Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://hemanth-kumar-p.github.io/E-comm

Overview

General Information

Sample URL:	https://hemanth-kumar-p.github.io/E-comm
Analysis ID:	1502353
Infos:

Detection

HTMLPhisher

Score:	92
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

Phishing site detected (based on image similarity)

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 2288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2388,i,146692562838775030,3841611366193780439,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hemanth-kumar-p.github.io/E-comm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://hemanth-kumar-p.github.io/E-comm	Avira URL Cloud: detection malicious, Label: phishing
Source: https://hemanth-kumar-p.github.io/E-comm	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://hemanth-kumar-p.github.io/css/netflix.css

Avira URL Cloud: Label: phishing

Multi AV Scanner detection for domain / URL

Source: hemanth-kumar-p.github.io

Virustotal: Detection: 8%

Multi AV Scanner detection for submitted file

Source: https://hemanth-kumar-p.github.io/E-comm

Virustotal: Detection: 5%

Phishing

AI detected phishing page

Source: https://hemanth-kumar-p.github.io/E-comm/

LLM: Score: 9 Reasons: The domain 'hemanth-kumar-p.github.io' does not match the legitimate domain associated with Netflix, which is 'www.netflix.com'. The domain is a personal GitHub Pages domain belonging to a user named Hemanth Kumar, which is unusual for a well-known brand like Netflix. The design and layout of the webpage also seem to be a poor imitation of the actual Netflix website, with a dark-themed design and a sign-up form that is not secure (HTTPS). These factors indicate a high likelihood that the site is a phishing attempt. DOM: 0.0.pages.csv

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://hemanth-kumar-p.github.io/E-comm/

Matcher: Found strong image similarity, brand: NETFLIX

Source: https://hemanth-kumar-p.github.io/E-comm/

HTTP Parser: Number of links: 0

Source: https://hemanth-kumar-p.github.io/E-comm/

HTTP Parser: Title: Netflix India-Watch TV Shows Online,Watch Movies Online does not match URL

Source: https://hemanth-kumar-p.github.io/E-comm/	HTTP Parser: Invalid link: Privacy
Source: https://hemanth-kumar-p.github.io/E-comm/	HTTP Parser: Invalid link: Help Centre
Source: https://hemanth-kumar-p.github.io/E-comm/	HTTP Parser: Invalid link: Legal Notices
Source: https://hemanth-kumar-p.github.io/E-comm/	HTTP Parser: Invalid link: Terms of Use

Source: https://hemanth-kumar-p.github.io/E-comm/

HTTP Parser: No <meta name="author".. found

Source: https://hemanth-kumar-p.github.io/E-comm/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /E-comm HTTP/1.1Host: hemanth-kumar-p.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /E-comm/ HTTP/1.1Host: hemanth-kumar-p.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/netflix.css HTTP/1.1Host: hemanth-kumar-p.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hemanth-kumar-p.github.io/E-comm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png HTTP/1.1Host: assets.nflxext.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hemanth-kumar-p.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1Host: assets.nflxext.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hemanth-kumar-p.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/netflix/netflix_PNG25.png HTTP/1.1Host: pngimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hemanth-kumar-p.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png HTTP/1.1Host: assets.nflxext.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hemanth-kumar-p.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/Netflix-Background.jpg HTTP/1.1Host: isquad.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hemanth-kumar-p.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d HTTP/1.1Host: occ-0-6336-2186.1.nflxso.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hemanth-kumar-p.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png HTTP/1.1Host: assets.nflxext.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png HTTP/1.1Host: assets.nflxext.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hemanth-kumar-p.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/netflix/netflix_PNG25.png HTTP/1.1Host: pngimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1Host: assets.nflxext.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png HTTP/1.1Host: assets.nflxext.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png HTTP/1.1Host: assets.nflxext.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/Netflix-Background.jpg HTTP/1.1Host: isquad.tvConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d HTTP/1.1Host: occ-0-6336-2186.1.nflxso.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: hemanth-kumar-p.github.io
Source: global traffic	DNS traffic detected: DNS query: pngimg.com
Source: global traffic	DNS traffic detected: DNS query: assets.nflxext.com
Source: global traffic	DNS traffic detected: DNS query: occ-0-6336-2186.1.nflxso.net
Source: global traffic	DNS traffic detected: DNS query: isquad.tv
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 9115Server: GitHub.comContent-Type: text/html; charset=utf-8permissions-policy: interest-cohort=()ETag: "66ce275a-239b"Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'X-GitHub-Request-Id: D82C:3340BB:1C99E33:200B8C7:66D39E32Accept-Ranges: bytesAge: 0Date: Sat, 31 Aug 2024 22:50:26 GMTVia: 1.1 varnishX-Served-By: cache-nyc-kteb1890075-NYCX-Cache: MISSX-Cache-Hits: 0X-Timer: S1725144626.382751,VS0,VE10Vary: Accept-EncodingX-Fastly-Request-ID: a012c2c0f56aeba98acad59566b7681656e0531e

Source: chromecache_65.2.dr	String found in binary or memory: https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png
Source: chromecache_65.2.dr	String found in binary or memory: https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png
Source: chromecache_65.2.dr	String found in binary or memory: https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg
Source: chromecache_65.2.dr	String found in binary or memory: https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png
Source: chromecache_65.2.dr	String found in binary or memory: https://isquad.tv/wp-content/uploads/2018/08/Netflix-Background.jpg
Source: chromecache_65.2.dr	String found in binary or memory: https://occ-0-6336-2186.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9
Source: chromecache_65.2.dr	String found in binary or memory: https://pngimg.com/uploads/netflix/netflix_PNG25.png

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: classification engine

Classification label: mal92.phis.win@16/28@22/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2388,i,146692562838775030,3841611366193780439,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hemanth-kumar-p.github.io/E-comm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2388,i,146692562838775030,3841611366193780439,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://hemanth-kumar-p.github.io/E-comm	100%	Avira URL Cloud	phishing
https://hemanth-kumar-p.github.io/E-comm	5%	Virustotal		Browse
https://hemanth-kumar-p.github.io/E-comm	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
fp2e7a.wpc.phicdn.net	0%	Virustotal		Browse
isquad.tv	0%	Virustotal		Browse
assets.nflxext.com	0%	Virustotal		Browse
pngimg.com	0%	Virustotal		Browse
hemanth-kumar-p.github.io	8%	Virustotal		Browse
www.google.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://occ-0-6336-2186.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9	0%	Avira URL Cloud	safe
https://isquad.tv/wp-content/uploads/2018/08/Netflix-Background.jpg	0%	Avira URL Cloud	safe
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png	0%	Avira URL Cloud	safe
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png	0%	Avira URL Cloud	safe
https://hemanth-kumar-p.github.io/css/netflix.css	100%	Avira URL Cloud	phishing
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg	0%	Avira URL Cloud	safe
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png	0%	Virustotal		Browse
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png	0%	Avira URL Cloud	safe
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png	0%	Virustotal		Browse
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png	0%	Virustotal		Browse
https://pngimg.com/uploads/netflix/netflix_PNG25.png	1%	Virustotal		Browse
https://occ-0-6336-2186.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d	0%	Avira URL Cloud	safe
https://pngimg.com/uploads/netflix/netflix_PNG25.png	0%	Avira URL Cloud	safe
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
occ-0-6336-2186.1.nflxso.net	103.57.86.196	true	false		unknown
www.google.com	142.250.185.164	true	false	0%, Virustotal, Browse	unknown
isquad.tv	188.165.80.188	true	false	0%, Virustotal, Browse	unknown
assets.nflxext.com	45.57.90.1	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
hemanth-kumar-p.github.io	185.199.108.153	true	true	8%, Virustotal, Browse	unknown
pngimg.com	104.26.5.108	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://hemanth-kumar-p.github.io/E-comm	true		unknown
https://isquad.tv/wp-content/uploads/2018/08/Netflix-Background.jpg	false	Avira URL Cloud: safe	unknown
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://hemanth-kumar-p.github.io/css/netflix.css	false	Avira URL Cloud: phishing	unknown
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://occ-0-6336-2186.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d	false	Avira URL Cloud: safe	unknown
https://hemanth-kumar-p.github.io/E-comm/	true		unknown
https://pngimg.com/uploads/netflix/netflix_PNG25.png	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://occ-0-6336-2186.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9	chromecache_65.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States		15169	GOOGLEUS	false
188.165.80.188	isquad.tv	France		16276	OVHFR	false
45.57.90.1	assets.nflxext.com	United States		40027	NETFLIX-ASNUS	false
104.26.5.108	pngimg.com	United States		13335	CLOUDFLARENETUS	false
172.67.75.130	unknown	United States		13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.185.164	www.google.com	United States		15169	GOOGLEUS	false
185.199.108.153	hemanth-kumar-p.github.io	Netherlands		54113	FASTLYUS	true
103.57.86.197	unknown	India		133982	EXCITEL-AS-INExcitelBroadbandPrivateLimitedIN	false
103.57.86.196	occ-0-6336-2186.1.nflxso.net	India		133982	EXCITEL-AS-INExcitelBroadbandPrivateLimitedIN	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1502353
Start date and time:	2024-09-01 00:49:31 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hemanth-kumar-p.github.io/E-comm
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal92.phis.win@16/28@22/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 74.125.206.84, 172.217.16.206, 34.104.35.123, 172.217.18.10, 216.58.206.42, 142.250.185.234, 142.250.185.74, 172.217.16.202, 142.250.184.202, 142.250.186.74, 142.250.181.234, 216.58.212.138, 172.217.18.106, 216.58.206.74, 142.250.186.42, 172.217.16.138, 142.250.186.138, 172.217.23.106, 142.250.74.202, 2.23.209.140, 2.23.209.149, 2.23.209.130, 2.23.209.187, 2.23.209.179, 2.23.209.133, 2.23.209.182, 40.68.123.157, 93.184.221.240, 192.229.221.95, 20.166.126.56, 20.242.39.171, 142.250.185.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, th.bing.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, th.bing.com.edgekey.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, p-th.bing.com.trafficmanager.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://hemanth-kumar-p.github.io/E-comm/ Model: jbxai	{ "brand":["netflix"], "contains_trigger_text":false, "prominent_button_name":"get started", "text_input_field_labels":["email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://hemanth-kumar-p.github.io/E-comm/ Model: jbxai	{ "phishing_score":9, "brand_name":"Netflix", "reasons":"The domain 'hemanth-kumar-p.github.io' does not match the legitimate domain associated with Netflix, which is 'www.netflix.com'. The domain is a personal GitHub Pages domain belonging to a user named Hemanth Kumar, which is unusual for a well-known brand like Netflix. The design and layout of the webpage also seem to be a poor imitation of the actual Netflix website, with a dark-themed design and a sign-up form that is not secure (HTTPS). These factors indicate a high likelihood that the site is a phishing attempt."}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 51

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	151687
Entropy (8bit):	7.989286658904115
Encrypted:	false
SSDEEP:	3072:0FqkZ1XMvfRSLzMyYu0DaZTq8cD5lsozQjiUBvEKOH0JO:oXyRSLiu9ZTq8cl58jdvE/H0k
MD5:	186A706493DD515E30F8AD682D068578
SHA1:	2D09CAD7878E23F97CBAC2784A58056C61E80F0D
SHA-256:	4A3BFDF68DE04166878C6BFA4C5B0F57A100CAD45AB80939433E8F7AEEF4B7A4
SHA-512:	58A42545466CD303F7555A48975FE4B9EC06FD3BCB90619518DF97B7D310CF284F68605650B71983213BEB4AC2362D387D82D40987484A297FBA9F041F8A5D6B
Malicious:	false
Reputation:	low
URL:	https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png
Preview:	.PNG........IHDR.............5.......sRGB.......@.IDATx..{.d.U...ffe...Ue.l..nc...<.CCc....<.0..B0.0B..aFbx..<$....HX......... ...`[..=..i..-.`cc...].....w....;.b..qo.}.X;..Z{.....;..\|w.s"f.*.@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P.....k..gx'........[.V.....q"....}..W..@....v_......j\....@!p...Q<B...."....~..../...(...B. P......(....C............ox..OuP....@!p:..yb.@u.8..E.w@}".;.......A..L...7L.^!P....@&..A.....A\.e.......z.......x`..}..^w..U9..B..(.N..:/.....{^.3).^BX$p...f.A..m$k.....>.."vk...],...B...0Q\E......<...K7E.w....B. ~.V.v#\|.\|.;......5..S....@!p...#.P......!d.ZV................_....[E........./..#....(...B.4!.sD.W.I..b.B...k!.E....R......c.o/..........q._....W.B..(........;....R..9..^.`...P.H..bp"GyJ....b.?6+.&yS....`.v.....

Chrome Cache Entry: 52

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	151687
Entropy (8bit):	7.989286658904115
Encrypted:	false
SSDEEP:	3072:0FqkZ1XMvfRSLzMyYu0DaZTq8cD5lsozQjiUBvEKOH0JO:oXyRSLiu9ZTq8cl58jdvE/H0k
MD5:	186A706493DD515E30F8AD682D068578
SHA1:	2D09CAD7878E23F97CBAC2784A58056C61E80F0D
SHA-256:	4A3BFDF68DE04166878C6BFA4C5B0F57A100CAD45AB80939433E8F7AEEF4B7A4
SHA-512:	58A42545466CD303F7555A48975FE4B9EC06FD3BCB90619518DF97B7D310CF284F68605650B71983213BEB4AC2362D387D82D40987484A297FBA9F041F8A5D6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............5.......sRGB.......@.IDATx..{.d.U...ffe...Ue.l..nc...<.CCc....<.0..B0.0B..aFbx..<$....HX......... ...`[..=..i..-.`cc...].....w....;.b..qo.}.X;..Z{.....;..\|w.s"f.*.@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P....@!P.....k..gx'........[.V.....q"....}..W..@....v_......j\....@!p...Q<B...."....~..../...(...B. P......(....C............ox..OuP....@!p:..yb.@u.8..E.w@}".;.......A..L...7L.^!P....@&..A.....A\.e.......z.......x`..}..^w..U9..B..(.N..:/.....{^.3).^BX$p...f.A..m$k.....>.."vk...],...B...0Q\E......<...K7E.w....B. ~.V.v#\|.\|.;......5..S....@!p...#.P......!d.ZV................_....[E........./..#....(...B.4!.sD.W.I..b.B...k!.E....R......c.o/..........q._....W.B..(........;....R..9..^.`...P.H..bp"GyJ....b.?6+.&yS....`.v.....

Chrome Cache Entry: 53

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Category:	dropped
Size (bytes):	49614
Entropy (8bit):	7.935722465342136
Encrypted:	false
SSDEEP:	1536:F5p+9SA6w1sC4S+KJj3nNfeo2JmunFRfVSF:N+9F6qBTJj3wo2JVf6
MD5:	A48333D43C19612ED61987FA5DBFF3C5
SHA1:	8A8781250B96FEE7830EB63EE8DDA19E5C871881
SHA-256:	492FDEBD363E40CBBA153A244BCFE2A7F5F7CF20AFF0805FE45D5C7E2180B875
SHA-512:	FF3CC72BDFB03E8D372D84001C80ECDE5A8100F8675D4C427C09BBD464BE7C5D430D1E10DDFB7E540262EF2B3914C22594BF4306477391DFD9819E4266DE9E98
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................................................................................................................................................................................................................................................................................................................................1.../%c..............iX ..................3.......................k.................Me.sq.k0...........s.lr.X.@....................z...............msU@................_Z..4.....8.........". ....o.....................wE..SG.....k... ...<......t...n.................mM. .............6...q<V..................v...@.............:......................wm.{..............m#.lp........................k.-...`3.u..'Vk..h..w....9.Nk..\.Ek...jNV.:....m...{..s9.?M...

Chrome Cache Entry: 54

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3840 x 2160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	85453
Entropy (8bit):	5.473108188107318
Encrypted:	false
SSDEEP:	768:5tnr1bvuoEvMBgYrLE7dUQEl4tDlotyTa/o8FzPfIR:5HbnEvM7nE7WQEl4tDgqUM
MD5:	015BB7B76FAB1611EFA1572F900DFC91
SHA1:	62B90D03A5A7BE0F77F93C2448AF4433711FDF23
SHA-256:	135ECB85829656238CB0DFD4918FE41AF401019EEB7CE149A6549BFDE04497C1
SHA-512:	C61A1A1F85C9A95A49C7E8EADA5FCB6A58E6118117722D38A26D6BE4F30A231C968B05BD10E696690AD68D959FD85E26A9A4F59613D10148A76B0AD483761F2B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......p........r....pHYs................6iCCPPhotoshop ICC profile..x...J.P.@...P+.qpx.((..`.-E...!...Ji.^^.~..[..w...QpP...@q...!........r...u.a.a.k.n:..\|9...S.....n....$....+..y.;...\|..L..n.. @.B....0.~.A...:i.@<..^./@)...()..A\|.f..\|0..3.}.0ut..jI:Rg.S-..eI....<.e:.dr?...&........b..n:r.jY{..3.......Xz,ZA8T..*......x..oazR..+....V...../..O..ZOb..;#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:

Chrome Cache Entry: 55

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	254586
Entropy (8bit):	7.993370164744776
Encrypted:	true
SSDEEP:	3072:KEPpQE67ZSxps4pKmlRbFCS/u5hWcfIV2Gn1kXNrA+HdnhPkOWlTPZCLh7Ywax6s:5P6t4HRu5hWd3nanHTkpo7Raj
MD5:	2995E70023477EF72300F24E45ABA1D5
SHA1:	92C13CD17C41CB9580F59197A3008FD9CCA432C7
SHA-256:	1E5A6122C8E39862AA1C92EAE0E83E92458232D930620E9CA0C68E9BE425AA67
SHA-512:	7EBA01FAA077439A2BC80840579C5654885A99F3878600B5C3E9B59B3F8D269FEF9D7ED373A4EF8886AB71D70FE1FB47845192160B3102765F430E5B01877574
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............5.......IDATx...y.$.u..~.............}...^...f$....!i4..G3....i..>..kVK..R.(Q.)..A....W7........3..........+..;.........f...........}@....2. ..Z..o.e...@k}..!C....A. ...$C.{....!C........"C.{.Z..e..!...!.8hQ2d....<h.2dx3.=@3...f/..2dxC....oy.!PJe$0.]......5C..........$..-..=.2.Nd.C....o...[..A....AvQe.!C.;.....2..!C..Ev..!..@v/...5....I.P,.9q..A..!C.7..}....9o.....!.Rf....uq.....Z...2d.p.!#..2d.!C....2.p...2d.!.=...f.!...)..s....8dw...2d..q....~...#C..oQdk.3d.....yx.G..<hQn+.R.r9...A.rGB...3..Rb.9h1.8d......j..3.<s.bd...E.[....=z......-F.{..RX.."...!.>P..9\|.0.\|. ..Z.;.....q....7o.V....w,.....Z..8....\|.!3.d.[ ......^.L}.2d.p."#.w.2...nB...!C.;....!C...2d..9.d.!C...2.c..`..c.g.avv....!C...^72..!..p.......GJI.R.:d....T..:h12d..=.2d..kkk$I..}....z.(...-~......."o.n.a.9.e.p..@2dx.!..P(..A.....R...y...3.!.m.R.kmvo.Ed.0.HH)QJ...A..!.].,.S......\|}.L..FB...03d.......b..#.<r.bdx.......@F.3...:K.!C.;...P.V.Z.....d&.7...'C..

Chrome Cache Entry: 56

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Category:	downloaded
Size (bytes):	49614
Entropy (8bit):	7.935722465342136
Encrypted:	false
SSDEEP:	1536:F5p+9SA6w1sC4S+KJj3nNfeo2JmunFRfVSF:N+9F6qBTJj3wo2JVf6
MD5:	A48333D43C19612ED61987FA5DBFF3C5
SHA1:	8A8781250B96FEE7830EB63EE8DDA19E5C871881
SHA-256:	492FDEBD363E40CBBA153A244BCFE2A7F5F7CF20AFF0805FE45D5C7E2180B875
SHA-512:	FF3CC72BDFB03E8D372D84001C80ECDE5A8100F8675D4C427C09BBD464BE7C5D430D1E10DDFB7E540262EF2B3914C22594BF4306477391DFD9819E4266DE9E98
Malicious:	false
Reputation:	low
URL:	https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................................................................................................................................................................................................................................................................................................................................1.../%c..............iX ..................3.......................k.................Me.sq.k0...........s.lr.X.@....................z...............msU@................_Z..4.....8.........". ....o.....................wE..SG.....k... ...<......t...n.................mM. .............6...q<V..................v...@.............:......................wm.{..............m#.lp........................k.-...`3.u..'Vk..h..w....9.Nk..\.Ek...jNV.:....m...{..s9.?M...

Chrome Cache Entry: 57

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Category:	dropped
Size (bytes):	278272
Entropy (8bit):	7.988645988166378
Encrypted:	false
SSDEEP:	6144:qEMlWmqd9hIf0/H+1S6rsGAd0+hXSjSWRW+RlMltbS:+TqnhIf0/0Q1Fh7WR/Z
MD5:	4383A991299A3B937C60449B77FD6A2A
SHA1:	8DC10B1F59916C762771A140FC733977D333C621
SHA-256:	94FDEA75413BA4FE3568D01B8F0E649347D39D446E86A36D8E086DCB238751F1
SHA-512:	043316C4DF17D6020978814A9152C1839DCF7ED542717E5F3F1FE745DD20DB73DDE5756FCFC4FE37BF1593FC685D60FCEC317FA2EEF2D90648201219E3F31B62
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........e...."................................................n....w.W1.......8.\|.>....u=...).......\X.S!5...`M..2}a]...=..s....Tz.#.P......WT@..g9.:'..#......%.......f..+.lv.#.r.q..>}7d....\]K..u.F..d.0.w..s.R..l%......i\|.Z....S>.:\|.7...s...\C[...Q...?p..8.^.y...k.E..`$.`....I8.....WEA.I$.q.:#(...z.i=.......n..K..u.m&z.!....h.7......y...l..g@....>...R]L...=wz.$..L.L..kx....\|......X.[....>c. P...\V.~w...t<..${7o.a[..es]... `...+.<.i..}......U....P..&q'..I$.I%...`.G.....k.,.....N..c..c}....0..\.%!pd.%...K..&3__}gM..5^kO..%.F.~..'u.I$..I.8-l.o....$e>C..4.fg.....z\....RJ...M...]p..s....+...u..7....1...!.TUg.[E..Y7..4.{..?...~JW.Z(....`Nk[.I$..k...../..9zq.<.^.J^../Yp.K....Mc^C..T....{.w..X....1.U.YY.2.......D...I.I.%...l.\o..7...e.2f.Wi.>qgb.r...w.S.....5v.&......Kt'.zl4..L./)+.G.^GA

Chrome Cache Entry: 58

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	254586
Entropy (8bit):	7.993370164744776
Encrypted:	true
SSDEEP:	3072:KEPpQE67ZSxps4pKmlRbFCS/u5hWcfIV2Gn1kXNrA+HdnhPkOWlTPZCLh7Ywax6s:5P6t4HRu5hWd3nanHTkpo7Raj
MD5:	2995E70023477EF72300F24E45ABA1D5
SHA1:	92C13CD17C41CB9580F59197A3008FD9CCA432C7
SHA-256:	1E5A6122C8E39862AA1C92EAE0E83E92458232D930620E9CA0C68E9BE425AA67
SHA-512:	7EBA01FAA077439A2BC80840579C5654885A99F3878600B5C3E9B59B3F8D269FEF9D7ED373A4EF8886AB71D70FE1FB47845192160B3102765F430E5B01877574
Malicious:	false
Reputation:	low
URL:	https://occ-0-6336-2186.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d
Preview:	.PNG........IHDR.............5.......IDATx...y.$.u..~.............}...^...f$....!i4..G3....i..>..kVK..R.(Q.)..A....W7........3..........+..;.........f...........}@....2. ..Z..o.e...@k}..!C....A. ...$C.{....!C........"C.{.Z..e..!...!.8hQ2d....<h.2dx3.=@3...f/..2dxC....oy.!PJe$0.]......5C..........$..-..=.2.Nd.C....o...[..A....AvQe.!C.;.....2..!C..Ev..!..@v/...5....I.P,.9q..A..!C.7..}....9o.....!.Rf....uq.....Z...2d.p.!#..2d.!C....2.p...2d.!.=...f.!...)..s....8dw...2d..q....~...#C..oQdk.3d.....yx.G..<hQn+.R.r9...A.rGB...3..Rb.9h1.8d......j..3.<s.bd...E.[....=z......-F.{..RX.."...!.>P..9\|.0.\|. ..Z.;.....q....7o.V....w,.....Z..8....\|.!3.d.[ ......^.L}.2d.p."#.w.2...nB...!C.;....!C...2d..9.d.!C...2.c..`..c.g.avv....!C...^72..!..p.......GJI.R.:d....T..:h12d..=.2d..kkk$I..}....z.(...-~......."o.n.a.9.e.p..@2dx.!..P(..A.....R...y...3.!.m.R.kmvo.Ed.0.HH)QJ...A..!.].,.S......\|}.L..FB...03d.......b..#.<r.bdx.......@F.3...:K.!C.;...P.V.Z.....d&.7...'C..

Chrome Cache Entry: 59

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 210, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	20506
Entropy (8bit):	7.979541991963697
Encrypted:	false
SSDEEP:	384:4FdLgjnSkU4g5tOEkRzi8QrHAqjfhDMzBvkl3e+v+EnCectZXhN37PO:4FNyg6EkBi8Q0sfh8BvkI+vBnCeYTDO
MD5:	587E040F20259792094901CA9739669E
SHA1:	D48B9DE536ECD248AB1D923BF837C6958A9E0CEC
SHA-256:	E1FA26CC34FDA574EDC01D09E374D6F10735A3FA621BDDE87C104EE15453D4B6
SHA-512:	5E6B251454CAE8E34B4DD8875EF9E1F0630295F671BA46EA8F5723D8BA29948A7EFABD3074F09DF6B5340E4B51C7A91F601C0B1B1B38CE460821E25E964E92C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................PLTE.....#..!..&..(..8........!.......1E.#;..+.......2H.8K.'@.-B..#..5.......6J..2.,A.#: ;M <Q.)B#?R.)?....%=...........1#@V.&>.:O....7M..'./D'CW.4F+FX....>S 6I.,D.(:..6(Mb=`m Ja./G..."2/J].%6.F].,=1Ma....Re9]m..((H^.1K@co..$'3=..Sq}.<.5N...Ghr&Rf5Qa6Tg!/;l...;QAer.#8Yt..>V. i}~0Vh+9DNmy...!D[/5=)BSVotFbo..3r.....;Yj.&0^x{.Ja.5I../...eyz./H..2Mju ,5>AF.Oe<NY.BX5YhYsxA\j^rt..'.7P..".D[c{.GGI4[l~..<Tb.._4:B')....'.6<GR2CP.9]y.5>I.."......Pgm..}.2K......ER]....=W+>L...\|.}..e4IW-/>q{xZSEt..)Vk..$...!1D...jnv'9M...,..Gix.7R##7...bYG9<;....vV.-E ...~n....~^jo653&="#)itqRY_<..z}u..ptvma`\GKR.01wr_zlRh_NB?8....yaURQ......pfROMI.......\|.....I]e...IE?......lkhNQV[XT}yi...M........kh].....r..[afQL?Y.&..r............nbGm....p......7.$...D!/..).)4g$1......1@......(.x..L.IDATx.l.Mk.V....;....F...]..&...v..0!....7....P(......6..l..n6c.R.*.4.....x..M1!.x.se7...X.^.&z\|.Ww+O..io.~!n.....s.(h.+I.......FT1r...A.DN.GIBr..c;.L.`t.G...........{3..... ..

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 210, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	20506
Entropy (8bit):	7.979541991963697
Encrypted:	false
SSDEEP:	384:4FdLgjnSkU4g5tOEkRzi8QrHAqjfhDMzBvkl3e+v+EnCectZXhN37PO:4FNyg6EkBi8Q0sfh8BvkI+vBnCeYTDO
MD5:	587E040F20259792094901CA9739669E
SHA1:	D48B9DE536ECD248AB1D923BF837C6958A9E0CEC
SHA-256:	E1FA26CC34FDA574EDC01D09E374D6F10735A3FA621BDDE87C104EE15453D4B6
SHA-512:	5E6B251454CAE8E34B4DD8875EF9E1F0630295F671BA46EA8F5723D8BA29948A7EFABD3074F09DF6B5340E4B51C7A91F601C0B1B1B38CE460821E25E964E92C2
Malicious:	false
Reputation:	low
URL:	https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png
Preview:	.PNG........IHDR....................PLTE.....#..!..&..(..8........!.......1E.#;..+.......2H.8K.'@.-B..#..5.......6J..2.,A.#: ;M <Q.)B#?R.)?....%=...........1#@V.&>.:O....7M..'./D'CW.4F+FX....>S 6I.,D.(:..6(Mb=`m Ja./G..."2/J].%6.F].,=1Ma....Re9]m..((H^.1K@co..$'3=..Sq}.<.5N...Ghr&Rf5Qa6Tg!/;l...;QAer.#8Yt..>V. i}~0Vh+9DNmy...!D[/5=)BSVotFbo..3r.....;Yj.&0^x{.Ja.5I../...eyz./H..2Mju ,5>AF.Oe<NY.BX5YhYsxA\j^rt..'.7P..".D[c{.GGI4[l~..<Tb.._4:B')....'.6<GR2CP.9]y.5>I.."......Pgm..}.2K......ER]....=W+>L...\|.}..e4IW-/>q{xZSEt..)Vk..$...!1D...jnv'9M...,..Gix.7R##7...bYG9<;....vV.-E ...~n....~^jo653&="#)itqRY_<..z}u..ptvma`\GKR.01wr_zlRh_NB?8....yaURQ......pfROMI.......\|.....I]e...IE?......lkhNQV[XT}yi...M........kh].....r..[afQL?Y.&..r............nbGm....p......7.$...D!/..).)4g$1......1@......(.x..L.IDATx.l.Mk.V....;....F...]..&...v..0!....7....P(......6..l..n6c.R.*.4.....x..M1!.x.se7...X.^.&z\|.Ww+O..io.~!n.....s.(h.+I.......FT1r...A.DN.GIBr..c;.L.`t.G...........{3..... ..

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.108694969562841
Encrypted:	false
SSDEEP:	3:mSgOv9inuStkORnj9inY:mSb99StHRnj9L
MD5:	38A873485B7AE1308CAE6AC335B91C16
SHA1:	6AF8F0689E19892AA16DD0AA9B61AB72A6E33423
SHA-256:	9621DB4D5BDF30403DD27E1AF0051B7C06AF423F28E9982A92ADCAB95C4760B2
SHA-512:	ADB2EF159F6F3F5B93E7769E202F82CC6B080D8C79BCB3076FF1104FBFA80927153C9F3A14855E4146414AE57CB293DA139202A886972763375B2C49A7B526CC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgkuQCAjPbwXzRIFDZSQkvoSBQ1QC6-wEgUNlJCS-g==?alt=proto
Preview:	ChsKBw2UkJL6GgAKBw1QC6+wGgAKBw2UkJL6GgA=

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 325x325, components 3
Category:	dropped
Size (bytes):	6810
Entropy (8bit):	7.898831166146157
Encrypted:	false
SSDEEP:	96:2PAf0sCTa8q28AVLGcxxqDN2p0OU94xZ+HMjK29iLrJijd/XTA2XMZsbZa2p8tQD:pf9MBGcxLU9ejKGkpAMD2p8C9/uS7D1
MD5:	0A852265F5094E212BFA3ADF08EEC268
SHA1:	9CC0F7D39A391D47C60A09CD9AD810ADF480B7E2
SHA-256:	52368091CACA75D11BC4F72579B0A02F84F6E2F8860B7017DD30AE895BB22222
SHA-512:	F42375A2DD3FF9BA4B762255FB00D7CA5D4182ED940DD1F549135244AF23356640949AF73FCC251ED29D8926C3DB29DA95A1B87563731AA72A611DFF9648985C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T......E.E.."..................................................R,...B.K..).TX..R...J%....,.......,%)!J.E.)......}....G9...K...2...^.....G.6..".K..D....)q....Q@....~..o...r....U}.j(....dt........e.l.z......#...~....w.....,.T.\.......F{...2..mB.K.......$.~....h.f..,..\......y..%..>....T.\......^.wC.....,.T.\.....E...`}W.6.R......"=...Z1...mB.K..).1.G...x..tf..mB.K..).1.D.\..rO...6.R...K.."K...?./....$.../A.......L>..t.-.).<s.J._..<s.....,.T.\..+.H_G..n..R.eJE......._..c...T.P.s.>d.T.7.....n...,3.>d.X.........X(...0j..._...z9.... ..yg......l/..\|..u`..R.x......qx.S....K.....+V;w.1............<s.J..x.?[...u@...".\|......a"..[...K...<s..X...b'.......@....+V;wY...^C......<..E.N.....=../.....Xp.%a..9.......`...@..J......a.X....,.T.YQ`..J..*R,...B.K........................................................

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Category:	downloaded
Size (bytes):	323929
Entropy (8bit):	7.987040620449085
Encrypted:	false
SSDEEP:	6144:qEMlWmqd9hIf0/H+1S6rsGAd0+hXSjSWRW+RlMltbeP2zwydXB:+TqnhIf0/0Q1Fh7WR/nPTydR
MD5:	D2EDB29F3F970C36AADECBB01ED0BB79
SHA1:	52C2200063E91DDF92838729555D9B6CEE1A499A
SHA-256:	C4D143FBC63DDE4EB0F0F8BD9A8CED56F7E0BD663E45B3A4B7F5F30C9F105BE1
SHA-512:	8DD03E8401B3B3E0322CF2C4AC472A91144C251953D22B23E620EE061460EDC37F8623E38EA577453CC6B7B760B46ABC9A2E2C3CD67EB554E252DF3B13313189
Malicious:	false
Reputation:	low
URL:	https://isquad.tv/wp-content/uploads/2018/08/Netflix-Background.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........e...."................................................n....w.W1.......8.\|.>....u=...).......\X.S!5...`M..2}a]...=..s....Tz.#.P......WT@..g9.:'..#......%.......f..+.lv.#.r.q..>}7d....\]K..u.F..d.0.w..s.R..l%......i\|.Z....S>.:\|.7...s...\C[...Q...?p..8.^.y...k.E..`$.`....I8.....WEA.I$.q.:#(...z.i=.......n..K..u.m&z.!....h.7......y...l..g@....>...R]L...=wz.$..L.L..kx....\|......X.[....>c. P...\V.~w...t<..${7o.a[..es]... `...+.<.i..}......U....P..&q'..I$.I%...`.G.....k.,.....N..c..c}....0..\.%!pd.%...K..&3__}gM..5^kO..%.F.~..'u.I$..I.8-l.o....$e>C..4.fg.....z\....RJ...M...]p..s....+...u..7....1...!.TUg.[E..Y7..4.{..?...~JW.Z(....`Nk[.I$..k...../..9zq.<.^.J^../Yp.K....Mc^C..T....{.w..X....1.U.YY.2.......D...I.I.%...l.\o..7...e.2f.Wi.>qgb.r...w.S.....5v.&......Kt'.zl4..L./)+.G.^GA

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 325x325, components 3
Category:	downloaded
Size (bytes):	6810
Entropy (8bit):	7.898831166146157
Encrypted:	false
SSDEEP:	96:2PAf0sCTa8q28AVLGcxxqDN2p0OU94xZ+HMjK29iLrJijd/XTA2XMZsbZa2p8tQD:pf9MBGcxLU9ejKGkpAMD2p8C9/uS7D1
MD5:	0A852265F5094E212BFA3ADF08EEC268
SHA1:	9CC0F7D39A391D47C60A09CD9AD810ADF480B7E2
SHA-256:	52368091CACA75D11BC4F72579B0A02F84F6E2F8860B7017DD30AE895BB22222
SHA-512:	F42375A2DD3FF9BA4B762255FB00D7CA5D4182ED940DD1F549135244AF23356640949AF73FCC251ED29D8926C3DB29DA95A1B87563731AA72A611DFF9648985C
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th?id=OIP.-M_GY7Ris6IBZ7dDqjvAWQHaHa&w=250&h=250&c=8&rs=1&qlt=90&o=6&dpr=1.3&pid=3.1&rm=2
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T......E.E.."..................................................R,...B.K..).TX..R...J%....,.......,%)!J.E.)......}....G9...K...2...^.....G.6..".K..D....)q....Q@....~..o...r....U}.j(....dt........e.l.z......#...~....w.....,.T.\.......F{...2..mB.K.......$.~....h.f..,..\......y..%..>....T.\......^.wC.....,.T.\.....E...`}W.6.R......"=...Z1...mB.K..).1.G...x..tf..mB.K..).1.D.\..rO...6.R...K.."K...?./....$.../A.......L>..t.-.).<s.J._..<s.....,.T.\..+.H_G..n..R.eJE......._..c...T.P.s.>d.T.7.....n...,3.>d.X.........X(...0j..._...z9.... ..yg......l/..\|..u`..R.x......qx.S....K.....+V;w.1............<s.J..x.?[...u@...".\|......a"..[...K...<s..X...b'.......@....+V;wY...^C......<..E.N.....=../.....Xp.%a..9.......`...@..J......a.X....,.T.YQ`..J..*R,...B.K........................................................

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11531
Entropy (8bit):	4.8885917721420995
Encrypted:	false
SSDEEP:	192:F6I//KFpMYYKJJWmNOwym2QK77maFo/m5u6WNNV:7nCzUIyZTY
MD5:	B42FB2BD653F807A0D9C5B952D6E8849
SHA1:	79E625A17AA063BFB916835F13B4CD5BC47BC72F
SHA-256:	57A859488D448E3CC55A1C2F3DDBAC10889F632913FDBED02BA5B37D60E513C5
SHA-512:	132D42C86D544E0BC72F3AE6E03356617957F11179829982F734FA8A6C3EFF59D7762C5009BCEAE1ABB998C5645FAFA845F20E85FA18CF12850168687C4B3649
Malicious:	false
Reputation:	low
URL:	https://hemanth-kumar-p.github.io/E-comm/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Netflix India-Watch TV Shows Online,Watch Movies Online</title>.. <link rel="icon" href="https://th.bing.com/th?id=OIP.-M_GY7Ris6IBZ7dDqjvAWQHaHa&w=250&h=250&c=8&rs=1&qlt=90&o=6&dpr=1.3&pid=3.1&rm=2"> .. <link rel="stylesheet" href="../css/netflix.css">.. <style>.. *{.. margin: 0px;..}...logo>img{.. height: 100px;.. width: 170px;.. position: relative;.. right: 50px;..}....header{.. display: flex;.. align-items: center;.. justify-content: space-around;.. overflow: hidden;.. ..} ...netflix{.. background-image:linear-gradient(to bottom ,#0f0f0f86,#060606),url("https://isquad.tv/wp-content/uploads/2018/08/Netflix-Background.jpg");.. background-repeat: no-repeat;.. background-size: cover;.. background-position: center;.. width: 100vw;.. height: 95vh;.. border-bottom: 8

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3840 x 2160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	85453
Entropy (8bit):	5.473108188107318
Encrypted:	false
SSDEEP:	768:5tnr1bvuoEvMBgYrLE7dUQEl4tDlotyTa/o8FzPfIR:5HbnEvM7nE7WQEl4tDgqUM
MD5:	015BB7B76FAB1611EFA1572F900DFC91
SHA1:	62B90D03A5A7BE0F77F93C2448AF4433711FDF23
SHA-256:	135ECB85829656238CB0DFD4918FE41AF401019EEB7CE149A6549BFDE04497C1
SHA-512:	C61A1A1F85C9A95A49C7E8EADA5FCB6A58E6118117722D38A26D6BE4F30A231C968B05BD10E696690AD68D959FD85E26A9A4F59613D10148A76B0AD483761F2B
Malicious:	false
Reputation:	low
URL:	https://pngimg.com/uploads/netflix/netflix_PNG25.png
Preview:	.PNG........IHDR.......p........r....pHYs................6iCCPPhotoshop ICC profile..x...J.P.@...P+.qpx.((..`.-E...!...Ji.^^.~..[..w...QpP...@q...!........r...u.a.a.k.n:..\|9...S.....n....$....+..y.;...\|..L..n.. @.B....0.~.A...:i.@<..^./@)...()..A\|.f..\|0..3.}.0ut..jI:Rg.S-..eI....<.e:.dr?...&........b..n:r.jY{..3.......Xz,ZA8T..*......x..oazR..+....V...../..O..ZOb..;#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11418
Entropy (8bit):	7.9451843478999935
Encrypted:	false
SSDEEP:	192:OmrrVi2S1Vk8jYiyXte75R7e8AnFdw8ozUeepPaIYXUPPiHd74HH8rZEyEwz:JrrQ2S0/I777eBk8kULYkcIHuZBEwz
MD5:	77994A67327BA957DFD880E33A91F041
SHA1:	5BA507DE8C9BC4A063BEECB569E89BCF9E0A901C
SHA-256:	B68EA2C7BEA397AA11FADB189CE7D83862BAEBAF03ECE643EB5AA9FB5F755056
SHA-512:	A6DE315AEA77F4B862FB43D08BC0664EE1C085BF551760ADD9D6749BD45515349D6AE416E941BF9B3FC9156AAC10A73D80BF4FCC6FF61297F7155F666652AE79
Malicious:	false
Reputation:	low
URL:	https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png
Preview:	.PNG........IHDR...............,.....PLTE...+++>>>fff,,,..................DDD...........................OOO...... ...%%%""")))'''...+++```===666GGG000AAAppp222444;;;888DDDLLLIIIZZZQQQlll\|\|\|..................rrr.o......tRNS..%...,.._u..)N...+.IDATx...1.. ..1.....~"...z.\|$ ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E.....4..P..8..%[..Y...vz........,.....g.....w...O.}}<./.j.~.......xiW......\|;.~.?.rwS...............i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,....tL....0..i...Z..! -......y.H..<..E@..." ..i.......C@Z..! -......y.H..<..E@..." ..i.......C@Z..! -......y.H..<..E@..." ..i.......C..W.+..A...a......PlIJ..z....\.6.

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11418
Entropy (8bit):	7.9451843478999935
Encrypted:	false
SSDEEP:	192:OmrrVi2S1Vk8jYiyXte75R7e8AnFdw8ozUeepPaIYXUPPiHd74HH8rZEyEwz:JrrQ2S0/I777eBk8kULYkcIHuZBEwz
MD5:	77994A67327BA957DFD880E33A91F041
SHA1:	5BA507DE8C9BC4A063BEECB569E89BCF9E0A901C
SHA-256:	B68EA2C7BEA397AA11FADB189CE7D83862BAEBAF03ECE643EB5AA9FB5F755056
SHA-512:	A6DE315AEA77F4B862FB43D08BC0664EE1C085BF551760ADD9D6749BD45515349D6AE416E941BF9B3FC9156AAC10A73D80BF4FCC6FF61297F7155F666652AE79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............,.....PLTE...+++>>>fff,,,..................DDD...........................OOO...... ...%%%""")))'''...+++```===666GGG000AAAppp222444;;;888DDDLLLIIIZZZQQQlll\|\|\|..................rrr.o......tRNS..%...,.._u..)N...+.IDATx...1.. ..1.....~"...z.\|$ ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E@..." ..i.......B@Z.d! -......Y.H..,..E.....4..P..8..%[..Y...vz........,.....g.....w...O.}}<./.j.~.......xiW......\|;.~.?.rwS...............i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,.H..Y.....0 -.da@Z........i1 ...b@....,....tL....0..i...Z..! -......y.H..<..E@..." ..i.......C@Z..! -......y.H..<..E@..." ..i.......C@Z..! -......y.H..<..E@..." ..i.......C..W.+..A...a......PlIJ..z....\.6.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 1, 2024 00:50:16.057522058 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 1, 2024 00:50:25.164154053 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.164195061 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.164269924 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.164324045 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.164335012 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.164378881 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.164530039 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.164544106 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.164726973 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.164746046 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.623022079 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.623295069 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.623317003 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.623342991 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.623469114 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.623476982 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.624367952 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.624428034 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.624465942 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.624515057 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.625503063 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.625566006 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.625796080 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.625878096 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.625948906 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.625961065 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.668064117 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 1, 2024 00:50:25.668445110 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.668445110 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.668490887 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.730496883 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.730606079 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.730673075 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.733602047 CEST	49735	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.733628988 CEST	443	49735	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.735637903 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.780497074 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.840944052 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.841020107 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.841065884 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.841077089 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.841089964 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.841128111 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.841142893 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.841583014 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.841628075 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.841635942 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.842012882 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.842037916 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.842053890 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.842061996 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.842102051 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.842619896 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.842664957 CEST	443	49736	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.842715979 CEST	49736	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.864880085 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.864913940 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.864978075 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.867583990 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:25.867597103 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:25.875504017 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.875551939 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:25.875611067 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.876240969 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:25.876271963 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:25.876326084 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:25.876601934 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.876616001 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:25.876983881 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:25.876997948 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:25.885930061 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.885962963 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:25.886017084 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.886431932 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.886452913 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:25.887115955 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.887124062 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:25.889724016 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.889724016 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:25.889745951 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:25.901190042 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:25.901220083 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:25.901277065 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:25.901671886 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:25.901688099 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:25.977066040 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:25.977088928 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:25.977152109 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:25.977366924 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:25.977377892 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:26.329148054 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.329454899 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.329473972 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.330235958 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.330398083 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.330426931 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.330497980 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.330568075 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.330890894 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.330946922 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.331115007 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.331123114 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.331545115 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.331603050 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.332535982 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.332623959 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.332762003 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.332768917 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.341000080 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.341182947 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.341197968 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.342214108 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.342269897 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.342998981 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.343059063 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.343164921 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.343170881 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.343250990 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.343419075 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.343441010 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.344279051 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.344418049 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.344444036 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.344450951 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.344471931 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.345215082 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.345276117 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.345433950 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.345442057 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.345477104 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.345536947 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.346251011 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.346306086 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.346410036 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.346421957 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.386327982 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.386331081 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.386343002 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.386343956 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.386343956 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.426548958 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.427536964 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.427544117 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.427573919 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.427584887 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.427599907 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.427609921 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.427634001 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.427649021 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.427681923 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.427925110 CEST	49738	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.427938938 CEST	443	49738	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.431746006 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.431781054 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.431852102 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.432061911 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.432074070 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.437315941 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.438857079 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.439086914 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.439120054 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.439146996 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.439150095 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.439162016 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.439198017 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.439476967 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.439528942 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.440586090 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.440612078 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.440675974 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.440777063 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.440808058 CEST	443	49737	185.199.108.153	192.168.2.4
Sep 1, 2024 00:50:26.440857887 CEST	49737	443	192.168.2.4	185.199.108.153
Sep 1, 2024 00:50:26.441343069 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.441730976 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.441742897 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.442344904 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.442354918 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.442378998 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.442425966 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.442445040 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.442464113 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.442490101 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.444021940 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.444029093 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.444052935 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.444062948 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.444072962 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.444096088 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.444107056 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.444118977 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.444149017 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.480170965 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.480220079 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.480274916 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.480288982 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.480596066 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.480629921 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.480631113 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.480644941 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.480681896 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.480689049 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.480930090 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.480968952 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.480976105 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.481184959 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.481223106 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.481234074 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.525233984 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.525257111 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.525310040 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.525327921 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.525372028 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.525391102 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.525470018 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.525482893 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.529263020 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.529284000 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.529349089 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.529357910 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.529392004 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.530544043 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.530571938 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.530612946 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.530620098 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.530647039 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.530666113 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.568466902 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.568504095 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.568521976 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.568535089 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.568571091 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.568712950 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.569055080 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.569088936 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.569097042 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.569336891 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.569369078 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.569382906 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.569390059 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.569428921 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.569632053 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.569684029 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.569725990 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.569731951 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.570255995 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.570303917 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.570310116 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.570316076 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.570354939 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.570544958 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.570600986 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.570641994 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.570648909 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.571222067 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.571281910 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.571288109 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.571470022 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.571501017 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.571511030 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.571518898 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.571557999 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.573276043 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.611203909 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.611238003 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.611279011 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.611370087 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.611381054 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.611437082 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.615765095 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.615803003 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.615835905 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.615844011 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.615873098 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.615895033 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.617422104 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.617435932 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.617527962 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.617535114 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.617577076 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.618618965 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.618633986 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.618693113 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.618700981 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.618745089 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.626645088 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.656744003 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.656851053 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.656888008 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.656909943 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.656925917 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.656971931 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.657074928 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.657416105 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.657423019 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.657469988 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.657475948 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.657610893 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.657665014 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.657670975 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.657711983 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.657859087 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.658162117 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.658204079 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.658210993 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.658251047 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.658351898 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.658397913 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.658711910 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.658749104 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.658756018 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.658761978 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.658787012 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.659235001 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.659281015 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.659286022 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.659315109 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.659327030 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.659353971 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.664469957 CEST	49741	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.664490938 CEST	443	49741	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.664786100 CEST	49739	443	192.168.2.4	104.26.5.108
Sep 1, 2024 00:50:26.664798975 CEST	443	49739	104.26.5.108	192.168.2.4
Sep 1, 2024 00:50:26.685561895 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.685594082 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.685651064 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.685847998 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.685862064 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.692596912 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:26.692924023 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:26.692940950 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:26.694061995 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:26.694149017 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:26.695154905 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:26.695221901 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:26.695355892 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:26.695363045 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:26.700777054 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:26.700799942 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:26.700854063 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:26.701045036 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:26.701055050 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:26.702950001 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.702966928 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.703017950 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.703025103 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.703054905 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.703800917 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.703815937 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.703866005 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.703871965 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.703919888 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.705528021 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.705550909 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.705585957 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.705591917 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.705621958 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.705641031 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.705717087 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.705765009 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.705774069 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.705789089 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.705832958 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.706119061 CEST	49742	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.706130981 CEST	443	49742	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.710207939 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.710235119 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.710315943 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.710462093 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.710474014 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.745260954 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:26.827491999 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:26.869601965 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:26.877816916 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:26.877829075 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:26.878987074 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:26.879038095 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:26.883441925 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:26.883521080 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:26.883644104 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:26.883651972 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:26.891702890 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.894269943 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.930670977 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:26.931678057 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.931689024 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.931824923 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.931871891 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.932277918 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.932822943 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.932881117 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.937586069 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.937700987 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.938098907 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.938169956 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.938541889 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.938549995 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.938621044 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:26.980515003 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:26.993037939 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.028256893 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.028280020 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.028287888 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.028299093 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.028331995 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.028347015 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.028373957 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.028390884 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.028423071 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.032008886 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.032679081 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.033221960 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.033231020 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.033253908 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.033271074 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.033282042 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.033294916 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.033318043 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.033349037 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.033390045 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.035789013 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.035804987 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.035878897 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.035888910 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.037359953 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.037395000 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.037406921 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.037436008 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.037450075 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.037468910 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.037486076 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.089010000 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.109873056 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.109884024 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.109914064 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.109941959 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.109982014 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.109992027 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.110058069 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.119268894 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.119339943 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.119355917 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.119386911 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.119438887 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.122271061 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.122278929 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.122301102 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.122345924 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.122355938 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.122385025 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.122397900 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.124331951 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.124346018 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.124389887 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.124396086 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.124430895 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.124449968 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.140849113 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.157347918 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.157365084 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.157433033 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.157442093 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.157483101 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.158278942 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.174072981 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.182832956 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.199390888 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.208843946 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.208862066 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.208941936 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.208960056 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.209002972 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.209856033 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.209870100 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.209913969 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.209920883 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.209950924 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.209969997 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.211038113 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.211061001 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.211097002 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.211103916 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.211136103 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.211148977 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.212424994 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.212439060 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.212496996 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.212507963 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.212563038 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.213361025 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.213375092 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.213443041 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.213449955 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.213505030 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.217706919 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.245196104 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.245213032 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.245296955 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.245306969 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.245352030 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.250329018 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.250343084 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.250405073 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.250412941 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.250457048 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.296574116 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.296593904 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.296689034 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.296699047 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.296739101 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.297741890 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.297755957 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.297805071 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.297812939 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.297851086 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.298702002 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.298717022 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.298754930 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.298762083 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.298789024 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.298808098 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.299685001 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.299700975 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.299736023 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.299742937 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.299771070 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.299803019 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.301229000 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.301244974 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.301291943 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.301299095 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.301327944 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.301343918 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.302257061 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.302279949 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.302311897 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.302319050 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.302340984 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.302357912 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.332441092 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.332487106 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.332526922 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.332526922 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.332606077 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.387003899 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.393810987 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.393819094 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.393851995 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.393863916 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.393876076 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.393882990 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.393904924 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.393923998 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.393949032 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.393968105 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.416543961 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.416560888 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.417292118 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.417318106 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.417810917 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.418051958 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.418056011 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.418066978 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.418418884 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.418488026 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.419220924 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.419276953 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.430440903 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.430526018 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.435455084 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.435544014 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.440620899 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.440702915 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.442085028 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:27.442117929 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:27.442167044 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:27.443871021 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.443880081 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.444516897 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:27.444524050 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:27.444724083 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.444732904 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.445126057 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.445138931 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.493416071 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.493416071 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.493453026 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.538652897 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.540247917 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.544275999 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.544286013 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.544307947 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.544320107 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.544331074 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.544331074 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.544346094 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.544384956 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.546892881 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.546900988 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.546921015 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.546927929 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.546936989 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.546948910 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.546957970 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.547010899 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.547720909 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.547766924 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.547796965 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.547806025 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.547816992 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.547857046 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.547863007 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.548032999 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.548065901 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.548070908 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.548075914 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.548111916 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.548115969 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.548525095 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.548553944 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.548571110 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.548582077 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.548619032 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.627635956 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.627645969 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.627685070 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.627697945 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.627753019 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.627779961 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.627818108 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.627830029 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.629914045 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.629930019 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.629961014 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.629983902 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.629990101 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.630017042 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.630028009 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.630070925 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.630809069 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.630819082 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.630845070 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.630873919 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.630887985 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.630909920 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.630929947 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.631191969 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.631202936 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.631232977 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.631263971 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.631278992 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.631306887 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.631321907 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.633218050 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.633218050 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.633234024 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.633240938 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.633300066 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.633308887 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.633336067 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.633342981 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.633353949 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.633367062 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.633389950 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.633716106 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.634177923 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.634252071 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.634298086 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.634308100 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.634613037 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.634660006 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.634665012 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.634696960 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.634737968 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.634742975 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.635555029 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.635595083 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.635598898 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.635656118 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.635696888 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.635703087 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.635823965 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.635863066 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.635868073 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.636641026 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.636682987 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.636688948 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.636758089 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.636799097 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.636804104 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.637622118 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.637654066 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.637661934 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.637666941 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.637702942 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.637725115 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.638508081 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.638546944 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.638552904 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.681277990 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.681284904 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.717180967 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.718215942 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.718235016 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.718272924 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.718282938 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.718307972 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.718326092 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.719484091 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.719497919 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.719542980 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.719551086 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.719600916 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.720793009 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.720808983 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.720865011 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.720870972 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.720906973 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.721030951 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.721067905 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.721074104 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.721147060 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.721194029 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.721204042 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.721306086 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.721343040 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.721349001 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.721579075 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.721621037 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.721631050 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.721668005 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.722490072 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.722534895 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.722538948 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.722556114 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.722588062 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.722594023 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.722603083 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.722870111 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.722906113 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.722913980 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.722951889 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.723274946 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.723297119 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.723316908 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.723319054 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.723325968 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.723335028 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.723354101 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.723359108 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.723366022 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.723381042 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.723398924 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.723402977 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.723408937 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.723417044 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.723432064 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.723462105 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.807048082 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.807070971 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.807109118 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.807118893 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.807148933 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.807166100 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.807977915 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.807993889 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.808037996 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.808044910 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.808068037 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.808087111 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.808175087 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.808218956 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.808223963 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.808248997 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.808330059 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.846570969 CEST	49748	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.846591949 CEST	443	49748	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.949575901 CEST	49747	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.949621916 CEST	443	49747	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.955218077 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.956406116 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.961308002 CEST	49749	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.961318970 CEST	443	49749	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.965361118 CEST	49750	443	192.168.2.4	172.67.75.130
Sep 1, 2024 00:50:27.965379000 CEST	443	49750	172.67.75.130	192.168.2.4
Sep 1, 2024 00:50:27.965899944 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.965914011 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.965929031 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.965970993 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.966010094 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.966043949 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.966058016 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.967663050 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.967683077 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.967741966 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.967761040 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.967809916 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.968194962 CEST	49744	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:27.968214035 CEST	443	49744	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:27.969094992 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.969109058 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.969141960 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.969156027 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.969162941 CEST	49751	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:27.969177008 CEST	443	49751	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:27.969191074 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.969216108 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.970225096 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.970241070 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.970289946 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:27.970302105 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:27.970391989 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.076343060 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:28.100584030 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:28.100600958 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:28.101757050 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:28.101815939 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:28.169290066 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:28.169413090 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:28.211747885 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:28.211775064 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:28.267011881 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:28.317066908 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.317080021 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.317111015 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.317142010 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.317177057 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.317195892 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.317725897 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.318012953 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.318027973 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.318072081 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.318082094 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.318917036 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.318936110 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.318962097 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.318973064 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.318984985 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.319009066 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.319978952 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.319993973 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.320039034 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.320054054 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.320568085 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.320585012 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.320611000 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.320624113 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.320640087 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.320664883 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.402573109 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.402590036 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.402647018 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.402678967 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.402695894 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.402749062 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.418661118 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.644154072 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.644165039 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.644201994 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.644238949 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.644265890 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.644285917 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.644308090 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.645047903 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.645064116 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.645104885 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.645121098 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.645735025 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.670248032 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:28.670286894 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:28.670350075 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:28.672682047 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:28.672693014 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:28.682883978 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.682919979 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.682962894 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:28.682987928 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.683012962 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.683381081 CEST	49743	443	192.168.2.4	103.57.86.196
Sep 1, 2024 00:50:28.683397055 CEST	443	49743	103.57.86.196	192.168.2.4
Sep 1, 2024 00:50:29.300179958 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.300231934 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.300311089 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.300872087 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.300884008 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.330224037 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:29.330295086 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:29.392306089 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:29.392350912 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:29.392570972 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:29.393182993 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:29.393207073 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:29.393349886 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:29.393708944 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:29.393719912 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:29.393954992 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:29.393969059 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:29.622724056 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:29.622755051 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:29.623064995 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:29.680208921 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:29.757009983 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.805196047 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.808976889 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.808986902 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.809478045 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.819279909 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.819351912 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.822623014 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.868499041 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.942311049 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.943633080 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.943640947 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.943671942 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.943695068 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.943706036 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.943727016 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:29.943756104 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:29.943778992 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:30.026196003 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.028846979 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:30.028927088 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:30.028929949 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:30.028968096 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:30.052048922 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:30.086054087 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.086076975 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.087179899 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.087192059 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.087249041 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.092509031 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:30.102334023 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.102449894 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.103080034 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.103091002 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.106497049 CEST	49759	443	192.168.2.4	45.57.90.1
Sep 1, 2024 00:50:30.106527090 CEST	443	49759	45.57.90.1	192.168.2.4
Sep 1, 2024 00:50:30.243194103 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:30.243273020 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:30.243328094 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:30.306921959 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.325107098 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.364495039 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.364526987 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.364541054 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.364574909 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.364579916 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.364590883 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.364603043 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.364620924 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.364633083 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.364650965 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.364651918 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.364669085 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.371918917 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.371927977 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.371949911 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.371958017 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.371964931 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.371979952 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.371983051 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.371998072 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.372018099 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.372044086 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.406281948 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:30.454282999 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.454303980 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.454324961 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.454355001 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.454436064 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.454456091 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.454485893 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.460141897 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.460165977 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.460201979 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.460213900 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.460221052 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.460242987 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.461746931 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.461764097 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.461795092 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.461802006 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.461826086 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.463782072 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.463803053 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.463838100 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.463845968 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.463859081 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.507276058 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.507684946 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:30.507707119 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.508908033 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.508919001 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.508959055 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:30.530225039 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:30.530302048 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.533845901 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:30.533853054 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.537930965 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.537941933 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.537967920 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.538007975 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.538018942 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.538060904 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.544683933 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.544703960 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.544764042 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.544770002 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.545504093 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.545526981 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.545555115 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.545558929 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.545586109 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.546933889 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.546953917 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.546991110 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.546999931 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.547027111 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.547871113 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.547894955 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.547915936 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.547923088 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.547946930 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.548927069 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.548943996 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.548971891 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.548978090 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.549000025 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.586540937 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:30.586560965 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:30.586574078 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:30.586579084 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:30.591469049 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.591504097 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.591519117 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.591525078 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.591571093 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.594969034 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:30.625737906 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.625763893 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.625808954 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.625818968 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.625883102 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.630048037 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.630256891 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.631102085 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.631119967 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.631162882 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.631170034 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.631194115 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.631901979 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.631925106 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.631949902 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.631954908 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.631990910 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.632708073 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.632725000 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.632764101 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.632770061 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.632803917 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.632889986 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.633347988 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.633393049 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.633408070 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.633465052 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.635829926 CEST	49760	443	192.168.2.4	188.165.80.188
Sep 1, 2024 00:50:30.635847092 CEST	443	49760	188.165.80.188	192.168.2.4
Sep 1, 2024 00:50:30.723680019 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:30.723710060 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:30.723778963 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:30.724529028 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:30.724540949 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:30.888215065 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.894722939 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.894732952 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.894752979 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.894759893 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.894762993 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.894778967 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:30.894804001 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:30.894819975 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:30.894834995 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.233566999 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.233577967 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.233632088 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.233649015 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.233670950 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.233690977 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.233705044 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.233742952 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.235481024 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.235493898 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.235517979 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.235543966 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.235551119 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.235599995 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.369677067 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:31.369762897 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:31.371419907 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:31.371428013 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:31.371634960 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:31.372761011 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:31.418406963 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.418423891 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.418493032 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.418510914 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.418550014 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.420500040 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:31.523603916 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.523629904 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.523670912 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.523693085 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.523710012 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.523731947 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.524908066 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.524923086 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.524961948 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.524967909 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.525002003 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.525018930 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.526592970 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.526607037 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.526642084 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.526647091 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.526676893 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.526706934 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.647763968 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:31.647825956 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:31.647954941 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:31.649374008 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:31.649390936 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:31.649451971 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 1, 2024 00:50:31.649458885 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 1, 2024 00:50:31.710931063 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.710951090 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.710993052 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.711011887 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.711025953 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.711052895 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.711839914 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.711854935 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.712172031 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.712177038 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.712217093 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.817507982 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.817527056 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.817727089 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.817753077 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.818098068 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.818304062 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.818317890 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.818455935 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.818463087 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.818530083 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.819308996 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.819323063 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.819401026 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.819406986 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.820168018 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.820190907 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.820197105 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.820202112 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.820223093 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.821717978 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.822006941 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.822021008 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.822623014 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.822654963 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.822662115 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:31.822694063 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.825722933 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:31.837483883 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:32.006191969 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:32.006242990 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:32.006279945 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:32.006310940 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:32.006335020 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:32.008488894 CEST	49761	443	192.168.2.4	103.57.86.197
Sep 1, 2024 00:50:32.008507013 CEST	443	49761	103.57.86.197	192.168.2.4
Sep 1, 2024 00:50:37.978300095 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:37.978383064 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:50:37.978565931 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:40.268177986 CEST	49752	443	192.168.2.4	142.250.185.164
Sep 1, 2024 00:50:40.268213034 CEST	443	49752	142.250.185.164	192.168.2.4
Sep 1, 2024 00:51:27.577645063 CEST	49772	443	192.168.2.4	142.250.186.68
Sep 1, 2024 00:51:27.577696085 CEST	443	49772	142.250.186.68	192.168.2.4
Sep 1, 2024 00:51:27.577800989 CEST	49772	443	192.168.2.4	142.250.186.68
Sep 1, 2024 00:51:27.578075886 CEST	49772	443	192.168.2.4	142.250.186.68
Sep 1, 2024 00:51:27.578089952 CEST	443	49772	142.250.186.68	192.168.2.4
Sep 1, 2024 00:51:28.224776983 CEST	443	49772	142.250.186.68	192.168.2.4
Sep 1, 2024 00:51:28.260416985 CEST	49772	443	192.168.2.4	142.250.186.68
Sep 1, 2024 00:51:28.260435104 CEST	443	49772	142.250.186.68	192.168.2.4
Sep 1, 2024 00:51:28.260967970 CEST	443	49772	142.250.186.68	192.168.2.4
Sep 1, 2024 00:51:28.261682987 CEST	49772	443	192.168.2.4	142.250.186.68
Sep 1, 2024 00:51:28.261755943 CEST	443	49772	142.250.186.68	192.168.2.4
Sep 1, 2024 00:51:28.306879997 CEST	49772	443	192.168.2.4	142.250.186.68
Sep 1, 2024 00:51:38.159771919 CEST	443	49772	142.250.186.68	192.168.2.4
Sep 1, 2024 00:51:38.159841061 CEST	443	49772	142.250.186.68	192.168.2.4
Sep 1, 2024 00:51:38.159940004 CEST	49772	443	192.168.2.4	142.250.186.68
Sep 1, 2024 00:51:39.871817112 CEST	49772	443	192.168.2.4	142.250.186.68
Sep 1, 2024 00:51:39.871860981 CEST	443	49772	142.250.186.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 1, 2024 00:50:23.571311951 CEST	53	55815	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:23.572246075 CEST	53	62656	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:24.779417038 CEST	53	50892	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.154005051 CEST	59485	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.154167891 CEST	63146	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.162404060 CEST	53	59485	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.162790060 CEST	53	63146	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.865618944 CEST	61127	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.866071939 CEST	56910	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.866734028 CEST	49169	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.867140055 CEST	61852	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.873694897 CEST	53	49169	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.874115944 CEST	53	61127	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.874434948 CEST	53	61852	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.875171900 CEST	53	56910	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.891802073 CEST	59152	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.891941071 CEST	49936	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.900707006 CEST	53	49936	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.900717974 CEST	53	59152	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.963458061 CEST	58536	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.963639021 CEST	56199	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:25.976103067 CEST	53	58536	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.976644993 CEST	53	56199	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:25.977998972 CEST	53	59625	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:26.433497906 CEST	49962	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:26.433686018 CEST	59544	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:26.440038919 CEST	53	49962	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:26.440247059 CEST	53	59544	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:26.689207077 CEST	54775	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:26.689418077 CEST	53719	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:26.699269056 CEST	53	54775	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:26.700225115 CEST	53	53719	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:27.420165062 CEST	57813	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:27.422610044 CEST	61145	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:27.426745892 CEST	53	57813	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:27.429096937 CEST	53	61145	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:29.301755905 CEST	65358	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:29.302196980 CEST	51336	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:29.306123018 CEST	49438	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:29.306307077 CEST	52930	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:50:29.313780069 CEST	53	51336	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:29.314351082 CEST	53	52930	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:29.314845085 CEST	53	49438	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:29.324471951 CEST	53	65358	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:42.395001888 CEST	53	65167	1.1.1.1	192.168.2.4
Sep 1, 2024 00:50:44.265974045 CEST	138	138	192.168.2.4	192.168.2.255
Sep 1, 2024 00:51:01.426671028 CEST	53	63099	1.1.1.1	192.168.2.4
Sep 1, 2024 00:51:23.304265022 CEST	53	53800	1.1.1.1	192.168.2.4
Sep 1, 2024 00:51:24.287271976 CEST	53	56896	1.1.1.1	192.168.2.4
Sep 1, 2024 00:51:27.525675058 CEST	52302	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:51:27.531740904 CEST	57404	53	192.168.2.4	1.1.1.1
Sep 1, 2024 00:51:27.532205105 CEST	53	52302	1.1.1.1	192.168.2.4
Sep 1, 2024 00:51:27.539020061 CEST	53	57404	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 1, 2024 00:50:25.154005051 CEST	192.168.2.4	1.1.1.1	0xd81b	Standard query (0)	hemanth-kumar-p.github.io	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.154167891 CEST	192.168.2.4	1.1.1.1	0x34e8	Standard query (0)	hemanth-kumar-p.github.io	65	IN (0x0001)	false
Sep 1, 2024 00:50:25.865618944 CEST	192.168.2.4	1.1.1.1	0xac1f	Standard query (0)	pngimg.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.866071939 CEST	192.168.2.4	1.1.1.1	0x5ae5	Standard query (0)	pngimg.com	65	IN (0x0001)	false
Sep 1, 2024 00:50:25.866734028 CEST	192.168.2.4	1.1.1.1	0x633d	Standard query (0)	assets.nflxext.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.867140055 CEST	192.168.2.4	1.1.1.1	0x38b8	Standard query (0)	assets.nflxext.com	65	IN (0x0001)	false
Sep 1, 2024 00:50:25.891802073 CEST	192.168.2.4	1.1.1.1	0x9c00	Standard query (0)	occ-0-6336-2186.1.nflxso.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.891941071 CEST	192.168.2.4	1.1.1.1	0x8dfc	Standard query (0)	occ-0-6336-2186.1.nflxso.net	65	IN (0x0001)	false
Sep 1, 2024 00:50:25.963458061 CEST	192.168.2.4	1.1.1.1	0xabff	Standard query (0)	isquad.tv	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.963639021 CEST	192.168.2.4	1.1.1.1	0x5de3	Standard query (0)	isquad.tv	65	IN (0x0001)	false
Sep 1, 2024 00:50:26.433497906 CEST	192.168.2.4	1.1.1.1	0x59a3	Standard query (0)	assets.nflxext.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:26.433686018 CEST	192.168.2.4	1.1.1.1	0xc50d	Standard query (0)	assets.nflxext.com	65	IN (0x0001)	false
Sep 1, 2024 00:50:26.689207077 CEST	192.168.2.4	1.1.1.1	0x46dc	Standard query (0)	pngimg.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:26.689418077 CEST	192.168.2.4	1.1.1.1	0x5546	Standard query (0)	pngimg.com	65	IN (0x0001)	false
Sep 1, 2024 00:50:27.420165062 CEST	192.168.2.4	1.1.1.1	0x4d00	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:27.422610044 CEST	192.168.2.4	1.1.1.1	0x649d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 1, 2024 00:50:29.301755905 CEST	192.168.2.4	1.1.1.1	0x98e8	Standard query (0)	isquad.tv	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:29.302196980 CEST	192.168.2.4	1.1.1.1	0xe0bb	Standard query (0)	isquad.tv	65	IN (0x0001)	false
Sep 1, 2024 00:50:29.306123018 CEST	192.168.2.4	1.1.1.1	0xc3b9	Standard query (0)	occ-0-6336-2186.1.nflxso.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:29.306307077 CEST	192.168.2.4	1.1.1.1	0xe67d	Standard query (0)	occ-0-6336-2186.1.nflxso.net	65	IN (0x0001)	false
Sep 1, 2024 00:51:27.525675058 CEST	192.168.2.4	1.1.1.1	0x9a02	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:51:27.531740904 CEST	192.168.2.4	1.1.1.1	0xd9ec	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 1, 2024 00:50:25.162404060 CEST	1.1.1.1	192.168.2.4	0xd81b	No error (0)	hemanth-kumar-p.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.162404060 CEST	1.1.1.1	192.168.2.4	0xd81b	No error (0)	hemanth-kumar-p.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.162404060 CEST	1.1.1.1	192.168.2.4	0xd81b	No error (0)	hemanth-kumar-p.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.162404060 CEST	1.1.1.1	192.168.2.4	0xd81b	No error (0)	hemanth-kumar-p.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.873694897 CEST	1.1.1.1	192.168.2.4	0x633d	No error (0)	assets.nflxext.com		45.57.90.1	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.873694897 CEST	1.1.1.1	192.168.2.4	0x633d	No error (0)	assets.nflxext.com		45.57.91.1	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.874115944 CEST	1.1.1.1	192.168.2.4	0xac1f	No error (0)	pngimg.com		104.26.5.108	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.874115944 CEST	1.1.1.1	192.168.2.4	0xac1f	No error (0)	pngimg.com		104.26.4.108	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.874115944 CEST	1.1.1.1	192.168.2.4	0xac1f	No error (0)	pngimg.com		172.67.75.130	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.875171900 CEST	1.1.1.1	192.168.2.4	0x5ae5	No error (0)	pngimg.com			65	IN (0x0001)	false
Sep 1, 2024 00:50:25.900717974 CEST	1.1.1.1	192.168.2.4	0x9c00	No error (0)	occ-0-6336-2186.1.nflxso.net		103.57.86.196	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.900717974 CEST	1.1.1.1	192.168.2.4	0x9c00	No error (0)	occ-0-6336-2186.1.nflxso.net		103.57.86.197	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:25.976103067 CEST	1.1.1.1	192.168.2.4	0xabff	No error (0)	isquad.tv		188.165.80.188	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:26.440038919 CEST	1.1.1.1	192.168.2.4	0x59a3	No error (0)	assets.nflxext.com		45.57.90.1	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:26.440038919 CEST	1.1.1.1	192.168.2.4	0x59a3	No error (0)	assets.nflxext.com		45.57.91.1	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:26.699269056 CEST	1.1.1.1	192.168.2.4	0x46dc	No error (0)	pngimg.com		172.67.75.130	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:26.699269056 CEST	1.1.1.1	192.168.2.4	0x46dc	No error (0)	pngimg.com		104.26.5.108	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:26.699269056 CEST	1.1.1.1	192.168.2.4	0x46dc	No error (0)	pngimg.com		104.26.4.108	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:26.700225115 CEST	1.1.1.1	192.168.2.4	0x5546	No error (0)	pngimg.com			65	IN (0x0001)	false
Sep 1, 2024 00:50:27.426745892 CEST	1.1.1.1	192.168.2.4	0x4d00	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:27.429096937 CEST	1.1.1.1	192.168.2.4	0x649d	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 1, 2024 00:50:29.314845085 CEST	1.1.1.1	192.168.2.4	0xc3b9	No error (0)	occ-0-6336-2186.1.nflxso.net		103.57.86.197	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:29.314845085 CEST	1.1.1.1	192.168.2.4	0xc3b9	No error (0)	occ-0-6336-2186.1.nflxso.net		103.57.86.196	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:29.324471951 CEST	1.1.1.1	192.168.2.4	0x98e8	No error (0)	isquad.tv		188.165.80.188	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:39.939269066 CEST	1.1.1.1	192.168.2.4	0x94dc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 1, 2024 00:50:39.939269066 CEST	1.1.1.1	192.168.2.4	0x94dc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:50:53.486291885 CEST	1.1.1.1	192.168.2.4	0xc56c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 1, 2024 00:50:53.486291885 CEST	1.1.1.1	192.168.2.4	0xc56c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:51:16.501319885 CEST	1.1.1.1	192.168.2.4	0x6358	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 1, 2024 00:51:16.501319885 CEST	1.1.1.1	192.168.2.4	0x6358	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:51:27.532205105 CEST	1.1.1.1	192.168.2.4	0x9a02	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Sep 1, 2024 00:51:27.539020061 CEST	1.1.1.1	192.168.2.4	0xd9ec	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 1, 2024 00:51:36.586491108 CEST	1.1.1.1	192.168.2.4	0xdd12	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 1, 2024 00:51:36.586491108 CEST	1.1.1.1	192.168.2.4	0xdd12	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

hemanth-kumar-p.github.io

https:

assets.nflxext.com

pngimg.com

isquad.tv

occ-0-6336-2186.1.nflxso.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	185.199.108.153	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:25 UTC	674	OUT	GET /E-comm HTTP/1.1 Host: hemanth-kumar-p.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:25 UTC	573	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 162 Server: GitHub.com Content-Type: text/html permissions-policy: interest-cohort=() x-origin-cache: HIT Location: https://hemanth-kumar-p.github.io/E-comm/ X-GitHub-Request-Id: A1FA:3E7572:1004EA5:11DE3C5:66D39E31 Accept-Ranges: bytes Age: 0 Date: Sat, 31 Aug 2024 22:50:25 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1725144626.675501,VS0,VE10 Vary: Accept-Encoding X-Fastly-Request-ID: 98ca5f36d7e966c9d8f1d4228140da3540f1c56c
2024-08-31 22:50:25 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	185.199.108.153	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:25 UTC	675	OUT	GET /E-comm/ HTTP/1.1 Host: hemanth-kumar-p.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:25 UTC	755	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11531 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sat, 31 Aug 2024 05:19:34 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "66d2a7e6-2d0b" expires: Sat, 31 Aug 2024 23:00:25 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: F91E:9761E:E377CB:1010B64:66D39E31 Accept-Ranges: bytes Age: 0 Date: Sat, 31 Aug 2024 22:50:25 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740060-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1725144626.785172,VS0,VE12 Vary: Accept-Encoding X-Fastly-Request-ID: df1f4d94a1a8ceaa930b03616a83a0c2399d05bb
2024-08-31 22:50:25 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 65 74 66 6c 69 78 20 49 6e 64 69 61 2d 57 61 74 63 68 20 54 56 20 53 68 6f 77 73 20 4f 6e 6c 69 6e 65 2c 57 61 74 63 68 20 4d 6f 76 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Netflix India-Watch TV Shows Online,Watch Movies Online</title> <link rel="icon" href="https
2024-08-31 22:50:25 UTC	1378	IN	Data Raw: 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 31 2c 20 33 31 2c 20 33 2c 20 30 2e 39 34 37 29 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 32 30 70 78 3b 20 20 0d 0a 7d 0d 0a 2e 6f 70 74 69 6f 6e 73 3e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 34 34 2c 20 34 30 2c 20 34 30 2c 20 30 2e 37 30 35 29 3b 0d 0a 20 20 Data Ascii: color: rgba(251, 31, 3, 0.947); border-radius: 5px; border-width: 0px; border-color: inherit; font-size: 16px; position: relative; left: 20px; }.options>button:hover{ background-color: rgba(244, 40, 40, 0.705);
2024-08-31 22:50:25 UTC	1378	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 20 32 33 70 78 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 33 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 37 70 78 3b 0d 0a 0d 0a 7d 0d 0a 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 3e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 34 34 2c 20 34 30 2c 20 34 30 2c 20 30 2e 37 30 35 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 Data Ascii: nt-size: 23px; position: relative; top:3px; left: 7px;}input::placeholder{ color: white; font-size: 17px; padding-left: 20px; }.input>button:hover{ background-color: rgba(244, 40, 40, 0.705); color: w
2024-08-31 22:50:25 UTC	1378	IN	Data Raw: 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 2e 74 74 32 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 72 67 62 28 34 35 2c 20 34 35 2c 20 34 35 29 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 32 34 35 Data Ascii: etica, sans-serif;}.tt2{ display: flex; align-items: center; justify-content: space-evenly; border: 2px solid rgb(45, 45, 45); width: 300px; height: 100px; border-radius: 20px; position: absolute; left: 245
2024-08-31 22:50:25 UTC	1378	IN	Data Raw: 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 20 2a 2f 0d 0a 0d 0a 2e 73 69 78 74 68 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 30 76 68 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 76 77 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 2e 73 73 31 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 65 Data Ascii: t-family: Arial, Helvetica, sans-serif;}/* 6666666666666666 */.sixth{ background-color:black; height: 60vh; width: 100vw; overflow: hidden;}.ss1{ display: flex; align-items: center; justify-content: space-e
2024-08-31 22:50:25 UTC	1378	IN	Data Raw: 20 20 3c 2f 73 65 6c 65 63 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 3e 53 69 67 6e 20 49 6e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 68 65 61 64 65 72 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 3e 55 6e 6c 69 6d 69 74 65 64 20 6d 6f 76 69 65 73 2c 20 54 56 20 73 68 6f 77 73 20 61 6e 64 20 6d 6f 72 65 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 31 22 3e 57 61 74 63 68 20 61 6e 79 77 68 65 72 65 2e Data Ascii: </select> <button>Sign In</button> </div> </header> <section> <div class="content"> <h1>Unlimited movies, TV shows and more</h1> <p class="p1">Watch anywhere.
2024-08-31 22:50:25 UTC	1378	IN	Data Raw: 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6e 66 6c 78 65 78 74 2e 63 6f 6d 2f 66 66 65 2f 73 69 74 65 75 69 2f 61 63 71 75 69 73 69 74 69 6f 6e 2f 6f 75 72 53 74 6f 72 79 2f 66 75 6a 69 2f 64 65 73 6b 74 6f 70 2f 6d 6f 62 69 6c 65 2d 30 38 31 39 2e 6a 70 67 22 20 61 6c 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 74 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 74 74 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 68 65 69 Data Ascii: </div> <div class="t2"> <img src="https://assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg" alt=""> </div> <div class="tt2"> <div class="ttt1"> <img hei
2024-08-31 22:50:25 UTC	1378	IN	Data Raw: 6c 78 73 6f 2e 6e 65 74 2f 64 6e 6d 2f 61 70 69 2f 76 36 2f 31 39 4f 68 57 4e 32 64 4f 31 39 43 39 74 78 54 4f 4e 39 74 76 54 46 74 65 66 77 2f 41 41 41 41 42 56 72 38 6e 59 75 41 67 30 78 44 70 58 44 76 30 56 49 39 48 55 6f 48 37 72 32 61 47 70 34 54 4b 52 43 73 4b 4e 51 72 4d 77 78 7a 54 74 72 2d 4e 6c 77 4f 48 65 53 38 62 43 49 32 6f 65 5a 64 64 6d 75 33 6e 4d 59 72 33 6a 39 4d 6a 59 68 48 79 6a 42 41 53 62 31 46 61 4f 47 59 5a 4e 59 76 50 42 43 4c 2e 70 6e 67 3f 72 3d 35 34 64 22 20 61 6c 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 3c 21 2d 2d 20 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 36 20 2d 2d 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 3c 64 69 76 20 63 6c 61 Data Ascii: lxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d" alt=""> </div> </div> ... 6666666666666666 --> <div cla
2024-08-31 22:50:25 UTC	507	IN	Data Raw: 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 4d 65 64 69 61 20 43 65 6e 74 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 54 65 72 6d 73 20 6f 66 20 55 73 65 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 43 6f 6e 74 61 63 74 20 55 73 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 20 Data Ascii: </div> <div class="s4"> <ul> <li><a href="">Media Centre</a></li> <li><a href="">Terms of Use</a></li> <li><a href="">Contact Us</a></li> </ul>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	185.199.108.153	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	571	OUT	GET /css/netflix.css HTTP/1.1 Host: hemanth-kumar-p.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hemanth-kumar-p.github.io/E-comm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:26 UTC	637	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 9115 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() ETag: "66ce275a-239b" Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' X-GitHub-Request-Id: D82C:3340BB:1C99E33:200B8C7:66D39E32 Accept-Ranges: bytes Age: 0 Date: Sat, 31 Aug 2024 22:50:26 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890075-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1725144626.382751,VS0,VE10 Vary: Accept-Encoding X-Fastly-Request-ID: a012c2c0f56aeba98acad59566b7681656e0531e
2024-08-31 22:50:26 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'"> <title>S
2024-08-31 22:50:26 UTC	1378	IN	Data Raw: 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 32 64 70 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 31 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 32 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 73 75 Data Ascii: ice-pixel-ratio: 2), only screen and ( min-resolution: 192dpi), only screen and ( min-resolution: 2dppx) { .logo-img-1x { display: none; } .logo-img-2x { display: inline-block; } } #su
2024-08-31 22:50:26 UTC	1378	IN	Data Raw: 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 79 31 6a 4d 44 45 78 49 44 59 32 4c 6a 45 30 4e 54 59 32 4d 53 77 67 4d 6a 41 78 4d 69 38 77 4d 69 38 77 4e 69 30 78 4e 44 6f 31 4e 6a 6f 79 4e 79 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 Data Ascii: x4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAxMi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvb
2024-08-31 22:50:26 UTC	1378	IN	Data Raw: 45 39 46 4e 72 67 77 42 43 4c 69 72 4d 46 56 39 4f 6b 68 35 65 66 6c 46 68 38 50 52 35 6e 4b 35 6e 44 61 62 72 52 32 42 4e 4a 6c 4b 4f 30 54 33 35 2b 4c 69 34 6e 34 2b 2f 4a 2b 2f 4a 51 43 78 68 6d 75 35 68 33 75 4a 6f 58 4e 48 50 62 6d 57 5a 41 48 4d 73 68 57 42 38 6c 35 2f 69 70 71 61 6d 6d 61 41 66 30 7a 50 44 44 78 31 4f 4e 56 33 76 75 72 64 69 64 71 77 41 51 4c 2b 70 45 63 38 73 4c 63 41 65 31 43 43 76 51 33 59 48 78 49 57 38 50 6c 38 35 78 53 57 4e 43 31 68 41 44 44 49 76 30 72 49 45 2f 6f 34 4a 30 6b 33 6b 77 77 34 78 53 6c 77 49 68 63 71 33 45 46 46 4f 6d 37 4b 4e 2f 68 55 47 4f 51 6b 74 30 43 46 61 35 57 70 4e 4a 6c 4d 76 78 42 45 7a 2f 49 56 51 41 78 67 2f 5a 52 5a 6c 39 77 69 48 41 36 33 79 44 59 69 65 4d 37 44 6e 4c 50 35 43 69 41 47 73 43 37 Data Ascii: E9FNrgwBCLirMFV9Okh5eflFh8PR5nK5nDabrR2BNJlKO0T35+Li4n4+/J+/JQCxhmu5h3uJoXNHPbmWZAHMshWB8l5/ipqammaAf0zPDDx1ONV3vurdidqwAQL+pEc8sLcAe1CCvQ3YHxIW8Pl85xSWNC1hADDIv0rIE/o4J0k3kww4xSlwIhcq3EFFOm7KN/hUGOQkt0CFa5WpNJlMvxBEz/IVQAxg/ZRZl9wiHA63yDYieM7DnLP5CiAGsC7
2024-08-31 22:50:26 UTC	1378	IN	Data Raw: 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 79 31 6a 4d 44 45 78 49 44 59 32 4c 6a 45 30 4e 54 59 32 4d 53 77 67 4d 6a 41 78 4d 69 38 77 4d 69 38 77 4e 69 30 78 4e 44 6f 31 4e 6a 6f 79 4e 79 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a 47 59 36 59 57 4a 76 64 58 51 39 49 69 49 67 65 47 31 73 62 6e 4d 36 65 47 31 77 50 53 4a 6f 64 48 52 77 4f 69 38 76 62 6e 4d 75 59 57 52 76 59 6d 55 75 59 32 39 74 4c 33 68 Data Ascii: b2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAxMi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49738	45.57.90.1	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	638	OUT	GET /ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hemanth-kumar-p.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:26 UTC	316	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:25 GMT Content-Type: image/png Content-Length: 11418 Connection: close Content-MD5: d5lKZzJ7qVff2IDjOpHwQQ== Last-Modified: Wed, 14 Nov 2018 18:20:41 GMT Cache-Control: max-age=604801 Expires: Sat, 07 Sep 2024 22:50:26 GMT Accept-Ranges: bytes
2024-08-31 22:50:26 UTC	11418	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 e0 08 03 00 00 00 02 0f 2c d6 00 00 00 ae 50 4c 54 45 00 00 00 2b 2b 2b 3e 3e 3e 66 66 66 2c 2c 2c 00 00 00 1c 1c 1c 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 44 44 44 1c 1c 1c 00 00 00 11 11 11 04 04 04 0e 0e 0e 14 14 14 17 17 17 0b 0b 0b 1a 1a 1a 4f 4f 4f 1d 1d 1d 06 06 06 20 20 20 08 08 08 25 25 25 22 22 22 29 29 29 27 27 27 2e 2e 2e 2b 2b 2b 60 60 60 3d 3d 3d 36 36 36 47 47 47 30 30 30 41 41 41 70 70 70 32 32 32 34 34 34 3b 3b 3b 38 38 38 44 44 44 4c 4c 4c 49 49 49 5a 5a 5a 51 51 51 6c 6c 6c 7c 7c 7c c3 c3 c3 a0 a0 a0 f6 f6 f6 e1 e1 e1 b2 b2 b2 a9 a9 a9 97 97 97 72 72 72 95 6f d7 fb 00 00 00 0d 74 52 4e 53 00 f6 25 fb cf 04 2c f6 db a7 5f 75 1b e0 29 4e ee 00 00 2b 8e 49 44 41 54 78 da ec Data Ascii: PNGIHDR,PLTE+++>>>fff,,,DDDOOO %%%""")))'''...+++```===666GGG000AAAppp222444;;;888DDDLLLIIIZZZQQQlll\|\|\|rrrotRNS%,_u)N+IDATx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	45.57.90.1	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	647	OUT	GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hemanth-kumar-p.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:26 UTC	317	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:26 GMT Content-Type: image/jpeg Content-Length: 49614 Connection: close Content-MD5: pIMz1DwZYS7WGYf6Xb/zxQ== Last-Modified: Wed, 14 Aug 2019 17:59:05 GMT Cache-Control: max-age=604801 Expires: Sat, 07 Sep 2024 22:50:27 GMT Accept-Ranges: bytes
2024-08-31 22:50:26 UTC	15654	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 02 03 03 03 03 03 04 07 05 04 04 04 04 09 06 07 05 07 0a 09 0b 0b 0a 09 0a 0a 0c 0d 11 0e 0c 0c 10 0c 0a 0a 0e 14 0f 10 11 12 13 13 13 0b 0e 14 16 14 12 16 11 12 13 12 ff db 00 43 01 03 03 03 04 04 04 08 05 05 08 12 0c 0a 0c 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 ff c2 00 11 08 01 e0 02 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 03 04 06 07 08 02 01 09 0a ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fc aa Data Ascii: JFIFCC
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: ac c0 5b 87 78 bd 93 aa 31 38 5b 63 6d de 6c b5 c1 94 ac 68 93 16 1e 30 b0 e9 3b 54 72 5a 4c 5d 6a 63 b5 53 bf 14 16 dc 89 57 45 62 ea 41 34 1d ea 17 e1 36 2a 29 10 29 8e c9 63 5a 62 5c a9 e5 b3 38 c0 c6 5d ba c8 cd 77 00 e6 3b 08 26 4b 7a 5d 7e f4 ec 72 30 19 5c ec 18 89 b7 5e f4 0b 4e 67 54 db 6e 66 68 0e 2e 28 9c 09 39 15 0c 86 22 7f cb c2 2f 98 54 b2 b2 21 c8 d6 1b e1 ec bf f4 56 bd 9a a7 e3 68 25 a0 e1 b8 25 4e f7 3a 50 30 8c 2c f4 86 ed ff 00 05 3f 2b 65 95 10 bc 4e 55 30 e2 a5 98 f1 a2 c0 d2 4b 3a 16 84 e7 6a 77 7f 68 ad fc 3f 95 4f e7 a4 f6 8f aa db ca 0a 9d dc 7a 3f b6 1f 10 b4 f9 bd 48 ef 50 10 23 16 db be e9 d2 71 78 c1 1d b9 12 0a 24 92 4d b6 20 f7 34 9b 5f 3d a0 84 f6 6a da 72 3b af bf b1 35 3f 36 8e c5 4f 26 09 0b 0f 4a 7e 45 5d 14 32 41 30 Data Ascii: [x18[cmlh0;TrZL]jcSWEbA46*))cZb\8]w;&Kz]~r0\^NgTnfh.(9"/T!Vh%%N:P0,?+eNU0K:jwh?Oz?HP#qx$M 4_=jr;5?6O&J~E]2A0
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: b9 b2 96 40 39 32 0d 14 a9 97 71 74 c8 50 39 2e 23 ab 9b e3 03 7d ba b5 eb 9e f0 2e 10 df 4e fb 4d e4 14 ba 16 1d 4c 82 33 89 90 00 77 4e fd 7c 77 c5 b5 37 d4 3b 07 fe 72 53 53 f9 09 38 df 4c 5c 28 d1 85 51 1a 21 bd 07 86 5c be f8 ff 00 72 de 5c 2a b7 7f ec fb 5f e9 7f b9 2d f8 eb ef 9d 99 a3 df fc 2c e1 af ce 24 80 e2 00 82 3a 07 9d e2 a0 12 12 d9 46 c8 80 af eb 35 00 70 62 89 cb c1 e4 ed 8c 50 27 66 2a c1 62 b2 75 4e ac c6 05 61 66 29 d1 14 93 75 7a cc 9b 95 ea 02 98 13 54 51 3c 66 a1 54 83 b3 81 a3 84 e6 e1 20 ea 64 65 6a 19 55 a4 1b 8f 29 db fc 32 ef 30 47 11 75 f1 ac de 18 23 8e 9c b8 c1 08 df 06 81 fc a6 1b 0b 0a 82 a7 58 10 02 03 c9 07 04 11 59 10 34 e0 94 64 e0 39 30 02 eb 1e 6d eb 10 a7 5d ba b0 33 a2 0c 4a a3 b0 54 e1 52 bc 97 21 12 8a 06 55 53 Data Ascii: @92qtP9.#}.NML3wN\|w7;rSS8L\(Q!\r\_-,$:F5pbP'fbuNaf)uzTQ<fT dejU)20Gu#XY4d90m]3JTR!US
2024-08-31 22:50:26 UTC	1192	IN	Data Raw: 96 96 37 07 44 e2 63 37 91 e0 3b 64 7f 37 11 b3 c4 33 41 c2 75 5f 20 38 8e fc 51 20 77 51 6c 84 b9 c6 9c 14 04 67 8a 28 a2 a8 23 97 d9 05 46 8f 89 c6 c3 80 dc eb 0a 4b ab 52 4c 5a 45 8c 6e 45 c5 53 89 90 02 1a 0a f8 f6 c7 c1 32 ef c2 da 94 63 05 81 82 7f a1 a4 99 ef 0d 28 52 29 fd e6 83 b8 37 a4 55 19 7e 8d 1f f2 db d4 aa 74 15 75 7f b0 1d 02 f0 4f 7f e4 32 8e f5 46 09 23 94 4d 79 12 40 57 82 63 93 49 f5 a2 15 88 f4 3d b1 fe a3 c8 c2 69 3a 08 cc e2 3c 82 3d 6c 6c 40 de 61 ad 04 fa c2 be 29 27 fb 45 07 a4 a2 ac 8d 4d 1a 38 ee 78 0d b7 46 49 e8 b7 4d fe c4 43 4d 09 e1 aa d4 3c 91 c0 db c2 9e 0a b0 1a 3c 6e 85 43 4f 9f f8 55 1d 6f f6 0a f7 1e d8 b0 66 73 f8 b1 1c 5d 5f ed ca 85 5f 9d c3 79 26 00 f4 46 03 5a 1b e0 2b e7 29 d4 5a ab 0a 0e 43 f3 b9 e2 7d cd 3a Data Ascii: 7Dc7;d73Au_ 8Q wQlg(#FKRLZEnES2c(R)7U~tuO2F#My@WcI=i:<=ll@a)'EM8xFIMCM<<nCOUofs]__y&FZ+)ZC}:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49739	104.26.5.108	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	612	OUT	GET /uploads/netflix/netflix_PNG25.png HTTP/1.1 Host: pngimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hemanth-kumar-p.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:26 UTC	318	IN	HTTP/1.1 200 OK Date: Sat, 31 Aug 2024 22:50:26 GMT Content-Type: image/png Content-Length: 85453 Connection: close Last-Modified: Tue, 30 Jun 2020 03:41:04 GMT ETag: "14dcd" Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 6276 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8bc0945b2b544367-EWR
2024-08-31 22:50:26 UTC	1051	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 70 08 06 00 00 00 90 be cb 72 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 Data Ascii: PNGIHDRprpHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 32 30 2d 30 34 2d 30 33 54 30 32 3a 32 39 3a 32 38 2b 30 33 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 32 30 32 30 2d 30 34 2d 30 33 54 30 32 3a 34 38 3a 35 37 2b 30 33 3a 30 30 3c 2f 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e Data Ascii: lns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2017 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2020-04-03T02:29:28+03:00</xmp:CreateDate> <xmp:ModifyDate>2020-04-03T02:48:57+03:00</xmp:ModifyDate>
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 70 61 72 61 6d 65 74 65 72 73 3e 66 72 6f 6d 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 70 68 6f 74 6f 73 68 6f 70 20 74 6f 20 69 6d 61 67 65 2f 70 6e 67 3c 2f 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 73 61 76 65 64 3c 2f 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 37 63 66 65 Data Ascii: parameters>from application/vnd.adobe.photoshop to image/png</stEvt:parameters> </rdf:li> <rdf:li rdf:parseType="Resource"> <stEvt:action>saved</stEvt:action> <stEvt:instanceID>xmp.iid:7cfe
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 Data Ascii:
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	45.57.90.1	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	650	OUT	GET /ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hemanth-kumar-p.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:26 UTC	317	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:26 GMT Content-Type: image/png Content-Length: 151687 Connection: close Content-MD5: GGpwZJPdUV4w+K1oLQaFeA== Last-Modified: Wed, 23 Jan 2019 00:35:07 GMT Cache-Control: max-age=604801 Expires: Sat, 07 Sep 2024 22:50:27 GMT Accept-Ranges: bytes
2024-08-31 22:50:26 UTC	15651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 e0 08 06 00 00 00 35 d1 dc e4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ec bd 7b ac 64 d9 55 e6 19 f7 66 66 65 bd ab d2 55 65 bb 6c 83 cb 6e 63 8c 0d dd 3c 1a 43 43 63 95 dc d0 02 3c c2 30 c2 03 42 30 d0 30 42 a2 e5 61 46 62 78 0b d9 3c 24 1a c1 1f 0c 48 58 8d 06 8d e0 1f 9b 2e a1 d1 20 dc 18 f0 60 5b 08 a6 3d c6 ee 69 a0 dc 80 2d c6 60 63 63 17 ae b2 5d 8f ac ac aa bc 77 be df da e7 3b b1 62 df 13 71 6f e6 7d df 58 3b f3 c4 5a 7b ad b5 d7 de e7 3b 11 fb 7c 77 9f 73 22 66 b3 2a 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 Data Ascii: PNGIHDR5sRGB@IDATx{dUffeUelnc<CCc<0B00BaFbx<$HX. `[=i-`cc]w;bqo}X;Z{;\|ws"f*@!P@!P@!P@!P@!P@!P@!P@!P@!P
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: 33 c9 c8 3a fb d8 d7 fb fd 26 87 c9 59 1f df b7 cd f5 ac e7 9c e4 c3 47 b1 4e dd c4 c8 ed ec cb 71 d9 96 ed ce 87 2d 17 c7 5b 2e f3 61 27 47 ce 33 d5 66 47 fb 61 ce c6 4e 3c 25 ae eb 4a 7a 7f 62 99 8f 38 cd ff fc 5c 48 90 3e d5 e3 52 b0 64 ee 33 12 d4 cb 7a 21 50 04 f0 ec 1f ef 58 e9 1b fe e2 63 42 08 42 c8 67 5f db f8 c0 c7 50 67 22 e9 37 23 e4 49 86 ba 63 7a 9f 63 2c 7b bf db f6 76 c7 67 99 f5 a9 f8 de 3f 55 cf b6 ac 7b 1c d9 d6 eb ae 13 7b 2d 24 6f 59 6e e7 43 f6 1b 6d aa 14 02 67 0d 01 de e7 23 19 19 76 0e d2 e1 cf 02 a6 be 3e 84 8d 22 b7 a7 9d 49 0b ba c9 a1 ed d9 67 7d 4c 94 14 c7 63 5a a6 67 5f 8e 49 69 16 da d2 1f db b2 d8 9c 6f 4a c7 e6 31 f7 79 a6 72 66 9b db 31 9f 8f 25 12 aa a6 b9 9f 15 bf 0d 7d fb 03 c4 8f f9 9f b9 df f7 07 92 a7 ca 9a 22 50 Data Ascii: 3:&YGNq-[.a'G3fGaN<%Jzb8\H>Rd3z!PXcBBg_Pg"7#Iczc,{vg?U{{-$oYnCmg#v>"Ig}LcZg_IioJ1yrf1%}"P
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: 66 b8 e5 4b 93 d3 2b 28 9e 9e 66 a7 98 1c e3 6b f0 e2 10 09 20 88 4b 26 51 a2 7d 92 84 4e 04 99 20 4c d2 e9 1e 4b ae aa 83 ff c5 23 48 3c fa 02 1c ef 04 96 71 d3 59 36 05 2e 4b af a5 82 c7 01 fe e0 26 c7 aa e8 bb dc 8f f6 a3 e3 c8 aa 6a c1 44 43 16 c6 aa bc c8 ab 2b 03 3a 7f 01 97 b3 06 89 5b ca e0 7d fe 19 38 73 57 21 59 7b 0d c2 cf 37 a3 bb 7e 0d f2 47 8e 61 c1 9c 4d f8 52 62 1c 8b e6 ce c1 0f db e2 18 8b 8f 11 06 ca 2c b2 cc c9 88 38 66 8a a6 46 a5 23 e9 b2 bd 49 dc 7c 5d 21 b0 ed 41 3c fe 74 12 9d 4c 73 51 84 aa ef 81 d0 b4 88 2a a0 47 5c 65 1f fc 96 d0 77 82 c0 ce 67 8b 42 d5 9a ec 17 e6 12 e4 b5 74 38 b0 f3 f9 16 6c b8 72 25 2e a9 4b e2 a1 66 d2 86 e9 4e d6 91 09 1d 51 ea 14 67 92 15 5d 4c 1b e3 bd 3e 14 5b 87 2f 54 ac 45 f6 82 9f a1 7b 5e 0b bc 73 Data Ascii: fK+(fk K&Q}N LK#H<qY6.K&jDC+:[}8sW!Y{7~GaMRb,8fF#I\|]!A<tLsQ*G\ewgBt8lr%.KfNQg]L>[/TE{^s
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: 68 7e e8 38 be 9c dc 82 bd fc 54 f1 88 05 22 81 28 a2 ec 9b 14 5f 78 ce 01 c1 b6 c6 ab b1 fa 48 0b db dc b5 4f 09 d6 1c 2b a0 bd 82 b6 99 ec 6c 86 7d 2c 2d e0 27 f1 2f 4f a5 63 1d 71 4d a3 93 20 d0 7e aa 34 f3 b3 d5 69 6e 67 9b b3 df 46 7b c6 14 b6 df 67 3d a3 53 c0 4f e0 cf 53 5a 5a 3a 77 e5 ca 35 ff 56 50 58 e0 3f 78 70 1f 5a 5b db ac bd 7e b3 6d c0 af 45 7f a5 b8 11 a3 b9 01 fd 22 e2 de 40 86 13 79 b5 75 73 f2 ae bb f6 da 65 6f 7e f3 9b eb a9 2c 13 3b 7a f4 e8 b0 4c d7 4c 2e c2 a9 b4 b7 df 84 a9 b9 70 14 14 14 78 c9 69 7b db a1 43 87 ba 3b 3b 79 90 11 17 22 02 b6 81 c6 c6 c6 0a 9a ba 89 ed da b5 4b 6b 89 e6 c9 cc df 74 7e e2 8b 5f fc e2 5a 72 eb bc ed ed ed 43 cf 3e fb 6c 47 43 43 43 d1 ce 9d 3b 7b fe e4 4f fe e4 e2 1f ff f8 c7 47 cf a1 0d 47 7d 7d 7d Data Ascii: h~8T"(_xHO+l},-'/OcqM ~4ingF{g=SOSZZ:w5VPX?xpZ[~mE"@yuseo~,;zLL.pxi{C;;y"Kkt~_ZrC>lGCCC;{OGG}}}
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: 8d f2 82 3e df 1f b7 5d 8b f5 45 04 6f 22 b5 33 89 cb 4b 2f 15 f9 b9 21 68 e8 34 fc 4c f1 14 e5 b5 83 9c c5 4b 87 e6 21 4a 46 27 26 fe c1 a3 68 21 f9 1a 93 bd ab 50 7e c8 70 30 c4 75 2d 5e bc a8 b3 73 21 86 b4 d9 c9 b1 74 00 02 01 ab 4c fc 65 dc 38 c9 58 79 1c 95 be 8c 72 c6 40 99 71 0e e5 0b 10 2c 71 f0 72 78 6e 8e 25 f1 a2 50 d3 e2 e3 7c 68 e4 97 3a f0 a6 7c 3c 9d 62 3c 30 f0 34 8a 73 3c 14 8d f3 b4 15 9a 50 f7 2e 4f d1 ba 1b e8 69 3d bd 68 2b d7 51 5f 35 ed cc 6b 9f 28 9a 36 c4 eb 1c f2 75 fc b8 8e 66 11 e8 42 5e 2e 2e ca a8 14 11 2d 57 29 37 62 7c 4d 05 f2 72 bd 95 02 42 3e 4e 86 32 9f 52 aa 2a 39 ca f9 13 2e 79 e5 04 06 c3 cd 0a 79 b8 70 77 21 ee 10 ca 7f 56 5d 22 6d c8 3c 52 5a 85 f9 fa f0 e9 02 49 a8 83 4a 3d 45 d3 2b 47 ef 02 5d e9 2a 92 47 25 be Data Ascii: >]Eo"3K/!h4LK!JF'&h!P~p0u-^s!tLe8Xyr@q,qrxn%P\|h:\|<b<04s<P.Oi=h+Q_5k(6ufB^..-W)7b\|MrB>N2R9.yypw!V]"m<RZIJ=E+G]G%
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: 9d ec bc f8 ce 19 9b 64 5d b9 c8 a6 88 d2 04 a7 7e c7 a6 31 76 ca 85 45 94 3f 33 53 b3 bf fc e4 9c 6d e1 8e c3 25 0c 48 2a 33 f0 2b a6 14 c6 07 2d 7c 01 69 af b0 0b b4 4a d6 4f f8 01 81 80 04 44 c1 44 57 4e fc ba d3 a0 db c2 b1 ad ee ee 7a 33 66 49 1a f4 94 4b 2e 0b d1 38 0e 89 f0 f8 57 30 91 76 bf 9e 16 98 cc 0a 6d 4a 0f b8 61 40 a9 63 47 da e4 09 93 03 69 81 26 f1 7a 99 0e 6b 64 b9 7a 48 e5 7f 0f 4e 6d 71 35 b7 58 ba 60 8b 4d 66 e1 01 41 2c d4 13 df 5b 21 2d 21 84 d5 06 2a 37 a3 e3 f9 ea be 68 78 19 ce 9c da 01 58 33 ad c0 87 70 44 4f 5e f8 1b ff 38 8f f2 dd 35 d7 a7 5e 4e 96 5f 78 cd 30 8f 3b 3d c7 71 9a 8b c5 d3 34 85 9d 87 94 46 73 3e 2f a7 39 af e0 27 4f 9e 6c 06 bf 6a 7c d9 b2 65 b6 7c c5 8a ba 3d c0 ab 65 88 d5 4f 5b 2f c5 0e bd 32 03 5c 8e 23 fe Data Ascii: d]~1vE?3Sm%H3+-\|iJODDWNz3fIK.8W0vmJa@cGi&zkdzHNmq5X`MfA,[!-!7hxX3pDO^85^N_x0;=q4Fs>/9'Olj\|e\|=eO[/2\#
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: 9e 25 86 f7 3b 41 54 7e 2f 5b 60 c5 1d 16 7c 01 69 00 c0 0b 9c d2 16 73 0e 8f 79 35 b9 44 3c c5 3d cd f3 c5 b8 5a 37 96 eb 7c 44 d2 9e 2f 1b 93 02 9d f8 24 d2 f4 48 2b 96 13 ca 8c e4 20 18 53 fc ef e2 65 7b 6a c3 f7 6a 45 7c 11 69 10 f4 b4 88 ed 05 44 9e 04 6b d4 47 75 25 27 49 91 a7 e6 77 20 52 68 fc 8d f8 31 1e cb 74 7e 9d 86 97 ed 6d 24 5f 1f e5 45 2e 3d cf eb 44 db 6b 70 ad 1c 0c 28 a1 a1 fa c4 27 37 d8 8b a7 4e d8 7b 39 7f 50 db 5d b6 ae b7 af b4 1f df bc de 0e 9f 99 b6 ff f6 cd 6e fb f4 da fb ed 8d bd 67 ec 4d b9 53 d6 8a ad d5 96 5b df 8a 01 e7 1e 6b 7d f4 db b6 be e3 5e eb e8 1b b7 b6 4b a3 98 0e 64 87 da d4 2c 9a 2e c6 d5 ae 39 fb ec dc e7 30 54 fc 80 2d 0d 57 a5 95 d8 8f 57 42 ae 43 bc e0 00 5f 95 cd d7 35 69 ba c2 83 91 41 e6 63 f6 c9 dc e7 38 Data Ascii: %;AT~/[`\|isy5D<=Z7\|D/$H+ Se{jjE\|iDkGu%'Iw Rh1t~m$_E.=Dkp('7N{9P]ngMS[k}^Kd,.90T-WWBC_5iAc8
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: 4f 71 3c bd 11 1d 5f a7 c0 29 9b d9 ed af 43 ea 22 c3 42 74 60 38 6b 7d 1c c9 0e b7 d3 d7 e8 78 0d 00 bf 7a 64 fb 76 92 e3 5d ac 68 a7 b8 99 6a 63 9a 23 6a 7a e0 5a d8 94 0a e8 25 ec 22 73 df df ff 92 7d e4 cd af b3 67 87 8b f6 78 4f bf bd e9 d2 36 ab e9 1f b1 df de 76 b9 fd 5e ef 80 1d 1a 1e b6 7a 58 93 3c b0 d3 68 14 dd 4d b5 40 ba 2c 3c 8f 1f cd d8 47 37 b7 d9 65 4f 9c b0 17 e9 ce 61 1d 92 7f 01 66 81 12 51 4d 0f 1e 2c d9 e5 57 d4 d9 ed 3f dd ce a1 d6 a0 1d 7d 76 06 75 31 d4 29 1e 93 2c e2 71 88 1b d0 48 6c db e5 cb ad 26 95 b4 17 b8 56 8f 5a 06 48 fa d4 94 a2 da be bc 5a f3 a5 1c bc 32 13 fc f9 5a f6 61 fc 5c a1 f8 c8 31 91 6b ac 96 68 28 3f 66 5f 59 bc e7 9a af 57 0d 00 14 46 af 16 d6 37 af fe aa f3 f9 2f de 1d 19 43 52 b6 b2 01 e5 6b c7 ae c5 0a 2a Data Ascii: Oq<_)C"Bt`8k}xzdv]hjc#jzZ%"s}gxO6v^zX<hM@,<G7eOafQM,W?}vu1),qHl&VZHZ2Za\1kh(?f_YWF7/CRk*
2024-08-31 22:50:26 UTC	16384	IN	Data Raw: c2 90 e6 f0 6d d2 1e 49 7d df 3a 66 73 08 e8 9b 69 76 63 b6 0c 4b 79 29 4d a7 09 9f 5a 65 25 5e 9c 07 3c c9 30 af d4 dc cc 05 61 65 b2 19 6d ce 29 52 b5 6d 6b b2 51 23 28 2f c3 cf 5d 2a 0b 65 e6 5e 18 ba 26 c9 28 2f 60 69 00 47 b5 5f 13 e5 98 95 40 da d2 dd 11 56 df f1 ea d0 a2 61 e0 b3 cf dc a9 c9 be 2a e7 69 09 9a fb 54 6e 2d f5 1f 96 5b 72 a2 1d 67 67 53 22 55 2e 3e 7e 8c b9 ac 6c 9a 1b 81 74 d8 b7 b8 13 9a 2f c6 6d 73 a3 25 d2 16 23 76 25 da 3f 23 64 af 39 0d 31 da a2 83 62 f1 07 f2 46 cb d0 d0 f0 ab ed ab 59 2b e0 53 c1 0f 6d a0 69 04 25 04 d2 f6 eb 19 eb 98 e7 89 f7 74 f0 80 76 29 c6 e9 e7 cb 7f 29 fc 1a 81 16 c1 8e 61 e0 c1 d3 67 5e ad fb fa b2 ca d4 d2 d7 d7 37 8b 16 90 a1 60 df 13 90 b2 72 34 9c d7 09 5b c8 70 a1 dd 95 71 20 a9 98 59 ff 18 20 02 Data Ascii: mI}:fsivcKy)MZe%^<0aem)RmkQ#(/]e^&(/`iG_@VaiTn-[rggS"U.>~lt/ms%#v%?#d91bFY+Smi%tv))ag^7`r4[pq Y
2024-08-31 22:50:26 UTC	4964	IN	Data Raw: dc ff b1 63 c7 2a fc d9 53 1f 81 f5 eb d7 5b 64 0b 9b c0 14 12 60 1d ea 9a 58 d7 a1 cd c1 19 81 8c 40 46 20 23 90 11 c8 08 34 08 02 ad 0d 52 8e f3 55 8c 92 40 92 6a c8 ce 17 f3 4b 89 0f ca ca 59 fe 4a 88 ce 3b 12 5d a6 ba 94 40 ca f7 9a 11 c8 08 64 04 32 02 19 81 26 45 60 39 68 00 6b 0a 1f e9 10 67 23 d5 0d e5 ea e8 e8 0a 5b b7 6c 0d eb d6 af 0b 23 23 23 e1 c4 89 e3 e1 f4 e9 81 30 35 35 d5 48 45 b5 b2 cc af 00 6c b8 e2 e6 02 65 04 32 02 19 81 8c 40 46 20 23 b0 08 04 9a 5d 00 ac 29 fc f9 7d fb dc 36 f7 5f 6c bb a3 a3 33 74 75 f5 86 99 e9 a9 70 f2 d4 09 09 7d a7 42 4b 6b 6b e8 ea ec 0e 9b 37 5f 1e 06 06 4e 86 e1 e1 c1 8b 5d 4c cb 3f 6a fe e6 0c 01 cf 8b 77 43 14 3c 17 22 23 90 11 c8 08 64 04 32 02 19 81 05 11 68 56 01 b0 5a 10 49 fd b8 67 67 66 66 02 57 a3 Data Ascii: c*S[d`X@F #4RU@jKYJ;]@d2&E`9hkg#[l###055HEle2@F #])}6_l3tup}BKkk7_N]L?jwC<"#d2hVZIggffW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	188.165.80.188	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	627	OUT	GET /wp-content/uploads/2018/08/Netflix-Background.jpg HTTP/1.1 Host: isquad.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hemanth-kumar-p.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:27 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:26 GMT Content-Type: image/jpeg Content-Length: 323929 Last-Modified: Thu, 23 Aug 2018 12:57:50 GMT Connection: close ETag: "5b7eaf4e-4f159" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-08-31 22:50:27 UTC	16128	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 04 65 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 02 03 05 06 01 07 08 ff da 00 08 01 01 00 00 00 00 f1 6e 01 af bb 92 77 0f 57 31 0f ec 10 e6 f3 dd e7 38 92 7c 8f 3e a9 de a8 c9 80 f3 75 3d dd c5 d7 29 ca bf 95 b4 82 0d 85 8d Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwe"nwW18\|>u=)
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: f2 62 64 ed 5d 7b 38 d5 de 08 1f d3 c9 36 0f 39 c5 6c d0 d4 52 68 87 ce 3b af 9b d0 ac 26 a6 f2 ab 0d ae cc 3f 9b 6c 35 39 6d b6 ad 8c d5 51 9e cc 28 03 51 f0 8a a0 fd 3b 46 ab 9b 2d 63 dc 34 1c aa 23 91 9b 54 fc b6 c2 82 3d 20 7b b1 31 be b5 45 6f 69 84 89 b5 26 50 4d 5e d6 46 c6 73 8d 5c 86 d7 58 d0 82 4b a7 c2 c8 a7 24 70 82 04 74 92 eb 9b c7 49 d6 75 ad 72 67 5d 29 45 49 1b 11 32 c6 c9 4e 25 fc 80 28 a7 9c 92 cb 2c 89 1d d4 ba 92 5e 59 4a 4c c4 ea f7 7e 34 1f 5d de a7 74 ab 81 62 b7 7a 32 d6 00 e1 02 8a 89 5e cf 25 85 85 70 29 a9 75 dd 4b a9 24 e7 ba 47 75 35 e4 14 e6 81 5f 1b 57 52 e4 9f 41 26 81 5f e5 94 13 59 cf 64 f3 29 74 f9 78 39 a4 dc 54 bb cd 47 f4 7d 79 1e 31 89 d0 b6 ff 00 60 99 e7 59 95 63 ed 34 71 e3 e8 d1 15 04 fb 64 7c ac aa 63 5c a3 ad Data Ascii: bd]{869lRh;&?l59mQ(Q;F-c4#T= {1Eoi&PM^Fs\XK$ptIurg])EI2N%(,^YJL~4]tbz2^%p)uK$Gu5_WRA&_Yd)tx9TG}y1`Yc4qd\|c\
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 23 4b 73 6b 7b 2d b5 c1 c6 69 64 aa ea a0 87 4c b2 fa 21 0e 3e 3d 36 6c 45 7c fc c8 9d ba bb 7e 8b 8d 7f 46 9e 0e 34 be 32 03 3e 9c 89 11 14 6f 66 e6 e2 80 09 f4 36 ab 41 01 01 2f 74 e6 d1 a6 d6 f1 5c 33 d3 75 6b c0 6b 87 91 5e e2 d2 1b 3a 18 a8 60 34 e9 98 25 9a 64 89 a5 a0 9a a9 be c2 9a af a1 80 af 2d f9 2a c3 1e 8b 93 ef f0 53 dd 96 9a 33 66 9e 56 74 9d 35 e3 ba 22 0b ed b7 cd 32 00 6c ed 44 10 e5 04 cc 92 0c 59 6d bc b9 cb ab 4e 3a 92 db 9a 49 9d 34 db 0c 65 93 9a 44 4c e8 d6 53 99 ae 77 99 21 9a 20 a2 ad 2e 65 4b d2 48 2a 64 cb bf 9f 9b a7 c8 e9 66 ee db d0 cb db 65 e1 f7 6b e3 f3 2d 8c 7a 1d 72 5f a2 cb 79 94 f3 f9 de 87 99 07 6f 5d 43 12 45 45 91 32 b2 dd 4b 68 a1 71 a6 d4 c0 5b 6c ac 93 68 c4 b5 08 d9 f2 15 b3 b6 bb 63 15 13 7c 97 5d 03 80 45 57 Data Ascii: #Ksk{-idL!>=6lE\|~F42>of6A/t\3ukk^:`4%d-S3fVt5"2lDYmN:I4eDLSw! .eKHdfek-zr_yo]CEE2Khq[lhc\|]EW
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 4f 61 f0 a8 e4 37 53 66 e3 5e 2d 55 54 94 d4 b5 a6 27 ef df 6e 51 b5 03 d6 c8 7a c6 06 0e 1a 57 da e9 3d 3c 62 e3 0e 78 c7 b8 a6 d9 d7 ac 6b f2 b1 f0 eb a7 1d 68 aa ba 95 17 e2 fa 8b 34 ca c8 5c 6c 7b 2d 28 4b d8 d6 3d 99 62 b5 d0 55 b7 25 e6 26 25 75 08 0c ce cc e2 ad 55 76 5b c7 e8 53 c7 c4 63 37 07 bc 3f 57 98 a3 53 98 e3 19 f9 78 0a 96 19 5a aa fb 56 41 f0 7e 95 ae 21 dc 0d e4 82 0c 43 b9 97 c4 63 5c cc 0c a5 80 c5 35 8a e9 1d a7 b9 eb 07 f2 cc d7 d9 c4 60 2b b5 c0 a4 b2 c5 ad 19 db 26 f6 c8 be cb 5b 15 3c 17 86 c7 60 aa 65 17 9a 19 98 4d 4d 7a 8c ac 90 81 01 24 f9 3b 99 19 2f 7b 86 2f 9f 7b e3 ad 0d c8 e8 89 8f 7e 26 16 32 92 f9 d8 dc 8b 25 d7 3d cd c9 fe e6 1c 45 b6 de 8a 2e ea 1f 06 96 7f c7 76 2c c5 a2 ca 7f cc 4a c0 56 e4 c4 97 72 4f 1f 10 8f 32 Data Ascii: Oa7Sf^-UT'nQzW=<bxkh4\l{-(K=bU%&%uUv[Sc7?WSxZVA~!Cc\5`+&[<`eMMz$;/{/{~&2%=E.v,JVrO2
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 4b 15 7d 4c eb 59 bf 0d 88 da 1e 4c c6 af b9 66 e0 58 a2 64 72 4b 2b bd 4f d1 93 6d 61 0e d1 76 4c 66 84 cd c2 d3 44 cf a4 42 49 86 78 fc 7b 09 ef 30 a8 ec d0 a2 3d 7c c7 18 d4 2b f0 96 63 77 1b 72 9a 7b 4a 44 a2 93 5f 36 6c 7a 9c 33 d9 66 65 a3 bc 8a 5f 28 7c 37 71 43 0c 4c 75 13 a7 06 6b ae 77 c8 b5 68 a9 ac 6c 8c 86 be d2 ed e8 26 06 62 e3 b1 88 c1 c0 61 fc 82 10 0f bb e1 e2 59 f7 3f 45 e9 ef 1f f4 f5 07 ec 7f d3 d7 8f b1 fa 2f 50 48 f8 79 75 fd c4 11 ef f2 26 5e 4a 7d ab d4 f2 87 ba f5 77 ff 00 25 ea b4 1f 75 ea 18 8d 16 ea 5f ed 9a 9a 9c 67 19 c6 1a 94 ce 12 ca 4b 45 af 50 cb 8b f2 85 4a 8d ca 97 ea 49 91 6f 6a 83 af 94 42 76 3d 07 c8 0f a9 f5 51 b3 1e b5 ed 0d 68 cb 2f 2c 82 b1 18 fa aa f2 95 21 7f a5 71 6a 4a c7 80 01 8a 82 0a bc ce 07 60 4c 9c 4e Data Ascii: K}LYLfXdrK+OmavLfDBIx{0=\|+cwr{JD_6lz3fe_(\|7qCLukwhl&baY?E/PHyu&^J}w%u_gKEPJIojBv=Qh/,!qjJ`LN
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 87 95 8c 37 6e e2 27 76 d0 8b 77 4a c9 4f b2 a4 6c 3c 7b 2d 74 b6 da fe da fa b6 5a 7b e0 e7 36 51 60 61 8e 85 c7 87 af 8d 86 5a ca 01 8a fc 54 b4 c7 0f 95 e1 ee 74 a6 b6 e2 79 f3 2a 19 f4 bc a3 5d cf 88 05 be af 4a 55 5e d4 56 08 bf b6 a2 b3 c5 37 11 79 37 29 92 bd a0 6c b7 4c c7 70 f8 95 9d 19 48 2b fb 85 6c 52 26 26 39 be e1 3c 22 ce f7 26 f0 9b 33 ae e6 7c 46 59 45 51 f9 98 f4 35 f7 57 52 db 83 80 cb 90 12 fc 53 40 ab 9d 74 db 6b f0 ac 82 1b 46 6c 11 a2 7c 7f 13 18 a3 e4 f6 9f 99 bf 5e 22 70 9c 0c d1 f9 03 ba fb 2e 5d c2 2e 7f ff 00 61 97 49 8d 62 b7 b0 3e 0c 10 98 4c e5 a1 10 6f d7 64 19 bd 8f 40 60 6d cd cd cd cd ce 53 94 cd bb b9 6e 86 1d 5d cb 87 ab 52 97 10 1a ca ea ae c4 61 93 77 26 dc a2 df dd 26 5d 7f 21 c0 4c 96 ff 00 19 8d 5f 27 2c 72 5b 95 Data Ascii: 7n'vwJOl<{-tZ{6Q`aZTty*]JU^V7y7)lLpH+lR&&9<"&3\|FYEQ5WRS@tkFl\|^"p.].aIb>Lod@`mSn]Raw&&]!L_',r[
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 36 d8 34 51 f4 67 8e 22 3e b9 6a 7d 06 71 1f 8d 7f 18 83 f8 54 ea 1f 79 e2 5f 69 ae 97 23 8e 9a 8a a1 3b 70 ee e5 3e 8d 35 81 8b eb 5f b4 19 af 3c fe a9 6b 77 18 f0 45 d0 00 79 58 df 57 99 75 8b 55 4f 63 58 ed 6d 8c c7 a4 e1 7c 1e 12 21 f4 d4 22 3a 2b 0d 10 bc 57 4a 3b b5 bb 44 fd c6 3c b1 b8 f7 f2 58 5b fb 98 f9 16 45 3d d1 4a c5 02 fb dd cb 0e ce 45 21 16 eb 8a bb 83 90 aa dc 1c 30 23 62 eb 96 aa 9e c6 c8 bd f2 2e b2 d6 c3 e8 94 db 88 8f 6d bf a7 6f 1f d9 bf 03 32 8f ee 7a 06 2a 76 2a ea 99 95 4c 5e bc aa 02 dd f1 5d 3b 2c 7d 39 18 65 4e c3 54 63 2f a6 e6 e0 94 a0 45 8f 6f e0 5b 73 ca d4 bb c4 1a 02 5a dc 10 b1 66 2c c4 fa f7 ad e1 db 94 e3 6f ea 77 cc 5a c7 1a 5d dd ce d8 29 3e c3 1a f3 3e 16 e9 fb 95 36 e6 3e 48 bf e8 7e 97 98 c0 fc 3d b2 fa fb b4 d8 Data Ascii: 64Qg">j}qTy_i#;p>5_<kwEyXWuUOcXm\|!":+WJ;D<X[E=JE!0#b.mo2zvL^];,}9eNTc/Eo[sZf,owZ])>>6>H~=
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 9b 03 42 95 1a 1b c7 b8 57 6f d5 dd 19 0f c2 a1 5d 75 ac 0d b9 65 cb 5a 12 6f c9 36 92 d0 92 66 f5 e2 28 26 74 50 86 eb 37 6d 88 88 4b 5a e0 da e5 77 b9 8a e6 b6 06 60 0e 19 16 34 b4 8e 06 62 57 df ca 1b 1c 40 9f b6 63 aa 4b 54 f9 02 bb 16 bb ed 46 b6 d2 4c b8 f1 43 e8 06 c8 12 9a fb 75 aa 7a 6a 6a 6b d0 b1 62 4f ad 28 53 ea 22 da fd a6 81 8b 75 82 0b c1 f7 e4 08 30 9d 98 a0 6b cf 18 3e 9f 31 47 e7 d3 50 9f 4f 73 18 fe 20 9e ed a9 c4 90 76 41 d7 80 35 02 0e e7 19 cf 47 41 47 9f 19 76 6d 82 4e 9b 8f dd bf 91 99 59 42 aa 5a a5 a9 3b 96 2a ca f2 82 00 b3 aa e5 f7 4a 56 bd 23 14 70 6b 9b 3e 96 6a 19 53 16 cc 7c 4a df 6a 5e ec 80 65 fd 4e ba 5d 92 57 d5 4b 39 26 9e ab 55 ae 10 e6 17 4c 5b 1d 3b d9 37 30 59 5a 0a d1 50 13 bd 89 dc 43 66 a0 f0 b1 47 98 d0 42 78 Data Ascii: BWo]ueZo6f(&tP7mKZw`4bW@cKTFLCuzjjkbO(S"u0k>1GPOs vA5GAGvmNYBZ;*JV#pk>jS\|Jj^eN]WK9&UL[;70YZPCfGBx
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: a5 c2 25 64 17 9a 66 ec ee cd 51 0b b4 95 c6 28 19 32 24 ac b6 7b 94 66 25 71 59 95 40 17 44 51 e7 e8 8c 04 17 98 ae ab ff 00 8c 7a 9f 06 9b 1f 86 3e 68 48 2a 95 46 d6 f0 a8 a6 a5 14 e4 51 98 75 de 51 08 5e 36 66 e3 4d 83 3f dd 7f c2 a6 51 0d 41 ce 56 67 ba 11 3d 0d e6 6a 2b 4d 9a 67 d1 53 64 44 41 42 62 37 0f 03 2b f3 33 e8 a4 d6 88 7a 2a 7e 1d 97 41 52 8f de 5b 1c 03 90 cc a9 35 a2 0a c5 e4 03 0c 40 a6 fd d5 9c 98 0a 3f 79 6e 60 79 33 32 a4 d6 b7 e4 10 f3 10 c5 c4 77 58 39 95 c5 57 9e 65 1e 19 bb ae cb a1 14 41 31 31 42 20 65 cf 25 55 4d 81 f3 59 52 f1 7c 51 54 ba b6 86 0a a6 70 15 44 e0 80 2f fe 15 05 02 ee 57 e2 5a 7c 82 ca e3 37 cc f4 59 ac bd c9 d0 70 cd 5a 39 dd 4a ce e1 2b aa 66 6f 28 d1 1b cd e2 ec be b7 54 8b e3 18 ff 00 4a 29 ee 69 d4 15 ed 56 Data Ascii: %dfQ(2${f%qY@DQz>hHFQuQ^6fM?QAVg=j+MgSdDABb7+3z~AR[5@?yn`y32wX9WeA11B e%UMYR\|QTpD/WZ\|7YpZ9J+fo(TJ)iV
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: cc 3f f4 95 62 f6 f5 1b 21 44 27 0f 12 be e9 4f 37 5d 93 d4 a3 35 c4 ca ae ea ab 24 e2 d2 74 58 5d d4 7f 0a c8 7a ab 2f 9a 01 bd d3 60 e8 c3 97 80 51 40 a6 28 27 50 2a 93 14 26 ea 74 08 d6 3d 65 a2 0e 10 10 81 cc 51 0e 8a 4a ad 24 8e eb 32 ab 05 34 c2 25 1e c8 f4 56 85 a0 98 90 a5 a0 46 66 41 3a 2f d1 59 34 30 6a 54 62 72 d1 66 bb a0 02 a0 54 02 6a a4 c4 df 1f b3 69 89 82 a1 3b bd 05 cc c6 1e d8 cb 24 f0 6d 9e 71 38 7c 23 65 cd 6d b5 b8 83 09 d1 5b 35 d6 f8 60 c6 35 54 98 9b 98 d3 6d 6e e8 c1 df 0a ff 00 a7 59 63 22 4e 1a de dd cb 31 12 4e d0 8c 32 46 42 83 21 79 93 c9 07 91 db 28 a3 c4 7d de 91 97 4b d8 7d eb 3b b2 f1 c2 60 51 0a d1 16 95 67 e8 98 e1 db c0 71 b8 26 a2 88 5d 7d ce 81 09 99 c4 ac c9 37 77 72 7e 7b a0 ad eb 4b 43 f2 4e dc 8c 70 f3 d9 f6 66 Data Ascii: ?b!D'O7]5$tX]z/`Q@('P*&t=eQJ$24%VFfA:/Y40jTbrfTji;$mq8\|#em[5`5TmnYc"N1N2FB!y(}K};`Qgq&]}7wr~{KCNpf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49743	103.57.86.196	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	750	OUT	GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d HTTP/1.1 Host: occ-0-6336-2186.1.nflxso.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hemanth-kumar-p.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:27 UTC	448	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:27 GMT Content-Type: image/png Content-Length: 254586 Connection: close Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width Access-Control-Allow-Origin: * Cache-Control: max-age=31104000, public, s-maxage=604800 ETag: "2995e70023477ef72300f24e45aba1d5" Last-Modified: Thu, 01 Jun 2023 21:27:38 GMT Timing-Allow-Origin: * Accept-Ranges: bytes
2024-08-31 22:50:27 UTC	15440	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 e0 08 06 00 00 00 35 d1 dc e4 00 00 80 00 49 44 41 54 78 da ec fd 79 9c 24 c9 75 df 09 7e cd cc dd e3 8e bc b3 ee bb ef 03 8d 06 ba 1b f7 7d 92 04 08 5e 12 b1 a2 66 24 ad a4 1d ed 21 69 34 e4 cc 47 33 ab d5 ce 8a 1a 69 a4 a5 3e dc 91 e6 a3 6b 56 4b ea 1c 52 94 28 51 14 29 91 00 41 90 80 00 0a 57 37 fa 00 ba bb ba ee ca aa bc 33 e3 f4 d3 cc f6 0f 8f cc 8c 8c 8c 2b ab ab 3b ab ba fc d7 1d 95 11 e6 e6 66 cf cd cd dd 7f fe 9e bd f7 04 f0 7d 40 01 96 0c 19 32 00 20 a5 c4 5a 8b b5 6f cc 65 a1 94 02 40 6b 7d d0 87 9a 21 43 86 0c 19 ee 41 08 20 02 dc 83 16 24 43 86 7b 09 19 01 cc 90 21 43 86 0c 07 09 09 98 83 16 22 43 86 7b 0d 5a eb 8c fc 65 18 09 21 04 9e e7 21 84 38 68 51 32 64 c8 f0 16 83 3c Data Ascii: PNGIHDR5IDATxy$u~}^f$!i4G3i>kVKR(Q)AW73+;f}@2 Zoe@k}!CA $C{!C"C{Ze!!8hQ2d<
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 36 9a 38 8e 98 9b 9d 23 e7 e5 78 f9 e2 55 94 50 e4 3c 97 99 a9 2a 6d bf 4d b3 d5 4c d7 13 ea 84 52 39 4f 65 b2 82 b7 de 24 d1 ba e7 bc 6d cd 35 bb 7d f6 ba cf a5 1d a9 55 1e 37 ab cc a0 b9 b2 d3 53 77 d9 ee 56 c7 5d 3f 38 4e dd 37 1e 0f 3e f8 20 d5 6a 75 9b 00 fe bb 7f f7 ef 0e 5a a4 0c 07 88 8c 00 f6 60 2b 86 d0 9d 17 31 fe 8d d0 f4 8d aa 33 cc 20 7a 6b 26 d6 c1 65 bb 7f bb ae a2 3a 51 64 75 a5 31 a2 6e 77 36 8b 61 79 6b 07 99 12 6d 9f 32 46 7c 1f 35 6e 5b db 7b 65 e9 25 78 83 8c b6 dd fb 77 cb 37 ca 51 65 10 01 1a 65 a6 de 8f a9 77 9c f1 1d a7 ff d7 ab 85 1e b7 fe de f5 8e fd 6a d4 03 cd fa da 06 c6 58 9c 7c ea 70 31 51 9e 40 27 49 3a 4a d6 a4 a1 50 6c ea 4d 2b 00 37 2f 49 74 82 52 0a c7 75 d3 96 85 40 39 8a a2 12 78 a5 02 41 ec e3 e4 f3 a0 14 4a 39 14 Data Ascii: 68#xUP<*mMLR9Oe$m5}U7SwV]?8N7> juZ`+13 zk&e:Qdu1nw6aykm2F\|5n[{e%xw7QeewjX\|p1Q@'I:JPlM+7/ItRu@9xAJ9
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 79 73 9a 48 6b c2 7a 93 6e 73 8a e5 5e 87 33 62 83 8d b0 c7 d1 76 9b ee ea 0a bd 38 21 08 7c 4c 3a 3f ad b0 24 89 c1 17 92 a9 7a 9d b9 5a 8d 5d 33 0b 5c 3b 5f a7 13 4d f1 e9 2f 2c a3 3a 5b 68 34 ad 96 87 d7 68 f1 d8 fd 9f e4 bb 5f 7d 0d 53 7b f6 b2 72 fa 2c d6 5a b4 31 0e 00 0a 67 76 c6 62 31 d6 90 68 e7 2b 58 48 39 8c 63 11 08 4f 31 3b 33 cd 96 d1 5c f4 f2 db 59 fb d0 83 b0 d8 c4 57 11 35 eb 21 ad 25 96 e9 7c 11 ce eb 87 49 ea 78 28 ba eb 86 ad ae 61 d3 02 c4 60 63 7a 7d 43 90 19 8b d1 3e 60 2b 00 59 d9 bb b2 f9 40 49 dc 72 16 71 f1 0a 58 0e 15 6c 2e 7e b9 3d bd 72 2a 60 b1 de e3 86 52 aa 40 64 d5 37 4a cb 28 87 3a 55 fb 84 3d af e7 3c 05 b3 2a de 76 94 c6 f1 77 23 98 79 be 00 ed 7c a8 91 65 f5 7d e1 c2 be 7d fb 38 73 e6 cc 0b 9e ef b7 62 f8 5b 00 00 bf Data Ascii: ysHkzns^3bv8!\|L:?$zZ]3\;_M/,:[h4h_}S{r,Z1gvb1h+XH9cO1;3\YW5!%\|Ix(a`cz}C>`+Y@IrqXl.~=r`R@d7J(:U=<vw#y\|e}}8sb[
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 2f 32 37 7b 17 d2 0b 39 76 e6 7f 22 4c 1d 29 a7 31 36 cc c8 4a 0e 6c 40 66 eb 94 a9 bf c8 94 25 c8 b4 a5 8c da 9c 69 5f 45 3f 2a 89 f3 69 9b eb 2f 81 98 a0 38 92 2f ab 62 4c c6 e6 b4 ac 00 e9 a3 3e ce 48 98 8e c6 ca 87 6e bc c9 6b be e7 7a de f6 83 ef 24 ea b5 49 0c f4 e2 98 9e 4e d8 88 fb 6c 74 3b 74 c2 1e 4f 2d 9d e6 4d 97 5f cf 0f de f5 3a b4 85 a5 f6 06 dd a8 8f c5 a2 52 63 c0 9e 72 36 fc 06 5e 71 95 f2 30 a9 91 65 29 9c 07 10 61 71 8a 1e c2 b9 5d 54 52 51 f3 7d e6 eb d3 2c 36 66 b8 64 ef 01 16 67 e7 f1 82 06 87 ea 4d de 7c d1 02 6b 91 61 3d ee 73 aa ad 79 ea 99 23 7c e0 0f 7e 9f cf 7e f9 4b fc d7 8f 3d c7 2d 3f fd 6f f9 e1 77 7c 1f 97 ec db c5 e2 fc 2c a6 df 67 a6 e6 33 d7 a8 d3 f2 24 33 be c7 b4 52 e8 5e 0f e5 79 cc 4c 4d 71 d1 de bd 2c 34 9b f8 5a Data Ascii: /27{9v"L)16Jl@f%i_E?*i/8/bL>Hnkz$INlt;tO-M_:Rcr6^q0e)aq]TRQ},6fdgM\|ka=sy#\|~~K=-?ow\|,g3$3R^yLMq,4Z
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: aa 39 ae b9 f6 6a f4 2b ff 0e 47 9f fe 0a 87 0e 07 04 35 58 7f f6 3e ce 3d f3 10 f5 e9 39 66 7c 1f e9 49 47 99 c5 cd 4d 9d 38 05 19 c7 0e 97 f8 01 ac ad 25 fc b7 3f f8 2a 5f 38 1b 01 0d 5a 9e a3 f6 0e b0 4b 82 00 1a fc 3f 9f 38 c9 6d ef b9 89 e4 d1 27 60 79 9d 60 61 8e b0 d5 62 63 23 22 91 06 bb cb 23 ea 76 e9 f5 7a 08 cf 47 58 8b 0e 43 b4 8e 49 fa 5d a7 b5 6d 25 26 71 40 b4 b3 be 46 67 7d 9d b0 d7 01 14 9e a7 88 0d 84 61 8c 4e cd fb b4 fa 11 26 8e f1 c2 08 92 04 5b ab 63 3d 45 64 2d 41 6b 96 bd f5 06 5b ed 2e 71 1c 31 a5 13 ba dd 2e 42 2a 77 7f 52 d2 49 c3 c6 06 bf e5 13 cc 2e 50 9b df 4b bc be 4c d2 6b 23 75 84 f2 03 fc a0 46 50 ab 31 df aa f1 cc c3 cf f0 0b 9f 3a 8e b8 e2 25 7c ec 0f 7e 77 b8 47 cc 01 97 cc 37 b9 62 5a 71 fb 25 f3 bc f4 ae 97 73 e0 9a Data Ascii: 9j+G5X>=9f\|IGM8%?_8ZK?8m'`y`abc#"#vzGXCI]m%&q@Fg}aN&[c=Ed-Ak[.q1.BwRI.PKLk#uFP1:%\|~wG7bZq%s
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: c5 85 53 1b 6c ad 6f 52 08 8c 9c 4b 71 8a 1d 91 e1 0d 34 6e b4 06 8a d6 ca d6 78 a7 cb d6 87 a1 2b 03 18 57 d6 fb ad a9 51 0c b7 1c 37 be f6 f5 3c f6 d1 cf 4c ac 62 b3 78 21 87 9f fb 1b e5 0b 5c fd e6 b7 d2 ed 2e b0 b5 55 a1 ab 11 57 e5 63 d8 df a7 4b c6 2b 0f c1 df ff f6 d3 54 6b cf f2 ee f7 8d 79 df 43 05 97 b6 7a 70 58 d3 59 10 fe d5 67 f7 f1 a1 2f 2f f0 13 df fa 02 af 7e b5 e5 2f fe e8 9b 79 fc 1d 2b fc fb 9f fc 04 27 bf b8 c1 4b ef 38 c2 7c df d1 c9 33 1c 8e 12 c7 cd c7 8e f1 7d 6f ef f1 c1 2f 3e 43 be 3a 64 61 df 02 f9 d2 12 fd c1 00 80 f9 2c a7 b4 96 b2 aa 58 1b 8d fc 73 d4 0e 36 87 14 cb 8b ac 6f 94 3c 71 e9 12 57 91 f3 ae 7b ef e4 65 77 5c cd be 23 0b 28 d1 28 d1 64 4a 30 75 45 85 45 eb 0c 1b f4 62 09 6c fb a8 b2 2c 2f 2f 70 b1 72 fc f2 2f 7c 9c Data Ascii: SloRKq4nx+WQ7<Lbx!\.UWcK+TkyCzpXYg//~/y+'K8\|3}o/>C:da,Xs6o<qW{ew\#((dJ0uEEbl,//pr/\|
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 0d 6f 7b 6d c6 eb 8e e5 ac 8e 1b 95 92 c8 fe 25 30 0b 5e e7 af 36 8c ea 1a 53 95 50 55 54 b5 61 5c 95 54 f1 c4 60 6b a8 4b 30 35 da 39 a4 1c a3 ac 41 ac 43 19 83 72 06 31 25 da d6 2c 2d 1d e2 e2 a3 9f 62 78 e6 01 44 cf 6f db 67 26 67 f1 ac fd c3 6d ff dc 3a 38 ce ca b2 b3 4e 7d 6b 0f 91 ed f7 76 bf 2e 0f fc e4 b2 65 cc 2e d7 51 a5 7f fe d2 dc ff a5 07 f8 f4 a7 3f b7 c7 b6 fc b7 79 7d 8d 44 c0 0e d0 3c fb ec 0b 94 e3 72 26 4c da 7e ed 15 b1 b7 61 d7 24 3b 35 09 5a 76 2a 47 66 df da 06 22 77 c8 97 f0 4f 6c c5 14 70 da d6 9d 3b 81 b4 d9 0c e2 64 25 e1 9b 9b fc 2d b9 19 80 66 b3 6d 20 ca e4 38 4c 30 8f b3 98 c6 d6 3f 99 7e 96 06 68 d1 7a 79 9b cd 3c fe 8d 22 e1 48 6d c5 31 89 a7 f7 06 dc 7a bf 72 12 00 da 0e 03 d1 b6 a8 8d 35 c6 46 b4 c0 55 8c a0 d0 06 ce d1 Data Ascii: o{m%0^6SPUTa\T`kK059ACr1%,-bxDog&gm:8N}kv.e.Q?y}D<r&L~a$;5Zv*Gf"wOlp;d%-fm 8L0?~hzy<"Hm1zr5FU
2024-08-31 22:50:28 UTC	16384	IN	Data Raw: da 04 20 5d 2e 03 c8 1a 82 11 02 c6 e0 93 10 1d aa 10 74 60 1b 7d f4 ad 67 e4 ba ce 83 1b d3 f9 34 6f 26 64 1c 50 48 02 5a 91 a5 8b 99 1c 62 0c 4b 74 dc 8f 6f 2c c4 b8 78 93 62 c1 6a a4 36 21 b3 7a a5 bf a1 31 2e e5 5f ed 5a 9b c0 a3 2b ee df 76 36 01 c4 d8 56 9e 5c 8c 8b b6 e4 4a f4 36 1b 2e ff 74 8e 28 fa ac 54 ed ff 4e fa 79 55 6a 6f 51 15 44 d9 95 88 7e 0b d6 56 5c 64 cb 42 d7 8c e6 e3 72 c8 3b 2f 26 ed 52 c8 74 a8 6b 12 a9 76 88 6e 02 2b e7 88 0c a7 52 59 c8 3a 8f cf b8 f0 ab 74 5f 17 7d f3 9c ef 8f 31 ff 31 02 55 9d c7 9a d2 31 e8 28 b6 99 ef 38 3a 4a 9e 10 fa 77 f0 1b 4c 0c 54 90 02 4a 60 31 e4 5e f6 be 64 a4 67 f0 fa 80 3e b5 4d 32 00 28 41 94 4b 82 d0 4d e3 01 e0 70 d8 30 1c 0d 18 8c 06 0c 47 43 86 4b fe 67 33 6c 3c 23 58 6b ea 4a a8 2b 1d 43 be Data Ascii: ].t`}g4o&dPHZbKto,xbj6!z1._Z+v6V\J6.t(TNyUjoQD~V\dBr;/&Rtkvn+RY:t_}11U1(8:JwLTJ`1^dg>M2(AKMp0GCKg3l<#XkJ+C
2024-08-31 22:50:28 UTC	16384	IN	Data Raw: d7 28 40 7f e3 2b 31 af 7d 0d 56 6b 54 d3 7a 10 a8 6b d4 99 0d 7f af a7 de 9c 26 33 d5 68 a6 40 ed 92 f0 07 5a b4 cf ce b0 34 9a 1f f1 53 87 3b 3c 86 4b 86 c8 cb d6 90 27 ec 86 7d 15 b2 63 25 bf ee b6 03 bd c8 e8 10 b8 5f 97 3d 44 6d e8 e3 4e eb f9 d3 47 35 f2 b2 55 d8 3b 82 e3 0e 77 c7 19 e4 b0 82 51 03 eb 2d 6e 09 b8 ba 46 0e ac e0 da 31 ea 41 0b 87 82 4f e0 ee d0 ff 4e 3a a4 b5 c8 35 15 dc ba 0b f7 b8 01 ea 40 03 ab 4b 30 d0 a9 ff b9 71 0b 9b 06 39 b5 89 fb ec 18 f7 17 c7 e0 e3 53 68 3b ec b4 c3 56 55 88 e0 85 f5 cd 8e 0e 61 c7 48 d8 bd 5b 18 0d fc 33 ac 6f 58 ce 6c 0a 67 c7 82 99 5a 2e dd 2b 3c fb 46 b8 72 bf 62 c7 aa 30 a8 1d 75 ad 30 16 c6 53 e1 ec 39 c7 7d 0f c3 c7 3f 6b b9 ef 88 a1 a9 15 ab 4b 51 c2 c5 8f 35 6f 8e f6 7e 83 22 24 09 a0 c8 68 3b 7c Data Ascii: (@+1}VkTzk&3h@Z4S;<K'}c%_=DmNG5U;wQ-nF1AON:5@K0q9Sh;VUaH[3oXlgZ.+<Frb0u0S9}?kKQ5o~"$h;\|
2024-08-31 22:50:28 UTC	16384	IN	Data Raw: b1 c6 f8 24 2f 43 04 97 22 be dc 39 87 91 05 19 81 61 b4 1e 6c e3 69 ba 26 44 07 13 02 9b 8e 8e 34 2f 5c b1 7c 6c b3 a6 1a 42 20 00 35 4a e4 5a 74 85 7b f4 1c c3 95 e5 78 af 12 dc a2 d2 f3 49 ee 4b 3e 8f b1 2a d7 50 5e c0 38 2f cc cd a7 85 34 4c 7e c0 d9 32 e3 13 58 5b 44 e2 e4 1e ed 29 ed 5d 6e 01 7c c9 40 2a bf 01 fd 37 c2 ef fa bd 9c 67 e4 37 99 67 fd dc 05 1e 07 30 c9 9c d8 3b e4 89 02 2c 85 67 87 9b 6f be 99 27 3d e9 1a de fe f6 5f 43 31 4c bf 3d 51 d0 b7 f8 a8 3f 9b 9c e0 de 00 50 3d d1 22 fa 80 45 cd 7d df eb b8 f9 7d e5 04 b1 0b e0 3d 6e 5d ca 20 8c f2 74 d5 db e7 bd 8a ee 33 73 ec 5f ef ba 73 80 0f 0a 97 c1 82 c9 4b f5 2a 59 c3 b2 33 cf 57 51 17 af 55 21 eb 02 01 dc f4 ea 9b 8f cb 80 0b 24 48 a4 27 37 13 83 4d 76 f9 3f 26 d0 35 97 36 2d 81 53 1d Data Ascii: $/C"9ali&D4/\\|lB 5JZt{xIK>P^8/4L~2X[D)]n\|@7g7g0;,go'=_C1L=Q?P="E}}=n] t3s_sK*Y3WQU!$H'7Mv?&56-S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	45.57.90.1	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	393	OUT	GET /ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:27 UTC	316	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:26 GMT Content-Type: image/png Content-Length: 11418 Connection: close Content-MD5: d5lKZzJ7qVff2IDjOpHwQQ== Last-Modified: Wed, 14 Nov 2018 18:20:41 GMT Cache-Control: max-age=604801 Expires: Sat, 07 Sep 2024 22:50:27 GMT Accept-Ranges: bytes
2024-08-31 22:50:27 UTC	11418	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 e0 08 03 00 00 00 02 0f 2c d6 00 00 00 ae 50 4c 54 45 00 00 00 2b 2b 2b 3e 3e 3e 66 66 66 2c 2c 2c 00 00 00 1c 1c 1c 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 44 44 44 1c 1c 1c 00 00 00 11 11 11 04 04 04 0e 0e 0e 14 14 14 17 17 17 0b 0b 0b 1a 1a 1a 4f 4f 4f 1d 1d 1d 06 06 06 20 20 20 08 08 08 25 25 25 22 22 22 29 29 29 27 27 27 2e 2e 2e 2b 2b 2b 60 60 60 3d 3d 3d 36 36 36 47 47 47 30 30 30 41 41 41 70 70 70 32 32 32 34 34 34 3b 3b 3b 38 38 38 44 44 44 4c 4c 4c 49 49 49 5a 5a 5a 51 51 51 6c 6c 6c 7c 7c 7c c3 c3 c3 a0 a0 a0 f6 f6 f6 e1 e1 e1 b2 b2 b2 a9 a9 a9 97 97 97 72 72 72 95 6f d7 fb 00 00 00 0d 74 52 4e 53 00 f6 25 fb cf 04 2c f6 db a7 5f 75 1b e0 29 4e ee 00 00 2b 8e 49 44 41 54 78 da ec Data Ascii: PNGIHDR,PLTE+++>>>fff,,,DDDOOO %%%""")))'''...+++```===666GGG000AAAppp222444;;;888DDDLLLIIIZZZQQQlll\|\|\|rrrotRNS%,_u)N+IDATx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49747	45.57.90.1	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:26 UTC	643	OUT	GET /ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hemanth-kumar-p.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:27 UTC	316	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:26 GMT Content-Type: image/png Content-Length: 20506 Connection: close Content-MD5: WH4EDyAll5IJSQHKlzlmng== Last-Modified: Wed, 14 Nov 2018 18:48:14 GMT Cache-Control: max-age=604801 Expires: Sat, 07 Sep 2024 22:50:27 GMT Accept-Ranges: bytes
2024-08-31 22:50:27 UTC	15659	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 d2 08 03 00 00 00 9f 16 c9 aa 00 00 03 00 50 4c 54 45 ff ff ff 08 0e 23 0a 0b 21 0b 11 26 0d 14 28 10 1f 38 05 08 17 02 05 15 05 0b 21 05 07 1d 07 09 1b 17 31 45 0f 23 3b 0d 17 2b 09 09 1f 06 05 1a 17 32 48 1c 38 4b 10 27 40 19 2d 42 0c 0f 23 0e 1f 35 02 04 19 03 08 1a 1a 36 4a 0b 1d 32 13 2c 41 13 23 3a 20 3b 4d 20 3c 51 13 29 42 23 3f 52 17 29 3f 0e 1c 2e 13 25 3d 02 04 11 fc fc fc 04 0b 1d 12 1d 31 23 40 56 0e 26 3e 15 3a 4f 06 06 14 15 37 4d 07 14 27 14 2f 44 27 43 57 1b 34 46 2b 46 58 fe fe fc 16 3e 53 20 36 49 16 2c 44 18 28 3a 0f 1c 36 28 4d 62 3d 60 6d 20 4a 61 1a 2f 47 08 18 2a 13 22 32 2f 4a 5d 17 25 36 17 46 5d 18 2c 3d 31 4d 61 12 18 2e 2e 52 65 39 5d 6d 12 18 28 28 48 5e 19 Data Ascii: PNGIHDRPLTE#!&(8!1E#;+2H8K'@-B#56J2,A#: ;M <Q)B#?R)?.%=1#@V&>:O7M'/D'CW4F+FX>S 6I,D(:6(Mb=`m Ja/G*"2/J]%6F],=1Ma..Re9]m((H^
2024-08-31 22:50:27 UTC	4847	IN	Data Raw: 88 2f 4c 28 d6 1d 43 90 c9 3b 74 81 55 94 20 1d e0 fc 22 ef 8f 76 fc 61 b4 f7 49 e2 f8 3c 0b 39 67 99 89 e0 52 52 96 21 71 6b 4d b8 4a 12 a8 dd 6e 69 54 7f 4d b2 77 31 b1 32 bd 14 0c 7a f3 f9 3c ab de 70 f0 f3 5d 51 cd 38 b8 10 50 4a 16 4b f2 b0 48 61 7d 51 c2 c2 2a b8 e4 6f b0 38 1f fe ca 2b 9c f1 84 4b 4b 30 0d ad 1b b6 6e e1 ca 60 d7 d2 52 09 0b d7 d0 84 06 95 ed db 00 eb 1f b6 ee d8 b5 89 30 8c e3 b8 60 57 27 75 10 1c 74 e9 a4 38 48 a6 06 09 42 96 80 b8 44 10 22 2f 72 38 48 e7 1c ee 1d 72 70 f6 b8 41 b7 83 50 02 a1 d0 ad 12 08 88 20 a6 2d 49 e4 02 09 08 22 48 b2 64 eb 96 bf c0 ef ef 79 5f 22 15 7f 7d df a4 85 52 3e 79 de b7 77 97 de dd db 4b 73 49 25 d6 ec 13 3b 6a 54 47 39 0a 57 1c c6 49 23 07 14 54 39 2e 50 8f 1d a7 00 9c 2b dc b5 7a bf ff 76 47 b9 Data Ascii: /L(C;tU "vaI<9gRR!qkMJniTMw12z<p]Q8PJKHa}Q*o8+KK0n`R0`W'ut8HBD"/r8HrpAP -I"Hdy_"}R>ywKsI%;jTG9WI#T9.P+zvG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	172.67.75.130	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:27 UTC	367	OUT	GET /uploads/netflix/netflix_PNG25.png HTTP/1.1 Host: pngimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:27 UTC	318	IN	HTTP/1.1 200 OK Date: Sat, 31 Aug 2024 22:50:27 GMT Content-Type: image/png Content-Length: 85453 Connection: close Last-Modified: Tue, 30 Jun 2020 03:41:04 GMT ETag: "14dcd" Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 6277 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8bc09461d92143f2-EWR
2024-08-31 22:50:27 UTC	1051	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 70 08 06 00 00 00 90 be cb 72 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 Data Ascii: PNGIHDRprpHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 32 30 2d 30 34 2d 30 33 54 30 32 3a 32 39 3a 32 38 2b 30 33 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 32 30 32 30 2d 30 34 2d 30 33 54 30 32 3a 34 38 3a 35 37 2b 30 33 3a 30 30 3c 2f 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e Data Ascii: lns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2017 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2020-04-03T02:29:28+03:00</xmp:CreateDate> <xmp:ModifyDate>2020-04-03T02:48:57+03:00</xmp:ModifyDate>
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 70 61 72 61 6d 65 74 65 72 73 3e 66 72 6f 6d 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 70 68 6f 74 6f 73 68 6f 70 20 74 6f 20 69 6d 61 67 65 2f 70 6e 67 3c 2f 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 73 61 76 65 64 3c 2f 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 37 63 66 65 Data Ascii: parameters>from application/vnd.adobe.photoshop to image/png</stEvt:parameters> </rdf:li> <rdf:li rdf:parseType="Resource"> <stEvt:action>saved</stEvt:action> <stEvt:instanceID>xmp.iid:7cfe
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 Data Ascii:
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-08-31 22:50:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49749	45.57.90.1	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:27 UTC	402	OUT	GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:27 UTC	317	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:27 GMT Content-Type: image/jpeg Content-Length: 49614 Connection: close Content-MD5: pIMz1DwZYS7WGYf6Xb/zxQ== Last-Modified: Wed, 14 Aug 2019 17:59:05 GMT Cache-Control: max-age=604801 Expires: Sat, 07 Sep 2024 22:50:28 GMT Accept-Ranges: bytes
2024-08-31 22:50:27 UTC	15654	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 02 03 03 03 03 03 04 07 05 04 04 04 04 09 06 07 05 07 0a 09 0b 0b 0a 09 0a 0a 0c 0d 11 0e 0c 0c 10 0c 0a 0a 0e 14 0f 10 11 12 13 13 13 0b 0e 14 16 14 12 16 11 12 13 12 ff db 00 43 01 03 03 03 04 04 04 08 05 05 08 12 0c 0a 0c 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 ff c2 00 11 08 01 e0 02 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 03 04 06 07 08 02 01 09 0a ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fc aa Data Ascii: JFIFCC
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: ac c0 5b 87 78 bd 93 aa 31 38 5b 63 6d de 6c b5 c1 94 ac 68 93 16 1e 30 b0 e9 3b 54 72 5a 4c 5d 6a 63 b5 53 bf 14 16 dc 89 57 45 62 ea 41 34 1d ea 17 e1 36 2a 29 10 29 8e c9 63 5a 62 5c a9 e5 b3 38 c0 c6 5d ba c8 cd 77 00 e6 3b 08 26 4b 7a 5d 7e f4 ec 72 30 19 5c ec 18 89 b7 5e f4 0b 4e 67 54 db 6e 66 68 0e 2e 28 9c 09 39 15 0c 86 22 7f cb c2 2f 98 54 b2 b2 21 c8 d6 1b e1 ec bf f4 56 bd 9a a7 e3 68 25 a0 e1 b8 25 4e f7 3a 50 30 8c 2c f4 86 ed ff 00 05 3f 2b 65 95 10 bc 4e 55 30 e2 a5 98 f1 a2 c0 d2 4b 3a 16 84 e7 6a 77 7f 68 ad fc 3f 95 4f e7 a4 f6 8f aa db ca 0a 9d dc 7a 3f b6 1f 10 b4 f9 bd 48 ef 50 10 23 16 db be e9 d2 71 78 c1 1d b9 12 0a 24 92 4d b6 20 f7 34 9b 5f 3d a0 84 f6 6a da 72 3b af bf b1 35 3f 36 8e c5 4f 26 09 0b 0f 4a 7e 45 5d 14 32 41 30 Data Ascii: [x18[cmlh0;TrZL]jcSWEbA46*))cZb\8]w;&Kz]~r0\^NgTnfh.(9"/T!Vh%%N:P0,?+eNU0K:jwh?Oz?HP#qx$M 4_=jr;5?6O&J~E]2A0
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: b9 b2 96 40 39 32 0d 14 a9 97 71 74 c8 50 39 2e 23 ab 9b e3 03 7d ba b5 eb 9e f0 2e 10 df 4e fb 4d e4 14 ba 16 1d 4c 82 33 89 90 00 77 4e fd 7c 77 c5 b5 37 d4 3b 07 fe 72 53 53 f9 09 38 df 4c 5c 28 d1 85 51 1a 21 bd 07 86 5c be f8 ff 00 72 de 5c 2a b7 7f ec fb 5f e9 7f b9 2d f8 eb ef 9d 99 a3 df fc 2c e1 af ce 24 80 e2 00 82 3a 07 9d e2 a0 12 12 d9 46 c8 80 af eb 35 00 70 62 89 cb c1 e4 ed 8c 50 27 66 2a c1 62 b2 75 4e ac c6 05 61 66 29 d1 14 93 75 7a cc 9b 95 ea 02 98 13 54 51 3c 66 a1 54 83 b3 81 a3 84 e6 e1 20 ea 64 65 6a 19 55 a4 1b 8f 29 db fc 32 ef 30 47 11 75 f1 ac de 18 23 8e 9c b8 c1 08 df 06 81 fc a6 1b 0b 0a 82 a7 58 10 02 03 c9 07 04 11 59 10 34 e0 94 64 e0 39 30 02 eb 1e 6d eb 10 a7 5d ba b0 33 a2 0c 4a a3 b0 54 e1 52 bc 97 21 12 8a 06 55 53 Data Ascii: @92qtP9.#}.NML3wN\|w7;rSS8L\(Q!\r\_-,$:F5pbP'fbuNaf)uzTQ<fT dejU)20Gu#XY4d90m]3JTR!US
2024-08-31 22:50:27 UTC	1192	IN	Data Raw: 96 96 37 07 44 e2 63 37 91 e0 3b 64 7f 37 11 b3 c4 33 41 c2 75 5f 20 38 8e fc 51 20 77 51 6c 84 b9 c6 9c 14 04 67 8a 28 a2 a8 23 97 d9 05 46 8f 89 c6 c3 80 dc eb 0a 4b ab 52 4c 5a 45 8c 6e 45 c5 53 89 90 02 1a 0a f8 f6 c7 c1 32 ef c2 da 94 63 05 81 82 7f a1 a4 99 ef 0d 28 52 29 fd e6 83 b8 37 a4 55 19 7e 8d 1f f2 db d4 aa 74 15 75 7f b0 1d 02 f0 4f 7f e4 32 8e f5 46 09 23 94 4d 79 12 40 57 82 63 93 49 f5 a2 15 88 f4 3d b1 fe a3 c8 c2 69 3a 08 cc e2 3c 82 3d 6c 6c 40 de 61 ad 04 fa c2 be 29 27 fb 45 07 a4 a2 ac 8d 4d 1a 38 ee 78 0d b7 46 49 e8 b7 4d fe c4 43 4d 09 e1 aa d4 3c 91 c0 db c2 9e 0a b0 1a 3c 6e 85 43 4f 9f f8 55 1d 6f f6 0a f7 1e d8 b0 66 73 f8 b1 1c 5d 5f ed ca 85 5f 9d c3 79 26 00 f4 46 03 5a 1b e0 2b e7 29 d4 5a ab 0a 0e 43 f3 b9 e2 7d cd 3a Data Ascii: 7Dc7;d73Au_ 8Q wQlg(#FKRLZEnES2c(R)7U~tuO2F#My@WcI=i:<=ll@a)'EM8xFIMCM<<nCOUofs]__y&FZ+)ZC}:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	45.57.90.1	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:27 UTC	405	OUT	GET /ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:27 UTC	317	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:27 GMT Content-Type: image/png Content-Length: 151687 Connection: close Content-MD5: GGpwZJPdUV4w+K1oLQaFeA== Last-Modified: Wed, 23 Jan 2019 00:35:07 GMT Cache-Control: max-age=604801 Expires: Sat, 07 Sep 2024 22:50:28 GMT Accept-Ranges: bytes
2024-08-31 22:50:27 UTC	15651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 e0 08 06 00 00 00 35 d1 dc e4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ec bd 7b ac 64 d9 55 e6 19 f7 66 66 65 bd ab d2 55 65 bb 6c 83 cb 6e 63 8c 0d dd 3c 1a 43 43 63 95 dc d0 02 3c c2 30 c2 03 42 30 d0 30 42 a2 e5 61 46 62 78 0b d9 3c 24 1a c1 1f 0c 48 58 8d 06 8d e0 1f 9b 2e a1 d1 20 dc 18 f0 60 5b 08 a6 3d c6 ee 69 a0 dc 80 2d c6 60 63 63 17 ae b2 5d 8f ac ac aa bc 77 be df da e7 3b b1 62 df 13 71 6f e6 7d df 58 3b f3 c4 5a 7b ad b5 d7 de e7 3b 11 fb 7c 77 9f 73 22 66 b3 2a 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 02 85 40 21 50 08 14 Data Ascii: PNGIHDR5sRGB@IDATx{dUffeUelnc<CCc<0B00BaFbx<$HX. `[=i-`cc]w;bqo}X;Z{;\|ws"f*@!P@!P@!P@!P@!P@!P@!P@!P@!P
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 33 c9 c8 3a fb d8 d7 fb fd 26 87 c9 59 1f df b7 cd f5 ac e7 9c e4 c3 47 b1 4e dd c4 c8 ed ec cb 71 d9 96 ed ce 87 2d 17 c7 5b 2e f3 61 27 47 ce 33 d5 66 47 fb 61 ce c6 4e 3c 25 ae eb 4a 7a 7f 62 99 8f 38 cd ff fc 5c 48 90 3e d5 e3 52 b0 64 ee 33 12 d4 cb 7a 21 50 04 f0 ec 1f ef 58 e9 1b fe e2 63 42 08 42 c8 67 5f db f8 c0 c7 50 67 22 e9 37 23 e4 49 86 ba 63 7a 9f 63 2c 7b bf db f6 76 c7 67 99 f5 a9 f8 de 3f 55 cf b6 ac 7b 1c d9 d6 eb ae 13 7b 2d 24 6f 59 6e e7 43 f6 1b 6d aa 14 02 67 0d 01 de e7 23 19 19 76 0e d2 e1 cf 02 a6 be 3e 84 8d 22 b7 a7 9d 49 0b ba c9 a1 ed d9 67 7d 4c 94 14 c7 63 5a a6 67 5f 8e 49 69 16 da d2 1f db b2 d8 9c 6f 4a c7 e6 31 f7 79 a6 72 66 9b db 31 9f 8f 25 12 aa a6 b9 9f 15 bf 0d 7d fb 03 c4 8f f9 9f b9 df f7 07 92 a7 ca 9a 22 50 Data Ascii: 3:&YGNq-[.a'G3fGaN<%Jzb8\H>Rd3z!PXcBBg_Pg"7#Iczc,{vg?U{{-$oYnCmg#v>"Ig}LcZg_IioJ1yrf1%}"P
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 66 b8 e5 4b 93 d3 2b 28 9e 9e 66 a7 98 1c e3 6b f0 e2 10 09 20 88 4b 26 51 a2 7d 92 84 4e 04 99 20 4c d2 e9 1e 4b ae aa 83 ff c5 23 48 3c fa 02 1c ef 04 96 71 d3 59 36 05 2e 4b af a5 82 c7 01 fe e0 26 c7 aa e8 bb dc 8f f6 a3 e3 c8 aa 6a c1 44 43 16 c6 aa bc c8 ab 2b 03 3a 7f 01 97 b3 06 89 5b ca e0 7d fe 19 38 73 57 21 59 7b 0d c2 cf 37 a3 bb 7e 0d f2 47 8e 61 c1 9c 4d f8 52 62 1c 8b e6 ce c1 0f db e2 18 8b 8f 11 06 ca 2c b2 cc c9 88 38 66 8a a6 46 a5 23 e9 b2 bd 49 dc 7c 5d 21 b0 ed 41 3c fe 74 12 9d 4c 73 51 84 aa ef 81 d0 b4 88 2a a0 47 5c 65 1f fc 96 d0 77 82 c0 ce 67 8b 42 d5 9a ec 17 e6 12 e4 b5 74 38 b0 f3 f9 16 6c b8 72 25 2e a9 4b e2 a1 66 d2 86 e9 4e d6 91 09 1d 51 ea 14 67 92 15 5d 4c 1b e3 bd 3e 14 5b 87 2f 54 ac 45 f6 82 9f a1 7b 5e 0b bc 73 Data Ascii: fK+(fk K&Q}N LK#H<qY6.K&jDC+:[}8sW!Y{7~GaMRb,8fF#I\|]!A<tLsQ*G\ewgBt8lr%.KfNQg]L>[/TE{^s
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 68 7e e8 38 be 9c dc 82 bd fc 54 f1 88 05 22 81 28 a2 ec 9b 14 5f 78 ce 01 c1 b6 c6 ab b1 fa 48 0b db dc b5 4f 09 d6 1c 2b a0 bd 82 b6 99 ec 6c 86 7d 2c 2d e0 27 f1 2f 4f a5 63 1d 71 4d a3 93 20 d0 7e aa 34 f3 b3 d5 69 6e 67 9b b3 df 46 7b c6 14 b6 df 67 3d a3 53 c0 4f e0 cf 53 5a 5a 3a 77 e5 ca 35 ff 56 50 58 e0 3f 78 70 1f 5a 5b db ac bd 7e b3 6d c0 af 45 7f a5 b8 11 a3 b9 01 fd 22 e2 de 40 86 13 79 b5 75 73 f2 ae bb f6 da 65 6f 7e f3 9b eb a9 2c 13 3b 7a f4 e8 b0 4c d7 4c 2e c2 a9 b4 b7 df 84 a9 b9 70 14 14 14 78 c9 69 7b db a1 43 87 ba 3b 3b 79 90 11 17 22 02 b6 81 c6 c6 c6 0a 9a ba 89 ed da b5 4b 6b 89 e6 c9 cc df 74 7e e2 8b 5f fc e2 5a 72 eb bc ed ed ed 43 cf 3e fb 6c 47 43 43 43 d1 ce 9d 3b 7b fe e4 4f fe e4 e2 1f ff f8 c7 47 cf a1 0d 47 7d 7d 7d Data Ascii: h~8T"(_xHO+l},-'/OcqM ~4ingF{g=SOSZZ:w5VPX?xpZ[~mE"@yuseo~,;zLL.pxi{C;;y"Kkt~_ZrC>lGCCC;{OGG}}}
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 8d f2 82 3e df 1f b7 5d 8b f5 45 04 6f 22 b5 33 89 cb 4b 2f 15 f9 b9 21 68 e8 34 fc 4c f1 14 e5 b5 83 9c c5 4b 87 e6 21 4a 46 27 26 fe c1 a3 68 21 f9 1a 93 bd ab 50 7e c8 70 30 c4 75 2d 5e bc a8 b3 73 21 86 b4 d9 c9 b1 74 00 02 01 ab 4c fc 65 dc 38 c9 58 79 1c 95 be 8c 72 c6 40 99 71 0e e5 0b 10 2c 71 f0 72 78 6e 8e 25 f1 a2 50 d3 e2 e3 7c 68 e4 97 3a f0 a6 7c 3c 9d 62 3c 30 f0 34 8a 73 3c 14 8d f3 b4 15 9a 50 f7 2e 4f d1 ba 1b e8 69 3d bd 68 2b d7 51 5f 35 ed cc 6b 9f 28 9a 36 c4 eb 1c f2 75 fc b8 8e 66 11 e8 42 5e 2e 2e ca a8 14 11 2d 57 29 37 62 7c 4d 05 f2 72 bd 95 02 42 3e 4e 86 32 9f 52 aa 2a 39 ca f9 13 2e 79 e5 04 06 c3 cd 0a 79 b8 70 77 21 ee 10 ca 7f 56 5d 22 6d c8 3c 52 5a 85 f9 fa f0 e9 02 49 a8 83 4a 3d 45 d3 2b 47 ef 02 5d e9 2a 92 47 25 be Data Ascii: >]Eo"3K/!h4LK!JF'&h!P~p0u-^s!tLe8Xyr@q,qrxn%P\|h:\|<b<04s<P.Oi=h+Q_5k(6ufB^..-W)7b\|MrB>N2R9.yypw!V]"m<RZIJ=E+G]G%
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 9d ec bc f8 ce 19 9b 64 5d b9 c8 a6 88 d2 04 a7 7e c7 a6 31 76 ca 85 45 94 3f 33 53 b3 bf fc e4 9c 6d e1 8e c3 25 0c 48 2a 33 f0 2b a6 14 c6 07 2d 7c 01 69 af b0 0b b4 4a d6 4f f8 01 81 80 04 44 c1 44 57 4e fc ba d3 a0 db c2 b1 ad ee ee 7a 33 66 49 1a f4 94 4b 2e 0b d1 38 0e 89 f0 f8 57 30 91 76 bf 9e 16 98 cc 0a 6d 4a 0f b8 61 40 a9 63 47 da e4 09 93 03 69 81 26 f1 7a 99 0e 6b 64 b9 7a 48 e5 7f 0f 4e 6d 71 35 b7 58 ba 60 8b 4d 66 e1 01 41 2c d4 13 df 5b 21 2d 21 84 d5 06 2a 37 a3 e3 f9 ea be 68 78 19 ce 9c da 01 58 33 ad c0 87 70 44 4f 5e f8 1b ff 38 8f f2 dd 35 d7 a7 5e 4e 96 5f 78 cd 30 8f 3b 3d c7 71 9a 8b c5 d3 34 85 9d 87 94 46 73 3e 2f a7 39 af e0 27 4f 9e 6c 06 bf 6a 7c d9 b2 65 b6 7c c5 8a ba 3d c0 ab 65 88 d5 4f 5b 2f c5 0e bd 32 03 5c 8e 23 fe Data Ascii: d]~1vE?3Sm%H3+-\|iJODDWNz3fIK.8W0vmJa@cGi&zkdzHNmq5X`MfA,[!-!7hxX3pDO^85^N_x0;=q4Fs>/9'Olj\|e\|=eO[/2\#
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 9e 25 86 f7 3b 41 54 7e 2f 5b 60 c5 1d 16 7c 01 69 00 c0 0b 9c d2 16 73 0e 8f 79 35 b9 44 3c c5 3d cd f3 c5 b8 5a 37 96 eb 7c 44 d2 9e 2f 1b 93 02 9d f8 24 d2 f4 48 2b 96 13 ca 8c e4 20 18 53 fc ef e2 65 7b 6a c3 f7 6a 45 7c 11 69 10 f4 b4 88 ed 05 44 9e 04 6b d4 47 75 25 27 49 91 a7 e6 77 20 52 68 fc 8d f8 31 1e cb 74 7e 9d 86 97 ed 6d 24 5f 1f e5 45 2e 3d cf eb 44 db 6b 70 ad 1c 0c 28 a1 a1 fa c4 27 37 d8 8b a7 4e d8 7b 39 7f 50 db 5d b6 ae b7 af b4 1f df bc de 0e 9f 99 b6 ff f6 cd 6e fb f4 da fb ed 8d bd 67 ec 4d b9 53 d6 8a ad d5 96 5b df 8a 01 e7 1e 6b 7d f4 db b6 be e3 5e eb e8 1b b7 b6 4b a3 98 0e 64 87 da d4 2c 9a 2e c6 d5 ae 39 fb ec dc e7 30 54 fc 80 2d 0d 57 a5 95 d8 8f 57 42 ae 43 bc e0 00 5f 95 cd d7 35 69 ba c2 83 91 41 e6 63 f6 c9 dc e7 38 Data Ascii: %;AT~/[`\|isy5D<=Z7\|D/$H+ Se{jjE\|iDkGu%'Iw Rh1t~m$_E.=Dkp('7N{9P]ngMS[k}^Kd,.90T-WWBC_5iAc8
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: 4f 71 3c bd 11 1d 5f a7 c0 29 9b d9 ed af 43 ea 22 c3 42 74 60 38 6b 7d 1c c9 0e b7 d3 d7 e8 78 0d 00 bf 7a 64 fb 76 92 e3 5d ac 68 a7 b8 99 6a 63 9a 23 6a 7a e0 5a d8 94 0a e8 25 ec 22 73 df df ff 92 7d e4 cd af b3 67 87 8b f6 78 4f bf bd e9 d2 36 ab e9 1f b1 df de 76 b9 fd 5e ef 80 1d 1a 1e b6 7a 58 93 3c b0 d3 68 14 dd 4d b5 40 ba 2c 3c 8f 1f cd d8 47 37 b7 d9 65 4f 9c b0 17 e9 ce 61 1d 92 7f 01 66 81 12 51 4d 0f 1e 2c d9 e5 57 d4 d9 ed 3f dd ce a1 d6 a0 1d 7d 76 06 75 31 d4 29 1e 93 2c e2 71 88 1b d0 48 6c db e5 cb ad 26 95 b4 17 b8 56 8f 5a 06 48 fa d4 94 a2 da be bc 5a f3 a5 1c bc 32 13 fc f9 5a f6 61 fc 5c a1 f8 c8 31 91 6b ac 96 68 28 3f 66 5f 59 bc e7 9a af 57 0d 00 14 46 af 16 d6 37 af fe aa f3 f9 2f de 1d 19 43 52 b6 b2 01 e5 6b c7 ae c5 0a 2a Data Ascii: Oq<_)C"Bt`8k}xzdv]hjc#jzZ%"s}gxO6v^zX<hM@,<G7eOafQM,W?}vu1),qHl&VZHZ2Za\1kh(?f_YWF7/CRk*
2024-08-31 22:50:27 UTC	16384	IN	Data Raw: c2 90 e6 f0 6d d2 1e 49 7d df 3a 66 73 08 e8 9b 69 76 63 b6 0c 4b 79 29 4d a7 09 9f 5a 65 25 5e 9c 07 3c c9 30 af d4 dc cc 05 61 65 b2 19 6d ce 29 52 b5 6d 6b b2 51 23 28 2f c3 cf 5d 2a 0b 65 e6 5e 18 ba 26 c9 28 2f 60 69 00 47 b5 5f 13 e5 98 95 40 da d2 dd 11 56 df f1 ea d0 a2 61 e0 b3 cf dc a9 c9 be 2a e7 69 09 9a fb 54 6e 2d f5 1f 96 5b 72 a2 1d 67 67 53 22 55 2e 3e 7e 8c b9 ac 6c 9a 1b 81 74 d8 b7 b8 13 9a 2f c6 6d 73 a3 25 d2 16 23 76 25 da 3f 23 64 af 39 0d 31 da a2 83 62 f1 07 f2 46 cb d0 d0 f0 ab ed ab 59 2b e0 53 c1 0f 6d a0 69 04 25 04 d2 f6 eb 19 eb 98 e7 89 f7 74 f0 80 76 29 c6 e9 e7 cb 7f 29 fc 1a 81 16 c1 8e 61 e0 c1 d3 67 5e ad fb fa b2 ca d4 d2 d7 d7 37 8b 16 90 a1 60 df 13 90 b2 72 34 9c d7 09 5b c8 70 a1 dd 95 71 20 a9 98 59 ff 18 20 02 Data Ascii: mI}:fsivcKy)MZe%^<0aem)RmkQ#(/]e^&(/`iG_@VaiTn-[rggS"U.>~lt/ms%#v%?#d91bFY+Smi%tv))ag^7`r4[pq Y
2024-08-31 22:50:27 UTC	4964	IN	Data Raw: dc ff b1 63 c7 2a fc d9 53 1f 81 f5 eb d7 5b 64 0b 9b c0 14 12 60 1d ea 9a 58 d7 a1 cd c1 19 81 8c 40 46 20 23 90 11 c8 08 34 08 02 ad 0d 52 8e f3 55 8c 92 40 92 6a c8 ce 17 f3 4b 89 0f ca ca 59 fe 4a 88 ce 3b 12 5d a6 ba 94 40 ca f7 9a 11 c8 08 64 04 32 02 19 81 26 45 60 39 68 00 6b 0a 1f e9 10 67 23 d5 0d e5 ea e8 e8 0a 5b b7 6c 0d eb d6 af 0b 23 23 23 e1 c4 89 e3 e1 f4 e9 81 30 35 35 d5 48 45 b5 b2 cc af 00 6c b8 e2 e6 02 65 04 32 02 19 81 8c 40 46 20 23 b0 08 04 9a 5d 00 ac 29 fc f9 7d fb dc 36 f7 5f 6c bb a3 a3 33 74 75 f5 86 99 e9 a9 70 f2 d4 09 09 7d a7 42 4b 6b 6b e8 ea ec 0e 9b 37 5f 1e 06 06 4e 86 e1 e1 c1 8b 5d 4c cb 3f 6a fe e6 0c 01 cf 8b 77 43 14 3c 17 22 23 90 11 c8 08 64 04 32 02 19 81 05 11 68 56 01 b0 5a 10 49 fd b8 67 67 66 66 02 57 a3 Data Ascii: c*S[d`X@F #4RU@jKYJ;]@d2&E`9hkg#[l###055HEle2@F #])}6_l3tup}BKkk7_N]L?jwC<"#d2hVZIggffW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49759	45.57.90.1	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:29 UTC	398	OUT	GET /ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:29 UTC	316	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:29 GMT Content-Type: image/png Content-Length: 20506 Connection: close Content-MD5: WH4EDyAll5IJSQHKlzlmng== Last-Modified: Wed, 14 Nov 2018 18:48:14 GMT Cache-Control: max-age=604801 Expires: Sat, 07 Sep 2024 22:50:30 GMT Accept-Ranges: bytes
2024-08-31 22:50:29 UTC	15659	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 d2 08 03 00 00 00 9f 16 c9 aa 00 00 03 00 50 4c 54 45 ff ff ff 08 0e 23 0a 0b 21 0b 11 26 0d 14 28 10 1f 38 05 08 17 02 05 15 05 0b 21 05 07 1d 07 09 1b 17 31 45 0f 23 3b 0d 17 2b 09 09 1f 06 05 1a 17 32 48 1c 38 4b 10 27 40 19 2d 42 0c 0f 23 0e 1f 35 02 04 19 03 08 1a 1a 36 4a 0b 1d 32 13 2c 41 13 23 3a 20 3b 4d 20 3c 51 13 29 42 23 3f 52 17 29 3f 0e 1c 2e 13 25 3d 02 04 11 fc fc fc 04 0b 1d 12 1d 31 23 40 56 0e 26 3e 15 3a 4f 06 06 14 15 37 4d 07 14 27 14 2f 44 27 43 57 1b 34 46 2b 46 58 fe fe fc 16 3e 53 20 36 49 16 2c 44 18 28 3a 0f 1c 36 28 4d 62 3d 60 6d 20 4a 61 1a 2f 47 08 18 2a 13 22 32 2f 4a 5d 17 25 36 17 46 5d 18 2c 3d 31 4d 61 12 18 2e 2e 52 65 39 5d 6d 12 18 28 28 48 5e 19 Data Ascii: PNGIHDRPLTE#!&(8!1E#;+2H8K'@-B#56J2,A#: ;M <Q)B#?R)?.%=1#@V&>:O7M'/D'CW4F+FX>S 6I,D(:6(Mb=`m Ja/G*"2/J]%6F],=1Ma..Re9]m((H^
2024-08-31 22:50:30 UTC	4847	IN	Data Raw: 88 2f 4c 28 d6 1d 43 90 c9 3b 74 81 55 94 20 1d e0 fc 22 ef 8f 76 fc 61 b4 f7 49 e2 f8 3c 0b 39 67 99 89 e0 52 52 96 21 71 6b 4d b8 4a 12 a8 dd 6e 69 54 7f 4d b2 77 31 b1 32 bd 14 0c 7a f3 f9 3c ab de 70 f0 f3 5d 51 cd 38 b8 10 50 4a 16 4b f2 b0 48 61 7d 51 c2 c2 2a b8 e4 6f b0 38 1f fe ca 2b 9c f1 84 4b 4b 30 0d ad 1b b6 6e e1 ca 60 d7 d2 52 09 0b d7 d0 84 06 95 ed db 00 eb 1f b6 ee d8 b5 89 30 8c e3 b8 60 57 27 75 10 1c 74 e9 a4 38 48 a6 06 09 42 96 80 b8 44 10 22 2f 72 38 48 e7 1c ee 1d 72 70 f6 b8 41 b7 83 50 02 a1 d0 ad 12 08 88 20 a6 2d 49 e4 02 09 08 22 48 b2 64 eb 96 bf c0 ef ef 79 5f 22 15 7f 7d df a4 85 52 3e 79 de b7 77 97 de dd db 4b 73 49 25 d6 ec 13 3b 6a 54 47 39 0a 57 1c c6 49 23 07 14 54 39 2e 50 8f 1d a7 00 9c 2b dc b5 7a bf ff 76 47 b9 Data Ascii: /L(C;tU "vaI<9gRR!qkMJniTMw12z<p]Q8PJKHa}Q*o8+KK0n`R0`W'ut8HBD"/r8HrpAP -I"Hdy_"}R>ywKsI%;jTG9WI#T9.P+zvG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-31 22:50:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=237310 Date: Sat, 31 Aug 2024 22:50:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	188.165.80.188	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:30 UTC	382	OUT	GET /wp-content/uploads/2018/08/Netflix-Background.jpg HTTP/1.1 Host: isquad.tv Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:30 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:30 GMT Content-Type: image/jpeg Content-Length: 323929 Last-Modified: Thu, 23 Aug 2018 12:57:50 GMT Connection: close ETag: "5b7eaf4e-4f159" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-08-31 22:50:30 UTC	16128	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 04 65 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 02 03 05 06 01 07 08 ff da 00 08 01 01 00 00 00 00 f1 6e 01 af bb 92 77 0f 57 31 0f ec 10 e6 f3 dd e7 38 92 7c 8f 3e a9 de a8 c9 80 f3 75 3d dd c5 d7 29 ca bf 95 b4 82 0d 85 8d Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwe"nwW18\|>u=)
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: f2 62 64 ed 5d 7b 38 d5 de 08 1f d3 c9 36 0f 39 c5 6c d0 d4 52 68 87 ce 3b af 9b d0 ac 26 a6 f2 ab 0d ae cc 3f 9b 6c 35 39 6d b6 ad 8c d5 51 9e cc 28 03 51 f0 8a a0 fd 3b 46 ab 9b 2d 63 dc 34 1c aa 23 91 9b 54 fc b6 c2 82 3d 20 7b b1 31 be b5 45 6f 69 84 89 b5 26 50 4d 5e d6 46 c6 73 8d 5c 86 d7 58 d0 82 4b a7 c2 c8 a7 24 70 82 04 74 92 eb 9b c7 49 d6 75 ad 72 67 5d 29 45 49 1b 11 32 c6 c9 4e 25 fc 80 28 a7 9c 92 cb 2c 89 1d d4 ba 92 5e 59 4a 4c c4 ea f7 7e 34 1f 5d de a7 74 ab 81 62 b7 7a 32 d6 00 e1 02 8a 89 5e cf 25 85 85 70 29 a9 75 dd 4b a9 24 e7 ba 47 75 35 e4 14 e6 81 5f 1b 57 52 e4 9f 41 26 81 5f e5 94 13 59 cf 64 f3 29 74 f9 78 39 a4 dc 54 bb cd 47 f4 7d 79 1e 31 89 d0 b6 ff 00 60 99 e7 59 95 63 ed 34 71 e3 e8 d1 15 04 fb 64 7c ac aa 63 5c a3 ad Data Ascii: bd]{869lRh;&?l59mQ(Q;F-c4#T= {1Eoi&PM^Fs\XK$ptIurg])EI2N%(,^YJL~4]tbz2^%p)uK$Gu5_WRA&_Yd)tx9TG}y1`Yc4qd\|c\
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: 23 4b 73 6b 7b 2d b5 c1 c6 69 64 aa ea a0 87 4c b2 fa 21 0e 3e 3d 36 6c 45 7c fc c8 9d ba bb 7e 8b 8d 7f 46 9e 0e 34 be 32 03 3e 9c 89 11 14 6f 66 e6 e2 80 09 f4 36 ab 41 01 01 2f 74 e6 d1 a6 d6 f1 5c 33 d3 75 6b c0 6b 87 91 5e e2 d2 1b 3a 18 a8 60 34 e9 98 25 9a 64 89 a5 a0 9a a9 be c2 9a af a1 80 af 2d f9 2a c3 1e 8b 93 ef f0 53 dd 96 9a 33 66 9e 56 74 9d 35 e3 ba 22 0b ed b7 cd 32 00 6c ed 44 10 e5 04 cc 92 0c 59 6d bc b9 cb ab 4e 3a 92 db 9a 49 9d 34 db 0c 65 93 9a 44 4c e8 d6 53 99 ae 77 99 21 9a 20 a2 ad 2e 65 4b d2 48 2a 64 cb bf 9f 9b a7 c8 e9 66 ee db d0 cb db 65 e1 f7 6b e3 f3 2d 8c 7a 1d 72 5f a2 cb 79 94 f3 f9 de 87 99 07 6f 5d 43 12 45 45 91 32 b2 dd 4b 68 a1 71 a6 d4 c0 5b 6c ac 93 68 c4 b5 08 d9 f2 15 b3 b6 bb 63 15 13 7c 97 5d 03 80 45 57 Data Ascii: #Ksk{-idL!>=6lE\|~F42>of6A/t\3ukk^:`4%d-S3fVt5"2lDYmN:I4eDLSw! .eKHdfek-zr_yo]CEE2Khq[lhc\|]EW
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: 4f 61 f0 a8 e4 37 53 66 e3 5e 2d 55 54 94 d4 b5 a6 27 ef df 6e 51 b5 03 d6 c8 7a c6 06 0e 1a 57 da e9 3d 3c 62 e3 0e 78 c7 b8 a6 d9 d7 ac 6b f2 b1 f0 eb a7 1d 68 aa ba 95 17 e2 fa 8b 34 ca c8 5c 6c 7b 2d 28 4b d8 d6 3d 99 62 b5 d0 55 b7 25 e6 26 25 75 08 0c ce cc e2 ad 55 76 5b c7 e8 53 c7 c4 63 37 07 bc 3f 57 98 a3 53 98 e3 19 f9 78 0a 96 19 5a aa fb 56 41 f0 7e 95 ae 21 dc 0d e4 82 0c 43 b9 97 c4 63 5c cc 0c a5 80 c5 35 8a e9 1d a7 b9 eb 07 f2 cc d7 d9 c4 60 2b b5 c0 a4 b2 c5 ad 19 db 26 f6 c8 be cb 5b 15 3c 17 86 c7 60 aa 65 17 9a 19 98 4d 4d 7a 8c ac 90 81 01 24 f9 3b 99 19 2f 7b 86 2f 9f 7b e3 ad 0d c8 e8 89 8f 7e 26 16 32 92 f9 d8 dc 8b 25 d7 3d cd c9 fe e6 1c 45 b6 de 8a 2e ea 1f 06 96 7f c7 76 2c c5 a2 ca 7f cc 4a c0 56 e4 c4 97 72 4f 1f 10 8f 32 Data Ascii: Oa7Sf^-UT'nQzW=<bxkh4\l{-(K=bU%&%uUv[Sc7?WSxZVA~!Cc\5`+&[<`eMMz$;/{/{~&2%=E.v,JVrO2
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: 4b 15 7d 4c eb 59 bf 0d 88 da 1e 4c c6 af b9 66 e0 58 a2 64 72 4b 2b bd 4f d1 93 6d 61 0e d1 76 4c 66 84 cd c2 d3 44 cf a4 42 49 86 78 fc 7b 09 ef 30 a8 ec d0 a2 3d 7c c7 18 d4 2b f0 96 63 77 1b 72 9a 7b 4a 44 a2 93 5f 36 6c 7a 9c 33 d9 66 65 a3 bc 8a 5f 28 7c 37 71 43 0c 4c 75 13 a7 06 6b ae 77 c8 b5 68 a9 ac 6c 8c 86 be d2 ed e8 26 06 62 e3 b1 88 c1 c0 61 fc 82 10 0f bb e1 e2 59 f7 3f 45 e9 ef 1f f4 f5 07 ec 7f d3 d7 8f b1 fa 2f 50 48 f8 79 75 fd c4 11 ef f2 26 5e 4a 7d ab d4 f2 87 ba f5 77 ff 00 25 ea b4 1f 75 ea 18 8d 16 ea 5f ed 9a 9a 9c 67 19 c6 1a 94 ce 12 ca 4b 45 af 50 cb 8b f2 85 4a 8d ca 97 ea 49 91 6f 6a 83 af 94 42 76 3d 07 c8 0f a9 f5 51 b3 1e b5 ed 0d 68 cb 2f 2c 82 b1 18 fa aa f2 95 21 7f a5 71 6a 4a c7 80 01 8a 82 0a bc ce 07 60 4c 9c 4e Data Ascii: K}LYLfXdrK+OmavLfDBIx{0=\|+cwr{JD_6lz3fe_(\|7qCLukwhl&baY?E/PHyu&^J}w%u_gKEPJIojBv=Qh/,!qjJ`LN
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: 87 95 8c 37 6e e2 27 76 d0 8b 77 4a c9 4f b2 a4 6c 3c 7b 2d 74 b6 da fe da fa b6 5a 7b e0 e7 36 51 60 61 8e 85 c7 87 af 8d 86 5a ca 01 8a fc 54 b4 c7 0f 95 e1 ee 74 a6 b6 e2 79 f3 2a 19 f4 bc a3 5d cf 88 05 be af 4a 55 5e d4 56 08 bf b6 a2 b3 c5 37 11 79 37 29 92 bd a0 6c b7 4c c7 70 f8 95 9d 19 48 2b fb 85 6c 52 26 26 39 be e1 3c 22 ce f7 26 f0 9b 33 ae e6 7c 46 59 45 51 f9 98 f4 35 f7 57 52 db 83 80 cb 90 12 fc 53 40 ab 9d 74 db 6b f0 ac 82 1b 46 6c 11 a2 7c 7f 13 18 a3 e4 f6 9f 99 bf 5e 22 70 9c 0c d1 f9 03 ba fb 2e 5d c2 2e 7f ff 00 61 97 49 8d 62 b7 b0 3e 0c 10 98 4c e5 a1 10 6f d7 64 19 bd 8f 40 60 6d cd cd cd cd ce 53 94 cd bb b9 6e 86 1d 5d cb 87 ab 52 97 10 1a ca ea ae c4 61 93 77 26 dc a2 df dd 26 5d 7f 21 c0 4c 96 ff 00 19 8d 5f 27 2c 72 5b 95 Data Ascii: 7n'vwJOl<{-tZ{6Q`aZTty*]JU^V7y7)lLpH+lR&&9<"&3\|FYEQ5WRS@tkFl\|^"p.].aIb>Lod@`mSn]Raw&&]!L_',r[
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: 36 d8 34 51 f4 67 8e 22 3e b9 6a 7d 06 71 1f 8d 7f 18 83 f8 54 ea 1f 79 e2 5f 69 ae 97 23 8e 9a 8a a1 3b 70 ee e5 3e 8d 35 81 8b eb 5f b4 19 af 3c fe a9 6b 77 18 f0 45 d0 00 79 58 df 57 99 75 8b 55 4f 63 58 ed 6d 8c c7 a4 e1 7c 1e 12 21 f4 d4 22 3a 2b 0d 10 bc 57 4a 3b b5 bb 44 fd c6 3c b1 b8 f7 f2 58 5b fb 98 f9 16 45 3d d1 4a c5 02 fb dd cb 0e ce 45 21 16 eb 8a bb 83 90 aa dc 1c 30 23 62 eb 96 aa 9e c6 c8 bd f2 2e b2 d6 c3 e8 94 db 88 8f 6d bf a7 6f 1f d9 bf 03 32 8f ee 7a 06 2a 76 2a ea 99 95 4c 5e bc aa 02 dd f1 5d 3b 2c 7d 39 18 65 4e c3 54 63 2f a6 e6 e0 94 a0 45 8f 6f e0 5b 73 ca d4 bb c4 1a 02 5a dc 10 b1 66 2c c4 fa f7 ad e1 db 94 e3 6f ea 77 cc 5a c7 1a 5d dd ce d8 29 3e c3 1a f3 3e 16 e9 fb 95 36 e6 3e 48 bf e8 7e 97 98 c0 fc 3d b2 fa fb b4 d8 Data Ascii: 64Qg">j}qTy_i#;p>5_<kwEyXWuUOcXm\|!":+WJ;D<X[E=JE!0#b.mo2zvL^];,}9eNTc/Eo[sZf,owZ])>>6>H~=
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: 9b 03 42 95 1a 1b c7 b8 57 6f d5 dd 19 0f c2 a1 5d 75 ac 0d b9 65 cb 5a 12 6f c9 36 92 d0 92 66 f5 e2 28 26 74 50 86 eb 37 6d 88 88 4b 5a e0 da e5 77 b9 8a e6 b6 06 60 0e 19 16 34 b4 8e 06 62 57 df ca 1b 1c 40 9f b6 63 aa 4b 54 f9 02 bb 16 bb ed 46 b6 d2 4c b8 f1 43 e8 06 c8 12 9a fb 75 aa 7a 6a 6a 6b d0 b1 62 4f ad 28 53 ea 22 da fd a6 81 8b 75 82 0b c1 f7 e4 08 30 9d 98 a0 6b cf 18 3e 9f 31 47 e7 d3 50 9f 4f 73 18 fe 20 9e ed a9 c4 90 76 41 d7 80 35 02 0e e7 19 cf 47 41 47 9f 19 76 6d 82 4e 9b 8f dd bf 91 99 59 42 aa 5a a5 a9 3b 96 2a ca f2 82 00 b3 aa e5 f7 4a 56 bd 23 14 70 6b 9b 3e 96 6a 19 53 16 cc 7c 4a df 6a 5e ec 80 65 fd 4e ba 5d 92 57 d5 4b 39 26 9e ab 55 ae 10 e6 17 4c 5b 1d 3b d9 37 30 59 5a 0a d1 50 13 bd 89 dc 43 66 a0 f0 b1 47 98 d0 42 78 Data Ascii: BWo]ueZo6f(&tP7mKZw`4bW@cKTFLCuzjjkbO(S"u0k>1GPOs vA5GAGvmNYBZ;*JV#pk>jS\|Jj^eN]WK9&UL[;70YZPCfGBx
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: a5 c2 25 64 17 9a 66 ec ee cd 51 0b b4 95 c6 28 19 32 24 ac b6 7b 94 66 25 71 59 95 40 17 44 51 e7 e8 8c 04 17 98 ae ab ff 00 8c 7a 9f 06 9b 1f 86 3e 68 48 2a 95 46 d6 f0 a8 a6 a5 14 e4 51 98 75 de 51 08 5e 36 66 e3 4d 83 3f dd 7f c2 a6 51 0d 41 ce 56 67 ba 11 3d 0d e6 6a 2b 4d 9a 67 d1 53 64 44 41 42 62 37 0f 03 2b f3 33 e8 a4 d6 88 7a 2a 7e 1d 97 41 52 8f de 5b 1c 03 90 cc a9 35 a2 0a c5 e4 03 0c 40 a6 fd d5 9c 98 0a 3f 79 6e 60 79 33 32 a4 d6 b7 e4 10 f3 10 c5 c4 77 58 39 95 c5 57 9e 65 1e 19 bb ae cb a1 14 41 31 31 42 20 65 cf 25 55 4d 81 f3 59 52 f1 7c 51 54 ba b6 86 0a a6 70 15 44 e0 80 2f fe 15 05 02 ee 57 e2 5a 7c 82 ca e3 37 cc f4 59 ac bd c9 d0 70 cd 5a 39 dd 4a ce e1 2b aa 66 6f 28 d1 1b cd e2 ec be b7 54 8b e3 18 ff 00 4a 29 ee 69 d4 15 ed 56 Data Ascii: %dfQ(2${f%qY@DQz>hHFQuQ^6fM?QAVg=j+MgSdDABb7+3z~AR[5@?yn`y32wX9WeA11B e%UMYR\|QTpD/WZ\|7YpZ9J+fo(TJ)iV
2024-08-31 22:50:30 UTC	16384	IN	Data Raw: cc 3f f4 95 62 f6 f5 1b 21 44 27 0f 12 be e9 4f 37 5d 93 d4 a3 35 c4 ca ae ea ab 24 e2 d2 74 58 5d d4 7f 0a c8 7a ab 2f 9a 01 bd d3 60 e8 c3 97 80 51 40 a6 28 27 50 2a 93 14 26 ea 74 08 d6 3d 65 a2 0e 10 10 81 cc 51 0e 8a 4a ad 24 8e eb 32 ab 05 34 c2 25 1e c8 f4 56 85 a0 98 90 a5 a0 46 66 41 3a 2f d1 59 34 30 6a 54 62 72 d1 66 bb a0 02 a0 54 02 6a a4 c4 df 1f b3 69 89 82 a1 3b bd 05 cc c6 1e d8 cb 24 f0 6d 9e 71 38 7c 23 65 cd 6d b5 b8 83 09 d1 5b 35 d6 f8 60 c6 35 54 98 9b 98 d3 6d 6e e8 c1 df 0a ff 00 a7 59 63 22 4e 1a de dd cb 31 12 4e d0 8c 32 46 42 83 21 79 93 c9 07 91 db 28 a3 c4 7d de 91 97 4b d8 7d eb 3b b2 f1 c2 60 51 0a d1 16 95 67 e8 98 e1 db c0 71 b8 26 a2 88 5d 7d ce 81 09 99 c4 ac c9 37 77 72 7e 7b a0 ad eb 4b 43 f2 4e dc 8c 70 f3 d9 f6 66 Data Ascii: ?b!D'O7]5$tX]z/`Q@('P*&t=eQJ$24%VFfA:/Y40jTbrfTji;$mq8\|#em[5`5TmnYc"N1N2FB!y(}K};`Qgq&]}7wr~{KCNpf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49761	103.57.86.197	443	5544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:30 UTC	505	OUT	GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d HTTP/1.1 Host: occ-0-6336-2186.1.nflxso.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 22:50:30 UTC	448	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 31 Aug 2024 22:50:30 GMT Content-Type: image/png Content-Length: 254586 Connection: close Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width Access-Control-Allow-Origin: * Cache-Control: max-age=31104000, public, s-maxage=604800 ETag: "2995e70023477ef72300f24e45aba1d5" Last-Modified: Thu, 01 Jun 2023 21:27:38 GMT Timing-Allow-Origin: * Accept-Ranges: bytes
2024-08-31 22:50:30 UTC	15440	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 e0 08 06 00 00 00 35 d1 dc e4 00 00 80 00 49 44 41 54 78 da ec fd 79 9c 24 c9 75 df 09 7e cd cc dd e3 8e bc b3 ee bb ef 03 8d 06 ba 1b f7 7d 92 04 08 5e 12 b1 a2 66 24 ad a4 1d ed 21 69 34 e4 cc 47 33 ab d5 ce 8a 1a 69 a4 a5 3e dc 91 e6 a3 6b 56 4b ea 1c 52 94 28 51 14 29 91 00 41 90 80 00 0a 57 37 fa 00 ba bb ba ee ca aa bc 33 e3 f4 d3 cc f6 0f 8f cc 8c 8c 8c 2b ab ab 3b ab ba fc d7 1d 95 11 e6 e6 66 cf cd cd dd 7f fe 9e bd f7 04 f0 7d 40 01 96 0c 19 32 00 20 a5 c4 5a 8b b5 6f cc 65 a1 94 02 40 6b 7d d0 87 9a 21 43 86 0c 19 ee 41 08 20 02 dc 83 16 24 43 86 7b 09 19 01 cc 90 21 43 86 0c 07 09 09 98 83 16 22 43 86 7b 0d 5a eb 8c fc 65 18 09 21 04 9e e7 21 84 38 68 51 32 64 c8 f0 16 83 3c Data Ascii: PNGIHDR5IDATxy$u~}^f$!i4G3i>kVKR(Q)AW73+;f}@2 Zoe@k}!CA $C{!C"C{Ze!!8hQ2d<
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: 36 9a 38 8e 98 9b 9d 23 e7 e5 78 f9 e2 55 94 50 e4 3c 97 99 a9 2a 6d bf 4d b3 d5 4c d7 13 ea 84 52 39 4f 65 b2 82 b7 de 24 d1 ba e7 bc 6d cd 35 bb 7d f6 ba cf a5 1d a9 55 1e 37 ab cc a0 b9 b2 d3 53 77 d9 ee 56 c7 5d 3f 38 4e dd 37 1e 0f 3e f8 20 d5 6a 75 9b 00 fe bb 7f f7 ef 0e 5a a4 0c 07 88 8c 00 f6 60 2b 86 d0 9d 17 31 fe 8d d0 f4 8d aa 33 cc 20 7a 6b 26 d6 c1 65 bb 7f bb ae a2 3a 51 64 75 a5 31 a2 6e 77 36 8b 61 79 6b 07 99 12 6d 9f 32 46 7c 1f 35 6e 5b db 7b 65 e9 25 78 83 8c b6 dd fb 77 cb 37 ca 51 65 10 01 1a 65 a6 de 8f a9 77 9c f1 1d a7 ff d7 ab 85 1e b7 fe de f5 8e fd 6a d4 03 cd fa da 06 c6 58 9c 7c ea 70 31 51 9e 40 27 49 3a 4a d6 a4 a1 50 6c ea 4d 2b 00 37 2f 49 74 82 52 0a c7 75 d3 96 85 40 39 8a a2 12 78 a5 02 41 ec e3 e4 f3 a0 14 4a 39 14 Data Ascii: 68#xUP<*mMLR9Oe$m5}U7SwV]?8N7> juZ`+13 zk&e:Qdu1nw6aykm2F\|5n[{e%xw7QeewjX\|p1Q@'I:JPlM+7/ItRu@9xAJ9
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: 79 73 9a 48 6b c2 7a 93 6e 73 8a e5 5e 87 33 62 83 8d b0 c7 d1 76 9b ee ea 0a bd 38 21 08 7c 4c 3a 3f ad b0 24 89 c1 17 92 a9 7a 9d b9 5a 8d 5d 33 0b 5c 3b 5f a7 13 4d f1 e9 2f 2c a3 3a 5b 68 34 ad 96 87 d7 68 f1 d8 fd 9f e4 bb 5f 7d 0d 53 7b f6 b2 72 fa 2c d6 5a b4 31 0e 00 0a 67 76 c6 62 31 d6 90 68 e7 2b 58 48 39 8c 63 11 08 4f 31 3b 33 cd 96 d1 5c f4 f2 db 59 fb d0 83 b0 d8 c4 57 11 35 eb 21 ad 25 96 e9 7c 11 ce eb 87 49 ea 78 28 ba eb 86 ad ae 61 d3 02 c4 60 63 7a 7d 43 90 19 8b d1 3e 60 2b 00 59 d9 bb b2 f9 40 49 dc 72 16 71 f1 0a 58 0e 15 6c 2e 7e b9 3d bd 72 2a 60 b1 de e3 86 52 aa 40 64 d5 37 4a cb 28 87 3a 55 fb 84 3d af e7 3c 05 b3 2a de 76 94 c6 f1 77 23 98 79 be 00 ed 7c a8 91 65 f5 7d e1 c2 be 7d fb 38 73 e6 cc 0b 9e ef b7 62 f8 5b 00 00 bf Data Ascii: ysHkzns^3bv8!\|L:?$zZ]3\;_M/,:[h4h_}S{r,Z1gvb1h+XH9cO1;3\YW5!%\|Ix(a`cz}C>`+Y@IrqXl.~=r`R@d7J(:U=<vw#y\|e}}8sb[
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: 2f 32 37 7b 17 d2 0b 39 76 e6 7f 22 4c 1d 29 a7 31 36 cc c8 4a 0e 6c 40 66 eb 94 a9 bf c8 94 25 c8 b4 a5 8c da 9c 69 5f 45 3f 2a 89 f3 69 9b eb 2f 81 98 a0 38 92 2f ab 62 4c c6 e6 b4 ac 00 e9 a3 3e ce 48 98 8e c6 ca 87 6e bc c9 6b be e7 7a de f6 83 ef 24 ea b5 49 0c f4 e2 98 9e 4e d8 88 fb 6c 74 3b 74 c2 1e 4f 2d 9d e6 4d 97 5f cf 0f de f5 3a b4 85 a5 f6 06 dd a8 8f c5 a2 52 63 c0 9e 72 36 fc 06 5e 71 95 f2 30 a9 91 65 29 9c 07 10 61 71 8a 1e c2 b9 5d 54 52 51 f3 7d e6 eb d3 2c 36 66 b8 64 ef 01 16 67 e7 f1 82 06 87 ea 4d de 7c d1 02 6b 91 61 3d ee 73 aa ad 79 ea 99 23 7c e0 0f 7e 9f cf 7e f9 4b fc d7 8f 3d c7 2d 3f fd 6f f9 e1 77 7c 1f 97 ec db c5 e2 fc 2c a6 df 67 a6 e6 33 d7 a8 d3 f2 24 33 be c7 b4 52 e8 5e 0f e5 79 cc 4c 4d 71 d1 de bd 2c 34 9b f8 5a Data Ascii: /27{9v"L)16Jl@f%i_E?*i/8/bL>Hnkz$INlt;tO-M_:Rcr6^q0e)aq]TRQ},6fdgM\|ka=sy#\|~~K=-?ow\|,g3$3R^yLMq,4Z
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: aa 39 ae b9 f6 6a f4 2b ff 0e 47 9f fe 0a 87 0e 07 04 35 58 7f f6 3e ce 3d f3 10 f5 e9 39 66 7c 1f e9 49 47 99 c5 cd 4d 9d 38 05 19 c7 0e 97 f8 01 ac ad 25 fc b7 3f f8 2a 5f 38 1b 01 0d 5a 9e a3 f6 0e b0 4b 82 00 1a fc 3f 9f 38 c9 6d ef b9 89 e4 d1 27 60 79 9d 60 61 8e b0 d5 62 63 23 22 91 06 bb cb 23 ea 76 e9 f5 7a 08 cf 47 58 8b 0e 43 b4 8e 49 fa 5d a7 b5 6d 25 26 71 40 b4 b3 be 46 67 7d 9d b0 d7 01 14 9e a7 88 0d 84 61 8c 4e cd fb b4 fa 11 26 8e f1 c2 08 92 04 5b ab 63 3d 45 64 2d 41 6b 96 bd f5 06 5b ed 2e 71 1c 31 a5 13 ba dd 2e 42 2a 77 7f 52 d2 49 c3 c6 06 bf e5 13 cc 2e 50 9b df 4b bc be 4c d2 6b 23 75 84 f2 03 fc a0 46 50 ab 31 df aa f1 cc c3 cf f0 0b 9f 3a 8e b8 e2 25 7c ec 0f 7e 77 b8 47 cc 01 97 cc 37 b9 62 5a 71 fb 25 f3 bc f4 ae 97 73 e0 9a Data Ascii: 9j+G5X>=9f\|IGM8%?_8ZK?8m'`y`abc#"#vzGXCI]m%&q@Fg}aN&[c=Ed-Ak[.q1.BwRI.PKLk#uFP1:%\|~wG7bZq%s
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: c5 85 53 1b 6c ad 6f 52 08 8c 9c 4b 71 8a 1d 91 e1 0d 34 6e b4 06 8a d6 ca d6 78 a7 cb d6 87 a1 2b 03 18 57 d6 fb ad a9 51 0c b7 1c 37 be f6 f5 3c f6 d1 cf 4c ac 62 b3 78 21 87 9f fb 1b e5 0b 5c fd e6 b7 d2 ed 2e b0 b5 55 a1 ab 11 57 e5 63 d8 df a7 4b c6 2b 0f c1 df ff f6 d3 54 6b cf f2 ee f7 8d 79 df 43 05 97 b6 7a 70 58 d3 59 10 fe d5 67 f7 f1 a1 2f 2f f0 13 df fa 02 af 7e b5 e5 2f fe e8 9b 79 fc 1d 2b fc fb 9f fc 04 27 bf b8 c1 4b ef 38 c2 7c df d1 c9 33 1c 8e 12 c7 cd c7 8e f1 7d 6f ef f1 c1 2f 3e 43 be 3a 64 61 df 02 f9 d2 12 fd c1 00 80 f9 2c a7 b4 96 b2 aa 58 1b 8d fc 73 d4 0e 36 87 14 cb 8b ac 6f 94 3c 71 e9 12 57 91 f3 ae 7b ef e4 65 77 5c cd be 23 0b 28 d1 28 d1 64 4a 30 75 45 85 45 eb 0c 1b f4 62 09 6c fb a8 b2 2c 2f 2f 70 b1 72 fc f2 2f 7c 9c Data Ascii: SloRKq4nx+WQ7<Lbx!\.UWcK+TkyCzpXYg//~/y+'K8\|3}o/>C:da,Xs6o<qW{ew\#((dJ0uEEbl,//pr/\|
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: 0d 6f 7b 6d c6 eb 8e e5 ac 8e 1b 95 92 c8 fe 25 30 0b 5e e7 af 36 8c ea 1a 53 95 50 55 54 b5 61 5c 95 54 f1 c4 60 6b a8 4b 30 35 da 39 a4 1c a3 ac 41 ac 43 19 83 72 06 31 25 da d6 2c 2d 1d e2 e2 a3 9f 62 78 e6 01 44 cf 6f db 67 26 67 f1 ac fd c3 6d ff dc 3a 38 ce ca b2 b3 4e 7d 6b 0f 91 ed f7 76 bf 2e 0f fc e4 b2 65 cc 2e d7 51 a5 7f fe d2 dc ff a5 07 f8 f4 a7 3f b7 c7 b6 fc b7 79 7d 8d 44 c0 0e d0 3c fb ec 0b 94 e3 72 26 4c da 7e ed 15 b1 b7 61 d7 24 3b 35 09 5a 76 2a 47 66 df da 06 22 77 c8 97 f0 4f 6c c5 14 70 da d6 9d 3b 81 b4 d9 0c e2 64 25 e1 9b 9b fc 2d b9 19 80 66 b3 6d 20 ca e4 38 4c 30 8f b3 98 c6 d6 3f 99 7e 96 06 68 d1 7a 79 9b cd 3c fe 8d 22 e1 48 6d c5 31 89 a7 f7 06 dc 7a bf 72 12 00 da 0e 03 d1 b6 a8 8d 35 c6 46 b4 c0 55 8c a0 d0 06 ce d1 Data Ascii: o{m%0^6SPUTa\T`kK059ACr1%,-bxDog&gm:8N}kv.e.Q?y}D<r&L~a$;5Zv*Gf"wOlp;d%-fm 8L0?~hzy<"Hm1zr5FU
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: da 04 20 5d 2e 03 c8 1a 82 11 02 c6 e0 93 10 1d aa 10 74 60 1b 7d f4 ad 67 e4 ba ce 83 1b d3 f9 34 6f 26 64 1c 50 48 02 5a 91 a5 8b 99 1c 62 0c 4b 74 dc 8f 6f 2c c4 b8 78 93 62 c1 6a a4 36 21 b3 7a a5 bf a1 31 2e e5 5f ed 5a 9b c0 a3 2b ee df 76 36 01 c4 d8 56 9e 5c 8c 8b b6 e4 4a f4 36 1b 2e ff 74 8e 28 fa ac 54 ed ff 4e fa 79 55 6a 6f 51 15 44 d9 95 88 7e 0b d6 56 5c 64 cb 42 d7 8c e6 e3 72 c8 3b 2f 26 ed 52 c8 74 a8 6b 12 a9 76 88 6e 02 2b e7 88 0c a7 52 59 c8 3a 8f cf b8 f0 ab 74 5f 17 7d f3 9c ef 8f 31 ff 31 02 55 9d c7 9a d2 31 e8 28 b6 99 ef 38 3a 4a 9e 10 fa 77 f0 1b 4c 0c 54 90 02 4a 60 31 e4 5e f6 be 64 a4 67 f0 fa 80 3e b5 4d 32 00 28 41 94 4b 82 d0 4d e3 01 e0 70 d8 30 1c 0d 18 8c 06 0c 47 43 86 4b fe 67 33 6c 3c 23 58 6b ea 4a a8 2b 1d 43 be Data Ascii: ].t`}g4o&dPHZbKto,xbj6!z1._Z+v6V\J6.t(TNyUjoQD~V\dBr;/&Rtkvn+RY:t_}11U1(8:JwLTJ`1^dg>M2(AKMp0GCKg3l<#XkJ+C
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: d7 28 40 7f e3 2b 31 af 7d 0d 56 6b 54 d3 7a 10 a8 6b d4 99 0d 7f af a7 de 9c 26 33 d5 68 a6 40 ed 92 f0 07 5a b4 cf ce b0 34 9a 1f f1 53 87 3b 3c 86 4b 86 c8 cb d6 90 27 ec 86 7d 15 b2 63 25 bf ee b6 03 bd c8 e8 10 b8 5f 97 3d 44 6d e8 e3 4e eb f9 d3 47 35 f2 b2 55 d8 3b 82 e3 0e 77 c7 19 e4 b0 82 51 03 eb 2d 6e 09 b8 ba 46 0e ac e0 da 31 ea 41 0b 87 82 4f e0 ee d0 ff 4e 3a a4 b5 c8 35 15 dc ba 0b f7 b8 01 ea 40 03 ab 4b 30 d0 a9 ff b9 71 0b 9b 06 39 b5 89 fb ec 18 f7 17 c7 e0 e3 53 68 3b ec b4 c3 56 55 88 e0 85 f5 cd 8e 0e 61 c7 48 d8 bd 5b 18 0d fc 33 ac 6f 58 ce 6c 0a 67 c7 82 99 5a 2e dd 2b 3c fb 46 b8 72 bf 62 c7 aa 30 a8 1d 75 ad 30 16 c6 53 e1 ec 39 c7 7d 0f c3 c7 3f 6b b9 ef 88 a1 a9 15 ab 4b 51 c2 c5 8f 35 6f 8e f6 7e 83 22 24 09 a0 c8 68 3b 7c Data Ascii: (@+1}VkTzk&3h@Z4S;<K'}c%_=DmNG5U;wQ-nF1AON:5@K0q9Sh;VUaH[3oXlgZ.+<Frb0u0S9}?kKQ5o~"$h;\|
2024-08-31 22:50:31 UTC	16384	IN	Data Raw: b1 c6 f8 24 2f 43 04 97 22 be dc 39 87 91 05 19 81 61 b4 1e 6c e3 69 ba 26 44 07 13 02 9b 8e 8e 34 2f 5c b1 7c 6c b3 a6 1a 42 20 00 35 4a e4 5a 74 85 7b f4 1c c3 95 e5 78 af 12 dc a2 d2 f3 49 ee 4b 3e 8f b1 2a d7 50 5e c0 38 2f cc cd a7 85 34 4c 7e c0 d9 32 e3 13 58 5b 44 e2 e4 1e ed 29 ed 5d 6e 01 7c c9 40 2a bf 01 fd 37 c2 ef fa bd 9c 67 e4 37 99 67 fd dc 05 1e 07 30 c9 9c d8 3b e4 89 02 2c 85 67 87 9b 6f be 99 27 3d e9 1a de fe f6 5f 43 31 4c bf 3d 51 d0 b7 f8 a8 3f 9b 9c e0 de 00 50 3d d1 22 fa 80 45 cd 7d df eb b8 f9 7d e5 04 b1 0b e0 3d 6e 5d ca 20 8c f2 74 d5 db e7 bd 8a ee 33 73 ec 5f ef ba 73 80 0f 0a 97 c1 82 c9 4b f5 2a 59 c3 b2 33 cf 57 51 17 af 55 21 eb 02 01 dc f4 ea 9b 8f cb 80 0b 24 48 a4 27 37 13 83 4d 76 f9 3f 26 d0 35 97 36 2d 81 53 1d Data Ascii: $/C"9ali&D4/\\|lB 5JZt{xIK>P^8/4L~2X[D)]n\|@7g7g0;,go'=_C1L=Q?P="E}}=n] t3s_sK*Y3WQU!$H'7Mv?&56-S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 22:50:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-31 22:50:31 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237309 Date: Sat, 31 Aug 2024 22:50:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-31 22:50:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2288, Parent PID: 1892

General

Target ID:	0
Start time:	18:50:19
Start date:	31/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5544, Parent PID: 2288

General

Target ID:	2
Start time:	18:50:21
Start date:	31/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2388,i,146692562838775030,3841611366193780439,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6432, Parent PID: 1892

General

Target ID:	3
Start time:	18:50:24
Start date:	31/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hemanth-kumar-p.github.io/E-comm"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly