Edit tour

Windows Analysis Report
https://membership.garenaa.id.vn/css/greeting.jsp/index.html

Overview

General Information

Sample URL:	https://membership.garenaa.id.vn/css/greeting.jsp/index.html
Analysis ID:	1511609
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6656 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1992,i,10972159969228159747,16302651187917394183,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://membership.garenaa.id.vn/css/greeting.jsp/index.html" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://membership.garenaa.id.vn/css/greeting.jsp/index.html	Avira URL Cloud: detection malicious, Label: phishing
Source: https://membership.garenaa.id.vn/css/greeting.jsp/index.html	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://membership.garenaa.id.vn/images/spin-bg.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/user/login/1	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/img/logout.29f7cada.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/js/chunk-10a81ae2.aad79b3d.js	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/images/yellow-bg.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/images/red-bg-2.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/img/btn-bod-deactive.5810d0f4.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/css/chunk-vendors.737c64e5.css	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/css/greeting.jsp/images/fb_ico.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/images/dob-bg.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/js/chunk-ebcca810.0be768b5.js	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/css/greeting.jsp/login.css	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/js/chunk-vendors.af4be1be.js	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/user/login/login.css	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/js/app.2a0a3444.js	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/css/chunk-ebcca810.fc5c29f8.css	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/img/dob-title.b8c16371.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/img/btn_history.c6c98836.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/css/chunk-10a81ae2.ec7605e3.css	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/images/select-arr.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/css/app.b1f17912.css	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/user/login/images/fb_ico.png	Avira URL Cloud: Label: phishing
Source: https://membership.garenaa.id.vn/images/spin-title.png	Avira URL Cloud: Label: phishing

Multi AV Scanner detection for submitted file

Source: https://membership.garenaa.id.vn/css/greeting.jsp/index.html

Virustotal: Detection: 18%

Perma Link

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49784 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /css/greeting.jsp/index.html HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/greeting.jsp/login.css HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://membership.garenaa.id.vn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://membership.garenaa.id.vnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://membership.garenaa.id.vn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/app.b1f17912.css HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-vendors.737c64e5.css HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/app.2a0a3444.js HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chunk-vendors.af4be1be.js HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-10a81ae2.ec7605e3.css HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-ebcca810.fc5c29f8.css HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chunk-10a81ae2.aad79b3d.js HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chunk-ebcca810.0be768b5.js HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/app.2a0a3444.js HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chunk-vendors.af4be1be.js HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/dob-bg.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/app.b1f17912.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spin-bg.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/app.b1f17912.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/red-bg-2.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/app.b1f17912.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/select-arr.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/app.b1f17912.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/yellow-bg.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/app.b1f17912.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/logout.29f7cada.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chunk-10a81ae2.aad79b3d.js HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/ff/ff_membership/item/Vip-Membership.jpg HTTP/1.1Host: cdn.vn.garenanow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dob-bg.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/red-bg-2.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/select-arr.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/logout.29f7cada.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/yellow-bg.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spin-bg.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/greeting.jsp/images/fb_ico.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/btn_history.c6c98836.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/dob-title.b8c16371.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spin-title.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/btn-bod-deactive.5810d0f4.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/css/greeting.jsp/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spin-title.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/dob-title.b8c16371.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/btn_history.c6c98836.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/btn-bod-deactive.5810d0f4.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/ff/fav.jpg HTTP/1.1Host: cdn.vn.garenanow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/ff/ff_membership/item/Vip-Membership.jpg HTTP/1.1Host: cdn.vn.garenanow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/login/1 HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/ff/fav.jpg HTTP/1.1Host: cdn.vn.garenanow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/login/login.css HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://membership.garenaa.id.vn/user/login/1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/login/images/fb_ico.png HTTP/1.1Host: membership.garenaa.id.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membership.garenaa.id.vn/user/login/1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: membership.garenaa.id.vn
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.vn.garenanow.com

Source: chromecache_121.4.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_121.4.dr	String found in binary or memory: https://animate.style/
Source: chromecache_100.4.dr, chromecache_90.4.dr, chromecache_97.4.dr, chromecache_126.4.dr, chromecache_89.4.dr, chromecache_113.4.dr, chromecache_105.4.dr, chromecache_108.4.dr	String found in binary or memory: https://cdn.vn.garenanow.com/web/ff/fav.jpg
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://cdn.vn.garenanow.com/web/ff/ff_membership/item/Vip-Membership.jpg
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://cdn.vn.garenanow.com/web/ff/ff_membership/item/hom_vang.png
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://cdn.vn.garenanow.com/web/ff/ff_membership/item/hop_manh_nhan_vat.png
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://cdn.vn.garenanow.com/web/ff/ff_membership/item/kim_cuong.png
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://cdn.vn.garenanow.com/web/ff/ff_membership/item/lua_trai.png
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://cdn.vn.garenanow.com/web/ff/ff_membership/item/may_quet.png
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://cdn.vn.garenanow.com/web/ff/ff_membership/item/ve_quay_kc.png
Source: chromecache_100.4.dr, chromecache_90.4.dr, chromecache_97.4.dr, chromecache_126.4.dr, chromecache_89.4.dr, chromecache_113.4.dr, chromecache_105.4.dr, chromecache_108.4.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css
Source: chromecache_101.4.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/wiki/Migration-from-SweetAlert-to-SweetAlert2#1-ie-suppor
Source: chromecache_101.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_95.4.dr, chromecache_107.4.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_95.4.dr, chromecache_107.4.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_95.4.dr, chromecache_107.4.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_95.4.dr, chromecache_107.4.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_100.4.dr, chromecache_90.4.dr, chromecache_97.4.dr, chromecache_126.4.dr, chromecache_89.4.dr, chromecache_113.4.dr, chromecache_105.4.dr, chromecache_108.4.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css
Source: chromecache_128.4.dr, chromecache_124.4.dr	String found in binary or memory: https://sweetalert2.github.io/#ajax-request

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49784 version: TLS 1.2

Source: classification engine

Classification label: mal64.win@17/79@14/9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1992,i,10972159969228159747,16302651187917394183,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://membership.garenaa.id.vn/css/greeting.jsp/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1992,i,10972159969228159747,16302651187917394183,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://membership.garenaa.id.vn/css/greeting.jsp/index.html	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/css/greeting.jsp/index.html	19%	Virustotal		Browse
https://membership.garenaa.id.vn/css/greeting.jsp/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://opensource.org/licenses/MIT	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://membership.garenaa.id.vn/images/spin-bg.png	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/user/login/1	100%	Avira URL Cloud	phishing
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/ve_quay_kc.png	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/img/logout.29f7cada.png	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/js/chunk-10a81ae2.aad79b3d.js	100%	Avira URL Cloud	phishing
https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/images/yellow-bg.png	100%	Avira URL Cloud	phishing
https://github.com/sweetalert2/sweetalert2/wiki/Migration-from-SweetAlert-to-SweetAlert2#1-ie-suppor	0%	Avira URL Cloud	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/lua_trai.png	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/images/red-bg-2.png	100%	Avira URL Cloud	phishing
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/hom_vang.png	0%	Avira URL Cloud	safe
https://cdn.vn.garenanow.com/web/ff/fav.jpg	0%	Avira URL Cloud	safe
https://animate.style/	0%	Avira URL Cloud	safe
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/hop_manh_nhan_vat.png	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/img/btn-bod-deactive.5810d0f4.png	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/css/chunk-vendors.737c64e5.css	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/css/greeting.jsp/images/fb_ico.png	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/images/dob-bg.png	100%	Avira URL Cloud	phishing
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/kim_cuong.png	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/js/chunk-ebcca810.0be768b5.js	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/css/greeting.jsp/login.css	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/js/chunk-vendors.af4be1be.js	100%	Avira URL Cloud	phishing
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/may_quet.png	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/user/login/login.css	100%	Avira URL Cloud	phishing
https://sweetalert2.github.io/#ajax-request	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/js/app.2a0a3444.js	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/css/chunk-ebcca810.fc5c29f8.css	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/img/dob-title.b8c16371.png	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/img/btn_history.c6c98836.png	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/css/chunk-10a81ae2.ec7605e3.css	100%	Avira URL Cloud	phishing
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/images/select-arr.png	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/css/app.b1f17912.css	100%	Avira URL Cloud	phishing
https://membership.garenaa.id.vn/user/login/images/fb_ico.png	100%	Avira URL Cloud	phishing
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/Vip-Membership.jpg	0%	Avira URL Cloud	safe
https://js.foundation/	0%	Avira URL Cloud	safe
https://membership.garenaa.id.vn/images/spin-title.png	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
membership.garenaa.id.vn	188.114.97.3	true	false	unknown
temp.cdn.vn.garenanow.com	203.162.56.72	true	false	unknown
cdn.vn.garenanow.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://membership.garenaa.id.vn/images/spin-bg.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/user/login/1	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/img/logout.29f7cada.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/js/chunk-10a81ae2.aad79b3d.js	false	Avira URL Cloud: phishing	unknown
https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css	false	Avira URL Cloud: safe	unknown
https://membership.garenaa.id.vn/images/yellow-bg.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/css/greeting.jsp/index.html#/	true		unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://membership.garenaa.id.vn/images/red-bg-2.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/css/greeting.jsp/index.html	true		unknown
https://cdn.vn.garenanow.com/web/ff/fav.jpg	false	Avira URL Cloud: safe	unknown
https://membership.garenaa.id.vn/img/btn-bod-deactive.5810d0f4.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/images/dob-bg.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/css/chunk-vendors.737c64e5.css	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/css/greeting.jsp/images/fb_ico.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/js/chunk-ebcca810.0be768b5.js	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/css/greeting.jsp/login.css	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/js/chunk-vendors.af4be1be.js	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/user/login/login.css	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/user/login/1#/	false		unknown
https://membership.garenaa.id.vn/css/chunk-ebcca810.fc5c29f8.css	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/js/app.2a0a3444.js	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/img/btn_history.c6c98836.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/img/dob-title.b8c16371.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/css/chunk-10a81ae2.ec7605e3.css	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/images/select-arr.png	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/css/app.b1f17912.css	false	Avira URL Cloud: phishing	unknown
https://membership.garenaa.id.vn/user/login/images/fb_ico.png	false	Avira URL Cloud: phishing	unknown
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/Vip-Membership.jpg	false	Avira URL Cloud: safe	unknown
https://membership.garenaa.id.vn/images/spin-title.png	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/ve_quay_kc.png	chromecache_128.4.dr, chromecache_124.4.dr	false	Avira URL Cloud: safe	unknown
https://github.com/sweetalert2/sweetalert2/wiki/Migration-from-SweetAlert-to-SweetAlert2#1-ie-suppor	chromecache_128.4.dr, chromecache_124.4.dr	false	Avira URL Cloud: safe	unknown
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/lua_trai.png	chromecache_128.4.dr, chromecache_124.4.dr	false	Avira URL Cloud: safe	unknown
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/hom_vang.png	chromecache_128.4.dr, chromecache_124.4.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT	chromecache_121.4.dr	false	URL Reputation: safe	unknown
https://animate.style/	chromecache_121.4.dr	false	Avira URL Cloud: safe	unknown
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/hop_manh_nhan_vat.png	chromecache_128.4.dr, chromecache_124.4.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_101.4.dr	false	URL Reputation: safe	unknown
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/kim_cuong.png	chromecache_128.4.dr, chromecache_124.4.dr	false	Avira URL Cloud: safe	unknown
https://cdn.vn.garenanow.com/web/ff/ff_membership/item/may_quet.png	chromecache_128.4.dr, chromecache_124.4.dr	false	Avira URL Cloud: safe	unknown
https://jquery.org/license	chromecache_95.4.dr, chromecache_107.4.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_95.4.dr, chromecache_107.4.dr	false	URL Reputation: safe	unknown
https://sweetalert2.github.io/#ajax-request	chromecache_128.4.dr, chromecache_124.4.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_101.4.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_95.4.dr, chromecache_107.4.dr	false	URL Reputation: safe	unknown
https://js.foundation/	chromecache_95.4.dr, chromecache_107.4.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	membership.garenaa.id.vn	European Union	13335	CLOUDFLARENETUS	false
203.162.56.72	temp.cdn.vn.garenanow.com	Viet Nam	7643	VNPT-AS-VNVietnamPostsandTelecommunicationsVNPTVN	false
45.119.240.104	unknown	Viet Nam	131418	VIETNAMESPORTS-AS-VNVietnamEsportsDevelopmentJointStock	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.10
192.168.2.12

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1511609
Start date and time:	2024-09-16 00:18:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://membership.garenaa.id.vn/css/greeting.jsp/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.win@17/79@14/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://membership.garenaa.id.vn/user/login/1

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.184.206, 64.233.167.84, 34.104.35.123, 142.250.186.106, 216.58.206.42, 142.250.185.106, 142.250.185.170, 142.250.185.74, 172.217.16.202, 142.250.184.202, 172.217.18.10, 142.250.186.42, 172.217.18.106, 142.250.185.138, 142.250.184.234, 142.250.181.234, 142.250.186.170, 142.250.186.138, 216.58.206.74, 20.114.59.183, 2.19.126.163, 2.19.126.137, 20.3.187.198, 93.184.221.240, 13.95.31.18, 216.58.206.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu.azureedge.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 15 21:19:09 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9767348327249676
Encrypted:	false
SSDEEP:	48:8dibdwjT8ldHfidAKZdA1uehwiZUklqehBy+3:8dxjA2uy
MD5:	400588FA695FBEF5B3E69A00B36FDFA4
SHA1:	80ACBC27716AECAB0CCE738839B8EC6CA3CC6125
SHA-256:	FEA1212E0AE3818E389967CB187B0552F80E4A6C3B9DE87456BA564F91656729
SHA-512:	9DBE760266E617D366457969D5CD9A3C9AE2D80A959BCBE8CD41BF6DF784ECB0E26A1C6A28DE7B566559EDA68EA2329533049076225EB7FDA8CE32610C680378
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....<~[I........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I/Yc.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Yc.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V/Yc.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V/Yc............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Ye.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i........... .2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 15 21:19:09 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9905636282438404
Encrypted:	false
SSDEEP:	48:8PibdwjT8ldHfidAKZdA1Heh/iZUkAQkqehey+2:8PxjAA9QHy
MD5:	77DE17F556D025F63FF7D89583EB6B78
SHA1:	C4E095F7BEDC85C32FCC9EB5202FF8F8421AAF25
SHA-256:	F895634DB05A7DB84547412018BBC2C15330E21016810D34C7DB886C644FB179
SHA-512:	104140B032812F79C9E40FA1460369AAE854FCDAF11A26635F354EEF020FE9015109B0B6B67632880AA80526E75C2CE4D0AD59CB549724799E2AA41E1DF298C4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....0MI........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I/Yc.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Yc.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V/Yc.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V/Yc............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Ye.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i........... .2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.00144822267268
Encrypted:	false
SSDEEP:	48:8FibdwjT8bHfidAKZdA149eh7sFiZUkmgqeh7sEy+BX:8FxjAMnCy
MD5:	2F60C61DF1D65A1DB3D074633737CAC1
SHA1:	00C47DDC6877BE4B8BB46D2F2BD6678C62274817
SHA-256:	1DFFFD06255B26B0D069AA997521870B44623BCBF296FB113F2AD9CA68E649D6
SHA-512:	3724BA15FDD2A2D7D9C04EA236413A25D64B90E59DCE1AD644B0315805FC168072B98C390E0BD60C83EE4F809C9B03FCFBD6987103A8C9F0EE63C151224BCAC7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I/Yc.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Yc.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V/Yc.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V/Yc............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i........... .2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 15 21:19:09 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9886058256932606
Encrypted:	false
SSDEEP:	48:8OibdwjT8ldHfidAKZdA14ehDiZUkwqeh6y+R:8OxjAbcy
MD5:	813C5AE1CCDAB028EE1F0FFB90DCA181
SHA1:	EE46E0838C516F1CC191977958ECCF52560C9F81
SHA-256:	F6096997C2897EE247B06F7D1503D4A77B4DCF2F44B53A00F4DD391BFEDAF0ED
SHA-512:	9BA1A5AF10474BAEE482A3AA92F6403EF7F8D4FCF044C13F1529976E5882BE3D7E91697556FF59B8C2DAE8286828BB232839777D7014B97B8BD173128EBC8277
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......FI........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I/Yc.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Yc.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V/Yc.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V/Yc............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Ye.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i........... .2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 15 21:19:09 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.977027953771805
Encrypted:	false
SSDEEP:	48:8uibdwjT8ldHfidAKZdA1mehBiZUk1W1qehYy+C:8uxjAr94y
MD5:	B251D5022F7F3B1A85CB0A0836AD6E62
SHA1:	138CADBE91AC11CB6494125121BFB83C8667DF90
SHA-256:	1A7EC343C9E157FB58D57FAAFBE8E35669F03F87D45E28950823301A0FA559D0
SHA-512:	41574117F3A4AD25CFDF4C4AE68715B5EB354DF22D952D5895A21F1BF24E10C51A79A643053EAF18CA337DF1DBB14CAF6D52572FAC8A706184B09EF044C80596
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......VI........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I/Yc.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Yc.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V/Yc.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V/Yc............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Ye.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i........... .2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 15 21:19:09 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9878698629073677
Encrypted:	false
SSDEEP:	48:80ibdwjT8ldHfidAKZdA1duT1ehOuTbbiZUk5OjqehOuTbCy+yT+:80xjAKTyTbxWOvTbCy7T
MD5:	D636F8DBE96869D706F4A702AA206D31
SHA1:	87041FDC0DA4386C463B7CEBCB7139B4B25DD488
SHA-256:	E63E290C837FB6189E5168926CA76A19DF34A5BC6F8CE5B13D0B9F8D5B7C11CF
SHA-512:	AFF264F10DC3B07DA690AD60C21E1A39831ACBB4568766899B6ECBE2C3AA044F23023D5148D4C9C86F64458F51F40785ED0E432F76E645E5FD4059345281BADC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......:I........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I/Yc.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Yc.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V/Yc.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V/Yc............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Ye.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i........... .2......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1822
Entropy (8bit):	5.388604887290648
Encrypted:	false
SSDEEP:	48:terx4OnWV8ONDuFOfVfvUGPgrPOdf7KW/AjKUx6f:iXnWV8ONsROB7vuo
MD5:	9B5409486A566E472D212D03CC670DAE
SHA1:	1E5AFF706BE3AF1EF603E744575F44A95ABE1987
SHA-256:	38476EC67A44A806B47D9553FD8679324FE6A4DBF8A3C8722E993D56A92F9B3C
SHA-512:	E80A90D0F4C26E3CDC8773D884759581E61424C0BBEE164577751678DF3BB5D36520D42B53141DD454BA2D0B5D9AB44ED9FE2E070AE9D9C420AA6A57959A711C
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/css/greeting.jsp/login.css
Preview:	<!DOCTYPE html>..<html lang="">..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,initial-scale=1">..<meta property="og:title" content="GARENA FREE FIRE MEMBERSHIP">..<meta property="og:description" content="Ch..ng tr.nh tri .n k.m nh.ng s. ki.n ..c bi.t d.nh cho ng..i ch.i Free Fire">..<link rel="shortcut icon" href="https://cdn.vn.garenanow.com/web/ff/fav.jpg">..<title>Garena Free Fire Membership</title>..<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">..<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css">..<link rel="stylesheet" href="./login.css">..<link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">..<link href="/css/chunk-ebcca810.fc5c29f8.css" rel=

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	140936
Entropy (8bit):	5.058262383051032
Encrypted:	false
SSDEEP:	1536:un1QWSUPBT+QYYDnDEBi82NcuSEz/NvT/gIENM6HN26e:q1L7PDxYIENM6HN26e
MD5:	04ACA1F4CD3EC3C05A75A879F3BE75A3
SHA1:	675FCF28F9FBF37139D3B2C0B676F96F601A4203
SHA-256:	7928B5AB63C6E89EE0EE26F5EF201A58C72BAF91ABB688580A1AA26EB57B3C11
SHA-512:	890415FA75ED065992DD7883AED98BFBDFD9FA26EEC7E62EA30263238ADCA4EECD6204F37D33A214D9B4F645AD7D9CC407D7D0E93C0E55CF251555A8A05B83FF
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}h

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1079 x 852, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	65835
Entropy (8bit):	7.9653005132803205
Encrypted:	false
SSDEEP:	1536:G7nXM6f5e0hw6Kw5j3reCHdbeC5unMkiV:inc6f5e0howtHdbVEnsV
MD5:	EDE8D79517267263B24F4629C5A20FCB
SHA1:	26776AAF21B2902E9088281E000A31BE4A969C72
SHA-256:	3AE09EF678CACB0FC6BE8D17DC403C2B8049FFDB302E591189331AE71307B447
SHA-512:	0C0A968FDD674B005AAC92A46E9F2E626ECA163960CE389284EB919189100EE7E95573482E952B3C58AA984E100FF3067DB11C3E430AC6298DBC02D95AD0386A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...7...T.....(.Q.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	10025
Entropy (8bit):	7.806788989416858
Encrypted:	false
SSDEEP:	192:Bx8r1df6F5lDLUw3Y8MMxcSf1e9xdKwHlPqNh5g/RmorgjNzLc6bmtyp4HIq6:HIrf6F5lDAwEMx50rDGeMNzw6yx6
MD5:	78E23E9A864C3F5C9CA4049E7CCEE8CB
SHA1:	0A635DCF9EADE4C2D41F638C7C3A5BCC44DD9F14
SHA-256:	D4B543FBD9EC68332B9D3AF5F2253E02E7F262C41F87452FEA20E4CBFC7E4A68
SHA-512:	F94B20C7760FC872E2E8E6C285C792BAE67CA75DCFBD9BB525062A2F19B35FBAD49A022ABB95D00E8CB269A40828E5736D3835ACBB761C96A801CA30B81A7E5C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............`Exif..II.......1.......&...i...............Google............0220................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................................................................................e...{....T...L.^.....;.5RL..Y)v9..'..8{.....;Ed.d....,.....Zz=.Y3...U.......S&e..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 35, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7521
Entropy (8bit):	7.947835298204277
Encrypted:	false
SSDEEP:	192:/SDS0tKg9E05TcyY/gxtl0eHj/UwCyFIKW:qJXE051Y70/HCO9W
MD5:	6BCD8E8F7A6D40EB79FEC974ED9BE56E
SHA1:	1D519EB77848275CE0C96349D7B4FDA8A3D1F709
SHA-256:	28E0BD6AB428B72BF9013B4423CE4FCC42BF4E894F37E1D5BB3F93EC729DBD5C
SHA-512:	ADA25D868D21F40F25BB96347990EB372270FF5A7190A2B758C627A58C7627A6CA881B08831BB01AAD65784C896DBF3EE96C287E89C127AAF9CAF412955032BB
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/images/yellow-bg.png
Preview:	.PNG........IHDR...f...#......(......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1822
Entropy (8bit):	5.388604887290648
Encrypted:	false
SSDEEP:	48:terx4OnWV8ONDuFOfVfvUGPgrPOdf7KW/AjKUx6f:iXnWV8ONsROB7vuo
MD5:	9B5409486A566E472D212D03CC670DAE
SHA1:	1E5AFF706BE3AF1EF603E744575F44A95ABE1987
SHA-256:	38476EC67A44A806B47D9553FD8679324FE6A4DBF8A3C8722E993D56A92F9B3C
SHA-512:	E80A90D0F4C26E3CDC8773D884759581E61424C0BBEE164577751678DF3BB5D36520D42B53141DD454BA2D0B5D9AB44ED9FE2E070AE9D9C420AA6A57959A711C
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/user/login/images/fb_ico.png
Preview:	<!DOCTYPE html>..<html lang="">..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,initial-scale=1">..<meta property="og:title" content="GARENA FREE FIRE MEMBERSHIP">..<meta property="og:description" content="Ch..ng tr.nh tri .n k.m nh.ng s. ki.n ..c bi.t d.nh cho ng..i ch.i Free Fire">..<link rel="shortcut icon" href="https://cdn.vn.garenanow.com/web/ff/fav.jpg">..<title>Garena Free Fire Membership</title>..<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">..<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css">..<link rel="stylesheet" href="./login.css">..<link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">..<link href="/css/chunk-ebcca810.fc5c29f8.css" rel=

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1109, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	597541
Entropy (8bit):	7.998508544610571
Encrypted:	true
SSDEEP:	12288:Q113RsICe+JUNw9ZXs088K3H7/ez5pi5On/fUTHZlJL:QLGICeBwjc08R3UvUjZv
MD5:	B83BAE0D44A9310BBC30B8B3F59F64FD
SHA1:	B6D5446495BAB1D7EC2ECF9DC1177CF89886F36C
SHA-256:	78E2CA75FCAFA1DD58EEFB124E508648A756F1D3C7A83E42E5D46BF8DF06C26C
SHA-512:	4CD15ACD69AC3AED633404F9E25CC3F523583324DF771763F40D98D1F9EB73064C607DC0320541A13A588C9B5C8CA2217ECF753DBF9528C647128FD44D441283
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...U........\....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60192), with CRLF line terminators
Category:	downloaded
Size (bytes):	216700
Entropy (8bit):	5.275131752267566
Encrypted:	false
SSDEEP:	3072:brN8mwccQcixKmH9fRL+lYlhHT+T2RrlxtVGqy4hXDc:bh8BacixKmHt1+UhHT+J4hXDc
MD5:	89DEA640423A1344887137F04512A78C
SHA1:	8DA9202DBF075F31B0D761F6BE21D5B941D8AB0E
SHA-256:	81E6A37CDE5650C889F049B7641528F33C6F0315162880258E5ABC79D4FBC37A
SHA-512:	4A6C1FA58227C6F49171B032703FC9CD9F51F4F3694BCA73DA503E291D575461E311C6DC7F56F94F79931C9A22DBC8FAEA2E8B8ED47720DC5122FD52E537D2A9
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/js/chunk-vendors.af4be1be.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00ee":function(e,t,n){var r=n("b622"),o=r("toStringTag"),i={};i[o]="z",e.exports="[object z]"===String(i)},"0366":function(e,t,n){var r=n("1c0b");e.exports=function(e,t,n){if(r(e),void 0===t)return e;switch(n){case 0:return function(){return e.call(t)};case 1:return function(n){return e.call(t,n)};case 2:return function(n,r){return e.call(t,n,r)};case 3:return function(n,r,o){return e.call(t,n,r,o)}}return function(){return e.apply(t,arguments)}}},"06cf":function(e,t,n){var r=n("83ab"),o=n("d1e7"),i=n("5c6c"),a=n("fc6a"),s=n("c04e"),c=n("5135"),u=n("0cfb"),l=Object.getOwnPropertyDescriptor;t.f=r?l:function(e,t){if(e=a(e),t=s(t,!0),u)try{return l(e,t)}catch(n){}if(c(e,t))return i(!o.f.call(e,t),e[t])}},"0cfb":function(e,t,n){var r=n("83ab"),o=n("d039"),i=n("cc12");e.exports=!r&&!o((function(){return 7!=Object.defineProperty(i("div"),"a",{get:function(){return 7}}).a}))},1157:function(e,t,n){var r,o;../!.. j

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1822
Entropy (8bit):	5.388604887290648
Encrypted:	false
SSDEEP:	48:terx4OnWV8ONDuFOfVfvUGPgrPOdf7KW/AjKUx6f:iXnWV8ONsROB7vuo
MD5:	9B5409486A566E472D212D03CC670DAE
SHA1:	1E5AFF706BE3AF1EF603E744575F44A95ABE1987
SHA-256:	38476EC67A44A806B47D9553FD8679324FE6A4DBF8A3C8722E993D56A92F9B3C
SHA-512:	E80A90D0F4C26E3CDC8773D884759581E61424C0BBEE164577751678DF3BB5D36520D42B53141DD454BA2D0B5D9AB44ED9FE2E070AE9D9C420AA6A57959A711C
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/user/login/1
Preview:	<!DOCTYPE html>..<html lang="">..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,initial-scale=1">..<meta property="og:title" content="GARENA FREE FIRE MEMBERSHIP">..<meta property="og:description" content="Ch..ng tr.nh tri .n k.m nh.ng s. ki.n ..c bi.t d.nh cho ng..i ch.i Free Fire">..<link rel="shortcut icon" href="https://cdn.vn.garenanow.com/web/ff/fav.jpg">..<title>Garena Free Fire Membership</title>..<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">..<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css">..<link rel="stylesheet" href="./login.css">..<link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">..<link href="/css/chunk-ebcca810.fc5c29f8.css" rel=

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107313
Entropy (8bit):	5.137314431529709
Encrypted:	false
SSDEEP:	1536:IkZLWFwg1sA/kiDT36yo5prSeM0uTBMJihoCcZCOud8G8tKS65wqsZCG+dM2cl6o:IkZAwg1sA/kiDT36yo5prSeM0uTkdL
MD5:	5104C55A2B7A0DCAA22592709355E2EA
SHA1:	D9C4AF0A71F261C2962BDB3E53BA0D629BF8DEF5
SHA-256:	1D9FFE54B028DA93632155C0341486C6899A372FB75A86C690A48473F85F92AC
SHA-512:	93BBB8D2A60451002221BDA807BCAB3DBBD2B2669CA2BE0A86296A405450782815496E05288A347635321F2B57717F9D892A9E62051F8AF58633EFE468D728E0
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/css/app.b1f17912.css
Preview:	.animated{-webkit-animation-duration:.5s;animation-duration:.5s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animation-duration:2s;animation-duration:2s}.animated.bounceIn,.animated.bounceOut,.animated.flipOutX,.animated.flipOutY{-webkit-animation-duration:.75s;animation-duration:.75s}@-webkit-keyframes bounce{0%,20%,53%,80%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1);transform:translate(0)}40%,43%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);transform:translateY(-30px)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);transform:translateY(-15px)}90%{transform:translateY(-4px)}}@keyframes bounce{0%,20%,53%,80%,to{-webkit-a

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 403 x 57, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	39362
Entropy (8bit):	7.978409345137919
Encrypted:	false
SSDEEP:	768:535CDfSwa1flmpSO6o4BD2VoJ1XwqstT5pyUJyhw6/SmZF8:CLS7Kz+vAqGT5Vsw6amZF8
MD5:	9975FF17DA66B0C03464A24C1EEF1CC3
SHA1:	4BE0849F8B0ACD81859AD16A6F78728E5ABC3631
SHA-256:	54FFF3EA08A8E931D301109E72A14B34D633FA9E1DE77EFD49AB5FC42A2EAEBC
SHA-512:	D8ACE77C8C5DD627820B929BA67A7381E9C68869030E9F20BD43E72E0475EC7974E9F176BF92A9F451F9F476F0390B9D9A5CDC568A1D01D306CBD59195A3220F
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/images/red-bg-2.png
Preview:	.PNG........IHDR.......9........]....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4404), with CRLF line terminators
Category:	dropped
Size (bytes):	4446
Entropy (8bit):	5.319332646899631
Encrypted:	false
SSDEEP:	96:DsvToxdSu0JVTNDA6xkzzbJkX67NoS/Tv:GoxdSu0JVTNDNk2677v
MD5:	E0CC9473AE0330DAFF8F81DD804CE105
SHA1:	EB8CADEE809ED5FD9AFDDD4FC0D0E004E174B764
SHA-256:	FA727018E0B7888C4B0DF6681A5BA88298C435B8687E77CD34F182FDA668F927
SHA-512:	51B57E978136A37EB76BA96EA9CA4E2A4481899D94354A371D67B7E50C28F419AB05B18DAFD9A4187C43DF520E4900121B9993A5F1A327A37C63CFCC58881225
Malicious:	false
Reputation:	low
Preview:	(function(e){function n(n){for(var r,o,c=n[0],i=n[1],l=n[2],s=0,f=[];s<c.length;s++)o=c[s],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&f.push(a[o][0]),a[o]=0;for(r in i)Object.prototype.hasOwnProperty.call(i,r)&&(e[r]=i[r]);d&&d(n);while(f.length)f.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,n=0;n<u.length;n++){for(var t=u[n],r=!0,o=1;o<t.length;o++){var c=t[o];0!==a[c]&&(r=!1)}r&&(u.splice(n--,1),e=i(i.s=t[0]))}return e}var r={},o={app:0},a={app:0},u=[];function c(e){return i.p+"js/"+({}[e]\|\|e)+"."+{"chunk-10a81ae2":"aad79b3d","chunk-ebcca810":"0be768b5"}[e]+".js"}function i(n){if(r[n])return r[n].exports;var t=r[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.e=function(e){var n=[],t={"chunk-10a81ae2":1,"chunk-ebcca810":1};o[e]?n.push(o[e]):0!==o[e]&&t[e]&&n.push(o[e]=new Promise((function(n,t){for(var r="css/"+({}[e]\|\|e)+"."+{"chunk-10a81ae2":"ec7605e3","chunk-ebcca810":"fc5c29f8"}[e]+".css",a=i.p+r,u=document.getEleme

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 23, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3333
Entropy (8bit):	7.888551159832994
Encrypted:	false
SSDEEP:	96:uSDZ/I09Da01l+gmkyTt6Hk8nT7GZoBUn:uSDS0tKg9E05TSZZ
MD5:	250BAEA960D1661D6109E84AD106F217
SHA1:	888228C160F53B6978683D5377F6892778046A06
SHA-256:	668531F1515ACD2C3E3503A7AF0F9E6259EF91AEF30C56F2485C0816C5648291
SHA-512:	106668BE6371676171229A7C86BCEB68C975E892D8269200AE96BBB47650D1AA125967E4E5C5A1BDE4713999AD9E8DF8C6FD25B96217F8175AEBBF72E8CC4465
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/images/select-arr.png
Preview:	.PNG........IHDR..............?.j....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1822
Entropy (8bit):	5.388604887290648
Encrypted:	false
SSDEEP:	48:terx4OnWV8ONDuFOfVfvUGPgrPOdf7KW/AjKUx6f:iXnWV8ONsROB7vuo
MD5:	9B5409486A566E472D212D03CC670DAE
SHA1:	1E5AFF706BE3AF1EF603E744575F44A95ABE1987
SHA-256:	38476EC67A44A806B47D9553FD8679324FE6A4DBF8A3C8722E993D56A92F9B3C
SHA-512:	E80A90D0F4C26E3CDC8773D884759581E61424C0BBEE164577751678DF3BB5D36520D42B53141DD454BA2D0B5D9AB44ED9FE2E070AE9D9C420AA6A57959A711C
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/images/spin-title.png
Preview:	<!DOCTYPE html>..<html lang="">..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,initial-scale=1">..<meta property="og:title" content="GARENA FREE FIRE MEMBERSHIP">..<meta property="og:description" content="Ch..ng tr.nh tri .n k.m nh.ng s. ki.n ..c bi.t d.nh cho ng..i ch.i Free Fire">..<link rel="shortcut icon" href="https://cdn.vn.garenanow.com/web/ff/fav.jpg">..<title>Garena Free Fire Membership</title>..<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">..<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css">..<link rel="stylesheet" href="./login.css">..<link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">..<link href="/css/chunk-ebcca810.fc5c29f8.css" rel=

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14980
Entropy (8bit):	7.978710365405998
Encrypted:	false
SSDEEP:	384:WJXE05E6PpwO/WzGGODHiEr1UTQo0hG22lYijvfisSr3Yr1:m35E6PGPNTQdCYw7Sr3Yr1
MD5:	29F7CADA758DF884C437BE190093B10E
SHA1:	6A187704A2E796AC9459DABD836D113006EF7A9B
SHA-256:	168D31D28B3AA31247135234A8ADB526F3B7F64CABD3120985B462CA21C58FA9
SHA-512:	8B2E767E69D9C9E65F9069EAE2F0945C5E9DE2E1FC807C16A84E0DBDE0B464BFAB0FB771DA0BA1F0933D4C593E3DA6015D386989EE25677CF4B6FF967DB75808
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/img/logout.29f7cada.png
Preview:	.PNG........IHDR..............Q.I....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14980
Entropy (8bit):	7.978710365405998
Encrypted:	false
SSDEEP:	384:WJXE05E6PpwO/WzGGODHiEr1UTQo0hG22lYijvfisSr3Yr1:m35E6PGPNTQdCYw7Sr3Yr1
MD5:	29F7CADA758DF884C437BE190093B10E
SHA1:	6A187704A2E796AC9459DABD836D113006EF7A9B
SHA-256:	168D31D28B3AA31247135234A8ADB526F3B7F64CABD3120985B462CA21C58FA9
SHA-512:	8B2E767E69D9C9E65F9069EAE2F0945C5E9DE2E1FC807C16A84E0DBDE0B464BFAB0FB771DA0BA1F0933D4C593E3DA6015D386989EE25677CF4B6FF967DB75808
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Q.I....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1080x397, components 3
Category:	downloaded
Size (bytes):	425312
Entropy (8bit):	7.983192006250677
Encrypted:	false
SSDEEP:	12288:RaFq897npxNJBl7AtLVeOIMnKtXC7dy1f1:Aqo5nxIRePMCX0dy1f1
MD5:	BEA9FDACB877E6C636823FAF682A221E
SHA1:	513A4E3F26A8A12F245E833101A6AB99B650049F
SHA-256:	E71DFBB5EB4E822877C51D6B9A90610E19045F283FF0DACDA0DC5C25CE91D372
SHA-512:	2FBBF8FD2338060C42119DDB24788527A1DFD9E7C8DF8F6658E2DF2B6396D4ACF03BACA0E4E870F26BC6A12795F2B0167BE835C8B2E321FB44E3D2B5CDAC6262
Malicious:	false
Reputation:	low
URL:	https://cdn.vn.garenanow.com/web/ff/ff_membership/item/Vip-Membership.jpg
Preview:	......Exif..II*.................Ducky.......d.....zhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f8c58c07-c103-2347-9cb7-5550ae96ce80" xmpMM:DocumentID="xmp.did:2B682846132811E9A0B0AC77A3BD3D58" xmpMM:InstanceID="xmp.iid:2B682845132811E9A0B0AC77A3BD3D58" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f8c58c07-c103-2347-9cb7-5550ae96ce80" stRef:documentID="xmp.did:f8c58c07-c103-2347-9cb7-5550ae96ce80"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1079 x 852, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	65835
Entropy (8bit):	7.9653005132803205
Encrypted:	false
SSDEEP:	1536:G7nXM6f5e0hw6Kw5j3reCHdbeC5unMkiV:inc6f5e0howtHdbVEnsV
MD5:	EDE8D79517267263B24F4629C5A20FCB
SHA1:	26776AAF21B2902E9088281E000A31BE4A969C72
SHA-256:	3AE09EF678CACB0FC6BE8D17DC403C2B8049FFDB302E591189331AE71307B447
SHA-512:	0C0A968FDD674B005AAC92A46E9F2E626ECA163960CE389284EB919189100EE7E95573482E952B3C58AA984E100FF3067DB11C3E430AC6298DBC02D95AD0386A
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/images/dob-bg.png
Preview:	.PNG........IHDR...7...T.....(.Q.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 403 x 57, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39362
Entropy (8bit):	7.978409345137919
Encrypted:	false
SSDEEP:	768:535CDfSwa1flmpSO6o4BD2VoJ1XwqstT5pyUJyhw6/SmZF8:CLS7Kz+vAqGT5Vsw6amZF8
MD5:	9975FF17DA66B0C03464A24C1EEF1CC3
SHA1:	4BE0849F8B0ACD81859AD16A6F78728E5ABC3631
SHA-256:	54FFF3EA08A8E931D301109E72A14B34D633FA9E1DE77EFD49AB5FC42A2EAEBC
SHA-512:	D8ACE77C8C5DD627820B929BA67A7381E9C68869030E9F20BD43E72E0475EC7974E9F176BF92A9F451F9F476F0390B9D9A5CDC568A1D01D306CBD59195A3220F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......9........]....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 35, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7521
Entropy (8bit):	7.947835298204277
Encrypted:	false
SSDEEP:	192:/SDS0tKg9E05TcyY/gxtl0eHj/UwCyFIKW:qJXE051Y70/HCO9W
MD5:	6BCD8E8F7A6D40EB79FEC974ED9BE56E
SHA1:	1D519EB77848275CE0C96349D7B4FDA8A3D1F709
SHA-256:	28E0BD6AB428B72BF9013B4423CE4FCC42BF4E894F37E1D5BB3F93EC729DBD5C
SHA-512:	ADA25D868D21F40F25BB96347990EB372270FF5A7190A2B758C627A58C7627A6CA881B08831BB01AAD65784C896DBF3EE96C287E89C127AAF9CAF412955032BB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...f...#......(......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.329117645560315
Encrypted:	false
SSDEEP:	3:xPXwA9inuS8/ZoS8/ZoS8/ZoSb9inuSISHmn:xPb99S8/ZoS8/ZoS8/ZoSb99Sfmn
MD5:	7D12BB08241347CC2798DD1D9C32336E
SHA1:	A5A5BA2D869CF54FAAC81822E24E8A1D2217594A
SHA-256:	9FAEFB82E2FDD08D2CF12D72AE0871E6E49B04D1A117D666987212CB0A70C2FB
SHA-512:	6BD2B17FBF2E4D5FD984723F8D4F3ECF0065089EC5290492A724ECC110201743AEB3E611061E09623A79EDA39308AFB38F2753DD5CECD3A94944678C84BA3F51
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSMwkDrs5hsGXdZxIFDZSQkvoSBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2UkJL6EgUNBu27_w==?alt=proto
Preview:	CjYKBw2UkJL6GgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2UkJL6GgAKBw0G7bv/GgA=

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65359), with CRLF line terminators
Category:	downloaded
Size (bytes):	71739
Entropy (8bit):	5.119202568663647
Encrypted:	false
SSDEEP:	1536:g6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:9kZgwh1nAukdDO3Xyr5Ir5eh0dTo
MD5:	C518EB2BCCB1934516A6F3EABDACC263
SHA1:	46F1F2231FDB1366310EFFCE7B3E3526CA06310E
SHA-256:	296D948524904D247A03CB0BB5712751C5AD4C6102D745124BBA32437B308642
SHA-512:	A8001CBB1D2C0CC40279AC1FAF049CABF52787F2B812A4B80ED2648C6739EA112E5F45B3C1E162DCF48A7C795D001A5DC211DE624E13A58BA32C75C97DC08F40
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/css/chunk-vendors.737c64e5.css
Preview:	/!.. animate.css - https://animate.style/.. * Version - 4.1.1.. * Licensed under the MIT license - http://opensource.org/licenses/MIT.. .. Copyright (c) 2020 Animate.css.. /:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.animate__animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-duration:var(--animate-duration);animation-duration:var(--animate-duration);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__animated.animate__repeat-2{-webkit-animation-iteration-count:2;animation-iteration-count:2;-webkit-animation-iteration-count:calc(var(--animate-repeat)2);animation-iteration-count:calc(var(--animate-r

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 46, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	9706
Entropy (8bit):	7.9654184902851
Encrypted:	false
SSDEEP:	192:SSDS0tKg9E05Tx+F5E1fJKKFK6NQnWOB0sIQwbtwaujDhSY:tJXE05l+FG1Z6Ista4j
MD5:	5810D0F48CD4228F188DE53B0B26A401
SHA1:	B55AAE3F78329F78CEE4EB01D578EE7A171E6FE5
SHA-256:	466183461B2BCAA6068E573E538E4159243625A3FD6E59EC1B3B5E3DBBD3E542
SHA-512:	6945910E468C3055D3E52F46666A7434E732B56BA7865FF429541E556A46EC3CE9C2D90DA881991A12290DBC2270B38EB11CB226C99390130DD74D468DE1A91A
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/img/btn-bod-deactive.5810d0f4.png
Preview:	.PNG........IHDR.............[3G.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1080x397, components 3
Category:	dropped
Size (bytes):	425312
Entropy (8bit):	7.983192006250677
Encrypted:	false
SSDEEP:	12288:RaFq897npxNJBl7AtLVeOIMnKtXC7dy1f1:Aqo5nxIRePMCX0dy1f1
MD5:	BEA9FDACB877E6C636823FAF682A221E
SHA1:	513A4E3F26A8A12F245E833101A6AB99B650049F
SHA-256:	E71DFBB5EB4E822877C51D6B9A90610E19045F283FF0DACDA0DC5C25CE91D372
SHA-512:	2FBBF8FD2338060C42119DDB24788527A1DFD9E7C8DF8F6658E2DF2B6396D4ACF03BACA0E4E870F26BC6A12795F2B0167BE835C8B2E321FB44E3D2B5CDAC6262
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....zhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f8c58c07-c103-2347-9cb7-5550ae96ce80" xmpMM:DocumentID="xmp.did:2B682846132811E9A0B0AC77A3BD3D58" xmpMM:InstanceID="xmp.iid:2B682845132811E9A0B0AC77A3BD3D58" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f8c58c07-c103-2347-9cb7-5550ae96ce80" stRef:documentID="xmp.did:f8c58c07-c103-2347-9cb7-5550ae96ce80"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2478), with CRLF line terminators
Category:	dropped
Size (bytes):	150569
Entropy (8bit):	4.395137813567936
Encrypted:	false
SSDEEP:	3072:9t9z4oNiLLNOBAOf7l1oGORxXfgg7d4ir4dwJk3cV7:9MoNiLLNOBAOf7lOGORxXfggZYwu3cV7
MD5:	2B2F6196D5DD7855B470947C3610BFF6
SHA1:	C55707C7501BC09A25135B317A0FBBC29B7E3B62
SHA-256:	C52DD3DCF2F5E1B907EA59D27D3E583CE1E6BD8BAA5CBB7A949674CE30E81683
SHA-512:	44DA47A7E8FA1BAF695E72F671D4BD4276C5E070D64D875FDD2B8CD423DED5D05BAC1D98B673E695C8E4D805A7795EB3647743AEA8C4012B414CC5A3A00F37B6
Malicious:	false
Reputation:	low
Preview:	(window["webpackJsonp"] = window["webpackJsonp"] \|\| []).push([.. ["chunk-10a81ae2"], {.. 1148: function (t, e, n) {.. "use strict";.. var a = n("a691"),.. o = n("1d80");.. t.exports = function (t) {.. var e = String(o(this)),.. n = "",.. s = a(t);.. if (s < 0 \|\| s == 1 / 0) throw RangeError("Wrong number of repetitions");.. for (; s > 0;.. (s >>>= 1) && (e += e)) 1 & s && (n += e);.. return n.. }.. },.. 1195: function (t, e, n) {.. t.exports = n.p + "img/avatar.cfbf6d20.png".. },.. "1dde": function (t, e, n) {.. var a = n("d039"),.. o = n("b622"),.. s = n("2d00"),.. i = o("species");.. t.exports = function (t) {.. return s >= 51 \|\| !a((function () {.. var e = [],..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1109, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	597541
Entropy (8bit):	7.998508544610571
Encrypted:	true
SSDEEP:	12288:Q113RsICe+JUNw9ZXs088K3H7/ez5pi5On/fUTHZlJL:QLGICeBwjc08R3UvUjZv
MD5:	B83BAE0D44A9310BBC30B8B3F59F64FD
SHA1:	B6D5446495BAB1D7EC2ECF9DC1177CF89886F36C
SHA-256:	78E2CA75FCAFA1DD58EEFB124E508648A756F1D3C7A83E42E5D46BF8DF06C26C
SHA-512:	4CD15ACD69AC3AED633404F9E25CC3F523583324DF771763F40D98D1F9EB73064C607DC0320541A13A588C9B5C8CA2217ECF753DBF9528C647128FD44D441283
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/images/spin-bg.png
Preview:	.PNG........IHDR...8...U........\....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1822
Entropy (8bit):	5.388604887290648
Encrypted:	false
SSDEEP:	48:terx4OnWV8ONDuFOfVfvUGPgrPOdf7KW/AjKUx6f:iXnWV8ONsROB7vuo
MD5:	9B5409486A566E472D212D03CC670DAE
SHA1:	1E5AFF706BE3AF1EF603E744575F44A95ABE1987
SHA-256:	38476EC67A44A806B47D9553FD8679324FE6A4DBF8A3C8722E993D56A92F9B3C
SHA-512:	E80A90D0F4C26E3CDC8773D884759581E61424C0BBEE164577751678DF3BB5D36520D42B53141DD454BA2D0B5D9AB44ED9FE2E070AE9D9C420AA6A57959A711C
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/css/greeting.jsp/images/fb_ico.png
Preview:	<!DOCTYPE html>..<html lang="">..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,initial-scale=1">..<meta property="og:title" content="GARENA FREE FIRE MEMBERSHIP">..<meta property="og:description" content="Ch..ng tr.nh tri .n k.m nh.ng s. ki.n ..c bi.t d.nh cho ng..i ch.i Free Fire">..<link rel="shortcut icon" href="https://cdn.vn.garenanow.com/web/ff/fav.jpg">..<title>Garena Free Fire Membership</title>..<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">..<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css">..<link rel="stylesheet" href="./login.css">..<link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">..<link href="/css/chunk-ebcca810.fc5c29f8.css" rel=

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 394 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35229
Entropy (8bit):	7.98744064893389
Encrypted:	false
SSDEEP:	768:D35s128VvfpjxXrmYowQNOfqSIXOmmtyPzsPTeDxxCr:W2839xbbqp/+dwQKYr
MD5:	B8C163711DEF158BBFFAE4C9F9AE147E
SHA1:	AC4391DBE38AA12D485A64D62678EC60FD8F4010
SHA-256:	A229865CAD68073C0190603CF6B158FB90822271C33A9AB4634BD0020A46FD7C
SHA-512:	77006F264367D10B4FBB712065865C085F8A4BD792469FD1D97C7079571454708F76B95480DE1CC300FF445B7706DEF6B05446240DEF5A8E3C3B3D2796914917
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/img/dob-title.b8c16371.png
Preview:	.PNG........IHDR.......6............pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2478), with CRLF line terminators
Category:	downloaded
Size (bytes):	150569
Entropy (8bit):	4.395137813567936
Encrypted:	false
SSDEEP:	3072:9t9z4oNiLLNOBAOf7l1oGORxXfgg7d4ir4dwJk3cV7:9MoNiLLNOBAOf7lOGORxXfggZYwu3cV7
MD5:	2B2F6196D5DD7855B470947C3610BFF6
SHA1:	C55707C7501BC09A25135B317A0FBBC29B7E3B62
SHA-256:	C52DD3DCF2F5E1B907EA59D27D3E583CE1E6BD8BAA5CBB7A949674CE30E81683
SHA-512:	44DA47A7E8FA1BAF695E72F671D4BD4276C5E070D64D875FDD2B8CD423DED5D05BAC1D98B673E695C8E4D805A7795EB3647743AEA8C4012B414CC5A3A00F37B6
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/js/chunk-10a81ae2.aad79b3d.js
Preview:	(window["webpackJsonp"] = window["webpackJsonp"] \|\| []).push([.. ["chunk-10a81ae2"], {.. 1148: function (t, e, n) {.. "use strict";.. var a = n("a691"),.. o = n("1d80");.. t.exports = function (t) {.. var e = String(o(this)),.. n = "",.. s = a(t);.. if (s < 0 \|\| s == 1 / 0) throw RangeError("Wrong number of repetitions");.. for (; s > 0;.. (s >>>= 1) && (e += e)) 1 & s && (n += e);.. return n.. }.. },.. 1195: function (t, e, n) {.. t.exports = n.p + "img/avatar.cfbf6d20.png".. },.. "1dde": function (t, e, n) {.. var a = n("d039"),.. o = n("b622"),.. s = n("2d00"),.. i = o("species");.. t.exports = function (t) {.. return s >= 51 \|\| !a((function () {.. var e = [],..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4404), with CRLF line terminators
Category:	downloaded
Size (bytes):	4446
Entropy (8bit):	5.319332646899631
Encrypted:	false
SSDEEP:	96:DsvToxdSu0JVTNDA6xkzzbJkX67NoS/Tv:GoxdSu0JVTNDNk2677v
MD5:	E0CC9473AE0330DAFF8F81DD804CE105
SHA1:	EB8CADEE809ED5FD9AFDDD4FC0D0E004E174B764
SHA-256:	FA727018E0B7888C4B0DF6681A5BA88298C435B8687E77CD34F182FDA668F927
SHA-512:	51B57E978136A37EB76BA96EA9CA4E2A4481899D94354A371D67B7E50C28F419AB05B18DAFD9A4187C43DF520E4900121B9993A5F1A327A37C63CFCC58881225
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/js/app.2a0a3444.js
Preview:	(function(e){function n(n){for(var r,o,c=n[0],i=n[1],l=n[2],s=0,f=[];s<c.length;s++)o=c[s],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&f.push(a[o][0]),a[o]=0;for(r in i)Object.prototype.hasOwnProperty.call(i,r)&&(e[r]=i[r]);d&&d(n);while(f.length)f.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,n=0;n<u.length;n++){for(var t=u[n],r=!0,o=1;o<t.length;o++){var c=t[o];0!==a[c]&&(r=!1)}r&&(u.splice(n--,1),e=i(i.s=t[0]))}return e}var r={},o={app:0},a={app:0},u=[];function c(e){return i.p+"js/"+({}[e]\|\|e)+"."+{"chunk-10a81ae2":"aad79b3d","chunk-ebcca810":"0be768b5"}[e]+".js"}function i(n){if(r[n])return r[n].exports;var t=r[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.e=function(e){var n=[],t={"chunk-10a81ae2":1,"chunk-ebcca810":1};o[e]?n.push(o[e]):0!==o[e]&&t[e]&&n.push(o[e]=new Promise((function(n,t){for(var r="css/"+({}[e]\|\|e)+"."+{"chunk-10a81ae2":"ec7605e3","chunk-ebcca810":"fc5c29f8"}[e]+".css",a=i.p+r,u=document.getEleme

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13924), with no line terminators
Category:	downloaded
Size (bytes):	13924
Entropy (8bit):	5.12089865201194
Encrypted:	false
SSDEEP:	192:ESJ6DcFoX6o+ksyLPJjg0xY7Z394CavGgj8UQc0:VJKTWZyLPJkr7ZMvGXjz
MD5:	D07226345CD00A4B9AD6E83D96E583A5
SHA1:	4F4D7E065AEE9417C7D7C428E3606FD32ADF5977
SHA-256:	A02FD0F27A964A5A756E48B71EDF6044259A7B0E67EBF1CD935D074F86845F8C
SHA-512:	0E3AAE36A4565492E1280DA9FFF7CE78840A6687A95A5563A8E09AA4BB5EB419EE9E20CF638DC27837609D87C5E92A83455CE7C65F3D62B264E358F0566ED50F
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css
Preview:	body.compensate-for-scrollbar{overflow:hidden;-ms-overflow-style:none}.fancybox-active{height:auto}.fancybox-is-hidden{left:-9999px;margin:0;position:absolute!important;top:-9999px;visibility:hidden}.fancybox-container{-webkit-backface-visibility:hidden;backface-visibility:hidden;height:100%;left:0;outline:none;position:fixed;-webkit-tap-highlight-color:transparent;top:0;-ms-touch-action:manipulation;touch-action:manipulation;-webkit-transform:translateZ(0);transform:translateZ(0);width:100%;z-index:99992}.fancybox-container *{box-sizing:border-box}.fancybox-bg,.fancybox-inner,.fancybox-outer,.fancybox-stage{bottom:0;left:0;position:absolute;right:0;top:0}.fancybox-outer{-webkit-overflow-scrolling:touch;overflow-y:auto}.fancybox-bg{background:#1e1e1e;opacity:0;transition-duration:inherit;transition-property:opacity;transition-timing-function:cubic-bezier(.47,0,.74,.71)}.fancybox-is-open .fancybox-bg{opacity:.87;transition-timing-function:cubic-bezier(.22,.61,.36,1)}.fancybox-caption,.f

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	4.633700354297447
Encrypted:	false
SSDEEP:	6:IEGOvLUoYtW5XiNIOvLUo4UE35dOlZ9R6O+:IEGOQfuXgzQu4kbRw
MD5:	A8187D8E21A3BB4D273F3485B6ABA510
SHA1:	88210D3DB5D964B2D8ED2C37F02BAD6F4A810699
SHA-256:	DB3B82CAC6603397423A91E5946FB452F8DEAB75F55EB23656917F0A1A2DFE83
SHA-512:	E9021C0BDD52660F69E95E4E7C6A4A111CC782235FE89726513EAB0242DB14E011400CAF3DA125AB3A692957F9D239DA1E6CD8FFB485BEA6225487E5042C2A05
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/css/chunk-ebcca810.fc5c29f8.css
Preview:	body{background:transparent!important}input[type=password],input[type=text]{background:transparent!important;font-size:15px!important;height:inherit;border-radius:3px!important;color:#000!important;box-sizing:border-box!important}

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 242 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19334
Entropy (8bit):	7.974708895027629
Encrypted:	false
SSDEEP:	384:SJXE05O3v1a9iyZVhr7UxhNVUjIGD1X0lkTK+zYh+K3ujnNrLxO7:C35O3v1aMuuhXteX0qrKcnNrL87
MD5:	C6C98836A1F61EED9E1704A80FFF3452
SHA1:	B1FB786D62D1D1E85031A82AED81819CD2EC6105
SHA-256:	93EDAB30FDE28FBCB7CAE59FBADC3BC77B9F47C1625A17ECC2F499BBF1F5AFC9
SHA-512:	F3CCEB5E743AC1ECD0C3CAE1121244E09D65735F74B16868A703E9FB336B163E8B823DFABF383F4A5CA92280DFEBD966E9856AF6C5719B3D91FFB2C2B198D028
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/img/btn_history.c6c98836.png
Preview:	.PNG........IHDR...............D.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	1822
Entropy (8bit):	5.388604887290648
Encrypted:	false
SSDEEP:	48:terx4OnWV8ONDuFOfVfvUGPgrPOdf7KW/AjKUx6f:iXnWV8ONsROB7vuo
MD5:	9B5409486A566E472D212D03CC670DAE
SHA1:	1E5AFF706BE3AF1EF603E744575F44A95ABE1987
SHA-256:	38476EC67A44A806B47D9553FD8679324FE6A4DBF8A3C8722E993D56A92F9B3C
SHA-512:	E80A90D0F4C26E3CDC8773D884759581E61424C0BBEE164577751678DF3BB5D36520D42B53141DD454BA2D0B5D9AB44ED9FE2E070AE9D9C420AA6A57959A711C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html lang="">..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,initial-scale=1">..<meta property="og:title" content="GARENA FREE FIRE MEMBERSHIP">..<meta property="og:description" content="Ch..ng tr.nh tri .n k.m nh.ng s. ki.n ..c bi.t d.nh cho ng..i ch.i Free Fire">..<link rel="shortcut icon" href="https://cdn.vn.garenanow.com/web/ff/fav.jpg">..<title>Garena Free Fire Membership</title>..<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">..<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css">..<link rel="stylesheet" href="./login.css">..<link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">..<link href="/css/chunk-ebcca810.fc5c29f8.css" rel=

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1822
Entropy (8bit):	5.388604887290648
Encrypted:	false
SSDEEP:	48:terx4OnWV8ONDuFOfVfvUGPgrPOdf7KW/AjKUx6f:iXnWV8ONsROB7vuo
MD5:	9B5409486A566E472D212D03CC670DAE
SHA1:	1E5AFF706BE3AF1EF603E744575F44A95ABE1987
SHA-256:	38476EC67A44A806B47D9553FD8679324FE6A4DBF8A3C8722E993D56A92F9B3C
SHA-512:	E80A90D0F4C26E3CDC8773D884759581E61424C0BBEE164577751678DF3BB5D36520D42B53141DD454BA2D0B5D9AB44ED9FE2E070AE9D9C420AA6A57959A711C
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/css/greeting.jsp/index.html
Preview:	<!DOCTYPE html>..<html lang="">..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,initial-scale=1">..<meta property="og:title" content="GARENA FREE FIRE MEMBERSHIP">..<meta property="og:description" content="Ch..ng tr.nh tri .n k.m nh.ng s. ki.n ..c bi.t d.nh cho ng..i ch.i Free Fire">..<link rel="shortcut icon" href="https://cdn.vn.garenanow.com/web/ff/fav.jpg">..<title>Garena Free Fire Membership</title>..<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">..<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css">..<link rel="stylesheet" href="./login.css">..<link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">..<link href="/css/chunk-ebcca810.fc5c29f8.css" rel=

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	10025
Entropy (8bit):	7.806788989416858
Encrypted:	false
SSDEEP:	192:Bx8r1df6F5lDLUw3Y8MMxcSf1e9xdKwHlPqNh5g/RmorgjNzLc6bmtyp4HIq6:HIrf6F5lDAwEMx50rDGeMNzw6yx6
MD5:	78E23E9A864C3F5C9CA4049E7CCEE8CB
SHA1:	0A635DCF9EADE4C2D41F638C7C3A5BCC44DD9F14
SHA-256:	D4B543FBD9EC68332B9D3AF5F2253E02E7F262C41F87452FEA20E4CBFC7E4A68
SHA-512:	F94B20C7760FC872E2E8E6C285C792BAE67CA75DCFBD9BB525062A2F19B35FBAD49A022ABB95D00E8CB269A40828E5736D3835ACBB761C96A801CA30B81A7E5C
Malicious:	false
Reputation:	low
URL:	https://cdn.vn.garenanow.com/web/ff/fav.jpg
Preview:	......JFIF.............`Exif..II.......1.......&...i...............Google............0220................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................................................................................e...{....T...L.^.....;.5RL..Y)v9..'..8{.....;Ed.d....,.....Zz=.Y3...U.......S&e..

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 242 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19334
Entropy (8bit):	7.974708895027629
Encrypted:	false
SSDEEP:	384:SJXE05O3v1a9iyZVhr7UxhNVUjIGD1X0lkTK+zYh+K3ujnNrLxO7:C35O3v1aMuuhXteX0qrKcnNrL87
MD5:	C6C98836A1F61EED9E1704A80FFF3452
SHA1:	B1FB786D62D1D1E85031A82AED81819CD2EC6105
SHA-256:	93EDAB30FDE28FBCB7CAE59FBADC3BC77B9F47C1625A17ECC2F499BBF1F5AFC9
SHA-512:	F3CCEB5E743AC1ECD0C3CAE1121244E09D65735F74B16868A703E9FB336B163E8B823DFABF383F4A5CA92280DFEBD966E9856AF6C5719B3D91FFB2C2B198D028
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............D.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 46, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	9706
Entropy (8bit):	7.9654184902851
Encrypted:	false
SSDEEP:	192:SSDS0tKg9E05Tx+F5E1fJKKFK6NQnWOB0sIQwbtwaujDhSY:tJXE05l+FG1Z6Ista4j
MD5:	5810D0F48CD4228F188DE53B0B26A401
SHA1:	B55AAE3F78329F78CEE4EB01D578EE7A171E6FE5
SHA-256:	466183461B2BCAA6068E573E538E4159243625A3FD6E59EC1B3B5E3DBBD3E542
SHA-512:	6945910E468C3055D3E52F46666A7434E732B56BA7865FF429541E556A46EC3CE9C2D90DA881991A12290DBC2270B38EB11CB226C99390130DD74D468DE1A91A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............[3G.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	4.59611120622382
Encrypted:	false
SSDEEP:	3:cOCJLLJELWQnv6CL/GYAAPLQAEhFN5U0bty2huuMI+:czLtiWQnv6I/+APLVEh3xy+MI+
MD5:	1661CE2BE23160AA6611D3BB8312D94A
SHA1:	7AD7CBB5D82E2EA2206DE59B41513E65B927AC01
SHA-256:	2ACE57A05E19C4307CCF2EAB6EFA1B038D24B8E725D2C22B3C896DDEA6B0257C
SHA-512:	36871BE251AE48A1E08CAA223CB757A61149E88DE50EC1C789BF61C70625481C3EA28C75E03D11A6E61F46F5E9867DD67C5484FB5CF1FC6E37F619FAEBE627DA
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/css/chunk-10a81ae2.ec7605e3.css
Preview:	.whel-body{transition:transform 4s ease-in-out}.input-info{border:none!important;height:1px!important;padding:15px 10px!important}

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60192), with CRLF line terminators
Category:	dropped
Size (bytes):	216700
Entropy (8bit):	5.275131752267566
Encrypted:	false
SSDEEP:	3072:brN8mwccQcixKmH9fRL+lYlhHT+T2RrlxtVGqy4hXDc:bh8BacixKmHt1+UhHT+J4hXDc
MD5:	89DEA640423A1344887137F04512A78C
SHA1:	8DA9202DBF075F31B0D761F6BE21D5B941D8AB0E
SHA-256:	81E6A37CDE5650C889F049B7641528F33C6F0315162880258E5ABC79D4FBC37A
SHA-512:	4A6C1FA58227C6F49171B032703FC9CD9F51F4F3694BCA73DA503E291D575461E311C6DC7F56F94F79931C9A22DBC8FAEA2E8B8ED47720DC5122FD52E537D2A9
Malicious:	false
Reputation:	low
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00ee":function(e,t,n){var r=n("b622"),o=r("toStringTag"),i={};i[o]="z",e.exports="[object z]"===String(i)},"0366":function(e,t,n){var r=n("1c0b");e.exports=function(e,t,n){if(r(e),void 0===t)return e;switch(n){case 0:return function(){return e.call(t)};case 1:return function(n){return e.call(t,n)};case 2:return function(n,r){return e.call(t,n,r)};case 3:return function(n,r,o){return e.call(t,n,r,o)}}return function(){return e.apply(t,arguments)}}},"06cf":function(e,t,n){var r=n("83ab"),o=n("d1e7"),i=n("5c6c"),a=n("fc6a"),s=n("c04e"),c=n("5135"),u=n("0cfb"),l=Object.getOwnPropertyDescriptor;t.f=r?l:function(e,t){if(e=a(e),t=s(t,!0),u)try{return l(e,t)}catch(n){}if(c(e,t))return i(!o.f.call(e,t),e[t])}},"0cfb":function(e,t,n){var r=n("83ab"),o=n("d039"),i=n("cc12");e.exports=!r&&!o((function(){return 7!=Object.defineProperty(i("div"),"a",{get:function(){return 7}}).a}))},1157:function(e,t,n){var r,o;../!.. j

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (36197), with CRLF line terminators
Category:	downloaded
Size (bytes):	36371
Entropy (8bit):	5.336831587142736
Encrypted:	false
SSDEEP:	768:M7iq9mfFgnrzAqVrW93NJe9eCTzNcvFb7x532yf8HWdVV:MduFgn3AqVrW93m3TzNOT2uN
MD5:	1D1EE51171930E903D1FD6E7A50854C2
SHA1:	53CF1D8139A30C7CA58ABF0F102B7708AF37E177
SHA-256:	ECD392A577D8E37F2C570BB5891D26A7FB5D9A6B73BCDECAF51AC221D27B6ABB
SHA-512:	17336FCD9E03E459DEFE0B7ABA76AEE78F9A1F115080620054BC1264B604633D3119A2C0A3C680BAA5190BE4B146D37E4E65C271B0F3820A55F63AE2D837C908
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/js/chunk-ebcca810.0be768b5.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-ebcca810"],{"0a06":function(t,e,r){"use strict";var n=r("c532"),o=r("30b5"),i=r("f6b4"),a=r("5270"),s=r("4a7b");function c(t){this.defaults=t,this.interceptors={request:new i,response:new i}}c.prototype.request=function(t){"string"===typeof t?(t=arguments[1]\|\|{},t.url=arguments[0]):t=t\|\|{},t=s(this.defaults,t),t.method?t.method=t.method.toLowerCase():this.defaults.method?t.method=this.defaults.method.toLowerCase():t.method="get";var e=[a,void 0],r=Promise.resolve(t);this.interceptors.request.forEach((function(t){e.unshift(t.fulfilled,t.rejected)})),this.interceptors.response.forEach((function(t){e.push(t.fulfilled,t.rejected)}));while(e.length)r=r.then(e.shift(),e.shift());return r},c.prototype.getUri=function(t){return t=s(this.defaults,t),o(t.url,t.params,t.paramsSerializer).replace(/^\?/,"")},n.forEach(["delete","get","head","options"],(function(t){c.prototype[t]=function(e,r){return this.request(s(r\|\|{},{method:t,url

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1822
Entropy (8bit):	5.388604887290648
Encrypted:	false
SSDEEP:	48:terx4OnWV8ONDuFOfVfvUGPgrPOdf7KW/AjKUx6f:iXnWV8ONsROB7vuo
MD5:	9B5409486A566E472D212D03CC670DAE
SHA1:	1E5AFF706BE3AF1EF603E744575F44A95ABE1987
SHA-256:	38476EC67A44A806B47D9553FD8679324FE6A4DBF8A3C8722E993D56A92F9B3C
SHA-512:	E80A90D0F4C26E3CDC8773D884759581E61424C0BBEE164577751678DF3BB5D36520D42B53141DD454BA2D0B5D9AB44ED9FE2E070AE9D9C420AA6A57959A711C
Malicious:	false
Reputation:	low
URL:	https://membership.garenaa.id.vn/user/login/login.css
Preview:	<!DOCTYPE html>..<html lang="">..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,initial-scale=1">..<meta property="og:title" content="GARENA FREE FIRE MEMBERSHIP">..<meta property="og:description" content="Ch..ng tr.nh tri .n k.m nh.ng s. ki.n ..c bi.t d.nh cho ng..i ch.i Free Fire">..<link rel="shortcut icon" href="https://cdn.vn.garenanow.com/web/ff/fav.jpg">..<title>Garena Free Fire Membership</title>..<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">..<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css">..<link rel="stylesheet" href="./login.css">..<link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">..<link href="/css/chunk-ebcca810.fc5c29f8.css" rel=

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 23, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3333
Entropy (8bit):	7.888551159832994
Encrypted:	false
SSDEEP:	96:uSDZ/I09Da01l+gmkyTt6Hk8nT7GZoBUn:uSDS0tKg9E05TSZZ
MD5:	250BAEA960D1661D6109E84AD106F217
SHA1:	888228C160F53B6978683D5377F6892778046A06
SHA-256:	668531F1515ACD2C3E3503A7AF0F9E6259EF91AEF30C56F2485C0816C5648291
SHA-512:	106668BE6371676171229A7C86BCEB68C975E892D8269200AE96BBB47650D1AA125967E4E5C5A1BDE4713999AD9E8DF8C6FD25B96217F8175AEBBF72E8CC4465
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............?.j....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 394 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35229
Entropy (8bit):	7.98744064893389
Encrypted:	false
SSDEEP:	768:D35s128VvfpjxXrmYowQNOfqSIXOmmtyPzsPTeDxxCr:W2839xbbqp/+dwQKYr
MD5:	B8C163711DEF158BBFFAE4C9F9AE147E
SHA1:	AC4391DBE38AA12D485A64D62678EC60FD8F4010
SHA-256:	A229865CAD68073C0190603CF6B158FB90822271C33A9AB4634BD0020A46FD7C
SHA-512:	77006F264367D10B4FBB712065865C085F8A4BD792469FD1D97C7079571454708F76B95480DE1CC300FF445B7706DEF6B05446240DEF5A8E3C3B3D2796914917
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6............pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 16, 2024 00:19:01.355901957 CEST	49671	443	192.168.2.10	204.79.197.203
Sep 16, 2024 00:19:02.434087038 CEST	49674	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:02.434185028 CEST	49675	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:06.168452024 CEST	49671	443	192.168.2.10	204.79.197.203
Sep 16, 2024 00:19:06.245574951 CEST	49677	443	192.168.2.10	20.42.65.85
Sep 16, 2024 00:19:06.559048891 CEST	49677	443	192.168.2.10	20.42.65.85
Sep 16, 2024 00:19:07.168421030 CEST	49677	443	192.168.2.10	20.42.65.85
Sep 16, 2024 00:19:08.512151957 CEST	49677	443	192.168.2.10	20.42.65.85
Sep 16, 2024 00:19:10.917515039 CEST	49677	443	192.168.2.10	20.42.65.85
Sep 16, 2024 00:19:11.527178049 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:11.527221918 CEST	443	49712	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:11.527295113 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:11.527628899 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:11.527642965 CEST	443	49712	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:11.527980089 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:11.528021097 CEST	443	49713	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:11.528073072 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:11.528799057 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:11.528815031 CEST	443	49713	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:11.998059034 CEST	443	49713	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.002809048 CEST	443	49712	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.033936024 CEST	49674	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:12.036427021 CEST	49675	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:12.037473917 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.043843985 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.140319109 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.140336037 CEST	443	49712	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.140465021 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.140480042 CEST	443	49713	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.141669989 CEST	443	49713	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.141738892 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.142070055 CEST	443	49712	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.142190933 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.158163071 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.158242941 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.158394098 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.158775091 CEST	443	49713	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.158885002 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.158921003 CEST	49713	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.158925056 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.159069061 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.159176111 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.159229994 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.159315109 CEST	443	49712	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.159359932 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.159359932 CEST	49712	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.159643888 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.159676075 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.159806013 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.159954071 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.159967899 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.160167933 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.160181046 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.642349005 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.642837048 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.642848969 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.643906116 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.643959045 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.644768000 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.645545959 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.645556927 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.645863056 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.645926952 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.646466970 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.646473885 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.647022009 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.647124052 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.650120974 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.650260925 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.688980103 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.698738098 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:12.698759079 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:12.747773886 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.328499079 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.328556061 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.328607082 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.328622103 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.328682899 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.328768015 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.330957890 CEST	49715	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.330981970 CEST	443	49715	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.460928917 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:13.460971117 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:13.461112976 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:13.461488008 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:13.461500883 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:13.642637968 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.643248081 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.643290043 CEST	443	49718	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.643382072 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.644620895 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.644645929 CEST	443	49718	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.645440102 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.645503044 CEST	443	49719	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.645684958 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.646512985 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.646528006 CEST	443	49719	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.648066044 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.648094893 CEST	443	49720	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.648294926 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.649137020 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.649177074 CEST	443	49721	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.649228096 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.649951935 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.649967909 CEST	443	49720	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.650497913 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.650511026 CEST	443	49721	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.651076078 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:13.651094913 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:13.651175976 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:13.651968002 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:13.651982069 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:13.652384996 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:13.652415037 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:13.652478933 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:13.652744055 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:13.652761936 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:13.683406115 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.756875992 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.757086992 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.757149935 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.757168055 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.757365942 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:13.757445097 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.761097908 CEST	49716	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:13.761118889 CEST	443	49716	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.103020906 CEST	443	49720	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.104383945 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.104406118 CEST	443	49720	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.105449915 CEST	443	49720	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.105530024 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.107676029 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:14.110793114 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.110824108 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.110877037 CEST	443	49720	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.111038923 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.111048937 CEST	443	49720	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.111062050 CEST	443	49720	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.111062050 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.111100912 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.111119032 CEST	49720	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.112385035 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.112422943 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.112497091 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.112788916 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:14.112804890 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:14.113305092 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.113318920 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.114311934 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.114546061 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:14.114615917 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:14.115948915 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.115961075 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.117466927 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.117532969 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.117783070 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:14.117899895 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:14.119482040 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.119616985 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.119906902 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.119915009 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.123574972 CEST	443	49718	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.125406027 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.125422955 CEST	443	49718	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.126513004 CEST	443	49718	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.126574039 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.127074957 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.127074957 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.127136946 CEST	443	49718	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.127154112 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.127203941 CEST	49718	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.127635002 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.127674103 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.127854109 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.128323078 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.128334999 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.128510952 CEST	443	49721	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.129074097 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.129096985 CEST	443	49721	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.130522013 CEST	443	49721	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.130580902 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.131436110 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.131513119 CEST	443	49721	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.131535053 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.131676912 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.131686926 CEST	443	49721	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.131702900 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.131735086 CEST	49721	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.132441998 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.132461071 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.132539988 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.132942915 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.132955074 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.136547089 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.137032032 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.137046099 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.138106108 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.138181925 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.139319897 CEST	443	49719	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.139921904 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.139954090 CEST	443	49719	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.141112089 CEST	443	49719	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.141191006 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.141984940 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.142057896 CEST	443	49719	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.142060041 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.142142057 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.142142057 CEST	49719	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.142784119 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.142822981 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.142972946 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.143282890 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.143408060 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.143662930 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.143672943 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.144237041 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.144256115 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.168176889 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.168181896 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:14.168191910 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:14.183777094 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.219280005 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:14.253133059 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.253212929 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.253257990 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.253294945 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.253325939 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.253334999 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.253357887 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.253372908 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.253406048 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.253417015 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.253983021 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.254034996 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.254048109 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.254118919 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.254440069 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.254447937 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.254985094 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.255038023 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.290946007 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291009903 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291057110 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291104078 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291120052 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.291135073 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291182995 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.291191101 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291354895 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.291362047 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291529894 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291630030 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291646957 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.291656971 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.291718960 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.297331095 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.297514915 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.297573090 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.297585011 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.338800907 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.381225109 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.381310940 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.381352901 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.381390095 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.381480932 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.381495953 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.381510019 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.382116079 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.382213116 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.382225037 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.382232904 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.382814884 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.382832050 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.383042097 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.383083105 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.383090973 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.383099079 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.383145094 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.383153915 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.384056091 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.384123087 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.384161949 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.384177923 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.384191036 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.384206057 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.384954929 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.384998083 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.385035038 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.385051012 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.385066986 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.385077953 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.385814905 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.385991096 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.386066914 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.386075974 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.386389017 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475018024 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475112915 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475199938 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475245953 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475249052 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475261927 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475317001 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475318909 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475328922 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475405931 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475406885 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475583076 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475668907 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475676060 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475684881 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475712061 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475755930 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475755930 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475764990 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.475814104 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.475986958 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.476047993 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.476151943 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.476222992 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.476711035 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.476844072 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.476845980 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.476860046 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.476901054 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.476922035 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.477849960 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.477916956 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.477927923 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.477935076 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.477968931 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.477993011 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.478559971 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.478606939 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.478713989 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.478713989 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.478720903 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.478775024 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.479505062 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.479604959 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.563290119 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.563405991 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.563448906 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.563517094 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.563527107 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.563541889 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.563568115 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.563713074 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.563762903 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.563774109 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.564290047 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.564369917 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.564385891 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.564426899 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.564496994 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.564503908 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.564549923 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.564624071 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.564630985 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.565207005 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.565371990 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.565459013 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.599968910 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.610294104 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.617444992 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.618418932 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.637522936 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.637550116 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.638011932 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.638020039 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.638221979 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.638240099 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.638432980 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.638442993 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.639609098 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.639695883 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.641266108 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.641343117 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.641640902 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.641650915 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.642118931 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.642196894 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.642335892 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.642399073 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.642914057 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.643110037 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.643158913 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.643201113 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.643578053 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.643646002 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.644191980 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.644449949 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.644583941 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.644592047 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.644922018 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.644928932 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.645026922 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.645035028 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.684613943 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.684632063 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.684634924 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.684634924 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.749841928 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.749888897 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.749928951 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.749962091 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.749973059 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.749994040 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.750011921 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.750036001 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.750081062 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.750128031 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.750138044 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.750175953 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.750530958 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.755842924 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.757810116 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.757847071 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.757883072 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.757889986 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.757910967 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.757930994 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.759135962 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.759335041 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.759362936 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.759397984 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.759466887 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.759481907 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.759527922 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.761610031 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761666059 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761699915 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761734009 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761742115 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.761766911 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761780024 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.761800051 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761838913 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761867046 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761882067 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.761893034 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.761909008 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.762506008 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.762548923 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.762558937 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.767786026 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.767839909 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.767884016 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.767904043 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.767916918 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.767951965 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.767957926 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.768392086 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.768421888 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.768440008 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.768449068 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.768680096 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.769062042 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.769115925 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.769165993 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.769174099 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.775105000 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.775187016 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.775201082 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.785124063 CEST	49723	443	192.168.2.10	104.17.25.14
Sep 16, 2024 00:19:14.785144091 CEST	443	49723	104.17.25.14	192.168.2.10
Sep 16, 2024 00:19:14.809297085 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.809403896 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.809423923 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.820166111 CEST	49722	443	192.168.2.10	104.18.11.207
Sep 16, 2024 00:19:14.820188046 CEST	443	49722	104.18.11.207	192.168.2.10
Sep 16, 2024 00:19:14.823266029 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.823992968 CEST	49725	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.824013948 CEST	443	49725	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.836977959 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.837057114 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.837181091 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.837196112 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.837404966 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.837438107 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.837450981 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.837459087 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.837516069 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.837524891 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.838320017 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.838366032 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.838377953 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.838386059 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.838443041 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.839159966 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.839231014 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.839263916 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.839308977 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.839318037 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.839368105 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.839791059 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.839898109 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.839950085 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.839956999 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.840711117 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.840759039 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.840786934 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.840811014 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.840821028 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.840846062 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.853516102 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.853555918 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.853570938 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.853596926 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.853657961 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.853868961 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.854192019 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.854222059 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.854259014 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.854270935 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.854305983 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.854317904 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.854918003 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855074883 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855128050 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.855139971 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855303049 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855329990 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855340958 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.855350018 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855420113 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.855448961 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855695009 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855736017 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.855742931 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855772018 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.855828047 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.855835915 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.856395006 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.856425047 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.856462955 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.856472015 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.856509924 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.856787920 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.856817007 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.856829882 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.856838942 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857033968 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.857251883 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857302904 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857342958 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857381105 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.857391119 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857682943 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857716084 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857722044 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.857733011 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857785940 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857821941 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.857830048 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.857872009 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.858232021 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858292103 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858294010 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.858308077 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858536959 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858539104 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.858546972 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858658075 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858843088 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.858850956 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858921051 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858963013 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.858997107 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.859005928 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.859045982 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.861298084 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.878201008 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.878242016 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.878256083 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.878283978 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.878366947 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.897931099 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.897979021 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.897985935 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.898022890 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.898072004 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.902728081 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.923708916 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.923785925 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.923816919 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.923858881 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.923877954 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.923917055 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.924098015 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.924248934 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.924298048 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.924309015 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.924374104 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.925025940 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.925077915 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.925112009 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.925157070 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.925955057 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.926033020 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.926846027 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.926903963 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.927011013 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.927057028 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.927869081 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.927934885 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.928736925 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.928801060 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.928904057 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.928977966 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.929733038 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.929790020 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.930628061 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.930676937 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.930773020 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.931123018 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.931658030 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.931703091 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.931725979 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.931726933 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.931745052 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.931788921 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.931817055 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.931871891 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.941261053 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.941350937 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.941416025 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.941473007 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.941508055 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.941560984 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.941842079 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.942920923 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.942980051 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.942989111 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.943032980 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.943053961 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.943106890 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.943114996 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.943160057 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.943356037 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.943409920 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.943483114 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.943547964 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.944246054 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.944308043 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.944413900 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.944458961 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.944516897 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.944566011 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.945178986 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.945229053 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.945332050 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.945389032 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.945390940 CEST	49726	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.945408106 CEST	443	49726	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.945831060 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946022034 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946067095 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946068048 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946074009 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.946084023 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946110964 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.946130037 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.946136951 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946305990 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946356058 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.946371078 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946429014 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.946609020 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.946664095 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.946671009 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.947236061 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.947289944 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.947304964 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.947315931 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.947330952 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.947336912 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.947376013 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.947388887 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.947444916 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.948040962 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.948084116 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.948108912 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.948194027 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.948323965 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.951838017 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.951884985 CEST	443	49728	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.951956987 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.953193903 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.953234911 CEST	443	49729	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.953311920 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.954629898 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.954648018 CEST	443	49728	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.954869032 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.954883099 CEST	443	49729	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.954972982 CEST	49724	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.954987049 CEST	443	49724	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.958705902 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.958714962 CEST	443	49730	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.958796978 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.959295034 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.959310055 CEST	443	49731	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.959369898 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.959783077 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.959794998 CEST	443	49730	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.960071087 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:14.960088015 CEST	443	49731	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.984944105 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:14.985002995 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.028203011 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.028279066 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.028733015 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.028780937 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.029709101 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.029778004 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.029829025 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.029881001 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.030056000 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.030105114 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.030121088 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.030136108 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.030191898 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.030200005 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.030308962 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.030324936 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.030373096 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.030595064 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.030643940 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.030977011 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031024933 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.031025887 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031039953 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031069040 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.031080961 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.031264067 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031306028 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.031315088 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031356096 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031354904 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.031368017 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031414986 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.031842947 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031888008 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.031896114 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031964064 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.031970978 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.031986952 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032013893 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032021999 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032036066 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032042027 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032074928 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032464027 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032516956 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032525063 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032565117 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032618046 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032665968 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032860994 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032895088 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032911062 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032912016 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032923937 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.032969952 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.032974958 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.033021927 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.071695089 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.071760893 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.071813107 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.071856976 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.073350906 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:15.073398113 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:15.073499918 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:15.075814962 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:15.075829983 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:15.125024080 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.125083923 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.125111103 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.125129938 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.125154018 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.125169992 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.125176907 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.125214100 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.125431061 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.126399040 CEST	49727	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.126413107 CEST	443	49727	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.427910089 CEST	443	49731	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.436333895 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.436363935 CEST	443	49731	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.437431097 CEST	443	49731	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.437517881 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.439296007 CEST	443	49730	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.442749977 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.442853928 CEST	443	49731	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.442861080 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.442939997 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.442953110 CEST	443	49731	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.442964077 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.443068981 CEST	49731	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.443485975 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.443526030 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.443595886 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.444072008 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.444101095 CEST	443	49730	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.444437981 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.444457054 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.445183992 CEST	443	49730	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.445262909 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.445712090 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.445785999 CEST	443	49730	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.445813894 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.445866108 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.445880890 CEST	443	49730	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.445892096 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.445920944 CEST	49730	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.446191072 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.446202040 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.446461916 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.446809053 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.446820021 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.458041906 CEST	443	49728	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.458266973 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.458277941 CEST	443	49728	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.458872080 CEST	443	49729	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.459042072 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.459050894 CEST	443	49729	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.459717989 CEST	443	49728	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.459798098 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.460112095 CEST	443	49729	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.460170031 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.460325956 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.460340023 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.460390091 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.460408926 CEST	443	49728	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.460500002 CEST	49728	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.460715055 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.460763931 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.460824013 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.461453915 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.461467028 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.461507082 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.461527109 CEST	443	49729	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.461683989 CEST	443	49729	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.461689949 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.461714029 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.461720943 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.461745024 CEST	49729	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.461776018 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.462167025 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.462182045 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.462605000 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.462622881 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.592641115 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.592694044 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.592752934 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.593091011 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.593102932 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.593185902 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.593674898 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.593692064 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.594232082 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.594245911 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.727648020 CEST	49677	443	192.168.2.10	20.42.65.85
Sep 16, 2024 00:19:15.742333889 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:15.742439032 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:15.757160902 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:15.757188082 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:15.757543087 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:15.807373047 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:15.858706951 CEST	49671	443	192.168.2.10	204.79.197.203
Sep 16, 2024 00:19:15.901133060 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.923641920 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.933063030 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.940511942 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.952164888 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.956897974 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.956927061 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.957026958 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.957051039 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.957554102 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.957577944 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.958025932 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.958036900 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.958523989 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.958586931 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.958590984 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.958751917 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.958798885 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.958798885 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.959064960 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.959155083 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.959588051 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.959670067 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.968563080 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.968674898 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.969896078 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.969985008 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.971405983 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.971496105 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.971813917 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.971823931 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.971872091 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.971893072 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.971942902 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.971952915 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:15.971990108 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:15.971998930 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.011986017 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.011993885 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.011993885 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.017685890 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:16.056122065 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.056129932 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.056543112 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.056557894 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.056797981 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.056807041 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.057598114 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.057661057 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.057862043 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.057914972 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.058743000 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.058809996 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.063414097 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:16.080946922 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.081012964 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.081093073 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.081314087 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.081382990 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.082350016 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.084042072 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.084167004 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.085906029 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.085922003 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.085956097 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.085973978 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087156057 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087220907 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087258101 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087292910 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087316990 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.087322950 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087352991 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087413073 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.087428093 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.087436914 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087616920 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.087719917 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.087732077 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.088042974 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.088149071 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.088160992 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.092139959 CEST	49733	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.092170954 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.092171907 CEST	443	49733	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.092238903 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.092252016 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.093004942 CEST	49735	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.093043089 CEST	443	49735	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.110119104 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.110160112 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.110192060 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.110229015 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.110235929 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.110235929 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.110249996 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.110289097 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.110302925 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.110308886 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.110389948 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.110800028 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.114886045 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.114940882 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.114967108 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.114969015 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.114975929 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.115076065 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.137335062 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.179018974 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.179091930 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.179119110 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.179186106 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.179223061 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.179339886 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.180408955 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.180465937 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.180502892 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.180530071 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.180537939 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.180567980 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.180598974 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.180607080 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.180661917 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.181510925 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.181565046 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.181597948 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.181652069 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.181710005 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.181720972 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.181766987 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.182638884 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.182670116 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.182684898 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.182691097 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.182864904 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.182926893 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.182984114 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.183085918 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.183093071 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.183770895 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.183835030 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.183842897 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192114115 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192156076 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192183971 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.192193985 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192205906 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192249060 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.192279100 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192322016 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.192332029 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192363977 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192461014 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.192647934 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192708015 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.192717075 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192838907 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192877054 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192905903 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.192914009 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192955017 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192987919 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.192996025 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.193003893 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.193036079 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.193461895 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.193495035 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.193520069 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.193531036 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.193696976 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.196187973 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.196198940 CEST	443	49737	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.196237087 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.196254969 CEST	49737	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.197527885 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.202801943 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.202917099 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.202928066 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.202950954 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.203030109 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.203037977 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.203161001 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.203198910 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.203247070 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.203253031 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.203258991 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.203311920 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.203316927 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.203521967 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.204145908 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.204299927 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.204341888 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.204365969 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.204370975 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.204458952 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.204482079 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.204487085 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.204581976 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.204586029 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.204617023 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.204672098 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.204889059 CEST	49736	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.204904079 CEST	443	49736	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.208921909 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:16.208987951 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:16.209033966 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:16.209285975 CEST	49732	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:16.209302902 CEST	443	49732	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:16.229533911 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.229547024 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.261158943 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.271655083 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.271753073 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.271754026 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.271785021 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.271917105 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.271929026 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272047997 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272068024 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272095919 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.272105932 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272123098 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.272173882 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272228956 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.272236109 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272278070 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.272284985 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272341013 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272406101 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.272419930 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272694111 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272713900 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.272722006 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.272753954 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.272906065 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.273022890 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.273031950 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.273144960 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.273148060 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.273174047 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.273221016 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.273261070 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.273330927 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.273339033 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.273381948 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.273760080 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.273838997 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.273874998 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.273962021 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.274132013 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.274204969 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.274225950 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.274291992 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.274715900 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.274807930 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.274851084 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.275172949 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.278996944 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.279301882 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.279361010 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.279361963 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.279376984 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.279412031 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.279516935 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.279572964 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.279613018 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.279623032 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280080080 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280173063 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.280180931 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280246973 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280302048 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.280308962 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280668974 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280699968 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280731916 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.280740023 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280795097 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280824900 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280833006 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.280841112 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.280853033 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.281594992 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.281660080 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.281667948 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.281702042 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.281733036 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.281744003 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.281752110 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.281887054 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365000010 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365081072 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365098953 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365115881 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365128040 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365242004 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365324974 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365365982 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365390062 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365400076 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365411043 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365457058 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365457058 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365473032 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365813017 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365849018 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365866899 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365874052 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365888119 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.365895033 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365952015 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.365957022 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366086960 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.366306067 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366425037 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.366445065 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366514921 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.366520882 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366558075 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366581917 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366636038 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.366667986 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366714954 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.366719007 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366744995 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366898060 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.366930962 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.366949081 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367016077 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367068052 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.367079020 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367121935 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.367443085 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367496967 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.367503881 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367574930 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367624044 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.367633104 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367818117 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367867947 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.367870092 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367882013 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.367961884 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.368665934 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.368705034 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.368742943 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.368752003 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.368798971 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.369328022 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.369374990 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.369384050 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.369488001 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.369525909 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.369537115 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.369550943 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.369551897 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.369601011 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.369607925 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.369846106 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.370250940 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.370316029 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.370450020 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.370505095 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.401326895 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.423439026 CEST	49734	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.423460007 CEST	443	49734	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.453043938 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.453092098 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.453110933 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.453133106 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.453167915 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.453180075 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.453258991 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.453315020 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.453681946 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.453736067 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.453789949 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.453838110 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.453939915 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.453989029 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.454114914 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.454164028 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.454457998 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.454514027 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.454680920 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.454736948 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.454740047 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.454752922 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.454787016 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.454804897 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.455116987 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.455172062 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.455540895 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.455605984 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.455761909 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.455812931 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.456038952 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.456091881 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.456234932 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.456295967 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.456300020 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.456311941 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.456342936 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.456363916 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.456603050 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.456674099 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.456737995 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.456789017 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.456969976 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.457009077 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.457025051 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.457032919 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.457047939 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.457072973 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.457484007 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.457547903 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.457770109 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.457804918 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.457825899 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.457834005 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.457848072 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.457964897 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.458000898 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.458014011 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.458022118 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.458049059 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.539736986 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.539804935 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.539824963 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.539882898 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.540172100 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.540179968 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.540230036 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.540241003 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.540288925 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.540334940 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.611174107 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.613164902 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.613208055 CEST	443	49739	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.613292933 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.613711119 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.613764048 CEST	443	49740	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.613867998 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.614105940 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.614145041 CEST	443	49741	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.614195108 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.614701033 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.614710093 CEST	443	49742	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.614840031 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.616008043 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.616024017 CEST	443	49743	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.616086960 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.616627932 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.616667986 CEST	443	49744	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.616766930 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.622946024 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.622961998 CEST	443	49739	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.623370886 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.623395920 CEST	443	49740	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.623902082 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.623922110 CEST	443	49741	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.624237061 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.624254942 CEST	443	49742	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.624907970 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.624923944 CEST	443	49743	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.625175953 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.625189066 CEST	443	49744	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.625214100 CEST	49738	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:16.625237942 CEST	443	49738	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:16.627163887 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:16.627203941 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:16.627275944 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:16.627545118 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:16.627561092 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:16.657923937 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:16.657960892 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:16.658164978 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:16.658391953 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:16.658410072 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:17.284831047 CEST	443	49743	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.285131931 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.285146952 CEST	443	49743	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.285713911 CEST	443	49744	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.285988092 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.286005974 CEST	443	49744	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.286273003 CEST	443	49743	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.286329031 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.286559105 CEST	443	49742	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.286562920 CEST	443	49741	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.286871910 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.286927938 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.286927938 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.286958933 CEST	443	49743	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.287138939 CEST	443	49743	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.287197113 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.287235975 CEST	49743	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.287323952 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.287364960 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.287440062 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.287544966 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.287561893 CEST	443	49741	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.287606955 CEST	443	49744	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.287652016 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.287659883 CEST	443	49742	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.287687063 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.287923098 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.287938118 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.288355112 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.288356066 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.288356066 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.288465023 CEST	443	49744	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.288526058 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.288549900 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.288638115 CEST	49744	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.288671970 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.288743973 CEST	443	49741	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.288825989 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.288858891 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.288872957 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.288882017 CEST	443	49742	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.288944006 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289236069 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289236069 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289278030 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289334059 CEST	443	49741	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.289391041 CEST	49741	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289542913 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289551020 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.289608002 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289885998 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289885998 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289886951 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.289972067 CEST	443	49742	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.290047884 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.290065050 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.290122032 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.290126085 CEST	49742	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.290230989 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.290242910 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.290344954 CEST	443	49740	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.290366888 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.290376902 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.290508986 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.290518999 CEST	443	49740	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.290930033 CEST	443	49739	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.291075945 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.291089058 CEST	443	49739	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.292007923 CEST	443	49740	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.292145014 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.292413950 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.292468071 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.292488098 CEST	443	49740	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.292505026 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.292702913 CEST	49740	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.292743921 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.292782068 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.292782068 CEST	443	49739	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.292854071 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.292855024 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.293320894 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.293400049 CEST	443	49739	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.293483019 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.293489933 CEST	443	49739	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.293504953 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.293658972 CEST	49739	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.293970108 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.293999910 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.294102907 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.294193983 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.294214010 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.294357061 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.294370890 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.297449112 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:17.297523022 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:17.299410105 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:17.299413919 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:17.299730062 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:17.301292896 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:17.343432903 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:17.414222002 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.414266109 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.414355993 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.414820910 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.414835930 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.591078997 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:17.591161013 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:17.591243029 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:17.628276110 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:17.628309965 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:17.628321886 CEST	49745	443	192.168.2.10	184.28.90.27
Sep 16, 2024 00:19:17.628329039 CEST	443	49745	184.28.90.27	192.168.2.10
Sep 16, 2024 00:19:17.749104977 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.749866009 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.750988007 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.754304886 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.757114887 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.777550936 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.777573109 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.778709888 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.778858900 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.790355921 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.790385008 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.790704966 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.790714025 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.790900946 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.790935040 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.791146994 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.791155100 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.791933060 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.791999102 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.792206049 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.792228937 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.792293072 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.792337894 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.792365074 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.792387962 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.792412996 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.799415112 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.799494028 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.800034046 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.800102949 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.800503016 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.800570011 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.800738096 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.800746918 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.801125050 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.801218033 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.801780939 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.801889896 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.802594900 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.802609921 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.802953959 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.802963018 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.802997112 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.803003073 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.803236961 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.803251028 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.804500103 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.804583073 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.848315001 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.848314047 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.848315001 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.848315001 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.848378897 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.883198023 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.891407013 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.908653975 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.908691883 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.908714056 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.908739090 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.908759117 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.908790112 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.908806086 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.909168005 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909183979 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909220934 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.909229040 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909265041 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.909383059 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909527063 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909569025 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909590006 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.909612894 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909636974 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909662008 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.909673929 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909691095 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909706116 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909732103 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.909739017 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909742117 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909748077 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.909759045 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909810066 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909811020 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.909822941 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.909856081 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.911710978 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.912697077 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.912710905 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.913115978 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.913151026 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.913338900 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.913909912 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.913964033 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.913973093 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.914413929 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.914494038 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.914756060 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.914772034 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.914882898 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.915529013 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.915600061 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.915632010 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.915667057 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.915678978 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.915693045 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.915721893 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.915992022 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.916065931 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.916071892 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.916634083 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.916686058 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.916693926 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.917140961 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.917201042 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.917207003 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.919447899 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.919513941 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.919615984 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.919634104 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.919661045 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.919699907 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.954808950 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.955429077 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.959408998 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.965626001 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.965643883 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.965653896 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.965656042 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.965672016 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.994956017 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.995023966 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.995058060 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.995105028 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.995140076 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.995332956 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.995583057 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.995629072 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.995682001 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.995692015 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996031046 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996068954 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996100903 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996126890 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.996145010 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996195078 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.996206999 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996233940 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996254921 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.996262074 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996289968 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.996387959 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996879101 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.996937037 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997014999 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997060061 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997092009 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997111082 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997116089 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997126102 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997164011 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997175932 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997181892 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997210979 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997216940 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997216940 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997221947 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997234106 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997243881 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997258902 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997265100 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997296095 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997303963 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997313023 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997358084 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997555971 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997591972 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997636080 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997642994 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997687101 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997694016 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.997701883 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.997744083 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.998399973 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.998472929 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.998506069 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.998553038 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.998562098 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:17.998605967 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:17.999263048 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.003906965 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.004046917 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.004076958 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.004107952 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.004152060 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.004406929 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.004740000 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.004760981 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.004790068 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.004798889 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.004837036 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.005300999 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.005341053 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.005415916 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.005423069 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.006213903 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.006237984 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.006258011 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.006283998 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.006293058 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.006314993 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.006871939 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.006918907 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.006928921 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.007044077 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.007086992 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.007092953 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.007116079 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.007203102 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.007210016 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.020711899 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.020798922 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.020823002 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.020844936 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.020848989 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.020869017 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.020880938 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.020891905 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.020920992 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.021117926 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.021214962 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.021369934 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.022627115 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.022677898 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.022701979 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.022727013 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.022728920 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.022742987 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.022784948 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.022814035 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.022856951 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.022866964 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.023344994 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.023366928 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.023406029 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.023415089 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.023601055 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.024311066 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.024362087 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.024384975 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.024410009 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.024420023 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.024435043 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.024458885 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.025080919 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.025120974 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.025126934 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.025496960 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.025542021 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.025568962 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.025573969 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.025649071 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.025654078 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.028676987 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.028726101 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.028847933 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.028856993 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.031790972 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.031856060 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.031874895 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.031960964 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.038449049 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.038521051 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.038535118 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.041676998 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.052755117 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.052767992 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.052947998 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.052994013 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.053002119 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.082818985 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.085469961 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.085515022 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.085546017 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.085597992 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.085617065 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.085617065 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.085632086 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.085666895 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.085675955 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.085688114 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.085741043 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.086062908 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.086111069 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.086193085 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.086203098 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.086281061 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.086318970 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.086332083 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.086338997 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.086460114 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.086464882 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.086515903 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.092634916 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.092670918 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.092741013 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.092765093 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.092823029 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.092827082 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.092837095 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.092892885 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.092900991 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.093453884 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.093462944 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.093502998 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.093513966 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.094264984 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.094312906 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.094321012 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.094331026 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.094352007 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.094445944 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.094502926 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.094511032 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.094552040 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.095591068 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.095626116 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.095649958 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.095659018 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.095690966 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.095700026 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.096055031 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.096112967 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.096824884 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.096888065 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.097155094 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.097202063 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.097798109 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.097846985 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.098062038 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.098113060 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.098575115 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.098624945 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.111294031 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.111342907 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.111352921 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.111366987 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.111423969 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.111432076 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.112180948 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.112227917 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.112236023 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.112698078 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.112751961 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.112760067 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.113097906 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.113125086 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.113142014 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.113159895 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.113198996 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.113260984 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.114084959 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.114111900 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.114131927 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.114140034 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.114180088 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.114667892 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.114711046 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.114772081 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.114778996 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.115734100 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.115801096 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.115813017 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.115820885 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.115875006 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.115881920 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.118185997 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.118277073 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.118287086 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.132895947 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.132905006 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.134634972 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.134876966 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.135420084 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.141660929 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.141731024 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.175266027 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.181483030 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.181549072 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.181556940 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.181572914 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.181596041 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.181771994 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.181823015 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.181833982 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.181870937 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.181929111 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.182024956 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.182034016 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.182040930 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.182069063 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.182091951 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.182574987 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.182622910 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.182641029 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.182682991 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.182686090 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.182696104 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.182724953 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.183402061 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.183449984 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.183451891 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.183465004 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.183502913 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.183604002 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.183645010 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.183650970 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.183687925 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.184326887 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.184402943 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.184434891 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.184463024 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.184487104 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.184497118 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.184513092 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.185215950 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.185261965 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.185262918 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.185276985 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.185317039 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.185328960 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.185405970 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.185442924 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.185483932 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.186105967 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.186151981 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.186211109 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.186255932 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.186362982 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.186408043 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.187064886 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.187114000 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.187114954 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.187124968 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.187151909 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.187160015 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.187201023 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.187208891 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.187244892 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.187391996 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.187443972 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.188004017 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.188040972 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.188055038 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.188060045 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.188080072 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.201175928 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201257944 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201318979 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201327085 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.201348066 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201416016 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.201430082 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201443911 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201554060 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.201561928 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201642036 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.201658964 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201725960 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.201734066 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201745987 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.201791048 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.202349901 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.202406883 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.202480078 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.202480078 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.202490091 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.202605963 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.202676058 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.202685118 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.202811003 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.203355074 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.203408957 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.203421116 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.203428984 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.203461885 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.203479052 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.203588963 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.203654051 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.204113007 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.204164028 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.204262972 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.204354048 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.204433918 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.204488039 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.204943895 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.205034018 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.229830027 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.230561972 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.230634928 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.257262945 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.257447958 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.257814884 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.257831097 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.262459993 CEST	49752	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.262487888 CEST	443	49752	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.265374899 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.265407085 CEST	443	49755	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.265470028 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.267270088 CEST	49751	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.267303944 CEST	443	49751	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.267731905 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.267785072 CEST	443	49756	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.267910004 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.268222094 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.269376993 CEST	49749	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.269407988 CEST	443	49749	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.269829988 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.269867897 CEST	443	49757	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.269941092 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.270366907 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.270374060 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.270402908 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.270431995 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.270445108 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.270473957 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.270488024 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.270553112 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.270579100 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.270612955 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.270621061 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.270646095 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.270677090 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.271401882 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.271421909 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.271457911 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.271465063 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.271497011 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.271519899 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.271881104 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.271898985 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.271943092 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.271950006 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.271989107 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.272171021 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.272188902 CEST	443	49755	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.274938107 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.274965048 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.275005102 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.275011063 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.275057077 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.275064945 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.275399923 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.275415897 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.275495052 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.275495052 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.275501013 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.275538921 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.276252031 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.276273012 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.276307106 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.276313066 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.276355028 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.289612055 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.289669991 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.289701939 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.289824963 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.289964914 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290024996 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.290098906 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290184021 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.290386915 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290437937 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290451050 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.290465117 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290479898 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.290740013 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290790081 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.290797949 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290810108 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290853977 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290858030 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.290858030 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.290869951 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.290935040 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.290935040 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.291172981 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.291279078 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.291285038 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.291300058 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.291321993 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.291388988 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.304502964 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.319010019 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.319039106 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.319077969 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.319093943 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.319147110 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.332644939 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.332662106 CEST	443	49756	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.334104061 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.334131956 CEST	443	49757	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.359651089 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.359688997 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.359733105 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.359755039 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.359802961 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.359802961 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.360294104 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.360313892 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.360368013 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.360374928 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.360414028 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.360759974 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.360776901 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.360804081 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.360840082 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.360845089 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.360882998 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.361265898 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.361289978 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.361325026 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.361330986 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.361358881 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.361375093 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.362185001 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.362205029 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.362257957 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.362276077 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.362288952 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.362345934 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.362950087 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.362970114 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.363007069 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.363013029 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.363045931 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.363059998 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.363781929 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.363800049 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.363835096 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.363841057 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.363868952 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.363925934 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.365226030 CEST	49753	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.365251064 CEST	443	49753	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.366292000 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.366338015 CEST	443	49758	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.366420031 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.366790056 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.367722034 CEST	49750	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.367750883 CEST	443	49750	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.370026112 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.370045900 CEST	443	49758	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.400942087 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.400975943 CEST	443	49759	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.401026964 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.402453899 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.402473927 CEST	443	49759	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.404314041 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.405088902 CEST	49754	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.405114889 CEST	443	49754	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.408173084 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.408202887 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.408241987 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.408260107 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.408289909 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.408305883 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.443589926 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.443625927 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.443732023 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.444176912 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.444247961 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.444305897 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.444637060 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.444660902 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.444962978 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.444981098 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.446043015 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.446055889 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.446137905 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.446397066 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.446408033 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.447273016 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.447285891 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.447415113 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.447638035 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.447653055 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.450647116 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.450695038 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.450783014 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.450783968 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.450803995 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.450864077 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.451033115 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.451056004 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.451085091 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.451090097 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.451118946 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.451136112 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.451785088 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.451812029 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.451844931 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.451848984 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.451878071 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.451894045 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.452460051 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.452521086 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.452523947 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.452538967 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.452585936 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.453397036 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.453423023 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.453454018 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.453459978 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.453497887 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.453512907 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.454509020 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454535961 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454575062 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.454580069 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454617023 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.454627037 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454726934 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454730034 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.454751968 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454811096 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.454812050 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454822063 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.454826117 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454873085 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.454884052 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.454899073 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.454926968 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.455614090 CEST	49748	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.455630064 CEST	443	49748	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.508774996 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.508826017 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.508882046 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.509869099 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.509886980 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.523411989 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.523454905 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.523519039 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.524066925 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.524080992 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.739675999 CEST	443	49755	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.740042925 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.740057945 CEST	443	49755	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.741116047 CEST	443	49755	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.741547108 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.741626978 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.741638899 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.741688013 CEST	443	49755	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.741765022 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.741775036 CEST	443	49755	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.741785049 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.741822004 CEST	49755	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.742327929 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.742377043 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.742486954 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.742666006 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.742681026 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.791990995 CEST	443	49756	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.792258978 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.792280912 CEST	443	49756	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.793761969 CEST	443	49756	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.793824911 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.794265032 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.794312954 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.794373989 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.794382095 CEST	443	49756	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.794476032 CEST	49756	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.794692039 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.794727087 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.794805050 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.795043945 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.795058012 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.797133923 CEST	443	49757	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.797348022 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.797364950 CEST	443	49757	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.798820972 CEST	443	49757	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.798882008 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.799182892 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.799211025 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.799263000 CEST	443	49757	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.799295902 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.799319983 CEST	49757	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.799489975 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.799551964 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.799609900 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.799817085 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.799832106 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.835251093 CEST	443	49758	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.835611105 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.835630894 CEST	443	49758	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.837074995 CEST	443	49758	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.837157011 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.837610960 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.837677956 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.837696075 CEST	443	49758	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.837735891 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.837785959 CEST	49758	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.838011026 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.838054895 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.838131905 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.838329077 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.838342905 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.858361006 CEST	443	49759	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.858701944 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.858722925 CEST	443	49759	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.859797001 CEST	443	49759	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.860013008 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.860224009 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.860284090 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.860284090 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.860300064 CEST	443	49759	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.860352039 CEST	49759	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.860589027 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.860642910 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.860714912 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.860927105 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.860943079 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.897108078 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.897176027 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.897197008 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.897216082 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.897247076 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.897254944 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.897269011 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.897274971 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.897300959 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.897304058 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.897325039 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.897367001 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.898679972 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.898722887 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.898768902 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.898786068 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:18.898849964 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:18.914808989 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.916686058 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.917257071 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.918948889 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.927772999 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.927788973 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.928013086 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.928033113 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.928195000 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.928206921 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.928220987 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.928405046 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.928421021 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.928597927 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.928958893 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.929044008 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.929425001 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.929497957 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.929579973 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.929637909 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.929816008 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.930150986 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.930200100 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.930336952 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.930418015 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.930568933 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.931021929 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.931133032 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.931400061 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.931408882 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.931473970 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.931488037 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.964915991 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.965248108 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.965265989 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.966334105 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.966399908 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.969599009 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.969681025 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.969897032 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.969908953 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.975404978 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.975405931 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.993377924 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.993752003 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.993773937 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.994836092 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.994929075 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.995362043 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.995456934 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:18.996166945 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:18.996181011 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.027990103 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.034833908 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.034893990 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.034895897 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.048226118 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.048290968 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.048352957 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.048377991 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.048396111 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.048424959 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.048444033 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.048465967 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.049303055 CEST	49762	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.049335003 CEST	443	49762	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.061463118 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.061551094 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.061594963 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.061631918 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.061669111 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.061669111 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.061686039 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.061975956 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.062033892 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.062036991 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.062051058 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.062102079 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.062830925 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.062908888 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.062947989 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.062983990 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.062992096 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.063045025 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.063663960 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.063762903 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.063819885 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.063972950 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.063972950 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.063990116 CEST	443	49763	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.064070940 CEST	49763	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.064306021 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.064356089 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.064383030 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.064413071 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.064419031 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.064428091 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.064454079 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.065046072 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.065119982 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.065129042 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.065388918 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.065433979 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.065448999 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.066219091 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.066263914 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.066344023 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.066353083 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.066417933 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.068830013 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.068969965 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.069010973 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.069048882 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.069057941 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.069216967 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.069319010 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.069327116 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.069462061 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.069504976 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.069510937 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.069664001 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.069725037 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.069730997 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.070168018 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.070225000 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.070231915 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.116424084 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.116468906 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.116493940 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.116523027 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.116559982 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.116580009 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.116586924 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.116600990 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.116638899 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.116653919 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.117031097 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.117094040 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.117614031 CEST	49764	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.117628098 CEST	443	49764	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.125946045 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126054049 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126135111 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.126142979 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126173019 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126307964 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.126322031 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126405954 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126456976 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.126473904 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126610041 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126626015 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.126635075 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.126705885 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.126713037 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.130321026 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.130372047 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.130378962 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151110888 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151149988 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151170969 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151191950 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.151211023 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151231050 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.151556015 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151624918 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151644945 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151674032 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.151683092 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.151746988 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.152173042 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.152215958 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.152273893 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.152281046 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.152312040 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.152335882 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.152384043 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.152391911 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.153053999 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.153073072 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.153135061 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.153139114 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.153151035 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.153225899 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.153228998 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.153295994 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.153321028 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.153331995 CEST	443	49760	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.153356075 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.153387070 CEST	49760	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.153496027 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.153512955 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.154860020 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.154944897 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.154956102 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.155098915 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.155154943 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.155160904 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.155303001 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.155390978 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.155399084 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.155541897 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.155635118 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.155683041 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.155693054 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.155961037 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.156086922 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.156281948 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.156328917 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.156337976 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.156521082 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.156605005 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.156614065 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.157048941 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.157116890 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.157124996 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.157255888 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.157355070 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.157407045 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.157414913 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.157819986 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.157840967 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.157980919 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.158092022 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.158097982 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.158253908 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.158379078 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.158402920 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.169362068 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.169404984 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.169421911 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.169435024 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.169471025 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.169485092 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.169495106 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.169513941 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.169542074 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.169544935 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.169544935 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.169620037 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.170480967 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.170500994 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.170540094 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.170541048 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.170577049 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.170583963 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.170593977 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.170618057 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.170648098 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.170648098 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.172183037 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.172231913 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.172259092 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.172266006 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.172324896 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.172324896 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.173914909 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.173974991 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.174030066 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.174030066 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.174037933 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.174216986 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.213063002 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.213547945 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.213648081 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.213689089 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.213700056 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.213819981 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.213888884 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.213903904 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.213931084 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214004993 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.214023113 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214186907 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.214196920 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214216948 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214262962 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.214268923 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214374065 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214425087 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.214432001 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214534044 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214611053 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214617968 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.214633942 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.214750051 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.214997053 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.215075016 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.215121031 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.215271950 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.215320110 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.215327024 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.215467930 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.215529919 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.215538025 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.215852022 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.215950012 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.216032028 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.216057062 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.216064930 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.216219902 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.218067884 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.218174934 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.218708992 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.218878031 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.218908072 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.241404057 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.241527081 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.241589069 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.241605997 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.241770029 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.241880894 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.241939068 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.241945028 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.242022038 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.242072105 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.242078066 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.242139101 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.242201090 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.242208004 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.242373943 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.242533922 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.242541075 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.246629000 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.258546114 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.258985043 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.263416052 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.268229008 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.268254995 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.278640032 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.278659105 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.278944016 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.278975010 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.279551983 CEST	49761	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.279597998 CEST	443	49761	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.280800104 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.280869961 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.282300949 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.282416105 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.289771080 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.289999008 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.290963888 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.291179895 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.292726040 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.292735100 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.292859077 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.292876005 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.293973923 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.295655966 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.295681000 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.297111034 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.297189951 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.297818899 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.297941923 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.297946930 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.298005104 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.301119089 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.301290035 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.301388979 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.301471949 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.301477909 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.301502943 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.301842928 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.301882982 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.301892996 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.301927090 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.301927090 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.301986933 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.302067041 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.302336931 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.302474022 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.302520037 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.302606106 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.302668095 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.302728891 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.303433895 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.303503036 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.303572893 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.303617954 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.303714037 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.303769112 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.304151058 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.304220915 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.304263115 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.304317951 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.304387093 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.304477930 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.304943085 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.305013895 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.305191994 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.305269957 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.305296898 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.305351973 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.315316916 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.316765070 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.316775084 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.318258047 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.318332911 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.319001913 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.319093943 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.319152117 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.349473000 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.349555016 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.349575043 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.349606991 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.349657059 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.353526115 CEST	49766	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.353566885 CEST	443	49766	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.363411903 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.369632006 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.389367104 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.389461994 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.389576912 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.389684916 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.389745951 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.389813900 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.389838934 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.389906883 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.389941931 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.390041113 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.390060902 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.390074015 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.390121937 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.390211105 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.390328884 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.390407085 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.390467882 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.390589952 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.390748978 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.390814066 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.390866995 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.390899897 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.390963078 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.391181946 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.391274929 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.391277075 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.391303062 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.391371965 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.391508102 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.391599894 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.391647100 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.391647100 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.391659021 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.391951084 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.392066956 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.392076969 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.392131090 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.392241001 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.392247915 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.392380953 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.392484903 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.392486095 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.392509937 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.392596960 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.392600060 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.392654896 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.392662048 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393068075 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393120050 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.393126965 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393261909 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393311977 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.393326044 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393461943 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393523932 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.393529892 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393559933 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393608093 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.393621922 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393649101 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393717051 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.393722057 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393809080 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.393903017 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.393908978 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.394172907 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.406930923 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.406990051 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.407012939 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.407087088 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.407138109 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.407283068 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.407290936 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.407529116 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.407543898 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.408094883 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.408132076 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.408169031 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.408212900 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.408221006 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.410710096 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411070108 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411128044 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411170006 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411178112 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.411195993 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411246061 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411302090 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.411302090 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.411313057 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411633015 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411684036 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411694050 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.411701918 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411756992 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411782026 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.411791086 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.411859035 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.412262917 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.412319899 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.412327051 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.415503979 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.421406984 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.421488047 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.421504974 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.421533108 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.421581030 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.442231894 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.442256927 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.442347050 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.442373037 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.442517042 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.442969084 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.442985058 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.443150043 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.443181038 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.443228960 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.443753004 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.443768024 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.443820953 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.443835974 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.444082022 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.444255114 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.444268942 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.444355011 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.444360971 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.444516897 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.445373058 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.445388079 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.445480108 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.445486069 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.445545912 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.445761919 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.446077108 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.446094036 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.446432114 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.446438074 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.446651936 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.450483084 CEST	49770	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.450506926 CEST	443	49770	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.462454081 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.462553024 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.462583065 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.462682009 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.462779999 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.462867975 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.462896109 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.462903976 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.462932110 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.463056087 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.463112116 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.463118076 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.463238001 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.463299990 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.476742029 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.476805925 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.476862907 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.476871967 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.476927996 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.477371931 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.477392912 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.477550983 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.477557898 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.478079081 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.478105068 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.478168964 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.478178024 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.478797913 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.478816032 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.478955030 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.478960991 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.481452942 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.481472015 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.481513023 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.481519938 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.481602907 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.482029915 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.482048988 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.482096910 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.482104063 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.482148886 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.482630014 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.482646942 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.482728004 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.482734919 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.483131886 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.483150005 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.483186960 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.483192921 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.483207941 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.483530045 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.493753910 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.493819952 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.493904114 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.493978977 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.498074055 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.498374939 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.498394966 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.498732090 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.498783112 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.498949051 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.498996973 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.499025106 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.499027014 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.499042988 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.499192953 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.499201059 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.499211073 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.499372959 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.499891043 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.499995947 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.500036955 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.500053883 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.500061989 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.500159025 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.500252008 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.530304909 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.530339003 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.530414104 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.530431986 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.530509949 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.533484936 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.533544064 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.533694029 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.534018993 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.534034014 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.534786940 CEST	49767	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.534807920 CEST	443	49767	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.564503908 CEST	49768	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.564517021 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.564532995 CEST	443	49768	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.564548016 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.564642906 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.564642906 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.564652920 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.564722061 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.565062046 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.565082073 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.565140009 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.565145016 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.565155029 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.565186024 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.565915108 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.565936089 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.565979004 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.565984011 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.566032887 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.566051960 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.566415071 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.566431999 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.566468000 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.566481113 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.566513062 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.566550016 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.567437887 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.567460060 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.567538977 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.567538977 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.567545891 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.567718029 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.568341970 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.568360090 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.568433046 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.568438053 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.568449020 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.568471909 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.568507910 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.568512917 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.568538904 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.568573952 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.569372892 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.569394112 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.569453001 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.569458008 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.569494963 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.569494963 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.570050001 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.652344942 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.652370930 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.652527094 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.652548075 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.652844906 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.652868986 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.652923107 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.652929068 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.652964115 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.652964115 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.653369904 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.653399944 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.653431892 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.653436899 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.653456926 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.653484106 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.653700113 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.653723001 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.653790951 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.653790951 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.653796911 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.654375076 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.654402971 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.654441118 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.654447079 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.654495001 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.654495001 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.655009031 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.655029058 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.655086040 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.655086040 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.655092955 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.655515909 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.655539036 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.655570984 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.655575037 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.655600071 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.655610085 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.655637026 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.655641079 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.655673981 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.655694008 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.655694008 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.658466101 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.715749025 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.715821028 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.715943098 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.715943098 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.715961933 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.716022015 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.716559887 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.716603041 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.716633081 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.716639042 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.716694117 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.717010021 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.717061043 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.717086077 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.717092037 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.717145920 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.717147112 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.717530966 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.717571974 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.717608929 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.717616081 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.717643023 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.717653990 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.720544100 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.720583916 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.720655918 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.720663071 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.720700026 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.720700026 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.721035957 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.721077919 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.721101999 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.721107006 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.721148014 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.721148014 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.722285986 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.722301960 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.722362041 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.722369909 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.722812891 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.722831964 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.722865105 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.722871065 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.722902060 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.722939968 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.724075079 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.787288904 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.788861990 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.788912058 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.789036036 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.790355921 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.790364981 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.790461063 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.802901983 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.802922010 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.803021908 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.803021908 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.803035975 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.803083897 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.803793907 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.803814888 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.803894997 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.803901911 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.804225922 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.804244995 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.804301023 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.804301023 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.804307938 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.804841995 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.804858923 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.804912090 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.804919004 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.804955959 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.804955959 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.805560112 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.805594921 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.805643082 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.805644989 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.805644989 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.806941986 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.889818907 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.890219927 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.890242100 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.890512943 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.890523911 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.892774105 CEST	49771	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.892800093 CEST	443	49771	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.904547930 CEST	49765	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.904571056 CEST	443	49765	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.904912949 CEST	49747	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.904921055 CEST	443	49747	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.905827999 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.905869961 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.906174898 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.906806946 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:19.906825066 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:19.955446959 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.955478907 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.955749035 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.956008911 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:19.956022978 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:19.985160112 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:19.985203981 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:19.985347033 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:19.985640049 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:19.985661030 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:20.008563042 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.008810997 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.008826017 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.009170055 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.009500980 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.009565115 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.009637117 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.055408001 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.164944887 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.165007114 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.165050983 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.165065050 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.165155888 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.165199995 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.168457031 CEST	49772	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.168477058 CEST	443	49772	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.349828005 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.350126028 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.350157976 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.350521088 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.350867033 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.350939035 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.351025105 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.364522934 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.364767075 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.364778996 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.368310928 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.368385077 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.368745089 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.368899107 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.368918896 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.375065088 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.375266075 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.375291109 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.376714945 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.376775980 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.377183914 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.377265930 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.377367973 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.377377033 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.391424894 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.497894049 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.497946024 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.497982025 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.497989893 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.498006105 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.498061895 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.498070002 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.498244047 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.498284101 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.498291016 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.498297930 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.498342037 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.498347998 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.502612114 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.502644062 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.502661943 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.502669096 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.502724886 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.502731085 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.513951063 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.514013052 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.514024019 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.514064074 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.514111996 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.514112949 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.514123917 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.514168024 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.514174938 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.514705896 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.514748096 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.514755964 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.518557072 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.518595934 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.518604994 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.518613100 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.518651962 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.518657923 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519320011 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519372940 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.519399881 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519543886 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519586086 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519613981 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.519622087 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519673109 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.519680977 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519689083 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519728899 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.519737005 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519814968 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.519866943 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.520529032 CEST	49775	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.520545006 CEST	443	49775	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.711414099 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:20.711474895 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:20.730734110 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.594732046 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.594835043 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.594913006 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.594959021 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.594969988 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.594985962 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595017910 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.595104933 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595132113 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595154047 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595201015 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595220089 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.595232964 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595244884 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.595267057 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595293999 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595305920 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.595314980 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595330954 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.595338106 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595396996 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595412970 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595438004 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.595447063 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595462084 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595479012 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.595503092 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.595513105 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595601082 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.595642090 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.596359015 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:21.596776962 CEST	49773	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.596791983 CEST	443	49773	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.597771883 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:21.597790956 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:21.598148108 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:21.599749088 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:21.599853992 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:21.602432013 CEST	49774	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:21.602438927 CEST	443	49774	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:21.603934050 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:21.651408911 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:21.953790903 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:21.994906902 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:21.994921923 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:21.996184111 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:21.996258974 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.180886984 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.181158066 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.230758905 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.230786085 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.277107954 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.287914038 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:22.287947893 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:22.287981033 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:22.288028955 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:22.288033009 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:22.288086891 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:22.312252045 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.355442047 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.674458981 CEST	49776	443	192.168.2.10	203.162.56.72
Sep 16, 2024 00:19:22.674493074 CEST	443	49776	203.162.56.72	192.168.2.10
Sep 16, 2024 00:19:22.717411041 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.717458010 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.717746973 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.718192101 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.718204975 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.862601995 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:22.862643003 CEST	443	49779	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:22.862855911 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:22.863223076 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:22.863270998 CEST	443	49780	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:22.863356113 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:22.881906033 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:22.881926060 CEST	443	49780	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:22.882442951 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:22.882457972 CEST	443	49779	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:22.923940897 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.923979998 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.923989058 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.924025059 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.924041986 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.924050093 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.924096107 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.924118042 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.924144983 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.924151897 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.924197912 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.925371885 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.925380945 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.925395966 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.925424099 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.925442934 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.925452948 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:22.925549030 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:22.968404055 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.181411982 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.181430101 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.181489944 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.181505919 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.181544065 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.181549072 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.181566000 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.181593895 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.181621075 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.182612896 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.182642937 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.182732105 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.182732105 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.182744026 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.182784081 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.184267998 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.184295893 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.184341908 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.184348106 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.184382915 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.184396982 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.185323000 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.185349941 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.185380936 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.185388088 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.185451984 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.338293076 CEST	443	49780	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.338649035 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.338675976 CEST	443	49780	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.340389967 CEST	443	49780	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.340457916 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.341015100 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.341028929 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.341089964 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.341099024 CEST	443	49780	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.341170073 CEST	49780	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.341442108 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.341486931 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.341552019 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.341805935 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.341823101 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.344636917 CEST	443	49779	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.344904900 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.344918013 CEST	443	49779	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.346415997 CEST	443	49779	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.346498966 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.346873045 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.346873045 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.346955061 CEST	443	49779	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.346956015 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.347018003 CEST	49779	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.347322941 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.347335100 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.347399950 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.347575903 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.347589970 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.439285040 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.439305067 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.439376116 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.439380884 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.439404011 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.439452887 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.439452887 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.439868927 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.439893007 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.439939976 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.439945936 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.439990997 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.439990997 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.440675974 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.440699100 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.440767050 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.440773010 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.440809965 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.440809965 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.444032907 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.444051981 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.444107056 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.444113016 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.444154978 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.444155931 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.444576025 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.444598913 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.444643974 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.444649935 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.444694042 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.444694042 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.445137024 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.445161104 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.445213079 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.445219040 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.445238113 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.445259094 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.529644012 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.529676914 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.529720068 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.529745102 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.529784918 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.529798031 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.696259975 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.696295023 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.696346045 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.696358919 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.696410894 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.696410894 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.696938038 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.696980953 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.697015047 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.697021961 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.697073936 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.697073936 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.697738886 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.697762012 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.697827101 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.697834969 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.697864056 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.697881937 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.698388100 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.698411942 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.698455095 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.698462009 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.698509932 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.698509932 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.699136019 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.699157000 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.699232101 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.699239969 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.699331999 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.699673891 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.699693918 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.699733973 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.699740887 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.699776888 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.699795008 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.700651884 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.700676918 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.700746059 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.700752020 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.700778008 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.700797081 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.700810909 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.700817108 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.700851917 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.700858116 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.700869083 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.700949907 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.704082966 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.786864996 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.786895037 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.786942959 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.786957979 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.787023067 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.787194014 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.787210941 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.787276983 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.787276983 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.787285089 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.787331104 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.787857056 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.787877083 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.787947893 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.787955999 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.788008928 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.788336992 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.788364887 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.788410902 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.788415909 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.788460016 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.788460016 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.788775921 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.788846016 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.788866043 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.788877964 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.788909912 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.788949966 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.790613890 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.795809031 CEST	49777	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:23.795821905 CEST	443	49777	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:23.801783085 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.802252054 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.802277088 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.803083897 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.803836107 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.803894997 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.804404020 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.804413080 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.805557013 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.805639029 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.806046963 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.806108952 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.806185007 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.806194067 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.807055950 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.807158947 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.854497910 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.854672909 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:23.854700089 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:23.902264118 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:24.052736998 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.056574106 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:24.056642056 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:24.056689024 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:24.072597980 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:24.072613001 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.073873043 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.098290920 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:24.098493099 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.098680973 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:24.143408060 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.449887037 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.449917078 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.449951887 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.449971914 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.449980021 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:24.449991941 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.450011015 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.450032949 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:24.450050116 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:24.527475119 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:24.527529955 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:24.527591944 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:24.527612925 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:24.527688026 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:24.527738094 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:24.572405100 CEST	49782	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:24.572432995 CEST	443	49782	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:24.574574947 CEST	49778	443	192.168.2.10	45.119.240.104
Sep 16, 2024 00:19:24.574609041 CEST	443	49778	45.119.240.104	192.168.2.10
Sep 16, 2024 00:19:24.646727085 CEST	49717	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:19:24.646756887 CEST	443	49717	142.250.185.228	192.168.2.10
Sep 16, 2024 00:19:24.647702932 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:24.695406914 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:24.729401112 CEST	49672	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:24.729827881 CEST	49784	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:24.729878902 CEST	443	49784	173.222.162.55	192.168.2.10
Sep 16, 2024 00:19:24.730139017 CEST	49784	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:24.731009960 CEST	49784	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:24.731024027 CEST	443	49784	173.222.162.55	192.168.2.10
Sep 16, 2024 00:19:25.059896946 CEST	49672	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:25.322799921 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:25.322851896 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:25.322896004 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:25.322913885 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:25.323021889 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:25.323061943 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:25.326253891 CEST	443	49784	173.222.162.55	192.168.2.10
Sep 16, 2024 00:19:25.326406002 CEST	49784	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:25.335469007 CEST	49781	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:25.335493088 CEST	443	49781	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:25.340924978 CEST	49677	443	192.168.2.10	20.42.65.85
Sep 16, 2024 00:19:25.667290926 CEST	49672	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:26.403280973 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.403335094 CEST	443	49786	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.403443098 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.412065983 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.412086964 CEST	443	49786	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.870177031 CEST	443	49786	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.870553017 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.870568991 CEST	443	49786	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.871609926 CEST	443	49786	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.871665001 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.872358084 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.872375011 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.872421026 CEST	443	49786	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.872422934 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.872585058 CEST	443	49786	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.872678995 CEST	49786	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.873140097 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.873171091 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.873243093 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.873574972 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:26.873590946 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:26.956597090 CEST	49672	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:27.361277103 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:27.368922949 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:27.368959904 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:27.369487047 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:27.370259047 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:27.370356083 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:27.385586977 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:27.431407928 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:27.980268002 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:27.980331898 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:27.980422020 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:27.980432987 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:27.980483055 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:28.155558109 CEST	49788	443	192.168.2.10	188.114.97.3
Sep 16, 2024 00:19:28.155582905 CEST	443	49788	188.114.97.3	192.168.2.10
Sep 16, 2024 00:19:29.461751938 CEST	49672	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:34.276937008 CEST	49672	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:43.886528969 CEST	49672	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:19:44.487328053 CEST	443	49784	173.222.162.55	192.168.2.10
Sep 16, 2024 00:19:44.487401962 CEST	49784	443	192.168.2.10	173.222.162.55
Sep 16, 2024 00:20:13.511972904 CEST	49793	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:20:13.512017012 CEST	443	49793	142.250.185.228	192.168.2.10
Sep 16, 2024 00:20:13.512100935 CEST	49793	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:20:13.512509108 CEST	49793	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:20:13.512523890 CEST	443	49793	142.250.185.228	192.168.2.10
Sep 16, 2024 00:20:14.229511976 CEST	443	49793	142.250.185.228	192.168.2.10
Sep 16, 2024 00:20:14.229832888 CEST	49793	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:20:14.229866982 CEST	443	49793	142.250.185.228	192.168.2.10
Sep 16, 2024 00:20:14.230237007 CEST	443	49793	142.250.185.228	192.168.2.10
Sep 16, 2024 00:20:14.231209993 CEST	49793	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:20:14.231321096 CEST	443	49793	142.250.185.228	192.168.2.10
Sep 16, 2024 00:20:14.277713060 CEST	49793	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:20:24.135224104 CEST	443	49793	142.250.185.228	192.168.2.10
Sep 16, 2024 00:20:24.135303020 CEST	443	49793	142.250.185.228	192.168.2.10
Sep 16, 2024 00:20:24.135699987 CEST	49793	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:20:24.843826056 CEST	49793	443	192.168.2.10	142.250.185.228
Sep 16, 2024 00:20:24.843861103 CEST	443	49793	142.250.185.228	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 16, 2024 00:19:08.414670944 CEST	53	59536	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:08.488925934 CEST	53	49269	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:09.666517019 CEST	53	53425	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:11.302181005 CEST	62947	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:11.302428961 CEST	57771	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:11.514163971 CEST	53	57771	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:11.526323080 CEST	53	62947	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:13.443054914 CEST	57589	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:13.443670034 CEST	64862	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:13.451615095 CEST	53	57589	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:13.452073097 CEST	53	64862	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:13.636595964 CEST	49692	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:13.639826059 CEST	53429	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:13.641490936 CEST	54072	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:13.641845942 CEST	49354	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:13.645456076 CEST	53	49692	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:13.648727894 CEST	53	53429	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:13.649986982 CEST	53	54072	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:13.650110006 CEST	53	49354	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:15.455672979 CEST	59556	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:15.455964088 CEST	50939	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:15.555501938 CEST	53	59556	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:15.677026987 CEST	53	50939	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:16.617507935 CEST	50174	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:16.617750883 CEST	54717	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:16.630273104 CEST	53	54027	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:16.657151937 CEST	53	54717	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:16.657401085 CEST	53	50174	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:19.954845905 CEST	63631	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:19.954993010 CEST	57182	53	192.168.2.10	1.1.1.1
Sep 16, 2024 00:19:19.983933926 CEST	53	63631	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:19.984178066 CEST	53	57182	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:28.050199032 CEST	53	49277	1.1.1.1	192.168.2.10
Sep 16, 2024 00:19:47.029706001 CEST	53	50134	1.1.1.1	192.168.2.10
Sep 16, 2024 00:20:04.221560001 CEST	138	138	192.168.2.10	192.168.2.255
Sep 16, 2024 00:20:08.372740984 CEST	53	60657	1.1.1.1	192.168.2.10
Sep 16, 2024 00:20:10.222296953 CEST	53	57046	1.1.1.1	192.168.2.10

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 16, 2024 00:19:15.677292109 CEST	192.168.2.10	1.1.1.1	c288	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 16, 2024 00:19:11.302181005 CEST	192.168.2.10	1.1.1.1	0xac28	Standard query (0)	membership.garenaa.id.vn	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:11.302428961 CEST	192.168.2.10	1.1.1.1	0xf26d	Standard query (0)	membership.garenaa.id.vn	65	IN (0x0001)	false
Sep 16, 2024 00:19:13.443054914 CEST	192.168.2.10	1.1.1.1	0x5d47	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.443670034 CEST	192.168.2.10	1.1.1.1	0x5669	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 16, 2024 00:19:13.636595964 CEST	192.168.2.10	1.1.1.1	0xf497	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.639826059 CEST	192.168.2.10	1.1.1.1	0xbe07	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 16, 2024 00:19:13.641490936 CEST	192.168.2.10	1.1.1.1	0xbfda	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.641845942 CEST	192.168.2.10	1.1.1.1	0x331a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 16, 2024 00:19:15.455672979 CEST	192.168.2.10	1.1.1.1	0x4496	Standard query (0)	membership.garenaa.id.vn	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:15.455964088 CEST	192.168.2.10	1.1.1.1	0x98ce	Standard query (0)	membership.garenaa.id.vn	65	IN (0x0001)	false
Sep 16, 2024 00:19:16.617507935 CEST	192.168.2.10	1.1.1.1	0x2630	Standard query (0)	cdn.vn.garenanow.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:16.617750883 CEST	192.168.2.10	1.1.1.1	0x3264	Standard query (0)	cdn.vn.garenanow.com	65	IN (0x0001)	false
Sep 16, 2024 00:19:19.954845905 CEST	192.168.2.10	1.1.1.1	0x8741	Standard query (0)	cdn.vn.garenanow.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:19.954993010 CEST	192.168.2.10	1.1.1.1	0xa0b3	Standard query (0)	cdn.vn.garenanow.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 16, 2024 00:19:11.514163971 CEST	1.1.1.1	192.168.2.10	0xf26d	No error (0)	membership.garenaa.id.vn			65	IN (0x0001)	false
Sep 16, 2024 00:19:11.526323080 CEST	1.1.1.1	192.168.2.10	0xac28	No error (0)	membership.garenaa.id.vn		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:11.526323080 CEST	1.1.1.1	192.168.2.10	0xac28	No error (0)	membership.garenaa.id.vn		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.451615095 CEST	1.1.1.1	192.168.2.10	0x5d47	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.452073097 CEST	1.1.1.1	192.168.2.10	0x5669	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 16, 2024 00:19:13.645456076 CEST	1.1.1.1	192.168.2.10	0xf497	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.645456076 CEST	1.1.1.1	192.168.2.10	0xf497	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.648727894 CEST	1.1.1.1	192.168.2.10	0xbe07	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 16, 2024 00:19:13.649986982 CEST	1.1.1.1	192.168.2.10	0xbfda	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.649986982 CEST	1.1.1.1	192.168.2.10	0xbfda	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:13.650110006 CEST	1.1.1.1	192.168.2.10	0x331a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 16, 2024 00:19:15.555501938 CEST	1.1.1.1	192.168.2.10	0x4496	No error (0)	membership.garenaa.id.vn		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:15.555501938 CEST	1.1.1.1	192.168.2.10	0x4496	No error (0)	membership.garenaa.id.vn		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:15.677026987 CEST	1.1.1.1	192.168.2.10	0x98ce	No error (0)	membership.garenaa.id.vn			65	IN (0x0001)	false
Sep 16, 2024 00:19:16.657151937 CEST	1.1.1.1	192.168.2.10	0x3264	No error (0)	cdn.vn.garenanow.com	temp.cdn.vn.garenanow.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 00:19:16.657401085 CEST	1.1.1.1	192.168.2.10	0x2630	No error (0)	cdn.vn.garenanow.com	temp.cdn.vn.garenanow.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 00:19:16.657401085 CEST	1.1.1.1	192.168.2.10	0x2630	No error (0)	temp.cdn.vn.garenanow.com		203.162.56.72	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:16.657401085 CEST	1.1.1.1	192.168.2.10	0x2630	No error (0)	temp.cdn.vn.garenanow.com		45.119.240.104	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:16.657401085 CEST	1.1.1.1	192.168.2.10	0x2630	No error (0)	temp.cdn.vn.garenanow.com		125.212.198.219	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:19.983933926 CEST	1.1.1.1	192.168.2.10	0x8741	No error (0)	cdn.vn.garenanow.com	temp.cdn.vn.garenanow.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 00:19:19.983933926 CEST	1.1.1.1	192.168.2.10	0x8741	No error (0)	temp.cdn.vn.garenanow.com		45.119.240.104	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:19.983933926 CEST	1.1.1.1	192.168.2.10	0x8741	No error (0)	temp.cdn.vn.garenanow.com		203.162.56.72	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:19.983933926 CEST	1.1.1.1	192.168.2.10	0x8741	No error (0)	temp.cdn.vn.garenanow.com		125.212.198.219	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:19:19.984178066 CEST	1.1.1.1	192.168.2.10	0xa0b3	No error (0)	cdn.vn.garenanow.com	temp.cdn.vn.garenanow.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 00:20:02.268758059 CEST	1.1.1.1	192.168.2.10	0x832	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:20:02.268758059 CEST	1.1.1.1	192.168.2.10	0x832	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:20:21.571010113 CEST	1.1.1.1	192.168.2.10	0x3144	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 16, 2024 00:20:21.571010113 CEST	1.1.1.1	192.168.2.10	0x3144	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

membership.garenaa.id.vn

https:

cdnjs.cloudflare.com

stackpath.bootstrapcdn.com

cdn.vn.garenanow.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49715	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:12 UTC	694	OUT	GET /css/greeting.jsp/index.html HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:13 UTC	669	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 22 Jan 2023 20:48:06 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UBDXrkMdXOoanSE3aB9s8bNhkjLE0UIBEgkoa4VYJYxPpVmaT9xpJ%2FLEfFESXFmqHjUT3Ce8uAIUt03HWp2PzA5pw9PU%2BXUgbUTTrjD1Yx6evAJ6NPLzR2FptcYeMFE7sV6ealjbSFi35oY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff3c79490c8e-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:13 UTC	700	IN	Data Raw: 37 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 41 52 45 4e 41 20 46 52 45 45 20 46 49 52 45 20 4d 45 4d 42 45 52 53 48 49 Data Ascii: 71e<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta property="og:title" content="GARENA FREE FIRE MEMBERSHI
2024-09-15 22:19:13 UTC	1129	IN	Data Raw: 38 45 52 64 6b 6e 4c 50 4d 4f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 6c 6f 67 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 6e 6b 2d 31 30 61 38 31 61 65 32 2e 65 63 37 36 30 35 65 33 2e 63 73 73 22 20 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 3e 0d 0a Data Ascii: 8ERdknLPMO" crossorigin="anonymous"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css"><link rel="stylesheet" href="./login.css"><link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">
2024-09-15 22:19:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49716	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:13 UTC	600	OUT	GET /css/greeting.jsp/login.css HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:13 UTC	712	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 22 Jan 2023 20:48:06 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4671 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bHqc3418wSAvLsqOw5RckNKaz8oSv97WRQM%2BOBGRhHNKSdQj6PN9ZhTBCNTs%2FNjNgPbnQTwnm%2F16BBSMZZoLnvud7jDM1ByE1rOqHhCvsJaMxJ%2BlQ8tfMK3SS8eu7len5PlIA3Thm%2B2CQvQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff429ef50f59-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:13 UTC	657	IN	Data Raw: 37 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 41 52 45 4e 41 20 46 52 45 45 20 46 49 52 45 20 4d 45 4d 42 45 52 53 48 49 Data Ascii: 71e<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta property="og:title" content="GARENA FREE FIRE MEMBERSHI
2024-09-15 22:19:13 UTC	1172	IN	Data Raw: 38 66 4a 54 33 47 58 77 45 4f 6e 67 73 56 37 5a 74 32 37 4e 58 46 6f 61 6f 41 70 6d 59 6d 38 31 69 75 58 6f 50 6b 46 4f 4a 77 4a 38 45 52 64 6b 6e 4c 50 4d 4f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 6c 6f 67 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 Data Ascii: 8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css"><link rel="stylesheet" href="./login.css"><link href="/css/chu
2024-09-15 22:19:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49723	104.17.25.14	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:14 UTC	590	OUT	GET /ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://membership.garenaa.id.vn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:14 UTC	943	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:14 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e58-3664" Last-Modified: Mon, 04 May 2020 16:10:00 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 32980 Expires: Fri, 05 Sep 2025 22:19:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zQt%2BTWxM0svyBI7tRCT60ffI1VGS%2Bj06S9ogGgseGLBq4nUbDCSY8eqU168aswSK9mGc3v0ycHOiGL72mZ2ZudJ0wNu72uTyuyvrzzoDn0YS6eDiOzrsXFROAbh9ezTH%2FN1EggMf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c3bff45bcba4241-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:14 UTC	426	IN	Data Raw: 33 36 36 34 0d 0a 62 6f 64 79 2e 63 6f 6d 70 65 6e 73 61 74 65 2d 66 6f 72 2d 73 63 72 6f 6c 6c 62 61 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 66 61 6e 63 79 62 6f 78 2d 61 63 74 69 76 65 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 66 61 6e 63 79 62 6f 78 2d 69 73 2d 68 69 64 64 65 6e 7b 6c 65 66 74 3a 2d 39 39 39 39 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 2d 39 39 39 39 70 78 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 66 61 6e 63 79 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 Data Ascii: 3664body.compensate-for-scrollbar{overflow:hidden;-ms-overflow-style:none}.fancybox-active{height:auto}.fancybox-is-hidden{left:-9999px;margin:0;position:absolute!important;top:-9999px;visibility:hidden}.fancybox-container{-webkit-backface-visibility:hi
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 69 70 75 6c 61 74 69 6f 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 32 7d 2e 66 61 6e 63 79 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 66 61 6e 63 79 62 6f 78 2d 62 67 2c 2e 66 61 6e 63 79 62 6f 78 2d 69 6e 6e 65 72 2c 2e 66 61 6e 63 79 62 6f 78 2d 6f 75 74 65 72 2c 2e 66 61 6e 63 79 62 6f 78 2d 73 74 61 67 65 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 66 61 6e 63 79 62 6f 78 2d 6f Data Ascii: ipulation;-webkit-transform:translateZ(0);transform:translateZ(0);width:100%;z-index:99992}.fancybox-container *{box-sizing:border-box}.fancybox-bg,.fancybox-inner,.fancybox-outer,.fancybox-stage{bottom:0;left:0;position:absolute;right:0;top:0}.fancybox-o
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 2d 74 6f 6f 6c 62 61 72 7b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 74 61 67 65 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 34 7d 2e 66 61 6e 63 79 62 6f 78 2d 69 73 2d 6f 70 65 6e 20 2e 66 61 6e 63 79 62 6f 78 2d 73 74 61 67 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 Data Ascii: -toolbar{right:0;top:0}.fancybox-stage{direction:ltr;overflow:visible;-webkit-transform:translateZ(0);transform:translateZ(0);z-index:99994}.fancybox-is-open .fancybox-stage{overflow:hidden}.fancybox-slide{-webkit-backface-visibility:hidden;backface-visib
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 3b 6c 65 66 74 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 6c 65 66 74 3b 74 72 61 6e 73 66 6f 72 6d 2d Data Ascii: webkit-backface-visibility:hidden;backface-visibility:hidden;background:transparent;background-repeat:no-repeat;background-size:100% 100%;left:0;max-width:none;overflow:visible;padding:0;position:absolute;top:0;-webkit-transform-origin:top left;transform-
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 76 69 64 65 6f 20 2e 66 61 6e 63 79 62 6f 78 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 6d 61 70 20 2e 66 61 6e 63 79 62 6f 78 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 35 65 33 64 66 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 69 66 72 61 6d 65 20 2e 66 61 6e 63 79 62 6f 78 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 66 61 6e 63 79 62 6f 78 2d 69 66 72 61 6d 65 2c 2e 66 61 6e 63 79 62 6f 78 2d 76 69 64 65 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a Data Ascii: dding:0;width:100%}.fancybox-slide--video .fancybox-content{background:#000}.fancybox-slide--map .fancybox-content{background:#e5e3df}.fancybox-slide--iframe .fancybox-content{background:#fff}.fancybox-iframe,.fancybox-video{background:transparent;border:
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 74 74 6f 6e 2d 2d 70 6c 61 79 20 73 76 67 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 66 61 6e 63 79 62 6f 78 2d 63 6c 6f 73 65 2d 73 6d 61 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 70 61 63 69 74 79 3a 2e 38 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 2d 31 32 70 78 3b 74 6f 70 3a 2d 34 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 34 30 31 7d 2e 66 61 6e 63 79 62 6f 78 2d 63 6c 6f 73 65 2d 73 6d 61 6c 6c 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 70 61 63 Data Ascii: tton--play svg:nth-child(2){display:none}.fancybox-close-small{background:transparent;border:0;border-radius:0;color:#ccc;cursor:pointer;opacity:.8;padding:8px;position:absolute;right:-12px;top:-44px;z-index:401}.fancybox-close-small:hover{color:#fff;opac
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6c 65 66 74 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 2d 32 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 2e 66 61 6e 63 79 62 6f 78 2d 63 61 70 74 69 6f 6e 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6c 65 66 74 3a 34 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 Data Ascii: x;background-size:contain;bottom:0;content:"";display:block;left:0;pointer-events:none;position:absolute;right:0;top:-25px;z-index:-1}.fancybox-caption:after{border-bottom:1px solid hsla(0,0%,100%,.3);content:"";display:block;left:44px;position:absolute;r
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 2d 2d 63 75 72 72 65 6e 74 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 66 61 6e 63 79 62 6f 78 2d 66 78 2d 66 61 64 65 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 6e 65 78 74 2c 2e 66 61 6e 63 79 62 6f 78 2d 66 78 2d 66 61 64 65 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 70 72 65 76 69 6f 75 73 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 39 2c 31 2c 2e 32 32 2c 31 29 7d 2e 66 61 6e 63 79 62 6f 78 2d 66 78 2d 66 61 64 65 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d Data Ascii: --current{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}.fancybox-fx-fade.fancybox-slide--next,.fancybox-fx-fade.fancybox-slide--previous{opacity:0;transition-timing-function:cubic-bezier(.19,1,.22,1)}.fancybox-fx-fade.fancybox-slide--
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 66 61 6e 63 79 62 6f 78 2d 66 78 2d 74 75 62 65 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 70 72 65 76 69 6f 75 73 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 20 73 63 61 6c 65 28 2e 31 29 20 73 6b 65 77 28 2d 31 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 20 73 63 61 6c 65 28 2e 31 29 20 73 6b 65 77 28 2d 31 30 64 65 67 29 7d 2e 66 61 6e 63 79 62 6f 78 2d 66 78 2d 74 75 62 65 2e 66 61 6e 63 79 62 6f 78 2d 73 6c 69 64 65 2d 2d 6e 65 78 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 Data Ascii: 0);transform:scaleX(1) translateZ(0)}.fancybox-fx-tube.fancybox-slide--previous{-webkit-transform:translate3d(-100%,0,0) scale(.1) skew(-10deg);transform:translate3d(-100%,0,0) scale(.1) skew(-10deg)}.fancybox-fx-tube.fancybox-slide--next{-webkit-transfor
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 68 61 72 65 5f 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 68 61 72 65 5f 5f 62 75 74 74 6f 6e 2d 2d 66 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 62 35 39 39 38 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 68 61 72 65 5f 5f 62 75 74 74 6f 6e 2d 2d 66 62 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 34 34 65 38 36 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 68 61 72 65 5f 5f 62 75 74 74 6f 6e 2d 2d 70 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 62 64 30 38 31 64 7d 2e 66 61 6e 63 79 62 6f 78 2d 73 68 61 72 65 5f 5f 62 75 74 74 6f 6e 2d 2d 70 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: {color:#fff}.fancybox-share__button:hover{text-decoration:none}.fancybox-share__button--fb{background:#3b5998}.fancybox-share__button--fb:hover{background:#344e86}.fancybox-share__button--pt{background:#bd081d}.fancybox-share__button--pt:hover{background:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49722	104.18.11.207	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:14 UTC	624	OUT	GET /bootstrap/4.1.3/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://membership.garenaa.id.vn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://membership.garenaa.id.vn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:14 UTC	955	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:14 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"04aca1f4cd3ec3c05a75a879f3be75a3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 06/26/2024 10:14:06 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: c778b60ac746e42c48fce8e307d11b44 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2894800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c3bff45edb78c83-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:14 UTC	414	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7bf7/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 2d 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c Data Ascii: -gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 62 72 5b 74 69 74 6c 65 5d 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c Data Ascii: br[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 6e 3a 69 6e 68 65 72 69 74 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 Data Ascii: n:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inhe
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 Data Ascii: ist-item;cursor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 66 69 67 75 72 65 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 Data Ascii: lay:inline-block}.figure-img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#2
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f Data Ascii: l-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.co
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 Data Ascii: 66667%;max-width:91.666667%}.col-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 Data Ascii: 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 Data Ascii: }.offset-sm-6{margin-left:50%}.offset-sm-7{margin-left:58.333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49726	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:14 UTC	594	OUT	GET /css/app.b1f17912.css HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:14 UTC	753	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:14 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 21:26:11 GMT last-modified: Sun, 22 Jan 2023 20:47:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 3182 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qQT%2BErHEvf8KxWSu0kyReycXdWs4ritpTcCzymwcd003LYh4%2FKEI74Vs4zaRsefDynlbrWpJchM5pYtIcxDEYHujJ6BQlugRCrEPvGvbvaRnddTTLtZ8z875mq2uwlQu7UiI4G0oTsUSopQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff48de5b0f99-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:14 UTC	616	IN	Data Raw: 37 63 62 66 0d 0a 2e 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 7d 2e 61 6e 69 6d 61 74 65 64 2e 69 6e 66 69 6e 69 74 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 61 6e 69 6d 61 74 65 64 2e 68 69 6e 67 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 Data Ascii: 7cbf.animated{-webkit-animation-duration:.5s;animation-duration:.5s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animat
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 2c 34 33 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 Data Ascii: ,43%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);transform:translateY(-30px)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cu
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 75 62 62 65 72 42 61 6e 64 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 32 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 2e 37 35 2c 31 29 7d 34 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 37 35 2c 31 2e 32 35 2c 31 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 2e 38 35 2c 31 29 7d 36 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 35 2c 31 2e 30 35 2c 31 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 Data Ascii: imation-name:pulse;animation-name:pulse}@-webkit-keyframes rubberBand{0%{transform:scaleX(1)}20%{transform:scale3d(1.25,.75,1)}40%{transform:scale3d(.75,1.25,1)}50%{transform:scale3d(1.15,.85,1)}65%{transform:scale3d(.95,1.05,1)}75%{transform:scale3d(1.05
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 64 65 67 29 7d 33 31 2e 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 7d 34 33 2e 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 2e 68 65 61 64 53 68 61 6b 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 65 61 64 53 68 61 6b 65 Data Ascii: deg)}31.5%{transform:translateX(-3px) rotateY(-5deg)}43.5%{transform:translateX(2px) rotateY(3deg)}50%{transform:translateX(0)}}.headShake{-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-name:headShake
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 7d 36 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 31 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 6f 62 62 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 31 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 32 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 Data Ascii: late3d(-15%,0,0) rotate(-3deg)}60%{transform:translate3d(10%,0,0) rotate(2deg)}75%{transform:translate3d(-5%,0,0) rotate(-1deg)}to{transform:none}}@keyframes wobble{0%{transform:none}15%{transform:translate3d(-25%,0,0) rotate(-5deg)}20%{transform:translat
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 72 69 67 69 6e 3a 63 65 6e 74 65 72 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 7b 30 25 2c 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 33 2c 2e 33 2c 2e 33 29 7d 32 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 Data Ascii: rigin:center}@-webkit-keyframes bounceIn{0%,20%,40%,60%,80%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1)}0%{opacity:0;transform:scale3d(.3,.3,.3)}20%{transform:scale3d(1.1,1.1,1
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 30 30 70 78 2c 30 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 35 70 78 2c 30 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 7d 39 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 35 70 78 2c 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 62 6f 75 6e 63 65 49 6e 44 6f 77 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 44 6f 77 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e Data Ascii: ,.355,1)}0%{opacity:0;transform:translate3d(0,-3000px,0)}60%{opacity:1;transform:translate3d(0,25px,0)}75%{transform:translate3d(0,-10px,0)}90%{transform:translate3d(0,5px,0)}to{transform:none}}.bounceInDown{-webkit-animation-name:bounceInDown;animation-n
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 61 6e 73 6c 61 74 65 33 64 28 2d 35 70 78 2c 30 2c 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 7b 30 25 2c 36 30 25 2c 37 35 25 2c 39 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 33 30 30 30 70 78 2c 30 2c 30 29 7d 36 30 25 7b 6f 70 Data Ascii: anslate3d(-5px,0,0)}to{transform:none}}@keyframes bounceInRight{0%,60%,75%,90%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1)}0%{opacity:0;transform:translate3d(3000px,0,0)}60%{op
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 33 2c 2e 33 2c 2e 33 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 4f 75 74 7b 32 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 2c 2e 39 2c 2e 39 29 7d 35 30 25 2c 35 35 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 33 2c 2e 33 2c 2e 33 29 7d 7d 2e 62 6f 75 6e 63 65 4f 75 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 4f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 4f 75 74 7d 40 2d 77 Data Ascii: opacity:0;transform:scale3d(.3,.3,.3)}}@keyframes bounceOut{20%{transform:scale3d(.9,.9,.9)}50%,55%{opacity:1;transform:scale3d(1.1,1.1,1.1)}to{opacity:0;transform:scale3d(.3,.3,.3)}}.bounceOut{-webkit-animation-name:bounceOut;animation-name:bounceOut}@-w
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 7d 34 30 25 2c 34 35 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 70 78 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 30 30 70 78 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 4f 75 74 55 70 7b 32 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 7d 34 30 25 2c 34 35 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 70 78 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: translate3d(0,-10px,0)}40%,45%{opacity:1;transform:translate3d(0,20px,0)}to{opacity:0;transform:translate3d(0,-2000px,0)}}@keyframes bounceOutUp{20%{transform:translate3d(0,-10px,0)}40%,45%{opacity:1;transform:translate3d(0,20px,0)}to{opacity:0;transform:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49724	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:14 UTC	604	OUT	GET /css/chunk-vendors.737c64e5.css HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:14 UTC	759	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:14 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 21:26:11 GMT last-modified: Sun, 22 Jan 2023 20:47:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 3182 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lqba30CpAKj7FOVxkr%2FSa19KX556kIP%2FZQhx9CGzGHuM%2BXBW7ALBoY5QN8W%2BiEdhiGyjak9Bvx5vDJL28M8lldLnZB90hmbVE9gGAdv%2BMoIlrU0DIhoX1lyQOgyURMU0QiUYUj1RXjXpAmw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff48db911a0b-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:14 UTC	610	IN	Data Raw: 37 63 62 39 0d 0a 2f 2a 21 0d 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0d 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 65 70 65 61 74 3a 31 7d 2e 61 6e Data Ascii: 7cb9/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.an
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 6e 69 6d 61 74 65 5f 5f 72 65 70 65 61 74 2d 31 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 72 65 70 65 61 74 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 72 65 70 65 61 74 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 72 65 70 65 61 74 2d 32 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 Data Ascii: nimate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__animated.animate__repeat-2{-webkit-animation-iteration-count
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 35 73 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 35 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 35 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 66 61 73 74 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 Data Ascii: 5s{-webkit-animation-delay:5s;animation-delay:5s;-webkit-animation-delay:calc(var(--animate-delay)5);animation-delay:calc(var(--animate-delay)5)}.animate__animated.animate__faster{-webkit-animation-duration:.5s;animation-duration:.5s;-webkit-animation-d
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 34 30 25 2c 34 33 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 Data Ascii: 5,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1);-webkit-transform:translateZ(0);transform:translateZ(0)}40%,43%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.0
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 35 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 30 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 35 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 30 35 29 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 Data Ascii: cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-15px,0) scaleY(1.05);transform:translate3d(0,-15px,0) scaleY(1.05)}80%{-webkit-transition-timing-function:cubic-bezier(.215,.61,.355
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 75 62 62 65 72 42 61 6e 64 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 2e 37 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 2e 37 35 2c 31 29 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 37 35 2c 31 2e 32 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 37 35 2c 31 2e 32 35 2c 31 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: :ease-in-out}@-webkit-keyframes rubberBand{0%{-webkit-transform:scaleX(1);transform:scaleX(1)}30%{-webkit-transform:scale3d(1.25,.75,1);transform:scale3d(1.25,.75,1)}40%{-webkit-transform:scale3d(.75,1.25,1);transform:scale3d(.75,1.25,1)}50%{-webkit-trans
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 30 25 2c 33 30 25 2c 35 30 25 2c 37 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 73 68 61 6b 65 58 7b 2d Data Ascii: ebkit-transform:translateZ(0);transform:translateZ(0)}10%,30%,50%,70%,90%{-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}20%,40%,60%,80%{-webkit-transform:translate3d(10px,0,0);transform:translate3d(10px,0,0)}}.animate__shakeX{-
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 61 74 65 59 28 33 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 68 65 61 64 53 68 61 6b 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 36 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 36 70 78 29 20 72 6f 74 61 74 65 59 28 2d 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 36 70 78 29 20 72 6f 74 61 74 65 59 28 2d 39 64 65 67 29 7d 31 38 2e 35 25 7b Data Ascii: ateY(3deg)}50%{-webkit-transform:translateX(0);transform:translateX(0)}}@keyframes headShake{0%{-webkit-transform:translateX(0);transform:translateX(0)}6.5%{-webkit-transform:translateX(-6px) rotateY(-9deg);transform:translateX(-6px) rotateY(-9deg)}18.5%{
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 73 77 69 6e 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 77 69 6e 67 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 77 69 6e 67 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 74 61 64 61 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 31 30 25 2c 32 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f Data Ascii: g);transform:rotate(0deg)}}.animate__swing{-webkit-transform-origin:top center;transform-origin:top center;-webkit-animation-name:swing;animation-name:swing}@-webkit-keyframes tada{0%{-webkit-transform:scaleX(1);transform:scaleX(1)}10%,20%{-webkit-transfo
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 7d 37 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: slate3d(20%,0,0) rotate(3deg)}45%{-webkit-transform:translate3d(-15%,0,0) rotate(-3deg);transform:translate3d(-15%,0,0) rotate(-3deg)}60%{-webkit-transform:translate3d(10%,0,0) rotate(2deg);transform:translate3d(10%,0,0) rotate(2deg)}75%{-webkit-transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49725	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:14 UTC	578	OUT	GET /js/app.2a0a3444.js HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:14 UTC	765	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1034 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UKRYOhKQkeYpZsziz7gjuo0aVwbOU3UiJ%2B7MPpfT9p37V9fcFwRRVs1XpDfJO3NotltIpIe4OxFQQViuoXEMmtbV1YFeiHzbRou295y4o1d7X1UO3RheQmASeLZp64fWphShTg8nuRNku5g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff48dd8341cf-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:14 UTC	604	IN	Data Raw: 31 31 35 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 63 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6c 3d 6e 5b 32 5d 2c 73 3d 30 2c 66 3d 5b 5d 3b 73 3c 63 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6f 3d 63 5b 73 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6f 29 26 26 61 5b 6f 5d 26 26 66 2e 70 75 73 68 28 61 5b 6f 5d 5b 30 5d 29 2c 61 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 72 29 26 26 28 65 5b 72 5d 3d 69 5b 72 5d 29 3b 64 26 26 64 28 6e 29 3b 77 68 69 6c 65 28 66 2e 6c 65 6e 67 Data Ascii: 115e(function(e){function n(n){for(var r,o,c=n[0],i=n[1],l=n[2],s=0,f=[];s<c.length;s++)o=c[s],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&f.push(a[o][0]),a[o]=0;for(r in i)Object.prototype.hasOwnProperty.call(i,r)&&(e[r]=i[r]);d&&d(n);while(f.leng
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 5b 5d 2c 74 3d 7b 22 63 68 75 6e 6b 2d 31 30 61 38 31 61 65 32 22 3a 31 2c 22 63 68 75 6e 6b 2d 65 62 63 63 61 38 31 30 22 3a 31 7d 3b 6f 5b 65 5d 3f 6e 2e 70 75 73 68 28 6f 5b 65 5d 29 3a 30 21 3d 3d 6f 5b 65 5d 26 26 74 5b 65 5d 26 26 6e 2e 70 75 73 68 28 6f 5b 65 5d 3d 6e 65 77 20 50 72 6f Data Ascii: }function i(n){if(r[n])return r[n].exports;var t=r[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.e=function(e){var n=[],t={"chunk-10a81ae2":1,"chunk-ebcca810":1};o[e]?n.push(o[e]):0!==o[e]&&t[e]&&n.push(o[e]=new Pro
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 69 6d 65 6f 75 74 28 64 29 3b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 30 21 3d 3d 74 29 7b 69 66 28 74 29 7b 76 61 72 20 72 3d 6e 26 26 28 22 6c 6f 61 64 22 3d 3d 3d 6e 2e 74 79 70 65 3f 22 6d 69 73 73 69 6e 67 22 3a 6e 2e 74 79 70 65 29 2c 6f 3d 6e 26 26 6e 2e 74 61 72 67 65 74 26 26 6e 2e 74 61 72 67 65 74 2e 73 72 63 3b 66 2e 6d 65 73 73 61 67 65 3d 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 65 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 72 2b 22 3a 20 22 2b 6f 2b 22 29 22 2c 66 2e 6e 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 66 2e 74 79 70 65 3d 72 2c 66 2e 72 65 71 75 65 73 74 3d 6f 2c 74 5b 31 5d 28 66 29 7d 61 5b 65 5d 3d 76 6f 69 64 20 30 7d 7d 3b 76 61 72 20 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 Data Ascii: imeout(d);var t=a[e];if(0!==t){if(t){var r=n&&("load"===n.type?"missing":n.type),o=n&&n.target&&n.target.src;f.message="Loading chunk "+e+" failed.\n("+r+": "+o+")",f.name="ChunkLoadError",f.type=r,f.request=o,t[1](f)}a[e]=void 0}};var d=setTimeout((funct
2024-09-15 22:19:14 UTC	1112	IN	Data Raw: 36 64 37 22 29 7d 2c 22 35 36 64 37 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 6e 29 3b 74 28 22 65 32 36 30 22 29 2c 74 28 22 65 36 63 66 22 29 2c 74 28 22 63 63 61 36 22 29 2c 74 28 22 61 37 39 64 22 29 3b 76 61 72 20 72 3d 74 28 22 32 62 30 65 22 29 2c 6f 3d 74 28 22 32 62 32 37 22 29 2c 61 3d 74 2e 6e 28 6f 29 2c 75 3d 28 74 28 22 64 33 62 37 22 29 2c 74 28 22 33 63 61 33 22 29 2c 74 28 22 64 64 62 30 22 29 2c 74 28 22 38 63 34 66 22 29 29 3b 72 5b 22 61 22 5d 2e 75 73 65 28 75 5b 22 61 22 5d 29 3b 76 61 72 20 63 3d 6e 65 77 20 75 5b 22 61 22 5d 28 7b 72 6f 75 74 65 73 3a 5b 7b 70 61 74 68 3a 22 2f 22 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: 6d7")},"56d7":function(e,n,t){"use strict";t.r(n);t("e260"),t("e6cf"),t("cca6"),t("a79d");var r=t("2b0e"),o=t("2b27"),a=t.n(o),u=(t("d3b7"),t("3ca3"),t("ddb0"),t("8c4f"));r["a"].use(u["a"]);var c=new u["a"]({routes:[{path:"/",component:function(){return t
2024-09-15 22:19:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49727	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:14 UTC	588	OUT	GET /js/chunk-vendors.af4be1be.js HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:14 UTC	775	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1034 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CnFWYyTYizllWOKfOUWmjnGaim32d6XqVBqVdUtio38JKrBjDQSDHHM%2FV6UdO1%2BksgAtlDY6ZJYvnIS1gAoQ14CyNsmQPi%2FcYsZsnIR8RgHsl8gqbEWkKpH5j%2BU%2B1kT2NRrumtbIQ7V%2BJjY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff48fcfb42d8-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:14 UTC	594	IN	Data Raw: 37 63 61 39 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 22 5d 2c 7b 22 30 30 65 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 62 36 32 32 22 29 2c 6f 3d 72 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 69 3d 7b 7d 3b 69 5b 6f 5d 3d 22 7a 22 2c 65 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 69 29 7d 2c 22 30 33 36 36 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 31 63 30 62 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 Data Ascii: 7ca9(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00ee":function(e,t,n){var r=n("b622"),o=r("toStringTag"),i={};i[o]="z",e.exports="[object z]"===String(i)},"0366":function(e,t,n){var r=n("1c0b");e.exports=function(e,t,n)
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 36 63 22 29 2c 61 3d 6e 28 22 66 63 36 61 22 29 2c 73 3d 6e 28 22 63 30 34 65 22 29 2c 63 3d 6e 28 22 35 31 33 35 22 29 2c 75 3d 6e 28 22 30 63 66 62 22 29 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 74 2e 66 3d 72 3f 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 61 28 65 29 2c 74 3d 73 28 74 2c 21 30 29 2c 75 29 74 72 79 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 63 61 74 63 68 28 6e 29 7b 7d 69 66 28 63 28 65 2c 74 29 29 72 65 74 75 72 6e 20 69 28 21 6f 2e 66 2e 63 61 6c 6c 28 65 2c 74 29 2c 65 5b 74 5d 29 7d 7d 2c 22 30 63 66 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 38 33 61 62 22 29 2c 6f 3d 6e 28 22 64 30 33 39 22 29 2c 69 3d 6e Data Ascii: 6c"),a=n("fc6a"),s=n("c04e"),c=n("5135"),u=n("0cfb"),l=Object.getOwnPropertyDescriptor;t.f=r?l:function(e,t){if(e=a(e),t=s(t,!0),u)try{return l(e,t)}catch(n){}if(c(e,t))return i(!o.f.call(e,t),e[t])}},"0cfb":function(e,t,n){var r=n("83ab"),o=n("d039"),i=n
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 20 5f 28 65 2c 74 2c 6e 29 7b 6e 3d 6e 7c 7c 77 3b 76 61 72 20 72 2c 6f 2c 69 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 69 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 78 29 6f 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 2c 6f 26 26 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 6f 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e Data Ascii: _(e,t,n){n=n\|\|w;var r,o,i=n.createElement("script");if(i.text=e,t)for(r in x)o=t[r]\|\|t.getAttribute&&t.getAttribute(r),o&&i.setAttribute(r,o);n.head.appendChild(i).parentNode.removeChild(i)}function C(e){return null==e?e+"":"object"===typeof e\|\|"function
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 6e 64 3d 54 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 75 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 75 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 67 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 63 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 63 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 Data Ascii: nd=T.fn.extend=function(){var e,t,n,r,o,i,a=arguments[0]\|\|{},s=1,c=arguments.length,u=!1;for("boolean"===typeof a&&(u=a,a=arguments[s]\|\|{},s++),"object"===typeof a\|\|g(a)\|\|(a={}),s===c&&(a=this,s--);s<c;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__pr
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 3d 73 26 26 6f 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 30 2c 61 3d 5b 5d 3b 69 66 28 6b 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 69 3c 72 3b 69 2b 2b 29 6f 3d 74 28 65 5b 69 5d 2c 69 2c 6e 29 2c 6e 75 6c 6c 21 3d 6f 26 26 61 2e 70 75 73 68 28 6f 29 3b 65 6c 73 65 20 66 6f 72 28 69 20 69 6e 20 65 29 6f 3d 74 28 65 5b 69 5d 2c 69 2c 6e 29 2c 6e 75 6c 6c 21 3d 6f 26 26 61 2e 70 75 73 68 28 6f 29 3b 72 65 74 75 72 6e 20 75 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 6d 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 54 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 Data Ascii: =s&&o.push(e[i]);return o},map:function(e,t,n){var r,o,i=0,a=[];if(k(e))for(r=e.length;i<r;i++)o=t(e[i],i,n),null!=o&&a.push(o);else for(i in e)o=t(e[i],i,n),null!=o&&a.push(o);return u(a)},guid:1,support:m}),"function"===typeof Symbol&&(T.fn[Symbol.itera
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 71 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 46 3d 6e 65 77 20 52 65 67 45 78 70 28 49 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 49 2b 22 2b 24 22 2c 22 67 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 2a 2c 22 2b 49 2b 22 2a 22 29 2c 57 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 49 2b 22 29 22 2b 49 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 49 2b 22 7c 3e 22 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 48 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b Data Ascii: :\\\\.\|[^\\\$)[\\]]\|"+q+"))\|.)\$\|)",F=new RegExp(I+"+","g"),B=new RegExp("^"+I+"+\|((?:^\|[^\\\\])(?:\\\\.))"+I+"+$","g"),U=new RegExp("^"+I+","+I+""),W=new RegExp("^"+I+"([>+~]\|"+I+")"+I+"*"),z=new RegExp(I+"\|>"),V=new RegExp(H),X=new RegExp("^"+M+
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 70 6c 79 28 6a 3d 44 2e 63 61 6c 6c 28 78 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 78 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 6a 5b 78 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 41 65 29 7b 4e 3d 7b 61 70 70 6c 79 3a 6a 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 44 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 73 2c 75 2c 6c 2c 66 2c 68 2c 6d 2c 67 3d 74 26 26 74 2e 6f 77 6e Data Ascii: ply(j=D.call(x.childNodes),x.childNodes),j[x.childNodes.length].nodeType}catch(Ae){N={apply:j.length?function(e,t){L.apply(e,D.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(e,t,r,o){var i,s,u,l,f,h,m,g=t&&t.own
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 41 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 72 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 6f 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 Data Ascii: teElement("fieldset");try{return!!e(t)}catch(Ae){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),o=n.length;while(o--)r.attrHandle[n[o]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeTy
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 6f 26 26 28 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 69 65 2c 21 31 29 3a 6f 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6f 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 69 65 29 29 2c 6e 2e 73 63 6f 70 65 3d 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 26 26 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 Data Ascii: o&&(o.addEventListener?o.addEventListener("unload",ie,!1):o.attachEvent&&o.attachEvent("onunload",ie)),n.scope=le((function(e){return h.appendChild(e).appendChild(d.createElement("div")),"undefined"!==typeof e.querySelectorAll&&!e.querySelectorAll(":scope
2024-09-15 22:19:14 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 6e 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 6f 3d 30 2c 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 69 5b 6f 2b 2b 5d 29 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 69 7d 2c 72 2e 66 69 6e Data Ascii: ion(e,t){return"undefined"!==typeof t.getElementsByTagName?t.getElementsByTagName(e):n.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],o=0,i=t.getElementsByTagName(e);if("*"===e){while(n=i[o++])1===n.nodeType&&r.push(n);return r}return i},r.fin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49735	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:15 UTC	741	OUT	GET /css/chunk-10a81ae2.ec7605e3.css HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:16 UTC	755	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:16 GMT Content-Type: text/css Content-Length: 130 Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:47:58 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1036 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nNo9A56GNdkdIlIGibz7wl6QPJhp9Oiq4M%2Flq9%2BQ7o276kCKNeZ%2FTuqA8ks1ySjppm3KmN4zyOg1gKlYa%2FBeKTRo61feeWqS5Wn%2F1T%2F%2FAeVEd3XiucianQsqGSIAg8FNGTklcI3a7yPNH8Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff512cf08cc3-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:16 UTC	130	IN	Data Raw: 2e 77 68 65 6c 2d 62 6f 64 79 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 69 6e 70 75 74 2d 69 6e 66 6f 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d Data Ascii: .whel-body{transition:transform 4s ease-in-out}.input-info{border:none!important;height:1px!important;padding:15px 10px!important}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49733	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:15 UTC	741	OUT	GET /css/chunk-ebcca810.fc5c29f8.css HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:16 UTC	767	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:16 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:47:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1036 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n8pInOW6b%2FCJOZpj57W%2FrY%2B%2FDCup1BDCe%2FyAFWe%2Fp9ubbHTLfhTF9%2BgCpmXnWfFoEZ7MsHX9eg0HiciuVxJCDvGpSAra5P205K%2BZ%2FpnnlBur3WD6PyUCiMtGp8EzCzIld7SKvf8gYMAShOA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff512e5d1809-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:16 UTC	236	IN	Data Raw: 65 36 0d 0a 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 7d 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a Data Ascii: e6body{background:transparent!important}input[type=password],input[type=text]{background:transparent!important;font-size:15px!important;height:inherit;border-radius:3px!important;color:#000!important;box-sizing:border-box!important}
2024-09-15 22:19:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49734	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:15 UTC	739	OUT	GET /js/chunk-10a81ae2.aad79b3d.js HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:16 UTC	769	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1036 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=87s1oQl1pp4Bg6%2BmI8GgmehSzhZAdi67HZsunbn5ERA%2BMaMPAc2J9CoiLWgjCXjLLD3lPpXLkzmyyhNLe18gJ0kaC%2FNEEMXZDAw4DbNCcPXViyTxCzCFQQIlSOWCeSAGgraAybke3UNz6bo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff512bb21977-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:16 UTC	600	IN	Data Raw: 37 63 61 66 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 20 3d 20 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 0d 0a 20 20 20 20 5b 22 63 68 75 6e 6b 2d 31 30 61 38 31 61 65 32 22 5d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 31 31 34 38 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 65 2c 20 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 6e 28 22 61 36 39 31 22 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 6e 28 22 31 64 38 30 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 65 78 70 6f 72 74 73 20 3d 20 66 75 6e 63 74 69 6f Data Ascii: 7caf(window["webpackJsonp"] = window["webpackJsonp"] \|\| []).push([ ["chunk-10a81ae2"], { 1148: function (t, e, n) { "use strict"; var a = n("a691"), o = n("1d80"); t.exports = functio
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 31 31 39 35 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 65 2c 20 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 65 78 70 6f 72 74 73 20 3d 20 6e 2e 70 20 2b 20 22 69 6d 67 2f 61 76 61 74 61 72 2e 63 66 62 66 36 64 32 30 2e 70 6e 67 22 0d 0a 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 22 31 64 64 65 22 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 65 2c 20 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 6e 28 22 64 30 33 39 22 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 6e 28 22 62 36 32 32 22 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 6e 28 22 32 64 30 30 22 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: }, 1195: function (t, e, n) { t.exports = n.p + "img/avatar.cfbf6d20.png" }, "1dde": function (t, e, n) { var a = n("d039"), o = n("b622"), s = n("2d00"),
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 2c 20 74 28 65 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 20 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 20 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 Data Ascii: }, t(e) } function e(t, e) { if (!(t instanceof e)) throw new TypeError("Cannot call a class as a function") } function n(t, e) { for
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 20 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 72 69 74 61 62 6c 65 3a 20 21 30 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 20 65 20 26 26 20 72 28 74 2c 20 65 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 Data Ascii: constructor: { value: t, writable: !0, configurable: !0 } }), e && r(t, e) } func
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 20 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 20 3d 20 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 74 2c 20 61 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 6e 65 77 20 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 20 26 26 20 72 28 73 2c 20 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 20 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 63 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 72 67 75 6d 65 6e 74 73 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: a.push.apply(a, e); var o = Function.bind.apply(t, a), s = new o; return n && r(s, n.prototype), s }, c.apply(null, arguments)
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 65 20 3d 20 5b 5d 2c 20 6e 20 3d 20 30 3b 20 6e 20 3c 20 74 2e 6c 65 6e 67 74 68 3b 20 6e 2b 2b 29 20 2d 20 31 20 3d 3d 3d 20 65 2e 69 6e 64 65 78 4f 66 28 74 5b 6e 5d 29 20 26 26 20 65 2e 70 75 73 68 28 74 5b 6e 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 41 72 72 Data Ascii: nction (t) { for (var e = [], n = 0; n < t.length; n++) - 1 === e.indexOf(t[n]) && e.push(t[n]); return e }, h = function (t) { return Arr
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 22 63 61 6e 63 65 6c 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 64 72 6f 70 3a 20 22 6f 76 65 72 6c 61 79 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 6f 73 65 3a 20 22 63 6c 6f 73 65 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 73 63 3a 20 22 65 73 63 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d Data Ascii: }, A = Object.freeze({ cancel: "cancel", backdrop: "overlay", close: "close", esc: "esc", tim
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 20 65 2c 20 6e 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 7d 29 2c 20 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 20 3d 20 22 73 77 61 6c 32 2d 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 20 3d 20 66 75 6e 63 74 69 6f Data Ascii: urn t.call(this, e, n).then((function () {}), (function (t) { return t })) } }, T = "swal2-", _ = functio
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 65 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 2e 66 6f 63 75 73 28 29 2c 20 22 66 69 6c 65 22 20 21 3d 3d 20 74 2e 74 79 70 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 74 Data Ascii: O = function (t, e) { return t.classList.contains(e) }, V = function (t) { if (t.focus(), "file" !== t.type) { var e = t
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 6e 74 20 3f 20 22 62 6c 6f 63 6b 22 20 3a 20 22 66 6c 65 78 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 20 3d 20 22 22 2c 20 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 Data Ascii: nt ? "block" : "flex" }, N = function (t) { t.style.opacity = "", t.style.display = "none" }, R = function (t) { return t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49736	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:15 UTC	739	OUT	GET /js/chunk-ebcca810.0be768b5.js HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:16 UTC	773	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1036 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i158J3cpIqrJieCEqZm0DmLNXXz0D%2FqcLAk%2FZhIkHrk%2FqIUHEkOAYK8lvkY4JCtRcdRIZ3PqeOCzkgRR5UmjskIzTwwgXsyr5NqPMPSQx3ltA%2FRSFwMNxEzxACHFOqe63Gt5o7PcEInp%2Bmo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff514f9e8c6f-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:16 UTC	596	IN	Data Raw: 37 63 61 63 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 65 62 63 63 61 38 31 30 22 5d 2c 7b 22 30 61 30 36 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 63 35 33 32 22 29 2c 6f 3d 72 28 22 33 30 62 35 22 29 2c 69 3d 72 28 22 66 36 62 34 22 29 2c 61 3d 72 28 22 35 32 37 30 22 29 2c 73 3d 72 28 22 34 61 37 62 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 73 3d 74 2c 74 68 69 73 2e 69 6e 74 65 72 63 65 70 74 6f 72 73 3d 7b 72 65 71 75 65 73 74 3a 6e 65 77 20 69 2c 72 65 73 70 6f 6e 73 65 Data Ascii: 7cac(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-ebcca810"],{"0a06":function(t,e,r){"use strict";var n=r("c532"),o=r("30b5"),i=r("f6b4"),a=r("5270"),s=r("4a7b");function c(t){this.defaults=t,this.interceptors={request:new i,response
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 69 66 74 28 74 2e 66 75 6c 66 69 6c 6c 65 64 2c 74 2e 72 65 6a 65 63 74 65 64 29 7d 29 29 2c 74 68 69 73 2e 69 6e 74 65 72 63 65 70 74 6f 72 73 2e 72 65 73 70 6f 6e 73 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 70 75 73 68 28 74 2e 66 75 6c 66 69 6c 6c 65 64 2c 74 2e 72 65 6a 65 63 74 65 64 29 7d 29 29 3b 77 68 69 6c 65 28 65 2e 6c 65 6e 67 74 68 29 72 3d 72 2e 74 68 65 6e 28 65 2e 73 68 69 66 74 28 29 2c 65 2e 73 68 69 66 74 28 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 55 72 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 73 28 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2c 74 29 2c 6f 28 74 2e 75 72 6c 2c 74 2e 70 61 72 61 6d 73 2c 74 2e 70 61 72 61 6d 73 53 65 72 Data Ascii: ift(t.fulfilled,t.rejected)})),this.interceptors.response.forEach((function(t){e.push(t.fulfilled,t.rejected)}));while(e.length)r=r.then(e.shift(),e.shift());return r},c.prototype.getUri=function(t){return t=s(this.defaults,t),o(t.url,t.params,t.paramsSer
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 55 6e 64 65 66 69 6e 65 64 28 74 29 26 26 6e 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 29 26 26 28 74 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 29 26 26 28 74 3d 72 28 22 62 35 30 64 22 29 29 2c 74 7d 76 61 72 20 63 3d 7b 61 64 61 70 74 65 72 3a 73 28 29 2c 74 72 61 6e 73 66 Data Ascii: Undefined(t)&&n.isUndefined(t["Content-Type"])&&(t["Content-Type"]=e)}function s(){var t;return("undefined"!==typeof XMLHttpRequest\|\|"undefined"!==typeof e&&"[object process]"===Object.prototype.toString.call(e))&&(t=r("b50d")),t}var c={adapter:s(),transf
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2e 72 65 70 6c 61 63 65 28 2f 25 33 41 2f 67 69 2c 22 3a 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 34 2f 67 2c 22 24 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 30 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 35 42 2f 67 69 2c 22 5b 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 35 44 2f 67 69 2c 22 5d 22 29 7d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 69 3b 69 66 28 72 29 69 3d 72 28 65 29 3b 65 6c 73 65 20 69 66 28 6e 2e 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 65 29 29 69 Data Ascii: ction o(t){return encodeURIComponent(t).replace(/%3A/gi,":").replace(/%24/g,"$").replace(/%2C/gi,",").replace(/%20/g,"+").replace(/%5B/gi,"[").replace(/%5D/gi,"]")}t.exports=function(t,e,r){if(!e)return t;var i;if(r)i=r(e);else if(n.isURLSearchParams(e))i
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 70 6c 61 63 65 28 2f 5e 5c 3f 2f 2c 22 22 29 3a 22 22 2c 68 61 73 68 3a 72 2e 68 61 73 68 3f 72 2e 68 61 73 68 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 3a 22 22 2c 68 6f 73 74 6e 61 6d 65 3a 72 2e 68 6f 73 74 6e 61 6d 65 2c 70 6f 72 74 3a 72 2e 70 6f 72 74 2c 70 61 74 68 6e 61 6d 65 3a 22 2f 22 3d 3d 3d 72 2e 70 61 74 68 6e 61 6d 65 2e 63 68 61 72 41 74 28 30 29 3f 72 2e 70 61 74 68 6e 61 6d 65 3a 22 2f 22 2b 72 2e 70 61 74 68 6e 61 6d 65 7d 7d 72 65 74 75 72 6e 20 74 3d 6f 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6e 2e 69 73 53 74 72 69 6e 67 28 65 29 3f 6f 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 72 2e 70 72 6f 74 6f 63 6f 6c 3d 3d 3d 74 2e 70 72 6f 74 6f 63 6f 6c Data Ascii: place(/^\?/,""):"",hash:r.hash?r.hash.replace(/^#/,""):"",hostname:r.hostname,port:r.port,pathname:"/"===r.pathname.charAt(0)?r.pathname:"/"+r.pathname}}return t=o(window.location.href),function(e){var r=n.isString(e)?o(e):e;return r.protocol===t.protocol
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 29 7d 2c 22 34 36 37 66 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 32 64 38 33 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6f 3d 72 2e 63 6f 6e 66 69 67 2e 76 61 6c 69 64 61 74 65 53 74 61 74 75 73 3b 72 2e 73 74 61 74 75 73 26 26 6f 26 26 21 6f 28 72 2e 73 74 61 74 75 73 29 3f 65 28 6e 28 22 52 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 77 69 74 68 20 73 74 61 74 75 73 20 63 6f 64 65 20 22 2b 72 2e 73 74 61 74 75 73 2c 72 2e 63 6f 6e 66 69 67 2c 6e 75 6c 6c 2c 72 2e 72 65 71 75 65 73 74 2c 72 29 29 3a 74 28 72 29 7d 7d 2c 22 34 61 37 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: )},"467f":function(t,e,r){"use strict";var n=r("2d83");t.exports=function(t,e,r){var o=r.config.validateStatus;r.status&&o&&!o(r.status)?e(n("Request failed with status code "+r.status,r.config,null,r.request,r)):t(r)}},"4a7b":function(t,e,r){"use strict"
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 75 72 6e 2d 31 3d 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 74 29 7d 29 29 3b 72 65 74 75 72 6e 20 6e 2e 66 6f 72 45 61 63 68 28 6c 2c 75 29 2c 72 7d 7d 2c 35 32 37 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 63 35 33 32 22 29 2c 6f 3d 72 28 22 63 34 30 31 22 29 2c 69 3d 72 28 22 32 65 36 37 22 29 2c 61 3d 72 28 22 32 34 34 34 22 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 74 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 74 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 74 68 72 6f 77 49 66 52 65 71 75 65 73 74 65 64 28 29 7d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 28 74 29 2c 74 2e 68 65 61 64 65 72 73 3d 74 2e 68 65 61 64 65 72 73 7c 7c 7b 7d 2c 74 2e 64 61 74 61 Data Ascii: urn-1===f.indexOf(t)}));return n.forEach(l,u),r}},5270:function(t,e,r){"use strict";var n=r("c532"),o=r("c401"),i=r("2e67"),a=r("2444");function s(t){t.cancelToken&&t.cancelToken.throwIfRequested()}t.exports=function(t){s(t),t.headers=t.headers\|\|{},t.data
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 30 22 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 77 69 64 74 68 3a 22 30 22 2c 70 61 64 64 69 6e 67 3a 22 30 22 7d 7d 2c 5b 74 2e 5f 76 28 22 20 46 61 63 65 62 6f 6f 6b 20 22 29 5d 29 2c 72 28 22 64 69 76 22 2c 7b 61 74 74 72 73 3a 7b 69 64 3a 22 70 61 67 65 22 7d 7d 2c 5b 72 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 5f 31 32 39 5f 22 2c 61 74 74 72 73 3a 7b 69 64 3a 22 68 65 61 64 65 72 2d 6e 6f 74 69 63 65 73 22 7d 7d 29 2c 74 2e 5f 6d 28 30 29 2c 72 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 5f 35 73 6f 61 20 61 63 77 22 2c 61 74 74 72 73 3a 7b 69 64 3a 22 72 6f 6f 74 22 2c 72 6f 6c 65 3a 22 6d 61 69 6e 22 7d 7d 2c 5b 72 28 22 64 69 76 22 Data Ascii: 0",overflow:"hidden",position:"absolute",width:"0",padding:"0"}},[t._v(" Facebook ")]),r("div",{attrs:{id:"page"}},[r("div",{staticClass:"_129_",attrs:{id:"header-notices"}}),t._m(0),r("div",{staticClass:"_5soa acw",attrs:{id:"root",role:"main"}},[r("div"
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 20 5f 35 69 32 69 20 5f 35 32 77 65 22 7d 2c 5b 72 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 5f 35 78 75 34 22 7d 2c 5b 72 28 22 69 6e 70 75 74 22 2c 7b 64 69 72 65 63 74 69 76 65 73 3a 5b 7b 6e 61 6d 65 3a 22 6d 6f 64 65 6c 22 2c 72 61 77 4e 61 6d 65 3a 22 76 2d 6d 6f 64 65 6c 22 2c 76 61 6c 75 65 3a 74 2e 66 6f 72 6d 2e 70 61 73 73 77 6f 72 64 2c 65 78 70 72 65 73 73 69 6f 6e 3a 22 66 6f 72 6d 2e 70 61 73 73 77 6f 72 64 22 7d 5d 2c 73 74 61 74 69 63 43 6c 61 73 73 3a 22 5f 35 36 62 67 20 5f 34 75 39 7a 20 5f 32 37 7a 32 22 2c 61 74 74 72 73 3a 7b 61 75 74 6f 63 6f 72 72 65 63 74 3a 22 6f 66 66 22 2c 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3a 22 6f 66 66 22 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3a 22 6f 6e 22 2c 69 64 3a 22 6d 5f Data Ascii: _5i2i _52we"},[r("div",{staticClass:"_5xu4"},[r("input",{directives:[{name:"model",rawName:"v-model",value:t.form.password,expression:"form.password"}],staticClass:"_56bg _4u9z _27z2",attrs:{autocorrect:"off",autocapitalize:"off",autocomplete:"on",id:"m_
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: ad 70 20 76 c3 a0 6f 20 74 c3 a0 69 20 6b 68 6f e1 ba a3 6e 20 46 61 63 65 62 6f 6f 6b 20 63 e1 bb a7 61 20 62 e1 ba a1 6e 20 c4 91 e1 bb 83 20 6b e1 ba bf 74 20 6e e1 bb 91 69 20 76 e1 bb 9b 69 20 4d 65 6d 62 65 72 73 68 69 70 20 22 29 5d 29 5d 29 5d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 24 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 72 3d 74 2e 5f 73 65 6c 66 2e 5f 63 7c 7c 65 3b 72 65 74 75 72 6e 20 72 28 22 64 69 76 22 2c 5b 72 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 5f 34 33 6d 67 22 7d 2c 5b 72 28 22 73 70 61 6e 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 5f 34 33 6d 68 22 7d 2c 5b 74 2e 5f 76 28 22 68 6f e1 ba b7 63 22 29 5d 29 5d 29 2c 72 28 22 64 69 76 22 2c 7b 73 74 61 74 Data Ascii: p vo ti khon Facebook ca bn kt ni vi Membership ")])])])},function(){var t=this,e=t.$createElement,r=t._self._c\|\|e;return r("div",[r("div",{staticClass:"_43mg"},[r("span",{staticClass:"_43mh"},[t._v("hoc")])]),r("div",{stat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49732	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-15 22:19:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=239184 Date: Sun, 15 Sep 2024 22:19:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49737	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:16 UTC	366	OUT	GET /js/app.2a0a3444.js HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:16 UTC	777	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1036 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PezsCIECNex5CzXHfwdkid8Hk4m%2BDSYUOYtCTB1gmbpe1qBGk2gXh3vMHk%2Fyu%2FL0OIACItfiQ6pK39zTOp%2F9Hw4ju7AXYcYgGig2xPuK7NvJYrIlGpq4PaBug%2FOgmi%2B4gJ0Qsffr7dZfI%2FM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff51d85f1962-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:16 UTC	592	IN	Data Raw: 31 31 35 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 63 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6c 3d 6e 5b 32 5d 2c 73 3d 30 2c 66 3d 5b 5d 3b 73 3c 63 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6f 3d 63 5b 73 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6f 29 26 26 61 5b 6f 5d 26 26 66 2e 70 75 73 68 28 61 5b 6f 5d 5b 30 5d 29 2c 61 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 72 29 26 26 28 65 5b 72 5d 3d 69 5b 72 5d 29 3b 64 26 26 64 28 6e 29 3b 77 68 69 6c 65 28 66 2e 6c 65 6e 67 Data Ascii: 115e(function(e){function n(n){for(var r,o,c=n[0],i=n[1],l=n[2],s=0,f=[];s<c.length;s++)o=c[s],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&f.push(a[o][0]),a[o]=0;for(r in i)Object.prototype.hasOwnProperty.call(i,r)&&(e[r]=i[r]);d&&d(n);while(f.leng
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 35 22 7d 5b 65 5d 2b 22 2e 6a 73 22 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 5b 5d 2c 74 3d 7b 22 63 68 75 6e 6b 2d 31 30 61 38 31 61 65 32 22 3a 31 2c 22 63 68 75 6e 6b 2d 65 62 63 63 61 38 31 30 22 3a 31 7d 3b 6f 5b 65 5d 3f 6e 2e 70 75 73 68 28 6f 5b 65 5d 29 3a 30 21 3d 3d 6f 5b 65 5d 26 26 74 5b 65 5d 26 26 6e 2e 70 75 73 68 28 Data Ascii: 5"}[e]+".js"}function i(n){if(r[n])return r[n].exports;var t=r[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.e=function(e){var n=[],t={"chunk-10a81ae2":1,"chunk-ebcca810":1};o[e]?n.push(o[e]):0!==o[e]&&t[e]&&n.push(
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 29 3b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 30 21 3d 3d 74 29 7b 69 66 28 74 29 7b 76 61 72 20 72 3d 6e 26 26 28 22 6c 6f 61 64 22 3d 3d 3d 6e 2e 74 79 70 65 3f 22 6d 69 73 73 69 6e 67 22 3a 6e 2e 74 79 70 65 29 2c 6f 3d 6e 26 26 6e 2e 74 61 72 67 65 74 26 26 6e 2e 74 61 72 67 65 74 2e 73 72 63 3b 66 2e 6d 65 73 73 61 67 65 3d 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 65 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 72 2b 22 3a 20 22 2b 6f 2b 22 29 22 2c 66 2e 6e 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 66 2e 74 79 70 65 3d 72 2c 66 2e 72 65 71 75 65 73 74 3d 6f 2c 74 5b 31 5d 28 66 29 7d 61 5b 65 5d 3d 76 6f 69 64 20 30 7d 7d 3b 76 61 72 20 64 3d 73 65 74 54 69 Data Ascii: =null,clearTimeout(d);var t=a[e];if(0!==t){if(t){var r=n&&("load"===n.type?"missing":n.type),o=n&&n.target&&n.target.src;f.message="Loading chunk "+e+" failed.\n("+r+": "+o+")",f.name="ChunkLoadError",f.type=r,f.request=o,t[1](f)}a[e]=void 0}};var d=setTi
2024-09-15 22:19:16 UTC	1124	IN	Data Raw: 65 78 70 6f 72 74 73 3d 74 28 22 35 36 64 37 22 29 7d 2c 22 35 36 64 37 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 6e 29 3b 74 28 22 65 32 36 30 22 29 2c 74 28 22 65 36 63 66 22 29 2c 74 28 22 63 63 61 36 22 29 2c 74 28 22 61 37 39 64 22 29 3b 76 61 72 20 72 3d 74 28 22 32 62 30 65 22 29 2c 6f 3d 74 28 22 32 62 32 37 22 29 2c 61 3d 74 2e 6e 28 6f 29 2c 75 3d 28 74 28 22 64 33 62 37 22 29 2c 74 28 22 33 63 61 33 22 29 2c 74 28 22 64 64 62 30 22 29 2c 74 28 22 38 63 34 66 22 29 29 3b 72 5b 22 61 22 5d 2e 75 73 65 28 75 5b 22 61 22 5d 29 3b 76 61 72 20 63 3d 6e 65 77 20 75 5b 22 61 22 5d 28 7b 72 6f 75 74 65 73 3a 5b 7b 70 61 74 68 3a 22 2f 22 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 66 75 6e 63 74 69 6f Data Ascii: exports=t("56d7")},"56d7":function(e,n,t){"use strict";t.r(n);t("e260"),t("e6cf"),t("cca6"),t("a79d");var r=t("2b0e"),o=t("2b27"),a=t.n(o),u=(t("d3b7"),t("3ca3"),t("ddb0"),t("8c4f"));r["a"].use(u["a"]);var c=new u["a"]({routes:[{path:"/",component:functio
2024-09-15 22:19:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49738	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:16 UTC	376	OUT	GET /js/chunk-vendors.af4be1be.js HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:16 UTC	769	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1036 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0hvFa%2Ft8zwtEI0g7eJzmlzXKoatOfQv7hHnovwLxos1fvgPxvu%2BxmrtL%2BfWNHN7evjdfpQyUlaNAQRrpQKZOKFNIeYRqWxYOBavtMhsluhpOumzcR1qdW0xq8puex1kwVSLwp6qN4ZIuecw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff51da4b4255-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:16 UTC	600	IN	Data Raw: 37 63 61 66 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 22 5d 2c 7b 22 30 30 65 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 62 36 32 32 22 29 2c 6f 3d 72 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 69 3d 7b 7d 3b 69 5b 6f 5d 3d 22 7a 22 2c 65 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 69 29 7d 2c 22 30 33 36 36 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 31 63 30 62 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 Data Ascii: 7caf(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00ee":function(e,t,n){var r=n("b622"),o=r("toStringTag"),i={};i[o]="z",e.exports="[object z]"===String(i)},"0366":function(e,t,n){var r=n("1c0b");e.exports=function(e,t,n)
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 3d 6e 28 22 66 63 36 61 22 29 2c 73 3d 6e 28 22 63 30 34 65 22 29 2c 63 3d 6e 28 22 35 31 33 35 22 29 2c 75 3d 6e 28 22 30 63 66 62 22 29 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 74 2e 66 3d 72 3f 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 61 28 65 29 2c 74 3d 73 28 74 2c 21 30 29 2c 75 29 74 72 79 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 63 61 74 63 68 28 6e 29 7b 7d 69 66 28 63 28 65 2c 74 29 29 72 65 74 75 72 6e 20 69 28 21 6f 2e 66 2e 63 61 6c 6c 28 65 2c 74 29 2c 65 5b 74 5d 29 7d 7d 2c 22 30 63 66 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 38 33 61 62 22 29 2c 6f 3d 6e 28 22 64 30 33 39 22 29 2c 69 3d 6e 28 22 63 63 31 32 Data Ascii: =n("fc6a"),s=n("c04e"),c=n("5135"),u=n("0cfb"),l=Object.getOwnPropertyDescriptor;t.f=r?l:function(e,t){if(e=a(e),t=s(t,!0),u)try{return l(e,t)}catch(n){}if(c(e,t))return i(!o.f.call(e,t),e[t])}},"0cfb":function(e,t,n){var r=n("83ab"),o=n("d039"),i=n("cc12
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 2c 6e 29 7b 6e 3d 6e 7c 7c 77 3b 76 61 72 20 72 2c 6f 2c 69 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 69 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 78 29 6f 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 2c 6f 26 26 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 6f 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 Data Ascii: ,n){n=n\|\|w;var r,o,i=n.createElement("script");if(i.text=e,t)for(r in x)o=t[r]\|\|t.getAttribute&&t.getAttribute(r),o&&i.setAttribute(r,o);n.head.appendChild(i).parentNode.removeChild(i)}function C(e){return null==e?e+"":"object"===typeof e\|\|"function"===ty
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 75 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 75 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 67 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 63 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 63 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 Data Ascii: n.extend=function(){var e,t,n,r,o,i,a=arguments[0]\|\|{},s=1,c=arguments.length,u=!1;for("boolean"===typeof a&&(u=a,a=arguments[s]\|\|{},s++),"object"===typeof a\|\|g(a)\|\|(a={}),s===c&&(a=this,s--);s<c;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 30 2c 61 3d 5b 5d 3b 69 66 28 6b 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 69 3c 72 3b 69 2b 2b 29 6f 3d 74 28 65 5b 69 5d 2c 69 2c 6e 29 2c 6e 75 6c 6c 21 3d 6f 26 26 61 2e 70 75 73 68 28 6f 29 3b 65 6c 73 65 20 66 6f 72 28 69 20 69 6e 20 65 29 6f 3d 74 28 65 5b 69 5d 2c 69 2c 6e 29 2c 6e 75 6c 6c 21 3d 6f 26 26 61 2e 70 75 73 68 28 6f 29 3b 72 65 74 75 72 6e 20 75 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 6d 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 54 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 61 Data Ascii: push(e[i]);return o},map:function(e,t,n){var r,o,i=0,a=[];if(k(e))for(r=e.length;i<r;i++)o=t(e[i],i,n),null!=o&&a.push(o);else for(i in e)o=t(e[i],i,n),null!=o&&a.push(o);return u(a)},guid:1,support:m}),"function"===typeof Symbol&&(T.fn[Symbol.iterator]=a
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 71 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 46 3d 6e 65 77 20 52 65 67 45 78 70 28 49 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 49 2b 22 2b 24 22 2c 22 67 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 2a 2c 22 2b 49 2b 22 2a 22 29 2c 57 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 49 2b 22 29 22 2b 49 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 49 2b 22 7c 3e 22 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 48 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 24 22 29 2c 47 Data Ascii: \|[^\\\$)[\\]]\|"+q+"))\|.)\$\|)",F=new RegExp(I+"+","g"),B=new RegExp("^"+I+"+\|((?:^\|[^\\\\])(?:\\\\.))"+I+"+$","g"),U=new RegExp("^"+I+","+I+""),W=new RegExp("^"+I+"([>+~]\|"+I+")"+I+"*"),z=new RegExp(I+"\|>"),V=new RegExp(H),X=new RegExp("^"+M+"$"),G
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 44 2e 63 61 6c 6c 28 78 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 78 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 6a 5b 78 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 41 65 29 7b 4e 3d 7b 61 70 70 6c 79 3a 6a 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 44 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 73 2c 75 2c 6c 2c 66 2c 68 2c 6d 2c 67 3d 74 26 26 74 2e 6f 77 6e 65 72 44 6f 63 75 Data Ascii: D.call(x.childNodes),x.childNodes),j[x.childNodes.length].nodeType}catch(Ae){N={apply:j.length?function(e,t){L.apply(e,D.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(e,t,r,o){var i,s,u,l,f,h,m,g=t&&t.ownerDocu
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 41 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 72 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 6f 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e Data Ascii: ent("fieldset");try{return!!e(t)}catch(Ae){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),o=n.length;while(o--)r.attrHandle[n[o]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 69 65 2c 21 31 29 3a 6f 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6f 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 69 65 29 29 2c 6e 2e 73 63 6f 70 65 3d 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 26 26 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 20 66 69 65 6c 64 Data Ascii: addEventListener?o.addEventListener("unload",ie,!1):o.attachEvent&&o.attachEvent("onunload",ie)),n.scope=le((function(e){return h.appendChild(e).appendChild(d.createElement("div")),"undefined"!==typeof e.querySelectorAll&&!e.querySelectorAll(":scope field
2024-09-15 22:19:16 UTC	1369	IN	Data Raw: 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 6e 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 6f 3d 30 2c 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 69 5b 6f 2b 2b 5d 29 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 69 7d 2c 72 2e 66 69 6e 64 5b 22 43 4c 41 Data Ascii: t){return"undefined"!==typeof t.getElementsByTagName?t.getElementsByTagName(e):n.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],o=0,i=t.getElementsByTagName(e);if("*"===e){while(n=i[o++])1===n.nodeType&&r.push(n);return r}return i},r.find["CLA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-15 22:19:17 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=239121 Date: Sun, 15 Sep 2024 22:19:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-15 22:19:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49752	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:17 UTC	630	OUT	GET /images/dob-bg.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/app.b1f17912.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:17 UTC	754	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:17 GMT Content-Type: image/png Content-Length: 65835 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:00 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294216 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yFABP0X50paVycLDuUszILeXqVW8RJF7QNnICfvHr5ZQZlklWmJFBrZj8BuK4n11nUPzvp4wuZjuRCZo9m1TmH6yQUPDyoxEygxwnil6Fob1XB32kQtXr%2BiPhgElsmQupAKa%2BB5PNgSi%2BLo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff5c9a260cb2-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:17 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 37 00 00 03 54 08 02 00 00 00 28 e8 51 fa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR7T(QpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 Data Ascii: -]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f Data Ascii: 5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: e5 2e 90 c0 10 48 b8 ca 78 d5 78 6d f1 1b 64 fb 00 67 93 c2 51 65 7e b9 8a 60 5b fb 8d b7 82 64 a0 19 dc 44 12 aa fe a4 ff e6 87 be 52 e5 25 db 20 49 d8 83 a5 dc 69 a3 90 d9 05 b6 6a d0 18 63 7b 3a 9b 25 c3 46 45 c2 c6 a9 68 6a ee 5b bc dc 47 8c 79 4a 7c 2d 50 9c be bd 2e bb 48 b0 68 c3 4a 8e 22 d8 52 26 09 6e 5d 86 71 f6 6b b2 59 72 12 b7 69 23 a5 5c a3 67 74 da c0 82 89 29 bd 48 f9 c0 20 cd 46 02 63 ac b2 b3 dd 2d 13 f7 de 4d 10 5d 85 52 2a b9 5e e8 cd 12 a3 b7 d9 69 d8 1f 53 87 cf 95 e4 ee e5 3e d7 55 02 bf 07 4b 71 3f 41 39 9e 95 d1 ac 17 01 cb 55 70 4f f8 29 bf 9d b2 f4 af b8 a2 5f 10 d7 24 f2 22 08 6d 00 fd b3 d1 b0 b3 60 25 50 ec 36 93 c1 28 24 d5 32 5e 45 05 47 88 1c b7 ca 21 cb da 46 89 ee 75 3c 8e 59 b5 ef 53 8d 89 5c 7c 2f 57 ca ea 34 39 a4 9a Data Ascii: .HxxmdgQe~`[dDR% Iijc{:%FEhj[GyJ\|-P.HhJ"R&n]qkYri#\gt)H Fc-M]R*^iS>UKq?A9UpO)_$"m`%P6($2^EG!Fu<YS\\|/W49
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: fd a8 73 46 aa 0c 39 b6 25 53 06 a5 f9 c6 c7 3e 25 d4 fa 81 69 67 cc 41 b0 4a 98 60 fc 61 30 43 09 24 00 60 49 02 00 24 1f e3 56 dc 8e 3f 98 24 03 1e 7d 76 7b 9c f0 ee 59 5a c5 4a 46 16 5f 2f f2 bb cc 45 22 af 11 aa ad 81 60 53 18 5f 58 ee 13 e9 64 f3 2a 51 92 26 33 a2 e4 17 49 af 5d 11 ed b2 18 37 bd 2b 9e 70 8b d2 16 2d 26 25 ed d8 b1 50 77 67 5d 35 cb a1 38 85 1f 0d 92 15 38 d7 e8 0d 92 95 c9 04 cb c4 3d 33 af 97 ff 0e 35 55 43 96 0a b9 14 a7 8c d4 af 87 d2 69 93 dd a3 9e 7c 10 47 18 c4 c7 27 ef 32 2a 4a f7 00 c1 7b ec ad ce e5 d4 2f 90 6c 2b c1 c9 de 23 90 2a fd 46 ec 79 1b fb 9b ca 95 e9 95 81 69 27 26 87 0d fe 2e a7 30 d4 3a f2 ac 56 41 55 12 dd b2 9a 32 88 84 a4 9a ec 7d ae 31 da 1e f2 a5 0d 46 8d 4a 4e 36 fa 7c 32 dc 50 fd 93 83 4d b4 6f ab 9a dd Data Ascii: sF9%S>%igAJ`a0C$`I$V?$}v{YZJF_/E"`S_XdQ&3I]7+p-&%Pwg]588=35UCi\|G'2J{/l+#*Fyi'&.0:VAU2}1FJN6\|2PMo
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: db a3 59 8a 29 8c 67 56 f3 a0 48 92 0f 2e 71 bc 2a 3b 00 ec fd 34 bd 3e 03 d7 5b 57 2c 58 f3 5b 97 9b d4 7d bd 9a a9 23 ed 26 fc b5 54 47 72 33 73 4f 5b dc 9c be a9 4d c8 1b 68 86 92 08 87 6b 26 d7 e5 46 85 6c bd b3 ab 1d 6a 4a 55 32 ba de 62 2e b4 6c 23 60 45 57 97 f9 77 59 9d 6f dc 9b a5 58 0a ca fe fb 24 09 d9 e2 af 0a 4b ed fc 96 72 ef c1 f2 38 2b 0a 4e d1 f8 fa 8d 04 97 56 23 8f 8f a7 8f b3 ef 82 8d ec 7b 64 20 fd e6 36 9f 3a 8b 59 5c 3c f2 97 0a 1c 25 73 1e 24 df 53 d8 63 ce 3b 9a 2f 93 3b b7 98 69 f9 a6 7b 0e e0 d9 bb 01 2e b7 ee 8a b4 db 2d 1c c5 1f cc 9e ca 42 7a 08 a9 87 0b 5e 15 4e d9 cc a6 c6 ad c1 69 04 a0 58 92 e1 b5 49 71 bc fe 6e 61 29 0d 97 f8 87 19 79 be 65 a4 94 4d 4b 0a 16 4f 82 c2 95 4c 10 f2 9b e8 a1 ce 00 00 d0 6f a6 14 2f 27 25 37 Data Ascii: Y)gVH.q*;4>[W,X[}#&TGr3sO[Mhk&FljJU2b.l#`EWwYoX$Kr8+NV#{d 6:Y\<%s$Sc;/;i{.-Bz^NiXIqna)yeMKOLo/'%7
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 55 92 e3 5c 22 f3 49 bf b1 aa 23 0d d0 ec e3 36 fb 38 ca 05 56 e0 01 cc 84 8e ee 1d b0 16 1f 8f 49 21 cc 3e 10 43 15 d0 ea 06 40 31 1e 39 4a 43 43 e0 78 56 e3 69 98 09 fd f3 c0 67 23 51 88 76 ae 3f e8 8e 9b 63 2c 2d d4 a1 03 02 f2 f6 55 0e 2d 3d cb 84 4f 8f e9 a2 15 09 61 6a e7 a5 b6 46 6d 4f 54 c0 9c 43 04 2f ef f3 9f 7d 87 fb 9e b3 ca 40 b4 d4 91 e8 89 f0 79 6d 30 8d df a0 39 4c 2e d3 b6 6b c9 d7 95 45 53 34 43 6d b8 ef 08 b5 f6 7d 3d 42 6f 95 27 6a 93 88 8c e3 51 b5 e3 d6 b3 cb f3 7c 96 42 4e 4d 77 e4 9a ab 92 54 92 61 62 96 b3 7f f0 93 03 6c c7 54 ba 35 de d4 08 1e b1 4f b4 d5 43 d0 d3 dd 92 47 81 b3 dd 89 ca 42 81 6f 6b 03 d5 a4 11 eb ef 69 67 14 72 3f 57 f7 aa 32 b1 2a 1c a5 81 21 34 f0 40 ee 4b 2a 35 48 bc ab 2a ae 0c ad 7a d1 29 bd 5c e3 7b ec 92 Data Ascii: U\"I#68VI!>C@19JCCxVig#Qv?c,-U-=OajFmOTC/}@ym09L.kES4Cm}=Bo'jQ\|BNMwTablT5OCGBokigr?W2!4@K5H*z)\{
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 8b 56 7b 32 e7 97 df 9a 37 4a 77 bf 16 4f 72 96 8f 66 fe 27 e4 1f f9 c9 d2 65 8b 58 7b 3e cf dd 1e 6a ec da 28 ca c2 34 ed 2c 6b 7f a4 60 02 80 08 ea 85 4b a5 66 ae 45 ee 32 71 76 08 4a cf d9 bc 6f da b7 09 15 7b fb a3 34 95 fb 25 dd 97 89 55 ff b1 a4 7e d7 6b a0 9a 6b 5c 90 dc aa 62 75 da 57 1b 40 62 68 9d 59 86 3b a5 8e fa 9e c3 b3 6a 59 16 9b 4a 4e f5 34 c3 a6 98 9f 16 ef fe 53 4f 59 59 e9 64 38 b2 a1 37 3a f4 c3 00 f3 a5 f4 c4 3c d1 a9 6d 06 77 9f cd 8c e3 27 b9 84 1d 5c f7 0d 00 36 32 67 59 75 a8 c0 98 1c 46 48 a4 ad b4 c7 1d 8b 02 0f 0b 0b b7 1f 64 70 37 78 35 92 72 4b ee 23 ec 7a d4 61 f3 51 cd 6c be 7e 45 37 0f f8 ed 8b 52 79 dc 1e fb d8 f7 ea af ff ed d4 14 74 4e 25 a2 e5 c8 19 8a 31 d6 d4 47 c5 87 4e 4a db 8c e4 a5 5d d7 12 95 24 b0 71 2a d1 ef Data Ascii: V{27JwOrf'eX{>j(4,k`KfE2qvJo{4%U~kk\buW@bhY;jYJN4SOYYd87:<mw'\62gYuFHdp7x5rK#zaQl~E7RytN%1GNJ]$q*
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 57 ad 14 4d be 4f 1b 3a 4d c1 ab 2b 0e 7a f2 88 fc 48 07 a8 85 8d 5a ab 64 1b ab 65 1d af 6c a4 78 9a ce 36 e9 a2 ca 29 70 11 4b 56 fd f4 d2 9b 2b c1 be c4 63 5c b0 c7 b4 64 5c 24 e7 46 a3 b7 d4 6a 39 db 94 96 f9 21 55 1d 81 9b 4f 05 10 26 04 00 58 1a 47 82 20 6c d7 ac d3 69 b1 5b b4 e7 f8 9c bd a6 8e cc 70 e3 d2 a9 67 9c 54 d1 ea 01 62 95 c0 01 f7 a8 7e 96 49 bc 5d 3f f2 db d7 fb fd bb 7e a4 f7 f5 ac 85 c7 27 38 8a a6 af 71 91 d2 ac 03 67 4e 59 fc 44 5b 7b 19 2e b4 b4 77 71 06 67 a3 ab 54 8b 12 e3 ca a7 b1 5c 18 aa d6 a0 57 c2 00 6a 0b 92 b0 c7 40 71 65 b8 ef 49 16 dd d6 21 82 4a d5 54 12 e4 8d e5 e7 cc 60 29 14 60 d4 58 2d a8 04 2b 27 c8 4e 63 57 46 ac 26 b6 67 43 26 be da 2d a1 df 2e 74 8f 2e cd 17 ff f1 be 4f c8 4e e1 62 dd 0e 1d c6 03 c8 03 05 2e 2d Data Ascii: WMO:M+zHZdelx6)pKV+c\d\$Fj9!UO&XG li[pgTb~I]?~'8qgNYD[{.wqgT\Wj@qeI!JT`)`X-+'NcWF&gC&-.t.ONb.-
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 4b 1e 28 23 96 b0 94 62 84 ba df ce 4e 12 1b 9c f6 db 93 5f bf 16 70 54 7e 53 3b 14 8f 71 be 61 1e 01 13 6c 35 56 cb 93 f1 f4 75 8b b3 e7 33 4c e1 c8 5a 8b ae 9c 11 da 4d b6 ab 98 03 1b ca 0d 73 ab 49 ad a4 9f 92 4a 04 e2 28 64 90 d0 52 46 5a 7c ed 45 8b c5 3c e2 c6 35 42 35 15 b2 8d 49 d5 41 c0 cc f6 2b c6 7d d8 60 7a 25 db 35 ab 07 2b 43 d7 ef 03 83 03 58 a5 eb d9 60 0a ac f2 9a c5 2a 68 de d2 10 6d 62 d9 ea 68 cc 93 31 f2 3d 7a 23 4f 53 d3 b6 19 5b 74 c8 6b 8c 84 e2 32 21 99 0e 38 ad 5b 2b 51 9d 06 a8 52 3d 86 e7 3a 8c 0c 7a d7 6b 0e e5 3c 67 7d 1c f6 c5 b3 a4 68 09 f3 ff 9e 9a a2 b0 2d b4 cd 1e 90 93 8d ec bf c3 7a 64 8c 65 a4 b9 2d 04 ec 06 31 37 25 48 bd 73 21 cf 74 44 d9 6b 40 02 ea 25 56 c9 46 73 92 68 8b 83 96 e4 4d 44 4e 4e 3e 74 fa 42 5b bb ac Data Ascii: K(#bN_pT~S;qal5Vu3LZMsIJ(dRFZ\|E<5B5IA+}`z%5+CX`*hmbh1=z#OS[tk2!8[+QR=:zk<g}h-zde-17%Hs!tDk@%VFshMDNN>tB[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49748	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:17 UTC	631	OUT	GET /images/spin-bg.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/app.b1f17912.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:17 UTC	757	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:17 GMT Content-Type: image/png Content-Length: 597541 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:00 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294216 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KrZ96zbmIXM2B5BVqvkU1k0Z%2BlNcZwF9yQStLz%2B7ygC3hmGQsTg9ayHzyFIHOvG4tEYXGVFv7sZUNy9VAdFdv7qbuU%2FA8f0oAQ0WnvJA%2Fklsaiy0QNIO5Py6eyjYofnTlbBkdDtWqXzXcQU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff5c9ce27cee-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:17 UTC	612	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 55 08 02 00 00 00 d7 18 e7 5c 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR8U\pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e Data Ascii: {-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 Data Ascii: z5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nV
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: d6 0d 02 9f 1b ea 7e be 30 4c d1 b3 a9 de bf 06 fd 9f bf 62 aa e8 37 0e dd e7 3e d9 f0 bd d3 9f 87 a3 26 06 19 5f bd d2 be f6 e2 bf 73 bd 71 f2 68 36 e6 13 a7 04 2e 35 86 08 af ed 66 27 19 b6 eb ba 69 83 34 9a 49 48 3c c8 7c d6 aa a2 46 7e 43 20 a5 e5 d8 6f f1 ba 88 07 a3 35 40 d9 63 a8 45 0a 64 f8 28 ff 73 12 24 40 98 6f 60 17 c6 d0 c7 cf 75 96 d8 b3 64 1a 8c 01 9c 86 c1 d1 10 8f e4 db 2f df a8 39 66 6b 93 cc 40 7f 7b fd 42 94 13 4c 3d 0c c2 8d 60 b4 7d 5d bb b7 e3 88 9d 24 24 f5 c5 63 ce 23 6c 9b 5d 17 1c 63 19 28 63 39 bb 4f f6 15 2c 56 17 d6 0b c8 d8 cf 4a b2 c5 a3 f9 d7 b4 6e c5 e5 3b 19 06 01 f5 d1 8c c9 5b 08 6f 45 44 e1 b7 4d 91 9d 39 a8 f5 09 8b fe 0d f9 db 67 f9 65 a2 c6 7b c0 c5 a6 c0 3b 7b 08 6e ec a4 d3 59 91 2f 00 2d 58 f6 85 55 22 00 52 44 Data Ascii: ~0Lb7>&_sqh6.5f'i4IH<\|F~C o5@cEd(s$@o`ud/9fk@{BL=`}]$$c#l]c(c9O,VJn;[oEDM9ge{;{nY/-XU"RD
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 97 f9 23 7e 4a 1a c8 e9 d0 e3 f4 28 3a 37 1d 3c 54 d6 e9 e3 a1 64 20 51 c4 83 65 0c d0 e9 18 31 a4 53 fd 2b ad e1 4b 5b ee d0 25 15 8c a8 51 cd 40 32 01 29 1a ab 12 4e e4 f1 ff 99 55 a0 58 8e af bd fd 51 92 1f 90 84 58 f7 a5 b1 52 82 0a 0f 03 6a de a0 02 ab 89 54 6e 53 87 7b 3f 44 09 08 d1 85 2c 0e 01 b4 66 85 48 49 c9 ea 7b cb 57 e7 4c 43 42 ea c5 90 62 b0 85 bb 79 08 76 a3 d9 10 f5 52 05 3e 12 0f e3 4e eb 6e 9c 2d 13 43 37 d9 d8 0d 90 23 75 33 b1 25 dc 1a 39 9c 6c 35 a6 da 29 28 78 63 13 b9 73 44 54 10 ef f1 9c 22 29 7f e7 50 c9 1f cf 5e 81 97 10 d3 cc aa 13 11 1a 4d cb e2 fb da ad 71 12 c2 62 15 93 e3 3b 7a 2c 9f 0d fe 7f 41 d8 84 3f ed 30 c2 57 7f 1a ff 42 97 f3 cf cf 5f 23 4b e2 bd 89 32 50 f2 f8 cb 52 f7 ed eb a2 32 3b e2 3e f2 c9 f1 7c e8 6c 1c 47 Data Ascii: #~J(:7<Td Qe1S+K[%Q@2)NUXQXRjTnS{?D,fHI{WLCBbyvR>Nn-C7#u3%9l5)(xcsDT")P^Mqb;z,A?0WB_#K2PR2;>\|lG
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 09 c1 8c 00 2d b2 c1 24 b5 a4 4d 81 86 2e 1e e9 c1 fa 06 0f 2a a1 dc 55 73 d9 ab 06 d4 03 d8 64 74 ce 51 29 19 42 45 ad 69 d6 97 2d a9 18 62 b2 17 d6 8b 77 2c 26 3d 07 1f 11 1f b7 04 b0 6a c8 67 e9 5e 58 69 59 a3 14 97 38 18 53 20 93 76 1e 45 ce db f7 3f a3 ed 42 05 0c b2 ef d5 0c 27 f7 99 ba 23 30 e8 c6 55 fd c6 92 51 f8 39 91 df ec 3b fc 6e dc fb 9b 28 72 63 a2 7d 40 33 74 66 7a e6 3f 3f b3 37 cc ca c0 94 91 72 71 fe 89 bc 28 4b 12 8b 3d 89 c5 ae 09 c2 55 f9 81 f7 77 a4 38 18 49 84 8a 6c 3f 66 b2 3b 93 4a b2 b4 1a 67 10 ca bb a3 74 6b 7f e2 34 73 f8 56 b0 16 ee d5 75 f1 45 bb eb 29 b0 96 fd 59 27 0b d2 fa 7f 45 0e 83 d3 3f e3 4c 3d 14 32 91 fa ee 36 a5 4f 04 3a d3 3e de df 1a 2e 88 4f 6d 73 67 ab e3 9b a7 23 17 74 c2 4e 6e f3 f5 da c1 ec a3 37 cc b0 1d Data Ascii: -$M.*UsdtQ)BEi-bw,&=jg^XiY8S vE?B'#0UQ9;n(rc}@3tfz??7rq(K=Uw8Il?f;Jgtk4sVuE)Y'E?L=26O:>.Omsg#tNn7
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 87 96 5a d8 0f dd db e3 45 b4 48 be 74 5f 0b c5 dc 63 f4 a1 d1 53 ee 4d 59 1c fd 0e c4 3a cf ba 5a 0f a7 b4 7f 9c f2 52 53 97 04 75 b8 2e 4b 9e d1 e6 33 3b 65 68 11 ec c6 07 b9 01 c9 71 b9 d5 bf b1 40 ba 6a d2 dc 99 63 30 58 b8 38 51 be 6e b9 a4 f3 67 50 b8 82 bb f1 41 ab f6 b9 28 55 0e 44 b9 80 6a 09 59 f2 7f 64 a9 03 e9 cd 52 be 12 43 1a d5 d1 7e e9 91 3f c2 fa 4f 70 19 c4 82 b1 1c db b6 3e 5e 56 64 8b 45 b3 c0 76 a5 38 2a 3a 05 88 5b 71 f1 7d 48 3b fa 72 d7 af 8d 20 81 f1 4e a6 92 a8 78 be 94 df eb 28 76 dc 8a 5b fa 8a cf 65 b7 27 cc 8f bf 73 d2 f2 32 bf 72 f6 9c 2e 89 e0 ff fc 7c f9 43 5b cd cb 15 de 92 9f 5d 08 2f 56 04 b6 21 ea 29 dc 72 5b f6 e0 49 83 28 a0 f9 30 f5 c8 c5 20 f8 cc 91 70 19 76 73 11 7c 7f f2 1c 32 9a 3a 98 ad 5a 2e f8 2d e2 cb 2c 80 Data Ascii: ZEHt_cSMY:ZRSu.K3;ehq@jc0X8QngPA(UDjYdRC~?Op>^VdEv8*:[q}H;r Nx(v[e's2r.\|C[]/V!)r[I(0 pvs\|2:Z.-,
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: f0 b7 41 42 aa 2b 96 ce d8 bc b5 0d dd 43 b0 50 59 2c 4f 0b 4c 05 7a c9 52 d3 e9 f0 fa ee 9a 6f 7f e3 a4 8a df 4c 09 ac 9c a6 80 42 6c de 60 79 45 51 6e 7d 7d 6b 84 67 7e 0e 2a 01 44 52 6b 94 18 41 5f bf 1a 87 cd 16 cc 0f 9e 09 26 9d 93 75 46 7a 5c 6b d1 dc ca 0b 2e f7 af 15 d6 e9 8e 78 df 90 a5 bc 5a 54 58 75 36 11 ca c7 5d d8 69 ec 7a 91 7c 76 9b 06 a4 1a 4a e0 7a ce 57 39 2f 52 f0 6c df b7 3c 72 85 16 1a 09 6b a4 8b 60 cc 5a b1 5a 1c bf 79 e2 1b 87 d6 cc a4 ab 63 45 c6 8e b5 7f 69 51 05 8f a1 46 7e 17 ba 40 3a ee 26 ae ec 0a 49 40 12 18 85 c8 b9 4a ca 4d 14 d6 80 19 10 a3 98 98 56 1b c8 c8 d5 61 66 b1 c7 3c da 24 f4 84 aa 1e 56 e5 ae 34 bb 26 97 15 66 f0 3c 24 44 12 7a 98 a7 f4 da 14 bd a2 98 ff dd cc 5b 2b 00 64 53 ad c8 b1 24 ce b6 c6 63 cf 24 f8 04 Data Ascii: AB+CPY,OLzRoLBl`yEQn}}kg~*DRkA_&uFz\k.xZTXu6]iz\|vJzW9/Rl<rk`ZZycEiQF~@:&I@JMVaf<$V4&f<$Dz[+dS$c$
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 26 f2 20 29 48 45 2d a1 a0 8c 4a 8d 1e c5 da c7 47 46 15 84 82 99 57 10 fc 4d 1a 73 0c 12 19 56 9c 3c f5 7e 14 b2 e3 44 6c bb 97 5e 0f ba 23 9a 45 73 56 00 d9 91 53 67 0f 99 2c 2f 43 e6 0d 80 93 5e 1f a5 47 8a c6 c4 23 37 df 32 78 cb 6a 7e 11 2a c8 7d a9 94 f5 51 03 e5 b2 a4 61 ce 2a 13 c6 48 15 18 aa 93 8a 5b b3 d3 84 a2 0a 50 25 cf a5 52 b6 b7 4c 74 a1 6f 7d 85 8d d5 f3 e7 25 ea 5c 05 be be c8 04 50 a5 11 29 59 de a2 59 74 38 18 da 1a a0 84 4a 95 56 20 24 2a 7c b0 25 34 19 07 97 47 a1 74 8a 76 64 e8 2d 54 8d fc e3 61 aa b2 25 25 f9 30 33 69 29 04 06 cf 58 8e c1 4e c4 6e 15 43 99 ec 9a 22 59 d3 59 1e 66 1f ec f7 db e8 0d 5c 52 4b 84 35 c3 6c 7f 19 80 67 c0 d4 31 01 ec 2a d9 1d e2 fc 2a f2 46 ec e3 1f d7 f3 34 bf 47 d7 ca 3c 57 f3 e5 12 3f 75 1d c8 f6 ed Data Ascii: & )HE-JGFWMsV<~Dl^#EsVSg,/C^G#72xj~}QaH[P%RLto}%\P)YYt8JV $\|%4Gtvd-Ta%%03i)XNnC"YYf\RK5lg1*F4G<W?u
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: ca e4 82 c9 e8 e1 bf 6d 91 1c 4f d2 60 ff 26 19 3c 73 e7 d8 38 cf 52 62 92 83 db 89 ca 53 1b 56 d7 8a a8 f6 77 35 5d 91 d6 30 40 d7 ef c8 ca b6 ce 16 cb 5a 51 35 3e d4 95 fb 0e 62 19 b9 47 9f ad 18 a3 11 e5 33 33 23 69 60 fa 0c af 33 4a a0 3e 73 ba 63 30 64 71 39 41 40 c4 b6 d4 38 5f 60 63 06 1e 9f a0 1d 65 a9 da 65 e6 f4 c7 bb 09 f5 0e 2b d0 21 ee 54 83 26 72 76 79 af d6 b6 64 eb 6d 96 c1 d2 92 62 f4 d1 2b 6b 05 21 b7 35 50 7d 52 26 ed 63 96 8c aa 4b 88 32 23 86 b1 38 ba 53 14 74 f3 49 66 13 7a c4 e1 af ae 2e 1d 7d 1c d9 85 30 d7 6b 54 48 79 ec f6 73 b7 7f a5 6d 53 fd cf c7 c3 fb 24 0f eb 72 5c 0e b5 79 a7 e5 80 c6 c3 16 0d c9 84 1a a0 e8 19 d0 58 2a 3c 68 05 06 f4 7b d1 21 f4 47 b0 d1 94 a4 50 c0 28 9d 07 54 d0 aa 9a b7 0d f1 8d fb 36 ba 0a f4 cd b4 e2 Data Ascii: mO`&<s8RbSVw5]0@ZQ5>bG33#i`3J>sc0dq9A@8_`cee+!T&rvydmb+k!5P}R&cK2#8StIfz.}0kTHysmS$r\yX*<h{!GP(T6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49751	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:17 UTC	632	OUT	GET /images/red-bg-2.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/app.b1f17912.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:17 UTC	754	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:17 GMT Content-Type: image/png Content-Length: 39362 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:00 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294216 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BAXyyFPg2sGpDXfJm4L91zdLFKw8tVPY2NFiMVWTkOUFEAq%2FeQz9ybRCt7mFOF%2BN2x7z%2BlK7ONlWBgfM5LOxuLb9kbNWbP2O3tKPR20avpvEHqkEDy68mkvQp1NFT7rUUk0YsEfxdTt1yVE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff5c98d14310-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:17 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 93 00 00 00 39 08 06 00 00 00 f3 ec c6 5d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR9]pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 Data Ascii: -]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f Data Ascii: 5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 2b ea f9 19 fb db 0f 94 aa b0 6d 83 b7 02 bb 3b ea f9 0c a9 0e bb df 20 0e a0 28 a4 b5 78 ce 3e 76 14 31 cc 6e a8 4f 2b 00 87 dd 27 6c 00 fb b6 a3 9d 1a ea 49 e1 13 f8 f8 71 c5 18 03 aa 8a d2 2a e0 80 9b f3 7c 2a 4a 2d b0 69 d8 b6 0d ee 02 55 60 f6 0d 90 02 2d 0d 63 0e 60 0c 88 6d 98 50 68 3b 41 c5 31 7b 87 ae 27 28 04 70 c3 b2 ae d8 b7 0d 73 bf 43 4a 7b 1c c8 39 e2 ee e8 13 32 6e 28 a5 80 5f 0b f6 3e b1 b4 02 29 0d d3 0c 3e 3a 6a 2b d8 b6 0e 11 41 ad 05 73 8c f8 ec a6 c7 39 14 01 1c 58 5a 85 16 41 47 85 ef f1 19 4f 38 fa 34 28 80 a6 0a 11 a0 96 02 29 1a f7 c0 30 40 80 69 f1 df d6 0d 45 14 75 2d a8 b5 c2 a6 61 1f 03 ad 2a a6 01 73 4e 14 55 d8 88 3f 7b be ac 30 77 8c 7d c0 01 d8 8c 9f 53 5b 8d ff 3d 26 6a 2d e0 5f 82 65 6d f1 bd ba 63 9a 41 4b 85 96 82 b9 Data Ascii: +m; (x>v1nO+'lIq\|J-iU`-c`mPh;A1{'(psCJ{92n(_>)>:j+As9XZAGO84()0@iEu-a*sNU?{0w}S[=&j-_emcAK
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: c5 2f 6b 5c 30 13 40 13 83 88 42 b4 40 dd 71 1f 1d ee 40 51 e0 d6 0d 26 82 97 35 2e e7 ad 77 6c 3d de 77 55 89 c2 c4 5b a9 95 8a 39 07 ba 4d 98 45 d1 d8 a6 61 1f 86 73 11 9c 5a cd 61 14 6b 29 70 55 dc f6 1d 6b 51 2c b5 62 1b 13 ee 06 15 e0 52 14 d3 e3 cc 9c 5b c1 a9 b0 98 f4 0e d5 12 4d d6 98 68 b5 42 01 4c 37 18 80 e7 52 50 6a c5 5a 05 ab 3a 76 13 b4 22 28 45 e1 6e b0 19 e7 4a 4b 74 92 e6 02 9b 33 8a 52 8b ae 13 4d 61 dd 80 e9 31 01 89 43 8b c6 45 5f 63 22 f4 19 97 38 94 37 bf 71 7c 69 2d 0a c3 e8 80 45 d1 8a a9 e1 d3 88 83 f8 73 3e 0d 3e e3 72 11 89 29 5a 44 00 73 cc 6d 02 aa 28 a7 02 db 26 ac 1b a4 08 ca 5a 20 2a 98 f7 01 9b 06 33 47 29 0a 14 c5 dc a3 78 15 15 a0 2a b6 6b 87 a9 42 e6 04 04 b8 f5 89 56 34 9e 43 8f e7 d3 cd 51 5b c5 ef 1f 77 9c 54 a1 02 Data Ascii: /k\0@B@q@Q&5.wl=wU[9MEasZak)pUkQ,bR[MhBL7RPjZ:v"(EnJKt3RMa1CE_c"87q\|i-Es>>r)ZDsm(&Z 3G)xkBV4CQ[wT
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: a5 35 bc d6 e8 5a ba 4d 5c 4a c1 6d c4 af bd b4 86 9f 7b c7 f7 7d 40 45 f0 75 69 e8 6e f8 cf f7 01 c0 f1 cb 52 f1 da 14 e6 31 9a 4d 38 4e 7c b8 00 e0 c7 36 70 f5 89 b5 28 be b4 8a 85 0f dd 9d 70 4f 53 c1 6d 5a 74 6b 6e 3c a8 82 53 89 03 75 1f 03 27 2d 31 e9 b8 e1 52 62 2c dc a6 61 29 7a 54 72 9b 13 bb 3b fa 9c a8 22 f8 b2 2e 30 33 fc 18 03 d7 31 d1 cd f0 bc 34 5c f8 30 14 6d 58 8a e0 36 3a 64 2a a2 31 8e 07 b2 8a c4 cf e6 64 32 cc 30 78 a1 ab c6 01 6c 02 9c b4 a2 96 0a 63 d1 6d 32 30 2c c6 77 97 d8 05 1d 38 be 03 4d 14 f7 31 f0 be 77 ac a5 00 06 a8 7a ec 51 ac 60 51 45 01 b0 4f 60 17 62 de 7c b0 45 40 2c b6 43 4b 1c c8 0b e1 45 82 3a 10 29 10 4c 98 03 45 80 e7 56 70 ed 86 26 c0 a2 f1 39 5d cd 50 2c 3a ac 3e 0d a7 5a 63 f4 46 bc ef 0a c7 dd 2d ba 7a 00 6e Data Ascii: 5ZM\Jm{}@EuinR1M8N\|6p(pOSmZtkn<Su'-1Rb,a)zTr;".0314\0mX6:d*1d20xlcm20,w8M1wzQ`QEO`b\|E@,CKE:)LEVp&9]P,:>ZcF-zn
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 62 1a ef 7f 11 0d c8 df a3 31 ac 1a eb 83 bb 19 56 36 aa 77 9b 80 0b 56 16 c1 45 e3 f9 dc 31 51 f8 f7 7c 4c c3 17 c2 5e 8f 36 12 f8 3e 26 5e 4a ec d0 16 0d b4 c3 01 94 ff e7 5f 7f fb db 1f 7b 5f bb f9 01 1f 4f 62 63 27 2e a2 b7 19 a3 57 e1 64 a1 12 9d e5 44 7c 88 90 a8 5a d7 39 f1 75 a9 f8 b2 54 bc 8d 81 6f 7b 74 ae 5f 5a c5 97 16 6c ad 84 5f c4 a3 ba 5e 9a e2 63 4c fc be ed 18 ec 0e 04 8e e1 71 88 5f 5a c5 97 d6 d0 cd f0 a3 0f 18 1c 4b d1 e3 4d 4c 03 be f7 81 bb 39 7e 5d 1a fe 74 5a b0 8d 89 6f 5b c7 e6 f1 7b 5f 6b 4c 17 1f 5c 88 55 55 3c b7 8a c2 83 bf 5b 5c 7a e6 f1 f0 28 8b 48 91 d8 11 98 3b ae 63 1e 4b 2d f0 35 66 77 d4 34 c6 d5 7c d8 9f 5b 8c ca 9b c5 85 21 c4 ae 17 2d 78 6a b1 64 5c 88 b7 4f b2 50 12 fa 99 07 44 cf 62 0d c1 b5 c7 c4 73 9f d1 81 4d Data Ascii: b1V6wVE1Q\|L^6>&^J_{_Obc'.WdD\|Z9uTo{t_Zl_^cLq_ZKML9~]tZo[{_kL\UU<[\z(H;cK-5fw4\|[!-xjd\OPDbsM
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 9c 78 06 70 9d 13 3f fb 80 78 b0 65 97 12 13 53 9f 16 88 87 c7 df b5 59 9c 9b dd 1d 32 c9 ca 77 ee 36 c4 70 1d f1 7d a8 c7 67 e6 e2 18 9c 5a 62 57 29 47 41 32 01 5e 4b 9c e3 9d 7b f0 22 42 72 01 b0 b1 29 ae ee 38 89 12 62 33 54 44 9d f8 eb ba 60 98 e1 4b ad b1 3f 15 a0 69 45 f9 9f 7e 79 fd db df f7 be c6 68 c7 c5 a1 00 4f b5 92 89 60 18 88 0a 76 21 ac e4 a4 9b 0d 38 de c6 c4 a9 28 fe b2 2c 98 0e fc db de b1 d9 8c 37 86 1c 5d 83 c5 51 44 f0 61 03 55 e2 e1 fc be 4f dc 46 87 8a 60 fd d4 21 55 09 16 cf 30 3b 3a 8e b5 28 be 2c 01 7b bc 8f 89 b7 7d 60 83 e3 97 d6 f0 d2 0a 7e 8e 89 6f bd 43 25 ba 81 a5 08 ae 73 e2 f7 ad e3 52 2a be ac 2d ba 5e 33 dc cc f0 9d 8b b5 af 4b 43 63 91 5c 6b c1 53 8b d1 f2 e7 b0 63 64 be f6 80 b1 76 c2 7c 2a 31 32 93 ca 13 ac ae 39 d1 Data Ascii: xp?xeSY2w6p}gZbW)GA2^K{"Br)8b3TD`K?iE~yhO`v!8(,7]QDaUOF`!U0;:(,{}`~oC%sR-^3KCc\kScdv\|129
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 33 9e 65 43 4c 97 53 81 55 e3 7f df f6 80 97 a7 19 86 46 a3 5b c8 d4 fa 52 a3 21 fb f0 89 61 01 ef 3f d7 8a 3f 2f 15 c3 80 8f d1 09 a5 86 4e 45 40 18 d0 80 3b 0c 37 73 80 53 c2 e0 bd 29 88 e9 ab 4a b0 f6 12 f2 13 07 2a cf 74 d0 75 c9 6e 14 3f e0 76 85 e2 8e 89 a5 08 2e 5a 0e 74 69 11 c1 2a 82 21 c0 f4 82 bf 94 d0 4c 09 3c b4 67 a1 cc c3 8f de d1 cd f1 e7 b5 a1 cf b8 d3 be b4 20 4e fd be 6d 00 62 e7 f6 7d 0c 9c 55 f1 d7 d3 82 f2 7f ff d3 d7 bf bd 9b ad 94 87 41 c8 e7 de cc f0 c6 65 d4 49 05 0d a1 1b 19 88 17 3c 92 af ad 82 3f c6 c4 8f 39 50 24 8a c8 c2 2f eb b5 16 34 51 88 03 4d 62 7c 7a 1b a1 a4 3c 71 12 6a 45 0f b8 e5 65 69 50 c8 c1 88 2a 22 78 ae 05 b5 44 77 7d 1d 21 a4 79 a9 05 e7 12 1f d0 cd 0c db 8c 89 e1 a9 16 6c 66 f8 39 0c 17 ad 78 ad 05 93 58 ef Data Ascii: 3eCLSUF[R!a??/NE@;7sS)Jtun?v.Zti!L<g Nmb}UAeI<?9P$/4QMb\|z<qjEeiP*"xDw}!ylf9xX
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: a8 9d 03 cf f3 1f 7b 0f ad 84 3b ee 7d 06 94 cf 29 3d 5f 97 53 97 65 10 2a db 83 0d 79 a9 05 ad 96 83 16 ef 70 7c eb 03 66 7e 40 76 4d 14 ef bc 9f 20 e1 20 51 0f 26 6c 9c d7 eb 30 fc 83 10 f5 17 ae 10 3a 2f f2 80 10 43 e0 38 3c 44 bd bf 2c 0d cf ad e0 cf 6b c3 2f eb 82 26 8a 45 24 14 fa 2a c7 5e 77 a3 c2 51 34 9e c3 3f f6 8e 6f d4 e9 25 a3 f5 6a 86 9f 63 a0 70 0a 4b d2 c3 49 1f e4 ab 55 95 48 4a ac 06 72 7f 9e ec af ca fb c2 03 2a dc ea a2 51 c9 52 7c f7 ba 94 83 5d a0 92 85 84 0b 60 2a 96 15 bc 04 d8 ad 2e 1a 1f 1e 88 7b 37 8d 07 2a 3b e2 69 b1 3f 59 4b 2c 7c 3a 3b 41 25 65 32 d9 42 d7 d9 21 0e 9c 6b 2c cf b6 e9 f8 d1 83 40 fa 5a 0a 9e 29 6c fb b6 ed 70 08 7e 5d 16 38 0c d7 69 d8 dc d1 4a 4c 50 6b 51 54 2d f8 bd 77 dc dd 70 d6 82 5f 5a 45 47 74 ea ab 0a Data Ascii: {;})=_Seyp\|f~@vM Q&l0:/C8<D,k/&E$^wQ4?o%jcpKIUHJrQR\|]`.{7*;i?YK,\|:;A%e2B!k,@Z)lp~]8iJLPkQT-wp_ZEGt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49749	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:17 UTC	634	OUT	GET /images/select-arr.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/app.b1f17912.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:17 UTC	759	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:17 GMT Content-Type: image/png Content-Length: 3333 Connection: close cache-control: public, max-age=2629000 expires: Sat, 21 Sep 2024 12:37:56 GMT last-modified: Sun, 22 Jan 2023 20:48:00 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 121281 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kYEleDc1uFoMNm9%2BRYZVHl3DpD%2F%2F35pjwSqGIfb5Aa%2BFGRMv8KcnZ%2F1mDEyFF4wcpb0bebdyiEhgV2xJAZy57womFR3m%2FDttUElJiesnTmwDvPY7wItOniUcyLR9QLVc6BsyNuQSwjCv0tw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff5c9d251a48-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:17 UTC	610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 17 08 06 00 00 00 1c 3f ff 6a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR?jpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:17 UTC	1369	IN	Data Raw: 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c Data Ascii: j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l
2024-09-15 22:19:17 UTC	1354	IN	Data Raw: 2a 4d 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed Data Ascii: Mz5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<*mOW~&zMk^kU}]OX/Ya>(xodff-[nV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49750	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:17 UTC	633	OUT	GET /images/yellow-bg.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/app.b1f17912.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:18 UTC	753	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:17 GMT Content-Type: image/png Content-Length: 7521 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294216 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gg93eeZ5deFu1qkrHHY2ly0IOGf8Bdqi7Nznk9QL8XoYI7bd73kuv1gLx1CSYy19LCSJYiOw4DlHCXJrLtuDaoci%2FW1CRIVYCOnl%2BT0W6QnLJQ%2BMMpbUnV9HaIy46Q4ZJ4sTIGLKzkn1krg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff5d4f9542ac-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:18 UTC	616	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 66 00 00 00 23 08 02 00 00 00 e9 28 e8 ea 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRf#(pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 Data Ascii: ]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f 97 Data Ascii: 5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 5d af bf 1d 85 95 62 c8 cb ba da b3 18 41 c2 2a 46 70 06 b3 20 a9 66 96 47 b9 87 6c bd 6c c1 37 29 07 5e 16 aa 65 4f 8d 03 4e 94 b0 2f bb 61 82 90 61 a2 81 93 9e 68 01 f0 b6 df 10 d0 f6 84 85 0a fb 6b 9c 15 4c 18 5f c3 0e 30 5a f4 85 f6 8b 42 e0 0b bf e1 20 9e 68 bf e5 fa cb 78 c5 01 40 f1 7e 51 bd df e8 d9 cc e5 36 ef 8b 6a ae 45 35 2d cf 85 21 cc 7b b1 aa 7f 7b 79 d9 36 6d 57 93 21 d3 8b f1 f1 11 7a 4f 7a 58 6a 4c 84 67 e9 5d 48 9c a1 d5 76 93 01 f4 bb 64 6b a4 7f fb f4 48 ce 8c 37 8c 46 96 26 4a 45 40 22 e3 cf 7d 8b 71 40 83 70 e3 49 9c 20 d4 48 f6 27 24 2c c8 bb 5e d4 b8 d0 2e b4 4f 30 32 5c 98 7b 26 0a dc c8 f8 ab 84 ad 2f 4d d8 ff b2 c0 74 b9 5b 16 0a 04 98 b5 58 a6 ed 9e 00 d5 5e a5 35 bd f6 80 87 b2 57 61 bc 4a 29 bf 97 3f cb dd be 5a 21 ce 74 77 Data Ascii: ]bA*Fp fGll7)^eON/aahkL_0ZB hx@~Q6jE5-!{{y6mW!zOzXjLg]HvdkH7F&JE@"}q@pI H'$,^.O02\{&/Mt[X^5WaJ)?Z!tw
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: db 6a 99 f6 5f 4e 41 b1 67 ff 3e 34 1b ad c6 b6 1b d9 b2 f2 d4 dc 69 87 d4 5b 0e e4 bb 8b 6d 4b 96 bb 64 1c a1 90 6d e6 62 b5 b1 bb 99 e6 08 fd 72 e4 11 2e f7 db 48 36 fe f3 f4 b5 84 2c f5 d5 91 fa f6 8b 86 84 ab 9d d2 23 7b 16 1b f3 8e 20 e5 eb 16 66 66 db 76 5b 67 6a 84 32 6c 53 16 d8 a5 71 78 4f ee 92 7b 7d 71 a6 f0 6d 0c 6d 44 d3 c2 85 cb 0a 09 22 61 e0 0b 1b 07 d8 dd 42 90 72 4b b8 a1 ea 0e 1b ba dd bd fd 66 a0 9e e5 32 81 5b 52 b0 16 3d 89 c0 41 d7 e6 7b b5 5d 06 d3 56 21 c2 d5 8c dc c8 cc 6b 31 17 b6 53 11 e9 43 b6 98 b3 5e c5 ea 7e 2d 95 75 84 6c 8e 24 e5 1f 8b 63 98 b8 5e 1e 63 48 d0 57 d7 6c b5 69 c7 23 9d f8 b3 e2 0c bf 56 ff 66 ce 8c 10 b3 39 03 c3 7b 6d f0 f6 19 22 28 33 9b c4 32 29 db 78 62 49 b9 9d 16 5d 48 ce 21 d8 65 63 f4 35 e6 e2 cb 06 Data Ascii: j_NAg>4i[mKdmbr.H6,#{ ffv[gj2lSqxO{}qmmD"aBrKf2[R=A{]V!k1SC^~-ul$c^cHWli#Vf9{m"(32)xbI]H!ec5
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: a3 d7 a2 be e2 d2 7b 35 28 2c 9b f3 c9 78 bf 4d 48 8f 83 ab 08 ea b3 78 37 92 9e c1 99 b6 fd aa db d3 a4 a2 ed 77 e9 dc a1 43 0b 91 aa cf a9 14 8f 23 24 af a5 63 f8 5d 1a c1 da 56 e5 2b 23 1c 21 db f3 ee 38 ab 14 69 9b d5 77 8a 89 a5 74 59 0a af 96 e4 69 95 9d f2 aa 5b 57 b7 47 da 68 aa e8 b2 ca 4a b9 9a 1d ae 1e 43 19 de 76 6a 4d da 92 a8 d6 23 85 b8 ba 66 f1 2e 9e a9 04 d4 57 6f fc a5 1a 49 a6 ef f7 a0 14 c7 7d 53 fb b5 fc 37 0f 29 65 46 6a af 03 4d 9b 69 42 1c a1 90 df c5 cf a5 6f a7 1e e9 77 7d b9 6e 6d 23 a2 10 4d 57 8f 6f 47 57 13 91 cf ec 9f 17 58 d1 7b 7b a0 0d 19 46 a6 03 ba 15 37 5f 78 bb ab 4c ad f6 5c c0 5e 11 b8 1a 6f 52 6f 90 ef e4 c7 b8 09 d1 a2 77 12 25 aa 24 f9 55 1e c1 31 54 76 b7 8b f8 3e b0 7d 95 ab 6e 0c 78 8e bd ca f1 ab fc 5e 6a bb Data Ascii: {5(,xMHx7wC#$c]V+#!8iwtYi[WGhJCvjM#f.WoI}S7)eFjMiBow}nm#MWoGWX{{F7_xL\^oRow%$U1Tv>}nx^j
2024-09-15 22:19:18 UTC	60	IN	Data Raw: 78 b9 8a e3 44 62 ce 7b 1f 1d c1 08 e6 86 f4 3b b8 65 93 82 b5 83 4b 32 09 b8 26 86 ab a8 86 9a ff e1 3f fe fb ff 37 00 ea 96 25 16 d0 2e d8 8c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: xDb{;eK2&?7%.IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.10	49753	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:17 UTC	643	OUT	GET /img/logout.29f7cada.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:18 UTC	754	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:17 GMT Content-Type: image/png Content-Length: 14980 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294216 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F1tn3kWpAdJqNVb0dsXBgeQCq3rqTclTiJfMaZ7gAn5R2Bd7RfdvHg5Fq%2FcOigXud3xpKFoXcvbKHzyhPO6MUDs0lFVb%2BinXTtww8wLQnPldDfNJQ%2BxQKzaW95mk5es2tzywMcNuLxRUz9M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff5d4d814369-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:18 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 98 00 00 00 2e 08 06 00 00 00 d4 51 d0 49 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.QIpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 Data Ascii: -]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f Data Ascii: 5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 09 c1 0e 70 ad 20 95 da 65 c8 02 8d 20 c5 0c 45 73 b5 cb 2f 6a 67 a6 af 97 87 49 03 6d a5 4c 7b c8 6a 6b 3f 89 48 5f fc 3e 04 49 91 d0 06 74 9a e1 74 41 d6 c4 6e b7 0f 84 16 24 06 8e de 3f e7 d8 99 ad 94 6a a0 7b 7c ab 67 ff 73 d7 88 21 d9 a1 db 53 a0 14 b3 b2 0b 04 99 8c 20 40 28 d8 49 ef 2b 5a 7b 24 35 c8 9e 06 02 24 92 9d 1e 51 42 4c 68 b0 0b 92 26 40 4c 68 9f 91 e8 9b ae f8 ca 46 90 62 db 26 ad 1b 8e 1b 07 be e1 b5 47 52 04 ed 6c 63 06 4f 47 32 63 d0 00 32 f7 d7 8b 1b 52 6b 9f 2f d9 1e 57 01 e9 21 64 90 c6 0d ae f1 c7 2b 04 f7 1a 24 fb 0c 1d fb 35 f6 fe 99 c9 ff 2e 6e 54 8d 7f bf 20 d2 a2 9a 21 8a 19 47 f2 cf c6 af 65 f1 9e 08 a9 ba e7 ab 40 f6 6b 17 bf 9e 64 d7 57 a7 7e 08 cd c8 85 0c ea 8f a1 10 5b 44 cc f0 25 a8 79 6f cd e6 ed c3 08 51 8b 0c 50 cd Data Ascii: p e Es/jgImL{jk?H_>IttAn$?j{\|gs!S @(I+Z{$5$QBLh&@LhFb&GRlcOG2c2Rk/W!d+$5.nT !Ge@kdW~[D%yoQP
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: b6 f1 83 db 10 75 7c c5 2e 7c e9 3b 2b e2 f7 b4 b6 34 c2 32 77 0f 3c e0 b4 99 1d 2c f1 88 50 b6 cd 08 83 67 58 ea c6 29 c1 e0 45 f1 ef 10 85 ae 43 b3 da 41 ce 19 89 0d 74 3d aa 82 34 09 3a 37 50 c5 ee a9 0c a1 de ff ce 15 45 0d 93 21 04 05 2d 16 3e b5 33 4f 17 22 a8 0a 75 5e d0 b9 65 f2 12 8c 6a 02 a8 f3 4c bb 3e 42 d7 84 20 81 b6 15 d2 f6 99 8c cc 2b 05 a5 49 11 fa 82 84 8a ae 37 48 1f a9 5b 33 24 06 42 34 a3 a8 5d 46 aa 12 1a 50 09 84 56 50 4f 8f 6b 5f 91 da a3 c5 9e a7 a8 ad f5 ac a0 21 3b 25 64 e9 b1 e6 1e 9a 88 94 8a 4a b1 74 3b 45 5b 8c 5a 0d 0f 4c d2 e2 44 da ff 77 ec ff 43 d8 49 c6 91 69 ee 0c e7 51 dc d3 79 46 a9 d9 71 8d 87 1a 61 49 1b 68 de 05 d8 87 50 24 06 40 a5 75 63 cb bb 42 6d 58 7a 3e 86 ef 9a 2d 3d d8 40 3b a0 1e c2 ab 1b 9a 2c c3 ad 38 Data Ascii: u\|.\|;+42w<,PgX)ECAt=4:7PE!->3O"u^ejL>B +I7H[3$B4]FPVPOk_!;%dJt;E[ZLDwCIiQyFqaIhP$@ucBmXz>-=@;,8
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 0a f3 42 68 82 79 f8 99 65 2b 32 6e 90 b1 53 0d 05 a4 2f 68 6f 19 a1 60 40 5f 46 11 c9 e6 72 cd e5 2b 3a cf 16 b3 9d d4 53 b1 52 c3 22 5c 76 85 83 07 12 9b 97 45 b6 8e 15 ee fe a3 93 dc fd 47 27 6d 51 2e 4f bc f0 e6 4d 98 ce 0d 23 10 3c 09 11 98 79 f9 a4 89 5e cb 54 a4 16 5b 64 09 cb f0 8c 03 5f d2 2e 8e aa 2e e9 03 f1 d4 1f 75 da 42 dc 48 76 bd 86 c6 93 00 3d 27 3c e6 05 96 31 63 65 f1 f7 60 2c e6 c9 7b 28 e2 d8 51 ed 50 05 1c db 1a 56 13 a2 11 a2 fe b8 d8 2f 56 b4 6e 93 e1 9b 59 41 86 c4 a6 a8 15 c0 6b b5 30 98 b3 ed 97 02 7d e1 17 df f1 25 b6 8e 17 36 2f 8b 6c 5e dc 72 e4 f3 53 fe fa f6 27 f9 d7 3f 7b 9d 5f 7a 5d 56 6f 55 90 04 32 6a 0c e0 d7 6a d1 68 b0 83 60 14 86 ac 35 e6 69 8b d1 1c d5 0a 46 84 36 a2 c9 93 88 46 d0 6c d7 b7 b3 5d 48 5d 57 2d 44 76 Data Ascii: Bhye+2nS/ho`@_Fr+:SR"\vEG'mQ.OM#<y^T[d_..uBHv='<1ce`,{(QPV/VnYAk0}%6/l^rS'?{_z]VoU2jjh`5iF6Fl]H]W-Dv
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: ad e0 ad b9 d2 f7 4a ad 4a ca d9 05 7f aa 68 5f a9 db fd 92 04 5e 6b 2c 61 f1 22 78 dd c9 48 2e a6 50 0d ab 17 f7 f7 fe f7 4b 78 e1 b7 ee 45 da c0 7d f7 9d e1 a3 1f 7e 9c a3 5f ea 17 cf df fd c9 b3 fc c7 b5 87 f8 c9 7f 79 35 48 31 00 39 32 92 f2 ce 3b 4f 2d 37 f1 29 91 ad 47 97 8b f3 17 1f fb 2a df f7 0f 9f 8e b4 8e e5 34 5b a8 ad fa 75 d7 e0 3d ff f1 01 7e ea 5d df 66 29 bf 04 ce 5b 42 5d 0a fc 4e 3d 39 e3 27 bf e7 cf d8 fa 9b bc f2 92 2b 6e de c3 f3 be f3 20 17 5f 66 ba b0 87 bf 74 86 4f 7f f0 28 37 be fa a9 1e ee 6c bd 64 a0 2e 48 5e b9 12 de f4 d6 67 73 fb 7b 97 9e fd 83 ef 7c 90 bf f7 86 a7 71 c1 85 2d ef fd f7 f7 af 7c cf 1b df f6 4c c6 63 2b 2a eb b9 07 46 9d 0b 8b 26 61 d2 5c 1c c1 9f fb b3 54 f9 8a 2a cc 0a 5f bc eb 1b 7b a5 2f dc 7d 9a 1b 6e dc Data Ascii: JJh_^k,a"xH.PKxE}~_y5H192;O-7)G4[u=~]f)[B]N=9'+n _ftO(7ld.H^gs{\|q-\|Lc+F&a\T*_{/}n
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: c3 05 07 c6 bc e8 ef 1c e0 fd 3f b7 0c 7d 9f f9 e4 57 79 ce a1 43 86 9f 82 2c a5 d6 e7 e0 6a ab cd 3b b7 b5 96 bc 62 e2 40 5e 0b b4 11 ed 0a da 04 c2 e6 c8 24 5b 41 08 51 18 4f 22 f3 49 25 9c 3e 55 d8 3e 53 91 04 61 b3 b5 8d 9f e6 05 b1 6d 5d 58 be 80 83 37 fb db 7e 52 84 49 32 25 c5 d7 c9 54 64 bc 4c 12 ee f8 c4 93 8b c7 6f f8 bb 17 82 28 17 ec 6f b9 f6 96 bd 4b 03 fb c0 09 a6 a7 5d b9 1a a3 15 c3 cf f9 99 8c 13 af ff b1 a5 17 db 3a 9a f9 f8 1f 3d 7a 1e b4 11 22 42 70 9e 6b 77 e8 cc a6 0a 2d 3d 22 89 c7 8f 4f f9 cb f7 1c e7 f6 f7 3e ca ed bf 79 7c f1 df 83 77 9f 36 4e 2a 84 5d 59 e9 50 2d 18 ea 79 99 49 1b 78 c5 1b ae 38 ef 3a 6f b8 f5 52 26 e3 25 89 2a 12 90 d4 fa 46 9f e7 6b 11 31 b1 a7 16 93 30 69 97 cf 5b 6b 99 8c 90 26 71 b2 13 ee fe f8 e9 c5 53 df Data Ascii: ?}WyC,j;b@^$[AQO"I%>U>Sam]X7~RI2%TdLo(oK]:=z"Bpkw-="O>y\|w6N]YP-yIx8:oR&%Fk10i[k&qS
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 96 f3 32 8e b0 66 fc d8 a3 8f ec f0 c8 a3 73 fe e0 c3 8f 73 ef 5f cd 57 5e f3 86 7f 76 90 7d 6b 81 3a eb b9 f3 73 ab 78 e1 fb 7f e8 32 5e f9 b2 8b 2c 04 b8 fe ff 37 df ff 08 bf fb 4b cb 90 f9 d9 4f 9f e4 da e7 5e 80 6a 39 3f 3b d4 0a c5 c0 f0 0d 37 5e c0 b5 df b9 8f bb 3f 7a ea 7c 04 e5 6a d1 c9 fa 88 d7 bf ed 19 bc fb 2d f7 2e 39 b7 8f 9c e4 cd f7 fc 29 df fd 8f 0f f3 bc 1b 2f 00 85 13 27 ba af ef bd 86 c6 0b 6f e9 32 89 b3 70 fc e8 94 0f be eb 6f 96 07 e7 a9 91 9b 5e 74 80 f1 38 70 e8 fa 09 47 3e 37 f5 32 d8 0e 1f fe c0 11 5e f5 aa 8b 9c 17 0c dc f0 c2 fd dc fe df 97 06 f4 1b ef 7a 90 49 a3 7c cb b7 ee e7 91 a3 3b fc c6 2f 3f c4 d6 57 97 06 7f d3 ad 9b b4 28 4c 7b 3e 7b c7 aa e1 bd e1 0d 97 f1 82 6f db b4 e6 1b 04 e6 85 77 e5 07 f8 f4 c7 96 64 ef 97 ef Data Ascii: 2fss_W^v}k:sx2^,7KO^j9?;7^?z\|j-.9)/'o2po^t8pG>72^zI\|;/?W(L{>{owd
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: ae a7 d9 ca 76 d1 f6 50 e7 d5 ba be a2 b1 06 44 41 e7 de 62 36 c8 a7 77 b2 ed 57 1b 16 cd 50 da 19 e9 1e 46 61 31 60 48 e7 c5 5e e3 b4 8c b4 71 71 dd b1 af cc 2e 84 3b 3e fb 24 fd 76 39 9a 9e 7c 32 d3 ac 45 24 0a 71 23 51 92 59 e6 42 31 d1 9b ee 5a 67 d6 62 be 30 be c1 72 ab b7 a9 cd dd 98 82 50 a7 99 30 49 68 48 06 95 c4 8a e1 3a b6 76 33 e9 dd da 7b eb 9f 93 60 37 ae f3 0a db f3 5d ea 63 45 36 c6 84 22 e8 f6 1c d6 4c ab c6 4e 67 4d 09 e3 b4 ac 17 8a 2c 49 ce 41 f1 31 0c f0 88 c1 c1 88 37 01 55 4b 5a 64 d1 24 e4 fd 83 6a c3 3f a4 89 b6 b1 c1 9b 29 82 49 98 f1 f1 09 e0 ed 75 ea b5 59 5d ce 63 10 f5 02 fb 20 eb 76 35 44 ad 4a 50 a5 aa 5a 28 19 3a 89 f2 40 79 54 a3 d4 9a 64 ef 2b 36 2c ce 0c c4 9a 6e 82 78 18 48 50 73 b1 36 fe 24 90 92 19 3b 62 93 14 8a d3 Data Ascii: vPDAb6wWPFa1`H^qq.;>$v9\|2E$q#QYB1Zgb0rP0IhH:v3{`7]cE6"LNgM,IA17UKZd$j?)IuY]c v5DJPZ(:@yTd+6,nxHPs6$;b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49754	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:17 UTC	377	OUT	GET /js/chunk-10a81ae2.aad79b3d.js HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:18 UTC	769	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: public, max-age=14400 expires: Sun, 22 Sep 2024 22:02:00 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1037 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qPSH5QiRY6TC6E0c0ocBE6%2Fq4rUvFVVKt5BoRqxFcrAH%2FOKwMyqDxA5D82fCBHhMMmxzMg%2BDrltmplCm9Is8zthtrPc28YplfmMu7AINZcKOfKyvXpbx10W5DwM5Ep35FumMcGCjrjg0hC8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff5d4cea4243-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:18 UTC	600	IN	Data Raw: 37 63 61 66 0d 0a 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 20 3d 20 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 0d 0a 20 20 20 20 5b 22 63 68 75 6e 6b 2d 31 30 61 38 31 61 65 32 22 5d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 31 31 34 38 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 65 2c 20 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 6e 28 22 61 36 39 31 22 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 6e 28 22 31 64 38 30 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 65 78 70 6f 72 74 73 20 3d 20 66 75 6e 63 74 69 6f Data Ascii: 7caf(window["webpackJsonp"] = window["webpackJsonp"] \|\| []).push([ ["chunk-10a81ae2"], { 1148: function (t, e, n) { "use strict"; var a = n("a691"), o = n("1d80"); t.exports = functio
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 31 31 39 35 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 65 2c 20 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 65 78 70 6f 72 74 73 20 3d 20 6e 2e 70 20 2b 20 22 69 6d 67 2f 61 76 61 74 61 72 2e 63 66 62 66 36 64 32 30 2e 70 6e 67 22 0d 0a 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 22 31 64 64 65 22 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 65 2c 20 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 6e 28 22 64 30 33 39 22 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 6e 28 22 62 36 32 32 22 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 6e 28 22 32 64 30 30 22 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: }, 1195: function (t, e, n) { t.exports = n.p + "img/avatar.cfbf6d20.png" }, "1dde": function (t, e, n) { var a = n("d039"), o = n("b622"), s = n("2d00"),
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 2c 20 74 28 65 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 20 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 20 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 Data Ascii: }, t(e) } function e(t, e) { if (!(t instanceof e)) throw new TypeError("Cannot call a class as a function") } function n(t, e) { for
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 20 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 72 69 74 61 62 6c 65 3a 20 21 30 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 20 65 20 26 26 20 72 28 74 2c 20 65 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 Data Ascii: constructor: { value: t, writable: !0, configurable: !0 } }), e && r(t, e) } func
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 20 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 20 3d 20 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 74 2c 20 61 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 6e 65 77 20 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 20 26 26 20 72 28 73 2c 20 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 20 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 63 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 72 67 75 6d 65 6e 74 73 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: a.push.apply(a, e); var o = Function.bind.apply(t, a), s = new o; return n && r(s, n.prototype), s }, c.apply(null, arguments)
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 65 20 3d 20 5b 5d 2c 20 6e 20 3d 20 30 3b 20 6e 20 3c 20 74 2e 6c 65 6e 67 74 68 3b 20 6e 2b 2b 29 20 2d 20 31 20 3d 3d 3d 20 65 2e 69 6e 64 65 78 4f 66 28 74 5b 6e 5d 29 20 26 26 20 65 2e 70 75 73 68 28 74 5b 6e 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 41 72 72 Data Ascii: nction (t) { for (var e = [], n = 0; n < t.length; n++) - 1 === e.indexOf(t[n]) && e.push(t[n]); return e }, h = function (t) { return Arr
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 20 3d 20 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 22 63 61 6e 63 65 6c 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 64 72 6f 70 3a 20 22 6f 76 65 72 6c 61 79 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 6f 73 65 3a 20 22 63 6c 6f 73 65 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 73 63 3a 20 22 65 73 63 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d Data Ascii: }, A = Object.freeze({ cancel: "cancel", backdrop: "overlay", close: "close", esc: "esc", tim
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 20 65 2c 20 6e 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 7d 29 2c 20 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 20 3d 20 22 73 77 61 6c 32 2d 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 20 3d 20 66 75 6e 63 74 69 6f Data Ascii: urn t.call(this, e, n).then((function () {}), (function (t) { return t })) } }, T = "swal2-", _ = functio
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 65 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 2e 66 6f 63 75 73 28 29 2c 20 22 66 69 6c 65 22 20 21 3d 3d 20 74 2e 74 79 70 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 74 Data Ascii: O = function (t, e) { return t.classList.contains(e) }, V = function (t) { if (t.focus(), "file" !== t.type) { var e = t
2024-09-15 22:19:18 UTC	1369	IN	Data Raw: 6e 74 20 3f 20 22 62 6c 6f 63 6b 22 20 3a 20 22 66 6c 65 78 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 20 3d 20 22 22 2c 20 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 Data Ascii: nt ? "block" : "flex" }, N = function (t) { t.style.opacity = "", t.style.display = "none" }, R = function (t) { return t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.10	49747	203.162.56.72	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:18 UTC	632	OUT	GET /web/ff/ff_membership/item/Vip-Membership.jpg HTTP/1.1 Host: cdn.vn.garenanow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:18 UTC	311	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 15 Sep 2024 22:19:18 GMT Content-Type: image/jpeg Content-Length: 425312 Connection: close Last-Modified: Wed, 09 Jan 2019 08:55:01 GMT ETag: "5c35b6e5-67d60" X-Cache-Status: HIT X-Handled-By: cdn-master Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-15 22:19:18 UTC	16073	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 7a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydzhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-09-15 22:19:18 UTC	16384	IN	Data Raw: d1 d8 f9 cb 24 6d 28 90 74 a2 55 47 b0 e1 fc b1 83 c0 1e 4e b2 aa 6c 23 39 aa 6d e9 6d 04 ce 7c bb 8f e0 dc 85 27 e6 3f 7d 88 cd da aa be de 03 6a 20 82 58 f7 5e 71 24 9d c2 7d 4c 5b 72 3b bb 7d be 45 be 2e f1 49 19 52 b0 bc cc 15 06 79 95 f8 d7 2c cd 42 28 cc 1e b8 84 21 dc 7b b7 d8 f9 3f 79 72 7d ae e1 a3 8d be 05 a5 c5 f6 de ba 7a 33 18 bd 48 a4 3e 3f 1e 94 53 95 09 c4 7f ca be 8d ec d9 19 2f 60 9c 9d 6b 8a bd f8 9d 4c 5c d6 0d 76 4f 06 43 cb eb ec b5 36 8d ca bb 36 40 3b 95 2d c4 3a 7e 00 2b d7 51 3d f3 6c 47 49 b2 9a 56 5f d5 d3 52 05 3c ff 00 66 a0 0e 80 05 63 4e a6 b9 e2 45 d9 ff 00 89 1c b6 61 23 e5 5b 24 17 f1 f4 d7 64 f2 5b 3a 81 e2 52 71 2c 4d ec 55 65 f6 91 88 d3 9b 7d 28 79 ab 08 4a 1f 9d 9d e1 37 b0 dd 59 4b 0a a1 12 53 39 e5 76 85 6c 9a db Data Ascii: $m(tUGNl#9mm\|'?}j X^q$}L[r;}E.IRy,B(!{?yr}z3H>?S/`kL\vOC66@;-:~+Q=lGIV_R<fcNEa#[$d[:Rq,MUe}(yJ7YKS9vl
2024-09-15 22:19:19 UTC	16384	IN	Data Raw: 63 f9 53 12 96 b5 aa c6 0c a4 ae 05 65 f3 e0 f4 4d 94 35 6d 1a 67 c5 47 b5 7f 0d 45 ec ea 2e f4 2d 41 95 4a 90 7f 48 8c a9 5f 3f 03 e7 87 92 c0 e6 cf d6 d3 a2 e6 07 f5 61 2a 32 56 1f 13 c6 3f a8 df 8e 3f 2c c6 10 f8 6e 6d 6f 4d 2e 03 09 2e b7 6b 8b 58 d9 d1 df cd 74 ba 98 11 61 51 ad d8 e9 b8 b9 90 91 b3 95 b2 6b bd a2 51 d5 4b 70 f4 f4 27 4a bc 62 5b e4 bc 74 b2 15 91 14 82 c6 ba 47 4f c4 69 d4 f8 0e b5 c0 dc a3 68 da ee 2d 1a 4b 83 4b 4b 90 92 c2 a2 9a d9 a4 a1 f4 e3 5f 02 1a a3 51 c8 2f 5e a3 0b e8 9e 55 70 39 97 2d 37 5c bb 8f 34 fc 49 0d c5 b4 5b f2 3e 4e 3c 59 4f 6e 96 4c ff 00 68 17 99 4c 8f 46 f7 1b 04 0d ca b4 fe 82 3d f3 72 d3 46 be 95 56 b4 60 1d 52 95 cc 2d 72 a0 f1 03 0c 3b ae 1b ba 6d ea 0f c9 47 11 71 a9 54 90 5e 94 ae 5f d3 d3 cb 12 02 aa Data Ascii: cSeM5mgGE.-AJH_?a*2V??,nmoM..kXtaQkQKp'Jb[tGOih-KKK_Q/^Up9-7\4I[>N<YOnLhLF=rFV`R-r;mGqT^_
2024-09-15 22:19:19 UTC	16384	IN	Data Raw: fe 62 eb e9 dc da 58 82 a3 d4 7c f3 eb e9 fa 5c 50 3d 34 13 de de 7e 19 19 98 7b 49 fe 91 82 7e 9c 71 1a 08 21 a0 fe a2 8f e6 18 0a a8 ca 7c 92 99 ea 58 3e a1 e5 2d 4a 23 d3 a9 ee d8 f5 1a d2 39 81 cc aa 83 f7 7f 2f bf 06 e2 bc 11 f5 88 03 ec a7 f4 60 5c 48 ae c6 58 71 ab 02 c2 c1 fd f6 14 b4 2b f4 29 2a 42 81 d0 cb 74 51 c3 a7 e3 1d 08 26 a3 dc 69 fc f8 3a b7 69 30 d3 24 41 d7 c9 a8 47 e5 07 0e 25 16 41 90 c6 75 96 e3 df c9 79 4a 5a 1b 6d 99 29 44 b4 28 ab 70 02 84 92 e2 bb 46 fb f4 d2 d5 af 21 dd e1 1e 9c 52 c8 15 b2 f8 9b 50 eb e0 1c 30 1f 76 0c fc 86 cf 22 17 9a d2 35 00 54 95 25 0f d9 a6 82 b8 99 f5 1c fb 37 02 c3 99 a9 8b 5b 41 2a 54 56 9d 4c 69 4a 13 a3 39 32 e2 50 25 e9 92 19 43 81 a7 3b 14 ae ee 84 0d 92 00 db a6 ac 06 d1 de 6b de 23 c7 7f 76 5a Data Ascii: bX\|\P=4~{I~q!\|X>-J#9/`\HXq+)BtQ&i:i0$AG%AuyJZm)D(pF!RP0v"5T%7[ATVLiJ92P%C;k#vZ
2024-09-15 22:19:19 UTC	16384	IN	Data Raw: b8 3a 45 7a 90 a4 e2 58 9b 9f f7 c6 f2 27 7b 36 dc 1e 4d 24 aa ad a0 8c 31 a6 40 b7 cb b1 50 4f 52 03 11 e0 31 33 38 bb 17 fa 60 d0 b0 d4 a6 f2 0e 20 9b 92 a1 1b 89 1c 8d 32 57 cd 32 ea 37 eb 06 b3 e6 e4 d5 c5 3d ff 00 ba 5a 5b ae 93 b1 0a df ae a1 ad cd ac 6d 37 54 6d ba 3d aa 3b 70 c3 47 cb 5c 41 70 81 ab 93 34 93 c8 f9 8c 8a 96 09 a4 e7 8a db ce b7 df ae 3d da 56 81 ed 39 14 5b 29 3f 87 6e 45 d2 41 fd 79 34 2c ad 97 50 c1 54 78 8c 28 ed ab b3 1c c1 e9 11 fc 55 39 c4 78 e4 28 b1 94 b1 64 6c f8 e2 19 24 86 dc 8d 47 76 f2 e0 ae 32 3b 4e c1 4f f7 6d e8 da 8f 4d 4c 5b 9c e8 db 2a dc 72 8b fd b2 0b d9 a3 3e 94 82 38 e6 9c 54 53 51 11 30 13 0f 02 69 45 3d 30 83 61 79 c7 38 ec 69 37 7e bf 75 bc d9 6a b5 68 fd 3d c5 fc c3 4f 00 0e 18 fb 23 a5 7a b8 18 8c 7c 83 Data Ascii: :EzX'{6M$1@POR138` 2W27=Z[m7Tm=;pG\Ap4=V9[)?nEAy4,PTx(U9x(dl$Gv2;NOmML[*r>8TSQ0iE=0ay8i7~ujh=O#z\|
2024-09-15 22:19:19 UTC	16384	IN	Data Raw: 56 3a 85 94 8e 08 7a 65 1c eb 9a 30 3e 01 bf 09 f2 fb b0 a0 cd 31 e8 f3 e1 ca a2 5d 9a 6a 33 0a 19 42 a3 19 c8 a4 14 86 2d ab e7 21 4f e3 02 71 57 f0 d4 a6 96 43 2d 3a 7f be 3b 4f ae 90 d9 e3 0a 6c e5 00 b2 3e 90 c7 f4 90 e6 86 b5 c8 f9 30 23 3c b1 be db 75 22 48 b7 a9 19 7d b2 e5 3d 49 63 5e b1 c8 b9 4d a7 d8 7f 13 2f 91 a8 e9 81 7e 20 e7 56 1c a7 2b 31 87 93 2a 24 3e 4d e1 fb b6 30 6e 48 ad 80 e2 90 e7 cd b2 e8 95 59 22 c6 23 a0 3d 15 73 eb 96 dc 96 77 dd 0e b6 7b 90 a2 9e ba 97 3b 6b 6d 23 ee 57 22 55 7a 2c 11 32 b1 e8 eb a8 e7 5e 9a 85 08 3e d1 ef c3 4b ba 96 56 db 0c 10 0d b1 bd 4d 8a fc 19 a1 27 3d 04 81 a9 45 3a d0 9d 27 a1 15 cf 14 59 e5 f4 5c ae c7 cb 3e 73 e5 db ea cc 43 22 61 8c ae 64 0c 76 34 8c 82 4d 4b f8 8e 39 41 19 9a b6 25 4b 7a c6 bd ca Data Ascii: V:ze0>1]j3B-!OqWC-:;Ol>0#<u"H}=Ic^M/~ V+1*$>M0nHY"#=sw{;km#W"Uz,2^>KVM'=E:'Y\>sC"adv4MK9A%Kz
2024-09-15 22:19:19 UTC	16384	IN	Data Raw: 64 84 81 b3 92 51 24 38 95 36 12 3e 3b 01 f6 68 0d b7 7c dc f6 21 f2 db 65 cb c5 13 bf e1 26 3a 31 a5 69 46 53 53 e4 06 23 be 5f b4 70 59 2e a1 8b 91 0d 57 32 36 88 8b 39 46 f7 29 5a 67 83 97 72 ae 52 cc 90 ca 6e 9e 43 34 2c ad 25 c4 c1 69 55 6c 49 52 14 0a 9e 10 61 a8 a2 5c 94 f5 ec 53 a9 f6 92 7d 46 97 6e 77 7e 4f bd db a7 aa f2 ad b2 9e 8a 3d 3d 59 e7 f0 a6 9d 67 ca aa c0 1e a4 61 08 6c 1c 17 8e 3b 1d b1 4b 6e ac 32 2e 7d 56 5a 8e 9a df 34 5f 30 a7 51 c4 a5 e3 2c f3 04 c4 60 29 0f 43 b1 86 f3 8d 84 ca 7d 49 aa c8 2c a6 6d f8 bf 8f 30 a9 87 63 34 9f 50 d3 2d 25 23 f4 6a 4c e3 bb ae df b6 5a aa d5 d2 52 b9 d4 ab 39 f6 b3 65 5f 70 cb d9 88 1f 9b 71 1e 55 c8 ae c3 45 24 32 44 1b e1 50 65 b7 8d 3f b2 9f 10 63 fd 67 62 70 e9 b5 c9 b3 ad 91 f3 58 e7 1c 72 6d Data Ascii: dQ$86>;h\|!e&:1iFSS#_pY.W269F)ZgrRnC4,%iUlIRa\S}Fnw~O==Ygal;Kn2.}VZ4_0Q,`)C}I,m0c4P-%#jLZR9e_pqUE$2DPe?cgbpXrm
2024-09-15 22:19:19 UTC	16384	IN	Data Raw: ab 57 90 5b 71 70 df dd c3 e9 83 99 01 9d 80 f6 1a 15 2d 4f 2c ab ec c4 4a b1 77 16 74 25 06 e0 64 a6 55 f8 56 b4 f1 a5 08 5a f9 67 4c 48 bc 13 37 f1 3f 1f 6d 21 0c d7 33 65 ed ec ec ec 8b 18 fe 6a fa 96 40 f7 13 19 e8 d0 25 43 8a 8f f0 94 a1 0a fb 55 a9 03 66 bf ed 3e de a3 4d b8 f5 f5 7e 39 ad 59 da be 14 2b 1b 85 15 1e 00 0a 7b 31 14 72 8e 11 f5 13 bc 48 4b 99 de c6 b9 25 bd d7 a4 a0 78 6a 0f 22 3b 1f 3a 96 1e 43 07 21 e4 e7 92 df 47 0b c1 99 43 0b dc 59 73 29 89 72 a8 31 80 5a bf da 26 a1 4f ca 82 97 3a 11 b1 65 6e 9f b1 3f 05 1f 5a e7 91 96 4e 03 13 d9 a8 6a 49 3a ca d1 a8 f3 02 1a 94 1a 87 5f 80 49 4e 94 eb 8d 63 db 5b 87 db 2b f7 46 58 ae ee 74 e5 68 f0 7a 8d 97 81 98 2a c9 4e 99 eb 54 f6 9c 27 2f fc 6d cd a7 a9 db 19 9c cf 2e 7c c4 a4 ae 52 ee 7e Data Ascii: W[qp-O,Jwt%dUVZgLH7?m!3ej@%CUf>M~9Y+{1rHK%xj";:C!GCYs)r1Z&O:en?ZNjI:_INc[+FXthz*NT'/m.\|R~
2024-09-15 22:19:19 UTC	16384	IN	Data Raw: e1 9a 6a e7 eb 0d 34 1f d5 01 02 93 fd b2 07 4c 3f 18 e6 41 c0 f0 5b 4c 7c 29 10 0c d7 40 6d 96 28 e3 d9 b3 90 be be d3 b1 55 84 85 c4 48 21 43 f7 96 e8 6c 1f 86 a5 1b 3b ce dd d9 90 36 75 2f 7d d1 04 6b 3a dc 31 3f a2 24 94 ae 43 c6 ad 4f 3c 43 7b e6 db dd db a9 0c dc a0 cc 2d 54 d5 9a 76 88 db 28 f6 46 a1 cf d8 a9 a8 f9 e1 59 2e ab 90 6e 23 29 55 b9 23 58 74 6e df e0 2a 6c 68 39 9d ca fb bd 0b f2 03 71 62 c4 27 fe 8b 8f 2f 7f ef 68 d5 ee d7 cb 2f 62 f5 e1 ba fd dd 6c b9 80 e1 2e a6 fb 5e 81 63 f7 06 66 3e 04 61 af 06 f1 c3 36 c9 c2 df 58 b6 e7 71 5f 88 46 d2 59 42 29 e4 b5 77 7f b5 50 7b 31 1e f3 6e 3c cc 2a 54 ec eb 8e 4a 83 6a eb 9d 42 56 c4 46 ad d7 b9 fd d4 41 94 1d 78 0d fa ec 93 da 35 0d f2 ae 21 ba d8 ca d7 97 fb 84 13 ca 46 55 27 d6 61 fd 82 c0 Data Ascii: j4L?A[L\|)@m(UH!Cl;6u/}k:1?$CO<C{-Tv(FY.n#)U#Xtnlh9qb'/h/bl.^cf>a6Xq_FYB)wP{1n<TJjBVFAx5!FU'a
2024-09-15 22:19:19 UTC	16384	IN	Data Raw: 79 61 5d 66 4a 08 84 81 68 c4 53 d4 76 5a 8a 83 51 51 e5 89 98 d7 d3 4f 89 5a ac 43 4b 67 24 54 85 b0 9d ac d5 95 b4 ae f7 3b 7f 13 cd c2 44 41 19 2d 9f ee a7 bd 5f 79 d2 37 c8 f1 96 90 aa 89 4d 3c 33 af de 29 f9 46 2b a3 fd 68 77 01 ef 4b ab 59 7a 21 bf bb f9 53 90 f0 05 cb 6a 27 cc e9 1e c1 86 47 23 fa 75 63 74 b3 3b e1 e7 34 31 e2 15 ee 84 64 2b 96 14 90 08 20 38 ba eb 05 1e 83 d7 66 c0 f8 e9 62 db 8d ec f7 ab 5b 68 2e e4 61 d5 7e 2c c7 f6 aa 3e fc 49 9b 3f d5 fe f3 b9 5b 68 b8 da ae de e2 99 9b 70 94 fb 04 91 8f b3 e2 c6 8c e3 81 b8 ab 8f f8 c9 d6 ad 57 c5 d3 a4 a2 54 78 ca b7 af bf 12 65 fc c4 82 b0 db de c3 f2 db 9a d2 48 46 ca 0a 01 3b 9d 26 c5 c6 15 37 7f 5a ec 24 3b 22 ae 6b 28 28 aa 6b 4a eb 24 7c 59 f8 b1 c6 38 c7 74 39 e7 2e e6 ea f6 0b be c5 Data Ascii: ya]fJhSvZQQOZCKg$T;DA-_y7M<3)F+hwKYz!Sj'G#uct;41d+ 8fb[h.a~,>I?[hpWTxeHF;&7Z$;"k((kJ$\|Y8t9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.10	49761	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:18 UTC	365	OUT	GET /images/dob-bg.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	754	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 65835 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:00 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294218 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4RMujlBqPmCBZxjM7z8wqzIyvZlzY1gaaUAns1fKfX2kRaVUk%2Fw0EDcWxv9D3aFW9pJMung8dgeRRf4AknIWvY%2Fk6Kz%2BEr9InoM6W2PXhpGWh0l3zCPk55oYzMlzdw6wqZTijZMKFUPub00%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff63c97019f3-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 37 00 00 03 54 08 02 00 00 00 28 e8 51 fa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR7T(QpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 Data Ascii: -]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f Data Ascii: 5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: e5 2e 90 c0 10 48 b8 ca 78 d5 78 6d f1 1b 64 fb 00 67 93 c2 51 65 7e b9 8a 60 5b fb 8d b7 82 64 a0 19 dc 44 12 aa fe a4 ff e6 87 be 52 e5 25 db 20 49 d8 83 a5 dc 69 a3 90 d9 05 b6 6a d0 18 63 7b 3a 9b 25 c3 46 45 c2 c6 a9 68 6a ee 5b bc dc 47 8c 79 4a 7c 2d 50 9c be bd 2e bb 48 b0 68 c3 4a 8e 22 d8 52 26 09 6e 5d 86 71 f6 6b b2 59 72 12 b7 69 23 a5 5c a3 67 74 da c0 82 89 29 bd 48 f9 c0 20 cd 46 02 63 ac b2 b3 dd 2d 13 f7 de 4d 10 5d 85 52 2a b9 5e e8 cd 12 a3 b7 d9 69 d8 1f 53 87 cf 95 e4 ee e5 3e d7 55 02 bf 07 4b 71 3f 41 39 9e 95 d1 ac 17 01 cb 55 70 4f f8 29 bf 9d b2 f4 af b8 a2 5f 10 d7 24 f2 22 08 6d 00 fd b3 d1 b0 b3 60 25 50 ec 36 93 c1 28 24 d5 32 5e 45 05 47 88 1c b7 ca 21 cb da 46 89 ee 75 3c 8e 59 b5 ef 53 8d 89 5c 7c 2f 57 ca ea 34 39 a4 9a Data Ascii: .HxxmdgQe~`[dDR% Iijc{:%FEhj[GyJ\|-P.HhJ"R&n]qkYri#\gt)H Fc-M]R*^iS>UKq?A9UpO)_$"m`%P6($2^EG!Fu<YS\\|/W49
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: fd a8 73 46 aa 0c 39 b6 25 53 06 a5 f9 c6 c7 3e 25 d4 fa 81 69 67 cc 41 b0 4a 98 60 fc 61 30 43 09 24 00 60 49 02 00 24 1f e3 56 dc 8e 3f 98 24 03 1e 7d 76 7b 9c f0 ee 59 5a c5 4a 46 16 5f 2f f2 bb cc 45 22 af 11 aa ad 81 60 53 18 5f 58 ee 13 e9 64 f3 2a 51 92 26 33 a2 e4 17 49 af 5d 11 ed b2 18 37 bd 2b 9e 70 8b d2 16 2d 26 25 ed d8 b1 50 77 67 5d 35 cb a1 38 85 1f 0d 92 15 38 d7 e8 0d 92 95 c9 04 cb c4 3d 33 af 97 ff 0e 35 55 43 96 0a b9 14 a7 8c d4 af 87 d2 69 93 dd a3 9e 7c 10 47 18 c4 c7 27 ef 32 2a 4a f7 00 c1 7b ec ad ce e5 d4 2f 90 6c 2b c1 c9 de 23 90 2a fd 46 ec 79 1b fb 9b ca 95 e9 95 81 69 27 26 87 0d fe 2e a7 30 d4 3a f2 ac 56 41 55 12 dd b2 9a 32 88 84 a4 9a ec 7d ae 31 da 1e f2 a5 0d 46 8d 4a 4e 36 fa 7c 32 dc 50 fd 93 83 4d b4 6f ab 9a dd Data Ascii: sF9%S>%igAJ`a0C$`I$V?$}v{YZJF_/E"`S_XdQ&3I]7+p-&%Pwg]588=35UCi\|G'2J{/l+#*Fyi'&.0:VAU2}1FJN6\|2PMo
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: db a3 59 8a 29 8c 67 56 f3 a0 48 92 0f 2e 71 bc 2a 3b 00 ec fd 34 bd 3e 03 d7 5b 57 2c 58 f3 5b 97 9b d4 7d bd 9a a9 23 ed 26 fc b5 54 47 72 33 73 4f 5b dc 9c be a9 4d c8 1b 68 86 92 08 87 6b 26 d7 e5 46 85 6c bd b3 ab 1d 6a 4a 55 32 ba de 62 2e b4 6c 23 60 45 57 97 f9 77 59 9d 6f dc 9b a5 58 0a ca fe fb 24 09 d9 e2 af 0a 4b ed fc 96 72 ef c1 f2 38 2b 0a 4e d1 f8 fa 8d 04 97 56 23 8f 8f a7 8f b3 ef 82 8d ec 7b 64 20 fd e6 36 9f 3a 8b 59 5c 3c f2 97 0a 1c 25 73 1e 24 df 53 d8 63 ce 3b 9a 2f 93 3b b7 98 69 f9 a6 7b 0e e0 d9 bb 01 2e b7 ee 8a b4 db 2d 1c c5 1f cc 9e ca 42 7a 08 a9 87 0b 5e 15 4e d9 cc a6 c6 ad c1 69 04 a0 58 92 e1 b5 49 71 bc fe 6e 61 29 0d 97 f8 87 19 79 be 65 a4 94 4d 4b 0a 16 4f 82 c2 95 4c 10 f2 9b e8 a1 ce 00 00 d0 6f a6 14 2f 27 25 37 Data Ascii: Y)gVH.q*;4>[W,X[}#&TGr3sO[Mhk&FljJU2b.l#`EWwYoX$Kr8+NV#{d 6:Y\<%s$Sc;/;i{.-Bz^NiXIqna)yeMKOLo/'%7
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 55 92 e3 5c 22 f3 49 bf b1 aa 23 0d d0 ec e3 36 fb 38 ca 05 56 e0 01 cc 84 8e ee 1d b0 16 1f 8f 49 21 cc 3e 10 43 15 d0 ea 06 40 31 1e 39 4a 43 43 e0 78 56 e3 69 98 09 fd f3 c0 67 23 51 88 76 ae 3f e8 8e 9b 63 2c 2d d4 a1 03 02 f2 f6 55 0e 2d 3d cb 84 4f 8f e9 a2 15 09 61 6a e7 a5 b6 46 6d 4f 54 c0 9c 43 04 2f ef f3 9f 7d 87 fb 9e b3 ca 40 b4 d4 91 e8 89 f0 79 6d 30 8d df a0 39 4c 2e d3 b6 6b c9 d7 95 45 53 34 43 6d b8 ef 08 b5 f6 7d 3d 42 6f 95 27 6a 93 88 8c e3 51 b5 e3 d6 b3 cb f3 7c 96 42 4e 4d 77 e4 9a ab 92 54 92 61 62 96 b3 7f f0 93 03 6c c7 54 ba 35 de d4 08 1e b1 4f b4 d5 43 d0 d3 dd 92 47 81 b3 dd 89 ca 42 81 6f 6b 03 d5 a4 11 eb ef 69 67 14 72 3f 57 f7 aa 32 b1 2a 1c a5 81 21 34 f0 40 ee 4b 2a 35 48 bc ab 2a ae 0c ad 7a d1 29 bd 5c e3 7b ec 92 Data Ascii: U\"I#68VI!>C@19JCCxVig#Qv?c,-U-=OajFmOTC/}@ym09L.kES4Cm}=Bo'jQ\|BNMwTablT5OCGBokigr?W2!4@K5H*z)\{
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 8b 56 7b 32 e7 97 df 9a 37 4a 77 bf 16 4f 72 96 8f 66 fe 27 e4 1f f9 c9 d2 65 8b 58 7b 3e cf dd 1e 6a ec da 28 ca c2 34 ed 2c 6b 7f a4 60 02 80 08 ea 85 4b a5 66 ae 45 ee 32 71 76 08 4a cf d9 bc 6f da b7 09 15 7b fb a3 34 95 fb 25 dd 97 89 55 ff b1 a4 7e d7 6b a0 9a 6b 5c 90 dc aa 62 75 da 57 1b 40 62 68 9d 59 86 3b a5 8e fa 9e c3 b3 6a 59 16 9b 4a 4e f5 34 c3 a6 98 9f 16 ef fe 53 4f 59 59 e9 64 38 b2 a1 37 3a f4 c3 00 f3 a5 f4 c4 3c d1 a9 6d 06 77 9f cd 8c e3 27 b9 84 1d 5c f7 0d 00 36 32 67 59 75 a8 c0 98 1c 46 48 a4 ad b4 c7 1d 8b 02 0f 0b 0b b7 1f 64 70 37 78 35 92 72 4b ee 23 ec 7a d4 61 f3 51 cd 6c be 7e 45 37 0f f8 ed 8b 52 79 dc 1e fb d8 f7 ea af ff ed d4 14 74 4e 25 a2 e5 c8 19 8a 31 d6 d4 47 c5 87 4e 4a db 8c e4 a5 5d d7 12 95 24 b0 71 2a d1 ef Data Ascii: V{27JwOrf'eX{>j(4,k`KfE2qvJo{4%U~kk\buW@bhY;jYJN4SOYYd87:<mw'\62gYuFHdp7x5rK#zaQl~E7RytN%1GNJ]$q*
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 57 ad 14 4d be 4f 1b 3a 4d c1 ab 2b 0e 7a f2 88 fc 48 07 a8 85 8d 5a ab 64 1b ab 65 1d af 6c a4 78 9a ce 36 e9 a2 ca 29 70 11 4b 56 fd f4 d2 9b 2b c1 be c4 63 5c b0 c7 b4 64 5c 24 e7 46 a3 b7 d4 6a 39 db 94 96 f9 21 55 1d 81 9b 4f 05 10 26 04 00 58 1a 47 82 20 6c d7 ac d3 69 b1 5b b4 e7 f8 9c bd a6 8e cc 70 e3 d2 a9 67 9c 54 d1 ea 01 62 95 c0 01 f7 a8 7e 96 49 bc 5d 3f f2 db d7 fb fd bb 7e a4 f7 f5 ac 85 c7 27 38 8a a6 af 71 91 d2 ac 03 67 4e 59 fc 44 5b 7b 19 2e b4 b4 77 71 06 67 a3 ab 54 8b 12 e3 ca a7 b1 5c 18 aa d6 a0 57 c2 00 6a 0b 92 b0 c7 40 71 65 b8 ef 49 16 dd d6 21 82 4a d5 54 12 e4 8d e5 e7 cc 60 29 14 60 d4 58 2d a8 04 2b 27 c8 4e 63 57 46 ac 26 b6 67 43 26 be da 2d a1 df 2e 74 8f 2e cd 17 ff f1 be 4f c8 4e e1 62 dd 0e 1d c6 03 c8 03 05 2e 2d Data Ascii: WMO:M+zHZdelx6)pKV+c\d\$Fj9!UO&XG li[pgTb~I]?~'8qgNYD[{.wqgT\Wj@qeI!JT`)`X-+'NcWF&gC&-.t.ONb.-
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 4b 1e 28 23 96 b0 94 62 84 ba df ce 4e 12 1b 9c f6 db 93 5f bf 16 70 54 7e 53 3b 14 8f 71 be 61 1e 01 13 6c 35 56 cb 93 f1 f4 75 8b b3 e7 33 4c e1 c8 5a 8b ae 9c 11 da 4d b6 ab 98 03 1b ca 0d 73 ab 49 ad a4 9f 92 4a 04 e2 28 64 90 d0 52 46 5a 7c ed 45 8b c5 3c e2 c6 35 42 35 15 b2 8d 49 d5 41 c0 cc f6 2b c6 7d d8 60 7a 25 db 35 ab 07 2b 43 d7 ef 03 83 03 58 a5 eb d9 60 0a ac f2 9a c5 2a 68 de d2 10 6d 62 d9 ea 68 cc 93 31 f2 3d 7a 23 4f 53 d3 b6 19 5b 74 c8 6b 8c 84 e2 32 21 99 0e 38 ad 5b 2b 51 9d 06 a8 52 3d 86 e7 3a 8c 0c 7a d7 6b 0e e5 3c 67 7d 1c f6 c5 b3 a4 68 09 f3 ff 9e 9a a2 b0 2d b4 cd 1e 90 93 8d ec bf c3 7a 64 8c 65 a4 b9 2d 04 ec 06 31 37 25 48 bd 73 21 cf 74 44 d9 6b 40 02 ea 25 56 c9 46 73 92 68 8b 83 96 e4 4d 44 4e 4e 3e 74 fa 42 5b bb ac Data Ascii: K(#bN_pT~S;qal5Vu3LZMsIJ(dRFZ\|E<5B5IA+}`z%5+CX`*hmbh1=z#OS[tk2!8[+QR=:zk<g}h-zde-17%Hs!tDk@%VFshMDNN>tB[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.10	49760	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:18 UTC	367	OUT	GET /images/red-bg-2.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	756	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 39362 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:00 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294218 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m5zfA0Eu5ekHBkHsuEd5eah3m53%2BGY7ueA6FJ%2BgABl3fF6b8Al9%2FsEJ9LzvRXr65Aj7wliQ1hsu049QXJ3mDvpRSmnRPxAcQ9VgfuoYW9AQ3Q%2FKgoXtkI9TMTjcb6cce3C2oef9wqwObX0c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff63cd938c35-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 93 00 00 00 39 08 06 00 00 00 f3 ec c6 5d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR9]pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 Data Ascii: {-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 Data Ascii: 5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 77 40 2b ea f9 19 fb db 0f 94 aa b0 6d 83 b7 02 bb 3b ea f9 0c a9 0e bb df 20 0e a0 28 a4 b5 78 ce 3e 76 14 31 cc 6e a8 4f 2b 00 87 dd 27 6c 00 fb b6 a3 9d 1a ea 49 e1 13 f8 f8 71 c5 18 03 aa 8a d2 2a e0 80 9b f3 7c 2a 4a 2d b0 69 d8 b6 0d ee 02 55 60 f6 0d 90 02 2d 0d 63 0e 60 0c 88 6d 98 50 68 3b 41 c5 31 7b 87 ae 27 28 04 70 c3 b2 ae d8 b7 0d 73 bf 43 4a 7b 1c c8 39 e2 ee e8 13 32 6e 28 a5 80 5f 0b f6 3e b1 b4 02 29 0d d3 0c 3e 3a 6a 2b d8 b6 0e 11 41 ad 05 73 8c f8 ec a6 c7 39 14 01 1c 58 5a 85 16 41 47 85 ef f1 19 4f 38 fa 34 28 80 a6 0a 11 a0 96 02 29 1a f7 c0 30 40 80 69 f1 df d6 0d 45 14 75 2d a8 b5 c2 a6 61 1f 03 ad 2a a6 01 73 4e 14 55 d8 88 3f 7b be ac 30 77 8c 7d c0 01 d8 8c 9f 53 5b 8d ff 3d 26 6a 2d e0 5f 82 65 6d f1 bd ba 63 9a 41 4b 85 96 Data Ascii: w@+m; (x>v1nO+'lIq\|J-iU`-c`mPh;A1{'(psCJ{92n(_>)>:j+As9XZAGO84()0@iEu-a*sNU?{0w}S[=&j-_emcAK
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: b0 14 c5 2f 6b 5c 30 13 40 13 83 88 42 b4 40 dd 71 1f 1d ee 40 51 e0 d6 0d 26 82 97 35 2e e7 ad 77 6c 3d de 77 55 89 c2 c4 5b a9 95 8a 39 07 ba 4d 98 45 d1 d8 a6 61 1f 86 73 11 9c 5a cd 61 14 6b 29 70 55 dc f6 1d 6b 51 2c b5 62 1b 13 ee 06 15 e0 52 14 d3 e3 cc 9c 5b c1 a9 b0 98 f4 0e d5 12 4d d6 98 68 b5 42 01 4c 37 18 80 e7 52 50 6a c5 5a 05 ab 3a 76 13 b4 22 28 45 e1 6e b0 19 e7 4a 4b 74 92 e6 02 9b 33 8a 52 8b ae 13 4d 61 dd 80 e9 31 01 89 43 8b c6 45 5f 63 22 f4 19 97 38 94 37 bf 71 7c 69 2d 0a c3 e8 80 45 d1 8a a9 e1 d3 88 83 f8 73 3e 0d 3e e3 72 11 89 29 5a 44 00 73 cc 6d 02 aa 28 a7 02 db 26 ac 1b a4 08 ca 5a 20 2a 98 f7 01 9b 06 33 47 29 0a 14 c5 dc a3 78 15 15 a0 2a b6 6b 87 a9 42 e6 04 04 b8 f5 89 56 34 9e 43 8f e7 d3 cd 51 5b c5 ef 1f 77 9c 54 Data Ascii: /k\0@B@q@Q&5.wl=wU[9MEasZak)pUkQ,bR[MhBL7RPjZ:v"(EnJKt3RMa1CE_c"87q\|i-Es>>r)ZDsm(&Z 3G)xkBV4CQ[wT
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 17 f9 a5 35 bc d6 e8 5a ba 4d 5c 4a c1 6d c4 af bd b4 86 9f 7b c7 f7 7d 40 45 f0 75 69 e8 6e f8 cf f7 01 c0 f1 cb 52 f1 da 14 e6 31 9a 4d 38 4e 7c b8 00 e0 c7 36 70 f5 89 b5 28 be b4 8a 85 0f dd 9d 70 4f 53 c1 6d 5a 74 6b 6e 3c a8 82 53 89 03 75 1f 03 27 2d 31 e9 b8 e1 52 62 2c dc a6 61 29 7a 54 72 9b 13 bb 3b fa 9c a8 22 f8 b2 2e 30 33 fc 18 03 d7 31 d1 cd f0 bc 34 5c f8 30 14 6d 58 8a e0 36 3a 64 2a a2 31 8e 07 b2 8a c4 cf e6 64 32 cc 30 78 a1 ab c6 01 6c 02 9c b4 a2 96 0a 63 d1 6d 32 30 2c c6 77 97 d8 05 1d 38 be 03 4d 14 f7 31 f0 be 77 ac a5 00 06 a8 7a ec 51 ac 60 51 45 01 b0 4f 60 17 62 de 7c b0 45 40 2c b6 43 4b 1c c8 0b e1 45 82 3a 10 29 10 4c 98 03 45 80 e7 56 70 ed 86 26 c0 a2 f1 39 5d cd 50 2c 3a ac 3e 0d a7 5a 63 f4 46 bc ef 0a c7 dd 2d ba 7a Data Ascii: 5ZM\Jm{}@EuinR1M8N\|6p(pOSmZtkn<Su'-1Rb,a)zTr;".0314\0mX6:d*1d20xlcm20,w8M1wzQ`QEO`b\|E@,CKE:)LEVp&9]P,:>ZcF-z
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 8d 22 62 1a ef 7f 11 0d c8 df a3 31 ac 1a eb 83 bb 19 56 36 aa 77 9b 80 0b 56 16 c1 45 e3 f9 dc 31 51 f8 f7 7c 4c c3 17 c2 5e 8f 36 12 f8 3e 26 5e 4a ec d0 16 0d b4 c3 01 94 ff e7 5f 7f fb db 1f 7b 5f bb f9 01 1f 4f 62 63 27 2e a2 b7 19 a3 57 e1 64 a1 12 9d e5 44 7c 88 90 a8 5a d7 39 f1 75 a9 f8 b2 54 bc 8d 81 6f 7b 74 ae 5f 5a c5 97 16 6c ad 84 5f c4 a3 ba 5e 9a e2 63 4c fc be ed 18 ec 0e 04 8e e1 71 88 5f 5a c5 97 d6 d0 cd f0 a3 0f 18 1c 4b d1 e3 4d 4c 03 be f7 81 bb 39 7e 5d 1a fe 74 5a b0 8d 89 6f 5b c7 e6 f1 7b 5f 6b 4c 17 1f 5c 88 55 55 3c b7 8a c2 83 bf 5b 5c 7a e6 f1 f0 28 8b 48 91 d8 11 98 3b ae 63 1e 4b 2d f0 35 66 77 d4 34 c6 d5 7c d8 9f 5b 8c ca 9b c5 85 21 c4 ae 17 2d 78 6a b1 64 5c 88 b7 4f b2 50 12 fa 99 07 44 cf 62 0d c1 b5 c7 c4 73 9f d1 Data Ascii: "b1V6wVE1Q\|L^6>&^J_{_Obc'.WdD\|Z9uTo{t_Zl_^cLq_ZKML9~]tZo[{_kL\UU<[\z(H;cK-5fw4\|[!-xjd\OPDbs
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: b3 eb 9c 78 06 70 9d 13 3f fb 80 78 b0 65 97 12 13 53 9f 16 88 87 c7 df b5 59 9c 9b dd 1d 32 c9 ca 77 ee 36 c4 70 1d f1 7d a8 c7 67 e6 e2 18 9c 5a 62 57 29 47 41 32 01 5e 4b 9c e3 9d 7b f0 22 42 72 01 b0 b1 29 ae ee 38 89 12 62 33 54 44 9d f8 eb ba 60 98 e1 4b ad b1 3f 15 a0 69 45 f9 9f 7e 79 fd db df f7 be c6 68 c7 c5 a1 00 4f b5 92 89 60 18 88 0a 76 21 ac e4 a4 9b 0d 38 de c6 c4 a9 28 fe b2 2c 98 0e fc db de b1 d9 8c 37 86 1c 5d 83 c5 51 44 f0 61 03 55 e2 e1 fc be 4f dc 46 87 8a 60 fd d4 21 55 09 16 cf 30 3b 3a 8e b5 28 be 2c 01 7b bc 8f 89 b7 7d 60 83 e3 97 d6 f0 d2 0a 7e 8e 89 6f bd 43 25 ba 81 a5 08 ae 73 e2 f7 ad e3 52 2a be ac 2d ba 5e 33 dc cc f0 9d 8b b5 af 4b 43 63 91 5c 6b c1 53 8b d1 f2 e7 b0 63 64 be f6 80 b1 76 c2 7c 2a 31 32 93 ca 13 ac ae Data Ascii: xp?xeSY2w6p}gZbW)GA2^K{"Br)8b3TD`K?iE~yhO`v!8(,7]QDaUOF`!U0;:(,{}`~oC%sR-^3KCc\kScdv\|12
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 0b ee 33 9e 65 43 4c 97 53 81 55 e3 7f df f6 80 97 a7 19 86 46 a3 5b c8 d4 fa 52 a3 21 fb f0 89 61 01 ef 3f d7 8a 3f 2f 15 c3 80 8f d1 09 a5 86 4e 45 40 18 d0 80 3b 0c 37 73 80 53 c2 e0 bd 29 88 e9 ab 4a b0 f6 12 f2 13 07 2a cf 74 d0 75 c9 6e 14 3f e0 76 85 e2 8e 89 a5 08 2e 5a 0e 74 69 11 c1 2a 82 21 c0 f4 82 bf 94 d0 4c 09 3c b4 67 a1 cc c3 8f de d1 cd f1 e7 b5 a1 cf b8 d3 be b4 20 4e fd be 6d 00 62 e7 f6 7d 0c 9c 55 f1 d7 d3 82 f2 7f ff d3 d7 bf bd 9b ad 94 87 41 c8 e7 de cc f0 c6 65 d4 49 05 0d a1 1b 19 88 17 3c 92 af ad 82 3f c6 c4 8f 39 50 24 8a c8 c2 2f eb b5 16 34 51 88 03 4d 62 7c 7a 1b a1 a4 3c 71 12 6a 45 0f b8 e5 65 69 50 c8 c1 88 2a 22 78 ae 05 b5 44 77 7d 1d 21 a4 79 a9 05 e7 12 1f d0 cd 0c db 8c 89 e1 a9 16 6c 66 f8 39 0c 17 ad 78 ad 05 93 Data Ascii: 3eCLSUF[R!a??/NE@;7sS)Jtun?v.Zti!L<g Nmb}UAeI<?9P$/4QMb\|z<qjEeiP*"xDw}!ylf9x
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: ee 3d a8 9d 03 cf f3 1f 7b 0f ad 84 3b ee 7d 06 94 cf 29 3d 5f 97 53 97 65 10 2a db 83 0d 79 a9 05 ad 96 83 16 ef 70 7c eb 03 66 7e 40 76 4d 14 ef bc 9f 20 e1 20 51 0f 26 6c 9c d7 eb 30 fc 83 10 f5 17 ae 10 3a 2f f2 80 10 43 e0 38 3c 44 bd bf 2c 0d cf ad e0 cf 6b c3 2f eb 82 26 8a 45 24 14 fa 2a c7 5e 77 a3 c2 51 34 9e c3 3f f6 8e 6f d4 e9 25 a3 f5 6a 86 9f 63 a0 70 0a 4b d2 c3 49 1f e4 ab 55 95 48 4a ac 06 72 7f 9e ec af ca fb c2 03 2a dc ea a2 51 c9 52 7c f7 ba 94 83 5d a0 92 85 84 0b 60 2a 96 15 bc 04 d8 ad 2e 1a 1f 1e 88 7b 37 8d 07 2a 3b e2 69 b1 3f 59 4b 2c 7c 3a 3b 41 25 65 32 d9 42 d7 d9 21 0e 9c 6b 2c cf b6 e9 f8 d1 83 40 fa 5a 0a 9e 29 6c fb b6 ed 70 08 7e 5d 16 38 0c d7 69 d8 dc d1 4a 4c 50 6b 51 54 2d f8 bd 77 dc dd 70 d6 82 5f 5a 45 47 74 ea Data Ascii: ={;})=_Seyp\|f~@vM Q&l0:/C8<D,k/&E$^wQ4?o%jcpKIUHJrQR\|]`.{7*;i?YK,\|:;A%e2B!k,@Z)lp~]8iJLPkQT-wp_ZEGt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	49762	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:18 UTC	369	OUT	GET /images/select-arr.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	757	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 3333 Connection: close cache-control: public, max-age=2629000 expires: Sat, 21 Sep 2024 12:37:56 GMT last-modified: Sun, 22 Jan 2023 20:48:00 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 121283 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zbJtGKN1TbjjH3c631I2TFo6yXQ9MC7bOwNxwK260oTw7LdfkFi4R5F939scXBlU%2BV1aG7S2V9PDnMLh6VRrl9BGLu2C9DVNGcv4O1GngQ1axLHJy3mpjbF%2B%2F0OLT%2FwC9%2BmLgI34JDcQ06o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff63bf4432c7-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	612	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 17 08 06 00 00 00 1c 3f ff 6a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR?jpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e Data Ascii: {-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.
2024-09-15 22:19:19 UTC	1352	IN	Data Raw: 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 Data Ascii: z5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.10	49763	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:18 UTC	371	OUT	GET /img/logout.29f7cada.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	758	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 14980 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294218 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DcvzGfeMW26HdgwRuGsm3qgi7eH4ZXmcRpEIUJAkGAA80eaWJRV5cidfAVG3%2Bj%2B2Y5PtLQOuW17NYyrvY5TZ%2FTzPaogQhnmy%2BkAxzLVfdlkx9TPPHIh%2FRcMnBRRqijcAPhVbIpi71kscY8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff63caaf1859-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	611	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 98 00 00 00 2e 08 06 00 00 00 d4 51 d0 49 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.QIpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 Data Ascii: >{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 4d 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 Data Ascii: Mz5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nV
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 11 ff be 16 09 c1 0e 70 ad 20 95 da 65 c8 02 8d 20 c5 0c 45 73 b5 cb 2f 6a 67 a6 af 97 87 49 03 6d a5 4c 7b c8 6a 6b 3f 89 48 5f fc 3e 04 49 91 d0 06 74 9a e1 74 41 d6 c4 6e b7 0f 84 16 24 06 8e de 3f e7 d8 99 ad 94 6a a0 7b 7c ab 67 ff 73 d7 88 21 d9 a1 db 53 a0 14 b3 b2 0b 04 99 8c 20 40 28 d8 49 ef 2b 5a 7b 24 35 c8 9e 06 02 24 92 9d 1e 51 42 4c 68 b0 0b 92 26 40 4c 68 9f 91 e8 9b ae f8 ca 46 90 62 db 26 ad 1b 8e 1b 07 be e1 b5 47 52 04 ed 6c 63 06 4f 47 32 63 d0 00 32 f7 d7 8b 1b 52 6b 9f 2f d9 1e 57 01 e9 21 64 90 c6 0d ae f1 c7 2b 04 f7 1a 24 fb 0c 1d fb 35 f6 fe 99 c9 ff 2e 6e 54 8d 7f bf 20 d2 a2 9a 21 8a 19 47 f2 cf c6 af 65 f1 9e 08 a9 ba e7 ab 40 f6 6b 17 bf 9e 64 d7 57 a7 7e 08 cd c8 85 0c ea 8f a1 10 5b 44 cc f0 25 a8 79 6f cd e6 ed c3 08 51 Data Ascii: p e Es/jgImL{jk?H_>IttAn$?j{\|gs!S @(I+Z{$5$QBLh&@LhFb&GRlcOG2c2Rk/W!d+$5.nT !Ge@kdW~[D%yoQ
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 3a f7 d7 b4 b6 f1 83 db 10 75 7c c5 2e 7c e9 3b 2b e2 f7 b4 b6 34 c2 32 77 0f 3c e0 b4 99 1d 2c f1 88 50 b6 cd 08 83 67 58 ea c6 29 c1 e0 45 f1 ef 10 85 ae 43 b3 da 41 ce 19 89 0d 74 3d aa 82 34 09 3a 37 50 c5 ee a9 0c a1 de ff ce 15 45 0d 93 21 04 05 2d 16 3e b5 33 4f 17 22 a8 0a 75 5e d0 b9 65 f2 12 8c 6a 02 a8 f3 4c bb 3e 42 d7 84 20 81 b6 15 d2 f6 99 8c cc 2b 05 a5 49 11 fa 82 84 8a ae 37 48 1f a9 5b 33 24 06 42 34 a3 a8 5d 46 aa 12 1a 50 09 84 56 50 4f 8f 6b 5f 91 da a3 c5 9e a7 a8 ad f5 ac a0 21 3b 25 64 e9 b1 e6 1e 9a 88 94 8a 4a b1 74 3b 45 5b 8c 5a 0d 0f 4c d2 e2 44 da ff 77 ec ff 43 d8 49 c6 91 69 ee 0c e7 51 dc d3 79 46 a9 d9 71 8d 87 1a 61 49 1b 68 de 05 d8 87 50 24 06 40 a5 75 63 cb bb 42 6d 58 7a 3e 86 ef 9a 2d 3d d8 40 3b a0 1e c2 ab 1b 9a Data Ascii: :u\|.\|;+42w<,PgX)ECAt=4:7PE!->3O"u^ejL>B +I7H[3$B4]FPVPOk_!;%dJt;E[ZLDwCIiQyFqaIhP$@ucBmXz>-=@;
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 21 5a fc cd 0a f3 42 68 82 79 f8 99 65 2b 32 6e 90 b1 53 0d 05 a4 2f 68 6f 19 a1 60 40 5f 46 11 c9 e6 72 cd e5 2b 3a cf 16 b3 9d d4 53 b1 52 c3 22 5c 76 85 83 07 12 9b 97 45 b6 8e 15 ee fe a3 93 dc fd 47 27 6d 51 2e 4f bc f0 e6 4d 98 ce 0d 23 10 3c 09 11 98 79 f9 a4 89 5e cb 54 a4 16 5b 64 09 cb f0 8c 03 5f d2 2e 8e aa 2e e9 03 f1 d4 1f 75 da 42 dc 48 76 bd 86 c6 93 00 3d 27 3c e6 05 96 31 63 65 f1 f7 60 2c e6 c9 7b 28 e2 d8 51 ed 50 05 1c db 1a 56 13 a2 11 a2 fe b8 d8 2f 56 b4 6e 93 e1 9b 59 41 86 c4 a6 a8 15 c0 6b b5 30 98 b3 ed 97 02 7d e1 17 df f1 25 b6 8e 17 36 2f 8b 6c 5e dc 72 e4 f3 53 fe fa f6 27 f9 d7 3f 7b 9d 5f 7a 5d 56 6f 55 90 04 32 6a 0c e0 d7 6a d1 68 b0 83 60 14 86 ac 35 e6 69 8b d1 1c d5 0a 46 84 36 a2 c9 93 88 46 d0 6c d7 b7 b3 5d 48 5d Data Ascii: !ZBhye+2nS/ho`@_Fr+:SR"\vEG'mQ.OM#<y^T[d_..uBHv='<1ce`,{(QPV/VnYAk0}%6/l^rS'?{_z]VoU2jjh`5iF6Fl]H]
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 59 e7 05 ed ad e0 ad b9 d2 f7 4a ad 4a ca d9 05 7f aa 68 5f a9 db fd 92 04 5e 6b 2c 61 f1 22 78 dd c9 48 2e a6 50 0d ab 17 f7 f7 fe f7 4b 78 e1 b7 ee 45 da c0 7d f7 9d e1 a3 1f 7e 9c a3 5f ea 17 cf df fd c9 b3 fc c7 b5 87 f8 c9 7f 79 35 48 31 00 39 32 92 f2 ce 3b 4f 2d 37 f1 29 91 ad 47 97 8b f3 17 1f fb 2a df f7 0f 9f 8e b4 8e e5 34 5b a8 ad fa 75 d7 e0 3d ff f1 01 7e ea 5d df 66 29 bf 04 ce 5b 42 5d 0a fc 4e 3d 39 e3 27 bf e7 cf d8 fa 9b bc f2 92 2b 6e de c3 f3 be f3 20 17 5f 66 ba b0 87 bf 74 86 4f 7f f0 28 37 be fa a9 1e ee 6c bd 64 a0 2e 48 5e b9 12 de f4 d6 67 73 fb 7b 97 9e fd 83 ef 7c 90 bf f7 86 a7 71 c1 85 2d ef fd f7 f7 af 7c cf 1b df f6 4c c6 63 2b 2a eb b9 07 46 9d 0b 8b 26 61 d2 5c 1c c1 9f fb b3 54 f9 8a 2a cc 0a 5f bc eb 1b 7b a5 2f dc 7d Data Ascii: YJJh_^k,a"xH.PKxE}~_y5H192;O-7)G4[u=~]f)[B]N=9'+n _ftO(7ld.H^gs{\|q-\|Lc+F&a\T*_{/}
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: f2 b5 2f d9 c3 05 07 c6 bc e8 ef 1c e0 fd 3f b7 0c 7d 9f f9 e4 57 79 ce a1 43 86 9f 82 2c a5 d6 e7 e0 6a ab cd 3b b7 b5 96 bc 62 e2 40 5e 0b b4 11 ed 0a da 04 c2 e6 c8 24 5b 41 08 51 18 4f 22 f3 49 25 9c 3e 55 d8 3e 53 91 04 61 b3 b5 8d 9f e6 05 b1 6d 5d 58 be 80 83 37 fb db 7e 52 84 49 32 25 c5 d7 c9 54 64 bc 4c 12 ee f8 c4 93 8b c7 6f f8 bb 17 82 28 17 ec 6f b9 f6 96 bd 4b 03 fb c0 09 a6 a7 5d b9 1a a3 15 c3 cf f9 99 8c 13 af ff b1 a5 17 db 3a 9a f9 f8 1f 3d 7a 1e b4 11 22 42 70 9e 6b 77 e8 cc a6 0a 2d 3d 22 89 c7 8f 4f f9 cb f7 1c e7 f6 f7 3e ca ed bf 79 7c f1 df 83 77 9f 36 4e 2a 84 5d 59 e9 50 2d 18 ea 79 99 49 1b 78 c5 1b ae 38 ef 3a 6f b8 f5 52 26 e3 25 89 2a 12 90 d4 fa 46 9f e7 6b 11 31 b1 a7 16 93 30 69 97 cf 5b 6b 99 8c 90 26 71 b2 13 ee fe f8 Data Ascii: /?}WyC,j;b@^$[AQO"I%>U>Sam]X7~RI2%TdLo(oK]:=z"Bpkw-="O>y\|w6N]YP-yIx8:oR&%Fk10i[k&q
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 9e d6 8c 2d 96 f3 32 8e b0 66 fc d8 a3 8f ec f0 c8 a3 73 fe e0 c3 8f 73 ef 5f cd 57 5e f3 86 7f 76 90 7d 6b 81 3a eb b9 f3 73 ab 78 e1 fb 7f e8 32 5e f9 b2 8b 2c 04 b8 fe ff 37 df ff 08 bf fb 4b cb 90 f9 d9 4f 9f e4 da e7 5e 80 6a 39 3f 3b d4 0a c5 c0 f0 0d 37 5e c0 b5 df b9 8f bb 3f 7a ea 7c 04 e5 6a d1 c9 fa 88 d7 bf ed 19 bc fb 2d f7 2e 39 b7 8f 9c e4 cd f7 fc 29 df fd 8f 0f f3 bc 1b 2f 00 85 13 27 ba af ef bd 86 c6 0b 6f e9 32 89 b3 70 fc e8 94 0f be eb 6f 96 07 e7 a9 91 9b 5e 74 80 f1 38 70 e8 fa 09 47 3e 37 f5 32 d8 0e 1f fe c0 11 5e f5 aa 8b 9c 17 0c dc f0 c2 fd dc fe df 97 06 f4 1b ef 7a 90 49 a3 7c cb b7 ee e7 91 a3 3b fc c6 2f 3f c4 d6 57 97 06 7f d3 ad 9b b4 28 4c 7b 3e 7b c7 aa e1 bd e1 0d 97 f1 82 6f db b4 e6 1b 04 e6 85 77 e5 07 f8 f4 c7 96 Data Ascii: -2fss_W^v}k:sx2^,7KO^j9?;7^?z\|j-.9)/'o2po^t8pG>72^zI\|;/?W(L{>{ow
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 80 ce b3 c9 ae a7 d9 ca 76 d1 f6 50 e7 d5 ba be a2 b1 06 44 41 e7 de 62 36 c8 a7 77 b2 ed 57 1b 16 cd 50 da 19 e9 1e 46 61 31 60 48 e7 c5 5e e3 b4 8c b4 71 71 dd b1 af cc 2e 84 3b 3e fb 24 fd 76 39 9a 9e 7c 32 d3 ac 45 24 0a 71 23 51 92 59 e6 42 31 d1 9b ee 5a 67 d6 62 be 30 be c1 72 ab b7 a9 cd dd 98 82 50 a7 99 30 49 68 48 06 95 c4 8a e1 3a b6 76 33 e9 dd da 7b eb 9f 93 60 37 ae f3 0a db f3 5d ea 63 45 36 c6 84 22 e8 f6 1c d6 4c ab c6 4e 67 4d 09 e3 b4 ac 17 8a 2c 49 ce 41 f1 31 0c f0 88 c1 c1 88 37 01 55 4b 5a 64 d1 24 e4 fd 83 6a c3 3f a4 89 b6 b1 c1 9b 29 82 49 98 f1 f1 09 e0 ed 75 ea b5 59 5d ce 63 10 f5 02 fb 20 eb 76 35 44 ad 4a 50 a5 aa 5a 28 19 3a 89 f2 40 79 54 a3 d4 9a 64 ef 2b 36 2c ce 0c c4 9a 6e 82 78 18 48 50 73 b1 36 fe 24 90 92 19 3b 62 Data Ascii: vPDAb6wWPFa1`H^qq.;>$v9\|2E$q#QYB1Zgb0rP0IhH:v3{`7]cE6"LNgM,IA17UKZd$j?)IuY]c v5DJPZ(:@yTd+6,nxHPs6$;b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.10	49764	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:18 UTC	368	OUT	GET /images/yellow-bg.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	757	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 7521 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294218 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S2e3jW0VdgL9hRlagn23IPCpAuR5kk8l%2FQsRaZYZpFNKLqAPeV3flpX%2FuAGfdqzpVxytw3EY2xju%2FDKIJxrQpXt52e7D0qBQQ8pYbGUTF7t6GMw8qsgdpZ3tV3DxhvFVL2F4Z1%2Ftj5Z%2BCcU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff641ea9c47a-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	612	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 66 00 00 00 23 08 02 00 00 00 e9 28 e8 ea 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRf#(pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e Data Ascii: {-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 Data Ascii: z5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nV
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 3a 87 e6 7a 5d af bf 1d 85 95 62 c8 cb ba da b3 18 41 c2 2a 46 70 06 b3 20 a9 66 96 47 b9 87 6c bd 6c c1 37 29 07 5e 16 aa 65 4f 8d 03 4e 94 b0 2f bb 61 82 90 61 a2 81 93 9e 68 01 f0 b6 df 10 d0 f6 84 85 0a fb 6b 9c 15 4c 18 5f c3 0e 30 5a f4 85 f6 8b 42 e0 0b bf e1 20 9e 68 bf e5 fa cb 78 c5 01 40 f1 7e 51 bd df e8 d9 cc e5 36 ef 8b 6a ae 45 35 2d cf 85 21 cc 7b b1 aa 7f 7b 79 d9 36 6d 57 93 21 d3 8b f1 f1 11 7a 4f 7a 58 6a 4c 84 67 e9 5d 48 9c a1 d5 76 93 01 f4 bb 64 6b a4 7f fb f4 48 ce 8c 37 8c 46 96 26 4a 45 40 22 e3 cf 7d 8b 71 40 83 70 e3 49 9c 20 d4 48 f6 27 24 2c c8 bb 5e d4 b8 d0 2e b4 4f 30 32 5c 98 7b 26 0a dc c8 f8 ab 84 ad 2f 4d d8 ff b2 c0 74 b9 5b 16 0a 04 98 b5 58 a6 ed 9e 00 d5 5e a5 35 bd f6 80 87 b2 57 61 bc 4a 29 bf 97 3f cb dd be 5a Data Ascii: :z]bA*Fp fGll7)^eON/aahkL_0ZB hx@~Q6jE5-!{{y6mW!zOzXjLg]HvdkH7F&JE@"}q@pI H'$,^.O02\{&/Mt[X^5WaJ)?Z
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: b6 93 36 6e db 6a 99 f6 5f 4e 41 b1 67 ff 3e 34 1b ad c6 b6 1b d9 b2 f2 d4 dc 69 87 d4 5b 0e e4 bb 8b 6d 4b 96 bb 64 1c a1 90 6d e6 62 b5 b1 bb 99 e6 08 fd 72 e4 11 2e f7 db 48 36 fe f3 f4 b5 84 2c f5 d5 91 fa f6 8b 86 84 ab 9d d2 23 7b 16 1b f3 8e 20 e5 eb 16 66 66 db 76 5b 67 6a 84 32 6c 53 16 d8 a5 71 78 4f ee 92 7b 7d 71 a6 f0 6d 0c 6d 44 d3 c2 85 cb 0a 09 22 61 e0 0b 1b 07 d8 dd 42 90 72 4b b8 a1 ea 0e 1b ba dd bd fd 66 a0 9e e5 32 81 5b 52 b0 16 3d 89 c0 41 d7 e6 7b b5 5d 06 d3 56 21 c2 d5 8c dc c8 cc 6b 31 17 b6 53 11 e9 43 b6 98 b3 5e c5 ea 7e 2d 95 75 84 6c 8e 24 e5 1f 8b 63 98 b8 5e 1e 63 48 d0 57 d7 6c b5 69 c7 23 9d f8 b3 e2 0c bf 56 ff 66 ce 8c 10 b3 39 03 c3 7b 6d f0 f6 19 22 28 33 9b c4 32 29 db 78 62 49 b9 9d 16 5d 48 ce 21 d8 65 63 f4 35 Data Ascii: 6nj_NAg>4i[mKdmbr.H6,#{ ffv[gj2lSqxO{}qmmD"aBrKf2[R=A{]V!k1SC^~-ul$c^cHWli#Vf9{m"(32)xbI]H!ec5
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: e7 d2 23 23 a3 d7 a2 be e2 d2 7b 35 28 2c 9b f3 c9 78 bf 4d 48 8f 83 ab 08 ea b3 78 37 92 9e c1 99 b6 fd aa db d3 a4 a2 ed 77 e9 dc a1 43 0b 91 aa cf a9 14 8f 23 24 af a5 63 f8 5d 1a c1 da 56 e5 2b 23 1c 21 db f3 ee 38 ab 14 69 9b d5 77 8a 89 a5 74 59 0a af 96 e4 69 95 9d f2 aa 5b 57 b7 47 da 68 aa e8 b2 ca 4a b9 9a 1d ae 1e 43 19 de 76 6a 4d da 92 a8 d6 23 85 b8 ba 66 f1 2e 9e a9 04 d4 57 6f fc a5 1a 49 a6 ef f7 a0 14 c7 7d 53 fb b5 fc 37 0f 29 65 46 6a af 03 4d 9b 69 42 1c a1 90 df c5 cf a5 6f a7 1e e9 77 7d b9 6e 6d 23 a2 10 4d 57 8f 6f 47 57 13 91 cf ec 9f 17 58 d1 7b 7b a0 0d 19 46 a6 03 ba 15 37 5f 78 bb ab 4c ad f6 5c c0 5e 11 b8 1a 6f 52 6f 90 ef e4 c7 b8 09 d1 a2 77 12 25 aa 24 f9 55 1e c1 31 54 76 b7 8b f8 3e b0 7d 95 ab 6e 0c 78 8e bd ca f1 ab Data Ascii: ##{5(,xMHx7wC#$c]V+#!8iwtYi[WGhJCvjM#f.WoI}S7)eFjMiBow}nm#MWoGWX{{F7_xL\^oRow%$U1Tv>}nx
2024-09-15 22:19:19 UTC	64	IN	Data Raw: 94 a1 6a ff 78 b9 8a e3 44 62 ce 7b 1f 1d c1 08 e6 86 f4 3b b8 65 93 82 b5 83 4b 32 09 b8 26 86 ab a8 86 9a ff e1 3f fe fb ff 37 00 ea 96 25 16 d0 2e d8 8c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: jxDb{;eK2&?7%.IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.10	49765	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:18 UTC	366	OUT	GET /images/spin-bg.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	759	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 597541 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:00 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294218 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aQ7E%2ByUlTT1ktC1l%2BnLa%2FomAxGeUHqMp83%2Br7E5UZv0VSAzMgxV9JlitnsmZroenYCR2BWbmYcC%2BlxUt8ZXQoAEVDwBTgear8JHVGMGqUZfkfGCMAws2HZ5nIIurUUuY9mS8Tj2wciaeO8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff642e87c34e-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 55 08 02 00 00 00 d7 18 e7 5c 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR8U\pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c Data Ascii: j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 2a 4d 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed Data Ascii: Mz5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<*mOW~&zMk^kU}]OX/Ya>(xodff-[nV
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: ba 3c d6 0d 02 9f 1b ea 7e be 30 4c d1 b3 a9 de bf 06 fd 9f bf 62 aa e8 37 0e dd e7 3e d9 f0 bd d3 9f 87 a3 26 06 19 5f bd d2 be f6 e2 bf 73 bd 71 f2 68 36 e6 13 a7 04 2e 35 86 08 af ed 66 27 19 b6 eb ba 69 83 34 9a 49 48 3c c8 7c d6 aa a2 46 7e 43 20 a5 e5 d8 6f f1 ba 88 07 a3 35 40 d9 63 a8 45 0a 64 f8 28 ff 73 12 24 40 98 6f 60 17 c6 d0 c7 cf 75 96 d8 b3 64 1a 8c 01 9c 86 c1 d1 10 8f e4 db 2f df a8 39 66 6b 93 cc 40 7f 7b fd 42 94 13 4c 3d 0c c2 8d 60 b4 7d 5d bb b7 e3 88 9d 24 24 f5 c5 63 ce 23 6c 9b 5d 17 1c 63 19 28 63 39 bb 4f f6 15 2c 56 17 d6 0b c8 d8 cf 4a b2 c5 a3 f9 d7 b4 6e c5 e5 3b 19 06 01 f5 d1 8c c9 5b 08 6f 45 44 e1 b7 4d 91 9d 39 a8 f5 09 8b fe 0d f9 db 67 f9 65 a2 c6 7b c0 c5 a6 c0 3b 7b 08 6e ec a4 d3 59 91 2f 00 2d 58 f6 85 55 22 00 Data Ascii: <~0Lb7>&_sqh6.5f'i4IH<\|F~C o5@cEd(s$@o`ud/9fk@{BL=`}]$$c#l]c(c9O,VJn;[oEDM9ge{;{nY/-XU"
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: ef 2d 97 f9 23 7e 4a 1a c8 e9 d0 e3 f4 28 3a 37 1d 3c 54 d6 e9 e3 a1 64 20 51 c4 83 65 0c d0 e9 18 31 a4 53 fd 2b ad e1 4b 5b ee d0 25 15 8c a8 51 cd 40 32 01 29 1a ab 12 4e e4 f1 ff 99 55 a0 58 8e af bd fd 51 92 1f 90 84 58 f7 a5 b1 52 82 0a 0f 03 6a de a0 02 ab 89 54 6e 53 87 7b 3f 44 09 08 d1 85 2c 0e 01 b4 66 85 48 49 c9 ea 7b cb 57 e7 4c 43 42 ea c5 90 62 b0 85 bb 79 08 76 a3 d9 10 f5 52 05 3e 12 0f e3 4e eb 6e 9c 2d 13 43 37 d9 d8 0d 90 23 75 33 b1 25 dc 1a 39 9c 6c 35 a6 da 29 28 78 63 13 b9 73 44 54 10 ef f1 9c 22 29 7f e7 50 c9 1f cf 5e 81 97 10 d3 cc aa 13 11 1a 4d cb e2 fb da ad 71 12 c2 62 15 93 e3 3b 7a 2c 9f 0d fe 7f 41 d8 84 3f ed 30 c2 57 7f 1a ff 42 97 f3 cf cf 5f 23 4b e2 bd 89 32 50 f2 f8 cb 52 f7 ed eb a2 32 3b e2 3e f2 c9 f1 7c e8 6c Data Ascii: -#~J(:7<Td Qe1S+K[%Q@2)NUXQXRjTnS{?D,fHI{WLCBbyvR>Nn-C7#u3%9l5)(xcsDT")P^Mqb;z,A?0WB_#K2PR2;>\|l
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 00 16 09 c1 8c 00 2d b2 c1 24 b5 a4 4d 81 86 2e 1e e9 c1 fa 06 0f 2a a1 dc 55 73 d9 ab 06 d4 03 d8 64 74 ce 51 29 19 42 45 ad 69 d6 97 2d a9 18 62 b2 17 d6 8b 77 2c 26 3d 07 1f 11 1f b7 04 b0 6a c8 67 e9 5e 58 69 59 a3 14 97 38 18 53 20 93 76 1e 45 ce db f7 3f a3 ed 42 05 0c b2 ef d5 0c 27 f7 99 ba 23 30 e8 c6 55 fd c6 92 51 f8 39 91 df ec 3b fc 6e dc fb 9b 28 72 63 a2 7d 40 33 74 66 7a e6 3f 3f b3 37 cc ca c0 94 91 72 71 fe 89 bc 28 4b 12 8b 3d 89 c5 ae 09 c2 55 f9 81 f7 77 a4 38 18 49 84 8a 6c 3f 66 b2 3b 93 4a b2 b4 1a 67 10 ca bb a3 74 6b 7f e2 34 73 f8 56 b0 16 ee d5 75 f1 45 bb eb 29 b0 96 fd 59 27 0b d2 fa 7f 45 0e 83 d3 3f e3 4c 3d 14 32 91 fa ee 36 a5 4f 04 3a d3 3e de df 1a 2e 88 4f 6d 73 67 ab e3 9b a7 23 17 74 c2 4e 6e f3 f5 da c1 ec a3 37 cc Data Ascii: -$M.*UsdtQ)BEi-bw,&=jg^XiY8S vE?B'#0UQ9;n(rc}@3tfz??7rq(K=Uw8Il?f;Jgtk4sVuE)Y'E?L=26O:>.Omsg#tNn7
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 19 54 87 96 5a d8 0f dd db e3 45 b4 48 be 74 5f 0b c5 dc 63 f4 a1 d1 53 ee 4d 59 1c fd 0e c4 3a cf ba 5a 0f a7 b4 7f 9c f2 52 53 97 04 75 b8 2e 4b 9e d1 e6 33 3b 65 68 11 ec c6 07 b9 01 c9 71 b9 d5 bf b1 40 ba 6a d2 dc 99 63 30 58 b8 38 51 be 6e b9 a4 f3 67 50 b8 82 bb f1 41 ab f6 b9 28 55 0e 44 b9 80 6a 09 59 f2 7f 64 a9 03 e9 cd 52 be 12 43 1a d5 d1 7e e9 91 3f c2 fa 4f 70 19 c4 82 b1 1c db b6 3e 5e 56 64 8b 45 b3 c0 76 a5 38 2a 3a 05 88 5b 71 f1 7d 48 3b fa 72 d7 af 8d 20 81 f1 4e a6 92 a8 78 be 94 df eb 28 76 dc 8a 5b fa 8a cf 65 b7 27 cc 8f bf 73 d2 f2 32 bf 72 f6 9c 2e 89 e0 ff fc 7c f9 43 5b cd cb 15 de 92 9f 5d 08 2f 56 04 b6 21 ea 29 dc 72 5b f6 e0 49 83 28 a0 f9 30 f5 c8 c5 20 f8 cc 91 70 19 76 73 11 7c 7f f2 1c 32 9a 3a 98 ad 5a 2e f8 2d e2 cb Data Ascii: TZEHt_cSMY:ZRSu.K3;ehq@jc0X8QngPA(UDjYdRC~?Op>^VdEv8*:[q}H;r Nx(v[e's2r.\|C[]/V!)r[I(0 pvs\|2:Z.-
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 50 f7 f0 b7 41 42 aa 2b 96 ce d8 bc b5 0d dd 43 b0 50 59 2c 4f 0b 4c 05 7a c9 52 d3 e9 f0 fa ee 9a 6f 7f e3 a4 8a df 4c 09 ac 9c a6 80 42 6c de 60 79 45 51 6e 7d 7d 6b 84 67 7e 0e 2a 01 44 52 6b 94 18 41 5f bf 1a 87 cd 16 cc 0f 9e 09 26 9d 93 75 46 7a 5c 6b d1 dc ca 0b 2e f7 af 15 d6 e9 8e 78 df 90 a5 bc 5a 54 58 75 36 11 ca c7 5d d8 69 ec 7a 91 7c 76 9b 06 a4 1a 4a e0 7a ce 57 39 2f 52 f0 6c df b7 3c 72 85 16 1a 09 6b a4 8b 60 cc 5a b1 5a 1c bf 79 e2 1b 87 d6 cc a4 ab 63 45 c6 8e b5 7f 69 51 05 8f a1 46 7e 17 ba 40 3a ee 26 ae ec 0a 49 40 12 18 85 c8 b9 4a ca 4d 14 d6 80 19 10 a3 98 98 56 1b c8 c8 d5 61 66 b1 c7 3c da 24 f4 84 aa 1e 56 e5 ae 34 bb 26 97 15 66 f0 3c 24 44 12 7a 98 a7 f4 da 14 bd a2 98 ff dd cc 5b 2b 00 64 53 ad c8 b1 24 ce b6 c6 63 cf 24 Data Ascii: PAB+CPY,OLzRoLBl`yEQn}}kg~*DRkA_&uFz\k.xZTXu6]iz\|vJzW9/Rl<rk`ZZycEiQF~@:&I@JMVaf<$V4&f<$Dz[+dS$c$
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 26 93 26 f2 20 29 48 45 2d a1 a0 8c 4a 8d 1e c5 da c7 47 46 15 84 82 99 57 10 fc 4d 1a 73 0c 12 19 56 9c 3c f5 7e 14 b2 e3 44 6c bb 97 5e 0f ba 23 9a 45 73 56 00 d9 91 53 67 0f 99 2c 2f 43 e6 0d 80 93 5e 1f a5 47 8a c6 c4 23 37 df 32 78 cb 6a 7e 11 2a c8 7d a9 94 f5 51 03 e5 b2 a4 61 ce 2a 13 c6 48 15 18 aa 93 8a 5b b3 d3 84 a2 0a 50 25 cf a5 52 b6 b7 4c 74 a1 6f 7d 85 8d d5 f3 e7 25 ea 5c 05 be be c8 04 50 a5 11 29 59 de a2 59 74 38 18 da 1a a0 84 4a 95 56 20 24 2a 7c b0 25 34 19 07 97 47 a1 74 8a 76 64 e8 2d 54 8d fc e3 61 aa b2 25 25 f9 30 33 69 29 04 06 cf 58 8e c1 4e c4 6e 15 43 99 ec 9a 22 59 d3 59 1e 66 1f ec f7 db e8 0d 5c 52 4b 84 35 c3 6c 7f 19 80 67 c0 d4 31 01 ec 2a d9 1d e2 fc 2a f2 46 ec e3 1f d7 f3 34 bf 47 d7 ca 3c 57 f3 e5 12 3f 75 1d c8 Data Ascii: && )HE-JGFWMsV<~Dl^#EsVSg,/C^G#72xj~}QaH[P%RLto}%\P)YYt8JV $\|%4Gtvd-Ta%%03i)XNnC"YYf\RK5lg1*F4G<W?u
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: a9 51 ca e4 82 c9 e8 e1 bf 6d 91 1c 4f d2 60 ff 26 19 3c 73 e7 d8 38 cf 52 62 92 83 db 89 ca 53 1b 56 d7 8a a8 f6 77 35 5d 91 d6 30 40 d7 ef c8 ca b6 ce 16 cb 5a 51 35 3e d4 95 fb 0e 62 19 b9 47 9f ad 18 a3 11 e5 33 33 23 69 60 fa 0c af 33 4a a0 3e 73 ba 63 30 64 71 39 41 40 c4 b6 d4 38 5f 60 63 06 1e 9f a0 1d 65 a9 da 65 e6 f4 c7 bb 09 f5 0e 2b d0 21 ee 54 83 26 72 76 79 af d6 b6 64 eb 6d 96 c1 d2 92 62 f4 d1 2b 6b 05 21 b7 35 50 7d 52 26 ed 63 96 8c aa 4b 88 32 23 86 b1 38 ba 53 14 74 f3 49 66 13 7a c4 e1 af ae 2e 1d 7d 1c d9 85 30 d7 6b 54 48 79 ec f6 73 b7 7f a5 6d 53 fd cf c7 c3 fb 24 0f eb 72 5c 0e b5 79 a7 e5 80 c6 c3 16 0d c9 84 1a a0 e8 19 d0 58 2a 3c 68 05 06 f4 7b d1 21 f4 47 b0 d1 94 a4 50 c0 28 9d 07 54 d0 aa 9a b7 0d f1 8d fb 36 ba 0a f4 cd Data Ascii: QmO`&<s8RbSVw5]0@ZQ5>bG33#i`3J>sc0dq9A@8_`cee+!T&rvydmb+k!5P}R&cK2#8StIfz.}0kTHysmS$r\yX*<h{!GP(T6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.10	49766	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:19 UTC	654	OUT	GET /css/greeting.jsp/images/fb_ico.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	714	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 22 Jan 2023 20:48:06 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4676 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4A4%2BHOAU%2BGQbNuNvVbZ6XumYf%2B5W4gx1CabK5WBbgA1%2BMtlQKMyjhQp8Z5Q4sXzAmpmRCLlh%2F9SfZz4v88ZofprajEAJKCbZF82OLyOSNRXfnHUoXD9i7BSTLTE%2F29tNiaOmoy1PkScWgPg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff658aed5e7c-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	655	IN	Data Raw: 37 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 41 52 45 4e 41 20 46 52 45 45 20 46 49 52 45 20 4d 45 4d 42 45 52 53 48 49 Data Ascii: 71e<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta property="og:title" content="GARENA FREE FIRE MEMBERSHI
2024-09-15 22:19:19 UTC	1174	IN	Data Raw: 47 45 38 66 4a 54 33 47 58 77 45 4f 6e 67 73 56 37 5a 74 32 37 4e 58 46 6f 61 6f 41 70 6d 59 6d 38 31 69 75 58 6f 50 6b 46 4f 4a 77 4a 38 45 52 64 6b 6e 4c 50 4d 4f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 6c 6f 67 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 Data Ascii: GE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css"><link rel="stylesheet" href="./login.css"><link href="/css/c
2024-09-15 22:19:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.10	49768	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:19 UTC	648	OUT	GET /img/btn_history.c6c98836.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	758	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 19334 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 16:26:07 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 280391 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHbhLlyTH2DElaDuI4kcgNr69qsWja2p4%2FCtX9iNG5B8Q9cSJB%2Fi8aufDooOXT0K6%2BDlqwFxoSw5o6rNPXmRJanxIyKwZu0soPbVCjGmUBu%2Bbqq18UsaKOFa7q4I%2B8zF0GygMAbYWXX6cII%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff65f95d1996-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	611	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f2 00 00 00 2e 08 06 00 00 00 12 94 44 f0 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.DpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 Data Ascii: >{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 4d 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 Data Ascii: Mz5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nV
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 08 44 04 a2 0c 42 04 12 82 88 dd 34 47 20 0a 10 70 bb b9 a0 4a c3 76 9e de a8 7a 61 69 f8 35 d6 1f 71 00 24 d3 1b ed 83 bd e6 01 26 93 ab 03 b8 9e 3e e7 9c 6d 5a 00 d4 45 fb a8 0f 83 fd 2d 5d 80 0b 55 28 9c f4 77 05 ba 46 04 10 39 db 68 02 b8 5a 26 d7 1e 84 43 ca 4c ba d9 16 95 39 1c 42 66 6f 32 d3 3c 99 09 a0 cc 0e a9 fd 9f cb c7 90 59 55 3b 9c b7 fb b6 c8 3a 83 ec 9a bc 3d 9f 0e bd ce 82 9f 2f 33 86 65 26 5d 07 ca 87 64 1e 37 99 31 22 b3 09 ae f2 d5 87 56 58 3f 4b 71 68 99 6d ad b9 d2 df 73 ce ae 2d 87 90 d8 59 74 80 c0 81 4b dd 7f 21 87 a4 08 89 15 c8 3b 15 9f ec be 50 0e 72 4e 0d 12 33 40 0c 2e 23 10 09 c8 08 94 f4 40 4a 64 dd 26 49 54 f1 56 bc ce f5 32 20 67 a4 7e 05 44 d1 3d de f3 a0 2a d9 75 10 28 78 b8 dc 41 fa 11 38 90 40 63 a4 97 5b 39 b8 1c 20 Data Ascii: DB4G pJvzai5q$&>mZE-]U(wF9hZ&CL9Bfo2<YU;:=/3e&]d71"VX?Kqhms-YtK!;PrN3@.#@Jd&ITV2 g~D=*u(xA8@c[9
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 65 82 c4 a4 2e f9 5c 34 c5 0b 08 0b 5c c7 03 25 37 be d0 dc 6c 42 c8 3a 0e e3 cb 02 5c 46 90 fd 51 d7 28 d7 e0 9d 2a 73 97 bd 57 70 29 31 b8 2a 1b 85 28 91 41 3d 07 19 a8 c6 90 0e e0 7a 39 a4 2c 80 28 76 df 6c 23 78 0f a9 12 30 dd 87 c4 08 ca 32 bd 7f 6c 71 58 f0 ea aa 70 34 cf 49 80 aa 04 d9 e1 6e 16 95 72 d5 b4 b0 c3 20 7e c8 d5 e6 56 53 37 48 70 d1 82 28 b5 55 87 0c c5 a8 bd a1 f8 6a d6 3e 5b 28 18 43 7e 68 53 d4 80 51 35 14 d7 39 43 9a 6b 97 d0 35 68 af 2e 52 34 00 ab 63 5e 44 6d e9 6a 97 71 c8 75 7d 22 ca 5c bf 87 64 9e cc bf e0 3a 0b 19 b0 15 ed 3b 66 16 97 19 87 90 b9 71 b1 a3 1d be e6 14 99 37 31 db a2 dd cc ad 75 66 05 5c 1b 50 94 e7 4c e1 d4 80 5d 1c fd 3f 1b 0e 20 06 88 f9 a0 df 17 2b a0 32 25 e4 33 03 f3 48 f7 3c 8b 59 6a 81 14 45 eb c8 c0 70 Data Ascii: e.\4\%7lB:\FQ(sWp)1(A=z9,(vl#x02lqXp4Inr ~VS7Hp(Uj>[(C~hSQ59Ck5h.R4c^Dmjqu}"\d:;fq71uf\PL]? +2%3H<YjEp
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 1b eb 8f 45 41 26 67 a9 be 41 a9 00 56 32 c5 c5 06 0c 73 84 38 07 62 51 cf d3 1b 7b ad ac 80 8c f4 3b 40 0d c1 46 18 a0 2a 42 52 d2 48 d0 c2 cb 3a bb 53 33 ce b8 88 7a 06 6a 94 bb 3e bc 95 00 99 03 f5 bc 3a 6d 50 59 63 21 18 f4 19 21 25 20 45 86 14 11 12 03 a4 63 c1 35 eb 62 8b 77 f0 99 d3 c3 6a e6 5f a2 40 20 f0 63 1d b5 9e 00 28 23 48 c5 ba ee 9e 9a 38 41 44 f3 c1 b5 e0 48 4e b5 5d a5 8b 28 a4 ae 20 85 cc 50 55 3b ee 31 81 b2 00 ea 8c e9 42 c7 08 78 19 62 e9 98 1a 75 04 24 32 ad a8 7e 02 89 6d 52 b6 94 16 60 64 04 db 44 b5 b5 a9 dd c3 64 ee a8 0b 2d 70 43 16 e7 50 31 94 7a 91 16 41 6d d8 59 75 7c 59 53 49 13 1e de 51 e0 4f df 7e 03 b6 6d 3a 00 00 58 7a 54 86 3f bb ec 79 58 b3 7e dc ac 9d 2a 2a a9 e2 13 46 66 0a d9 88 95 6e 5c 63 60 48 66 f9 39 32 97 ff Data Ascii: EA&gAV2s8bQ{;@FBRH:S3zj>:mPYc!!% Ec5bwj_@ c(#H8ADHN]( PU;1Bxbu$2~mR`dDd-pCP1zAmYu\|YSIQO~m:XzT?yX~*Ffn\c`Hf92
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 40 60 a9 39 9c 15 d8 09 5c b0 5c 6f ae a7 5f aa a4 b9 e1 e0 ed 35 01 4d 64 c6 fe 32 57 85 45 dd 6f 56 77 46 cb 0c 1d 64 b6 6a f8 1a 14 8c bb ed bd 42 f3 35 3c 6f a5 5a 75 5e 90 08 10 9f 35 95 50 f0 de c0 51 0f 09 a2 5a 51 7d 20 ad 1a 61 8d 8f c8 f9 16 2c a9 53 14 6c df 5d 27 ee eb bc 68 4a 10 57 da e2 7b 8d a5 ea fc a5 58 ac d7 6c 2a d7 e6 ad 49 46 b9 bd 23 e5 76 b5 cb a4 40 c9 f8 92 0c 1b 2e 58 8e 77 7e e0 24 4c ad ac 0b 0c 80 65 2b da aa a4 4d 5f de 09 7c ec df 57 e6 8d cf 3f 0c 1f bf f1 5c 7c f5 d3 f7 00 02 dc f8 9d 87 71 d6 f3 56 a3 d7 91 05 32 6b 76 c4 2c 66 53 06 d9 d2 bb 81 c7 b9 ce f2 cb c8 9c 86 d6 19 43 de c8 bc 75 16 69 05 e2 5a e1 b4 6e 30 cc dd 47 bd 17 e1 cc 62 aa f5 95 18 b5 e0 07 ce 68 c5 b1 b1 9c 80 07 05 43 9c eb 8d cb c6 cc f2 4e 43 8a Data Ascii: @`9\\o_5Md2WEoVwFdjB5<oZu^5PQZQ} a,Sl]'hJW{Xl*IF#v@.Xw~$Le+M_\|W?\\|qV2kv,fSCuiZn0GbhCNC
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 2e 46 2b ec 17 d5 0c 3c 53 21 cd 96 9a 90 0e 5a 34 8d 5c 5d 62 9e b3 4a 0c 8c d6 ab bb 5c b9 d8 69 7f 5f 5d f0 3a a5 90 a9 85 d6 1f 1f 7a 0c 12 a4 50 c4 8f 00 6c de bc 17 ef 78 e9 2d 3f f7 10 d7 b1 e6 9a b5 bd 36 ed 30 22 06 b5 9c dd 64 79 c0 e1 f8 b5 f6 0f 9b c4 bf d7 7c 34 5b f7 0e 22 f4 fb 8c f7 bd ec fa 43 1e e2 fa 71 e2 e9 b5 15 4b 6d ba a4 b1 8b d4 ba 78 ce 37 69 32 9a f7 1d 6f fd c4 09 f8 d0 15 67 e0 d5 6f 3a 7a 44 e6 de 58 86 b3 df 70 f8 c8 7b 7f b4 69 f7 a2 32 5f fd a5 07 46 de f7 ec 5f 39 b2 71 f9 36 5f b7 07 1f be f8 c6 43 1e e2 fa b1 e5 ca 3d 78 df ab be 87 1d db 66 16 c8 3c ff 71 e9 5f dd 8b 41 9f db 82 fe 94 16 7e 21 d5 08 b8 fe bd f9 fa dd f8 fd 57 6c 7a 5c 87 f8 ec b7 1c 69 16 b8 5e c3 da 6d 4e 43 cd 12 80 9b ae 7f 14 1f 7e e5 e6 43 1e e2 Data Ascii: .F+<S!Z4\]bJ\i_]:zPlx-?60"dy\|4["CqKmx7i2ogo:zDXp{i2_F_9q6_C=xf<q_A~!Wlz\i^mNC~C
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 3b e4 17 34 24 05 d7 f6 c1 92 f9 8a c7 98 47 8b c9 bc 6c 45 17 1b 2e 5c 31 ea aa dd 79 60 44 e6 eb 2e db 36 ea 56 bf e8 08 40 12 76 fc ec 20 36 7d 61 34 66 fb dd bf 7a 3a 7a e3 d9 88 cc 1b 9f b3 1a 17 ff c1 d1 23 ef bb fa 1b 3b da 56 4c 43 d7 b5 fe 19 bd 91 f7 5d f2 e7 77 68 2a 0d b2 c8 41 56 56 df e6 eb 77 61 db 4d b3 23 2f fd d9 ff 3e 0b c7 9c 38 65 45 1e be a5 89 5a 2e be 37 11 9a 75 96 a6 d9 22 37 20 f6 8e 9f cd 62 d3 97 46 5d f4 df fb e8 a9 e8 8d 65 8d 25 17 11 9c 79 d6 72 5c fc 3b 47 8d 5a c8 eb 76 1a d6 b3 50 66 62 23 87 d4 0c ae 6a b1 fd 65 16 db 39 48 a9 6e ee f5 df 6e 95 e9 99 e7 4c e1 ac e7 ae 1a f9 c8 fd 8f a8 95 e5 7e 05 94 09 af 7f d3 91 23 af ff eb d5 bb b0 77 6f 81 ab 2f df df 3c f7 d2 37 ac c4 da 75 63 6a 0c a3 ee 23 49 0c de 5f 00 b3 95 Data Ascii: ;4$GlE.\1y`D.6V@v 6}a4fz:z#;VLC]wh*AVVwaM#/>8eEZ.7u"7 bF]e%yr\;GZvPfb#je9HnnL~#wo/<7ucj#I_
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 31 a5 90 58 fb 1e f0 22 fb cb 19 73 90 08 98 2d 71 d5 d7 5a 6f 6f fd c9 1d ac 5d d3 85 b0 e0 b4 b3 5a 05 3c fd 28 63 cb 9d 33 b6 2d 04 12 80 a3 8f 9d c4 c6 f3 97 2c 90 6d dd 53 02 ce 7d ce 4a 55 fc 79 50 e3 da f5 70 13 99 d6 2c 64 0e 69 a6 44 da 3d 40 da 3b 40 da 57 00 45 c2 81 fd 09 bb 1e a9 e0 3a 5d 82 77 d0 a2 05 61 4d 1f 09 b4 2f 90 6b 17 8b c9 92 d2 45 5c c4 b5 16 f0 74 61 dd 5e 9d c2 e5 07 b4 6b 82 ef f8 05 9b 5d 3c 69 fe 78 9e d6 df b3 6b 30 d4 60 d2 cc 46 e4 a6 c7 72 53 e7 c9 bc f0 00 3d ae 83 6c ac 30 e3 6f 37 2d 59 ac f8 82 c8 61 cd da 09 7c e6 da 17 e0 8d 1f 3d 7e d1 03 bd e5 1b bb f1 89 3f b8 45 2d 7b 7d 18 e7 a3 d6 82 b6 c0 dc ca 2d e7 23 f7 c3 85 f9 02 d2 df af 5d 0d 73 11 4f 7d e6 a8 55 b9 eb 27 fb 20 0c 6c fa 87 56 8b 6f b8 68 39 a6 a6 7a Data Ascii: 1X"s-qZoo]Z<(c3-,mS}JUyPp,diD=@;@WE:]waM/kE\ta^k]<ixk0`FrS=l0o7-Ya\|=~?E-{}-#]sO}U' lVoh9z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49767	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:19 UTC	646	OUT	GET /img/dob-title.b8c16371.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	764	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 35229 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294218 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PF8RQJDrgV4AtNCzRoOsk%2Fr1s%2BNf2oFObJWubD7%2BfPjqAtFmqh2S9%2FOgYx6RY6m910zj7uJOXY1HfK98F1rh%2F692UR%2FRM1s90G4NteD%2FQCTyjLkpecwW0ruhggNKkq%2BpwfNh7yjWIGpubjw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff65fd620cba-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	605	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8a 00 00 00 36 08 06 00 00 00 d9 01 de aa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR6pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 3e df 35 00 b0 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 Data Ascii: >5j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C0
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 2a 1e 4e f2 48 2a 4d 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 Data Ascii: NHMz5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[n
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 62 55 e0 48 49 17 0f 3f 08 f8 ee f1 db 11 2e 1c e8 cc d2 d0 1e 23 0a d4 74 9b b3 bd 55 a2 51 c1 8c f6 59 0b 34 42 88 f5 6f 3a 8e 99 9b 9e a1 bf bc 4a ab d9 24 95 9a f9 89 69 92 fe 90 b3 2b cb e8 86 4f ee 49 86 e3 11 1e 92 b6 72 38 16 af 71 e1 ec 0e 6e ef 9d 65 98 15 dc 73 d7 3e ce 8c 7b ec 69 4f 13 44 4d 92 24 41 4a 49 a9 72 1c c7 c1 15 82 a3 47 ee a4 d5 68 b0 af 33 c1 ea a0 4f a3 d3 61 b8 36 24 f4 02 9c 20 64 25 4b e8 eb 1c 91 0d 69 e3 11 a7 19 43 51 92 e5 05 2d e9 51 a0 d1 cd 80 e5 38 21 94 12 af 2c 71 4b 45 b7 d1 42 4a 87 95 e1 00 e1 84 48 5d d0 0a 23 8e e6 7d a6 a5 cf 74 d4 22 2d 0b 1a 99 62 ec 0b 5a ca 27 d7 39 2a cf 99 6a 36 71 14 8c 8b 82 b3 d9 98 bc 11 b0 a7 0c c9 8b 82 42 2b d2 22 a7 3b 33 45 ae 4a 4a a5 70 3c 97 64 34 26 72 43 e2 32 47 b4 42 b2 Data Ascii: bUHI?.#tUQY4Bo:J$i+OIr8qnes>{iODM$AJIrGh3Oa6$ d%KiCQ-Q8!,qKEBJH]#}t"-bZ'9*j6qB+";3EJJp<d4&rC2GB
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 69 01 29 1c e6 67 a7 88 b2 01 dd 66 9b 5b 16 8e b2 df 69 32 a1 43 96 5b 3e 3f f3 eb 3b 9f 75 d9 63 26 df 45 a1 60 ca 85 e9 10 4e 24 4c 4e 44 af fa ce 7b f9 e3 9e 13 e1 b9 2e 45 51 10 28 49 39 4a 69 06 3e 93 4e 48 e0 85 04 41 c0 68 38 a4 28 32 a4 94 e4 79 4e 52 66 b8 51 c0 a4 f2 e0 ff 95 a1 18 aa 9c dc 81 44 95 a0 15 89 50 64 0e 64 1a 26 0b 49 e6 4a 7a 68 96 74 4a 2c 60 56 0a 26 84 87 57 68 06 42 53 94 8a c0 0b c1 81 24 1b e3 16 e0 4b c9 60 71 99 dd a2 c1 a0 2c 50 c2 25 d7 8a 24 19 93 17 39 91 d3 c0 77 5c a4 06 ad 14 aa 2c f1 7d 1f 57 3a 38 52 e2 ba 3e 0e 82 95 41 0f 5f 82 14 a0 05 b8 ae 8b 46 52 14 05 42 08 dc b8 c0 0d 25 a1 e3 f1 8d 8f 0f 8e 79 2d b5 ff de 3f 33 73 24 8c 4b c9 5a 09 ae 80 86 e4 9e 0f 9a 7a 4d de 13 7f f7 d1 bf 39 76 2c 1b c7 94 ae 44 00 Data Ascii: i)gf[i2C[>?;uc&E`N$LND{.EQ(I9Ji>NHAh8(2yNRfQDPdd&IJzhtJ,`V&WhBS$K`q,P%$9w\,}W:8R>A_FRB%y-?3s$KZzM9v,D
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 34 93 6e 84 ef 05 94 89 a2 dd 9a 30 5e fe 38 e6 cc ca 22 b3 3b e7 c9 7d 49 a9 14 3b 1a 1d f2 3c a7 e9 05 a4 c3 11 f1 60 48 47 76 29 44 81 f4 5c 62 59 22 e2 1c 7f 90 32 6e 38 04 ae a0 d9 cb f0 1c 18 78 90 49 4d 56 64 88 d4 c1 d1 0e 65 59 32 1c 8d 70 5d c9 f2 f2 12 b9 2f 10 1a 86 2b 6b e4 8e 86 6e 83 de 78 44 90 a6 14 45 82 8f 47 e1 39 8c 1d 87 54 08 a4 10 e8 71 8c 2b 25 69 9a 32 d1 6c d3 88 22 c8 53 bc d8 c3 95 0e be eb 51 96 a0 94 62 52 04 a4 ae 40 fa 1e 32 91 b8 4a a3 ca 82 5c 97 0c c9 d9 3f 31 47 af d7 c3 2b 4a 0a a5 20 55 f8 51 c0 8e ee 34 fd e1 80 93 a3 21 bb 0e ee 24 3d bb 8a ef 07 0c 86 7d 5a ed 0e 7b 0e 1c e0 d4 f1 13 4c 7b 11 ee 64 83 0b 1a 5d e4 9c 4f dc 1f b2 c3 6d 71 62 75 91 6b e6 f7 33 92 9a d5 de 1a a7 97 ce 32 3d 3d 85 83 a0 8c 53 1a 6e 88 Data Ascii: 4n0^8";}I;<`HGv)D\bY"2n8xIMVdeY2p]/+knxDEG9Tq+%i2l"SQbR@2J\?1G+J UQ4!$=}Z{L{d]Omqbuk32==Sn
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 9b 1f e8 3e 4a 29 da aa 60 5b d8 c6 f3 7d d6 1a 82 be 2e d1 bd 31 3b 3a 33 e4 79 ce c5 3b 77 72 7c b4 4a 7f 34 a4 83 87 54 9a 91 0f 4b c9 10 37 f0 99 4a 43 c2 d0 c7 f7 5d 96 7b cb 24 69 8a 10 0e 79 a9 c9 f3 92 76 c3 85 52 31 d5 68 b3 58 c6 74 b5 8b 4a 32 4e cb 94 a9 18 c2 a9 2e 77 c6 ab b8 85 46 45 1e 61 29 98 d1 3e 67 d3 21 db 5a 13 0c 64 ca 91 78 95 2b da db e9 8d 87 0c 65 49 3b 13 10 7a 8c b2 84 5e 1a 33 df e8 52 e4 39 23 51 32 1c 0e 69 e2 e2 7b 9e 71 a4 35 84 a9 62 ff f6 9d 2c 0e 7b dc ba 72 1a 37 f0 f9 b9 67 ec 71 2f bc a6 b1 d0 ed 88 29 f6 05 70 b7 26 8b 47 f5 ca dc 45 9f 9b 3e 73 dd 83 ef dc 76 75 b0 97 ef f4 e1 ce 94 b5 b3 c5 ca 89 af a7 db 6e fc 78 56 38 c2 61 79 79 19 a4 60 6a 72 86 25 99 71 b0 3d cb 64 a7 cb 37 6e fb 3e 9e e7 b1 b3 35 89 08 3c Data Ascii: >J)`[}.1;:3y;wr\|J4TK7JC]{$iyvR1hXtJ2N.wFEa)>g!Zdx+eI;z^3R9#Q2i{q5b,{r7gq/)p&GE>svunxV8ayy`jr%q=d7n>5<
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: a3 ee 34 ab 0b 0b 84 be 4f 31 4e 08 fd 80 3c 1e b1 e2 6a 92 6c 48 94 28 f6 5c b8 8f c1 ca 1a bd 5e 8f a4 37 40 a4 8a 2c 89 99 0c 9b 78 be cb f1 de 00 57 0b c6 e5 98 b2 d4 64 ba 24 16 01 b9 80 b1 16 b8 d2 25 53 05 85 52 14 45 41 59 96 68 34 e3 24 61 35 1d e3 66 19 5a 84 2c 25 09 ba 50 9b c7 e3 02 8e fd ea 07 bf f0 3b d7 01 df b4 63 a8 c6 eb 00 11 26 b8 2d ea e3 7c c9 89 63 fc 81 f0 89 9a 0d 92 24 61 72 72 12 e5 98 e4 f5 38 35 4c 9c 46 e8 93 0a 85 f4 5d 1c 15 e0 78 1e cd c9 2e 79 9a 91 c4 31 bd de 88 5c 95 90 97 38 13 93 04 7e 40 3a 34 e1 30 ae c3 28 4b 18 ba 9a 2c 94 a4 2d 1f df 0d 28 cb 84 95 b5 1e 93 61 c4 a9 d5 25 32 95 e3 06 3e 85 56 e4 69 42 91 e5 08 47 92 96 39 65 52 20 5d 8f 48 49 02 af c1 4c 67 82 71 12 13 8f c6 14 49 ca 91 62 84 28 05 52 b8 48 29 Data Ascii: 4O1N<jlH(\^7@,xWd$%SREAYh4$a5fZ,%P;c&-\|c$arr85LF]x.y1\8~@:40(K,-(a%2>ViBG9eR ]HILgqIb(RH)
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 49 46 d4 6c f3 b0 5f 99 7e d6 d4 7d 9b bf 57 c6 39 00 ba d0 68 34 fe f6 06 e5 72 ca e2 e7 92 bb dd f2 c1 b2 bf 74 7a 01 5f 09 94 04 c7 75 88 f3 0c af 74 98 6c b6 f9 99 df df fe 81 70 87 7b 0d a1 a0 90 40 a9 61 54 f0 27 4f bb 71 5f af 18 d3 8d 5c 9c 76 c8 b8 48 f9 a5 f7 5c 7a a7 f0 1d 4a 77 1e e9 bb b8 39 e8 64 92 9b bf b4 f2 a0 2f fc 7d 7c cc 29 25 ba 48 49 f2 84 a6 ef 18 6a 66 91 51 14 19 99 d0 bc f8 2d bb ee f4 3a 01 5e e0 c1 78 1a e9 09 28 35 a7 be 3c 7c d0 d7 ff 76 74 2c 93 1a 1f c9 41 3f e2 40 7b 8e 20 55 4c b9 11 4e e0 e3 4a c9 8e d2 23 d5 31 69 e8 f0 e8 37 6c ff 40 73 af 7b 0d 6b 05 7e e0 21 03 07 3c 41 96 ce 91 2c 17 87 3f f5 cb 8b 0f 75 d2 02 47 49 ca 0c 9a 5a b3 98 f4 88 66 67 91 41 c4 7d 9e d1 de 33 79 4f f7 0b 85 0b 25 9a 2c df 41 c7 f5 89 4f Data Ascii: IFl_~}W9h4rtz_utlp{@aT'Oq_\vH\zJw9d/}\|)%HIjfQ-:^x(5<\|vt,A?@{ ULNJ#1i7l@s{k~!<A,?uGIZfgA}3yO%,AO
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: f7 ab c0 ef 02 79 b5 48 81 70 f0 3d 77 7a db c1 60 2f cb a6 64 01 27 36 f3 df 14 c6 1d 96 d4 f4 5a 89 a1 77 19 b9 63 97 0b 27 4b 28 a4 d1 e9 2d 17 72 87 f1 a2 bc 1a f8 d1 0c c5 67 af dd ef 5e 70 55 f3 ba 5d db 9d bb 31 2e 20 35 5e 30 89 02 25 8c 52 b7 78 25 85 86 3c 87 a1 00 29 88 42 e4 15 f7 6a be 74 cf ee c6 d3 6f fa fc ea b6 cf 7c 25 29 5a 04 04 d2 25 2b 0b 86 49 4c 5b 3b b4 dd c0 0c 79 a0 b0 f4 13 73 3f ad d0 68 4a 95 a3 95 c4 73 04 61 a7 45 99 8e 18 e6 19 be 2e 69 b7 1b c8 28 80 cc c0 1d 38 80 d4 c6 c3 0b 05 ae e7 13 86 21 c3 5e 7f f3 d0 a4 8d 28 da 8f b9 72 e2 25 c4 25 a4 a5 d9 84 89 32 63 d1 25 08 0d 81 64 6a ca 9d f8 d4 13 e7 27 1e f9 4f a7 d7 de d0 9a 67 aa 3b 47 c3 0f 58 ce c6 0c b2 11 4e a9 e9 e2 b0 36 ea d1 16 2d 03 1d 69 85 ca 33 64 9c e3 96 Data Ascii: yHp=wz`/d'6Zwc'K(-rg^pU]1. 5^0%Rx%<)Bjto\|%)Z%+IL[;ys?hJsaE.i(8!^(r%%2c%dj'Og;GXN6-i3d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.10	49770	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:19 UTC	641	OUT	GET /images/spin-title.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	703	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 22 Jan 2023 20:48:06 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 547 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ynanLw%2Fpa4eL7ol3WjpG565aKe0Xi68X7eGziWdadMAHIXIK8Rqf0NmPOQ31qOjxq8n4I8lbP4vdukRpixGNksMxiOJyHqBI3mudCEWd6BXL5TVGEUraG3EojMmHxnmqvc2LeMMSdzScq5w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff660cd0179d-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	666	IN	Data Raw: 37 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 41 52 45 4e 41 20 46 52 45 45 20 46 49 52 45 20 4d 45 4d 42 45 52 53 48 49 Data Ascii: 71e<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta property="og:title" content="GARENA FREE FIRE MEMBERSHI
2024-09-15 22:19:19 UTC	1163	IN	Data Raw: 4f 6e 67 73 56 37 5a 74 32 37 4e 58 46 6f 61 6f 41 70 6d 59 6d 38 31 69 75 58 6f 50 6b 46 4f 4a 77 4a 38 45 52 64 6b 6e 4c 50 4d 4f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 6c 6f 67 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 6e 6b 2d 31 30 61 38 31 61 Data Ascii: OngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css"><link rel="stylesheet" href="./login.css"><link href="/css/chunk-10a81a
2024-09-15 22:19:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.10	49771	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:19 UTC	653	OUT	GET /img/btn-bod-deactive.5810d0f4.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/css/greeting.jsp/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:19 UTC	757	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:19 GMT Content-Type: image/png Content-Length: 9706 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294218 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=neMDsyn6%2B%2BpjjKxvRrPs5l0bsOpC1sQR0mjIhZT9gsnHABbkrSC6tMX3%2BTSmwCmRtc7ji5lPTB%2B4gkIqiue08PjlZ5jmOb1WZQFcsJs%2BymGyTaRrb1DrNrd67J7FF7RlNMnOyTRbfqoYbnI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff663c690f63-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:19 UTC	612	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 98 00 00 00 2e 08 02 00 00 00 5b 33 47 1e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.[3GpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e Data Ascii: {-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 Data Ascii: z5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nV
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 0c 86 d5 c6 f1 e1 66 53 30 5b b7 18 bb 14 f6 97 d7 14 bc 6d 94 11 d7 2e 23 ba 6f 36 c2 01 f7 34 a3 75 05 a0 13 0a f0 aa 45 12 25 b8 62 c7 64 80 88 c2 38 6f b3 6c d1 a8 b8 b6 8b e9 1a 19 7f 36 0f ee 60 d8 2e 10 7a 20 e5 6e 74 a5 eb 96 aa 39 fe 71 b2 0f 4c 3e 6d 92 71 1a fa 14 a5 36 1a 50 b6 b6 3b 8b d0 27 c1 eb 36 9f a9 ed 45 31 1c 46 b8 4a 6e 0c 3a 75 6b be 67 d5 d4 cb d9 d5 7b db 0d c5 cd 13 2e c8 87 2f 4f 37 ab 39 f8 a1 ba a0 7e 32 16 93 c4 c5 c2 9c e4 42 f5 90 ba 04 b9 08 a8 62 3d c8 0a 16 77 40 4a 2b 8c 2d 36 42 50 6d ba 59 08 9a dc 21 b0 84 0b 6d 82 09 7b 25 e0 9e c2 0b 55 22 b1 d6 a1 95 a5 e4 0a 69 50 85 95 26 f8 ee b5 6c 12 8c 4f 5b 5c 5b 4c d2 a4 e9 47 46 b6 f5 de e3 57 b7 4a bd 9f 76 36 44 6d e5 dd ec 52 b5 79 fb c9 dc 15 a6 59 9a 51 96 b4 b0 21 Data Ascii: fS0[m.#o64uE%bd8ol6`.z nt9qL>mq6P;'6E1FJn:ukg{./O79~2Bb=w@J+-6BPmY!m{%U"iP&lO[\[LGFWJv6DmRyYQ!
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 70 4a 4a bc bf 83 01 25 c2 70 66 77 49 ce 19 b9 94 c6 7a b7 fb 24 41 d0 c8 62 a2 2e ce ab 54 82 a2 93 dc 29 0b b6 15 de ac d8 24 82 1e f0 89 72 c5 cd e8 c5 b5 5e ac 3d ad b2 a7 a7 71 1f 0a 6e e2 e5 41 cf d7 c8 5e ca 8f ee 42 90 dc ff 74 d1 3c 1e cb 8f ee 8c 08 0a e8 72 f5 cf 2f 62 f7 ed d1 9e 0f f7 23 09 13 96 9f 3d f4 2f 2f 75 b1 fa 67 97 20 f8 fa 89 3d 3e e5 c3 7d 63 6e 33 9c f8 e7 e7 ba ec 64 1e cb fb 0f a6 58 08 ff e2 42 17 91 7e a0 bc ff 60 83 24 8f b2 02 42 e7 ab 7f 7a ae 67 87 41 a4 3f 5a ec ed bb 3c 2d 13 0f 0e 5d 55 ff e2 3c 35 f8 4e b1 d7 4f 41 26 fe 32 d3 b7 07 7f 76 08 41 da d3 33 ee 38 e1 68 ea ab 2b ec 0b 5f 33 06 04 3d 3f f0 ee ae 65 99 4a 3b 21 22 10 ca 05 49 55 23 94 71 e2 f6 2c e0 2d 96 20 5a d3 91 06 83 cf 01 f5 d1 31 15 c4 62 49 fa 3c Data Ascii: pJJ%pfwIz$Ab.T)$r^=qnA^Bt<r/b#=//ug =>}cn3dXB~`$BzgA?Z<-]U<5NOA&2vA38h+_3=?eJ;!"IU#q,- Z1bI<
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: a6 30 f9 c9 d5 76 37 27 dd 7a 78 32 8c f2 d3 83 9e 5d 63 6f 5b d7 3d 93 e9 c7 62 e6 d9 32 e3 80 a0 42 67 41 de 38 c9 64 77 41 54 1d 39 09 1a 77 05 a4 ae 5d 97 f9 b9 bd be c0 c5 fb 53 98 fc 62 1d 77 44 28 38 f4 b9 f2 1d 1e 22 d2 fa 9d 45 91 9f 64 31 5a 81 ad 07 ad ab 40 70 67 ca 1a 74 cf 23 d5 cb 09 5c 3a c5 a3 1e 17 83 d6 b1 f7 ee f4 4f fc 0f 07 de ca 49 fe f3 5f c9 f5 c0 67 98 be 33 3d bf d6 f3 2b 3e 29 0d 9e b8 ce 0f 83 23 ec de f8 cb 2a a8 fc f4 c1 6c 94 7c b8 bf 19 22 db 06 e9 fb 88 d8 c1 11 d3 74 e9 37 a2 38 37 41 bf 76 3c 68 91 bf dd 70 01 f2 af 47 6e a3 42 bd 3c e8 55 e5 bd 54 32 5d 4b 97 35 ab 67 8e 04 07 bd 5c 51 90 2c c1 de ec a4 64 a5 01 70 97 15 9a 71 49 e5 73 21 b2 4a 31 fa 54 68 9c da cf 08 09 ab 50 30 ca a4 71 f9 ea 28 b4 77 17 ff f0 90 e4 Data Ascii: 0v7'zx2]co[=b2BgA8dwAT9w]SbwD(8"Ed1Z@pgt#\:OI_g3=+>)#*l\|"t787Av<hpGnB<UT2]K5g\Q,dpqIs!J1ThP0q(w
2024-09-15 22:19:19 UTC	1369	IN	Data Raw: 75 0d 67 3c 4c ad 51 b7 d9 66 d7 07 a7 90 f3 05 e1 42 a3 10 23 81 85 2c a6 ea d9 dd 23 c0 a8 ea 20 b8 94 de 35 72 4b 4e 37 7a db 8f 28 fb 4e f0 6b d3 44 32 f7 e3 70 fa d6 a7 72 34 8f 50 4f bf 4a 0b 34 af 56 ff fa d2 3f ba ea 59 7c a3 ef f7 e5 bd 7b 90 b8 98 56 4d de 22 7b dd 10 63 17 11 cb ac bd 89 2a 95 6f c3 73 fc 84 20 a8 28 7e c5 ae ae 8a 79 05 18 69 48 98 5a 98 b1 8f 6d 8e 51 f0 1d be fd ee 5a 38 59 4a 61 69 ed 89 34 60 b1 86 91 a4 6b e7 42 0a 92 e8 b4 5d 19 2c f9 1a f8 28 34 2b b0 2e 08 60 61 36 2b 18 e1 8d 7a 51 af a3 99 56 8f 4e 24 59 26 3c 3d 61 6b 0d 7c b6 15 62 36 a2 f9 b7 d7 f6 60 87 72 03 7f f6 06 8e 74 fd 73 1f be 06 a1 da db 82 7b df 86 8e 06 b9 5a bb 70 f7 f5 77 96 72 76 d7 7e 78 c7 bf 3b e8 cb 4b ff d3 1a 36 57 9e 9e 32 10 47 0d ef a2 29 Data Ascii: ug<LQfB#,# 5rKN7z(NkD2pr4POJ4V?Y\|{VM"{c*os (~yiHZmQZ8YJai4`kB],(4+.`a6+zQVN$Y&<=ak\|b6`rts{Zpwrv~x;K6W2G)
2024-09-15 22:19:19 UTC	880	IN	Data Raw: b0 27 51 93 0c 61 0b 8d f3 88 4c 23 10 6c 80 0e 97 28 c6 ac cf 36 1d d4 e8 87 00 45 b5 67 31 e4 a4 c3 11 22 4d 2f 37 c9 8f 53 3e de 44 4e 33 b9 7a da 9a 81 20 82 89 63 53 f5 ec e5 a0 04 53 6d aa a6 69 07 ad 8d 0c b3 35 48 cc 33 bb dd 44 aa 58 10 b9 7f 58 02 27 96 20 b7 a8 b0 37 b0 a5 c7 2e 8c 56 9d d6 c2 96 99 cc 12 e3 74 03 91 47 5e 98 69 2c c9 24 89 62 2e 51 3e 69 2f 43 77 5a 4c 62 6f 99 57 87 ef 18 8f a0 89 9e 2e 8e ea 64 4f 21 d8 ea 21 64 3e a9 60 da 32 d0 47 82 d5 53 b4 96 99 a9 0a 4b 1f c6 40 3e 2e 81 69 97 5d d9 85 ed 04 d9 66 66 78 aa b8 f5 b1 f8 19 f3 74 6a 29 f9 6b 75 a2 49 d3 03 39 54 01 88 4b f6 3c f6 48 21 6e 8a b8 b4 d6 b8 1a 4b f0 e6 d8 a3 f9 7f 9e 3c b4 3e 20 40 95 6c fe 18 dc 50 c4 a0 42 16 2c 0b 6b c5 22 07 8b b8 d0 6a c2 19 e6 7f 3a d8 Data Ascii: 'QaL#l(6Eg1"M/7S>DN3z cSSmi5H3DXX' 7.VtG^i,$b.Q>i/CwZLboW.dO!!d>`2GSK@>.i]ffxtj)kuI9TK<H!nK<> @lPB,k"j:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.10	49772	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:20 UTC	369	OUT	GET /images/spin-title.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:20 UTC	707	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:20 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 22 Jan 2023 20:48:06 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 548 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AIh5vnAPhFUtNfO8LQnTmzNLg4dsb1S7Ituih5grVqxokQxBGaguwln50h08Q%2By04OgMuziMVIyYGtZCk3FpAZ%2B1y39KgZoNXutr4Jz3oro0kzEDczE68fwwFt8ffCZioA9cPv%2FyvJ5Modk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff6aad904252-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:20 UTC	662	IN	Data Raw: 37 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 41 52 45 4e 41 20 46 52 45 45 20 46 49 52 45 20 4d 45 4d 42 45 52 53 48 49 Data Ascii: 71e<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta property="og:title" content="GARENA FREE FIRE MEMBERSHI
2024-09-15 22:19:20 UTC	1167	IN	Data Raw: 47 58 77 45 4f 6e 67 73 56 37 5a 74 32 37 4e 58 46 6f 61 6f 41 70 6d 59 6d 38 31 69 75 58 6f 50 6b 46 4f 4a 77 4a 38 45 52 64 6b 6e 4c 50 4d 4f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 6c 6f 67 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 6e 6b 2d 31 30 Data Ascii: GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css"><link rel="stylesheet" href="./login.css"><link href="/css/chunk-10
2024-09-15 22:19:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.10	49774	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:20 UTC	374	OUT	GET /img/dob-title.b8c16371.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:20 UTC	750	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:20 GMT Content-Type: image/png Content-Length: 35229 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294219 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RI7kHHa2Ih88moScBfdi9a9Da2VRnH2KY4f3RxOG4gznrcfkEY0tG0n0VrTdBAHDM8CbWzBmK5bp%2FlhgGNWhSipMpwgvT9wvZIi7zA83F6PXVPTJQkHsx0uj0Nb4m6ragZ0jUz5zzM9DE2Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff6cc8c64301-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:20 UTC	619	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8a 00 00 00 36 08 06 00 00 00 d9 01 de aa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR6pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 38 2c 09 Data Ascii: K'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B8,
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f 97 cd 28 db Data Ascii: $3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/(
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 2e 1c e8 cc d2 d0 1e 23 0a d4 74 9b b3 bd 55 a2 51 c1 8c f6 59 0b 34 42 88 f5 6f 3a 8e 99 9b 9e a1 bf bc 4a ab d9 24 95 9a f9 89 69 92 fe 90 b3 2b cb e8 86 4f ee 49 86 e3 11 1e 92 b6 72 38 16 af 71 e1 ec 0e 6e ef 9d 65 98 15 dc 73 d7 3e ce 8c 7b ec 69 4f 13 44 4d 92 24 41 4a 49 a9 72 1c c7 c1 15 82 a3 47 ee a4 d5 68 b0 af 33 c1 ea a0 4f a3 d3 61 b8 36 24 f4 02 9c 20 64 25 4b e8 eb 1c 91 0d 69 e3 11 a7 19 43 51 92 e5 05 2d e9 51 a0 d1 cd 80 e5 38 21 94 12 af 2c 71 4b 45 b7 d1 42 4a 87 95 e1 00 e1 84 48 5d d0 0a 23 8e e6 7d a6 a5 cf 74 d4 22 2d 0b 1a 99 62 ec 0b 5a ca 27 d7 39 2a cf 99 6a 36 71 14 8c 8b 82 b3 d9 98 bc 11 b0 a7 0c c9 8b 82 42 2b d2 22 a7 3b 33 45 ae 4a 4a a5 70 3c 97 64 34 26 72 43 e2 32 47 b4 42 b2 41 c2 a4 1b 32 2e 73 d2 a6 cf cd ab a7 71 Data Ascii: .#tUQY4Bo:J$i+OIr8qnes>{iODM$AJIrGh3Oa6$ d%KiCQ-Q8!,qKEBJH]#}t"-bZ'9*j6qB+";3EJJp<d4&rC2GBA2.sq
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 16 8e b2 df 69 32 a1 43 96 5b 3e 3f f3 eb 3b 9f 75 d9 63 26 df 45 a1 60 ca 85 e9 10 4e 24 4c 4e 44 af fa ce 7b f9 e3 9e 13 e1 b9 2e 45 51 10 28 49 39 4a 69 06 3e 93 4e 48 e0 85 04 41 c0 68 38 a4 28 32 a4 94 e4 79 4e 52 66 b8 51 c0 a4 f2 e0 ff 95 a1 18 aa 9c dc 81 44 95 a0 15 89 50 64 0e 64 1a 26 0b 49 e6 4a 7a 68 96 74 4a 2c 60 56 0a 26 84 87 57 68 06 42 53 94 8a c0 0b c1 81 24 1b e3 16 e0 4b c9 60 71 99 dd a2 c1 a0 2c 50 c2 25 d7 8a 24 19 93 17 39 91 d3 c0 77 5c a4 06 ad 14 aa 2c f1 7d 1f 57 3a 38 52 e2 ba 3e 0e 82 95 41 0f 5f 82 14 a0 05 b8 ae 8b 46 52 14 05 42 08 dc b8 c0 0d 25 a1 e3 f1 8d 8f 0f 8e 79 2d b5 ff de 3f 33 73 24 8c 4b c9 5a 09 ae 80 86 e4 9e 0f 9a 7a 4d de 13 7f f7 d1 bf 39 76 2c 1b c7 94 ae 44 00 0e 0e cd 66 83 66 ab 45 af 18 22 11 c8 34 Data Ascii: i2C[>?;uc&E`N$LND{.EQ(I9Ji>NHAh8(2yNRfQDPdd&IJzhtJ,`V&WhBS$K`q,P%$9w\,}W:8R>A_FRB%y-?3s$KZzM9v,DffE"4
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 38 e6 cc ca 22 b3 3b e7 c9 7d 49 a9 14 3b 1a 1d f2 3c a7 e9 05 a4 c3 11 f1 60 48 47 76 29 44 81 f4 5c 62 59 22 e2 1c 7f 90 32 6e 38 04 ae a0 d9 cb f0 1c 18 78 90 49 4d 56 64 88 d4 c1 d1 0e 65 59 32 1c 8d 70 5d c9 f2 f2 12 b9 2f 10 1a 86 2b 6b e4 8e 86 6e 83 de 78 44 90 a6 14 45 82 8f 47 e1 39 8c 1d 87 54 08 a4 10 e8 71 8c 2b 25 69 9a 32 d1 6c d3 88 22 c8 53 bc d8 c3 95 0e be eb 51 96 a0 94 62 52 04 a4 ae 40 fa 1e 32 91 b8 4a a3 ca 82 5c 97 0c c9 d9 3f 31 47 af d7 c3 2b 4a 0a a5 20 55 f8 51 c0 8e ee 34 fd e1 80 93 a3 21 bb 0e ee 24 3d bb 8a ef 07 0c 86 7d 5a ed 0e 7b 0e 1c e0 d4 f1 13 4c 7b 11 ee 64 83 0b 1a 5d e4 9c 4f dc 1f b2 c3 6d 71 62 75 91 6b e6 f7 33 92 9a d5 de 1a a7 97 ce 32 3d 3d 85 83 a0 8c 53 1a 6e 88 ca 72 f2 86 8f f6 3c a6 e6 26 39 71 f8 30 Data Ascii: 8";}I;<`HGv)D\bY"2n8xIMVdeY2p]/+knxDEG9Tq+%i2l"SQbR@2J\?1G+J UQ4!$=}Z{L{d]Omqbuk32==Snr<&9q0
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: d6 1a 82 be 2e d1 bd 31 3b 3a 33 e4 79 ce c5 3b 77 72 7c b4 4a 7f 34 a4 83 87 54 9a 91 0f 4b c9 10 37 f0 99 4a 43 c2 d0 c7 f7 5d 96 7b cb 24 69 8a 10 0e 79 a9 c9 f3 92 76 c3 85 52 31 d5 68 b3 58 c6 74 b5 8b 4a 32 4e cb 94 a9 18 c2 a9 2e 77 c6 ab b8 85 46 45 1e 61 29 98 d1 3e 67 d3 21 db 5a 13 0c 64 ca 91 78 95 2b da db e9 8d 87 0c 65 49 3b 13 10 7a 8c b2 84 5e 1a 33 df e8 52 e4 39 23 51 32 1c 0e 69 e2 e2 7b 9e 71 a4 35 84 a9 62 ff f6 9d 2c 0e 7b dc ba 72 1a 37 f0 f9 b9 67 ec 71 2f bc a6 b1 d0 ed 88 29 f6 05 70 b7 26 8b 47 f5 ca dc 45 9f 9b 3e 73 dd 83 ef dc 76 75 b0 97 ef f4 e1 ce 94 b5 b3 c5 ca 89 af a7 db 6e fc 78 56 38 c2 61 79 79 19 a4 60 6a 72 86 25 99 71 b0 3d cb 64 a7 cb 37 6e fb 3e 9e e7 b1 b3 35 89 08 3c 4e a4 7d 8e ac 2e f1 da b5 d5 ff 37 11 45 Data Ascii: .1;:3y;wr\|J4TK7JC]{$iyvR1hXtJ2N.wFEa)>g!Zdx+eI;z^3R9#Q2i{q5b,{r7gq/)p&GE>svunxV8ayy`jr%q=d7n>5<N}.7E
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 3c 1e b1 e2 6a 92 6c 48 94 28 f6 5c b8 8f c1 ca 1a bd 5e 8f a4 37 40 a4 8a 2c 89 99 0c 9b 78 be cb f1 de 00 57 0b c6 e5 98 b2 d4 64 ba 24 16 01 b9 80 b1 16 b8 d2 25 53 05 85 52 14 45 41 59 96 68 34 e3 24 61 35 1d e3 66 19 5a 84 2c 25 09 ba 50 9b c7 e3 02 8e fd ea 07 bf f0 3b d7 01 df b4 63 a8 c6 eb 00 11 26 b8 2d ea e3 7c c9 89 63 fc 81 f0 89 9a 0d 92 24 61 72 72 12 e5 98 e4 f5 38 35 4c 9c 46 e8 93 0a 85 f4 5d 1c 15 e0 78 1e cd c9 2e 79 9a 91 c4 31 bd de 88 5c 95 90 97 38 13 93 04 7e 40 3a 34 e1 30 ae c3 28 4b 18 ba 9a 2c 94 a4 2d 1f df 0d 28 cb 84 95 b5 1e 93 61 c4 a9 d5 25 32 95 e3 06 3e 85 56 e4 69 42 91 e5 08 47 92 96 39 65 52 20 5d 8f 48 49 02 af c1 4c 67 82 71 12 13 8f c6 14 49 ca 91 62 84 28 05 52 b8 48 29 91 40 29 a1 4f 49 e6 08 56 54 89 d6 09 6e Data Ascii: <jlH(\^7@,xWd$%SREAYh4$a5fZ,%P;c&-\|c$arr85LF]x.y1\8~@:40(K,-(a%2>ViBG9eR ]HILgqIb(RH)@)OIVTn
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 57 c6 39 00 ba d0 68 34 fe f6 06 e5 72 ca e2 e7 92 bb dd f2 c1 b2 bf 74 7a 01 5f 09 94 04 c7 75 88 f3 0c af 74 98 6c b6 f9 99 df df fe 81 70 87 7b 0d a1 a0 90 40 a9 61 54 f0 27 4f bb 71 5f af 18 d3 8d 5c 9c 76 c8 b8 48 f9 a5 f7 5c 7a a7 f0 1d 4a 77 1e e9 bb b8 39 e8 64 92 9b bf b4 f2 a0 2f fc 7d 7c cc 29 25 ba 48 49 f2 84 a6 ef 18 6a 66 91 51 14 19 99 d0 bc f8 2d bb ee f4 3a 01 5e e0 c1 78 1a e9 09 28 35 a7 be 3c 7c d0 d7 ff 76 74 2c 93 1a 1f c9 41 3f e2 40 7b 8e 20 55 4c b9 11 4e e0 e3 4a c9 8e d2 23 d5 31 69 e8 f0 e8 37 6c ff 40 73 af 7b 0d 6b 05 7e e0 21 03 07 3c 41 96 ce 91 2c 17 87 3f f5 cb 8b 0f 75 d2 02 47 49 ca 0c 9a 5a b3 98 f4 88 66 67 91 41 c4 7d 9e d1 de 33 79 4f f7 0b 85 0b 25 9a 2c df 41 c7 f5 89 4f e5 5f fb 97 97 c7 4f 19 a5 0a 89 47 d7 0d Data Ascii: W9h4rtz_utlp{@aT'Oq_\vH\zJw9d/}\|)%HIjfQ-:^x(5<\|vt,A?@{ ULNJ#1i7l@s{k~!<A,?uGIZfgA}3yO%,AO_OG
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: db c1 60 2f cb a6 64 01 27 36 f3 df 14 c6 1d 96 d4 f4 5a 89 a1 77 19 b9 63 97 0b 27 4b 28 a4 d1 e9 2d 17 72 87 f1 a2 bc 1a f8 d1 0c c5 67 af dd ef 5e 70 55 f3 ba 5d db 9d bb 31 2e 20 35 5e 30 89 02 25 8c 52 b7 78 25 85 86 3c 87 a1 00 29 88 42 e4 15 f7 6a be 74 cf ee c6 d3 6f fa fc ea b6 cf 7c 25 29 5a 04 04 d2 25 2b 0b 86 49 4c 5b 3b b4 dd c0 0c 79 a0 b0 f4 13 73 3f ad d0 68 4a 95 a3 95 c4 73 04 61 a7 45 99 8e 18 e6 19 be 2e 69 b7 1b c8 28 80 cc c0 1d 38 80 d4 c6 c3 0b 05 ae e7 13 86 21 c3 5e 7f f3 d0 a4 8d 28 da 8f b9 72 e2 25 c4 25 a4 a5 d9 84 89 32 63 d1 25 08 0d 81 64 6a ca 9d f8 d4 13 e7 27 1e f9 4f a7 d7 de d0 9a 67 aa 3b 47 c3 0f 58 ce c6 0c b2 11 4e a9 e9 e2 b0 36 ea d1 16 2d 03 1d 69 85 ca 33 64 9c e3 96 11 48 09 c3 0c 46 02 7c 61 f8 c4 2e e6 5d Data Ascii: `/d'6Zwc'K(-rg^pU]1. 5^0%Rx%<)Bjto\|%)Z%+IL[;ys?hJsaE.i(8!^(r%%2c%dj'Og;GXN6-i3dHF\|a.]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.10	49773	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:20 UTC	376	OUT	GET /img/btn_history.c6c98836.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:20 UTC	754	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:20 GMT Content-Type: image/png Content-Length: 19334 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 16:26:07 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 280392 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BuhG%2BixilThi4BXy7Htuf2mv3vwYcTBBOQinoDpoaq7YJtsslsdizYTCBiDhxsVnF4zCRVS0iTZs65qpVXUoFD2RyMsIbhCioPKy9wRDprxjh74dEKkyW1RhDZggWrtON44M3UNqf1xu6%2FY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff6cdd6ac40e-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:20 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f2 00 00 00 2e 08 06 00 00 00 12 94 44 f0 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.DpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 Data Ascii: -]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 45 db 2f Data Ascii: 5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nVE/
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 0c 42 04 12 82 88 dd 34 47 20 0a 10 70 bb b9 a0 4a c3 76 9e de a8 7a 61 69 f8 35 d6 1f 71 00 24 d3 1b ed 83 bd e6 01 26 93 ab 03 b8 9e 3e e7 9c 6d 5a 00 d4 45 fb a8 0f 83 fd 2d 5d 80 0b 55 28 9c f4 77 05 ba 46 04 10 39 db 68 02 b8 5a 26 d7 1e 84 43 ca 4c ba d9 16 95 39 1c 42 66 6f 32 d3 3c 99 09 a0 cc 0e a9 fd 9f cb c7 90 59 55 3b 9c b7 fb b6 c8 3a 83 ec 9a bc 3d 9f 0e bd ce 82 9f 2f 33 86 65 26 5d 07 ca 87 64 1e 37 99 31 22 b3 09 ae f2 d5 87 56 58 3f 4b 71 68 99 6d ad b9 d2 df 73 ce ae 2d 87 90 d8 59 74 80 c0 81 4b dd 7f 21 87 a4 08 89 15 c8 3b 15 9f ec be 50 0e 72 4e 0d 12 33 40 0c 2e 23 10 09 c8 08 94 f4 40 4a 64 dd 26 49 54 f1 56 bc ce f5 32 20 67 a4 7e 05 44 d1 3d de f3 a0 2a d9 75 10 28 78 b8 dc 41 fa 11 38 90 40 63 a4 97 5b 39 b8 1c 20 ef f0 e0 3d Data Ascii: B4G pJvzai5q$&>mZE-]U(wF9hZ&CL9Bfo2<YU;:=/3e&]d71"VX?Kqhms-YtK!;PrN3@.#@Jd&ITV2 g~D=*u(xA8@c[9 =
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 2e f9 5c 34 c5 0b 08 0b 5c c7 03 25 37 be d0 dc 6c 42 c8 3a 0e e3 cb 02 5c 46 90 fd 51 d7 28 d7 e0 9d 2a 73 97 bd 57 70 29 31 b8 2a 1b 85 28 91 41 3d 07 19 a8 c6 90 0e e0 7a 39 a4 2c 80 28 76 df 6c 23 78 0f a9 12 30 dd 87 c4 08 ca 32 bd 7f 6c 71 58 f0 ea aa 70 34 cf 49 80 aa 04 d9 e1 6e 16 95 72 d5 b4 b0 c3 20 7e c8 d5 e6 56 53 37 48 70 d1 82 28 b5 55 87 0c c5 a8 bd a1 f8 6a d6 3e 5b 28 18 43 7e 68 53 d4 80 51 35 14 d7 39 43 9a 6b 97 d0 35 68 af 2e 52 34 00 ab 63 5e 44 6d e9 6a 97 71 c8 75 7d 22 ca 5c bf 87 64 9e cc bf e0 3a 0b 19 b0 15 ed 3b 66 16 97 19 87 90 b9 71 b1 a3 1d be e6 14 99 37 31 db a2 dd cc ad 75 66 05 5c 1b 50 94 e7 4c e1 d4 80 5d 1c fd 3f 1b 0e 20 06 88 f9 a0 df 17 2b a0 32 25 e4 33 03 f3 48 f7 3c 8b 59 6a 81 14 45 eb c8 c0 70 81 c8 ba 5c Data Ascii: .\4\%7lB:\FQ(sWp)1(A=z9,(vl#x02lqXp4Inr ~VS7Hp(Uj>[(C~hSQ59Ck5h.R4c^Dmjqu}"\d:;fq71uf\PL]? +2%3H<YjEp\
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 41 26 67 a9 be 41 a9 00 56 32 c5 c5 06 0c 73 84 38 07 62 51 cf d3 1b 7b ad ac 80 8c f4 3b 40 0d c1 46 18 a0 2a 42 52 d2 48 d0 c2 cb 3a bb 53 33 ce b8 88 7a 06 6a 94 bb 3e bc 95 00 99 03 f5 bc 3a 6d 50 59 63 21 18 f4 19 21 25 20 45 86 14 11 12 03 a4 63 c1 35 eb 62 8b 77 f0 99 d3 c3 6a e6 5f a2 40 20 f0 63 1d b5 9e 00 28 23 48 c5 ba ee 9e 9a 38 41 44 f3 c1 b5 e0 48 4e b5 5d a5 8b 28 a4 ae 20 85 cc 50 55 3b ee 31 81 b2 00 ea 8c e9 42 c7 08 78 19 62 e9 98 1a 75 04 24 32 ad a8 7e 02 89 6d 52 b6 94 16 60 64 04 db 44 b5 b5 a9 dd c3 64 ee a8 0b 2d 70 43 16 e7 50 31 94 7a 91 16 41 6d d8 59 75 7c 59 53 49 13 1e de 51 e0 4f df 7e 03 b6 6d 3a 00 00 58 7a 54 86 3f bb ec 79 58 b3 7e dc ac 9d 2a 2a a9 e2 13 46 66 0a d9 88 95 6e 5c 63 60 48 66 f9 39 32 97 ff df 64 c6 b0 Data Ascii: A&gAV2s8bQ{;@FBRH:S3zj>:mPYc!!% Ec5bwj_@ c(#H8ADHN]( PU;1Bxbu$2~mR`dDd-pCP1zAmYu\|YSIQO~m:XzT?yX~*Ffn\c`Hf92d
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 9c 15 d8 09 5c b0 5c 6f ae a7 5f aa a4 b9 e1 e0 ed 35 01 4d 64 c6 fe 32 57 85 45 dd 6f 56 77 46 cb 0c 1d 64 b6 6a f8 1a 14 8c bb ed bd 42 f3 35 3c 6f a5 5a 75 5e 90 08 10 9f 35 95 50 f0 de c0 51 0f 09 a2 5a 51 7d 20 ad 1a 61 8d 8f c8 f9 16 2c a9 53 14 6c df 5d 27 ee eb bc 68 4a 10 57 da e2 7b 8d a5 ea fc a5 58 ac d7 6c 2a d7 e6 ad 49 46 b9 bd 23 e5 76 b5 cb a4 40 c9 f8 92 0c 1b 2e 58 8e 77 7e e0 24 4c ad ac 0b 0c 80 65 2b da aa a4 4d 5f de 09 7c ec df 57 e6 8d cf 3f 0c 1f bf f1 5c 7c f5 d3 f7 00 02 dc f8 9d 87 71 d6 f3 56 a3 d7 91 05 32 6b 76 c4 2c 66 53 06 d9 d2 bb 81 c7 b9 ce f2 cb c8 9c 86 d6 19 43 de c8 bc 75 16 69 05 e2 5a e1 b4 6e 30 cc dd 47 bd 17 e1 cc 62 aa f5 95 18 b5 e0 07 ce 68 c5 b1 b1 9c 80 07 05 43 9c eb 8d cb c6 cc f2 4e 43 8a c4 6d dc 2f Data Ascii: \\o_5Md2WEoVwFdjB5<oZu^5PQZQ} a,Sl]'hJW{Xl*IF#v@.Xw~$Le+M_\|W?\\|qV2kv,fSCuiZn0GbhCNCm/
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 17 d5 0c 3c 53 21 cd 96 9a 90 0e 5a 34 8d 5c 5d 62 9e b3 4a 0c 8c d6 ab bb 5c b9 d8 69 7f 5f 5d f0 3a a5 90 a9 85 d6 1f 1f 7a 0c 12 a4 50 c4 8f 00 6c de bc 17 ef 78 e9 2d 3f f7 10 d7 b1 e6 9a b5 bd 36 ed 30 22 06 b5 9c dd 64 79 c0 e1 f8 b5 f6 0f 9b c4 bf d7 7c 34 5b f7 0e 22 f4 fb 8c f7 bd ec fa 43 1e e2 fa 71 e2 e9 b5 15 4b 6d ba a4 b1 8b d4 ba 78 ce 37 69 32 9a f7 1d 6f fd c4 09 f8 d0 15 67 e0 d5 6f 3a 7a 44 e6 de 58 86 b3 df 70 f8 c8 7b 7f b4 69 f7 a2 32 5f fd a5 07 46 de f7 ec 5f 39 b2 71 f9 36 5f b7 07 1f be f8 c6 43 1e e2 fa b1 e5 ca 3d 78 df ab be 87 1d db 66 16 c8 3c ff 71 e9 5f dd 8b 41 9f db 82 fe 94 16 7e 21 d5 08 b8 fe bd f9 fa dd f8 fd 57 6c 7a 5c 87 f8 ec b7 1c 69 16 b8 5e c3 da 6d 4e 43 cd 12 80 9b ae 7f 14 1f 7e e5 e6 43 1e e2 e6 da be bd Data Ascii: <S!Z4\]bJ\i_]:zPlx-?60"dy\|4["CqKmx7i2ogo:zDXp{i2_F_9q6_C=xf<q_A~!Wlz\i^mNC~C
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 24 05 d7 f6 c1 92 f9 8a c7 98 47 8b c9 bc 6c 45 17 1b 2e 5c 31 ea aa dd 79 60 44 e6 eb 2e db 36 ea 56 bf e8 08 40 12 76 fc ec 20 36 7d 61 34 66 fb dd bf 7a 3a 7a e3 d9 88 cc 1b 9f b3 1a 17 ff c1 d1 23 ef bb fa 1b 3b da 56 4c 43 d7 b5 fe 19 bd 91 f7 5d f2 e7 77 68 2a 0d b2 c8 41 56 56 df e6 eb 77 61 db 4d b3 23 2f fd d9 ff 3e 0b c7 9c 38 65 45 1e be a5 89 5a 2e be 37 11 9a 75 96 a6 d9 22 37 20 f6 8e 9f cd 62 d3 97 46 5d f4 df fb e8 a9 e8 8d 65 8d 25 17 11 9c 79 d6 72 5c fc 3b 47 8d 5a c8 eb 76 1a d6 b3 50 66 62 23 87 d4 0c ae 6a b1 fd 65 16 db 39 48 a9 6e ee f5 df 6e 95 e9 99 e7 4c e1 ac e7 ae 1a f9 c8 fd 8f a8 95 e5 7e 05 94 09 af 7f d3 91 23 af ff eb d5 bb b0 77 6f 81 ab 2f df df 3c f7 d2 37 ac c4 da 75 63 6a 0c a3 ee 23 49 0c de 5f 00 b3 95 56 48 65 9a Data Ascii: $GlE.\1y`D.6V@v 6}a4fz:z#;VLC]wh*AVVwaM#/>8eEZ.7u"7 bF]e%yr\;GZvPfb#je9HnnL~#wo/<7ucj#I_VHe
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: fb 1e f0 22 fb cb 19 73 90 08 98 2d 71 d5 d7 5a 6f 6f fd c9 1d ac 5d d3 85 b0 e0 b4 b3 5a 05 3c fd 28 63 cb 9d 33 b6 2d 04 12 80 a3 8f 9d c4 c6 f3 97 2c 90 6d dd 53 02 ce 7d ce 4a 55 fc 79 50 e3 da f5 70 13 99 d6 2c 64 0e 69 a6 44 da 3d 40 da 3b 40 da 57 00 45 c2 81 fd 09 bb 1e a9 e0 3a 5d 82 77 d0 a2 05 61 4d 1f 09 b4 2f 90 6b 17 8b c9 92 d2 45 5c c4 b5 16 f0 74 61 dd 5e 9d c2 e5 07 b4 6b 82 ef f8 05 9b 5d 3c 69 fe 78 9e d6 df b3 6b 30 d4 60 d2 cc 46 e4 a6 c7 72 53 e7 c9 bc f0 00 3d ae 83 6c ac 30 e3 6f 37 2d 59 ac f8 82 c8 61 cd da 09 7c e6 da 17 e0 8d 1f 3d 7e d1 03 bd e5 1b bb f1 89 3f b8 45 2d 7b 7d 18 e7 a3 d6 82 b6 c0 dc ca 2d e7 23 f7 c3 85 f9 02 d2 df af 5d 0d 73 11 4f 7d e6 a8 55 b9 eb 27 fb 20 0c 6c fa 87 56 8b 6f b8 68 39 a6 a6 7a cd e7 26 97 Data Ascii: "s-qZoo]Z<(c3-,mS}JUyPp,diD=@;@WE:]waM/kE\ta^k]<ixk0`FrS=l0o7-Ya\|=~?E-{}-#]sO}U' lVoh9z&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.10	49775	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:20 UTC	381	OUT	GET /img/btn-bod-deactive.5810d0f4.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:20 UTC	757	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:20 GMT Content-Type: image/png Content-Length: 9706 Connection: close cache-control: public, max-age=2629000 expires: Thu, 19 Sep 2024 12:35:41 GMT last-modified: Sun, 22 Jan 2023 20:48:04 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 294219 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKqnaJck7dAIdEEHlDvOlYOjN%2B2a8tqOexai2P4DIu7VlwF7IFc2Tg2ttVz6sXKRs6bq2OtjUyTsx9a%2FrZGzH3lkC%2FUEEaopj%2Bu%2BoIU9uY5VAS7eeIp2LRvdlh2CNjw14XkH8qkczksCoYg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff6ce9cfc46d-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:20 UTC	612	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 98 00 00 00 2e 08 02 00 00 00 5b 33 47 1e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.[3GpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e Data Ascii: {-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b 3e 15 89 8a ae 14 db 17 97 15 7f d8 28 dc 78 e5 1b 87 6f ca bf 99 dc 94 b4 a9 ab c4 b9 64 cf 66 d2 66 e9 e6 de 2d 9e 5b 0e 96 aa 97 e6 97 0e 6e 0d d9 da b4 0d df 56 b4 ed f5 f6 Data Ascii: z5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<mOW~&zMk^kU}]OX/Ya>(xodff-[nV
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 0c 86 d5 c6 f1 e1 66 53 30 5b b7 18 bb 14 f6 97 d7 14 bc 6d 94 11 d7 2e 23 ba 6f 36 c2 01 f7 34 a3 75 05 a0 13 0a f0 aa 45 12 25 b8 62 c7 64 80 88 c2 38 6f b3 6c d1 a8 b8 b6 8b e9 1a 19 7f 36 0f ee 60 d8 2e 10 7a 20 e5 6e 74 a5 eb 96 aa 39 fe 71 b2 0f 4c 3e 6d 92 71 1a fa 14 a5 36 1a 50 b6 b6 3b 8b d0 27 c1 eb 36 9f a9 ed 45 31 1c 46 b8 4a 6e 0c 3a 75 6b be 67 d5 d4 cb d9 d5 7b db 0d c5 cd 13 2e c8 87 2f 4f 37 ab 39 f8 a1 ba a0 7e 32 16 93 c4 c5 c2 9c e4 42 f5 90 ba 04 b9 08 a8 62 3d c8 0a 16 77 40 4a 2b 8c 2d 36 42 50 6d ba 59 08 9a dc 21 b0 84 0b 6d 82 09 7b 25 e0 9e c2 0b 55 22 b1 d6 a1 95 a5 e4 0a 69 50 85 95 26 f8 ee b5 6c 12 8c 4f 5b 5c 5b 4c d2 a4 e9 47 46 b6 f5 de e3 57 b7 4a bd 9f 76 36 44 6d e5 dd ec 52 b5 79 fb c9 dc 15 a6 59 9a 51 96 b4 b0 21 Data Ascii: fS0[m.#o64uE%bd8ol6`.z nt9qL>mq6P;'6E1FJn:ukg{./O79~2Bb=w@J+-6BPmY!m{%U"iP&lO[\[LGFWJv6DmRyYQ!
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 70 4a 4a bc bf 83 01 25 c2 70 66 77 49 ce 19 b9 94 c6 7a b7 fb 24 41 d0 c8 62 a2 2e ce ab 54 82 a2 93 dc 29 0b b6 15 de ac d8 24 82 1e f0 89 72 c5 cd e8 c5 b5 5e ac 3d ad b2 a7 a7 71 1f 0a 6e e2 e5 41 cf d7 c8 5e ca 8f ee 42 90 dc ff 74 d1 3c 1e cb 8f ee 8c 08 0a e8 72 f5 cf 2f 62 f7 ed d1 9e 0f f7 23 09 13 96 9f 3d f4 2f 2f 75 b1 fa 67 97 20 f8 fa 89 3d 3e e5 c3 7d 63 6e 33 9c f8 e7 e7 ba ec 64 1e cb fb 0f a6 58 08 ff e2 42 17 91 7e a0 bc ff 60 83 24 8f b2 02 42 e7 ab 7f 7a ae 67 87 41 a4 3f 5a ec ed bb 3c 2d 13 0f 0e 5d 55 ff e2 3c 35 f8 4e b1 d7 4f 41 26 fe 32 d3 b7 07 7f 76 08 41 da d3 33 ee 38 e1 68 ea ab 2b ec 0b 5f 33 06 04 3d 3f f0 ee ae 65 99 4a 3b 21 22 10 ca 05 49 55 23 94 71 e2 f6 2c e0 2d 96 20 5a d3 91 06 83 cf 01 f5 d1 31 15 c4 62 49 fa 3c Data Ascii: pJJ%pfwIz$Ab.T)$r^=qnA^Bt<r/b#=//ug =>}cn3dXB~`$BzgA?Z<-]U<5NOA&2vA38h+_3=?eJ;!"IU#q,- Z1bI<
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: a6 30 f9 c9 d5 76 37 27 dd 7a 78 32 8c f2 d3 83 9e 5d 63 6f 5b d7 3d 93 e9 c7 62 e6 d9 32 e3 80 a0 42 67 41 de 38 c9 64 77 41 54 1d 39 09 1a 77 05 a4 ae 5d 97 f9 b9 bd be c0 c5 fb 53 98 fc 62 1d 77 44 28 38 f4 b9 f2 1d 1e 22 d2 fa 9d 45 91 9f 64 31 5a 81 ad 07 ad ab 40 70 67 ca 1a 74 cf 23 d5 cb 09 5c 3a c5 a3 1e 17 83 d6 b1 f7 ee f4 4f fc 0f 07 de ca 49 fe f3 5f c9 f5 c0 67 98 be 33 3d bf d6 f3 2b 3e 29 0d 9e b8 ce 0f 83 23 ec de f8 cb 2a a8 fc f4 c1 6c 94 7c b8 bf 19 22 db 06 e9 fb 88 d8 c1 11 d3 74 e9 37 a2 38 37 41 bf 76 3c 68 91 bf dd 70 01 f2 af 47 6e a3 42 bd 3c e8 55 e5 bd 54 32 5d 4b 97 35 ab 67 8e 04 07 bd 5c 51 90 2c c1 de ec a4 64 a5 01 70 97 15 9a 71 49 e5 73 21 b2 4a 31 fa 54 68 9c da cf 08 09 ab 50 30 ca a4 71 f9 ea 28 b4 77 17 ff f0 90 e4 Data Ascii: 0v7'zx2]co[=b2BgA8dwAT9w]SbwD(8"Ed1Z@pgt#\:OI_g3=+>)#*l\|"t787Av<hpGnB<UT2]K5g\Q,dpqIs!J1ThP0q(w
2024-09-15 22:19:20 UTC	1369	IN	Data Raw: 75 0d 67 3c 4c ad 51 b7 d9 66 d7 07 a7 90 f3 05 e1 42 a3 10 23 81 85 2c a6 ea d9 dd 23 c0 a8 ea 20 b8 94 de 35 72 4b 4e 37 7a db 8f 28 fb 4e f0 6b d3 44 32 f7 e3 70 fa d6 a7 72 34 8f 50 4f bf 4a 0b 34 af 56 ff fa d2 3f ba ea 59 7c a3 ef f7 e5 bd 7b 90 b8 98 56 4d de 22 7b dd 10 63 17 11 cb ac bd 89 2a 95 6f c3 73 fc 84 20 a8 28 7e c5 ae ae 8a 79 05 18 69 48 98 5a 98 b1 8f 6d 8e 51 f0 1d be fd ee 5a 38 59 4a 61 69 ed 89 34 60 b1 86 91 a4 6b e7 42 0a 92 e8 b4 5d 19 2c f9 1a f8 28 34 2b b0 2e 08 60 61 36 2b 18 e1 8d 7a 51 af a3 99 56 8f 4e 24 59 26 3c 3d 61 6b 0d 7c b6 15 62 36 a2 f9 b7 d7 f6 60 87 72 03 7f f6 06 8e 74 fd 73 1f be 06 a1 da db 82 7b df 86 8e 06 b9 5a bb 70 f7 f5 77 96 72 76 d7 7e 78 c7 bf 3b e8 cb 4b ff d3 1a 36 57 9e 9e 32 10 47 0d ef a2 29 Data Ascii: ug<LQfB#,# 5rKN7z(NkD2pr4POJ4V?Y\|{VM"{c*os (~yiHZmQZ8YJai4`kB],(4+.`a6+zQVN$Y&<=ak\|b6`rts{Zpwrv~x;K6W2G)
2024-09-15 22:19:20 UTC	880	IN	Data Raw: b0 27 51 93 0c 61 0b 8d f3 88 4c 23 10 6c 80 0e 97 28 c6 ac cf 36 1d d4 e8 87 00 45 b5 67 31 e4 a4 c3 11 22 4d 2f 37 c9 8f 53 3e de 44 4e 33 b9 7a da 9a 81 20 82 89 63 53 f5 ec e5 a0 04 53 6d aa a6 69 07 ad 8d 0c b3 35 48 cc 33 bb dd 44 aa 58 10 b9 7f 58 02 27 96 20 b7 a8 b0 37 b0 a5 c7 2e 8c 56 9d d6 c2 96 99 cc 12 e3 74 03 91 47 5e 98 69 2c c9 24 89 62 2e 51 3e 69 2f 43 77 5a 4c 62 6f 99 57 87 ef 18 8f a0 89 9e 2e 8e ea 64 4f 21 d8 ea 21 64 3e a9 60 da 32 d0 47 82 d5 53 b4 96 99 a9 0a 4b 1f c6 40 3e 2e 81 69 97 5d d9 85 ed 04 d9 66 66 78 aa b8 f5 b1 f8 19 f3 74 6a 29 f9 6b 75 a2 49 d3 03 39 54 01 88 4b f6 3c f6 48 21 6e 8a b8 b4 d6 b8 1a 4b f0 e6 d8 a3 f9 7f 9e 3c b4 3e 20 40 95 6c fe 18 dc 50 c4 a0 42 16 2c 0b 6b c5 22 07 8b b8 d0 6a c2 19 e6 7f 3a d8 Data Ascii: 'QaL#l(6Eg1"M/7S>DN3z cSSmi5H3DXX' 7.VtG^i,$b.Q>i/CwZLboW.dO!!d>`2GSK@>.i]ffxtj)kuI9TK<H!nK<> @lPB,k"j:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.10	49776	203.162.56.72	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:21 UTC	602	OUT	GET /web/ff/fav.jpg HTTP/1.1 Host: cdn.vn.garenanow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:22 UTC	309	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 15 Sep 2024 22:19:22 GMT Content-Type: image/jpeg Content-Length: 10025 Connection: close Last-Modified: Fri, 04 May 2018 07:18:36 GMT ETag: "5aec094c-2729" X-Cache-Status: HIT X-Handled-By: cdn-master Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-15 22:19:22 UTC	10025	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff e1 00 60 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 02 00 31 01 02 00 07 00 00 00 26 00 00 00 69 87 04 00 01 00 00 00 2e 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 c8 00 00 00 03 a0 04 00 01 00 00 00 c8 00 00 00 00 00 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF`ExifII*1&i.Google0220ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.10	49777	45.119.240.104	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:22 UTC	388	OUT	GET /web/ff/ff_membership/item/Vip-Membership.jpg HTTP/1.1 Host: cdn.vn.garenanow.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:22 UTC	311	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 15 Sep 2024 22:19:22 GMT Content-Type: image/jpeg Content-Length: 425312 Connection: close Last-Modified: Wed, 09 Jan 2019 08:55:01 GMT ETag: "5c35b6e5-67d60" X-Cache-Status: HIT X-Handled-By: cdn-master Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-15 22:19:22 UTC	16073	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 7a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydzhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-09-15 22:19:22 UTC	16384	IN	Data Raw: d1 d8 f9 cb 24 6d 28 90 74 a2 55 47 b0 e1 fc b1 83 c0 1e 4e b2 aa 6c 23 39 aa 6d e9 6d 04 ce 7c bb 8f e0 dc 85 27 e6 3f 7d 88 cd da aa be de 03 6a 20 82 58 f7 5e 71 24 9d c2 7d 4c 5b 72 3b bb 7d be 45 be 2e f1 49 19 52 b0 bc cc 15 06 79 95 f8 d7 2c cd 42 28 cc 1e b8 84 21 dc 7b b7 d8 f9 3f 79 72 7d ae e1 a3 8d be 05 a5 c5 f6 de ba 7a 33 18 bd 48 a4 3e 3f 1e 94 53 95 09 c4 7f ca be 8d ec d9 19 2f 60 9c 9d 6b 8a bd f8 9d 4c 5c d6 0d 76 4f 06 43 cb eb ec b5 36 8d ca bb 36 40 3b 95 2d c4 3a 7e 00 2b d7 51 3d f3 6c 47 49 b2 9a 56 5f d5 d3 52 05 3c ff 00 66 a0 0e 80 05 63 4e a6 b9 e2 45 d9 ff 00 89 1c b6 61 23 e5 5b 24 17 f1 f4 d7 64 f2 5b 3a 81 e2 52 71 2c 4d ec 55 65 f6 91 88 d3 9b 7d 28 79 ab 08 4a 1f 9d 9d e1 37 b0 dd 59 4b 0a a1 12 53 39 e5 76 85 6c 9a db Data Ascii: $m(tUGNl#9mm\|'?}j X^q$}L[r;}E.IRy,B(!{?yr}z3H>?S/`kL\vOC66@;-:~+Q=lGIV_R<fcNEa#[$d[:Rq,MUe}(yJ7YKS9vl
2024-09-15 22:19:23 UTC	16384	IN	Data Raw: 63 f9 53 12 96 b5 aa c6 0c a4 ae 05 65 f3 e0 f4 4d 94 35 6d 1a 67 c5 47 b5 7f 0d 45 ec ea 2e f4 2d 41 95 4a 90 7f 48 8c a9 5f 3f 03 e7 87 92 c0 e6 cf d6 d3 a2 e6 07 f5 61 2a 32 56 1f 13 c6 3f a8 df 8e 3f 2c c6 10 f8 6e 6d 6f 4d 2e 03 09 2e b7 6b 8b 58 d9 d1 df cd 74 ba 98 11 61 51 ad d8 e9 b8 b9 90 91 b3 95 b2 6b bd a2 51 d5 4b 70 f4 f4 27 4a bc 62 5b e4 bc 74 b2 15 91 14 82 c6 ba 47 4f c4 69 d4 f8 0e b5 c0 dc a3 68 da ee 2d 1a 4b 83 4b 4b 90 92 c2 a2 9a d9 a4 a1 f4 e3 5f 02 1a a3 51 c8 2f 5e a3 0b e8 9e 55 70 39 97 2d 37 5c bb 8f 34 fc 49 0d c5 b4 5b f2 3e 4e 3c 59 4f 6e 96 4c ff 00 68 17 99 4c 8f 46 f7 1b 04 0d ca b4 fe 82 3d f3 72 d3 46 be 95 56 b4 60 1d 52 95 cc 2d 72 a0 f1 03 0c 3b ae 1b ba 6d ea 0f c9 47 11 71 a9 54 90 5e 94 ae 5f d3 d3 cb 12 02 aa Data Ascii: cSeM5mgGE.-AJH_?a*2V??,nmoM..kXtaQkQKp'Jb[tGOih-KKK_Q/^Up9-7\4I[>N<YOnLhLF=rFV`R-r;mGqT^_
2024-09-15 22:19:23 UTC	16384	IN	Data Raw: fe 62 eb e9 dc da 58 82 a3 d4 7c f3 eb e9 fa 5c 50 3d 34 13 de de 7e 19 19 98 7b 49 fe 91 82 7e 9c 71 1a 08 21 a0 fe a2 8f e6 18 0a a8 ca 7c 92 99 ea 58 3e a1 e5 2d 4a 23 d3 a9 ee d8 f5 1a d2 39 81 cc aa 83 f7 7f 2f bf 06 e2 bc 11 f5 88 03 ec a7 f4 60 5c 48 ae c6 58 71 ab 02 c2 c1 fd f6 14 b4 2b f4 29 2a 42 81 d0 cb 74 51 c3 a7 e3 1d 08 26 a3 dc 69 fc f8 3a b7 69 30 d3 24 41 d7 c9 a8 47 e5 07 0e 25 16 41 90 c6 75 96 e3 df c9 79 4a 5a 1b 6d 99 29 44 b4 28 ab 70 02 84 92 e2 bb 46 fb f4 d2 d5 af 21 dd e1 1e 9c 52 c8 15 b2 f8 9b 50 eb e0 1c 30 1f 76 0c fc 86 cf 22 17 9a d2 35 00 54 95 25 0f d9 a6 82 b8 99 f5 1c fb 37 02 c3 99 a9 8b 5b 41 2a 54 56 9d 4c 69 4a 13 a3 39 32 e2 50 25 e9 92 19 43 81 a7 3b 14 ae ee 84 0d 92 00 db a6 ac 06 d1 de 6b de 23 c7 7f 76 5a Data Ascii: bX\|\P=4~{I~q!\|X>-J#9/`\HXq+)BtQ&i:i0$AG%AuyJZm)D(pF!RP0v"5T%7[ATVLiJ92P%C;k#vZ
2024-09-15 22:19:23 UTC	16384	IN	Data Raw: b8 3a 45 7a 90 a4 e2 58 9b 9f f7 c6 f2 27 7b 36 dc 1e 4d 24 aa ad a0 8c 31 a6 40 b7 cb b1 50 4f 52 03 11 e0 31 33 38 bb 17 fa 60 d0 b0 d4 a6 f2 0e 20 9b 92 a1 1b 89 1c 8d 32 57 cd 32 ea 37 eb 06 b3 e6 e4 d5 c5 3d ff 00 ba 5a 5b ae 93 b1 0a df ae a1 ad cd ac 6d 37 54 6d ba 3d aa 3b 70 c3 47 cb 5c 41 70 81 ab 93 34 93 c8 f9 8c 8a 96 09 a4 e7 8a db ce b7 df ae 3d da 56 81 ed 39 14 5b 29 3f 87 6e 45 d2 41 fd 79 34 2c ad 97 50 c1 54 78 8c 28 ed ab b3 1c c1 e9 11 fc 55 39 c4 78 e4 28 b1 94 b1 64 6c f8 e2 19 24 86 dc 8d 47 76 f2 e0 ae 32 3b 4e c1 4f f7 6d e8 da 8f 4d 4c 5b 9c e8 db 2a dc 72 8b fd b2 0b d9 a3 3e 94 82 38 e6 9c 54 53 51 11 30 13 0f 02 69 45 3d 30 83 61 79 c7 38 ec 69 37 7e bf 75 bc d9 6a b5 68 fd 3d c5 fc c3 4f 00 0e 18 fb 23 a5 7a b8 18 8c 7c 83 Data Ascii: :EzX'{6M$1@POR138` 2W27=Z[m7Tm=;pG\Ap4=V9[)?nEAy4,PTx(U9x(dl$Gv2;NOmML[*r>8TSQ0iE=0ay8i7~ujh=O#z\|
2024-09-15 22:19:23 UTC	16384	IN	Data Raw: 56 3a 85 94 8e 08 7a 65 1c eb 9a 30 3e 01 bf 09 f2 fb b0 a0 cd 31 e8 f3 e1 ca a2 5d 9a 6a 33 0a 19 42 a3 19 c8 a4 14 86 2d ab e7 21 4f e3 02 71 57 f0 d4 a6 96 43 2d 3a 7f be 3b 4f ae 90 d9 e3 0a 6c e5 00 b2 3e 90 c7 f4 90 e6 86 b5 c8 f9 30 23 3c b1 be db 75 22 48 b7 a9 19 7d b2 e5 3d 49 63 5e b1 c8 b9 4d a7 d8 7f 13 2f 91 a8 e9 81 7e 20 e7 56 1c a7 2b 31 87 93 2a 24 3e 4d e1 fb b6 30 6e 48 ad 80 e2 90 e7 cd b2 e8 95 59 22 c6 23 a0 3d 15 73 eb 96 dc 96 77 dd 0e b6 7b 90 a2 9e ba 97 3b 6b 6d 23 ee 57 22 55 7a 2c 11 32 b1 e8 eb a8 e7 5e 9a 85 08 3e d1 ef c3 4b ba 96 56 db 0c 10 0d b1 bd 4d 8a fc 19 a1 27 3d 04 81 a9 45 3a d0 9d 27 a1 15 cf 14 59 e5 f4 5c ae c7 cb 3e 73 e5 db ea cc 43 22 61 8c ae 64 0c 76 34 8c 82 4d 4b f8 8e 39 41 19 9a b6 25 4b 7a c6 bd ca Data Ascii: V:ze0>1]j3B-!OqWC-:;Ol>0#<u"H}=Ic^M/~ V+1*$>M0nHY"#=sw{;km#W"Uz,2^>KVM'=E:'Y\>sC"adv4MK9A%Kz
2024-09-15 22:19:23 UTC	16384	IN	Data Raw: 64 84 81 b3 92 51 24 38 95 36 12 3e 3b 01 f6 68 0d b7 7c dc f6 21 f2 db 65 cb c5 13 bf e1 26 3a 31 a5 69 46 53 53 e4 06 23 be 5f b4 70 59 2e a1 8b 91 0d 57 32 36 88 8b 39 46 f7 29 5a 67 83 97 72 ae 52 cc 90 ca 6e 9e 43 34 2c ad 25 c4 c1 69 55 6c 49 52 14 0a 9e 10 61 a8 a2 5c 94 f5 ec 53 a9 f6 92 7d 46 97 6e 77 7e 4f bd db a7 aa f2 ad b2 9e 8a 3d 3d 59 e7 f0 a6 9d 67 ca aa c0 1e a4 61 08 6c 1c 17 8e 3b 1d b1 4b 6e ac 32 2e 7d 56 5a 8e 9a df 34 5f 30 a7 51 c4 a5 e3 2c f3 04 c4 60 29 0f 43 b1 86 f3 8d 84 ca 7d 49 aa c8 2c a6 6d f8 bf 8f 30 a9 87 63 34 9f 50 d3 2d 25 23 f4 6a 4c e3 bb ae df b6 5a aa d5 d2 52 b9 d4 ab 39 f6 b3 65 5f 70 cb d9 88 1f 9b 71 1e 55 c8 ae c3 45 24 32 44 1b e1 50 65 b7 8d 3f b2 9f 10 63 fd 67 62 70 e9 b5 c9 b3 ad 91 f3 58 e7 1c 72 6d Data Ascii: dQ$86>;h\|!e&:1iFSS#_pY.W269F)ZgrRnC4,%iUlIRa\S}Fnw~O==Ygal;Kn2.}VZ4_0Q,`)C}I,m0c4P-%#jLZR9e_pqUE$2DPe?cgbpXrm
2024-09-15 22:19:23 UTC	16384	IN	Data Raw: ab 57 90 5b 71 70 df dd c3 e9 83 99 01 9d 80 f6 1a 15 2d 4f 2c ab ec c4 4a b1 77 16 74 25 06 e0 64 a6 55 f8 56 b4 f1 a5 08 5a f9 67 4c 48 bc 13 37 f1 3f 1f 6d 21 0c d7 33 65 ed ec ec ec 8b 18 fe 6a fa 96 40 f7 13 19 e8 d0 25 43 8a 8f f0 94 a1 0a fb 55 a9 03 66 bf ed 3e de a3 4d b8 f5 f5 7e 39 ad 59 da be 14 2b 1b 85 15 1e 00 0a 7b 31 14 72 8e 11 f5 13 bc 48 4b 99 de c6 b9 25 bd d7 a4 a0 78 6a 0f 22 3b 1f 3a 96 1e 43 07 21 e4 e7 92 df 47 0b c1 99 43 0b dc 59 73 29 89 72 a8 31 80 5a bf da 26 a1 4f ca 82 97 3a 11 b1 65 6e 9f b1 3f 05 1f 5a e7 91 96 4e 03 13 d9 a8 6a 49 3a ca d1 a8 f3 02 1a 94 1a 87 5f 80 49 4e 94 eb 8d 63 db 5b 87 db 2b f7 46 58 ae ee 74 e5 68 f0 7a 8d 97 81 98 2a c9 4e 99 eb 54 f6 9c 27 2f fc 6d cd a7 a9 db 19 9c cf 2e 7c c4 a4 ae 52 ee 7e Data Ascii: W[qp-O,Jwt%dUVZgLH7?m!3ej@%CUf>M~9Y+{1rHK%xj";:C!GCYs)r1Z&O:en?ZNjI:_INc[+FXthz*NT'/m.\|R~
2024-09-15 22:19:23 UTC	16384	IN	Data Raw: e1 9a 6a e7 eb 0d 34 1f d5 01 02 93 fd b2 07 4c 3f 18 e6 41 c0 f0 5b 4c 7c 29 10 0c d7 40 6d 96 28 e3 d9 b3 90 be be d3 b1 55 84 85 c4 48 21 43 f7 96 e8 6c 1f 86 a5 1b 3b ce dd d9 90 36 75 2f 7d d1 04 6b 3a dc 31 3f a2 24 94 ae 43 c6 ad 4f 3c 43 7b e6 db dd db a9 0c dc a0 cc 2d 54 d5 9a 76 88 db 28 f6 46 a1 cf d8 a9 a8 f9 e1 59 2e ab 90 6e 23 29 55 b9 23 58 74 6e df e0 2a 6c 68 39 9d ca fb bd 0b f2 03 71 62 c4 27 fe 8b 8f 2f 7f ef 68 d5 ee d7 cb 2f 62 f5 e1 ba fd dd 6c b9 80 e1 2e a6 fb 5e 81 63 f7 06 66 3e 04 61 af 06 f1 c3 36 c9 c2 df 58 b6 e7 71 5f 88 46 d2 59 42 29 e4 b5 77 7f b5 50 7b 31 1e f3 6e 3c cc 2a 54 ec eb 8e 4a 83 6a eb 9d 42 56 c4 46 ad d7 b9 fd d4 41 94 1d 78 0d fa ec 93 da 35 0d f2 ae 21 ba d8 ca d7 97 fb 84 13 ca 46 55 27 d6 61 fd 82 c0 Data Ascii: j4L?A[L\|)@m(UH!Cl;6u/}k:1?$CO<C{-Tv(FY.n#)U#Xtnlh9qb'/h/bl.^cf>a6Xq_FYB)wP{1n<TJjBVFAx5!FU'a
2024-09-15 22:19:23 UTC	16384	IN	Data Raw: 79 61 5d 66 4a 08 84 81 68 c4 53 d4 76 5a 8a 83 51 51 e5 89 98 d7 d3 4f 89 5a ac 43 4b 67 24 54 85 b0 9d ac d5 95 b4 ae f7 3b 7f 13 cd c2 44 41 19 2d 9f ee a7 bd 5f 79 d2 37 c8 f1 96 90 aa 89 4d 3c 33 af de 29 f9 46 2b a3 fd 68 77 01 ef 4b ab 59 7a 21 bf bb f9 53 90 f0 05 cb 6a 27 cc e9 1e c1 86 47 23 fa 75 63 74 b3 3b e1 e7 34 31 e2 15 ee 84 64 2b 96 14 90 08 20 38 ba eb 05 1e 83 d7 66 c0 f8 e9 62 db 8d ec f7 ab 5b 68 2e e4 61 d5 7e 2c c7 f6 aa 3e fc 49 9b 3f d5 fe f3 b9 5b 68 b8 da ae de e2 99 9b 70 94 fb 04 91 8f b3 e2 c6 8c e3 81 b8 ab 8f f8 c9 d6 ad 57 c5 d3 a4 a2 54 78 ca b7 af bf 12 65 fc c4 82 b0 db de c3 f2 db 9a d2 48 46 ca 0a 01 3b 9d 26 c5 c6 15 37 7f 5a ec 24 3b 22 ae 6b 28 28 aa 6b 4a eb 24 7c 59 f8 b1 c6 38 c7 74 39 e7 2e e6 ea f6 0b be c5 Data Ascii: ya]fJhSvZQQOZCKg$T;DA-_y7M<3)F+hwKYz!Sj'G#uct;41d+ 8fb[h.a~,>I?[hpWTxeHF;&7Z$;"k((kJ$\|Y8t9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.10	49782	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:23 UTC	659	OUT	GET /user/login/1 HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:24 UTC	671	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 22 Jan 2023 20:48:06 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C0xAWiIdFq7rnP60jAjyKElFgn1S4Z1h7QpxlCWvwO3bJ3VjEeyaT2vVYy32rbnnDviPRVxO9m0ltvdPYYKoIAoShS%2FED6pbhD2bZ21cYKfsBJ9GH3A8JysPWfM%2BlAT%2BO9XQLSEVtsYvwH0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff824c5b4310-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:24 UTC	698	IN	Data Raw: 37 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 41 52 45 4e 41 20 46 52 45 45 20 46 49 52 45 20 4d 45 4d 42 45 52 53 48 49 Data Ascii: 71e<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta property="og:title" content="GARENA FREE FIRE MEMBERSHI
2024-09-15 22:19:24 UTC	1131	IN	Data Raw: 77 4a 38 45 52 64 6b 6e 4c 50 4d 4f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 6c 6f 67 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 6e 6b 2d 31 30 61 38 31 61 65 32 2e 65 63 37 36 30 35 65 33 2e 63 73 73 22 20 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 3e Data Ascii: wJ8ERdknLPMO" crossorigin="anonymous"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css"><link rel="stylesheet" href="./login.css"><link href="/css/chunk-10a81ae2.ec7605e3.css" rel="prefetch">
2024-09-15 22:19:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.10	49778	45.119.240.104	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:24 UTC	358	OUT	GET /web/ff/fav.jpg HTTP/1.1 Host: cdn.vn.garenanow.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:24 UTC	309	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 15 Sep 2024 22:19:24 GMT Content-Type: image/jpeg Content-Length: 10025 Connection: close Last-Modified: Fri, 04 May 2018 07:18:36 GMT ETag: "5aec094c-2729" X-Cache-Status: HIT X-Handled-By: cdn-master Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-15 22:19:24 UTC	10025	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff e1 00 60 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 02 00 31 01 02 00 07 00 00 00 26 00 00 00 69 87 04 00 01 00 00 00 2e 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 03 00 00 90 07 00 04 00 00 00 30 32 32 30 02 a0 04 00 01 00 00 00 c8 00 00 00 03 a0 04 00 01 00 00 00 c8 00 00 00 00 00 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF`ExifII*1&i.Google0220ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.10	49781	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:24 UTC	579	OUT	GET /user/login/login.css HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://membership.garenaa.id.vn/user/login/1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:25 UTC	707	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 22 Jan 2023 20:48:06 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yPYkf7W%2FBAIjkc4y9UMInkgwPMAKkDSVTLV2Q7lMmQRzZNkIzOBjxrA8%2FhCUL%2FY5JqsOEDIAa2W7a6115vkcYqdDkJopY4uJP8c2J6sxDNWkAoM1hKb16s%2FrRxk9RvxqSZwuw80nj5vQhCc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff875c5478dc-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:25 UTC	662	IN	Data Raw: 37 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 41 52 45 4e 41 20 46 52 45 45 20 46 49 52 45 20 4d 45 4d 42 45 52 53 48 49 Data Ascii: 71e<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta property="og:title" content="GARENA FREE FIRE MEMBERSHI
2024-09-15 22:19:25 UTC	1167	IN	Data Raw: 47 58 77 45 4f 6e 67 73 56 37 5a 74 32 37 4e 58 46 6f 61 6f 41 70 6d 59 6d 38 31 69 75 58 6f 50 6b 46 4f 4a 77 4a 38 45 52 64 6b 6e 4c 50 4d 4f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 6c 6f 67 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 6e 6b 2d 31 30 Data Ascii: GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css"><link rel="stylesheet" href="./login.css"><link href="/css/chunk-10
2024-09-15 22:19:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.10	49788	188.114.97.3	443	6656	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-15 22:19:27 UTC	633	OUT	GET /user/login/images/fb_ico.png HTTP/1.1 Host: membership.garenaa.id.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membership.garenaa.id.vn/user/login/1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-15 22:19:27 UTC	703	IN	HTTP/1.1 200 OK Date: Sun, 15 Sep 2024 22:19:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 22 Jan 2023 20:48:06 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IKIv3kzoKay4wAPo838gd2e0FKLaNltnuSRc0BBWRHgIHeAn9Wcpxro3FI9KDCzjmhcIY1d0tNCxz95CNUHJIZ51suJ9dqK5yownuoKF5cEtJwBsc00tkzENb%2BP7OFqBLlbBQ2Z9w%2BDxyUQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c3bff987d6742c0-EWR alt-svc: h3=":443"; ma=86400
2024-09-15 22:19:27 UTC	666	IN	Data Raw: 37 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 41 52 45 4e 41 20 46 52 45 45 20 46 49 52 45 20 4d 45 4d 42 45 52 53 48 49 Data Ascii: 71e<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta property="og:title" content="GARENA FREE FIRE MEMBERSHI
2024-09-15 22:19:27 UTC	1163	IN	Data Raw: 4f 6e 67 73 56 37 5a 74 32 37 4e 58 46 6f 61 6f 41 70 6d 59 6d 38 31 69 75 58 6f 50 6b 46 4f 4a 77 4a 38 45 52 64 6b 6e 4c 50 4d 4f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 61 6e 63 79 62 6f 78 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 6c 6f 67 69 6e 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 6e 6b 2d 31 30 61 38 31 61 Data Ascii: OngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.4.1/jquery.fancybox.min.css"><link rel="stylesheet" href="./login.css"><link href="/css/chunk-10a81a
2024-09-15 22:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4848, Parent PID: 3420

General

Target ID:	0
Start time:	18:19:03
Start date:	15/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6656, Parent PID: 4848

General

Target ID:	4
Start time:	18:19:06
Start date:	15/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1992,i,10972159969228159747,16302651187917394183,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5920, Parent PID: 3420

General

Target ID:	7
Start time:	18:19:09
Start date:	15/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://membership.garenaa.id.vn/css/greeting.jsp/index.html"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://membership.garenaa.id.vn/css/greeting.jsp/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
https://membership.garenaa.id.vn/css/greeting.jsp/index.html