruction ID: 6f68116bf662cc778659010c3dcea3420862b7c067a97369c20ad5131d0f761b
Opcode Fuzzy Hash: cc5ab304ce321e6763694475d9aef5d45f190cc14b555081d6f62dc941d7cb33
Instruction Fuzzy Hash: D1110220A2CD4A8ADB51EF28D4506F977A1FF88314B40027AD68EC35E2DE28F90683C0

Function 00007FF9BBE5FD70 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c9a68b9e9a08da16746b72c1769e9a60dfd95ae892777bb1c30fd65421d9ef7
Instruction ID: 11b4e7ae43d57f86099c9f56cb4b3c18aca2a78a4fe71acbcd874ce76467bd50
Opcode Fuzzy Hash: 1c9a68b9e9a08da16746b72c1769e9a60dfd95ae892777bb1c30fd65421d9ef7
Instruction Fuzzy Hash: F0110E21A28E894ADB51EF2898607FA7390FF85310B0005BAD58EC31E2CE68B609C3C0

Function 00007FF9BBE5F089 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e7780fe6ec8a72df28e98c2158d8f1b1362fbb1e2a818b82cc854f451431cec
Instruction ID: fb6becb35c3e3d04d5d966bf5e706c59a2d5947c1f948f27958cf35aa25b035d
Opcode Fuzzy Hash: 1e7780fe6ec8a72df28e98c2158d8f1b1362fbb1e2a818b82cc854f451431cec
Instruction Fuzzy Hash: 0501263190DA8D0FE362DA6888193EA3BE5FF45340F04017AE50AEB1F1DDA86902C3E1

Function 00007FF9BBE5FBEE Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aefd6903cd087899fec4d501158e8fadfdeb34d42353996142fcb63cba3f8ded
Instruction ID: 7763814baa05f84fb7035c56e361d9d9bd79388f7b799e07f5d465be7291a943
Opcode Fuzzy Hash: aefd6903cd087899fec4d501158e8fadfdeb34d42353996142fcb63cba3f8ded
Instruction Fuzzy Hash: D001453131868A8BDB06DF5CD8A43E83390FB95314F24017FDA49C32E1CA6AA651C7C0

Function 00007FF9BBE5A44E Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afe496656c832bd469ac23cac59d902fe84d74e54a74a1e69b938d12ef35e17e
Instruction ID: d2d5625322496a68bb8cde3a898bced9324d0b7c9a20898d1fa5a9a4c9979798
Opcode Fuzzy Hash: afe496656c832bd469ac23cac59d902fe84d74e54a74a1e69b938d12ef35e17e
Instruction Fuzzy Hash: 6D01453121CA8A4FDB16DF1CD8647F83780EB4A314F1402AFDA99C36F1DA6AA545C380

Function 00007FF9BB770C48 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a1038a582e99f9b42374acd6053633f2d6781d898b8cd926b4391177e86f670
Instruction ID: 94864beb1fec65e49feeb97cf4e42ff3e382378ba6f3f82831dc8fbe073bc27e
Opcode Fuzzy Hash: 2a1038a582e99f9b42374acd6053633f2d6781d898b8cd926b4391177e86f670
Instruction Fuzzy Hash: 2211A17290D68A8FE702EB68C8542E97BA0EF42311F0585B6D105DB1E3CAB83605CB45

Function 00007FF9BB770C50 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e0a99cc0460aa915617dea8a1dcb6a9d02c44391642572c30d401477c076fc1
Instruction ID: 28395a36c69a8020b6a98269e0f0ff8af8828b8055537ea1d880794f469c2d70
Opcode Fuzzy Hash: 5e0a99cc0460aa915617dea8a1dcb6a9d02c44391642572c30d401477c076fc1
Instruction Fuzzy Hash: 9E018C7190D6868EE702EB68C8582EA7BA0EF02310F0585B6D505DA2E3CAB83A05CB45

Function 00007FF9BBE5E3F2 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5f087bba667b43c0a9297683dc9ed7f9ae88adc2e64306f4e521a3ffdead43b
Instruction ID: 6412528ab45b4cb0c45e51763c2244404d5eddbcbbfc7259995b1d0198fbc1d3
Opcode Fuzzy Hash: a5f087bba667b43c0a9297683dc9ed7f9ae88adc2e64306f4e521a3ffdead43b
Instruction Fuzzy Hash: 0FF0623184E2C59FD703DF7488556A97FA4BF42204F1841F6E645CB0F2C56D3656C791

Function 00007FF9BB7706A5 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cf57e7f17f5be822e477d38590a879c26a0f4323d4ae8f776dc403a9c984d9c
Instruction ID: 1f8c644b2cd69f6b6695d9f69685355d649014cce3f20ab6a2e09c09151a0160
Opcode Fuzzy Hash: 5cf57e7f17f5be822e477d38590a879c26a0f4323d4ae8f776dc403a9c984d9c
Instruction Fuzzy Hash: 68F01D31918A0D9EEB40EF1D98896EE77E0FF58310F114436E90CC25F1DAB576A48B80

Function 00007FF9BB771388 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9800b140b9cfc40e1fc529d59c8fc78fcb7db0c068829c61d88c465e490d877b
Instruction ID: b81a5d6e1583a8b90ca8a5d0c88c98a61fc66e43c2dfef7d6eeb333069018e0a
Opcode Fuzzy Hash: 9800b140b9cfc40e1fc529d59c8fc78fcb7db0c068829c61d88c465e490d877b
Instruction Fuzzy Hash: EAF0977091494D9FDB84EF58C889AAA7BE0FF28304F514466E819C32A0D670E6A4CB80

Function 00007FF9BB7706C8 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0787cf333eccb0ebf40d551d738e89bb0202d4f49da9d969edd914a62440aec
Instruction ID: 10a6702fd3613b32b80dfe355c169678a2bc1fb3170576a4be15a10130d7bbf0
Opcode Fuzzy Hash: e0787cf333eccb0ebf40d551d738e89bb0202d4f49da9d969edd914a62440aec
Instruction Fuzzy Hash: 8CF0123081494D9FEB80EF6C98897EA77E0FF18314F114476E90CD25A1DB70A6A4CB80

Function 00007FF9BB770B18 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bfa7aaa724088414a41ea4ea82f8041dd9c339662ab289fd2b9fe07e76a7d6a9
Instruction ID: 90e610a72de74b192d72e7f7eed0be00123276426211e75d1557b15c403d9279
Opcode Fuzzy Hash: bfa7aaa724088414a41ea4ea82f8041dd9c339662ab289fd2b9fe07e76a7d6a9
Instruction Fuzzy Hash: 18F01530508A0E8FDF80EF1CD884AAA37A0FF18340F010165F51ED35A0C770EAA0CB81

Function 00007FF9BB770CD2 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e499a589b935c9d80161abff944a55dfed1707a5447c9c15706f3adb66d8535
Instruction ID: ef032d1cb8579faacd70c35e78850e1cd5582db2c2cd4081bf5f66fe0d111bf1
Opcode Fuzzy Hash: 8e499a589b935c9d80161abff944a55dfed1707a5447c9c15706f3adb66d8535
Instruction Fuzzy Hash: B5F0F971D0851B8EE744DF58C4887FAB6E1BB50311F044A7AC119966E2DBB966848B84

Function 00007FF9BB77136D Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cb02ebe36fc5a28feb668a516908f5b3096ea1b79684bf9dfe11aad79d966e6
Instruction ID: 3d60307734afda811c94d305f6f70e15cce1b29ce23729d8f6a761bf60466cb8
Opcode Fuzzy Hash: 0cb02ebe36fc5a28feb668a516908f5b3096ea1b79684bf9dfe11aad79d966e6
Instruction Fuzzy Hash: 7BF0153592860E9BDB40EF6CD8416ED73A0FF44318F1044BAF40DD29A1DA74A655CB85

Function 00007FF9BB773FCC Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83dfc42f2f7888fa805d232456258dd29c9cfa5bee9a24f4bf345e65e1a96fff
Instruction ID: 097a2540dea39b0d9c14b63933f4c76869b0e29ccae07d3881bb2f3185d930df
Opcode Fuzzy Hash: 83dfc42f2f7888fa805d232456258dd29c9cfa5bee9a24f4bf345e65e1a96fff
Instruction Fuzzy Hash: 12F05E71D1455A8FE7A4EE1CC8847BD73B6AF85210F0041F6C00DF69A5CE742E418B80

Function 00007FF9BBE57185 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd98a8f3269f9d6a07ec7bbe072036e667b88890a34abac705e431d160d0aad0
Instruction ID: 48ce4ca1265b5764811e83d67955d2a82af54bcf6136de1fdaa8bab7068630f8
Opcode Fuzzy Hash: fd98a8f3269f9d6a07ec7bbe072036e667b88890a34abac705e431d160d0aad0
Instruction Fuzzy Hash: 1EE0923181D2888BE752DF1486561EC7F60FF00200F1401E6D6099B0F2DE64676896C2

Function 00007FF9BBE5F0E7 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c630f9e832022299be17ede0c864117ff624a2eeb0d5c90eb6bde3cac359c31
Instruction ID: 23201c58c18408f26e3816bde08ee6e8979f7df4a3772da49a564172d6ac4068
Opcode Fuzzy Hash: 2c630f9e832022299be17ede0c864117ff624a2eeb0d5c90eb6bde3cac359c31
Instruction Fuzzy Hash: 93E0C240D0C3818BF72B4A3C48602792BE0AF0738075904B6CA46CE2F3D898390497D1

Function 00007FF9BBE59957 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c541ff9bf8c5ce4f7d511e49edba4a4bd7d9535c2dbf959f76b38cb2aef340d8
Instruction ID: 94e582c255bbb9f720bbe33873ff843c489d827e4759cbc3fd9811d436379f93
Opcode Fuzzy Hash: c541ff9bf8c5ce4f7d511e49edba4a4bd7d9535c2dbf959f76b38cb2aef340d8
Instruction Fuzzy Hash: C7D0120490D7828BE7578BAC44A02BC2FD0AF0778075409BAC38BCA2F3D99839189696

Function 00007FF9BBE5716D Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21252e2a092e1158ae6bbb688f59d7b226bc2f2339b24212c12b883ed8da0118
Instruction ID: 4647eba19641565f62c944819901972fae39f1ee50039f87e013f458df6ab2a3
Opcode Fuzzy Hash: 21252e2a092e1158ae6bbb688f59d7b226bc2f2339b24212c12b883ed8da0118
Instruction Fuzzy Hash: C3D0C72091C9064ADA79DF69D1546B933A0FF543007100579D10FD5AF2DD5D7A9457C1

Function 00007FF9BBE5A42B Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5c8676b47044bbb3c5db7628fae0690d09d220f5ca17a06c309ede9dc85c081
Instruction ID: a841de031a144d620f9c7f7d06076c7f7c637dbf0e279205c4c3673d941ffc78
Opcode Fuzzy Hash: f5c8676b47044bbb3c5db7628fae0690d09d220f5ca17a06c309ede9dc85c081
Instruction Fuzzy Hash: 8BD09220A0C64385F53ADE49806433D6592AF04700EA4603FC25FC18F1CD9CBB41E292

Function 00007FF9BBE5FBCB Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61a40d3cf6e15dab64fccae4e4d47597c5b5d6015f0e832f2ad277dff738981f
Instruction ID: bf59b33869786dbc22237eabc496b848ff070fdc0244fbe198891381e7fef42a
Opcode Fuzzy Hash: 61a40d3cf6e15dab64fccae4e4d47597c5b5d6015f0e832f2ad277dff738981f
Instruction Fuzzy Hash: 1AD09254A0D54BC5F2AACE19403037A22907F24301E21003ACB9FC99F5C99DB60162C2

Non-executed Functions

Function 00007FF9BB9200EB Relevance: 123.8, Strings: 97, Instructions: 2516COMMON

Download Yara Rule

Strings

v, xrefs: 00007FF9BB922347
{, xrefs: 00007FF9BB9224CA
m, xrefs: 00007FF9BB922098
w, xrefs: 00007FF9BB92238F
P, xrefs: 00007FF9BB9217D7
e, xrefs: 00007FF9BB921E20
", xrefs: 00007FF9BB920A44
D, xrefs: 00007FF9BB921463
t, xrefs: 00007FF9BB9222AB
:, xrefs: 00007FF9BB921161
!, xrefs: 00007FF9BB9209FC
>, xrefs: 00007FF9BB9212A1
4, xrefs: 00007FF9BB920F9F
=, xrefs: 00007FF9BB921255
#, xrefs: 00007FF9BB920AA3
+, xrefs: 00007FF9BB920CF4
O, xrefs: 00007FF9BB92178F
Z, xrefs: 00007FF9BB921AE8
`, xrefs: 00007FF9BB921CBF
^, xrefs: 00007FF9BB921BFF
8, xrefs: 00007FF9BB9210CF
n, xrefs: 00007FF9BB9220E6
d, xrefs: 00007FF9BB921DD8
N, xrefs: 00007FF9BB921746
9, xrefs: 00007FF9BB921119
*, xrefs: 00007FF9BB920CA9
I, xrefs: 00007FF9BB9215CE
h, xrefs: 00007FF9BB921F0C
~, xrefs: 00007FF9BB9225AC
g, xrefs: 00007FF9BB921EBE
y, xrefs: 00007FF9BB922433
[, xrefs: 00007FF9BB921B2A
}, xrefs: 00007FF9BB922562
), xrefs: 00007FF9BB920C66
u, xrefs: 00007FF9BB9222F9
2, xrefs: 00007FF9BB920F09
-, xrefs: 00007FF9BB920D87
,, xrefs: 00007FF9BB920D42
i, xrefs: 00007FF9BB921F51
., xrefs: 00007FF9BB920DD5
k, xrefs: 00007FF9BB921FE4
?, xrefs: 00007FF9BB9212EC
', xrefs: 00007FF9BB920BC0
6, xrefs: 00007FF9BB92103F
s, xrefs: 00007FF9BB922261
S, xrefs: 00007FF9BB9218B3
q, xrefs: 00007FF9BB9221CE
R, xrefs: 00007FF9BB92186B
7, xrefs: 00007FF9BB921087
K, xrefs: 00007FF9BB921662
l, xrefs: 00007FF9BB92205D
%, xrefs: 00007FF9BB920B2F
/, xrefs: 00007FF9BB920E30
Y, xrefs: 00007FF9BB921A7E
r, xrefs: 00007FF9BB92221C
3, xrefs: 00007FF9BB920F57
, xrefs: 00007FF9BB9209B4
|, xrefs: 00007FF9BB922518
], xrefs: 00007FF9BB921BB7
@, xrefs: 00007FF9BB921334
c, xrefs: 00007FF9BB921D90
<, xrefs: 00007FF9BB92120D
5, xrefs: 00007FF9BB920FF9
z, xrefs: 00007FF9BB92247E
1, xrefs: 00007FF9BB920EC1
M, xrefs: 00007FF9BB9216F2
T, xrefs: 00007FF9BB921912
V, xrefs: 00007FF9BB92199D
a, xrefs: 00007FF9BB921CFA
p, xrefs: 00007FF9BB922180
E, xrefs: 00007FF9BB9214AB
A, xrefs: 00007FF9BB92139B
f, xrefs: 00007FF9BB921E89
DM,d, xrefs: 00007FF9BB9213DA
x, xrefs: 00007FF9BB9223EA
&, xrefs: 00007FF9BB920B78
\, xrefs: 00007FF9BB921B72
X, xrefs: 00007FF9BB921A32
(, xrefs: 00007FF9BB920C0A
_, xrefs: 00007FF9BB921C49
U, xrefs: 00007FF9BB921955
J, xrefs: 00007FF9BB921616
b, xrefs: 00007FF9BB921D45
dlf, xrefs: 00007FF9BB92166C
$, xrefs: 00007FF9BB920AE3
j, xrefs: 00007FF9BB921F96
L, xrefs: 00007FF9BB9216AA
C, xrefs: 00007FF9BB92141A
F, xrefs: 00007FF9BB9214F3
0, xrefs: 00007FF9BB920E79
o, xrefs: 00007FF9BB922134
;, xrefs: 00007FF9BB9211D2
Q, xrefs: 00007FF9BB92181F
B, xrefs: 00007FF9BB9213D0
H, xrefs: 00007FF9BB921586
G, xrefs: 00007FF9BB92153B
W, xrefs: 00007FF9BB9219E8

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID: $!$"$#$$$%$&$'$($)$*$+$,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$DM,d$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$t$u$v$w$x$y$z${$|$}$~$dlf
API String ID: 0-2482346961
Opcode ID: 0cfb76c7c860f7f70be1f8a1f608e71af126d7088cfdd90ef0fac3535a8eb6a9
Instruction ID: e825ac5d4f47ecc5826e768a4a508f8b4cbc548a3ca6ecb8c6107a1902bfa73b
Opcode Fuzzy Hash: 0cfb76c7c860f7f70be1f8a1f608e71af126d7088cfdd90ef0fac3535a8eb6a9
Instruction Fuzzy Hash: E143FA70A145188FDB98EB18C995BAAB7B1FF48310F5045EAD10EE72A2CF756E81CF44

Function 00007FF9BB9359C8 Relevance: 2.7, Strings: 2, Instructions: 209COMMON

Download Yara Rule

Strings

0_I, xrefs: 00007FF9BB935AA4
0_I, xrefs: 00007FF9BB935BA4

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID: 0_I$0_I
API String ID: 0-1343597779
Opcode ID: fdaa489b1fed69572be88104e6a49ed50a125bdd8832ea230f8ec329c2776eab
Instruction ID: 6fd4f290cc656b628ef3c9ceb8740a44dee575544a1ac5cd4c41d42d03619005
Opcode Fuzzy Hash: fdaa489b1fed69572be88104e6a49ed50a125bdd8832ea230f8ec329c2776eab
Instruction Fuzzy Hash: 9571F213D4F9C31BE351CE2C981932A5E537B6659479940FBC3C88B0EBA909FA29C385

Function 00007FF9BB935628 Relevance: 2.7, Strings: 2, Instructions: 206COMMON

Download Yara Rule

Strings

0_I, xrefs: 00007FF9BB9357A4
@, xrefs: 00007FF9BB935844

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID: @$0_I
API String ID: 0-4221107681
Opcode ID: 264ff2af7e08b2195d0f0f8dc4b5798e19f2b24a5d0c4466a462132d7e4e3f6c
Instruction ID: 54371965c21e3a2ccbe0ecbfe8232e14b7884b7bd5293c821f8338750fd97bfe
Opcode Fuzzy Hash: 264ff2af7e08b2195d0f0f8dc4b5798e19f2b24a5d0c4466a462132d7e4e3f6c
Instruction Fuzzy Hash: C671A343D1FAC25BE352CF7858193595E537B561D879840F7C2888B0EBE859BE24C385

Function 00007FF9BB9368A8 Relevance: 1.6, Strings: 1, Instructions: 377COMMON

Download Yara Rule

Strings

@, xrefs: 00007FF9BB9369C4

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: becc14814bb7702d61385c7996999ae4938e9705d0d97682bd811eb7a9f9c307
Instruction ID: cbb930e6e5b0e5b4fc720f2491220d5ab636e2b9077bd2813882c5b5b084ace4
Opcode Fuzzy Hash: becc14814bb7702d61385c7996999ae4938e9705d0d97682bd811eb7a9f9c307
Instruction Fuzzy Hash: 6DD19213A0EAC30FE352DF7C64252A56F62BF92264B1941FBD2C8CA1E7D848F9199345

Function 00007FF9BB935410 Relevance: 1.5, Strings: 1, Instructions: 207COMMON

Download Yara Rule

Strings

@, xrefs: 00007FF9BB93561C

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: efeb94fe7ffb621f6ebe100a2c67abf564b9bef269e6afb0002c0e0436fd398f
Instruction ID: e5fe894985aea6855c0c1aed9fc5d23ad1c53b7f6a06b7c81bdb45b2d68fa61b
Opcode Fuzzy Hash: efeb94fe7ffb621f6ebe100a2c67abf564b9bef269e6afb0002c0e0436fd398f
Instruction Fuzzy Hash: F7718347D1F9C20BE361CE2C98593AA6E637B561A475C40FBC2C4870EB89C4FE29C345

Function 00007FF9BB935F30 Relevance: 1.4, Strings: 1, Instructions: 175COMMON

Download Yara Rule

Strings

@, xrefs: 00007FF9BB936064

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: d7767808ba9d53bf85be3f653b524e74d52be553fb320c2baa3bc6b720de101e
Instruction ID: de243f28437e79f2f2637e71d9c793247677964e106266c50191e527d50deeec
Opcode Fuzzy Hash: d7767808ba9d53bf85be3f653b524e74d52be553fb320c2baa3bc6b720de101e
Instruction Fuzzy Hash: 3E519307D1FAC30BE352CA6C58153696FA3BF561A475D40FBC2888B1E79889FA15C385

Function 00007FF9BB9363B8 Relevance: .6, Instructions: 553COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc6c4f8936bb8702629a02c7c24f3e37a853e06e21e6615c349f281c6db6df7d
Instruction ID: 87058a9cac65e02682766221bf4db61fc8a6f4eae544c09faab6e515616b5e10
Opcode Fuzzy Hash: cc6c4f8936bb8702629a02c7c24f3e37a853e06e21e6615c349f281c6db6df7d
Instruction Fuzzy Hash: 5A029A03E5F9C30BE3A1CE2C64253695F52BB922A475841FFD3C8871EB5888FE55C285

Function 00007FF9BB933C69 Relevance: .5, Instructions: 542COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61b6eac94e2e1e56617faa608ee722eff82a639a4177afcfa68b94a167f5f853
Instruction ID: e475cf94929226ad6a93d8a57762e49ed21e03022c6708d5069d4945b9134555
Opcode Fuzzy Hash: 61b6eac94e2e1e56617faa608ee722eff82a639a4177afcfa68b94a167f5f853
Instruction Fuzzy Hash: 4912C826D0E7D22FE302EB7C64512E57F51BF0226871980FBD189CB0E3ED59B9069749

Function 00007FF9BB9347B0 Relevance: .4, Instructions: 442COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab344a2d4b11c4b0470c0a0dc8659b84c2cd0579ff722387a47672964cd893de
Instruction ID: 0ca4e02695a82e0f1af0b89df4d5ff8f791b03e7895e0362cea4cc0e62d72c5d
Opcode Fuzzy Hash: ab344a2d4b11c4b0470c0a0dc8659b84c2cd0579ff722387a47672964cd893de
Instruction Fuzzy Hash: 8DF1D613D0EBC32BE302DB3C58252E5AF527F5316475A40F7C2C88A5E7AD49B919C38A

Function 00007FF9BB937534 Relevance: .3, Instructions: 331COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc5b96521c4a94371a2e4669a1e65c0a7c5729eed383bc2e81ed0b67069882f6
Instruction ID: 121d6b3f0f30003818e5251482af92671130f0fd21ea95f2a9768492ab3c011c
Opcode Fuzzy Hash: bc5b96521c4a94371a2e4669a1e65c0a7c5729eed383bc2e81ed0b67069882f6
Instruction Fuzzy Hash: 00C1201280E7932BD301FB78A9665E6BF509F0323872991F7E09D8E0D3ED0D6548DA9D

Function 00007FF9BB936C2D Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c5e6d443542cb53eaddb38abd3ae709f80e78a602d1d379f04a776427a69d0a
Instruction ID: 434c9a07995bfcd16296d6f91800555bd8db6fa84e07c1bf61ed76dd20ff2cbd
Opcode Fuzzy Hash: 4c5e6d443542cb53eaddb38abd3ae709f80e78a602d1d379f04a776427a69d0a
Instruction Fuzzy Hash: 5E91701280E7932BD302FB78A8969E67F509F0323872941F7E49D8E0E3DD18B548DA5D

Function 00007FF9BBE7107E Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1593406782.00007FF9BBE50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BBE50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bbe50000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c76439af3b1f1496a0e7d0ff43d9980e5a4e88daebe31fe434857457022d5705
Instruction ID: 42674ad4f3ab38eb419ef6904accf4219c51f9e8e68fd111960be29bdee22f05
Opcode Fuzzy Hash: c76439af3b1f1496a0e7d0ff43d9980e5a4e88daebe31fe434857457022d5705
Instruction Fuzzy Hash: 2161D82390DB6266E312BBBD74451F9EB509F02335B1594FBD28E8A0D3DD49348197CD

Function 00007FF9BB9351DD Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5856e58043112153fe7b1e805b740967ae43ecb1a83ef361745a187f97449264
Instruction ID: ee45969ebb920e66d22f04da9da451b2e6dfa3ac360e69e0949fb8cd5140f5c2
Opcode Fuzzy Hash: 5856e58043112153fe7b1e805b740967ae43ecb1a83ef361745a187f97449264
Instruction Fuzzy Hash: A771B25390FAC31BE352CE3C8815355AF537F52590B9840FBC2848B1EBA889FE29C385

Function 00007FF9BB935850 Relevance: .1, Instructions: 148COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a63a0e0da3bfb784559a080d675834e36438a5a94c88ade239a90e0d6d0db3c1
Instruction ID: 7c664f022cbf40fb20d4e8248c98149d801f7e745800b91ce7ae8607b5c19461
Opcode Fuzzy Hash: a63a0e0da3bfb784559a080d675834e36438a5a94c88ade239a90e0d6d0db3c1
Instruction Fuzzy Hash: 6C51574391FDC21BE362CF2C54243555E637F965D479E40FBC288874EB9849BE29C345

Function 00007FF9BB92CCED Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1582115239.00007FF9BB920000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB920000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb920000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1677daf7f2718e1dffdf5366257750f415d0c421e35fa62b7e7e821f2253d68d
Instruction ID: 1ca2c388bd280c375803408d73168ae4132082ad51904a694598051224548f1c
Opcode Fuzzy Hash: 1677daf7f2718e1dffdf5366257750f415d0c421e35fa62b7e7e821f2253d68d
Instruction Fuzzy Hash: 4031F470D08A1D8FCF88DF98C451AEDBBF1FB69300F2011AAD419E3291D675A941CB44

Function 00007FF9BB776249 Relevance: 5.0, Strings: 4, Instructions: 40COMMON

Download Yara Rule

Strings

q, xrefs: 00007FF9BB7760EF
Y, xrefs: 00007FF9BB77625A
x, xrefs: 00007FF9BB77611F
`, xrefs: 00007FF9BB77628A

Memory Dump Source

Source File: 00000013.00000002.1578968357.00007FF9BB770000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ff9bb770000_chrome.jbxd

Similarity

API ID:
String ID: Y$`$q$x
API String ID: 0-4219167185
Opcode ID: ce8cbd610a3aea10ce3a3808f017a08474ccda71b7742d9b1a87a16e5228cdc8
Instruction ID: acbc31a1c988c76d02e5b62e28b73189200a7b0b6b5f13d0b4bac52c318222f0
Opcode Fuzzy Hash: ce8cbd610a3aea10ce3a3808f017a08474ccda71b7742d9b1a87a16e5228cdc8
Instruction Fuzzy Hash: 1F11BC75D095598EEBA0DF18C8887D9B3F1FB54306F1042E5D10DE26A0DBB86AC48F44

Analysis Process: chrome.exePID: 2304, Parent PID: 4552COMMON

Executed Functions

Function 00007FF9BB76018D Relevance: 1.0, Instructions: 971COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1513524828.00007FF9BB760000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ff9bb760000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c01d71bce3cfdaf415fbe95bc3fd873598eb4de0b679196a9559089dd1d478d
Instruction ID: ffb5cbfd635ea0ddd05a2dcf9d5e429f42d31380148c8a087d6a86bad7250e01
Opcode Fuzzy Hash: 9c01d71bce3cfdaf415fbe95bc3fd873598eb4de0b679196a9559089dd1d478d
Instruction Fuzzy Hash: DF51145290DBC74FE356DB2C58A62A87FE1FF52260B4940F7C08AC74F3ED58690A8781

Function 00007FF9BB7604BD Relevance: .6, Instructions: 593COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1513524828.00007FF9BB760000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ff9bb760000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ec93df9599dc234d52d1bb5b74e3795302f74e53b8552dcede13a0b6e422c70
Instruction ID: 005c84f6435fdacddb79059b98cd0edcc82fb1b1038d7d7cab59a4073ee7c734
Opcode Fuzzy Hash: 4ec93df9599dc234d52d1bb5b74e3795302f74e53b8552dcede13a0b6e422c70
Instruction Fuzzy Hash: 76417852E1DE874FF3A5DB6C589A2786BD1FF6226074840FAC44EC34E7ED18690687C1

Function 00007FF9BB760989 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1513524828.00007FF9BB760000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ff9bb760000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a83e21bdea67b7d10bc78881021aa384fc26df9accce8836b1f59afe6ef4034
Instruction ID: 7cdd11756c9e4782051451806622c5f9001008af7800cd6040f7ace918428444
Opcode Fuzzy Hash: 8a83e21bdea67b7d10bc78881021aa384fc26df9accce8836b1f59afe6ef4034
Instruction Fuzzy Hash: 2C01F931958D9A4FD745EB28C450AF5B7F1FF86300B0582F6E00EC3192DE28BD058B90

Function 00007FF9BB760A79 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1513524828.00007FF9BB760000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ff9bb760000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8e2e719fa3982b914ff6ae2bf7cbdff495a76f40319a3eb666db47d0866b85f
Instruction ID: b071f6d7eb8226c64fe7352c216f52015140f8c9d51b7c609163ee626756e393
Opcode Fuzzy Hash: b8e2e719fa3982b914ff6ae2bf7cbdff495a76f40319a3eb666db47d0866b85f
Instruction Fuzzy Hash: 3FD05E36968D698EDB56E768D0112E9F7D0EB45320F4686F6E04EC3192EE2879008B84

Analysis Process: chrome.exePID: 800, Parent PID: 4552COMMON

Executed Functions

Function 00007FF9BB76018D Relevance: 1.0, Instructions: 971COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.1585102504.00007FF9BB760000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ff9bb760000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40e44a67c971d77f75e0285bd06705a2c2b6de64ad34d423b9651f882619f340
Instruction ID: 58e5d8002f84a706df2382a8f11e79772a27a00f78c760d54d029464ea9acee0
Opcode Fuzzy Hash: 40e44a67c971d77f75e0285bd06705a2c2b6de64ad34d423b9651f882619f340
Instruction Fuzzy Hash: 1651145290DBC74FE356DB2C58A62A87FE1FF52220B4940F7C18AC74F7ED58690A8781

Function 00007FF9BB7604BD Relevance: .6, Instructions: 593COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.1585102504.00007FF9BB760000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ff9bb760000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33db4f61ad566001b26ec83511d3aa00449da6f6a9d191b92aa107dacafbcfca
Instruction ID: 930b528deae9882b7dd9bba91bb8fe97c5ba334afbc93f37d112d94a9d93061d
Opcode Fuzzy Hash: 33db4f61ad566001b26ec83511d3aa00449da6f6a9d191b92aa107dacafbcfca
Instruction Fuzzy Hash: F8416852E1DE874FE355DB6C149A2686BD1FF6226074840FAC48EC34E7DD186D0A87C1

Function 00007FF9BB760A09 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.1585102504.00007FF9BB760000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ff9bb760000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 974cea56188c835fb45c7a9127596bfeed0f05d55f39b162ee0540c6fd62e438
Instruction ID: 92543d07c69020272c8635da089589e3af3fadd89a1f73cc958a19481ae66487
Opcode Fuzzy Hash: 974cea56188c835fb45c7a9127596bfeed0f05d55f39b162ee0540c6fd62e438
Instruction Fuzzy Hash: 4B11273195DDDA4FD742EB68C8506E5BBE0FF8721070942E7E04DC7592CA2C5907C7A1

Function 00007FF9BB760989 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.1585102504.00007FF9BB760000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ff9bb760000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 943ee9a6cffb2da985aaf365813190a0f70036366bdccb20bfdeb70fa42f9e16
Instruction ID: 7ff37e4a4113d816ae022375ffa48d0070d9c14f0ba83ff5b3b017a61a8e3111
Opcode Fuzzy Hash: 943ee9a6cffb2da985aaf365813190a0f70036366bdccb20bfdeb70fa42f9e16
Instruction Fuzzy Hash: 07F0C22281CA994FD766E768D8407EA7BE0EF46310F0946E6E04EC3192DA686A058791

Analysis Process: chrome.exe.exePID: 1544, Parent PID: 4552COMMON

Execution Graph

Execution Coverage:	2.6%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	7
Total number of Limit Nodes:	1

Executed Functions

Function 00007FF9BB76AE4D Relevance: 3.4, Strings: 1, Instructions: 2154COMMON

Download Yara Rule

Strings

hM_H, xrefs: 00007FF9BB76D451

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB76A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB76A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb76a000_chrome.jbxd

Similarity

API ID:
String ID: hM_H
API String ID: 0-3803223642
Opcode ID: 799c91a7854e6496e610075cd40d451256af0ddc40cec2f30fe19bb57b186641
Instruction ID: 56933b22af535e88a686b5a7639cce9257585874843fb7a2c2c8084778072e25
Opcode Fuzzy Hash: 799c91a7854e6496e610075cd40d451256af0ddc40cec2f30fe19bb57b186641
Instruction Fuzzy Hash: 7A13DB70D189198FDB98EF18C895BA9B7B2FF98300F1441EAD10DD36A6DA756E81CF40

Function 00007FF9BB7994CD Relevance: .5, Instructions: 511
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6893c0bdda9c0f61c65c6e6343859d65d342c8358a307ceea3f4048c758ab6e4
Instruction ID: 245d570ed4b739cd4b09749c2d584d391ff8e73d7a00c81fc7cad48206944bd8
Opcode Fuzzy Hash: 6893c0bdda9c0f61c65c6e6343859d65d342c8358a307ceea3f4048c758ab6e4
Instruction Fuzzy Hash: 5D223B70D046198FDB58CF98C495AEDBBB2FF88310F148269D40EEB296DB74A985CF50

Function 00007FF9BB761A9E Relevance: 1.7, APIs: 1, Instructions: 190
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE ref: 00007FF9BB761BDA

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB757000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB757000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb757000_chrome.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 9c2b236cf5d98a9adb3c597f24a023922707d7e31578dda90f33c3dc6bfa4d7b
Instruction ID: 774615ed90533388e693a0c069a4c3f99f8a64a9216f457db6f0de5c44386be9
Opcode Fuzzy Hash: 9c2b236cf5d98a9adb3c597f24a023922707d7e31578dda90f33c3dc6bfa4d7b
Instruction Fuzzy Hash: 12516D70D18A4D8FDB54DFA8C885BEDBBF1FB56310F1042AAD049E7251DB74A885CB81

Function 00007FF9BB76348D Relevance: 1.5, APIs: 1, Instructions: 232
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE ref: 00007FF9BB7635AF

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB757000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB757000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb757000_chrome.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: c3ec121bebece0c88c0a946b01122911c570d1748bdf1da4542e967c4789b416
Instruction ID: 27198a08c15d96472db108fba06167c60cc36e4a40c205518f8c4275403a7836
Opcode Fuzzy Hash: c3ec121bebece0c88c0a946b01122911c570d1748bdf1da4542e967c4789b416
Instruction Fuzzy Hash: F6611770908A5D8FDF94EF58C885BE9BBF1FB69310F1041AAD04DE3251DA74A986CF80

Function 00007FF9BB79AF3E Relevance: 1.4, Strings: 1, Instructions: 171
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

, xrefs: 00007FF9BB79B1E3

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 8554dbab5a87b4ddfccd2201d15348ab74457a964082f853d141426417de6795
Instruction ID: 14318b8326af75ab0c72094fbaf44682bfb9ade8ba320fb81582a51cb81d7407
Opcode Fuzzy Hash: 8554dbab5a87b4ddfccd2201d15348ab74457a964082f853d141426417de6795
Instruction Fuzzy Hash: 3B611870D099199FEBA9DF08C895BE8B7B2FB58310F1041EAC14DE36A1DE746A81CF45

Function 00007FF9BB768529 Relevance: 1.4, Strings: 1, Instructions: 138
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

U, xrefs: 00007FF9BB76853A

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB766000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB766000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb766000_chrome.jbxd

Similarity

API ID:
String ID: U
API String ID: 0-3372436214
Opcode ID: 9a068192d5930bad51b929583d5f86d63933efe466e10de9017b48736ef011b2
Instruction ID: 844d743cd722a80b1d37f3e57f9b84247256a0f302d2cd4b298f1cdf998205e1
Opcode Fuzzy Hash: 9a068192d5930bad51b929583d5f86d63933efe466e10de9017b48736ef011b2
Instruction Fuzzy Hash: 9D51BF30A08A0D9FCF84EF58C484AED7BF1FF68310F0941AAE409E7261D674E990CB90

Function 00007FF9BB7681B9 Relevance: 1.3, Strings: 1, Instructions: 87
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

U, xrefs: 00007FF9BB7681CA

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB766000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB766000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb766000_chrome.jbxd

Similarity

API ID:
String ID: U
API String ID: 0-3372436214
Opcode ID: 68fc47d828a7d10baf25ec46da873ab369e670bcc1b15216063b944f27e7d054
Instruction ID: 2fbbac3ff10f8d5b24ba664be5c3782139937da1f77d83ebea117f4573f75518
Opcode Fuzzy Hash: 68fc47d828a7d10baf25ec46da873ab369e670bcc1b15216063b944f27e7d054
Instruction Fuzzy Hash: DC31803090864D8FDF54DF18C894AEE7BF1FF49314F0502AAE94AE32A1CB74A940CB81

Function 00007FF9BB79C73D Relevance: .4, Instructions: 416
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53ba80cf0f664b5798389a27b8ccbe6e7fb9387cdb494a327cc5fea7c7828b3d
Instruction ID: 7f7caed7f67f60e1056c53bd3e7ce1669a4f1a69da5e79502330df0fc1c13859
Opcode Fuzzy Hash: 53ba80cf0f664b5798389a27b8ccbe6e7fb9387cdb494a327cc5fea7c7828b3d
Instruction Fuzzy Hash: BFF19071D189599FEB98EF68C4997A8B7A1FF58300F0441BAD14DE36E2DA786980CB40

Function 00007FF9BB78EC69 Relevance: .3, Instructions: 323
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB787000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB787000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb787000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d4bc0ec54ef22923658786bc8c9a4bfb19352cb33feb3bb34ef316cf6f86e70
Instruction ID: a8861620db1bcc50cb6e9891dc4d7a7270e77674fad562f4d22628040d365353
Opcode Fuzzy Hash: 8d4bc0ec54ef22923658786bc8c9a4bfb19352cb33feb3bb34ef316cf6f86e70
Instruction Fuzzy Hash: E0C10B70A18A1D8FDB94EF58C894BADB7B2FF59314F5041A9D00DE72A6CB34A985CF40

Function 00007FF9BB750DA4 Relevance: .3, Instructions: 304
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB750000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb750000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0203499f27c39f1ba97815fd53019def9648dad53f69df9455ec378c20885cbf
Instruction ID: fcef5228b7b9adb7a7334deab852c0925652a8672e41e5a946378059a03516bb
Opcode Fuzzy Hash: 0203499f27c39f1ba97815fd53019def9648dad53f69df9455ec378c20885cbf
Instruction Fuzzy Hash: 8CB1BE70918A8A8FE784DF5CC8957B97BF1FB96314F0442BAD00DE76E2DB7828118B50

Function 00007FF9BB79C8AD Relevance: .2, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49c6aa2dbf558b73f0fa0d4a4ec9aa6efadb10f851cfe7f7c51b93c004d26b0c
Instruction ID: 0b4f7d227aa88b28dc5776d83e590cf83820714be39e0cd8cc1ef4dc04b89773
Opcode Fuzzy Hash: 49c6aa2dbf558b73f0fa0d4a4ec9aa6efadb10f851cfe7f7c51b93c004d26b0c
Instruction Fuzzy Hash: 4C713931D1895D8FEB98EF68C499BA8BBA2FF58300F0440B9D14DD76A2DE746980CB40

Function 00007FF9BB76C38C Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB76A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB76A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb76a000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d11877a9243e9e435c554598d68c8472c84ff763f23847bb8d18b562dd23087
Instruction ID: bfaafcc3decc5df0160631ac29de487b7b4aad94d3d304233e79ad640f24e70e
Opcode Fuzzy Hash: 2d11877a9243e9e435c554598d68c8472c84ff763f23847bb8d18b562dd23087
Instruction Fuzzy Hash: CD511D719189198BEB94EF1CC895BA9B7A2FF94310F4482E5C10DD36A5DE74AE818F80

Function 00007FF9BB750C0D Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB750000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb750000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2e44518ccd4148eab08ca6fcc12237a34f349d413cbea58267cefe7086b5221
Instruction ID: 1ab7615a4667813c53d741e87ce73e7e738b894227a206087ed27b8fbbf7e954
Opcode Fuzzy Hash: f2e44518ccd4148eab08ca6fcc12237a34f349d413cbea58267cefe7086b5221
Instruction Fuzzy Hash: 3221F87990C69A8FE301EA2C9C952E97B60FF53325F0445B3C145D61F3DAA83619C791

Function 00007FF9BB752ECC Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB750000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb750000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ef29d3639faa9df50937b6e5d9be2caed23178b6a41bf352c58e5a167ae693a
Instruction ID: 4944b616b13a6c4e44327662e783cfd02ec8074f550b69e8d62427ec5ba41962
Opcode Fuzzy Hash: 1ef29d3639faa9df50937b6e5d9be2caed23178b6a41bf352c58e5a167ae693a
Instruction Fuzzy Hash: 09316C7090491C8FDFA8DF14C895BE9B7B1FBA8305F1042EAD00DE3661DA76AA95CF40

Function 00007FF9BB7A9990 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad7dbd04f7f99139215483fc7f05dbe3e1b587eded6dd81c13f8f9e601f9ec15
Instruction ID: e25ede5943755c7ce50112cd3b6652d3feaeaaa08bd05bc0799e19c105faf7af
Opcode Fuzzy Hash: ad7dbd04f7f99139215483fc7f05dbe3e1b587eded6dd81c13f8f9e601f9ec15
Instruction Fuzzy Hash: 0E314B7184D3C95FD7438BB848A92E43FB0EF57210B0904EBD489CB4B3E9696A5AC752

Function 00007FF9BB799DE2 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab51e517c28ba77d11a9dad356041e441298b00446e39303c8bc4bfee7c12991
Instruction ID: d1438c20b609fffab44c3e3fc29f81aba885af4b59ecd5c02ac14c8e265cf438
Opcode Fuzzy Hash: ab51e517c28ba77d11a9dad356041e441298b00446e39303c8bc4bfee7c12991
Instruction Fuzzy Hash: 2D21D13190894A9FEB85EF5CC489AA9B7A1FF54300F0445B5E18CC75F6CEB8B981CB80

Function 00007FF9BB7A8D19 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 476838038650ac207dbcdf8674bd678aafbd55951d828cc333b36d01da0295a3
Instruction ID: 36b80cb4d51df32cca54346953e90c2f9a2084624f9daafcab8fd80b7742b63c
Opcode Fuzzy Hash: 476838038650ac207dbcdf8674bd678aafbd55951d828cc333b36d01da0295a3
Instruction Fuzzy Hash: 7121483080868D9FDB85EF6888996A97BB0FF19300F0505E6E408C71F2DB78AA54CB41

Function 00007FF9BB766D52 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB766000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB766000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb766000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6843da64225bb08c8a4fbb3c85841413f3a40ce34101af6ba964e465722be79
Instruction ID: 870f02575ac70a6bba5f9dc4d393ae80befcecca0dbc7856d7414219569a1638
Opcode Fuzzy Hash: c6843da64225bb08c8a4fbb3c85841413f3a40ce34101af6ba964e465722be79
Instruction Fuzzy Hash: C8318230D185298FDBA9EB18C8D57A8B2B5FF49304F5041E9D14EE26A2CE74AF808B00

Function 00007FF9BB7A8D81 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 746eab2ab79716a139ac7df795daffb9fe1fe854f4fbd6dc9eb49ff14250200c
Instruction ID: 9d3bba1e5d2868a29ff737f6cc81328f4174ddd8e589c74e5dbf8d5430941b7a
Opcode Fuzzy Hash: 746eab2ab79716a139ac7df795daffb9fe1fe854f4fbd6dc9eb49ff14250200c
Instruction Fuzzy Hash: 63214F30918A4D9FDB95EF68C848BE97BF0FF29304F0105AAE41DD71A1DB74A654CB40

Function 00007FF9BB750C25 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB750000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb750000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d72d6f5bd80fada7e7aafdf6b3da852138432d8468a13dfd799439372c0b345
Instruction ID: 76d8e26c8d01093323e06733597ac831576854971b592920fb5d3690e36771d9
Opcode Fuzzy Hash: 6d72d6f5bd80fada7e7aafdf6b3da852138432d8468a13dfd799439372c0b345
Instruction Fuzzy Hash: 3721F62980D6DA8FE302EB388C912E97B60FF42314F0845B7C141D61E3CA783959C791

Function 00007FF9BB7A1480 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 428095586e0fc1f9bd138a660c6dcda3665238ea4d6ace7c1e88ea86e126fba5
Instruction ID: ac7f4931f521048b47df12c23728eb2ef362168de5a0fd8f9d411d144bd52242
Opcode Fuzzy Hash: 428095586e0fc1f9bd138a660c6dcda3665238ea4d6ace7c1e88ea86e126fba5
Instruction Fuzzy Hash: 0211E63580CA4A9FDB40FF78E4516E97BA0EF16328F1480B7E14DC61A3DE346584DB88

Function 00007FF9BB78C270 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB787000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB787000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb787000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a86c79ae59dfe59eabaeab5a78aa984d0c8c514d46f6ffe64338002b116680d
Instruction ID: 81d1e4aec34f2b146996598bf80d1f07f1315bfc0b36e5da5d4dd48446d2b190
Opcode Fuzzy Hash: 9a86c79ae59dfe59eabaeab5a78aa984d0c8c514d46f6ffe64338002b116680d
Instruction Fuzzy Hash: D811283044D7CA8FCB82EF6888996D57FB0FF16210F0941E6E448CB1A2D6689A55CB52

Function 00007FF9BB7A970A Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78fc5f08c6d93342f48639ddd22f30c10b7a30149f815d65d57ad3233f66c9df
Instruction ID: 3615cb71d288cc9222e122f93ef5fc3c69d1db83d54c8aca3b4ac8969b34cfa4
Opcode Fuzzy Hash: 78fc5f08c6d93342f48639ddd22f30c10b7a30149f815d65d57ad3233f66c9df
Instruction Fuzzy Hash: CA21F73490860D8BDB98DF48C5D87ACB7B5FB54315F60017AC109E76E0CA787A56CB50

Function 00007FF9BB788E99 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB787000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB787000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb787000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f110e44c2715064ecbdef05f774e486e96b3997517be23ad68a8261ee68a461a
Instruction ID: 0b05b1be70dea3b8c0d3ea80d14c2e681b1d8c4cf6c5013b93bb94baf3afb5cf
Opcode Fuzzy Hash: f110e44c2715064ecbdef05f774e486e96b3997517be23ad68a8261ee68a461a
Instruction Fuzzy Hash: 6F111E30918A4D8FCF45EF68C859AEA7BF0FF29304F0505AAE459D7261D734A554CB81

Function 00007FF9BB79A639 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9490ef597060e5a8becc5c654992546a31e4fa7c90303b74b828cb9d5dea248
Instruction ID: 4b050ca9d4ed090b058159fec19409b44d196f8c453a794121a267a738d1ae99
Opcode Fuzzy Hash: d9490ef597060e5a8becc5c654992546a31e4fa7c90303b74b828cb9d5dea248
Instruction Fuzzy Hash: 04112A7090864D8FCF45EF68C848AA97BF0FF29304F0105AAE449C7261D734A550CB81

Function 00007FF9BB7A5539 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed78a72a208c67a13fcfe76a5020857fa13f7001524367e752b1577147e3409d
Instruction ID: 2b7930da28dcc0b81f00974f9ac438103a898b31dbac5fe2aefd5bd20556380d
Opcode Fuzzy Hash: ed78a72a208c67a13fcfe76a5020857fa13f7001524367e752b1577147e3409d
Instruction Fuzzy Hash: E8114830808A8D8FCF85EF68C858AE97BF1FF28300F0105AAE408D72A1D734A540CB81

Function 00007FF9BB767BAD Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB766000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB766000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb766000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c09330d0eeb1e63a126cc691bb5566f852a2635be052a3a0e3e1c224f436fe1
Instruction ID: d8f9bda2fe65f012199ed8eb2f123abf26d3fd702e714e835494587ea0e560aa
Opcode Fuzzy Hash: 2c09330d0eeb1e63a126cc691bb5566f852a2635be052a3a0e3e1c224f436fe1
Instruction Fuzzy Hash: 1B014521C0CA488BE300DB2888513FC77B0FF02360F0550B6DA0DD25E3DEB822098B41

Function 00007FF9BB79C039 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc55321eca09ff04b4634f9cc2dc5f89435eb792c21022d4703ff3c2764a79ee
Instruction ID: 5f2e1b0ede2a33911a7c503469c8450df56e27a9e855cba1afb9d013212ebdaf
Opcode Fuzzy Hash: bc55321eca09ff04b4634f9cc2dc5f89435eb792c21022d4703ff3c2764a79ee
Instruction Fuzzy Hash: E9014C30808A4D8FCF45DF18C859AE97BF0FF69304F0101AAE40DC72A1DB34A994CB81

Function 00007FF9BB78EA59 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB787000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB787000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb787000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe4a5fc22655b521e471c7ff47fecae024011c4c18751c1becd0e774d8ec9c06
Instruction ID: 93889bffc35fdde445a38b5c312b8a80648c9b42406109879925fee53d3c00d4
Opcode Fuzzy Hash: fe4a5fc22655b521e471c7ff47fecae024011c4c18751c1becd0e774d8ec9c06
Instruction Fuzzy Hash: 26012D30808A4D8FDF85EF68C858AA97BB0FF29300F0505ABD418D71A2D7349550CB81

Function 00007FF9BB7A5E59 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9137d42e59969b528910abc4133c99af3411d1aee45e20423ed88c3adebe3dd
Instruction ID: bf3adfec0511e2a0e7f97724ec261b6f0224ee57f0a5de21352882b8de9abe7c
Opcode Fuzzy Hash: f9137d42e59969b528910abc4133c99af3411d1aee45e20423ed88c3adebe3dd
Instruction Fuzzy Hash: 6A010C30908A4D8FDF85EF58C854AAA7BB0FF69300F0505AAE41DDB2A1D774A954CB91

Function 00007FF9BB78E989 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB787000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB787000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb787000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e245430d0d16908ad7b803d10b2e7bf2ef3410af9a01443fd60be5fa98e609c
Instruction ID: 8c4f221231bf5dfc721393b3ff63142dfbe98dd0b710b35b18c99a8436ddeba6
Opcode Fuzzy Hash: 7e245430d0d16908ad7b803d10b2e7bf2ef3410af9a01443fd60be5fa98e609c
Instruction Fuzzy Hash: E9012D30808A8D8FDF85EF58C898AA97FF0FF25301F0505ABD409D71A2DB749654CB81

Function 00007FF9BB750C50 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB750000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb750000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 379239bc3844da090b61dce99e3ac3e92edc9ec3957bd10f983425926fa54b67
Instruction ID: d459537d5120f6041e72c06759275437fd75f6897cad0c668986d8b128fec3f4
Opcode Fuzzy Hash: 379239bc3844da090b61dce99e3ac3e92edc9ec3957bd10f983425926fa54b67
Instruction Fuzzy Hash: 38015B35C0C68A8EE712EB6888952EA7BA0FF43310F0545B3D545DA1F3DEB83A188B41

Function 00007FF9BB7924B1 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB787000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB787000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb787000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00d166c6ede8a861fb8b22f8797381c8f8a71bb77428f72174c1e5bc1885224a
Instruction ID: 84084d16f64f0d492ecfcbd2d4eab48efc3eb96a7254f1fbfa8732232cca2995
Opcode Fuzzy Hash: 00d166c6ede8a861fb8b22f8797381c8f8a71bb77428f72174c1e5bc1885224a
Instruction Fuzzy Hash: EF018130814A4C8FDB41EF28C8496D93BF0FF29305F0145A6E80CC31A1DB34E694CB81

Function 00007FF9BB79CCA9 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddeec4e31053db9cf1a5a138e1c43be299456a6e46f2dd9750c1fa56246c903f
Instruction ID: ffcd5242e5eebcdbc4c7a51c107bf453a2478c589ffb3924f801630515993766
Opcode Fuzzy Hash: ddeec4e31053db9cf1a5a138e1c43be299456a6e46f2dd9750c1fa56246c903f
Instruction Fuzzy Hash: F5014C3080868C8FCF45DF28C899AD97FB0FF2A304F0501AAE44DC72A1DB75A954CB81

Function 00007FF9BB7A5690 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 724763f6f12178611e8d276fcad05c191df9497e12e6ff485ca44e9cadb15c60
Instruction ID: 25b99f5f1e48539b1cfc4835888ca6943ec641a6709cb24ae6042a15d7e40705
Opcode Fuzzy Hash: 724763f6f12178611e8d276fcad05c191df9497e12e6ff485ca44e9cadb15c60
Instruction Fuzzy Hash: 2C01DA3091490D8FDF84EF68C848AEA77F0FB28305F01056AA41DD3260DB71E550CB80

Function 00007FF9BB7A5550 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdb3df1d4b2759a3cd77c487a93cf65f06c37dd46c30d3700ea97bb972b3655c
Instruction ID: c25de9ae7f6a49285baecbccb39481708e4841798ff90b32db44e029fe14c248
Opcode Fuzzy Hash: bdb3df1d4b2759a3cd77c487a93cf65f06c37dd46c30d3700ea97bb972b3655c
Instruction Fuzzy Hash: B5019670914A4D9FDF84EF68C849AEE7BF1FB68305F00456AA81DD3260DB71A694CB81

Function 00007FF9BB7A2A79 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f8d0cf510dfa7d7cbdb9fa2d438c12908538a0ad8976a0bb57ef3af00c5410f
Instruction ID: 37ed45df28f59a4c6a3959c6d19eb704c8c1f2c8e85325aff0dc0fbd762d9ed6
Opcode Fuzzy Hash: 2f8d0cf510dfa7d7cbdb9fa2d438c12908538a0ad8976a0bb57ef3af00c5410f
Instruction Fuzzy Hash: 81015E3090864D8FCB85DF68C854AEA7BB0FF29300F0505AAD40DC72A2D774EA54CB80

Function 00007FF9BB768845 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB766000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB766000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb766000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ce88e74d354117a45b2f40e975e5790e53098d8c49c6dfd6501c88e21ebf452
Instruction ID: 852f1dfd6b890de9364ec808b768b81b20456c6d664c3706f33cebd7327b1c3b
Opcode Fuzzy Hash: 5ce88e74d354117a45b2f40e975e5790e53098d8c49c6dfd6501c88e21ebf452
Instruction Fuzzy Hash: FF016271828B8DCFDB44DF18C8866E93BE0FF68355F0501AAE848D76A1D774E654CB81

Function 00007FF9BB76FBE0 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB76A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB76A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb76a000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71c746bcce8364b5bb16d98d2b1836fd19141740753a8cc4c1fbce4cb21b30aa
Instruction ID: a9943b5b5abedc4d8795c51a233d3fc3bd76dffe0f1087c9a44a4c5337e2ce2e
Opcode Fuzzy Hash: 71c746bcce8364b5bb16d98d2b1836fd19141740753a8cc4c1fbce4cb21b30aa
Instruction Fuzzy Hash: 84019670914A4D9FDF84EF58C889AEE7BF0FB68305F10456AA81DD32A0DB70A655CB81

Function 00007FF9BB7A9B09 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 592eabc2c25620d442de380e58021f4ec04b11fbf726281c1eccdb4418bcd549
Instruction ID: a297fef900eed74aa99b5bee74d4b9bab6d9323737d92732b8809808ef3fad1a
Opcode Fuzzy Hash: 592eabc2c25620d442de380e58021f4ec04b11fbf726281c1eccdb4418bcd549
Instruction Fuzzy Hash: 9C01623080868C8FCB85DF18C495AD97FB0FF59300F0501EBD509C72A1D7759A95CB80

Function 00007FF9BB7A9A49 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d9b0b115a331b0c5fd7477cbaffdaaecedefdb476334d3c0ab1f5bbc2276fd4
Instruction ID: ba43714e82ec198516cf77bbf9d0032ab89fc4581189ec5e38617dce59c5e54b
Opcode Fuzzy Hash: 9d9b0b115a331b0c5fd7477cbaffdaaecedefdb476334d3c0ab1f5bbc2276fd4
Instruction Fuzzy Hash: 6101283080868C8FCB85DF28C895AE97FB0FF6A300F0541EBD509C72A2D7759A94CB81

Function 00007FF9BB7A21A9 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 168e23c7811fbfba5deeb0105b12614af7941717ae917ef64e40a67726568709
Instruction ID: fa473bdaf51de1d5d4ac7f2f66f44c94ad07a0eeb6b318e75ebb2ae09c3b5742
Opcode Fuzzy Hash: 168e23c7811fbfba5deeb0105b12614af7941717ae917ef64e40a67726568709
Instruction Fuzzy Hash: 3D016D3080868C9FCB85DF28C898AE97FB0FF6A304F0501EBD509C71A2C775AA55CB81

Function 00007FF9BB7A3CF9 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f011262adccf234375b124eea7f9816e70c1811c3afc3e7b838db2d28e1b3b7d
Instruction ID: 01ea665c100512411f5e59183aabd23535a13d4afcc76200d9bf6bb97966f37a
Opcode Fuzzy Hash: f011262adccf234375b124eea7f9816e70c1811c3afc3e7b838db2d28e1b3b7d
Instruction Fuzzy Hash: 67016D7090868DCFDB85DF68C854AEA7BB0FF19300F0605AAD41DCB2A2DB34EA04CB41

Function 00007FF9BB79CCC0 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e26ce3e2832ce6ca143c58e1e24d5dae896d7c2d39f79ff40203486ed013819
Instruction ID: ecb882404f3c629a79c94c394f3e1d6d01e9f6f3a499e11a0896ce80594e63fe
Opcode Fuzzy Hash: 8e26ce3e2832ce6ca143c58e1e24d5dae896d7c2d39f79ff40203486ed013819
Instruction Fuzzy Hash: 89F03C30814A4D9FCF44EF18C888AE97BF0FF28304F01056AA80DC3260CB30A690CB80

Function 00007FF9BB7A2F58 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9af24a0f0adc328e413e48c9aa81adee5975ee8d5c9a62f1f450082b7b3ef972
Instruction ID: 62da69eea59bd6976a236d5efadeac105ceeaac6efebc3c56bd0ee01670a1f69
Opcode Fuzzy Hash: 9af24a0f0adc328e413e48c9aa81adee5975ee8d5c9a62f1f450082b7b3ef972
Instruction Fuzzy Hash: 5E01C26085E7C95FD743DBB448686E47FB0AF07214F0D01E7E48CCB0A3C928A659C752

Function 00007FF9BB79A730 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3f92f14042c793f0553f1f9a092cd9d8e2a978d04502a0202c2093be37b258b
Instruction ID: 6856479a80a072798b3f0b290ad12d9f110cf2d74fe2c3863eb8ffa47fcc8901
Opcode Fuzzy Hash: e3f92f14042c793f0553f1f9a092cd9d8e2a978d04502a0202c2093be37b258b
Instruction Fuzzy Hash: FDF0D03091490D9FDF84EF58C499AE97BF0FF68305F10456AE40DD3160DB71A694CB80

Function 00007FF9BB7A14D0 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4d40acae345a160f7764019a875b32cc003852812dc714c3932b6aa41118c83
Instruction ID: ab1a07a5e3f95aa55b9018a8cd0f17eace472373f2ebfed2405e06acf1c70473
Opcode Fuzzy Hash: d4d40acae345a160f7764019a875b32cc003852812dc714c3932b6aa41118c83
Instruction Fuzzy Hash: D6F01D3080494D9FDF84DF58C884AEA7BB0FF68304F10406AE50DD32A0CB71A694CB80

Function 00007FF9BB7A6F60 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 359acb08b2d0ec803dcd0b029e1d191bbf1a12e24dd66942934b37a2a2c2a26a
Instruction ID: bd12f4275993f0dfc8ed358ca188e76367a39e9490d75ff2a8c70ee63d6ecdfd
Opcode Fuzzy Hash: 359acb08b2d0ec803dcd0b029e1d191bbf1a12e24dd66942934b37a2a2c2a26a
Instruction Fuzzy Hash: C9F01D3490890D9FDF84DF58C484AEA7BB0FF58305F1040AAE50DD32A0DB71A6A4CB80

Function 00007FF9BB789230 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB787000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB787000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb787000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3c233e6dd0a74148d18cb827f6588f8ed1604c44bfdc073f7990f8d2b61fad9
Instruction ID: 1a802db4c1ef0370829f7c41e58ef9d7cdc6803ac41dcc1dd287a760c681fb46
Opcode Fuzzy Hash: f3c233e6dd0a74148d18cb827f6588f8ed1604c44bfdc073f7990f8d2b61fad9
Instruction Fuzzy Hash: F1F06730914A4D9FDF84EF5CC889AAA7BE0FF69305F014566A91DC7260D770E6A4CB81

Function 00007FF9BB76805D Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB766000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB766000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb766000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c6decbd879fd173770c72de2221ebe664b7ebc08e9d638af1746c05c188936a
Instruction ID: 5215b5e990bef027fdc2845a8e6f475d0d4918730074eb7d3ad3d4105a5659bb
Opcode Fuzzy Hash: 8c6decbd879fd173770c72de2221ebe664b7ebc08e9d638af1746c05c188936a
Instruction Fuzzy Hash: FBF06D34908A8D8FCB94EF1CC8956993BA0FF69300F0501AAE508C71A2D774E950CB81

Function 00007FF9BB76783D Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB766000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB766000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb766000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5213641049a3a6fb27269d2311b025b51a73c3bfc121d43e2378ea864ad32b9
Instruction ID: 45f276ed0138b11d27cf2e5a5fde4743226c0408cce0d841fd2072f235e3a82e
Opcode Fuzzy Hash: f5213641049a3a6fb27269d2311b025b51a73c3bfc121d43e2378ea864ad32b9
Instruction Fuzzy Hash: 09F06D31508A8D8FCB91DF1CC8856993BA0FF69340F0501A5E50DCB1A1D775E954CB81

Function 00007FF9BB770C15 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB76A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB76A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb76a000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba09d2ca0ee2662e61701423065dca7bd5fb612669b41d841dd1a3f98e503d67
Instruction ID: 7a940fb51464ceba981b96d9897d772da4a83e4c56e961c882a0552ede76632c
Opcode Fuzzy Hash: ba09d2ca0ee2662e61701423065dca7bd5fb612669b41d841dd1a3f98e503d67
Instruction Fuzzy Hash: B7F0A431D08589CEEBA0DE9988887EC77F0BB08301F104476D51ED6AF5DAB866858F00

Function 00007FF9BB767695 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB766000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB766000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb766000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b22c71353a952981e6aa9e762e08c9449cc6bd62a4a1165afcfa862ed58bd7c3
Instruction ID: 7cd42edffbc5b3aae72c8982e4f58e34bf802972a5de423d35564e46a2c2af65
Opcode Fuzzy Hash: b22c71353a952981e6aa9e762e08c9449cc6bd62a4a1165afcfa862ed58bd7c3
Instruction Fuzzy Hash: 7FF0A03184C6889FEB41EF6C849D2E87FF0FF19310F0504AAE909C64A2DA34A294CB41

Function 00007FF9BB7723E5 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB76A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB76A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb76a000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a6c84a43448e2d8729542d9b61b270dd793992a25237ceafa1a06f0b3e30511
Instruction ID: b50a3af2fd691f385d4d06a8a3511dd51343d48f3fbc3203796fb4ccd0fbcb8e
Opcode Fuzzy Hash: 4a6c84a43448e2d8729542d9b61b270dd793992a25237ceafa1a06f0b3e30511
Instruction Fuzzy Hash: 64F03730A04519CFEB60DF58C844AE8B3F5FB19305F1082EA941DE32A0CA74AA81CF00

Function 00007FF9BB770399 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB76A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB76A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb76a000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de901fe92ae6a3a316b2e99ccdc9642a0f4c034f389359c4958574315406757a
Instruction ID: f73266acbb7f059e7a1e222211277e8d607456c6292bb2c7509dac1df36a56e3
Opcode Fuzzy Hash: de901fe92ae6a3a316b2e99ccdc9642a0f4c034f389359c4958574315406757a
Instruction Fuzzy Hash: 5BF03062D0994A9FFB11DF58C8D46BD7BB0FF45320F14027AE419966E2CEA83541CB45

Function 00007FF9BB750CD2 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB750000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb750000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71a7c4337a115802c8a2852c7f4ff595be9e5e72cdaf3ee24708f49d739996ae
Instruction ID: ca030f989340552f537e175dc3a113f072f1cf014f53761d0391d2f7175a407d
Opcode Fuzzy Hash: 71a7c4337a115802c8a2852c7f4ff595be9e5e72cdaf3ee24708f49d739996ae
Instruction Fuzzy Hash: AAF0F970D0851B8EE704DF58C4847FAB6A1FB51311F044A7AC119966E2DBB966948B84

Function 00007FF9BB753FCC Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB750000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB750000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb750000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11b53d67de2d3851765b386688302faae26150e14d13e11819446487a305aeaf
Instruction ID: ce8f86577da994aa2780fdf315e548e6b5cfbde7476268641a3210d757c2a346
Opcode Fuzzy Hash: 11b53d67de2d3851765b386688302faae26150e14d13e11819446487a305aeaf
Instruction Fuzzy Hash: A3F0347091495A8FE7A0DE18C8847BD73B6EF85210F0042FAC00DF6AA6DE742E818B40

Function 00007FF9BB7703B2 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB76A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB76A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb76a000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 280bd1ec3647f12de91007c5cdde75edb7db81b41c94e486ede19d8cbddc6820
Instruction ID: a3f8926ce8399427382f0cc6fda53a5f6b2a9d8c6b4df04165a7fea00c52f8d7
Opcode Fuzzy Hash: 280bd1ec3647f12de91007c5cdde75edb7db81b41c94e486ede19d8cbddc6820
Instruction Fuzzy Hash: B7E04F32D0880E5BE751DF4DD4902BD76F1FF84254F404276E009D22E1CE6828858744

Function 00007FF9BB7A66EC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7840cbacca04c2cf188417ae6e19eda838f284d18ec70be969a15e45a57fcb5b
Instruction ID: 8f67e8f20a022b6780d4259ed40e3bec3cba36f2c41dcc39b674725886efe582
Opcode Fuzzy Hash: 7840cbacca04c2cf188417ae6e19eda838f284d18ec70be969a15e45a57fcb5b
Instruction Fuzzy Hash: 70D0A7A1B08E0D8EE7E4DE0844913A47390FF49310F4004B5DC4CD2995CF3979514B00

Non-executed Functions

Function 00007FF9BB7A0394 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.1697754706.00007FF9BB799000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB799000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_33_2_7ff9bb799000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0fe63624d9c32a60498ec8ace0cb1dd79de68b0160533cb5dc8bfdf9afe0cbe
Instruction ID: 879d308729baac734af346ddf7719167d67e6e7ce3dd3879c90161250ab49662
Opcode Fuzzy Hash: f0fe63624d9c32a60498ec8ace0cb1dd79de68b0160533cb5dc8bfdf9afe0cbe
Instruction Fuzzy Hash: 7241EBA684E3C54FD7138B7458B56A07FB0AE23214B0E4ADBC0C08F5F3E1596A59E322

Analysis Process: WmiPrvSE.exePID: 4144, Parent PID: 8052COMMON

Execution Graph

Execution Coverage:	10%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	15
Total number of Limit Nodes:	0

Executed Functions

Function 00007FF9BB7806B5 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 492
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

L_^~, xrefs: 00007FF9BB7806D2

Memory Dump Source

Source File: 00000022.00000002.1728962087.00007FF9BB780000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB780000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_34_2_7ff9bb780000_WmiPrvSE.jbxd

Similarity

API ID:
String ID: L_^~
API String ID: 0-82017781
Opcode ID: 906d277c0403579ca994cba6a755affbb903c04ba11cb3f5d35f89890372a4fb
Instruction ID: cb3eb9e5de60b42245e5b855edfe649a4bc1c3011d85390fbb2696e318087582
Opcode Fuzzy Hash: 906d277c0403579ca994cba6a755affbb903c04ba11cb3f5d35f89890372a4fb
Instruction Fuzzy Hash: 67F17030918A4D8FDB45EF68C8857E97BF0FF59314F0141AAE44CD72A2DB74A985CB81

Function 00007FF9BB780708 Relevance: 1.7, APIs: 1, Instructions: 477
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE ref: 00007FF9BB7935AF

Memory Dump Source

Source File: 00000022.00000002.1728962087.00007FF9BB780000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9BB780000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_34_2_7ff9bb780000_WmiPrvSE.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 1e009eeb0b3f86717e3c734889feebeeee27ed23d6fc42ab56baf215ffbd556f
Instruction ID: 3549fa2b426e9bd2d0c20a2f55f53336916e241730fc7f7e3c3e6e5cbb131656
Opcode Fuzzy Hash: 1e009eeb0b3f86717e3c734889feebeeee27ed23d6fc42ab56baf215ffbd556f
Instruction Fuzzy Hash: 6DF17230918A4D8FDB44EF68C885BE97BF0FF59314F0141AAE44CD72A2DB74A985CB81

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\24dbde2999530e

C:\Users\user\AppData\Local\Temp\5uPcWFRVBF.bat

C:\Users\user\AppData\Local\Temp\Whf3UGNhz2

C:\Users\user\AppData\Local\WmiPrvSE.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Windows Analysis Report
https://mega.nz/file/3LZ0hLYB#913cLGydaGLw03L_s9GNi4DLZEQAFO0ymymKQG-RwXM

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre