Edit tour

Windows Analysis Report
https://granddunman-info.com/

Overview

General Information

Sample URL:	https://granddunman-info.com/
Analysis ID:	1538952
Tags:	urlscan
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Creates files inside the system directory

Deletes files inside the Windows folder

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

HTML body contains low number of good links

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2600 --field-trial-handle=2460,i,6466763152911351838,731397705170696679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://granddunman-info.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://granddunman-info.com/#contact

LLM: Score: 8 Reasons: The brand 'Huttons' is a known real estate agency., The URL 'granddunman-info.com' does not match the legitimate domain 'huttonsgroup.com'., The URL contains a hyphen and additional words, which is a common tactic in phishing URLs., The domain 'granddunman-info.com' does not have any direct association with the known brand 'Huttons'., The presence of input fields for personal information is typical in phishing sites. DOM: 2.8.pages.csv

Source: https://granddunman-info.com/

HTTP Parser: charles.ppty@gmail.com

Source: https://granddunman-info.com/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te granddunman-info googleapis
Source: https://granddunman-info.com/#contact	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te granddunman-info googleapis
Source: https://granddunman-info.com/#contact	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te granddunman-info googleapis
Source: https://granddunman-info.com/#contact	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te granddunman-info googleapis
Source: https://granddunman-info.com/#contact	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te granddunman-info googleapis

Source: https://granddunman-info.com/	HTTP Parser: Number of links: 1
Source: https://granddunman-info.com/#contact	HTTP Parser: Number of links: 1

Source: https://granddunman-info.com/

HTTP Parser: No favicon

Source: https://granddunman-info.com/	HTTP Parser: No <meta name="author".. found
Source: https://granddunman-info.com/	HTTP Parser: No <meta name="author".. found
Source: https://granddunman-info.com/#contact	HTTP Parser: No <meta name="author".. found
Source: https://granddunman-info.com/#contact	HTTP Parser: No <meta name="author".. found
Source: https://granddunman-info.com/#contact	HTTP Parser: No <meta name="author".. found
Source: https://granddunman-info.com/#contact	HTTP Parser: No <meta name="author".. found

Source: https://granddunman-info.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://granddunman-info.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://granddunman-info.com/#contact	HTTP Parser: No <meta name="copyright".. found
Source: https://granddunman-info.com/#contact	HTTP Parser: No <meta name="copyright".. found
Source: https://granddunman-info.com/#contact	HTTP Parser: No <meta name="copyright".. found
Source: https://granddunman-info.com/#contact	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49925 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:50167 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:62778 -> 1.1.1.1:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49925 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/templateZ/css/tempZstyle.css HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://granddunman-info.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/DesignX,Z_Common/MortgageCalculatorStyle.css HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/DesignX,Z_Common/MeetingCardsStyle.css HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/css/bootstrap5.1.3.min.css HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/css/owl.css HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/cdd27b0c-30b1-4e1e-96d0-fa2224c7e0b2 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/29b3f34b-2880-4e5c-990a-c73279b40889 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/27679c1f-0391-4dd3-b767-bc38f04cf61f HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/f9e1bfbb-9f36-4121-ac77-feca8b122ceb.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/389de8b6-ff8a-45d1-b76e-52cbb5c88f77.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/1a22c8ef-71e4-459b-9b38-cec3ca239794.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/assets/css/Animate2020.css HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/css/jquery-ui.css HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/c4f90d03-3f83-4812-97de-557314d69352.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/assets/js/Bootstrap5/bootstrap5.1.3.bundle.min.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/images/translate-icon.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/fontawesome/fontAwesome.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/cdd27b0c-30b1-4e1e-96d0-fa2224c7e0b2 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/801b4073-e639-426d-b891-9b26b1b9a643.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/f9e1bfbb-9f36-4121-ac77-feca8b122ceb.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/a962e906-800c-4033-a363-a17dcd590ef0.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/2d6b9ee7-fcbe-43f7-9a4d-6594acb4d938 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/fc467042-6800-4049-83c5-910869ceffef HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/property_assets/js/map-script-3.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/js/jquery-ui.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/1a22c8ef-71e4-459b-9b38-cec3ca239794.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/27679c1f-0391-4dd3-b767-bc38f04cf61f HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/0015afb1-92d4-4cef-a624-d7433dda1593 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/29b3f34b-2880-4e5c-990a-c73279b40889 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/389de8b6-ff8a-45d1-b76e-52cbb5c88f77.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/sweetalert/swal.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/js/map-script.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/toaster/toastr.min.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/816ac552-d08a-443a-bfac-bfe60eac5b7f HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/fontawesome/fontAwesome.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/images/translate-icon.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/property_assets/js/map-script-3.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/801b4073-e639-426d-b891-9b26b1b9a643.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/assets/js/Bootstrap5/bootstrap5.1.3.bundle.min.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/88a3f70f-cf12-44a6-b0a4-af03a8bf3cb5.png HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/fe78f58c-fa4d-450e-ab38-1851e0e90a93.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/js/owl.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/a962e906-800c-4033-a363-a17dcd590ef0.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/js/custom.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/js/contactForm.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/js/mortgageCalculator.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/image-lightbox-plugin/dreamimage.js HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/Huttons-Logo.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/c4f90d03-3f83-4812-97de-557314d69352.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/fc467042-6800-4049-83c5-910869ceffef HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/2d6b9ee7-fcbe-43f7-9a4d-6594acb4d938 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/0015afb1-92d4-4cef-a624-d7433dda1593 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/816ac552-d08a-443a-bfac-bfe60eac5b7f HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/js/jquery-ui.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/sweetalert/swal.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/js/map-script.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/toaster/toastr.min.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/dollarSign.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/DollarBagHand.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/percent.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/StampDuty.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/right-Arrow.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/Installments.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=m98Fb7lRATrT3Hs&MD=oGvLrK7O HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/76160c82-fc06-46bb-8a14-0e4150f249c4.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/a148584e-6732-49f2-a1ee-96a1878c94a0.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/aed46e28-3735-43a3-bac1-f2011cbd9497 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/Agreement.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/logo/huttons_logo-removebg-preview.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/eba04e88-350e-4bb3-81e4-80cbeb119659 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/templates_assets/templatey/section-fourty-bg.jpg HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/template15/images/slider-bg.jpg HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/js/custom.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/js/contactForm.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/image-lightbox-plugin/dreamimage.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/microsites_assets/js/owl.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/js/mortgageCalculator.js HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/fe78f58c-fa4d-450e-ab38-1851e0e90a93.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/88a3f70f-cf12-44a6-b0a4-af03a8bf3cb5.png HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/Huttons-Logo.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/a148584e-6732-49f2-a1ee-96a1878c94a0.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/images/contact.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/76160c82-fc06-46bb-8a14-0e4150f249c4.jpg HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/images/contactForm_bg.jpg HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/images/Calculator/dollar_sign.png HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Content/templates_assets/DesignX,Z_Common/MortgageCalculatorStyle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/aed46e28-3735-43a3-bac1-f2011cbd9497 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/right-Arrow.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/dollarSign.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/DollarBagHand.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/Installments.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Bookappointment/Property/eba04e88-350e-4bb3-81e4-80cbeb119659 HTTP/1.1Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/StampDuty.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo&co=aHR0cHM6Ly9ncmFuZGR1bm1hbi1pbmZvLmNvbTo0NDM.&hl=en&v=aR-zv8WjtWx4lAw-tRCA-zca&size=invisible&cb=w4fw9a7f8de4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: granddunman-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://granddunman-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/percent.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/logo/huttons_logo-removebg-preview.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/assets/images/Calculator/Agreement.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/images/contact.png HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/template15/images/slider-bg.jpg HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /content/templates_assets/templatey/section-fourty-bg.jpg HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=aR-zv8WjtWx4lAw-tRCA-zca HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo&co=aHR0cHM6Ly9ncmFuZGR1bm1hbi1pbmZvLmNvbTo0NDM.&hl=en&v=aR-zv8WjtWx4lAw-tRCA-zca&size=invisible&cb=w4fw9a7f8de4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/templates_assets/images/contactForm_bg.jpg HTTP/1.1Host: granddunman-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
Source: global traffic	HTTP traffic detected: GET /js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo&co=aHR0cHM6Ly9ncmFuZGR1bm1hbi1pbmZvLmNvbTo0NDM.&hl=en&v=aR-zv8WjtWx4lAw-tRCA-zca&size=invisible&cb=w4fw9a7f8de4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CPQD
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=aR-zv8WjtWx4lAw-tRCA-zca HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CPQD
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=m98Fb7lRATrT3Hs&MD=oGvLrK7O HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: chromecache_302.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: chromecache_302.2.dr	String found in binary or memory: html.attr( 'src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id ); equals www.youtube.com (Youtube)
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: setInnerHtml(noWar, "\n <div>\n \u0415\u0441\u043B\u0438 \u043C\u044B \u043D\u0435 \u043E\u0441\u0442\u0430\u043D\u043E\u0432\u0438\u043C \u0432\u043E\u0439\u043D\u0443, \u043E\u043D\u0430 \u043F\u0440\u0438\u0434\u0435\u0442 \u0432 \u0434\u043E\u043C <strong>\u043A\u0430\u0436\u0434\u043E\u0433\u043E \u0438\u0437 \u043D\u0430\u0441</strong> \u0438 \u0435\u0451 \u043F\u043E\u0441\u043B\u0435\u0434\u0441\u0442\u0432\u0438\u044F \u0431\u0443\u0434\u0443\u0442 <strong>\u0443\u0436\u0430\u0441\u0430\u044E\u0449\u0438\u043C\u0438</strong>.\n </div>\n <div>\n \u041F\u0443\u0442\u0438\u043D\u0441\u043A\u0438\u0439 \u0440\u0435\u0436\u0438\u043C \u0437\u0430 20 \u0441 \u043B\u0438\u0448\u043D\u0438\u043C \u043B\u0435\u0442 \u0441\u0432\u043E\u0435\u0433\u043E \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043E\u0432\u0430\u043D\u0438\u044F \u0432\u0434\u043E\u043B\u0431\u0438\u043B \u043D\u0430\u043C, \u0447\u0442\u043E \u043C\u044B \u0431\u0435\u0441\u0441\u0438\u043B\u044C\u043D\u044B \u0438 \u043E\u0434\u0438\u043D \u0447\u0435\u043B\u043E\u0432\u0435\u043A \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u043D\u0438\u0447\u0435\u0433\u043E \u0441\u0434\u0435\u043B\u0430\u0442\u044C. <strong>\u042D\u0442\u043E \u043D\u0435 \u0442\u0430\u043A!</strong>\n </div>\n <div>\n ".concat(video.text, "\n </div>\n <iframe width=\"560\" height=\"315\" src=\"https://www.youtube.com/embed/").concat(video.id, "\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen></iframe>\n <div>\n \u041D\u0435\u0442 \u0432\u043E\u0439\u043D\u0435!\n </div>\n ")); equals www.youtube.com (Youtube)
Source: chromecache_188.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_188.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_188.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: granddunman-info.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: rtdbookappointment.s3.ap-southeast-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 103Connection: closeContent-Type: text/htmlDate: Mon, 21 Oct 2024 22:39:38 GMTServer: Microsoft-IIS/10.0Access-Control-Allow-Origin: *X-Powered-By: ASP.NET

Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: Http://bugs.jquery.com/ticket/8235
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_330.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_330.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_206.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: http://stackoverflow.com/a/2345915
Source: chromecache_206.2.dr, chromecache_278.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_302.2.dr	String found in binary or memory: https://app.vzaar.com/videos/:id
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_172.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_188.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_188.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_206.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Document/keydown_event#ignoring_keydown_during_ime_
Source: chromecache_206.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_206.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_262.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_206.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_206.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_206.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_206.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_303.2.dr, chromecache_217.2.dr, chromecache_222.2.dr, chromecache_264.2.dr, chromecache_266.2.dr, chromecache_225.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_303.2.dr, chromecache_217.2.dr, chromecache_222.2.dr, chromecache_264.2.dr, chromecache_266.2.dr, chromecache_225.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wdhyzbi.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEO7uj-EzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEO7uj-FzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEO7uj-HzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEO7uj-KzhM.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEO7uj-OzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEOXvT-EzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEOXvT-FzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEOXvT-HzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEOXvT-KzhM.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEOXvT-OzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPjuz-EzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPjuz-FzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPjuz-HzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPjuz-KzhM.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPjuz-OzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPzvD-EzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPzvD-FzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPzvD-HzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPzvD-KzhM.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPzvD-OzhO7_w.wof
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQAllfsA-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQAllfsQ-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQAllfsw-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQAllfug-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQAllfvg-I.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fsA-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fsQ-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fsw-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fug-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fvg-I.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQWlhfsA-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQWlhfsQ-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQWlhfsw-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQWlhfug-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQWlhfvg-I.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQdl9fsA-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQdl9fsQ-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQdl9fsw-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQdl9fug-I1hc.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQdl9fvg-I.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3ZmX5slCNuHLi8bLeY9MK7whWMhyjYrEtFmSq17w.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3ZmX5slCNuHLi8bLeY9MK7whWMhyjYrEtGmSq17w.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3ZmX5slCNuHLi8bLeY9MK7whWMhyjYrEtHmSq17w.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3ZmX5slCNuHLi8bLeY9MK7whWMhyjYrEtImSo.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3ZmX5slCNuHLi8bLeY9MK7whWMhyjYrEtMmSq17w.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYp3tKgS4.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYpHtKgS4.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYpntKgS4.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYqXtK.woff2)
Source: chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v16/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYrXtKgS4.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo/v21/4UaMrEtFpBISdk6h0Dc.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo/v21/4UaMrEtFpBISdk6u0Dfe5g.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo/v21/4UaMrEtFpBISdk6v0Dfe5g.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo/v21/4UaOrEtFpBISc36j.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo/v21/4UaOrEtFpBISfH6jyDM.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo/v21/4UaOrEtFpBISfX6jyDM.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rajdhani/v15/LDI2apCSOBg7S-QT7pasEfOleef2kg.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rajdhani/v15/LDI2apCSOBg7S-QT7pasEfOqeef2kg.woff2)
Source: chromecache_179.2.dr, chromecache_177.2.dr, chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rajdhani/v15/LDI2apCSOBg7S-QT7pasEfOreec.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz4dL_nz.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz8dL_nz.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzAdLw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc-CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc0CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc1CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc2CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc3CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc5CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc6CsQ.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc1CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_207.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_223.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/syne/v22/8vIH7w4qzmVxm25L9Hz_.woff2)
Source: chromecache_223.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/syne/v22/8vIH7w4qzmVxm2BL9A.woff2)
Source: chromecache_223.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/syne/v22/8vIH7w4qzmVxm2NL9Hz_.woff2)
Source: chromecache_259.2.dr, chromecache_296.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_243.2.dr, chromecache_302.2.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/babel/babel/pull/7555
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/jkup/focusable/blob/master/index.js
Source: chromecache_290.2.dr, chromecache_251.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/1246
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/1699
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/1786
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/1891
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/1926
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/1948
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/2059
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/2170
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/2291
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/2386
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/2406
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/sweetalert2/sweetalert2/issues/720
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/tc39/proposal-private-methods
Source: chromecache_259.2.dr, chromecache_296.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/js/src/modal.js
Source: chromecache_296.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_206.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_206.2.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_206.2.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_333.2.dr, chromecache_297.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_333.2.dr, chromecache_297.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_172.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_172.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_206.2.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_278.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_302.2.dr	String found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://stackoverflow.com/a/3809435
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://stackoverflow.com/a/46352119
Source: chromecache_206.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://sweetalert2.github.io/#ajax-request
Source: chromecache_172.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_278.2.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_278.2.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_302.2.dr	String found in binary or memory: https://vimeo.com/:id
Source: chromecache_302.2.dr	String found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: chromecache_302.2.dr	String found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: chromecache_210.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_278.2.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_206.2.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_288.2.dr, chromecache_286.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_278.2.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_172.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_172.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_278.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_278.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_278.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_288.2.dr, chromecache_286.2.dr, chromecache_323.2.dr, chromecache_283.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/recaptcha__en.js
Source: chromecache_293.2.dr, chromecache_319.2.dr	String found in binary or memory: https://www.istockphoto.com/photo/license-gm1130938108-?utm_medium=organic&utm_source=google&amp
Source: chromecache_228.2.dr, chromecache_307.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id
Source: chromecache_302.2.dr	String found in binary or memory: https://youtu.be/:id

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62780
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:50167 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_368_984835304

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@18/275@34/16

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2600 --field-trial-handle=2460,i,6466763152911351838,731397705170696679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://granddunman-info.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2600 --field-trial-handle=2460,i,6466763152911351838,731397705170696679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_176.2.dr

Binary or memory string: VMCI_

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://api.jqueryui.com/slide-effect/	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
http://api.jqueryui.com/jQuery.widget/	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
http://api.jqueryui.com/button/	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	0%	URL Reputation	safe
http://api.jqueryui.com/transfer-effect/	0%	URL Reputation	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
https://ka-f.fontawesome.com	0%	URL Reputation	safe
http://api.jqueryui.com/drop-effect/	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/libraries	0%	URL Reputation	safe
http://api.jqueryui.com/menu/	0%	URL Reputation	safe
http://api.jqueryui.com/category/effects-core/	0%	URL Reputation	safe
http://api.jqueryui.com/dialog/	0%	URL Reputation	safe
http://api.jqueryui.com/shake-effect/	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
granddunman-info.com	20.43.132.131	true	true	unknown
www3.l.google.com	142.250.185.110	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
s3-r-w.ap-southeast-1.amazonaws.com	3.5.146.249	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
rtdbookappointment.s3.ap-southeast-1.amazonaws.com	unknown	unknown	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	unknown
translate.google.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://granddunman-info.com/Content/templates_assets/js/mortgageCalculator.js	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.js	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/eba04e88-350e-4bb3-81e4-80cbeb119659	false	unknown
https://granddunman-info.com/Content/assets/js/Bootstrap5/bootstrap5.1.3.bundle.min.js	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/76160c82-fc06-46bb-8a14-0e4150f249c4.jpg	false	unknown
https://granddunman-info.com/Content/sweetalert/swal.js	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/cdd27b0c-30b1-4e1e-96d0-fa2224c7e0b2	false	unknown
https://www.google.com/js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js	false	unknown
https://granddunman-info.com/Content/microsites_assets/css/owl.css	false	unknown
https://granddunman-info.com/Content/templates_assets/images/translate-icon.png	false	unknown
https://granddunman-info.com/Content/templates_assets/css/jquery-ui.css	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	false	unknown
https://granddunman-info.com/Content/assets/images/Calculator/Agreement.png	false	unknown
https://granddunman-info.com/Content/templates_assets/images/contactForm_bg.jpg	false	unknown
https://granddunman-info.com/Content/templates_assets/images/Calculator/dollar_sign.png	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/2d6b9ee7-fcbe-43f7-9a4d-6594acb4d938	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/389de8b6-ff8a-45d1-b76e-52cbb5c88f77.jpg	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/fc467042-6800-4049-83c5-910869ceffef	false	unknown
https://granddunman-info.com/Content/assets/images/logo/huttons_logo-removebg-preview.png	false	unknown
https://granddunman-info.com/	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/a962e906-800c-4033-a363-a17dcd590ef0.jpg	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/c4f90d03-3f83-4812-97de-557314d69352.jpg	false	unknown
https://granddunman-info.com/#contact	true	unknown
https://granddunman-info.com/Content/toaster/toastr.min.js	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/816ac552-d08a-443a-bfac-bfe60eac5b7f	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/fe78f58c-fa4d-450e-ab38-1851e0e90a93.jpg	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/a148584e-6732-49f2-a1ee-96a1878c94a0.jpg	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/27679c1f-0391-4dd3-b767-bc38f04cf61f	false	unknown
https://granddunman-info.com/Content/microsites_assets/js/owl.js	false	unknown
https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/0015afb1-92d4-4cef-a624-d7433dda1593	false	unknown
https://granddunman-info.com/Content/fontawesome/fontAwesome.js	false	unknown
https://granddunman-info.com/Content/microsites_assets/js/custom.js	false	unknown
https://granddunman-info.com/Content/templates_assets/template15/images/slider-bg.jpg	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://api.jqueryui.com/slide-effect/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
http://stackoverflow.com/a/2345915	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
http://jqueryui.com/accordion/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://api.jqueryui.com/data-selector/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://www.youtube.com/embed/	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
https://vimeo.com/groups/:group/videos/:id	chromecache_302.2.dr	false		unknown
http://g.co/dev/maps-no-account	chromecache_206.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery-color	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://youtu.be/:id	chromecache_302.2.dr	false		unknown
http://jqueryui.com/position/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://api.jqueryui.com/jQuery.widget/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://github.com/babel/babel/pull/7555	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
http://api.jqueryui.com/focusable-selector/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://fontawesome.com	chromecache_303.2.dr, chromecache_217.2.dr, chromecache_222.2.dr, chromecache_264.2.dr, chromecache_266.2.dr, chromecache_225.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_296.2.dr	false		unknown
https://github.com/sweetalert2/sweetalert2/issues/2170	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
https://github.com/sweetalert2/sweetalert2/issues/2291	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://github.com/sweetalert2/sweetalert2/issues/2059	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
http://api.jqueryui.com/button/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://goo.gle/js-api-loading	chromecache_206.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_206.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/size-effect/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_206.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_206.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/uniqueId/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/js/src/modal.js	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
http://api.jqueryui.com/checkboxradio/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://github.com/sweetalert2/sweetalert2/issues/2386	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
http://jqueryui.com/slider/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://api.jqueryui.com/disableSelection/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://jqueryui.com/controlgroup/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://app.vzaar.com/videos/:id	chromecache_302.2.dr	false		unknown
https://connect.facebook.net/	chromecache_188.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_206.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_206.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/transfer-effect/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
http://www.robertpenner.com/easing)	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
http://jqueryui.com/datepicker/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
Http://bugs.jqueryui.com/ticket/9446	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
Http://bugs.jquery.com/ticket/8235	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://ka-f.fontawesome.com	chromecache_333.2.dr, chromecache_297.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/images/cleardot.gif	chromecache_278.2.dr	false		unknown
https://vimeo.com/channels/:channel/:id	chromecache_302.2.dr	false		unknown
http://api.jqueryui.com/drop-effect/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_206.2.dr	false	URL Reputation: safe	unknown
https://fontawesome.com/license/free	chromecache_303.2.dr, chromecache_217.2.dr, chromecache_222.2.dr, chromecache_264.2.dr, chromecache_266.2.dr, chromecache_225.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_206.2.dr	false	URL Reputation: safe	unknown
https://github.com/sweetalert2/sweetalert2/issues/720	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
http://api.jqueryui.com/menu/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
http://jqueryui.com/checkboxradio/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://api.jqueryui.com/controlgroup/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://jqueryui.com/widget/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://api.jqueryui.com/category/effects-core/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://github.com/sweetalert2/sweetalert2/issues/2406	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
https://www.google.com/recaptcha/api2/	chromecache_288.2.dr, chromecache_286.2.dr	false		unknown
http://api.jqueryui.com/dialog/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
http://jqueryui.com/tooltip/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://api.jqueryui.com/selectmenu/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
http://api.jqueryui.com/shake-effect/	chromecache_290.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://github.com/sweetalert2/sweetalert2/issues/1891	chromecache_228.2.dr, chromecache_307.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages#	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_262.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/jQuery.ui.keyCode/	chromecache_290.2.dr, chromecache_251.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_259.2.dr, chromecache_296.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
20.43.132.131	granddunman-info.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
3.5.146.110	unknown	United States	16509	AMAZON-02US	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	www3.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.5.146.249	s3-r-w.ap-southeast-1.amazonaws.com	United States	16509	AMAZON-02US	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5
192.168.2.11

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1538952
Start date and time:	2024-10-22 00:38:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://granddunman-info.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@18/275@34/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 142.250.181.238, 142.251.168.84, 34.104.35.123, 142.250.186.42, 142.250.185.163, 142.250.186.136, 142.250.185.74, 172.217.16.200, 142.250.74.202, 142.250.186.74, 142.250.181.234, 142.250.186.106, 142.250.185.234, 142.250.184.234, 172.217.16.202, 142.250.185.202, 216.58.206.74, 172.217.18.106, 142.250.184.202, 142.250.186.170, 172.217.18.10, 142.250.186.138, 142.250.185.170, 172.217.16.138, 172.217.23.106, 216.58.206.42, 172.67.139.119, 104.21.26.223, 172.217.18.3, 88.221.110.91, 2.16.100.168, 192.229.221.95, 52.165.164.15, 142.250.186.131, 142.250.74.195, 216.58.212.138, 216.58.212.163, 142.250.185.67, 142.250.185.138, 216.58.212.170, 172.217.16.195, 199.232.214.172
Excluded domains from analysis (whitelisted): ka-f.fontawesome.com.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, translate-pa.googleapis.com, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, ajax.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, translate.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://granddunman-info.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 21:39:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9824935362113156
Encrypted:	false
SSDEEP:	48:8IdCTOeLH3idAKZdA19ehwiZUklqehZy+3:8ZH1Oy
MD5:	FCB1B04DC6E09DA87518AF1E54853952
SHA1:	9A05E030077CC1B70DF93AEEFA6D538B23868A2B
SHA-256:	2AB078B87F18EC6E1F35CDD65EB3A085968AD7E8897417BA0125067C34FEEF16
SHA-512:	7BBBF3AA140CF3CA286641624BBE01DD04BD92393405DCEAC9AA98A6E4D9CE906EB31B1E572BC77B207CAC594676745D2457200D34E8778DFE900A011172A941
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....5....$..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............%.y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 21:39:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.994329641253583
Encrypted:	false
SSDEEP:	48:8tdCTOeLH3idAKZdA1weh/iZUkAQkqeh+y+2:8iHv9Q3y
MD5:	9DF88D66F58FD388F36BDE216D261059
SHA1:	B9480CBD4ADA84F2FD76D70C735B8458950B88F6
SHA-256:	F3A248D3F3FE2D3B939CA8E3C8C99697C4D96A33EEC9E7F52ACF75E2E57F0F69
SHA-512:	2C8815C3D84402A805DAC962F522A813D284A9E2731DB814477AD5B0E142F2BC1C6B365DBCCB0D208D43804B0FF49D523596FC97BF9D915891731323CEE895C7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........$..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............%.y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.009737911959399
Encrypted:	false
SSDEEP:	48:8x3dCTOesH3idAKZdA14tseh7sFiZUkmgqeh7ssy+BX:8xcHynSy
MD5:	200A0CE78393A1D40ACD376A0CEF6344
SHA1:	CBF4F91E874AD143B566DDBA3215C9D8EC334D65
SHA-256:	B081146CBA3FECA1B3A3DBB613EC330D53EDFCC3D53A907E5350B21BEDE8870A
SHA-512:	9CBB674E5526621C1D69BA0E2F9866237A793DDF2B451C857D7E5C4BC6F5F5E55F85C6FDD553C3A9717EA2A9686F8014BD39424ADBD73E0E9A504E1E22B637EC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............%.y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 21:39:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9974315561782587
Encrypted:	false
SSDEEP:	48:8AdCTOeLH3idAKZdA1vehDiZUkwqehKy+R:8BHMEy
MD5:	2B56ADA72020F3AC02B26DC42D9D8243
SHA1:	92094D9E3E8C3BF316C051E5C221EE42A5F90DBC
SHA-256:	A5CB987729F433A2E50311C4E42D835B95586EF52D4BCED9C90CDBB563FFBD8B
SHA-512:	E2D61B17D12AA27C8045B9142A39EF3C387DAB6A33B0C375EDA19843F5DE9A2B78EBD4AEFE216B39A091B6FE96C003F065878625220B3A5813F5D6CD69243AD9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....;....$..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............%.y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 21:39:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.984889270438944
Encrypted:	false
SSDEEP:	48:8udCTOeLH3idAKZdA1hehBiZUk1W1qehgy+C:8PH89Ay
MD5:	2D54D64B2A83085F183F19B82392C4A3
SHA1:	8918ECFC0E8284383E6BF8DDB5FF026ABC7BC8BE
SHA-256:	9E534B922F655CFBE70A7C9ADE22B2A503313BBFC2652458CB89F9E33662EC37
SHA-512:	F95DAD4465871C531C862F4A0CAFB2BC17BB5433AE39962D2C6D71DE823581E945DD05530A20397582F2F39954B601A1A9665A525B90227286B7828D4BDAD60D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....j....$..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............%.y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 21:39:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9980762661305294
Encrypted:	false
SSDEEP:	48:8yfIEdCTOeLH3idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbSy+yT+:8mGHST/TbxWOvTbSy7T
MD5:	88A30F196B44927D49B084D64B3C86C6
SHA1:	5185CF6D43692F4930CC106D78AB4191219D8BC6
SHA-256:	645CBDA841546B1FA433B59A4C2DC28E5174736BA89A6D2324C80C69324FA15F
SHA-512:	9DB3AF180C7B062E076D0543F5EDF15FBC7C85ABE114F99275980C297023044D8A1E229865BBC4317BB0378D632606FBF16370E31BFF007AB829B579958847C6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........$..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............%.y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 550 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	435873
Entropy (8bit):	7.994349775489489
Encrypted:	true
SSDEEP:	12288:fG49xWoPzoLkYLgQrwT4Zuw5rMJPrCcxPiXJp:fptlAgQkT4gwFQrCcQXv
MD5:	BB5C2A3BCF86E5DD1E847F4A223D8FF1
SHA1:	2FB395C023F2D9CD58EA376F734939BF071C3C8F
SHA-256:	7437BD98B7191C7AA0C369632FD13DA89A48B21BB7C9E95282B043923CF82C2B
SHA-512:	42CB3FD53E32108B2A93A7F65B99B18836453ACD6558FEE715457CA26E32022CFC6731FA4F165B1F0C99D771D290282232C98DAB9AC4A46347E7598487E560B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...L......Iw.....sRGB....... .IDATx^d...wv.v.5........2.`V.H..#h...d...pX..!G.O.L.o..,J..........%..H..!g.`8.......V]]k...8.._f.j..U._~.o...s.?..........B..>.3....D.........y../..../e..=.6y..O.............P.....^..r-...;...k.}.Y.Z........%J{=....C._..U............O...{o..O1.^"+rdY..,Pk4q6Y.Q...<E......1....~c.wp.A..=q...yY.5.@..9.e)...B......e^...#.<...W.'...q...J..S.........g..W....67w...zT......16.^...-.......\..c./....e.YZ..h".j..K.~...ppx..i....a.D..z.......@..8=..(.k....B../..Y....MDq...b.....>B.V...E.lmt1.]q..r.......E. .2.~..f.qTC..2......&.,../........A3B...L..h........A....@.")\|.........}x.-.G.<x....K...{..[....$h.,.#.J.....".=.a.....n..?.\|6C.E.t[.%.f......v.p:..Q\...e..=..G...v.<G....6.8D...=...v#......P.BY.......2?D-....#.l..d9..Cx;o`.........9.....Z....I.._....q.n{.....X..G.....M(...B.....v.Kb..%f........{Y[..c..o....+:....J...0/*$E...Y.%..P.%.y..nK.G.</+,..EUa....O^.yUa.L.......B.y....Y..z.i...yU..s

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1880)
Category:	dropped
Size (bytes):	138732
Entropy (8bit):	5.543853914865261
Encrypted:	false
SSDEEP:	3072:fvOKs2fLV0JnWkWO/u2cbGQsp4+Ckff34cV:+TXJe+Ckff3T
MD5:	7C396C404B134F828B79BC62FCC80EAC
SHA1:	404C6BC0F9A809C97CEE724B2FFECBFC1ED538B2
SHA-256:	91B6EBCAFBECE253637E6774A617D8959655686F1679A3163CC257B36151654B
SHA-512:	CFFF521F6575104A450B2FE8915D77E349C213EB349B1534FF4BB3943BA980C22E603A3B422906E9C582C9E1D2ACC5CF9F938FD19B2494BCB1BD44FB8A378EA2
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..,"blob":{"1":"1"}.........};.....var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");.},ha=fa(this),ia=function(a,b){if(b)a:{for(var c=ha,d=a.split("."),e=0;e<d.length-1;e++){var f=d[e];if(!(f in c))break a;c=c[f]}var h=d[d.length-1],l=c[h],m=b(l);m!=l&&m!=null&&ea(c,h,{configurable:!0,writable:!0,value:m})}};.ia("Symbol",function(a){i

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8326
Entropy (8bit):	7.854867527348164
Encrypted:	false
SSDEEP:	192:iaOSykknUHdnEjpof7t0G6Eh6vWYOY9LWO9cKWGK+gcAcH3LT:ioenU94pofRP6sRoWjcH3v
MD5:	3350646BE726C4434276DC1DC28B9293
SHA1:	5DE84A1224298CD56F4FD8880DBEAEFAC0C2357B
SHA-256:	CD3D58DEC9D8F921DA9DE2C55E7756CB0DA3EB06D249F28D5A384AF207D4A61B
SHA-512:	A8390427EC3235EB19BF2872A985718DCDC33668A5559AA650219ABDB153ECC71FA29D90C5A7346D8D3ED2FDB7A138CB62C0FB710849E8C3C8E6E80914A887E0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>..z....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2023-04-08T16:15:11+05:00" xmp:ModifyDate="2023-04-08T16:23:41+05:00" xmp:MetadataDate="2023-04-08T16:23:41+05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:7f0797f2-68d9-1447-b755-586179459d3f" xmpMM:DocumentID="xmp.did:7f0797f2-68d9-1447-b755-586179459d3f" xmpMM:Origi

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 67 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2282
Entropy (8bit):	7.47185646542487
Encrypted:	false
SSDEEP:	48:n6Nn2xaNxJ3UMW78RISQ7MtVf6qWIx1tTra7UU8ihSU3C:O2INsM/ylotVyaxfTYUU8ihFy
MD5:	24960FAA2314BB6633435E9DACE38573
SHA1:	739BBE8BF0B7F68FFB3D572FB596D13C9B4F7636
SHA-256:	3BBFCB2B0AFB3BFEAECCF9DA842ACC05807ABA1729C7DBD10B98EAAAC94DA59E
SHA-512:	EDB30095486F3E5F209F5687FFFC52C7C1921514B80D3B8446BBD7CF5DB06CAF74941DFC6B2DF86E075B008BBA139A530B3005947F9C4FF37DFFC4F45461AB22
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/images/contact.png
Preview:	.PNG........IHDR...C...d......c......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:4A191D544C7111E89878FA4E2E421B66" xmpMM:DocumentID="xmp.did:4A191D554C7111E89878FA4E2E421B66"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A191D524C7111E89878FA4E2E421B66" stRef:documentID="xmp.did:4A191D534C7111E89878FA4E2E421B66"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p.)...XIDATx..\MO"A......q.....?......e/.C...L"c...".0.\|..bUB...........n'.=<<\...P..\|\|....V....f....\|\|\|$.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (4206), with CRLF line terminators
Category:	downloaded
Size (bytes):	4249
Entropy (8bit):	4.978180794012261
Encrypted:	false
SSDEEP:	96:/3WOegOecOehOevczR1RquiHVAt6zkA2QgnWM0Bxpx0FM:d91RqJ1A0UnWjx0FM
MD5:	9C5E25EA326FBD60B0837B14DBC19720
SHA1:	063C6142A3990305E3C2E0A9B18BE9821B160B40
SHA-256:	E63B19DB6C737A11AED2B23B20BD986141A4E596AEADE1E8AB08F4CF20DAA391
SHA-512:	A7A1970A49B3B5ACA58136DD5E6AA4F88503E6BF856867A73AF5725DE319EDC21901D5E478BF26E677DB96623508119B143D2A9F05BA70995E3286461B802E33
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/toaster/toastr.min.js
Preview:	.!function (a) { a(["jquery"], function (a) { return function () { function b(a, b, c) { return m({ type: t.error, iconClass: o().iconClasses.error, message: a, optionsOverride: c, title: b }) } function c(a, b, c) { return m({ type: t.info, iconClass: o().iconClasses.info, message: a, optionsOverride: c, title: b }) } function d(a) { r = a } function e(a, b, c) { return m({ type: t.success, iconClass: o().iconClasses.success, message: a, optionsOverride: c, title: b }) } function f(a, b, c) { return m({ type: t.warning, iconClass: o().iconClasses.warning, message: a, optionsOverride: c, title: b }) } function g(a) { var b = o(); q \|\| n(b), j(a, b) \|\| i(b) } function h(b) { var c = o(); return q \|\| n(c), b && 0 === a(":focus", b).length ? void p(b) : void (q.children().length && q.remove()) } function i(b) { for (var c = q.children(), d = c.length - 1; d >= 0; d--)j(a(c[d]), b) } function j(b, c) { return b && 0 === a(":focus", b).length ? (b[c.hideMethod]({ duration: c.hideDuration,

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 582 x 769, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	892013
Entropy (8bit):	7.996468869244236
Encrypted:	true
SSDEEP:	24576:9VJE7T/YwEZejHw2SStycnztWNeWCSCBSAwh3irf:9nE7TQXyzrBWMsCYwf
MD5:	67171E37F6D6968CC1A6CEC4E317A764
SHA1:	F460B304D237397FFBA443DD9CA97BC5B349E8EA
SHA-256:	D563C320DFE89846EC031C998A06B6B6987235BBB0D3D6978170AFA06EC17C89
SHA-512:	EF3106415FE67E4381EEC597ACF46491727DA875088A6A7E0455933FA1636D5880D21C5FDD22CD6FBB14A4CFF607C42A61DFCCCBB7DE4A4B0EE0053E1FCCE3A9
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/2d6b9ee7-fcbe-43f7-9a4d-6594acb4d938
Preview:	.PNG........IHDR...F...........{.....sRGB....... .IDATx^l..ze.r.w.....!.D...%...l6.L\|.....?27.......Z.DF6..?._.....z}..........O..7.}.;......s...........{......\?...s........O2......z.\|..?.._.>.^_\|....=..=...w...y.o?f.....+.gr.....K......b~.oe..4..sy_Dw.....Y.......k.;...nZ.>......5......z}...>..^.....]....zZ.y...l.?.}..m..Yk...k.=~...._......w..n;.g.......>-S...J.....B.....?.......Qdj.nv..{.u.y....G.......\|~..............af..Gt...id\..5.2.<.0..z}.].....d.b......[h,....ct.5..z.:f3..y6...S.{7}.i.wv..r..9....ym.....H...?.....s.y..h..m.+.V..g.n..-....s............x..B...Ykk)....U..}...h.........^.Zdkq.y.....[...V....~g-..?....e.a.I.[=..bKs.}.l..N..].:K.-...6..~.h..{w..i..^.=G..#.........IVlk..,......?#...{.6GR...^(.\....U.5.7.u....E6.Y.y?3rl...\|..a.d.".?....Yci.....E...a.q\|..6.3]...z}~}..r.F".b&..pc.....7r....v=...__.={.O82t................Y....~......iq._...b..>.Ie.q.(.<k..v.\.X.f[..c....k....*t..4.B.^.&[6....vY....Q..s...ll1.u.../...k.!

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	78074
Entropy (8bit):	5.448451932204806
Encrypted:	false
SSDEEP:	384:YGd4kZW9adAkZKrodGkPA/9dNkS5Sldlkax8kIgLrAFPsfKk3g3R30kXGLk+bOky:ZUNuWWeJtcszQDvJA
MD5:	89D7765EB66F0E6A5FBF363278E984C1
SHA1:	2FEB7ACBEA7041F386011D3C84E3580EF08DD1ED
SHA-256:	B3D88B3268C4F2018A1ADABC28D45EFBA097E58FF548DA73C8E8ACAA09AC04E9
SHA-512:	63EADDC4360F959CB71F9444DEB1695202386F6A11EAED05FE43827759764E140FA48DF1D5A7998E826E02E067C4E39D084B92B373409DB4C296D9ED1EA3C290
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Bebas+Neue&family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700&family=Exo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Rajdhani:wght@300&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Bebas Neue';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wdhyzbi.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Bebas Neue';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ cyrillic-ext */.@font-face {. font-family: 'Cormorant Garamond';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1344), with CRLF line terminators
Category:	dropped
Size (bytes):	7578
Entropy (8bit):	4.842525553431084
Encrypted:	false
SSDEEP:	96:95cNA1QTREKf9I2YhhBJ5cNA1QTREKf9I2YhhBZ7Lh/tdfyi2G/bQ/bvWkE/WGQ:wW1mKpEW1mKpZ3OebkbEG
MD5:	3183F36EF1D3F24A2716B891835A482F
SHA1:	F63A9BE7D3313F9A2C4D1589D42B861F7710AC00
SHA-256:	EDFDF261979A8C1E929327FA17DBA5E2D6B3CAE82972BB69C24AECECB35DB5C0
SHA-512:	CC9F792E22E20FB5189F2AEB11B8C18271A7DBF8AA914F7DB6E5636AFC6C549A9FDEEBBA134837DB56F0B2CF8D0F71108030542E16B4B14CA532CADA855DAE94
Malicious:	false
Reputation:	low
Preview:	(function ($) {.. $.fn.dreamimage = function (tempName) {.. var cs, x = 0;.. if ($("#dreambackground")[0] == undefined) {.... $("body").append('<div id="dreamland" style="position: fixed;z-index:214748364855555 !important; padding: 0px;display: none;top:0px;left:0px;"><div id="dreambackground" style="position: fixed;height: 100%;z-index:1000;width: 100%;background-color: rgba(0, 0, 0, 0.7);"></div><div id="tool"><svg height="50" width="50" style="cursor:pointer;float: right;z-index: 10005;position: fixed; right:10px;"><rect x="0" y="0" height="50" width="50" fill="white" style="display: none;" /><path d="M 5 5 L 45 45" stroke="white" stroke-width="1" /><path d="M 45 5 L 5 45" stroke="white" stroke-width="1" /></svg><span style="width: 120px;background-color: #555;color: #fff;text-align: center;padding: 5px 0;border-radius: 6px;position: absolute;z-index: 100000;left:50px;top:10px;display:none;">Close</span></div><div id="dreamcontent" style="text-align: cent

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	57679
Entropy (8bit):	5.402702956714381
Encrypted:	false
SSDEEP:	384:7k3g3R30kXGLk+bOkdQVkkFIkLa/kiPSkBkJkY5shWWqpkbeNof+3yw3rF3o3Y3l:cUNuWWeJtcszQDvJA
MD5:	409F245AD5A3DDE7A3534CF62A207C6D
SHA1:	4992561066523109A48A280DBAF44071B6D1B7F1
SHA-256:	943EF67DFE25C3D748DCBC6C4139F0A82E53573360A23049D4F1362150FBBE62
SHA-512:	52BC56DBCF7F7C4AB369CC7CC5DE45959D496D9929BCFEF452DC0B379775675099A2D7CFFEAD4E3D00CAAD988294FBCEB5D6A4373FDC3F07373FC4BE9EBE14BF
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Bebas+Neue&family=Exo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Rajdhani:wght@300&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Bebas Neue';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wdhyzbi.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Bebas Neue';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ vietnamese */.@font-face {. font-family: 'Exo';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gst

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1482x650, components 3
Category:	dropped
Size (bytes):	195237
Entropy (8bit):	7.739079909590872
Encrypted:	false
SSDEEP:	3072:zelwg5E8sLdaHNUyecGnOkoGRnXEgPSg+d4aBF+OPOTh4kS4949Nk+tUYsucLcn7:zOwyNHNUye7Oko8XPSgkBF+OPOThtS44
MD5:	185520FBA1997EB59F37DBDDD5BE9D7B
SHA1:	C6A6EB2B70A6796D304CE046645791EE836FFCC0
SHA-256:	EF60F7E56877CB186D599CC368677DBA615350D3ADAA82A269BBF47856672462
SHA-512:	D8C09A26AED14EBDBFEEF345B50BDC530F60CD11530B4F60F83B8EFCD5A5F208637842AA65787CF8DF636B5E833877461CA1701BFD9599E2C47205D57C40AF0F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1482x662, components 3
Category:	dropped
Size (bytes):	174638
Entropy (8bit):	7.803370896833294
Encrypted:	false
SSDEEP:	3072:xWZ3qJognNCeRrnqd9cjKEFlVcr3AHg3gWYu4+kdGIpZdBazgT3v:xWZ3y7oeRrn0cjdVwoWKY6WM3v
MD5:	772D2B6EF68DB6CFE9F38FAF550D45C5
SHA1:	5D2C46564A1DF9C4C0273613E2A0B4933762AD56
SHA-256:	CEC4C0FA4B891EF3BBD18D8A89F537B8829C682C4A9DDFE5770D7CAB00612FD7
SHA-512:	53F74AF38B2CC6DE0DAA044D5CD2805014002B7E8DF096CDC8041D6939934F59EC9F652481CE1ABA9EFCA03B54CF3D03F159A555A90C91927EC8E70A5BD8763F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..'h..:....d...(..G-.w.....o....e...<7...V.-<A.]k........Ow...#4A...yR.n...?............Ai........^..?.8.....'L.t..).;.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8276
Entropy (8bit):	7.967721723758612
Encrypted:	false
SSDEEP:	192:6S+NsNa/JEiB+UwMFuoYXI1muUWD0JY6J09VBxsoUhtgNa8o2:1+NFBEi+Euow3uwW9VWQ
MD5:	DA27E6C6CB6EDF358B72BEB443DC9223
SHA1:	9908E14079F609AB1B048AB416ECC6926C3A72A2
SHA-256:	A0BA0BDFD0EC30E03330F5966251847CA2E19FE762EE2294AFD0F0ADF2C2A230
SHA-512:	8914593D71E6509F9AAB678A14D9AD42817102AEA062A6B99532530C1C7F816D57D2D02E566FE31A8486C0AE8BCCAA0CB5A51FE737CDD36CDC5F9B66FE78A898
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/Calculator/dollarSign.png
Preview:	.PNG........IHDR..............X......pHYs.................sRGB.........gAMA......a.....IDATx....]e....g..q..m...c.!bjp.......MI\..4...k0]..K.,a...hHj.....).Y%....j....66....V.vZn.q.us.}_..=.....y.s.......i.=...\|......#...[..?..1.Z..........Z.. `...........?.F...3.uu...z...$.qJ+.....M....o.'u.xzclbs..[."..[5....^...R..S...u..;...Z....0..pz....W...^.......@\'"1...</..I#...^.W^i.../.. ...VP0.wk.t....... .&.....<.....Y.z....5h@7a....x...QX.$......\.@b.wo.k........(.Q,Ok.......xJ....Z..2x..m..V..2.a....P.......G..Yc.,......g....G ./..Q...."........,.c....Q%_[.....e.....z.@./..9.aTV4p.r.)..].(..$_.h`XrBhx..DD(8.@.L.}aS.z......vT."A.j.k;KV..K... ..'z.GB...&.w.B...G..@..1.P......V ....L...=...#....j...%....p.hQ{...pe1.@...-......{~7z...?.5....hg.P2........<z...S?..Sl...<.o.w......~..8.7...^.7e.i.......5.....l......B8u?d.F..v.f.]c..6.V,.../.5.*.@.6..WZ.oAv...w.@...b.h..2.SkB..4.>..(...H.i.W.\|/..IW..\|.....2.....t.n..<K..9.v....(....1.}.FO.k.qg..J.k.3#.R.+...

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 550 x 262, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19289
Entropy (8bit):	7.929935484460144
Encrypted:	false
SSDEEP:	384:FzWDBEeoY98EbpQKnr8RkDZAVHy90d8JDMWPdKKSk5PMW++tozLuN:oDZ198CbjDZxc8Jkhk5UW+yonE
MD5:	6ED110609CC7149F0E04481725909B1D
SHA1:	E7E1E77F2B64B363293ED0D8FEA665D3AB877403
SHA-256:	7730490D066E3732770CF6CA5059023F2619D69F2BFA7D9648745547652E97B5
SHA-512:	C0362C4CE756F0D64B12FCC4AFCF9E54541EAC64929D4A5417520A242F51252404A84910842C66672B2F08EB0A4ECDAE140FC7EDBE8D475994B9A21E97A2F78C
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/Calculator/Huttons-Logo.png
Preview:	.PNG........IHDR...&.........Q.^.....bKGD..............pHYs...#...#.x.?v....tIME.......L].W.. .IDATx..w.cU..?3.....K......)".....).H...AQA@..,...(.b.A."M).J...,l(........q.KN.&3I&7.d....33...s.=.{.....B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!.d.....~...P.O.....yF.z)D..-...X0.`G`qLw..<F..B..3..4.$....A..H-..;.\6.}5.]r.m..I..r.9z.B.A.-...`] .z...s..[)..5.^...........M.....@!F..v.f...i...B2.2p..9`g`n..cm.L`e..1.e!.`)N$....\|.X......lb..dj...."r...[O...........=F51?]8+M...K3.Z......../[=.W..c-.....H.....j..LM...>o..o.=&NB..v.. ......%..`a"Dgv..3.a.!\|...0.M..E2.....H..!.D...w...V.YF......<L...>....p8...W...C...e...@.0....$...[..<p2.\|.vh...L.\|.g..B.K.........E./J\|.......l"..`o`{.^....e.2.L.......$..9B..x.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	121062
Entropy (8bit):	7.990120254304285
Encrypted:	true
SSDEEP:	3072:OOofBBnSYFyODsuCFyC7c82wHOpYabeKJxPsuU+aNML6j:OOofBB7yODsuqA8+asFsuU+aNME
MD5:	893032B923C6D21364D299354C9E3CAB
SHA1:	0F349DCCD850E9597D8858D24D00B42952DB606B
SHA-256:	02BC131426B59C457C8FD97AA242BC177292CA5AC4F882CCFFD9ADA16E0717B3
SHA-512:	56A908FB8797736C9C434740842272D70F1603CAD38A151508C5C2282C05DB798E34481ECF2710D9C593998E238429E25C7AD09B593A3807B72470BFF09AE8FD
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/Calculator/DollarBagHand.png
Preview:	.PNG........IHDR....................sRGB....... .IDATx^.}.\|.E..3.....)..R...`W.'./.......c..........".....4)B.!.\.l......]B(..pw....\.vg....}..! 7..D@" ....0....P...k.m.Q..h{.....".p^..Z..pA..pAIxGAI8...G....P,.....C.m..m..mY.vl.1...0..d.D...U-...cYYY.P(.6T-...[...,.((...S...]...WT.v......:...BFQ~~`{.\|R..')?.........D@" ..O.lf,;..4+..4.h..&..k.z..f...n.rma.h4^...$;..gG"...ifY.cX......e..8......%..........\|?J)......?oc.w.....E!..................RMW.@.4'7..^.Z..6m..y......X.....F...u.J..@....O0.....$.....!$....@`..F+...Z.r.....[.Z..e..-....g....7..L....J.`U..d.8`3..(..x..m.@.Er............D....G.`Y..o.[.O.......9.X.......p.(...w.'.c..OE....y...6\.q.u.5^.E..-.5]].v.U..6_Q....X...$.._c9C..D....v.Z.lj.\|ma.....y....mY.u..._\..,+..F3.D..."%S..3.C..qP.~GJ....G........n.yEQ.-oA.I.8.L......~,4.)..P TX..XH.h.3A...)(..;T0M........u..?h.V ..uM-i..C;....6m~n...M..nZ....Z.HBO......H..1..1m...Z..\.~..%]~.yi.?V.h..M...E.m..-.9.q2$TX......H.6.;.......oA..

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 510 x 489, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	139052
Entropy (8bit):	7.987941981826959
Encrypted:	false
SSDEEP:	1536:eWC+dctqrMb4xRCkcF7J5UYG6WL0HvHUPqfB3JzlpsFkmq0B4PAn1CqId+b1RqmX:ecGtqwpUwPUPKmFpq0B4vdebyS3x
MD5:	B34B88EF11850CB2B87F62B8D171DC93
SHA1:	E765C8AED8C7C0300CE5BE8D1A4CCA45C28A68F7
SHA-256:	E58F9179584189ED8C99F96B6F2D405BEEBB95B529E2C6D165AF755E6AF26BF4
SHA-512:	3A2A20FF714B72229189B53B8880B8330D98D021CEC9B3795B18E31193A1227E2BBA76C4EB5E0E8CF406525D0B39963DCDF26DCB1F0689465D2F95C7F3853560
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/Calculator/Agreement.png
Preview:	.PNG........IHDR.............c.^.....sRGB....... .IDATx^.]...E....w.A....3.g.E%(.H...."A@.P..."..DrF@.. ..g..... .....N..........7........TW...U]...y$..v.b....a...~p...~:w.}U.....&..!..Ts..J.H.....!.y.......c.DQ....w.z..6.....p.....GBy.h..."yM.h`.g[.3........+.j......(.#.....@Jk...m`...i\|..........sy....4....;..7).......$1...}..=...9..jy..(..a4.d.RL....d..z......].......Z).2.._f.\|.....Q2..h.Y...X...............Q..e@4j."..$...Qj 95.8......@..?.C.p.....l._....,.}C.c+....=z.............\|......F(.".#.}...M.YH......M...A<O..+..2 ..s,...c.z..u..{>.l.<....s...q.7.i.~..pU.. .............3...>..X.'5.c.PJ9.cx..\|\|...{E.]1......N.co]....O......:.E....G`..7..w......@Z..:@A.......T.c.......xR.I....>.....B...(......q..0..u..\|.........Q"..~..z..<.....`S..f...<...4.......xR.R.>.@...?.>z..{L.&.....u"..y<.?v..{....\|<..^4..>........is..=..b..#l.....M(.....[............P....B....Tj.......x.NZ....}..<0..''M.3...T.\.yE....@..~....B~... ....8..8...r.....'..

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 550 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	435873
Entropy (8bit):	7.994349775489489
Encrypted:	true
SSDEEP:	12288:fG49xWoPzoLkYLgQrwT4Zuw5rMJPrCcxPiXJp:fptlAgQkT4gwFQrCcQXv
MD5:	BB5C2A3BCF86E5DD1E847F4A223D8FF1
SHA1:	2FB395C023F2D9CD58EA376F734939BF071C3C8F
SHA-256:	7437BD98B7191C7AA0C369632FD13DA89A48B21BB7C9E95282B043923CF82C2B
SHA-512:	42CB3FD53E32108B2A93A7F65B99B18836453ACD6558FEE715457CA26E32022CFC6731FA4F165B1F0C99D771D290282232C98DAB9AC4A46347E7598487E560B9
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/29b3f34b-2880-4e5c-990a-c73279b40889
Preview:	.PNG........IHDR...&...L......Iw.....sRGB....... .IDATx^d...wv.v.5........2.`V.H..#h...d...pX..!G.O.L.o..,J..........%..H..!g.`8.......V]]k...8.._f.j..U._~.o...s.?..........B..>.3....D.........y../..../e..=.6y..O.............P.....^..r-...;...k.}.Y.Z........%J{=....C._..U............O...{o..O1.^"+rdY..,Pk4q6Y.Q...<E......1....~c.wp.A..=q...yY.5.@..9.e)...B......e^...#.<...W.'...q...J..S.........g..W....67w...zT......16.^...-.......\..c./....e.YZ..h".j..K.~...ppx..i....a.D..z.......@..8=..(.k....B../..Y....MDq...b.....>B.V...E.lmt1.]q..r.......E. .2.~..f.qTC..2......&.,../........A3B...L..h........A....@.")\|.........}x.-.G.<x....K...{..[....$h.,.#.J.....".=.a.....n..?.\|6C.E.t[.%.f......v.p:..Q\...e..=..G...v.<G....6.8D...=...v#......P.BY.......2?D-....#.l..d9..Cx;o`.........9.....Z....I.._....q.n{.....X..G.....M(...B.....v.Kb..%f........{Y[..c..o....+:....J...0/*$E...Y.%..P.%.y..nK.G.</+,..EUa....O^.yUa.L.......B.y....Y..z.i...yU..s

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1560)
Category:	dropped
Size (bytes):	1775
Entropy (8bit):	5.086883427840699
Encrypted:	false
SSDEEP:	48:wvPioGysd99D9ND9dKh2EZGS1eYzs9SHgm4:aP679RNRdKbgMGSM
MD5:	00BB3D26F3FEE308E5747EB9F5760B48
SHA1:	10FFA11714CE78407AC429CCC732BBF00603CD94
SHA-256:	852DB4D1E3C440DEAA05229FA8BEB300BC959F16D0F9C2BE168173A26C68E1A9
SHA-512:	4F00CC7153FC814F32F2284D3086F9D9C3843F9A02DBECD23A925C2327F47ACB7122AF091D110112F790C3FE8BEDB35FEB499F5376F63EE6F3846F8D20E5A417
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.ttf) format("truetype")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.ttf) format("truetype")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-regular-400.woff2) format("woff2"),url(../webfonts/free-fa-regular-400.ttf) format("truetype");unicode-range:u+f003,u+f006,u+f014,u+f016-f017,u+f01a-f01b,u+f01d,u+f022,u+f03e,u+f044,u+f046,u+f05c-f05d,u+f06e,u+f070,u+f087-f088,u+f08a,u+f094,u+f096-f097,u+f09d,u+f0a0,u+f0a2,u+f0a4-f0a7,u+f0c5,u+f0c7,u+f0e5-f0e6,u+f0eb,u+f0f6-f0f8,u+f10c,u+f114-f

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	232447
Entropy (8bit):	5.457177291672901
Encrypted:	false
SSDEEP:	3072:NfLeYH8At6Jn37OeR8NteGvQ+AMPpgArl0xYu58713dW:NfLeYc+6JrH8N7QQGArHu58713E
MD5:	2E42A77BDBE375D22751B45E143129D7
SHA1:	F5979889619D6D581291BB53E7028045A2130659
SHA-256:	F4CFD4A5B95DFB31C47CD567D9719FC12A0453F6FF27E2872147A9740E4B9E56
SHA-512:	7F6380B8CFB6D31AA5B089FC1CFC0FD154A1AAF597B6FA6E7CDCCB35F4D2BA7AFDC4688572345C4A271FA5F29A499E3BF96208AAA63A6B0686D1F7EB590626CA
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1472x673, components 3
Category:	downloaded
Size (bytes):	212797
Entropy (8bit):	7.789054660293818
Encrypted:	false
SSDEEP:	6144:JM5da7xYHWIua1GN8syR/VDheatkmtgE/6:ueDIumGJwVDheaaAgi6
MD5:	75CC7FB67071A88B82F280C78BB89B7B
SHA1:	93E828B508B0F5DB149F9B1F0BB762117AC2E9CA
SHA-256:	C37259C42FB2213B4393D9FCB9C69CF38F61E4DBF51B6639AB109EE9EB352845
SHA-512:	1A83919359D1CE98935149F616CD8E23EB75D6CE075C7F25DD1758B40FCC33A0E0A081F3575662269CFAF10C2A7EB0BDD519F77D6F9A6A29E0EFDC425A5989A3
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/1a22c8ef-71e4-459b-9b38-cec3ca239794.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(....:;.PQ.......i...\|....G...>9......R.2......(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=DAY/d=0/rs=AN8SPfrCcgxoBri2FVMQptvuOBiOsolgBw/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 559 x 447, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	74701
Entropy (8bit):	7.978856833266522
Encrypted:	false
SSDEEP:	1536:cPFkcxfuts2doXYzhZZ74/7rYnk8InJjHRy8JZVmhPvmW:8FkcVKs2dzFa98sJtehvmW
MD5:	87E819717C916DC0231DB1C6D5FA09E4
SHA1:	962729A642AEE3A9E45A18CB8C620C143A6158F3
SHA-256:	56C6EEED9B18A59B3BE5E4487455BA60FF6F883A0F23EB99D881FC873211214E
SHA-512:	4E3B44CE7E37436632EE4F0A899BB0C24F96594C62D819FB6BEE4B59009D84DE2A652F12D53F6D889C7F254898C10C870350264C8BE3AA93E3D0765A31DDA598
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/Calculator/Installments.png
Preview:	.PNG........IHDR.../..........Z7.....sRGB....... .IDATx^.}......[..3....(.+.5.<r..&AQ..........Q...(.+..(....T....TD........O4.h.`.....{...Y...e..._....UO..S..._.~..^=~...........LuX...l`R.%}` @...8........p..g.z./...G..N....\|....%X.......<.......I......s.....L...{......a...1.j.....X..R....c ..B?.......1..`.N...-\8....~...=..X.4...x.....gi.{......o.?........\"2..!8.@H.X.v..j..5..?=........_.7l..Y^...8.4....^.....O..T..y. ..)n......h.Iw'...^.@G@ ....+.......y.i......ee.s._a.!/.$/..~.'....I.9.yI......G.C...?.j....W.#..u.d.S.9.yC^JG^.Y8.o.S.q.6.R..Ew.........!/I.1.^..!/;....5.Ki62..1....P5..%.F...}^.y)=yy..y}....-.nK.m4/.F...c.1..?..y1.pV...&.v.y1.......i...!/......h#C^.y1.e........C^.y1...f.J........i...!/....b.!/&..$.L_;......b.!/...........!/.....L.bB....y...k{D...C^.y1..h^..=.'.&..........0y^../e..E..xp..O....</&.K..i.A`K...b4/.^.".d#'.to..3..b.F.ld..A.m.0...S..........K...v.@...........c.V{....aa{....Z.R..q`..........-..\.x...g]

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6088
Entropy (8bit):	4.565570602513942
Encrypted:	false
SSDEEP:	48:lGm5zqtGr/bqTTapm//9Fl5Ju125m6h+dlAX8hTdOZT4FetOm+RqFjKyf69LEiho:J8tJ/jIGmJeMs0F2+RSBf6JEi2ORjo
MD5:	0F60344A9DC71F66BF62CA02B5860B1F
SHA1:	CCF8CB118F66945E82D79FE52E80AED6762CCADF
SHA-256:	DDDD4792EB8E7CE7514E1E3602C9E185D70AD231F602B34AD5DB8EEB6BDDB20D
SHA-512:	4E8AE6811EF068605D6505BA0FD332ED5BEFCEC02FEB7F888F0EC9635290556114323C17EE3EE5C0DE091D5478B777657780E948DC44BDBDAA52C66D408DB703
Malicious:	false
Reputation:	low
URL:	"https://granddunman-info.com/Content/templates_assets/DesignX,Z_Common/MeetingCardsStyle.css"
Preview:	...main {.. justify-content: center;.. align-items: center;.. max-width: 1300px !important;.. flex-wrap: wrap;..}.....card1, .card2 {.. background-color: #ffd3a0;.. border-radius: 30px;.. padding: 10px;.. margin-bottom: 20px; /* Add margin for spacing between cards /..}.....card2 {.. background-color: #a1d2ff;..}.....card_img img {.. width: 100%;.. height: auto;.. max-height: 300px;.. object-fit: cover; / Ensure image maintains aspect ratio and is cropped if necessary /.. border: 5px solid white;.. border-radius: 30px;..}.....text {.. flex-direction: column;.. margin: 0 15px;..}.....card1_heading, .card2_heading {.. font-size: 2.0em;.. color: #e37325;.. font-weight: 700;.. line-height: 2rem;.. text-transform: uppercase;..}.....card2_heading {.. color: #041e42;..}.....description {.. font-size: 1.5em;.. color: black;.. font-weight: 500;.. line-height: 2rem;..}.....timing {.. width: 50%;.. /padding

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (617)
Category:	downloaded
Size (bytes):	559447
Entropy (8bit):	5.6838609237395215
Encrypted:	false
SSDEEP:	6144:APPp3i5djotqHRUANEU0p6VfJyrmaU2xUEV/ZQbZFPyIbAnPT0J7106znOyGVnTL:A5y5djoWNYYdJsgFPyIbCTI0y7ACVLC
MD5:	99210E7C2195DE81C0EEDF98787A69B3
SHA1:	7B26C66058385B60109AA6129C2161A399A6034D
SHA-256:	5F75BFBFBF0C7CAC2C87D6CA5DE0661AEDC188B0900B6CEF5EFBAEA134B53302
SHA-512:	C3198D7943B3311679D77BCFFEA75D7043801277BF03AC10CA20BBE424E9AE896C060C7E0EF4143E23C2A41E367917A258404FBA428099316705B7252AEA8A6B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var E=function(){return[function(K,v,L,Q,d,x,r,w,f){return(K-(((K&55)==((w=[2,6,"P"],(K&60)==K)&&(L=LO.get(),f=a[27](33,v,L)),K)&&c.call(this,v),(K\|w[0])>=29)&&(K<<1&8)<w[1]&&(r=a[0](72,v,L),Q.I=d\|\|0,Q.u=Q.I,Q[w[2]]=r.UA,Q.Z=r.buffer,Q.H=x!==void 0?Q.I+x:Q.Z.length),w[0])&16)<8&&(K-3&15)>=10&&(N[w[1]](63,"INPUT")\|\|(C[w[0]](w[0],this.u,this.V(),"click",this.N),this.vL=null),this.xV=!1,V[20](12,"INPUT",this)),f},function(K,v,L,Q,d){return(K\|((Q=[9,895,11],(K-6&7)>=3)&&K>>2<Q[2]&&CO.call(this,Q[1],14),.Q[0]))&2\|\|(L="",L=h[5](37,v.Cr,"imageselect")?L+'Select each image that contains the object described in the text or

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1880)
Category:	downloaded
Size (bytes):	138732
Entropy (8bit):	5.543853914865261
Encrypted:	false
SSDEEP:	3072:fvOKs2fLV0JnWkWO/u2cbGQsp4+Ckff34cV:+TXJe+Ckff3T
MD5:	7C396C404B134F828B79BC62FCC80EAC
SHA1:	404C6BC0F9A809C97CEE724B2FFECBFC1ED538B2
SHA-256:	91B6EBCAFBECE253637E6774A617D8959655686F1679A3163CC257B36151654B
SHA-512:	CFFF521F6575104A450B2FE8915D77E349C213EB349B1534FF4BB3943BA980C22E603A3B422906E9C582C9E1D2ACC5CF9F938FD19B2494BCB1BD44FB8A378EA2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..,"blob":{"1":"1"}.........};.....var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");.},ha=fa(this),ia=function(a,b){if(b)a:{for(var c=ha,d=a.split("."),e=0;e<d.length-1;e++){var f=d[e];if(!(f in c))break a;c=c[f]}var h=d[d.length-1],l=c[h],m=b(l);m!=l&&m!=null&&ea(c,h,{configurable:!0,writable:!0,value:m})}};.ia("Symbol",function(a){i

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18050)
Category:	downloaded
Size (bytes):	18670
Entropy (8bit):	5.65098474031577
Encrypted:	false
SSDEEP:	384:KmZugm8YvH/gvUb5YxczZflxXESc7hbnaeJIyjPQWr:egm8YvH/gJx0ZflF7AaeJTTr
MD5:	0E0CFEAFAAC28AE24B801A4D3EA67C72
SHA1:	43D22F7513A529D17D9C75EE7B9B58E9BA8643D5
SHA-256:	C6B9CB7C21234ABA4647501854CCABCAF51733C39430EE2C0BD4FD1B6EC5DF31
SHA-512:	9FAA65A0821F7F3B39D6A91CA66E489DB053762F7994B156D99C61901019D81A1227BC4A14B15E0C42648A60B7EB1105B28731CA8988FDD9F9182BA557464047
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var F=function(H,a){if(!(a=(H=null,d).trustedTypes,a)\|\|!a.createPolicy)return H;try{H=a.createPolicy("bg",{createHTML:y,createScript:y,createScriptURL:y})}catch(u){d.console&&d.console.error(u.message)}return H},y=function(H){return H},d=this\|\|self;(0,eval)(function(H,a){return(a=F())&&H.eval(a.createScript("1"))===1?function(u){return a.createScript(u)}:function(u){return""+u}}(d)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var od=function(H,a,d,F,A,y){function B(){if(F.B==F){if(F.v){var J=[l,a,d,void 0,A,y,arguments];if(H==2)var u=W(F,(q(J,F),false),false);else if(H==1){var P=!F.V.length;(q(J,F),P)&&W(F,false,false)}else u=Hc(F,J);return u}A&&y&&A.removeEventListener(y,B,c)}}return B},h=function(H,a,d,F,A,y,B,J){if(H.B=(B=(J=(A=(d\|\|H.P++,H.I>0)&&H.W&&H.b7&&H.s<=1&&!H.j&&!H.S&&(!d\|\|H.i7-a>1)&&doc

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	5655
Entropy (8bit):	4.2109922663057
Encrypted:	false
SSDEEP:	48:yZ9qbl9UcBjmau3ka3Rs2l56jOwXq2+JEnrWdYFu4h:y6p9ULau0aDl7BoFuE
MD5:	26B98F8D8E285619068CD0C042C47876
SHA1:	6C78EB73C234C101EBC842E15D9C98973F151BF7
SHA-256:	844F0BA1BB02BAEC601536B3AE5E941DAC5B4DC0DB0BCFCD96FD04271DE58C3B
SHA-512:	1C53E24DCC4BE9E4A7338B946A7D3F211F157674B79046F1A844B92F531517285A4AD42C04D076E3BB90CA2EDFCBB552BEDD14D68E0C85B82BF1E42504B03F75
Malicious:	false
Reputation:	low
Preview:	(function($) {.. .. "use strict";..../* --------------------------------------------..Google Map..-------------------------------------------- */ ..window.onload = MapLoadScript;..function GmapInit() {.. var Gmap = $('.map-canvas');.. Gmap.each(function() {.. var $this = $(this),.. lat = '',.. lng = '',.. zoom = 12,.. scrollwheel = false,.. zoomcontrol = true,.. draggable = true,.. mapType = google.maps.MapTypeId.ROADMAP,.. title = '',.. contentString = '',.. theme_icon_path = $this.data('icon-path'),.. dataLat = $this.data('lat'),.. dataLng = $this.data('lng'),.. dataZoom = $this.data('zoom'),.. dataType = $this.data('type'),.. dataScrollwheel = $this.data('scrollwheel'),..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	50104
Entropy (8bit):	7.981356093857293
Encrypted:	false
SSDEEP:	768:KYy5Tq0gdnQWJ3fcB/77EoWaGZqUJHayooogsTe7rqO1r0zcu2:K9TqPztfcB47ZqUdodgT7rqOqc
MD5:	535FD561E2820475B3873452976E15EE
SHA1:	E5B0B0D9D70D4732A7466052601C901569C7F29C
SHA-256:	03B45E7FEED38A322A4DF2E05F1705E0908C54A2640250E444DD7454C4A5CE77
SHA-512:	F4B510127EF2B1CD2BCEF3517A996721D6002F8BD5FF0702B1D8F81AE769BBF682F9C14102D0C22CDE42FCD29CA0A6A60F703DC7A9524531BFEF8358231774E9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 242 x 125, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2526
Entropy (8bit):	7.7887090088735205
Encrypted:	false
SSDEEP:	48:atxjgvipuU4EwrgUN/EHEWT6J+bAFvt01+UjqKZhDY8MF/jMbClk0N1VjA95:eFg+Kt5N/yEWTnbuvFqYHF7kgA95
MD5:	F62E25D19A79F0DB1B307904E04CB3E7
SHA1:	11663C61C54822B63D224E2BA2C98841ABF111C4
SHA-256:	93ECEBEC07F727ED5F650C634359277A99595C9BC076FDA81D27CDF6B0E21166
SHA-512:	8AA3EDCB8699F9A73A63A430258D862B11E8F214C633B861EE5046BFF148DBCC3B093EEDF9A6FF06B1C24934F4A06EA32342E59944201342921AD476D07DCEF2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......}.......>.....sRGB.........IDATx^.kkdU....[...T.n.\|.....'.....E...o.\.!""...(""...3:.ED."""...Q$.k2.h..I9..t.S9u....5...Y..N.O..?$..@..}@)..)}Ri.T7l&..nWk....._...x/...+.".6.&...y..,/-...&.o.W.l.&cU".]....E...g...../.......w......,O.y....b.O.c.Vb..$.V.Z...<./....C...e.a.v.yp.!.9......_..M.......U.......R.OM...Q...E...\."..K.^g...?..A...4....\...."..<Z..."..~.j.N+...=...9.yF.."..#.+D...X,E....w'PG.~d..#J.y..MgM..~.<._W.A...V.<..=5E.>...`H._.j........M.\|.}..y..........sZ.Ev..... r?.'.^oarr..&..M.v`.Z.yk....k.Z9...Z..F............Wm.<.......yP...V.R*.U."[...<..#...Z)u.b.:E.ur...X....x.e...%.\|g.@.S.hD.....Fk.Y..>)"oD.jh..y("....."o.......zs..".&.\|g.x..........333?.>.....#....t.oll..t:.G.......bn...K`ll..P./...(n....u ........q.Z.'.R..D.jSd...#'...y..j...:.o..uJ..E7.."...pI.xJD..X..+....X.o._..HD^.].n.)r..am!..^)ukH.m..".:..."......LOO..Zq.9......l.D..^.w......x..E........jS.o.K....g.,;....M..+..\|._.8."^Wm...Ea.q..A)u..R)./..

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1472x673, components 3
Category:	dropped
Size (bytes):	212797
Entropy (8bit):	7.789054660293818
Encrypted:	false
SSDEEP:	6144:JM5da7xYHWIua1GN8syR/VDheatkmtgE/6:ueDIumGJwVDheaaAgi6
MD5:	75CC7FB67071A88B82F280C78BB89B7B
SHA1:	93E828B508B0F5DB149F9B1F0BB762117AC2E9CA
SHA-256:	C37259C42FB2213B4393D9FCB9C69CF38F61E4DBF51B6639AB109EE9EB352845
SHA-512:	1A83919359D1CE98935149F616CD8E23EB75D6CE075C7F25DD1758B40FCC33A0E0A081F3575662269CFAF10C2A7EB0BDD519F77D6F9A6A29E0EFDC425A5989A3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(....:;.PQ.......i...\|....G...>9......R.2......(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	4.75716068089608
Encrypted:	false
SSDEEP:	3:umCC+Kkh3uCGr3N8CkdyEIKRuoYCGrejk92/3pYk1GdVSNr27pYk1GG5Z:H+KksCGr3N8Ck0EItrejkWYMr28wZ
MD5:	926E3B3AE8F2674AC776FDB77790B98D
SHA1:	E4D0B8FD954999986BEC7571275CEC334F10245B
SHA-256:	991C1A5BA5ED7FA49EC8A93A65F0DB10AA4ADBE2CC58BAED1CEE5A094D2B99E0
SHA-512:	F637DBE051537D45292A8358128BF27992783C784BDCD7CE3A77BA2B7AC9960CD3756350004FB437ADEAFB212C40DEF0C49DB3F1C9A16230DC4F553071857F47
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzIScgnC0G3RqBtN4RIFDekuvhoSBQ0Vcn_TEgUNsoFTrRIFDQ6HjjwSBQ0LgukTEgUNDiZX-BIFDTYRKyISBQ0AYtczEgUNOmW7rhIFDbWPI5ASBQ2UkJL6EgUNU1pHxRIFDZFhlU4SBQ2UkJL6EgUNBu27_w==?alt=proto
Preview:	CocBCgcN6S6+GhoACgcNFXJ/0xoACgcNsoFTrRoACgcNDoeOPBoACgcNC4LpExoACgcNDiZX+BoACgcNNhErIhoACgcNAGLXMxoACgcNOmW7rhoACgcNtY8jkBoACgcNlJCS+hoACgcNU1pHxRoACgcNkWGVThoACgcNlJCS+hoACgcNBu27/xoA

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.813518690328113
Encrypted:	false
SSDEEP:	3:rUinuE1inqEPAaCSDCLdGiunSOZkPQQFSEjmnSoICkY:rzuEonqOnDCAioS/XSFSckY
MD5:	B9AF698CFAAF0245B84B30A3D021D438
SHA1:	DD12EB96B7AC95A6FD07A96E7B917D5BBD78EAAD
SHA-256:	CD6EFB91D2926CEA9D48CD870FDC285996EEF0CEC40A882FA4B4E536DB45189A
SHA-512:	7C419A8148433FC3946ADECE229BB182F018E1B71F1CFB70A0038D5300ADAE8954CB2D12FF46FB44FE3964E401B5BB07D7FBAA9D6852941515ED9D3F78AFAE15
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISVgl1X4pCSenFMhIFDekuvhoSBQ0Vcn_TEgUNsoFTrRIFDQ6HjjwSBQ0LgukTEgUNDiZX-BIFDTYRKyISBQ0AYtczEgUNOmW7rhIFDbWPI5ASBQ1TWkfF?alt=proto
Preview:	CmMKBw3pLr4aGgAKBw0Vcn/TGgAKBw2ygVOtGgAKBw0Oh448GgAKBw0LgukTGgAKBw0OJlf4GgAKBw02ESsiGgAKBw0AYtczGgAKBw06ZbuuGgAKBw21jyOQGgAKBw1TWkfFGgA=

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13820, version 1.0
Category:	downloaded
Size (bytes):	13820
Entropy (8bit):	7.983949718107965
Encrypted:	false
SSDEEP:	384:igcHqCo7P8Gclh9HEi9Hd6+9cnxL0GgZmCI6Tjhz8PFze:igcs7P8Gc5HEa96+unxL0GeI6qdze
MD5:	2DD698F2699A5EF991625825011BFF90
SHA1:	523FF9357131751E57DD78CB92B218A49A130D1D
SHA-256:	02F5DFC0C21E92F3C724260F035833E627513A1B91230CC490A1EA756C95E5E5
SHA-512:	A3AC032B33358DAF937B19DA79BD2D102101FA382832C14E8BCF8E7FC25822498CCF2FBEF5165248B13E689F9EDC0D1350CCAE9A9AD29D0C60CCBFC840FCE9A6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2
Preview:	wOF2......5........8..5..........................n..x..>.`.................a.....6.$... .....J..K.F\|.r.i..@.t.;E.D.M.>...l........1.$......D.=..`.e.u..........1.2{t.ms."\|;..K\|.Q(..(.1.?2."}..<.-.[..F.#..l.!=`2.6.Qc.....k.0v=D.U.^..?...{. .R.E..7<..\...D#~Q..8.b.....P...j..SZ..o;.n..5f...S....._gv./...9K..B..T...K....b]m.e......>.}.M...f.&...h.e.a6.p......ge.XD.d.Z@..\..x Y.L.......V.Y]!+<:.;e.\|.............W..BY#.;...p.}.<O6...vv.H`ye.d;..NG.G..T....5.R......;......_...R.`Y.U.C.e.U.:.zm.\T.+0......d.mP.?..].....M.w..&"K./.l_....[.a.ft.v,..8......J......'.....E.)..MO.B........w.bA.X.P.%3Y>.p.$.E.!...B.....t...s.B.......h.k....D...;..j..)..ab...G..s\|1...%..L..T.b..'......$.3..w\z.+.l. i..D...t9.. ..-$.}+..<.\.Cy..'...&?.n...`.Q...B3...:.2rE.G......2...$.@... X .. .*A.4 :U N. ..A..AFl..7.`...(. ....a.[7D..#..4.@e...x..H...G.......-..y.@.xo.@.X&..L...v.....P>i.(..%K...;#55.51....K'.$.. .I."......Y.......c..b..B...Wa..4.g.x.z0.q,..qcl+...5Z6..HDg

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6409
Entropy (8bit):	4.922557481084574
Encrypted:	false
SSDEEP:	192:qdmsK41LHSBWhXRpC7C7D12JHcs/pEOLlNRXg5oY:ls/rziGM+hqHBo
MD5:	005E8E2287CBC924C1849F7BEAD60BF2
SHA1:	23AAEB588A06EAE1713AAA462939DF1F3FEA3675
SHA-256:	E404EED3DE9F104F3F08770F85A40A50642420770264B9AB5883CC4137A4830A
SHA-512:	D20A06F83C4A130B6EFB314EFBD2E928678BD69F77CCE715FA692BAAE92FFBAA4D0A2FB035C379548621EC7D4710D3B361F81A7448C0AA6B92052A0C9050B4A3
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/js/mortgageCalculator.js
Preview:	..//Set Value to 0 on first click..$(document).on("click", ".first-click", function () {.. $(this).val('');.. $(this).removeClass('first-click');..});....//Calculator Calculations..$(document).on('click', '#CalculateMortgageBtn', function () {.. isCheckValidation = true;.... checkValidation();.. if ($('.isValid').length === 5) {.. CalculateMortgage();.. }..});........//Calculator Calculations..function checkValidation() {.. $('.CalcInput').each(function () {.. validateForm($(this));.. });..}....//Calculator Calculations..$(document).on('change keyup', '.CalcInput', function () {.. if (isCheckValidation) {.. validateForm($(this));.. }..});....function validateForm(_this) {.. var inputVal = parseFloat(cleanPrefixSufix(_this.val()));.. var minVal = parseFloat(_this.attr('minVal'));.. var maxVal = parseFloat(_this.attr('maxVal'));.. var minError = _this.closest('.user-input-div').siblings('.calc-input-validation-min');.. var

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 559 x 447, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	74701
Entropy (8bit):	7.978856833266522
Encrypted:	false
SSDEEP:	1536:cPFkcxfuts2doXYzhZZ74/7rYnk8InJjHRy8JZVmhPvmW:8FkcVKs2dzFa98sJtehvmW
MD5:	87E819717C916DC0231DB1C6D5FA09E4
SHA1:	962729A642AEE3A9E45A18CB8C620C143A6158F3
SHA-256:	56C6EEED9B18A59B3BE5E4487455BA60FF6F883A0F23EB99D881FC873211214E
SHA-512:	4E3B44CE7E37436632EE4F0A899BB0C24F96594C62D819FB6BEE4B59009D84DE2A652F12D53F6D889C7F254898C10C870350264C8BE3AA93E3D0765A31DDA598
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.../..........Z7.....sRGB....... .IDATx^.}......[..3....(.+.5.<r..&AQ..........Q...(.+..(....T....TD........O4.h.`.....{...Y...e..._....UO..S..._.~..^=~...........LuX...l`R.%}` @...8........p..g.z./...G..N....\|....%X.......<.......I......s.....L...{......a...1.j.....X..R....c ..B?.......1..`.N...-\8....~...=..X.4...x.....gi.{......o.?........\"2..!8.@H.X.v..j..5..?=........_.7l..Y^...8.4....^.....O..T..y. ..)n......h.Iw'...^.@G@ ....+.......y.i......ee.s._a.!/.$/..~.'....I.9.yI......G.C...?.j....W.#..u.d.S.9.yC^JG^.Y8.o.S.q.6.R..Ew.........!/I.1.^..!/;....5.Ki62..1....P5..%.F...}^.y)=yy..y}....-.nK.m4/.F...c.1..?..y1.pV...&.v.y1.......i...!/......h#C^.y1.e........C^.y1...f.J........i...!/....b.!/&..$.L_;......b.!/...........!/.....L.bB....y...k{D...C^.y1..h^..=.'.&..........0y^../e..E..xp..O....</&.K..i.A`K...b4/.^.".d#'.to..3..b.F.ld..A.m.0...S..........K...v.@...........c.V{....aa{....Z.R..q`..........-..\.x...g]

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10656)
Category:	downloaded
Size (bytes):	323939
Entropy (8bit):	5.677502255604551
Encrypted:	false
SSDEEP:	6144:bFAtpEzi3WOc6jQpGTR0JAzRVuNUYPY641dlmDY6UhBN/Sgq9bNw8W8tY9uOG2W7:bFAUec6aAzyi6Uh3Sg+bg8tY9uOG2UfF
MD5:	45C6611DF8882CE6646EE7949D010DB9
SHA1:	707C46A92353525ED3210DCD2F58B4F41E35737F
SHA-256:	26686F9AC24711EE205BCB8C909C97855B457DBE207CB249AA9A412A8AA01D9A
SHA-512:	9360D51894C1DE1AD6DF7330E6B5FD5E8D6127502F820698788EDDEE4863141D68AFB3B394FA5781AC8786F81C92B1AF3D65F504EA5D77D963289340E99F2379
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?key=AIzaSyAK1_BQDedEpDEK7RGShRihued8w5HK_SA&&callback=initAutocomplete&libraries=places&v=3&sensor=true
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=988\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=988\u0026hl=en-US\u0026"],null,null,null,1,"988",["https://khms0.google.com/kh?v=988\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=988\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en-US\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=163\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	106936
Entropy (8bit):	5.454757451375032
Encrypted:	false
SSDEEP:	768:ZUNuWWeJtcszQDvJ/v8vAv9vIvDvjvowFDfnEqyAtJBgDaDlZR2jdz+kOKRMfQi9:96
MD5:	0A738C3F16FD673BFC83A2EF94D2F6C2
SHA1:	1353976FCC1AEBDF96BB81393F9ABA796D343688
SHA-256:	ED9607EE929A1420B283E4123804ED7A1F94FBD19698D7E01CF04EFA64A38DCD
SHA-512:	F11FDB3BFE46632C45DC8A7CC01B3DAC1F1F6E9FF4A17F3357B866B82292F5544E176B55682E118D4F1DB30EFC86209C7ADAB9C4E58A52AA7457DAEC0B930FC6
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Bebas+Neue&family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700&family=Exo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Rajdhani:wght@300&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Bebas Neue';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wdhyzbi.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Bebas Neue';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ cyrillic-ext */.@font-face {. font-family: 'Cormorant Garamond';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24828, version 771.256
Category:	downloaded
Size (bytes):	24828
Entropy (8bit):	7.984889525212063
Encrypted:	false
SSDEEP:	384:r8QsyMIS+ufP2VGjD/6A+asgzfs1LrzQVSPXYbBsop8T3BSGVD/NZcIj9twR3p:rbsGwcA9sgzfs50Koj6M2OCbwR3p
MD5:	2B2509BC844E8F9D3D6BD502990A5477
SHA1:	4FDE3C01932D7959285C183440D7B41EA2AC6F6A
SHA-256:	5C58EA32C7093DAE33F856C3B70C51D130277A900B1B93489F86567D9832C9B1
SHA-512:	3242BBEC4C904D6B3796DFB4BAC12644D32E316324B886B38386841191434DB0449DAE55F3A6043DD6A091E4C6B1E5A1C71BA297FA908F1194F6B56A76EB479E
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.3.0/webfonts/free-fa-regular-400.woff2
Preview:	wOF2......`........d..`..........................8.$. .`..P.....d.,.... .1wU!=..=DT.zXDjR...V.qw........_..M\|..\|.D.,.F.......p..:.2.g.!AH............i...z......X....].P%..Nb.N.Md.F..h.3..h.=.a.+;....z..YL/..XK...........JRI%....+.B.-..4..M.0..9..g..@.8K.7....~.,q....#... .D..-D....e.].`...{.S.>.N..+.}.. ...a V...G.S.FU.E.....a.f&..]....{...r.Q.z..=.......w..}%v^.e.'..B.....a...>..a{..M.\|.+?@.G.DG..d@A.......n.AKr ....A.:......-....a.,y.=.....{=.....,.g......M..e...^x.......Y..H@.>U.......i7..J..s.T...t._X... ..pu...K.2..#QV.,2.+k..~G........\|..G.g.s..u$.K.T.Y5.s.F...OB/.I.r.4=.R..F.~.QM...S..zG[.(.YV..I.1....Z..>kG{.V..H#.c.B:...mRU...H.s..Ue.<N...%8.sS.T.m....eTVon..s.f)....R.....;}...-......WY..B..Q]F:..i..z.8/....t.Egm.L.~....n~.!Zya..>..e}u.^. ..{u..B..H.6....J......{../z9.Ti...(C..u.+.y..e../kk.iB.N....R/#.....m...[m...;...{.....r..G.s..Oy..{.[.V>X...?.dM...lE.2[....dk.....3...y.~. ..O....E..\|i.)..W.^.zU.......i.E....E......G...

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1482x662, components 3
Category:	downloaded
Size (bytes):	174638
Entropy (8bit):	7.803370896833294
Encrypted:	false
SSDEEP:	3072:xWZ3qJognNCeRrnqd9cjKEFlVcr3AHg3gWYu4+kdGIpZdBazgT3v:xWZ3y7oeRrn0cjdVwoWKY6WM3v
MD5:	772D2B6EF68DB6CFE9F38FAF550D45C5
SHA1:	5D2C46564A1DF9C4C0273613E2A0B4933762AD56
SHA-256:	CEC4C0FA4B891EF3BBD18D8A89F537B8829C682C4A9DDFE5770D7CAB00612FD7
SHA-512:	53F74AF38B2CC6DE0DAA044D5CD2805014002B7E8DF096CDC8041D6939934F59EC9F652481CE1ABA9EFCA03B54CF3D03F159A555A90C91927EC8E70A5BD8763F
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/389de8b6-ff8a-45d1-b76e-52cbb5c88f77.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..'h..:....d...(..G-.w.....o....e...<7...V.-<A.]k........Ow...#4A...yR.n...?............Ai........^..?.8.....'L.t..).;.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577)
Category:	dropped
Size (bytes):	300905
Entropy (8bit):	5.482945781545427
Encrypted:	false
SSDEEP:	6144:KVIvj27tfrDxyExsO40FyYZNgYCsGsRt0lcvm4N8W3VrQqDW+/fMheYULy/:KVIvj27drDxyExs50FyYEYYlcvm4Nt3U
MD5:	B0E91380D8D1FE01441DF47457D93211
SHA1:	F2E55BA7F64CE135DE25CEB1CA6B723DAC4D938B
SHA-256:	22D7B487C7ED16B6DB70AE6AAD638E15244B54CDF550AD8F0ADD612FCF1B1C69
SHA-512:	5F86A8634DB341D866BDA45EF127B00EDF696B5E2428BFB9EECCD64938202DC1DDE6CEB1505F057928AA828D0F528B88D15F49E65DD79DBDA658154F57A4FC4F
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var ega,fga,gga,hga,iga,jga,kga,lga,mga,nga,oga,qga,gr,sga,tga,mr,nr,vga,rr,tr,wr,wga,xga,yga,zga,Aga,Rr,Cga,Dga,Ega,Fga,Ur,Wr,Xr,Iga,Lga,Nga,bs,ds,Pga,Rga,Sga,Tga,Xga,Is,$ga,cha,fha,Ws,hha,gha,kt,lt,kha,nt,lha,mha,nha,oha,pha,qha,rha,sha,wha,xha,Aha,vt,Bha,wt,Cha,xt,Dha,yt,Bt,Dt,Fha,Iha,Jha,Lha,Pha,Qha,Kha,Rha,Tha,Uha,bu,Wha,Yha,$ha,mu,dia,Su,mia,oia,nia,sia,uia,xia,yia,zia,Aia,Bv,Hv,Fia,Iv,Lv,Gia,Mv,Hia,Pv,Tv,Nia,Oia,Qia,Sia,Ria,Uia,Tia,Pia,Via,cw,Zia,$ia,aja,hw,bja,Ija,Mja,Oja,Qja,dka,ry,Cka,Gka,.Eka,Jka,Nka,Oka,Wka,Xka,Yka,Zka,Ry,Sy,bla,cla,dla,ela,Ty,Hr,Gr,Mga,lr,uga,as,$r,Zr,Hga,Jga,Vy,Oga,Qga,Lx,Mx,gla,Nja,Kx,Nx,Uga,Vga,Rja,Wga,aha,Zy,hla,az,bz,ila,jla,lla,dz,mla,nla,fz,gz,ola,pla,iz,qla,jz,rla,sla,mz,tla,oz,ula,vla,qz,wla,xla,sz,tz,uz,vz,yla,zla,Ala,tha,vha,Fla,Gla,Hla,Ila,Jla,zz,Bx,Mla,Nla,Ola,Pla,Nha,Jt,Qla,jka,Bka,uka,Zt,aia,gu,Rla;_.dr=function(a,b){return _.aa[a]=b};ega=function(a,b){return _.vd(b)};fga=function(a){return a};gg

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 466 x 535, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	109003
Entropy (8bit):	7.990259360606957
Encrypted:	true
SSDEEP:	1536:wWl/p0So0CYLWxWgrBE3xwoNMY2W0tQ3A0aWE6Iug+r/io8SYdEX6FoHU1tuu7Me:rBtC0mfdiiNW06+2nKtjECH7vgO0tm
MD5:	F334B42152E485191B77B3EE168D5F59
SHA1:	ED00701C211581CB46AF7F4D51F204ABD4410F50
SHA-256:	175CFFDC47AFA395B02ECFFF787EE78FDEF724089169DBFE4EB48EF6FE35BBD7
SHA-512:	98A3CE9C2A2714E882852EFBAB08FACC92553AF06AC84B8388231555040AFB84124CA94E9C53899392E88A3355FA993E08E26EF38BCCC03D1616F2A7A2E86F54
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/Calculator/StampDuty.png
Preview:	.PNG........IHDR.............(......sRGB....... .IDATx^.}..U.....2.T..`I.X#..1QL...'.t....T%...P........FM.......b.EM.Di3s.i{....w....{g.y..3w..........Z/.z....=y.O....4..?....b........\|.(B._..N...]...J.....@.O>/tU.....={...../.\|.../.q/.b]..f'F.'..k..G}........1.H.....>..L.H.[F..o.N..u.. .. ..........)`;I....t...;...v/.......W...(f.j.t...3.}....c...$..G..<Pt....H9.....Om'...l..'..\...u.s.$0.A.....(..x`%..,..{...-kWM8sH.7.i.]K.t$..6..K.......tu.p...+ @.......O..o...M/.vdG.nB..h...#R..(....<c.h.....d.T..d..w......:............v.(..../...;CCe.P.p...B%e.........'L&.D.[g.....D%...@1!..H7.....LpPT.M.@...s0...\..C.>..m.b......b.=.........y..7o7C%..#......]._..f...a.a.CcV.sB"P..B.k!.4..g..Wo.....]....pG.3d..,..d..m.G..L..L..$...3VTn.m.....Q...'q....G.q.............G.!@.tE....u-S.<.....<.O..PU.l.H..bUU...eZ.'..q`.5..8.?.v..T.}f_..7...[.y.w;.x\......=G.o(..$..L.H.t..@..h.H..].DC..\.u...{.T..QT..:.15p...{.....v..g.e......;.........LW...

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 282 x 132, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31989
Entropy (8bit):	7.986343993061047
Encrypted:	false
SSDEEP:	768:P++dBmaLONzyAm4xtWNABdsagZp9Ku+fiSpbJ4N:9BLONzhm4GNABiZAu+fiSlWN
MD5:	6DFE14EFB6574148D80931B1DE3DBB68
SHA1:	B613B1169FB848CEE2AE8B5FB9DCEB4072CE83EF
SHA-256:	74EB79CBE8D152B8ECE05B72B33A042B71056457A79ABE8C83DEE2CCFB0E1620
SHA-512:	FAC5E8DB6322B5E0BB880B51B4F86DCC8C37D12C9A10262AD878041DCDED2F5FC1859F32374D03E94B58D7DD1703FF15A8110EFCF961F5D8505F2565D5908ECF
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/cdd27b0c-30b1-4e1e-96d0-fa2224c7e0b2
Preview:	.PNG........IHDR.............O..=....sRGB....... .IDATx^.].x...~.7..........]......:....Tq.B)...!.4...n....\|..&..,..r.....og.;3......t:...6..(P.......k..F.....l@c..6..(P....M...6...6....l..Q..)`...'.m...l....m..(`.@.S..4%Nb..6..(`.....Q.F.....hJ...l..Q..4.=`....%N...8.m..(`...hl{.F...J..6.)q....Q.F........6..8.l@S.$..`....6......l.(q....Il..F...l@c..6..(P....M...6...6....l..Q..)`...'.m...l....m..(`.@.S..4%Nb..6..(`.....Q.F..........p.q$......../...........;T.o....wJ..g/].J...o.yCGZ-....R~.....2V..y.j.....J...8..B..8......k.......A..!!!.J....p....#.u..=e....h.....u..O]FJr. .X.S...T..Z..G{....?O}...mr.t......FZ..\|..>..5.T)...[.~.j.5@...<.....!......{.....h......?...44.j..I.ix...W.\...#:.....^.1..g{......4l.q@...X.f..<.._.H6.Z.W{)z.h...G 4..;0\_.@.`..OLA....2M.... ..B..r.]=L.9......YR...t.(Uj$'..IT.._..#G.....3w......o.s...Ftl.....g....gP.nu,Z2.....+.]...m..WP.....:.4............,.&j....;....S..AH.@+..c^8..x...{;..ai..h......VM.X..........Lll..m

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	dropped
Size (bytes):	184562
Entropy (8bit):	5.629007297098108
Encrypted:	false
SSDEEP:	3072:B57rVrIIJLjJkPCmgev/fZ64PATDEBBaNCuclzoS/XBCy4y7kh6GUCWB1R20rNTa:B57rVrIIJLjJkeevnZ64PA/uaNCuclc1
MD5:	BB161E955A3C970CDD870A4EC0BD6D7F
SHA1:	125E1DA1CD7BF3BBFEB22D24D8D8CCF70800D71A
SHA-256:	FB4171324646676906D68D37FC0E678AAF5655E0A910D565CBCA48771B727506
SHA-512:	B4052D4A5CE7CF80F9C5EE4E3960F7B18F0F4E2B347B4D740E0B03F52362488E60A4853498377CFD4E86E53FE6992B9F067F79EAFAC0435D7CD212637FEB861A
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var jwa,iwa,lwa,nwa,owa,pwa,qwa,swa,cE,eE,fE,uwa,jE,wwa,kE,ywa,lE,Awa,zwa,Bwa,Cwa,Dwa,Ewa,Fwa,Gwa,Hwa,Iwa,Jwa,Kwa,Lwa,Mwa,Nwa,Owa,Pwa,Qwa,Rwa,Swa,Twa,pE,Wwa,rE,Xwa,Ywa,Zwa,$wa,axa,bxa,cxa,dxa,exa,fxa,gxa,ixa,kxa,mxa,oxa,qxa,sxa,uxa,wxa,yxa,Axa,Bxa,Cxa,Dxa,Exa,Fxa,Gxa,Hxa,sE,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Pxa,uE,vE,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,wE,aya,xE,bya,cya,dya,eya,fya,gya,hya,yE,iya,zE,jya,kya,lya,mya,nya,oya,pya,qya,rya,sya,tya,uya,vya,wya,xya,yya,zya,Aya,Bya,Dya,Eya,Fya,Hya,BE,Iya,Jya,.Kya,Lya,Mya,Nya,Oya,Qya,Rya,Sya,Wya,Xya,Zya,bza,cza,dza,eza,YE,ZE,$E,aF,cF,iza,dF,jza,eF,fF,gF,hF,iF,kza,lza,mza,oza,pza,jF,qza,nza,tza,uza,nF,yza,Cza,Dza,Eza,Fza,rF,Gza,Iza,Jza,Kza,Lza,uF,Nza,Tza,BF,Wza,Vza,CF,IF,Yza,Zza,$za,bAa,cAa,cG,eAa,dG,fAa,gAa,hAa,iAa,fG,kAa,jAa,lAa,nAa,pAa,rAa,vAa,tAa,wAa,uAa,gG,hG,zAa,AAa,iG,jG,BAa,DAa,lG,mG,CAa,FAa,oG,pG,GAa,qG,HAa,sG,tG,IAa,uG,vG,JAa,wG,P

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20160, version 1.0
Category:	downloaded
Size (bytes):	20160
Entropy (8bit):	7.988696898218495
Encrypted:	false
SSDEEP:	384:82B8ZtaOZwGsS/SXBSV3KJjjrItzhsUN4AXTadKnA/OxW:82B8clS/SxSV3KFrwhduADiKng1
MD5:	6471B0F9E3A8354D6CA79F46F361887D
SHA1:	5E463C9F52E2C61CE8CD9C1B82ABF00ED66A259C
SHA-256:	A82CF4C922189B14C3F7EBE5A2D8B6CEA17ED594A92457095EB679A43EC1C738
SHA-512:	DB2783931F2EC58B0C55490872CC2B494847E27EC5555820DEDAC97BECA1336EFD868768A31E1DCB42EE931CFE5B236B3C85BD619CBC181F9DD03EFA96999BFC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2
Preview:	wOF2......N...........NZ................................\|.`..J.\..<........x..Z...x.6.$..0. ..2. ..X...%.[:..v..............L..........?&'c...N...b."A..SF8J`....6.@.L).M..5..\...l..t.......~<e..o~..M....X.].k...].j....g...W...K..9.zL...'......!...=U]=s..'............{.-...Y....(Q..%9F.d..i..I."D.<;..T....7.X.<P8....i:-...d.........D...x.-....S..u...9.KpB.i..g.2.x..e..W{..Ik..Z`..p.G.]....=][..\..7.6E....#..b...M1.#.s..4....[.p.@.!./....i&D.Ua*....^..M..&...l..^.....B....&.3._...E.s...=....7.,.[x.....^[!.q.v....J....&@..E..~+...~O.... ..-...Z.......m...)U;E'm.............>Iq..@i4g.....6.N.s..P.qgW..6.\m..Sn.p...mQ.....jo..F..?,.h....M...(.T..vQ...."H...:(..]..f.......!..w.....V.f1[.Ul./..O..i......Vh....)....-.};7.e..ceJ...B..M.R..x..c.-[.g..4..Yn...V.$.H.E..%.p.C.p..8..>(/..:.......X......... AR.".$.1...j.....]..D...G.r9...=.D..P..,....5...<.;T..xPw...........P....P..Uq..uO.n-..Ga...].)0v..`....2..R.O.dk..".M{...o...K.6...t....e..3...p.JXz..p..u...>-

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27377)
Category:	dropped
Size (bytes):	27592
Entropy (8bit):	4.836838119222499
Encrypted:	false
SSDEEP:	384:hfwu4Eyfd7PNRzAmReUtPAM0NuzwpmnWt:hYuqdNReUtPAM0v4E
MD5:	3A57F9DF341838CC106903C71730D13B
SHA1:	15FA32630D25FB5522631EFBFE78723540B18711
SHA-256:	4C6D23EFA8A723D5C117DF0AC6F77441A66D960CF4E9CF4CF20AABD1AC984EF3
SHA-512:	EC590DDA6285EF0D75BCD9DC229E096097B6B4781DAAA3D79D92605B822E4428EC150156C9811C7D3035613346EAED1804FDEF5CF6B10F7855C3BB542A76E635
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa.fa-glass:before{content:"\f000"}.fa.fa-envelope-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-envelope-o:before{content:"\f0e0"}.fa.fa-star-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-home:before{content:"\f015"}.fa.fa-file-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-arrow-circle-o-dow

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4032x3024, components 3
Category:	dropped
Size (bytes):	1112545
Entropy (8bit):	7.9714555723708695
Encrypted:	false
SSDEEP:	24576:PvsMTPKyk90EZDtVfzPjJRtZQLwl+Za8uNt6uLqRb+FeOKiBkH9jyeJ7:XsmKB0EBrrP7iwl+ZMtYDOKBHJ7
MD5:	CCD73EBCF9A490423957FCFA95496F1F
SHA1:	39DAAA7D5A7AEF49A43A52E523A36043A3616596
SHA-256:	FDFA18E631B64F85438087F75BAAF1ECDA109F05C692D6460EA8B0809B654163
SHA-512:	82C13716BD16CC81D5DC446C0D5E138171A908A9A78A59B5E6C37AF8C258160D24F5AE678194FAD142F3F3918FC2BE60E2446F9E283F418B1762C691118E9CD7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............4ICC_PROFILE......$appl....mntrRGB XYZ ........... acspAPPL....APPL...........................-appl....%..M8.......................................desc.......ecprt...d...#wtpt........rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... desc........Display P3..................................................................................text....Copyright Apple Inc., 2017..XYZ .......Q........XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................Z.....................!..1.A."Qa..2q.....B..#...Rb3r..$C......4Scs...%...&5D..Tdt.'6EU.................................3......................!.1AQ.."2a.qB.#R3...C..b..$............?..Z.K......6'"(&..j...+...q.A..(..%f..'.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1485x671, components 3
Category:	downloaded
Size (bytes):	168250
Entropy (8bit):	7.804198780695063
Encrypted:	false
SSDEEP:	3072:mWGL5Z5fy/DWDm4zrSMXqN9xBWgIFAc11h8KDKXQLP5hP:mWGZfGY/bqHi4ca+FPXP
MD5:	8D92F5D697951E1086B50F00120C0168
SHA1:	3CCD03D1D7DC1C7042D50B631E0EEB15CFB3A56D
SHA-256:	0C721E79411D4BD3583F93540858B7029F5D387D2B083C190800415F5A3F4970
SHA-512:	C7868278F9D8B6F407080E30FADF4A4BC75CD0E6586D84D63A233AB67A7737BC8D31F4A825D3955870F81ADC696C460E6589433A9258771974661164B5EE61E2
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/f9e1bfbb-9f36-4121-ac77-feca8b122ceb.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19780, version 1.0
Category:	downloaded
Size (bytes):	19780
Entropy (8bit):	7.9891130697839055
Encrypted:	false
SSDEEP:	384:8/9dvgyeC6xMMA+w1f1U9wArhRk3zjcjXW5OGb4TtYra8hNwnDch:Woye5xM3NnUXrhmbpwr8XMDch
MD5:	608471849F9473ADB650B0BDAD1F52CC
SHA1:	9ABF0BE47629F6F8BE140847242B37E647BF60AA
SHA-256:	0E100B86870EC5CAAA887E0FE743B177D57E02242812A0CD4675781DFFFEA440
SHA-512:	C44D2DE9CD2C98171A720FBB03258A3DA87555A2DD1860D30DC83B7CF4DFAB46E54D97C2FA83905F80A8B710F5252DDC6F91297B44FD6CF7498BF7013DFE3465
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2
Preview:	wOF2......MD.......h..L.................................\|.`..J.J..<.....\..Q..Z...x.6.$..0. ..&. ....J.%.]...p.{>....o......gGXp. E.N...)I....1...,A...P..1...9....F...%'Nz+........d..JG....v........o".......1..........c.!........M....r..O...<...}.=....c.C.Xu..y.........$......'..T..3.....U.Fm.DIJ..d-....L%R.M.....X....+...k..!X.q....c.......f...K+]N.....s.w.`2 ...%4! <.:..@........y..0....J.:!.uQH..d....j..l.....%...iR...N).._P=j5..VL.G.HW8;...'..4r...pRv...pH$.B2.tw.g..f.M!....;wx.?E.=.S. .>..M!.&@...K.v.u].!..}kVu.ph.,.d....Q.=a..ZQ._..'...................i....~.G..$..5.....=..B.._..-......Z..{f"<tk....O...`i.~..e&x...u. ..p.+..._U.}........cI;w..E..zS..-....B...t.....K...t..II...T:l...~..M.EWm.<<]&..Ck.G..)......6.[.b<....2g.6...J............+.K(..mCk..C.x..Ji...........j..+..w....y..^...;.ISVr.S.i.u.J.E"98....7........n&i.........x.....`..'.o~~....f.!H.......J.l.r...mH....k.u.8.`...c...m`.rp....s.fK..B.*0L.y..^...M$.8..A...Ps.r......j

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (608)
Category:	dropped
Size (bytes):	823
Entropy (8bit):	5.08453567170624
Encrypted:	false
SSDEEP:	24:eJvPioGlU9sd033xLpxghnd0sH3xtpx2hnd0sQ3rpAhY:wvPioGysd7DDSDDjO
MD5:	FDEDB74E19E1BFFDCAB908079CABD49A
SHA1:	BC3F6A916AABFAAEA361AC99DA97751CCC272352
SHA-256:	FBFC1A27B2F37BB5758305F7D7633B07F9DD08C9C42658E695C8FA9716967545
SHA-512:	46130A09BB7B4EE3BBDF4C5FA03D0C1A83370B8523CBB3D5817E56E67C9EE34727B8D5B4C0BEC5BC78700E9E400229DD30844D42A00794B27648C461AFE1B0C3
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */@font-face{font-family:"Font Awesome 5 Brands";font-display:block;font-weight:400;src:url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.ttf) format("truetype")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:900;src:url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.ttf) format("truetype")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:400;src:url(../webfonts/free-fa-regular-400.woff2) format("woff2"),url(../webfonts/free-fa-regular-400.ttf) format("truetype")}

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5575
Entropy (8bit):	5.381655996058736
Encrypted:	false
SSDEEP:	96:aOEagaePOEag/FJc+ueOEagnNnOXagaePOXag/FJc+ueOXagnNnOxMagaePOxMa4:9reY2t0Wref2tbTreC2t+Mrex2t9pres
MD5:	24D14C4C3AC2A2970FB0A20E48C1BB5C
SHA1:	CEC86AC8F48D72448FE574C4AC83061536B1DA12
SHA-256:	82BB1E49DCDDB3E9E9B87C82D88C8C2CC968F30D57D8ACAFDE039707ED700C96
SHA-512:	381F8097D978809C9275BE225E5F37951FE69CD521172F50E747208113E78081D4E86555F6CA8B8F24A69C17FA48CD67A19286560F33159F315A2733D9D480AA
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Syne:wght@400;500;600;700;800&display=swap
Preview:	/* greek /.@font-face {. font-family: 'Syne';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/syne/v22/8vIH7w4qzmVxm2NL9Hz_.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ latin-ext /.@font-face {. font-family: 'Syne';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/syne/v22/8vIH7w4qzmVxm25L9Hz_.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Syne';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/syne/v22/8vIH7w4qzmVxm2BL9A.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65321)
Category:	dropped
Size (bytes):	102557
Entropy (8bit):	4.783591457868751
Encrypted:	false
SSDEEP:	1536:hmMCMPMCMjMCM4MCMwMCM3sVMH709gbPMfjSFOTyPGulprfZCU:n709gMGFiyPGulpfZCU
MD5:	B7D524A460C5CEB6420DB3AEC0BE8C92
SHA1:	116337D340E9E3C638647F979E0B7AEC8B38C576
SHA-256:	AEE930D9C63AC5F13C26EA50472E6D6DCDAB908AAFC18687886C7FBA33E0C9E8
SHA-512:	3B8B6CC0D024FAAE938E1111CD7F8B19DCC0204ED32C61F0EF298DDE751FA8C343116ADC025DEC92AADBC45B8B57359426BDD32D56D73058C2B9D96C52C23D60
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-h

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 550 x 262, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19289
Entropy (8bit):	7.929935484460144
Encrypted:	false
SSDEEP:	384:FzWDBEeoY98EbpQKnr8RkDZAVHy90d8JDMWPdKKSk5PMW++tozLuN:oDZ198CbjDZxc8Jkhk5UW+yonE
MD5:	6ED110609CC7149F0E04481725909B1D
SHA1:	E7E1E77F2B64B363293ED0D8FEA665D3AB877403
SHA-256:	7730490D066E3732770CF6CA5059023F2619D69F2BFA7D9648745547652E97B5
SHA-512:	C0362C4CE756F0D64B12FCC4AFCF9E54541EAC64929D4A5417520A242F51252404A84910842C66672B2F08EB0A4ECDAE140FC7EDBE8D475994B9A21E97A2F78C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&.........Q.^.....bKGD..............pHYs...#...#.x.?v....tIME.......L].W.. .IDATx..w.cU..?3.....K......)".....).H...AQA@..,...(.b.A."M).J...,l(........q.KN.&3I&7.d....33...s.=.{.....B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!.d.....~...P.O.....yF.z)D..-...X0.`G`qLw..<F..B..3..4.$....A..H-..;.\6.}5.]r.m..I..r.9z.B.A.-...`] .z...s..[)..5.^...........M.....@!F..v.f...i...B2.2p..9`g`n..cm.L`e..1.e!.`)N$....\|.X......lb..dj...."r...[O...........=F51?]8+M...K3.Z......../[=.W..c-.....H.....j..LM...>o..o.=&NB..v.. ......%..`a"Dgv..3.a.!\|...0.M..E2.....H..!.D...w...V.YF......<L...>....p8...W...C...e...@.0....$...[..<p2.\|.vh...L.\|.g..B.K.........E./J\|.......l"..`o`{.^....e.2.L.......$..9B..x.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1482x650, components 3
Category:	downloaded
Size (bytes):	195237
Entropy (8bit):	7.739079909590872
Encrypted:	false
SSDEEP:	3072:zelwg5E8sLdaHNUyecGnOkoGRnXEgPSg+d4aBF+OPOTh4kS4949Nk+tUYsucLcn7:zOwyNHNUye7Oko8XPSgkBF+OPOThtS44
MD5:	185520FBA1997EB59F37DBDDD5BE9D7B
SHA1:	C6A6EB2B70A6796D304CE046645791EE836FFCC0
SHA-256:	EF60F7E56877CB186D599CC368677DBA615350D3ADAA82A269BBF47856672462
SHA-512:	D8C09A26AED14EBDBFEEF345B50BDC530F60CD11530B4F60F83B8EFCD5A5F208637842AA65787CF8DF636B5E833877461CA1701BFD9599E2C47205D57C40AF0F
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/801b4073-e639-426d-b891-9b26b1b9a643.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (2063), with CRLF line terminators
Category:	downloaded
Size (bytes):	167651
Entropy (8bit):	4.932326269236075
Encrypted:	false
SSDEEP:	1536:H3MfY76EIhy6rxpBc9fGIKV9g9aygt5cIj+gSojlRjuqSuAFxcOuw8o0raSMB5qC:JFSe72jlRx0FxvnQC
MD5:	88040EB035E1E1E0F9FAB4B5002C903D
SHA1:	3C8EFA7D556F4F0DB5FAAC60E731AA8BDA57E0A5
SHA-256:	87A9A3FFE84161120548B405A04E01401F5ACFABB95827B0EF2E6963BDC1FAFB
SHA-512:	D6E863AE444DEB18240EE16379FC329F7AE0548DF732FA74F31D482ED56C541BE4D1D29300226299365C5E99550D4F7DCDF7CAE9F5C7A0020DEB71EF479D8553
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/sweetalert/swal.js
Preview:	./!.. sweetalert2 v11.4.33..* Released under the MIT License.../..(function (global, factory) {.. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :.. typeof define === 'function' && define.amd ? define(factory) :.. (global = global \|\| self, global.Sweetalert2 = factory());..}(this, function () {.. 'use strict';.... /.. This module contains `WeakMap`s for each effectively-"private property" that a `Swal` has... * For example, to set the private property "foo" of `this` to "bar", you can `privateProps.foo.set(this, 'bar')`.. * This is the approach that Babel will probably take to implement private methods/fields.. * https://github.com/tc39/proposal-private-methods.. * https://github.com/babel/babel/pull/7555.. * Once we have the changes from that PR in Babel, and our core class fits reasonable in one module.. * then we can use that language feature... */.. var private

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65294), with CRLF line terminators
Category:	dropped
Size (bytes):	78135
Entropy (8bit):	5.198158768678848
Encrypted:	false
SSDEEP:	1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZd:u36WJr9ixz
MD5:	2591536DC6F1D305043BE991897839AB
SHA1:	BCD392A2D95051811EA25008CA85CAA4BB0C4FE8
SHA-256:	237E83161BFE098CBEFDB3ED2EC69D4A7F2CE17A24F7CAA14D9F0AE5DC0A8291
SHA-512:	5B10DECE21AC84476C012D8FC54E068081AC54D2FF2590ED157D254C67DB1A2FEA9761B786884826C4D84CE8B1E6309CE8A52700EC57A76AA8396C749E449D32
Malicious:	false
Reputation:	low
Preview:	/!.. Bootstrap v5.1.3 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 132, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48256
Entropy (8bit):	7.989581474573243
Encrypted:	false
SSDEEP:	768:DTTXHRofzeic4UHDDTanCYIbVMfbGGh5Grhl+aQvSGrOEkIwbUBDNZqqThm5zb7b:DTTXHRjhDUIbVMfH5G1aprOEAbU3gtzz
MD5:	2846546A21A0E4237B084C58C39F652D
SHA1:	BBC241283793255DF1FE601B91845496AF8D824F
SHA-256:	82F23A8846BC04AE0F2EA8A786B43BA853ACEA225146B77BB6EE26C4B083F973
SHA-512:	C6B7CD7E1560F6D90C6E984928097B85CC9121200BE58A096CD36039752352AF3919155D7587D1D1662616A9BB712CEF528994BA6FE66A72D7BC7F204D4B6B3E
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/logo/huttons_logo-removebg-preview.png
Preview:	.PNG........IHDR...~...........@7....sRGB....... .IDATx^...%Wu..W..N..iz.&k.F .6.8a..\|...../.....d..ux..H"\.......`_c...5. .Y .4y..g....[kW.s:.........T.S.k.....%a............75...............,.~?J.....{....}....................Gi..0......./....o.................i..1 )bPd.q........w../.................:.........y.+_../~...5..b.oE.V..W...>.X....h......Zh.5)F,.q.......2. ......>Lj...C{....X.M..5.0.0Vi.It.)..........w>p.....[...W...c.....O?..m.vF`;G....y..O...^....x.o.. ..u..#..e t[.....H.....i.......6..l{.yh...[........ ].....<\|Hq.irm.q;..7.gi.=.....9...........Q.......k.fx.;.....$..S...{........'?.......0\G.'.S.y..>J.H..4M.F.4MC.H..."A.e.-.......H..M.w...C.].#.Hi...P.c~.! ....G....7..T.w[..w.r..........\|Vq.....7[.0L.I.F.Mn.\|..w...;#0........../N...eW....D\|&....(..d?.)'.B..!M!.....@t~._$g..{..r.PB.[...j.>}.I4....+...-.\|E3~.my?`.....d....+..{l.....<.v..]7.$..f&.pg.<..f.....X.x.O=...f.S..dA.$.Q=...L.t._,..S..8.".rB./a..Y :..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65321)
Category:	downloaded
Size (bytes):	102557
Entropy (8bit):	4.783591457868751
Encrypted:	false
SSDEEP:	1536:hmMCMPMCMjMCM4MCMwMCM3sVMH709gbPMfjSFOTyPGulprfZCU:n709gMGFiyPGulpfZCU
MD5:	B7D524A460C5CEB6420DB3AEC0BE8C92
SHA1:	116337D340E9E3C638647F979E0B7AEC8B38C576
SHA-256:	AEE930D9C63AC5F13C26EA50472E6D6DCDAB908AAFC18687886C7FBA33E0C9E8
SHA-512:	3B8B6CC0D024FAAE938E1111CD7F8B19DCC0204ED32C61F0EF298DDE751FA8C343116ADC025DEC92AADBC45B8B57359426BDD32D56D73058C2B9D96C52C23D60
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.3.0/css/free.min.css?token=a316664222
Preview:	/!. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-h

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=3544, bps=158, PhotometricIntepretation=CMYK, orientation=upper-left, width=6297], baseline, precision 8, 1450x816, components 3
Category:	dropped
Size (bytes):	1825777
Entropy (8bit):	7.928990785343967
Encrypted:	false
SSDEEP:	49152:7MeLWDxWFgBNkNX2mdg13qGRMtonP6H1zihBojPa:7YDFBNkHG3zM+P6cD
MD5:	D401EDBF4FE4B6232E2BFACBE654867B
SHA1:	9B27F0E2602F810064833C9E37696930C73978CB
SHA-256:	990349E6EE382B1323A7088A2E206F5078BE62660E8284226D1EC6D6A1F74070
SHA-512:	D98D56CB835C1119DE2C55AA380BC1B86A5189246A283C55F786C78DFF4F85B9A35F473B28B06A1415CB4187A82D018E806A478220B5CEFE263635BCD3F78177
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....'Exif..II*.......................................................................................................(...........1...!.......2...........i.......................,.......,.......Adobe Photoshop 24.5 (Macintosh).2023:06:27 16:07:43...........0231.........................................XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch...

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 510 x 489, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	139052
Entropy (8bit):	7.987941981826959
Encrypted:	false
SSDEEP:	1536:eWC+dctqrMb4xRCkcF7J5UYG6WL0HvHUPqfB3JzlpsFkmq0B4PAn1CqId+b1RqmX:ecGtqwpUwPUPKmFpq0B4vdebyS3x
MD5:	B34B88EF11850CB2B87F62B8D171DC93
SHA1:	E765C8AED8C7C0300CE5BE8D1A4CCA45C28A68F7
SHA-256:	E58F9179584189ED8C99F96B6F2D405BEEBB95B529E2C6D165AF755E6AF26BF4
SHA-512:	3A2A20FF714B72229189B53B8880B8330D98D021CEC9B3795B18E31193A1227E2BBA76C4EB5E0E8CF406525D0B39963DCDF26DCB1F0689465D2F95C7F3853560
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............c.^.....sRGB....... .IDATx^.]...E....w.A....3.g.E%(.H...."A@.P..."..DrF@.. ..g..... .....N..........7........TW...U]...y$..v.b....a...~p...~:w.}U.....&..!..Ts..J.H.....!.y.......c.DQ....w.z..6.....p.....GBy.h..."yM.h`.g[.3........+.j......(.#.....@Jk...m`...i\|..........sy....4....;..7).......$1...}..=...9..jy..(..a4.d.RL....d..z......].......Z).2.._f.\|.....Q2..h.Y...X...............Q..e@4j."..$...Qj 95.8......@..?.C.p.....l._....,.}C.c+....=z.............\|......F(.".#.}...M.YH......M...A<O..+..2 ..s,...c.z..u..{>.l.<....s...q.7.i.~..pU.. .............3...>..X.'5.c.PJ9.cx..\|\|...{E.]1......N.co]....O......:.E....G`..7..w......@Z..:@A.......T.c.......xR.I....>.....B...(......q..0..u..\|.........Q"..~..z..<.....`S..f...<...4.......xR.R.>.@...?.>z..{L.&.....u"..y<.?v..{....\|<..^4..>........is..=..b..#l.....M(.....[............P....B....Tj.......x.NZ....}..<0..''M.3...T.\.yE....@..~....B~... ....8..8...r.....'..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 819 x 496, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1051786
Entropy (8bit):	7.993513645834192
Encrypted:	true
SSDEEP:	24576:3S4WBjnj1xYUUxP/bfnIkJUWDIMeff5dxWAY2bsRKhAYm:3IpxRUxHbfIkJUrRRdx3gMhO
MD5:	7D5B410F4790FE6F84694D5C41E2FD05
SHA1:	3F14E3D9549D971E896EF4466475BD731ADDDED9
SHA-256:	7800B46B9A418FA4E1AC3D3F05530D49056665505147984B7248BCD9E99838FF
SHA-512:	8E32AE99EB25945FAAA3B6AD2A6BD6837F030A5282C8DBE8DB3A179EE2259281208801517A53804E0363580E90A48C68CE8F278D061E6B87CCD30FAA5945848B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...3..........H1.....sRGB....... .IDATx^L...].u..N...3s.`.0.t. :...,b.(V.N.8....K.S$9_.8_..}...^^dI.%[.D..IQ.M, ....Qf0}0..v..e.... ....9.?..{...........E..B..@_..V..i4QF.^...@8.Dm.-.l.B$.E)......8.;...Y...d2.W*.e.P)..Wa.6,...6..m$.I\|...._>.$.P.oM........qi....<.K.H.R..............n\.t...A$.G.......Z..B...X......].h.p,..e.lX....,..dl..X..?wl.p..........j...k.....eK..{.cl\|.............\|.mmIl..;..V.....E2......._..........0.f..X.+.W...........b..S.F..a....7m@$........%..m.]........!+.B.....$................u.Q<.......j..h:.m..!...../.....,....9EK...[..7..g..1.v.....0:5.?.._.;..Jv.......fN....E.i..B.nm..z......)..4.5.....rY.twcxx.g.E8.F.....3.18..C....-.^...Z..y..}...hq.\>..&wh...../...;..3rm.VS..,4.&\|..Yo..-.....}..8.4.'...h..;h5[.V-~..stOr....C...V.}....5.,..y..\|.<.-....W....../.h>\|^..Z........#....>`........7}.:\.G.a...2.....n;......m....{-8...c......&c.<..d.hW...k.=~....1x...M...7.~........G....-c+...

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577)
Category:	downloaded
Size (bytes):	300905
Entropy (8bit):	5.482945781545427
Encrypted:	false
SSDEEP:	6144:KVIvj27tfrDxyExsO40FyYZNgYCsGsRt0lcvm4N8W3VrQqDW+/fMheYULy/:KVIvj27drDxyExs50FyYEYYlcvm4Nt3U
MD5:	B0E91380D8D1FE01441DF47457D93211
SHA1:	F2E55BA7F64CE135DE25CEB1CA6B723DAC4D938B
SHA-256:	22D7B487C7ED16B6DB70AE6AAD638E15244B54CDF550AD8F0ADD612FCF1B1C69
SHA-512:	5F86A8634DB341D866BDA45EF127B00EDF696B5E2428BFB9EECCD64938202DC1DDE6CEB1505F057928AA828D0F528B88D15F49E65DD79DBDA658154F57A4FC4F
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/13/common.js
Preview:	google.maps.__gjsload__('common', function(_){var ega,fga,gga,hga,iga,jga,kga,lga,mga,nga,oga,qga,gr,sga,tga,mr,nr,vga,rr,tr,wr,wga,xga,yga,zga,Aga,Rr,Cga,Dga,Ega,Fga,Ur,Wr,Xr,Iga,Lga,Nga,bs,ds,Pga,Rga,Sga,Tga,Xga,Is,$ga,cha,fha,Ws,hha,gha,kt,lt,kha,nt,lha,mha,nha,oha,pha,qha,rha,sha,wha,xha,Aha,vt,Bha,wt,Cha,xt,Dha,yt,Bt,Dt,Fha,Iha,Jha,Lha,Pha,Qha,Kha,Rha,Tha,Uha,bu,Wha,Yha,$ha,mu,dia,Su,mia,oia,nia,sia,uia,xia,yia,zia,Aia,Bv,Hv,Fia,Iv,Lv,Gia,Mv,Hia,Pv,Tv,Nia,Oia,Qia,Sia,Ria,Uia,Tia,Pia,Via,cw,Zia,$ia,aja,hw,bja,Ija,Mja,Oja,Qja,dka,ry,Cka,Gka,.Eka,Jka,Nka,Oka,Wka,Xka,Yka,Zka,Ry,Sy,bla,cla,dla,ela,Ty,Hr,Gr,Mga,lr,uga,as,$r,Zr,Hga,Jga,Vy,Oga,Qga,Lx,Mx,gla,Nja,Kx,Nx,Uga,Vga,Rja,Wga,aha,Zy,hla,az,bz,ila,jla,lla,dz,mla,nla,fz,gz,ola,pla,iz,qla,jz,rla,sla,mz,tla,oz,ula,vla,qz,wla,xla,sz,tz,uz,vz,yla,zla,Ala,tha,vha,Fla,Gla,Hla,Ila,Jla,zz,Bx,Mla,Nla,Ola,Pla,Nha,Jt,Qla,jka,Bka,uka,Zt,aia,gu,Rla;_.dr=function(a,b){return _.aa[a]=b};ega=function(a,b){return _.vd(b)};fga=function(a){return a};gg

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=3872, bps=182, compression=none, PhotometricIntepretation=RGB, orientation=upper-left, width=7128], baseline, precision 8, 1450x788, components 3
Category:	downloaded
Size (bytes):	1606744
Entropy (8bit):	7.930461056408219
Encrypted:	false
SSDEEP:	24576:nxs1tA6sANOBVxH6AXSOen5QWwwI7KVUCAbQVMrrD81ibhiatEI659VBTz4l:GomuVxH66gQnwI7OqbQOrrA14ltK3BG
MD5:	23DE7A5206D1BEF88EBE75F503E41635
SHA1:	DBA7ECA3D25B2660B8422B5C8C3BD94F945AE2C8
SHA-256:	C7F6E40AB4558FECDEA5986DB401E5A0BF8B27D0EFC9DEEF7E80A28C4187771D
SHA-512:	B8C90E9697E2B8DCEF75691F8D541D5852F0D18301F0DBA5F76D0368FA746F512B6CCA7E951A5DF0A29BA3CF31A463D81D3828C75EAF74D08709E2B7EE79AF03
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/c4f90d03-3f83-4812-97de-557314d69352.jpg
Preview:	......JFIF.....H.H.....,Exif..II*........................... ...................................................................................................(...........1...........2...........i...........".........H.......H.......Adobe Photoshop CS3 Windows.2023:06:12 11:59:14...................................N........XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 3008x2008, components 3
Category:	downloaded
Size (bytes):	1100445
Entropy (8bit):	7.919934594136108
Encrypted:	false
SSDEEP:	24576:PwjL4bGIpYVlP/FIxUeZhbwVubC8iTJObGvpgXXBC1Y:PJaBz/OxHZPKOO2QY
MD5:	48EDDC08A8C038B0844774C445CFD0DC
SHA1:	2E46997DF1C01AFD6ADD5D1C57BFBFBC4984EF2B
SHA-256:	BE26CB699B18291318A84E74037378013F1D46BEC93D3277968CE37C4CFDC272
SHA-512:	CDA00B8C155387EDFB776066D89645FD8778BD2DE247C8D820D7D80A7AAE0F195C4ED2BC81BD6C177491EEDAA2ED2E8DA179F00C707A61691DAB6C5F7DB3EA89
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/content/templates_assets/templatey/section-fourty-bg.jpg
Preview:	.....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....brS......8A...zb.n..JG....S..Ib~PF=h,_.....{P....+..z..<......aV....ph Qn....<....K\|.I......T`.... .J`~T.U...P3..O(...zP....G\.".;....<g.0.D.8.q.*....0.9.ri...t\|....V4C....A\.....4........n.W.z.B...\......s.P4.7...`z.N.....N..#C....(.D.........v...=.)+......:P1.,.W.x.......h'.p...\....(..6...........4..@[....r.+.#;.{p..../.2.....H.......SN.n.].b:..q...h.u^;.K...

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 579 x 398, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	422955
Entropy (8bit):	7.995609616507028
Encrypted:	true
SSDEEP:	12288:F11+j6d28+cvO2v1F/RM2Zkt2xtA3/uAJu/s2SFQY:F11X2cnv7/RMKtPA3/uC1FB
MD5:	136D2EE60C3FD9397BBE8837205DC582
SHA1:	B4D6115D5BCDA093591BD0C370D7B29E3D4A3E65
SHA-256:	DE6E5EB4A16919D400EFE0849C5A50B5339EEFE0E864F72945606C8547019127
SHA-512:	40BA4150E5E7A61ACA110C998D9CE58E0A0EB284A1EC6F3EB0445BF1E148C22094D4CA19A9BE6BE4BF6F7CB59DDC48D9CC6B904BFAE087F3BEB6E8E70F8DB9FE
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/27679c1f-0391-4dd3-b767-bc38f04cf61f
Preview:	.PNG........IHDR...C............l....sRGB....... .IDATx^....iV..<.3...d......bPh..FPA......[m.B$..C.Fq.V......).....;.i....<...E`.E$.z.".g....]...Ve........../~....b..F.Z.j....&..+.Jl..h.Z.Z....F....V.uT+.h..q}}.w....x....>..F....U..X,.}..n..l.... V.U...8==..d..FC...v.l4...z..V[.]...j.b.X.3\.^..n...byxn>..vc...r...7[...z..>b.\F...7......^.....g.Y..X.W.l6.NZ.f3b...f..ZM;.\-.}..g.....wQ.....~.Q.D...j.ub].\..z...b.....5....z.E-..[.^...;.3.L\|.kD%..%..L..j6.^.s.0.{..<W...\|...k....Q.....Y... .>.5...l.1......t:.n..{....1..b.^.]....{........6..u.j..5...u...X.G.fL.s..b...g1......(bo.mw.Zc...t.N..$NONc:...&...gC~c...l..fC..L..g..m...{%...:4$......Vk.......\......b..}.V...S....\...mw.lY.......f.5f-'...\|..lk....ga.;.vTX..\.e...k.u....@..^.Ut......n.b..H...A2.{lw...[...r.y..vZKd.w.5......5e......s.{.P.V...Y..rQ..[..A_p/.JE..a...e4.;.1..c0..h4*.d..[............F.XV..9....s.R.....S....{...b....._...v..<'..A~yG.....{.fS...f..&:..@.{o.I}..Q

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	22701
Entropy (8bit):	4.604252370370754
Encrypted:	false
SSDEEP:	192:vJVZS5FIBZyvI6+t+zSJQIng0EK9nrCuN3ZqV1Z75xeeKRx:bk5K/aItmS1oV1l5K7
MD5:	07F1F63DD438F13F37E8FD2404F85F77
SHA1:	1A8F182A08CE1CE40BFD6B7F39BA08AC41C44213
SHA-256:	1791474D51E9CD0BD80634BE1A675F21D554A4ADF177C4958A1E96942AE27361
SHA-512:	6B9B5FA13360DCC64FAD9808B5F1E63014709AF2E4C7A62577427C480A2D63B1B041307B7264D4DDACE774858178AA2E0A9FC0FD1789BB6B8B5011D6E716CCA6
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/js/contactForm.js
Preview:	....var checkUnitType = $("#checkUnitType").val();..var websiteLogo = $("#WebsiteLogo").val();..var currentUrl = encodeURIComponent(window.location.href); // Encode the current page URL..var WhatsAppNumber = $("#WhatsAppNumber").val();..var encodedWhatsappNumber = encodeURIComponent(WhatsAppNumber);..var weburl = $("#webUrl").val();..// Construct the thank you page URL dynamically without explicitly mentioning the controller..var thankyouUrl = '@Url.Action("ThankYouPage", "Home")' + "?url=" + weburl + "&whatsapp=" + encodedWhatsappNumber;..function validateContactForm() {.. debugger.. var name = document.forms["QueryForm"]["formName"].value;.. var phone = document.forms["QueryForm"]["formPhone"].value;.. var email = document.forms["QueryForm"]["formEmail"].value;.. if (name == null \|\| name == "" \|\| phone == null \|\| phone == "") {.. Swal.fire({.. icon: 'error',.. title: 'Error!',.. text: 'Please fill in a valid value for all the req

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x420, components 3
Category:	dropped
Size (bytes):	166287
Entropy (8bit):	7.972387058480307
Encrypted:	false
SSDEEP:	3072:ViysV4VoCJLQ/ju1qv3k7lZHjE6mrRVMcdwuDvBsCA:Vixp8QbzUZRYpr3MxuDJZA
MD5:	1FBBA1F29C2C9A00A5C3C8235F08B4E3
SHA1:	6AF017784CDD778D958CE60D5B310DD0D7E1753A
SHA-256:	71CA9E5E92249F965B8C37727256193969397060FD46A9DE056DAF60A04AEE50
SHA-512:	E10F5CBA8CF3A0505F201880138C3CEE672C600CFD56B86A4388E27B1D513C6226259B050F9AE422F4FD856C9973AF202907C1EA3B4790946F43D5A3EFA2A694
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(..o.(...gG.0D......1N8......_....YA...J..$L.A.....\|.iB.....}..r.{T.'..;}#L..n.. ..e.....Q....#&.4.\|5..Tw....g...P.$..@V.1...<U.j.n.w.3n5."..&.V.x..j..@$.cE......}-.`.=..G.j.t.Wh......8.'.48bd...Q......<.$..5.xo..I.5.......+^....U..Zk.FNK..t...XA3.c...K...F~..._Z~.....E....f..,Ik.A.....a.>.=........&.Yn./..J].[-..H..;..`w.>.....3\|*.#.E..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (360), with CRLF line terminators
Category:	downloaded
Size (bytes):	93440
Entropy (8bit):	5.124671423032388
Encrypted:	false
SSDEEP:	1536:Z5u1MHUCBjloTO6JyqaiYhKPQ4ZarMMEpEa9wleUBj/DvRM3VX:Z5GUjloTO6JyViPZpMEpFalrBj/DvRMt
MD5:	C1A79EA184D48EAC08037A68032EE093
SHA1:	2BE9BD99A52C926049F988A87A38F668F5E2E9D2
SHA-256:	93AB8AE2581EFB90C20445709B7402E82BF74100B1446860305BB5D118917775
SHA-512:	A7AC0A94829F4D9868A49BDB76BF6863E44FF1E2941F40B4D316778058FAE968D8BB7BA77D57F4B0ABBBC027FC6AFBC914666A76476091C3D6782ED12D370BF4
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/microsites_assets/js/owl.js
Preview:	/*.. Owl Carousel v2.3.4.. * Copyright 2013-2018 David Deutsch.. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE.. /../.. Owl carousel.. * @version 2.3.4.. * @author Bartosz Wojciechowski.. * @author David Deutsch.. * @license The MIT License (MIT).. * @todo Lazy Load Icon.. * @todo prevent animationend bubling.. * @todo itemsScaleUp.. * @todo Test Zepto.. * @todo stagePadding calculate wrong active classes.. /..;(function($, window, document, undefined) {...../... Creates a carousel.... * @class The Owl Carousel.... * @public... * @param {HTMLElement\|jQuery} element - The element to create the carousel for.... * @param {Object} [options] - The options... /...function Owl(element, options) {....../.... Current settings for the carousel..... * @public.... /....this.settings = null;....../.... Current options set by the caller including defaults..... * @public.... */....this.options = $.extend({}, Owl.Defaults, opti

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4944
Entropy (8bit):	4.856903296904773
Encrypted:	false
SSDEEP:	96:3QZStP+nX2an6jRAe2eq12JJUu8SK1ArSTSTLxNJFdpyZ5JFa4SJobVt6m:iS5+nX2NRpI2zqSK1ArSTSTtNx0a4SWl
MD5:	55D9DA1B0BA17DB621639FCB32D079F6
SHA1:	03094021DE9E3C2CAE81CD08A6065AAF294D07DD
SHA-256:	1E63A904576B09752AAF43FCCDD342C6F3EC90E1AB33542BDC53E76BAB7CBCD2
SHA-512:	37D4326CE4B08D8F59883C4D571E65B867055061D0687EFBAC13A1E43E3159DD2C91112110AFA7514B7EBA6A58ECA631534C145C360719237FF4293A1A07A897
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/microsites_assets/css/owl.css
Preview:	/*.. Owl Carousel v2.3.4.. * Copyright 2013-2018 David Deutsch.. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE.. /../.. * Owl Carousel - Core.. /...owl-carousel {.. display: none;.. width: 100%;.. -webkit-tap-highlight-color: transparent;.. / position relative and z-index fix webkit rendering fonts issue /.. position: relative;.. z-index: 1;.. ..}.. .owl-carousel .owl-stage {.. position: relative;.. -ms-touch-action: pan-Y;.. touch-action: manipulation;.. -moz-backface-visibility: hidden;.. / fix firefox animation glitch / }.. .owl-carousel .owl-stage:after {.. content: ".";.. display: block;.. clear: both;.. visibility: hidden;.. line-height: 0;.. height: 0; }.. .owl-carousel .owl-stage-outer {.. position: relative;.. overflow: hidden;.. / fix for flashing background */.. -webkit-transform: translate3d(0px, 0px, 0px); }.. .owl-carousel .owl-wrapper,.. .owl-carousel

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (617)
Category:	dropped
Size (bytes):	559447
Entropy (8bit):	5.6838609237395215
Encrypted:	false
SSDEEP:	6144:APPp3i5djotqHRUANEU0p6VfJyrmaU2xUEV/ZQbZFPyIbAnPT0J7106znOyGVnTL:A5y5djoWNYYdJsgFPyIbCTI0y7ACVLC
MD5:	99210E7C2195DE81C0EEDF98787A69B3
SHA1:	7B26C66058385B60109AA6129C2161A399A6034D
SHA-256:	5F75BFBFBF0C7CAC2C87D6CA5DE0661AEDC188B0900B6CEF5EFBAEA134B53302
SHA-512:	C3198D7943B3311679D77BCFFEA75D7043801277BF03AC10CA20BBE424E9AE896C060C7E0EF4143E23C2A41E367917A258404FBA428099316705B7252AEA8A6B
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var E=function(){return[function(K,v,L,Q,d,x,r,w,f){return(K-(((K&55)==((w=[2,6,"P"],(K&60)==K)&&(L=LO.get(),f=a[27](33,v,L)),K)&&c.call(this,v),(K\|w[0])>=29)&&(K<<1&8)<w[1]&&(r=a[0](72,v,L),Q.I=d\|\|0,Q.u=Q.I,Q[w[2]]=r.UA,Q.Z=r.buffer,Q.H=x!==void 0?Q.I+x:Q.Z.length),w[0])&16)<8&&(K-3&15)>=10&&(N[w[1]](63,"INPUT")\|\|(C[w[0]](w[0],this.u,this.V(),"click",this.N),this.vL=null),this.xV=!1,V[20](12,"INPUT",this)),f},function(K,v,L,Q,d){return(K\|((Q=[9,895,11],(K-6&7)>=3)&&K>>2<Q[2]&&CO.call(this,Q[1],14),.Q[0]))&2\|\|(L="",L=h[5](37,v.Cr,"imageselect")?L+'Select each image that contains the object described in the text or

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58390), with no line terminators
Category:	downloaded
Size (bytes):	58390
Entropy (8bit):	5.170243133633161
Encrypted:	false
SSDEEP:	768:rXHcEv9zrOhA6GTHLuBhbXHcEv9zrOhA6GTHLuBhX:z85VBhD85VBhX
MD5:	19D8CFF13AF010A3A849E12F156E6525
SHA1:	25128755006DFFE8B908E00A8D3434AD2D9B3955
SHA-256:	9D6D645646D9CEE6880C4728DA66D74C7768433CB857184A7D4334D1EF259CE1
SHA-512:	1CDF276456F48FFB51CD27006AF702A64C6CE2CFC9283C39B2DD204A94FEB1D824D09BECC3CF8BA7D3FEE14A026C82C6C18F6BA4BA54CEF4F2D73022B12CBEDA
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/css/jquery-ui.css
Preview:	.ui-helper-hidden{display:none}.ui-helper-hidden-accessible{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.ui-helper-reset{margin:0;padding:0;border:0;outline:0;line-height:1.3;text-decoration:none;font-size:100%;list-style:none}.ui-helper-clearfix:before,.ui-helper-clearfix:after{content:"";display:table;border-collapse:collapse}.ui-helper-clearfix:after{clear:both}.ui-helper-zfix{width:100%;height:100%;top:0;left:0;position:absolute;opacity:0;filter:Alpha(Opacity=0)}.ui-front{z-index:100}.ui-state-disabled{cursor:default !important;pointer-events:none}.ui-icon{display:inline-block;vertical-align:middle;margin-top:-.25em;position:relative;text-indent:-99999px;overflow:hidden;background-repeat:no-repeat}.ui-widget-icon-block{left:50%;margin-left:-8px;display:block}.ui-widget-overlay{position:fixed;top:0;left:0;width:100%;height:100%}.ui-accordion .ui-accordion-header{display:block;cursor:pointer;position:relative;margin:2px 0 0

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (564), with CRLF line terminators
Category:	dropped
Size (bytes):	32467
Entropy (8bit):	4.679164328251552
Encrypted:	false
SSDEEP:	768:/4h0gRA7RA3R+R5+ERA0R+NH0ADH0iMoDU0vEEcuXyJtTN:/47RA7RA3R+RfRA0R+NH0ADH0iMoDU0K
MD5:	2876E520C29EE9907425853AF278237E
SHA1:	ECB2698F47FBF1CABE88ABDC9FDDD3E2629F1ECA
SHA-256:	FB2687577CC0B7D5BE8C510B4AE3F76C1BBC9ADB43D67B0431D58C19CB5A7AB1
SHA-512:	D41CBCF871D010C9CD8606DCC8423BD1211670B8535DF038AEC77BBEA607CCE8E7978E23FED2BE2307D6C68CE36859685E91E1254344A85CD60BA9D57920E812
Malicious:	false
Reputation:	low
Preview:	/*************************************************************************************************************..\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\| TABLE OF CONTENT \|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|..************************************************************************************************************..************************************************************************************************************....01. Revolution slider..02. Sticky header..03. Prealoader..04. Language switcher..05. prettyPhoto..06. BrandCarousel..07. Testimonial carousel..08. ScrollToTop ..09. Cart Touch Spin..10. PriceFilter..11. Cart touch spin..12. Fancybox activator..13. ContactFormValidation..14. Scoll to target..15. PrettyPhoto....************************************************************************************************************..\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\| End TABLE OF CONTENT \|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|..*

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8276
Entropy (8bit):	7.967721723758612
Encrypted:	false
SSDEEP:	192:6S+NsNa/JEiB+UwMFuoYXI1muUWD0JY6J09VBxsoUhtgNa8o2:1+NFBEi+Euow3uwW9VWQ
MD5:	DA27E6C6CB6EDF358B72BEB443DC9223
SHA1:	9908E14079F609AB1B048AB416ECC6926C3A72A2
SHA-256:	A0BA0BDFD0EC30E03330F5966251847CA2E19FE762EE2294AFD0F0ADF2C2A230
SHA-512:	8914593D71E6509F9AAB678A14D9AD42817102AEA062A6B99532530C1C7F816D57D2D02E566FE31A8486C0AE8BCCAA0CB5A51FE737CDD36CDC5F9B66FE78A898
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......pHYs.................sRGB.........gAMA......a.....IDATx....]e....g..q..m...c.!bjp.......MI\..4...k0]..K.,a...hHj.....).Y%....j....66....V.vZn.q.us.}_..=.....y.s.......i.=...\|......#...[..?..1.Z..........Z.. `...........?.F...3.uu...z...$.qJ+.....M....o.'u.xzclbs..[."..[5....^...R..S...u..;...Z....0..pz....W...^.......@\'"1...</..I#...^.W^i.../.. ...VP0.wk.t....... .&.....<.....Y.z....5h@7a....x...QX.$......\.@b.wo.k........(.Q,Ok.......xJ....Z..2x..m..V..2.a....P.......G..Yc.,......g....G ./..Q...."........,.c....Q%_[.....e.....z.@./..9.aTV4p.r.)..].(..$_.h`XrBhx..DD(8.@.L.}aS.z......vT."A.j.k;KV..K... ..'z.GB...&.w.B...G..@..1.P......V ....L...=...#....j...%....p.hQ{...pe1.@...-......{~7z...?.5....hg.P2........<z...S?..Sl...<.o.w......~..8.7...^.7e.i.......5.....l......B8u?d.F..v.f.]c..6.V,.../.5.*.@.6..WZ.oAv...w.@...b.h..2.SkB..4.>..(...H.i.W.\|/..IW..\|.....2.....t.n..<K..9.v....(....1.}.FO.k.qg..J.k.3#.R.+...

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 132, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48256
Entropy (8bit):	7.989581474573243
Encrypted:	false
SSDEEP:	768:DTTXHRofzeic4UHDDTanCYIbVMfbGGh5Grhl+aQvSGrOEkIwbUBDNZqqThm5zb7b:DTTXHRjhDUIbVMfH5G1aprOEAbU3gtzz
MD5:	2846546A21A0E4237B084C58C39F652D
SHA1:	BBC241283793255DF1FE601B91845496AF8D824F
SHA-256:	82F23A8846BC04AE0F2EA8A786B43BA853ACEA225146B77BB6EE26C4B083F973
SHA-512:	C6B7CD7E1560F6D90C6E984928097B85CC9121200BE58A096CD36039752352AF3919155D7587D1D1662616A9BB712CEF528994BA6FE66A72D7BC7F204D4B6B3E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...~...........@7....sRGB....... .IDATx^...%Wu..W..N..iz.&k.F .6.8a..\|...../.....d..ux..H"\.......`_c...5. .Y .4y..g....[kW.s:.........T.S.k.....%a............75...............,.~?J.....{....}....................Gi..0......./....o.................i..1 )bPd.q........w../.................:.........y.+_../~...5..b.oE.V..W...>.X....h......Zh.5)F,.q.......2. ......>Lj...C{....X.M..5.0.0Vi.It.)..........w>p.....[...W...c.....O?..m.vF`;G....y..O...^....x.o.. ..u..#..e t[.....H.....i.......6..l{.yh...[........ ].....<\|Hq.irm.q;..7.gi.=.....9...........Q.......k.fx.;.....$..S...{........'?.......0\G.'.S.y..>J.H..4M.F.4MC.H..."A.e.-.......H..M.w...C.].#.Hi...P.c~.! ....G....7..T.w[..w.r..........\|Vq.....7[.0L.I.F.Mn.\|..w...;#0........../N...eW....D\|&....(..d?.)'.B..!M!.....@t~._$g..{..r.PB.[...j.>}.I4....+...-.\|E3~.my?`.....d....+..{l.....<.v..]7.$..f&.pg.<..f.....X.x.O=...f.S..dA.$.Q=...L.t._,..S..8.".rB./a..Y :..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
Category:	downloaded
Size (bytes):	18588
Entropy (8bit):	7.988601596032928
Encrypted:	false
SSDEEP:	384:WF9srt3EJfKy7iOpqErJeqQhzsaZqPTPabcoqYdBTKYPvS9BlTf:Wn6UhKYieqAiPQTwclYQLlTf
MD5:	115C2D84727B41DA5E9B4394887A8C40
SHA1:	44F495A7F32620E51ACCA2E78F7E0615CB305781
SHA-256:	AE0E442895406E9922237108496C2CD60F4947649A826463E2DA9860B5C25DD6
SHA-512:	00402945111722B041F317B082B7103BCC470C2112D86847EAC44674053FC0642C5DF72015DCB57C65C4FFABB7B03ECE7E5F889190F09A45CEF1F3E35F830F45
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......H........ ..H8................................\|.`..J.\..<........-..Z...x.6.$..0. .... ..S.7.5..K!.;..../.`..Sn.J.e.52P.(.....=9....f.....$....fZ.p...N...t....6.lfS.Ju.i.o.g..<....T"O.o..4..4....M/N.>.K..."[.P...W.u.>]................A.9z....IN^....z..Y.{....m=...+X9<?.......(IAG8rD....52L0.p .EJ..p....=.......[U...pz..g...../L.U.......P..W.U..q$L..6......C.M.0..R..........D(.ilX.Y..SZ.R...Q..j.6.@\."\|.l......3....,.T.....L...ap0......6.j.\&O.z`.$._+vwnr...,....?W.T....!.J...L#%.......A}........\.....l...:....U..u.J.0....O......&.!.)4.V..:.}.0f....:W......?U.....%...b...!....yA.sw.....5..T .}{.t!F.G....{"..pQ.S.v.S....t......U.Y\|.v.@....\|..(..V.........^....../.7......K......J.Uq/L.T-.`.O........;........';vWq.+....J...J..p.....sB`(1LC.k....?Z{...v>dS....F..........\.....UetU........6.V...vE....._.../...%.q...^.l...>^.z..l..p....j..@H...`X.p...KQ. .<@...I...BF.......L..6...y.2=.P....8;..@`.m.....R.B.L.r.*T.T..l@.6.Y....}g.....F.n...

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1002), with CRLF line terminators
Category:	dropped
Size (bytes):	539425
Entropy (8bit):	5.111315307523134
Encrypted:	false
SSDEEP:	12288:BEebHeg/md/AHhsncaL8ata+3XIdCgTf9kDUUB:EoHhsncaL8ata+3XIBf9kDUUB
MD5:	8EC0DB1CB8ED2395C5DF4E11BE0D86E9
SHA1:	D91E3C65E262D7E0021A926D228B9F6AD9AEF4A9
SHA-256:	97BCA2A8204372F21C29BC2D6CEEB192EAB0719F1D154E1073F04ACD8D2F0064
SHA-512:	0BBE5FD8A7991D8F0BB43A0DFF3BC1130F5E2514524FCCA9DC4662815155644D44A550BA2FFD92E86177C024D28319DC28A39D007C01BFDE6BDBFE3D429C8F71
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14.. http://jqueryui.com..* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-1-7.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1484x665, components 3
Category:	downloaded
Size (bytes):	197710
Entropy (8bit):	7.775983790068322
Encrypted:	false
SSDEEP:	3072:biEdr6nN1SHJ9+2+mfkX0f+827CEpZWgYe+qaBB9J9SxyqvxSTX7vQ+HvIkixQNQ:Un7gJ9W8WC+WeABB92xyqpwQ+HAG/kH
MD5:	0F72F969E836E988EEE818C6D32C25B3
SHA1:	4051B2422819595F069620D62A273C291DFB3038
SHA-256:	D0F476B22146258A68B998A80D8B3C6192774B0110774B88945E99E204E32A82
SHA-512:	5CB5DEAAC1CC63298E62AE601353A7B6BB36BBDC64F5E94554E5DA06A7B1F366240D822E07D974AA58964089591DCE4F50537EFD3E27FB8C809AAF58A5D20BA1
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/a962e906-800c-4033-a363-a17dcd590ef0.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..w.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23177
Entropy (8bit):	4.0983277771614555
Encrypted:	false
SSDEEP:	384:suPmGzmECrshSSQCyF8jKQze/he/USlGA2Al:BO9EQ8jK78bl
MD5:	A1FB4AAEE1DCBFD24E6EC0FD67AB9645
SHA1:	77558A30FF578AEB671E2BDB574DF166751AA487
SHA-256:	C84E4B2E9E47490FF3FA125E0AA933F617633649358DA8861B4B430AB6AE9A70
SHA-512:	D170DF1B116589824F16B89D7983A8C5D80D22FAF01932E798ADB4C596C202F3DF2C640CCC752C6AA64AF19A07FA5B97191C53AD2E3AF80AB8D349C29C04F4FF
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.js
Preview:	/*. jquery.mask.js. * @version: v1.14.16. * @author: Igor Escobar. . Created by Igor Escobar on 2012-03-10. Please report any bug at github.com/igorescobar/jQuery-Mask-Plugin. . Copyright (c) 2012 Igor Escobar http://igorescobar.com. . The MIT License (http://www.opensource.org/licenses/mit-license.php). . Permission is hereby granted, free of charge, to any person. * obtaining a copy of this software and associated documentation. * files (the "Software"), to deal in the Software without. * restriction, including without limitation the rights to use,. * copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the. * Software is furnished to do so, subject to the following. * conditions:. . The above copyright notice and this permission notice shall be. * included in all copies or substantial portions of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. * EXPRESS OR IMP

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4031
Entropy (8bit):	3.8256916475889486
Encrypted:	false
SSDEEP:	48:khCmxpquzEy9ww3pCMbu6Nl+OCNL/1VVUvlsMoeeH:5m7quzz9f3n4OC/VVq/eH
MD5:	725FB0AFCA207B7AF64772D16400E998
SHA1:	792DBE116C738480CF97D596A9D89B4DA3B92C1B
SHA-256:	F93C46C0E9981F62A5C27A2D8580E13C860D039343C9BE7B7F8DAD10370EFD3F
SHA-512:	FE6683F6693D1D5D9AA33B14B9F4F30CB1BBE0C641200EE47961D66E2277A193BA860840B9CFC99581C0641BA2316056881F4D0FDF9323F678D5125635836489
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/property_assets/js/map-script-3.js
Preview:	..// 7. google map..function gMap () {...if ($('.google-map').length) {.. $('.google-map').each(function () {.. .// getting options from html.. .var Self = $(this); .. .var mapName = Self.attr('id');.. .var mapLat = Self.data('map-lat');.. .var mapLng = Self.data('map-lng');.. .var iconPath = Self.data('icon-path');.. .var mapZoom = Self.data('map-zoom');.. .var mapTitle = Self.data('map-title');.. .var markers = Self.data('markers');.... .// defined default style.. .var styles = [..... {..... "featureType": "administrative",..... "elementType": "labels.text.fill",..... "stylers": [..... {..... "color": "#222222"..... }..... ]..... },..... {..... "featureType": "landscape",..... "elementType": "all",..... "stylers": [..... {..... "color": "#f8f4e8"..... }..... ].....

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=3334, bps=182, compression=none, PhotometricIntepretation=RGB, orientation=upper-left, width=5000], baseline, precision 8, 2560x1707, components 3
Category:	downloaded
Size (bytes):	790411
Entropy (8bit):	7.980144821541063
Encrypted:	false
SSDEEP:	12288:oHJdQ/xoXw5oOOn4QCFnJjZqg3BoXDUK7Lu0rc0/+wsQT+Bfxd0dOR2vjeVWX:o0/OgFJlRQUYrcS+/y6fv0dOEvjecX
MD5:	9FC06372DA9E8073AA78E50B256AFC18
SHA1:	75638F9CB3220DCCA9F6BB683D2B127B23CCA90C
SHA-256:	45447DD3F10B37CD95CBAD578C94E878CD7E85881A5584A1A90F2C55A985C04A
SHA-512:	7D51D2065417C24D3BA9C9DE7F37A69344BAE78BB03479CC97F699009AC5B80D13F1474A5ABAEDE1D243979AAFAE7E1D94BDE4A4DE8B110FF7EE0EEAAB7AAF85
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/template15/images/slider-bg.jpg
Preview:	......JFIF.....,.,.....+Exif..II*...............................................................................................................................(...........1...".......2...........i...........0.........,.......,.......Adobe Photoshop CC 2019 (Windows).2019:09:12 18:11:12.....................................................................~...............(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................k...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...".c.I..U........G....w;...~...n'@.3......

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 819 x 496, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1051786
Entropy (8bit):	7.993513645834192
Encrypted:	true
SSDEEP:	24576:3S4WBjnj1xYUUxP/bfnIkJUWDIMeff5dxWAY2bsRKhAYm:3IpxRUxHbfIkJUrRRdx3gMhO
MD5:	7D5B410F4790FE6F84694D5C41E2FD05
SHA1:	3F14E3D9549D971E896EF4466475BD731ADDDED9
SHA-256:	7800B46B9A418FA4E1AC3D3F05530D49056665505147984B7248BCD9E99838FF
SHA-512:	8E32AE99EB25945FAAA3B6AD2A6BD6837F030A5282C8DBE8DB3A179EE2259281208801517A53804E0363580E90A48C68CE8F278D061E6B87CCD30FAA5945848B
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/aed46e28-3735-43a3-bac1-f2011cbd9497
Preview:	.PNG........IHDR...3..........H1.....sRGB....... .IDATx^L...].u..N...3s.`.0.t. :...,b.(V.N.8....K.S$9_.8_..}...^^dI.%[.D..IQ.M, ....Qf0}0..v..e.... ....9.?..{...........E..B..@_..V..i4QF.^...@8.Dm.-.l.B$.E)......8.;...Y...d2.W*.e.P)..Wa.6,...6..m$.I\|...._>.$.P.oM........qi....<.K.H.R..............n\.t...A$.G.......Z..B...X......].h.p,..e.lX....,..dl..X..?wl.p..........j...k.....eK..{.cl\|.............\|.mmIl..;..V.....E2......._..........0.f..X.+.W...........b..S.F..a....7m@$........%..m.]........!+.B.....$................u.Q<.......j..h:.m..!...../.....,....9EK...[..7..g..1.v.....0:5.?.._.;..Jv.......fN....E.i..B.nm..z......)..4.5.....rY.twcxx.g.E8.F.....3.18..C....-.^...Z..y..}...hq.\>..&wh...../...;..3rm.VS..,4.&\|..Yo..-.....}..8.4.'...h..;h5[.V-~..stOr....C...V.}....5.,..y..\|.<.-....W....../.h>\|^..Z........#....>`........7}.:\.G.a...2.....n;......m....{-8...c......&c.<..d.hW...k.=~....1x...M...7.~........G....-c+...

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 67 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2282
Entropy (8bit):	7.47185646542487
Encrypted:	false
SSDEEP:	48:n6Nn2xaNxJ3UMW78RISQ7MtVf6qWIx1tTra7UU8ihSU3C:O2INsM/ylotVyaxfTYUU8ihFy
MD5:	24960FAA2314BB6633435E9DACE38573
SHA1:	739BBE8BF0B7F68FFB3D572FB596D13C9B4F7636
SHA-256:	3BBFCB2B0AFB3BFEAECCF9DA842ACC05807ABA1729C7DBD10B98EAAAC94DA59E
SHA-512:	EDB30095486F3E5F209F5687FFFC52C7C1921514B80D3B8446BBD7CF5DB06CAF74941DFC6B2DF86E075B008BBA139A530B3005947F9C4FF37DFFC4F45461AB22
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...C...d......c......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:4A191D544C7111E89878FA4E2E421B66" xmpMM:DocumentID="xmp.did:4A191D554C7111E89878FA4E2E421B66"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A191D524C7111E89878FA4E2E421B66" stRef:documentID="xmp.did:4A191D534C7111E89878FA4E2E421B66"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p.)...XIDATx..\MO"A......q.....?......e/.C...L"c...".0.\|..bUB...........n'.=<<\...P..\|\|....V....f....\|\|\|$.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators
Category:	downloaded
Size (bytes):	163878
Entropy (8bit):	5.058352060448116
Encrypted:	false
SSDEEP:	1536:lt04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4f3:lt04/0VUpz600I4f3
MD5:	0899D35B19AA233A0DDD4599ADFAE98E
SHA1:	3528C58C0BD3793FA04F87157E81A347565B6375
SHA-256:	CD9D6B894DFBE81BBE09E59774A6733AAC5B73A946759BB9F740CDE4203C166A
SHA-512:	4F7315AAE9504D164B020281DCFCCEB87533BE1650FB7EED9841DCB50FF0069D3DD39133A2A6B13392FD78B59D273C93CB7AE85151BA5A5780FE443B43371C10
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/css/bootstrap5.1.3.min.css
Preview:	@charset "UTF-8";/!.. Bootstrap v5.1.3 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors.. * Copyright 2011-2021 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:2

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	125673
Entropy (8bit):	7.9668351695624375
Encrypted:	false
SSDEEP:	3072:bIe+9Ur27/sv2S3rBETlhzyyP+dEgpqJw29T3HtcLgsEofadCE9:f+Or27UeMOF3gYxTKVvadr9
MD5:	63000A705AA44CB5F113C6A700BE806C
SHA1:	D21833EB3A35720FB5F4AB1AD4ACB9BAD646CE2E
SHA-256:	CF019F930A3B582725992B4DB0BFD7F1AD2B5451ED491327B049CBA174913A5E
SHA-512:	E9EAF320B99F36145F039FABC51CC80A8ECADDC527AE3CDB271EA2775CD8676B21214C605308D4A6EFC4B91364A04451AFCFDB0C1E655BB1F0705DCEACBABAFE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............M.......pHYs.................sRGB.........gAMA......a....~IDATx.....\U...s.{o..4.%...D....?.JP...."..H..@.@.R...R......4!YP..!4.d.H%.>...{...lI...f....w.....3o...s....@...&j.[.....!.5.c.Qm......BP...?3V..-.N-.. ...o...^C..1V_.w.Q...~.50..c...R.u].m....v.......DM..jT..q.V..:..T.T....s.to..b.6..A....5.\|..3...U`.j ..u..........@....k...t../.Lv.\|q.!..:...^.......s.<..`..!............1w......[...l.`$.r..a%......W.yU.... ^g.Qb...E..:.....[.T.q>>...ZUj.2......x.D..wZh.2......... X......Zd.a{....Kt.=.WU..=..^U........:.....@..@..ZU..L8.,.$..n..h...%....`A.......8.PA.}. ..2...0.....@...Qi$......=...q(....e...d.....!@....S..sAG!+...oP'....v.v...t....m......N..f..We......0h'.C....z..:..ta....<.2u.../.7\..g....3......[..H.%.~..c.1.....6.#.=.,;.. @..(1..D..r..?P0...8@..%.....Yv..........r..(.....:....N...k{u.......t.."....x!`..(n.....N.!.P..Pz..;{.mv.p... ......Mv..1~.j.F.%..@...t..uu........ .T.z.....:...%....Q........... K..u....rx&...

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 582 x 769, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	892013
Entropy (8bit):	7.996468869244236
Encrypted:	true
SSDEEP:	24576:9VJE7T/YwEZejHw2SStycnztWNeWCSCBSAwh3irf:9nE7TQXyzrBWMsCYwf
MD5:	67171E37F6D6968CC1A6CEC4E317A764
SHA1:	F460B304D237397FFBA443DD9CA97BC5B349E8EA
SHA-256:	D563C320DFE89846EC031C998A06B6B6987235BBB0D3D6978170AFA06EC17C89
SHA-512:	EF3106415FE67E4381EEC597ACF46491727DA875088A6A7E0455933FA1636D5880D21C5FDD22CD6FBB14A4CFF607C42A61DFCCCBB7DE4A4B0EE0053E1FCCE3A9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F...........{.....sRGB....... .IDATx^l..ze.r.w.....!.D...%...l6.L\|.....?27.......Z.DF6..?._.....z}..........O..7.}.;......s...........{......\?...s........O2......z.\|..?.._.>.^_\|....=..=...w...y.o?f.....+.gr.....K......b~.oe..4..sy_Dw.....Y.......k.;...nZ.>......5......z}...>..^.....]....zZ.y...l.?.}..m..Yk...k.=~...._......w..n;.g.......>-S...J.....B.....?.......Qdj.nv..{.u.y....G.......\|~..............af..Gt...id\..5.2.<.0..z}.].....d.b......[h,....ct.5..z.:f3..y6...S.{7}.i.wv..r..9....ym.....H...?.....s.y..h..m.+.V..g.n..-....s............x..B...Ykk)....U..}...h.........^.Zdkq.y.....[...V....~g-..?....e.a.I.[=..bKs.}.l..N..].:K.-...6..~.h..{w..i..^.=G..#.........IVlk..,......?#...{.6GR...^(.\....U.5.7.u....E6.Y.y?3rl...\|..a.d.".?....Yci.....E...a.q\|..6.3]...z}~}..r.F".b&..pc.....7r....v=...__.={.O82t................Y....~......iq._...b..>.Ie.q.(.<k..v.\.X.f[..c....k....*t..4.B.^.&[6....vY....Q..s...ll1.u.../...k.!

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	184562
Entropy (8bit):	5.629007297098108
Encrypted:	false
SSDEEP:	3072:B57rVrIIJLjJkPCmgev/fZ64PATDEBBaNCuclzoS/XBCy4y7kh6GUCWB1R20rNTa:B57rVrIIJLjJkeevnZ64PA/uaNCuclc1
MD5:	BB161E955A3C970CDD870A4EC0BD6D7F
SHA1:	125E1DA1CD7BF3BBFEB22D24D8D8CCF70800D71A
SHA-256:	FB4171324646676906D68D37FC0E678AAF5655E0A910D565CBCA48771B727506
SHA-512:	B4052D4A5CE7CF80F9C5EE4E3960F7B18F0F4E2B347B4D740E0B03F52362488E60A4853498377CFD4E86E53FE6992B9F067F79EAFAC0435D7CD212637FEB861A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/13/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var jwa,iwa,lwa,nwa,owa,pwa,qwa,swa,cE,eE,fE,uwa,jE,wwa,kE,ywa,lE,Awa,zwa,Bwa,Cwa,Dwa,Ewa,Fwa,Gwa,Hwa,Iwa,Jwa,Kwa,Lwa,Mwa,Nwa,Owa,Pwa,Qwa,Rwa,Swa,Twa,pE,Wwa,rE,Xwa,Ywa,Zwa,$wa,axa,bxa,cxa,dxa,exa,fxa,gxa,ixa,kxa,mxa,oxa,qxa,sxa,uxa,wxa,yxa,Axa,Bxa,Cxa,Dxa,Exa,Fxa,Gxa,Hxa,sE,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Pxa,uE,vE,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,wE,aya,xE,bya,cya,dya,eya,fya,gya,hya,yE,iya,zE,jya,kya,lya,mya,nya,oya,pya,qya,rya,sya,tya,uya,vya,wya,xya,yya,zya,Aya,Bya,Dya,Eya,Fya,Hya,BE,Iya,Jya,.Kya,Lya,Mya,Nya,Oya,Qya,Rya,Sya,Wya,Xya,Zya,bza,cza,dza,eza,YE,ZE,$E,aF,cF,iza,dF,jza,eF,fF,gF,hF,iF,kza,lza,mza,oza,pza,jF,qza,nza,tza,uza,nF,yza,Cza,Dza,Eza,Fza,rF,Gza,Iza,Jza,Kza,Lza,uF,Nza,Tza,BF,Wza,Vza,CF,IF,Yza,Zza,$za,bAa,cAa,cG,eAa,dG,fAa,gAa,hAa,iAa,fG,kAa,jAa,lAa,nAa,pAa,rAa,vAa,tAa,wAa,uAa,gG,hG,zAa,AAa,iG,jG,BAa,DAa,lG,mG,CAa,FAa,oG,pG,GAa,qG,HAa,sG,tG,IAa,uG,vG,JAa,wG,P

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 149896, version 771.256
Category:	downloaded
Size (bytes):	149896
Entropy (8bit):	7.9963721183511405
Encrypted:	true
SSDEEP:	3072:f9bcJ3wmprceaBe7JPfE0GOrX9KszmXEJaGZP3x4lwqnr8ZK9W41TQl:RXmvUe7JPfzGOrX9pWE4Gt2RVNxQl
MD5:	C00CD95AF40D3D74E114025555250F09
SHA1:	299451F824167830FEC38FADE1F9E69D4C0C6E9B
SHA-256:	A963D0D6BAF5F8AD3A8D21C2BFF2971D0819789204815A7082D8D4776DEC4A80
SHA-512:	A5402CE6FBC7FC32DCE33F50E536BA5856C48DE9B1D6B1D5B7DB00CB1D9AAC4B3B8152837985D2EC0D4168CCDAA3692BCB73761014C9488DA0A1224264A545D0
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.3.0/webfonts/free-fa-solid-900.woff2
Preview:	wOF2......I...........I=.........................8.$. .`..<......h.@..p. .i...@p......aD.f.O.=..x.TUUU....l........g...o~..?..o...........O......l...x}~C_._o.y...y..a.&..~.&P.P"(...:2F..R.u_02.jf..$.d.vR...kE.....h5i;...,.E...W.E...X....ks...>....0..".C3g.e.'.).#.S{.....7....3.....?..CME.@E_...F..Z:y5..8.H.6\|s..m.....f..'....d....V.u.n.[.;LwWwMWM......M.j.Va.V...$.$...j.....F.vD.l..I&.q....~..K.......>.m.mz.HK..g:.LOH@.`....X,.........p..H0.DJ:PT..%..i.e..$[.)8(.Y.g9..>.I......wD+......Z...=^....t....m.>.(.}q..v.........b..8O.g.QO.'....f...G.%!....(.)...:#.+.w.5.~.~.5.\|1..3...........3Ls....u.......1...~..._......!r..p@mU...v4..WFo%..D.....]}.....Mf."p.STl..sU,.YTc....x.l<...9.+......C%Bkj.$.K...-...A....ei...q.D.....l\|....1R..o2..0N!..=U....s.F.QHH......2..X...Cc...../5..T...........3.....R.yKw.".c..Re..T:.L%M.....E..X/..........R..\|)o..7..y...).....W.[.7......c...q".F..#....4.....D....(.......(........9He..&...I..@R.)..42.{......%).{%e..

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (608)
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	5.08453567170624
Encrypted:	false
SSDEEP:	24:eJvPioGlU9sd033xLpxghnd0sH3xtpx2hnd0sQ3rpAhY:wvPioGysd7DDSDDjO
MD5:	FDEDB74E19E1BFFDCAB908079CABD49A
SHA1:	BC3F6A916AABFAAEA361AC99DA97751CCC272352
SHA-256:	FBFC1A27B2F37BB5758305F7D7633B07F9DD08C9C42658E695C8FA9716967545
SHA-512:	46130A09BB7B4EE3BBDF4C5FA03D0C1A83370B8523CBB3D5817E56E67C9EE34727B8D5B4C0BEC5BC78700E9E400229DD30844D42A00794B27648C461AFE1B0C3
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.3.0/css/free-v5-font-face.min.css?token=a316664222
Preview:	/!. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */@font-face{font-family:"Font Awesome 5 Brands";font-display:block;font-weight:400;src:url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.ttf) format("truetype")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:900;src:url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.ttf) format("truetype")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:400;src:url(../webfonts/free-fa-regular-400.woff2) format("woff2"),url(../webfonts/free-fa-regular-400.ttf) format("truetype")}

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4031
Entropy (8bit):	3.8256916475889486
Encrypted:	false
SSDEEP:	48:khCmxpquzEy9ww3pCMbu6Nl+OCNL/1VVUvlsMoeeH:5m7quzz9f3n4OC/VVq/eH
MD5:	725FB0AFCA207B7AF64772D16400E998
SHA1:	792DBE116C738480CF97D596A9D89B4DA3B92C1B
SHA-256:	F93C46C0E9981F62A5C27A2D8580E13C860D039343C9BE7B7F8DAD10370EFD3F
SHA-512:	FE6683F6693D1D5D9AA33B14B9F4F30CB1BBE0C641200EE47961D66E2277A193BA860840B9CFC99581C0641BA2316056881F4D0FDF9323F678D5125635836489
Malicious:	false
Reputation:	low
Preview:	..// 7. google map..function gMap () {...if ($('.google-map').length) {.. $('.google-map').each(function () {.. .// getting options from html.. .var Self = $(this); .. .var mapName = Self.attr('id');.. .var mapLat = Self.data('map-lat');.. .var mapLng = Self.data('map-lng');.. .var iconPath = Self.data('icon-path');.. .var mapZoom = Self.data('map-zoom');.. .var mapTitle = Self.data('map-title');.. .var markers = Self.data('markers');.... .// defined default style.. .var styles = [..... {..... "featureType": "administrative",..... "elementType": "labels.text.fill",..... "stylers": [..... {..... "color": "#222222"..... }..... ]..... },..... {..... "featureType": "landscape",..... "elementType": "all",..... "stylers": [..... {..... "color": "#f8f4e8"..... }..... ].....

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27377)
Category:	downloaded
Size (bytes):	27592
Entropy (8bit):	4.836838119222499
Encrypted:	false
SSDEEP:	384:hfwu4Eyfd7PNRzAmReUtPAM0NuzwpmnWt:hYuqdNReUtPAM0v4E
MD5:	3A57F9DF341838CC106903C71730D13B
SHA1:	15FA32630D25FB5522631EFBFE78723540B18711
SHA-256:	4C6D23EFA8A723D5C117DF0AC6F77441A66D960CF4E9CF4CF20AABD1AC984EF3
SHA-512:	EC590DDA6285EF0D75BCD9DC229E096097B6B4781DAAA3D79D92605B822E4428EC150156C9811C7D3035613346EAED1804FDEF5CF6B10F7855C3BB542A76E635
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.3.0/css/free-v4-shims.min.css?token=a316664222
Preview:	/!. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */.fa.fa-glass:before{content:"\f000"}.fa.fa-envelope-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-envelope-o:before{content:"\f0e0"}.fa.fa-star-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-home:before{content:"\f015"}.fa.fa-file-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-arrow-circle-o-dow

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1485x671, components 3
Category:	dropped
Size (bytes):	168250
Entropy (8bit):	7.804198780695063
Encrypted:	false
SSDEEP:	3072:mWGL5Z5fy/DWDm4zrSMXqN9xBWgIFAc11h8KDKXQLP5hP:mWGZfGY/bqHi4ca+FPXP
MD5:	8D92F5D697951E1086B50F00120C0168
SHA1:	3CCD03D1D7DC1C7042D50B631E0EEB15CFB3A56D
SHA-256:	0C721E79411D4BD3583F93540858B7029F5D387D2B083C190800415F5A3F4970
SHA-512:	C7868278F9D8B6F407080E30FADF4A4BC75CD0E6586D84D63A233AB67A7737BC8D31F4A825D3955870F81ADC696C460E6589433A9258771974661164B5EE61E2
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 700, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1529580
Entropy (8bit):	7.996715853007158
Encrypted:	true
SSDEEP:	24576:iYYXACmsku1YOSsXCnFcCr4pPdeC64EM+zPJB2gKP7f+Z/d0GSf:iYYXhkWmFix61T9cf+j2
MD5:	C4808956015247ABC7AEB02A29D3CD87
SHA1:	C29A683A15C5F7F85D7B4D8743B0708AE8FDD378
SHA-256:	342AA4275BFD270CD135B06D66E07B347A8F8C0E98F813F1D1BCA4193BCCE10E
SHA-512:	DF0CE81CD90F73A751B5626413CA5E6FCCD35BB56D2CE681C06CECC6E78183E7C9179F327CFD4960F1701A7A80625172F32771A5786B90B86A0A57BA0FE6CCE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............3F.....sRGB....... .IDATx^t...dYr.w3..=3..2B.......4. i..F..HB...........q.w.\LwU...'...q..........q....q....q=.....~t...n.....q......8...r=....r....~y9..q<.gz.Q..z....z9...r.+?>........s..s......%.............s....>z........x};........~../......<j......w/....c......~....o7......_\|9~..t<??i..............v?..n......x=../...?...\|y<....K..................v.......z.._.....G..z.s.~{;...h....x{.u..ym.....k..].u9.....8..O.......k..D.O..q\.../_......x~y>.......q.^%....3...P..w.;k@.....m.....5..~...@.?.....8?.\..Z..._}.C.y.<.5.Z...C?+.....U...G............kn%.........-.^.z.-rx.g...z=..............E.k.j.KFK..]...Z.............x<>]..O..G=...F'.}\|h...?...z..J&.j.u..=u.K.<#..s.....<k.....]..w..9k3{Y..z.g..Y..~.9.:.#!.........z...u..k...K...s......9...../.....=tW.7m}Er[{.....<.Q...5?.W:R.-....H.._.n.M..tgII.]..']F.u.....~.....G.=.4\....({..Z...zW..R8~L..1[..Y...kJ..%.5.:.>.~Z}......;kGek$.......?.i.!.ER/:...{.N6J_.....~.d.FR..z.Y

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	248
Entropy (8bit):	5.303880126773004
Encrypted:	false
SSDEEP:	6:sNSOiPF9u5rNt+8rbz11dKksCGr3N8Ck0EItrejkWn:UiNMLI83dbGDNZWZkWn
MD5:	47CB7E8809D17C0B8DDD5700C10B4031
SHA1:	50D05327EE461AAE986E7E02117C295CFB6371C8
SHA-256:	DACCED3BAF0B6C2F716486492A32FCC551BF9ABDB26C2A9501B2FB2E6C17894F
SHA-512:	68C99F5C6D94C5F5D1603E23B193871B6FD10E1FD4D287457FC720D5FD2DE803AB8562E6CE3CD71A80E4F47F8B7D1099AEE8CD647A1542E7D0A08D54E1F92E5F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9K71_W31ULBIFDZRU-s8SBQ01JfsmEgUNU_J1YRIFDbSXJ9ESBQ3D4vAkEiwJbQXn9M8nb54SBQ2UVPrPEgUN5UlaGxIFDZVKzYMSBQ20lyfREgUNc4DXpxJPCZF0XoumxX5PEgUN6S6-GhIFDRVyf9MSBQ2ygVOtEgUNDoeOPBIFDQuC6RMSBQ0OJlf4EgUNNhErIhIFDQBi1zMSBQ06ZbuuEgUNtY8jkA==?alt=proto
Preview:	Ci0KBw2UVPrPGgAKBw01JfsmGgAKBw1T8nVhGgAKBw20lyfRGgAKBw3D4vAkGgAKLQoHDZRU+s8aAAoHDeVJWhsaAAoHDZVKzYMaAAoHDbSXJ9EaAAoHDXOA16caAApaCgcN6S6+GhoACgcNFXJ/0xoACgcNsoFTrRoACgcNDoeOPBoACgcNC4LpExoACgcNDiZX+BoACgcNNhErIhoACgcNAGLXMxoACgcNOmW7rhoACgcNtY8jkBoA

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 242 x 125, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2526
Entropy (8bit):	7.7887090088735205
Encrypted:	false
SSDEEP:	48:atxjgvipuU4EwrgUN/EHEWT6J+bAFvt01+UjqKZhDY8MF/jMbClk0N1VjA95:eFg+Kt5N/yEWTnbuvFqYHF7kgA95
MD5:	F62E25D19A79F0DB1B307904E04CB3E7
SHA1:	11663C61C54822B63D224E2BA2C98841ABF111C4
SHA-256:	93ECEBEC07F727ED5F650C634359277A99595C9BC076FDA81D27CDF6B0E21166
SHA-512:	8AA3EDCB8699F9A73A63A430258D862B11E8F214C633B861EE5046BFF148DBCC3B093EEDF9A6FF06B1C24934F4A06EA32342E59944201342921AD476D07DCEF2
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/Calculator/right-Arrow.png
Preview:	.PNG........IHDR.......}.......>.....sRGB.........IDATx^.kkdU....[...T.n.\|.....'.....E...o.\.!""...(""...3:.ED."""...Q$.k2.h..I9..t.S9u....5...Y..N.O..?$..@..}@)..)}Ri.T7l&..nWk....._...x/...+.".6.&...y..,/-...&.o.W.l.&cU".]....E...g...../.......w......,O.y....b.O.c.Vb..$.V.Z...<./....C...e.a.v.yp.!.9......_..M.......U.......R.OM...Q...E...\."..K.^g...?..A...4....\...."..<Z..."..~.j.N+...=...9.yF.."..#.+D...X,E....w'PG.~d..#J.y..MgM..~.<._W.A...V.<..=5E.>...`H._.j........M.\|.}..y..........sZ.Ev..... r?.'.^oarr..&..M.v`.Z.yk....k.Z9...Z..F............Wm.<.......yP...V.R*.U."[...<..#...Z)u.b.:E.ur...X....x.e...%.\|g.@.S.hD.....Fk.Y..>)"oD.jh..y("....."o.......zs..".&.\|g.x..........333?.>.....#....t.oll..t:.G.......bn...K`ll..P./...(n....u ........q.Z.'.R..D.jSd...#'...y..j...:.o..uJ..E7.."...pI.xJD..X..+....X.o._..HD^.].n.)r..am!..^)ukH.m..".:..."......LOO..Zq.9......l.D..^.w......x..E........jS.o.K....g.,;....M..+..\|._.8."^Wm...Ea.q..A)u..R)./..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (617)
Category:	downloaded
Size (bytes):	559447
Entropy (8bit):	5.6838609237395215
Encrypted:	false
SSDEEP:	6144:APPp3i5djotqHRUANEU0p6VfJyrmaU2xUEV/ZQbZFPyIbAnPT0J7106znOyGVnTL:A5y5djoWNYYdJsgFPyIbCTI0y7ACVLC
MD5:	99210E7C2195DE81C0EEDF98787A69B3
SHA1:	7B26C66058385B60109AA6129C2161A399A6034D
SHA-256:	5F75BFBFBF0C7CAC2C87D6CA5DE0661AEDC188B0900B6CEF5EFBAEA134B53302
SHA-512:	C3198D7943B3311679D77BCFFEA75D7043801277BF03AC10CA20BBE424E9AE896C060C7E0EF4143E23C2A41E367917A258404FBA428099316705B7252AEA8A6B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var E=function(){return[function(K,v,L,Q,d,x,r,w,f){return(K-(((K&55)==((w=[2,6,"P"],(K&60)==K)&&(L=LO.get(),f=a[27](33,v,L)),K)&&c.call(this,v),(K\|w[0])>=29)&&(K<<1&8)<w[1]&&(r=a[0](72,v,L),Q.I=d\|\|0,Q.u=Q.I,Q[w[2]]=r.UA,Q.Z=r.buffer,Q.H=x!==void 0?Q.I+x:Q.Z.length),w[0])&16)<8&&(K-3&15)>=10&&(N[w[1]](63,"INPUT")\|\|(C[w[0]](w[0],this.u,this.V(),"click",this.N),this.vL=null),this.xV=!1,V[20](12,"INPUT",this)),f},function(K,v,L,Q,d){return(K\|((Q=[9,895,11],(K-6&7)>=3)&&K>>2<Q[2]&&CO.call(this,Q[1],14),.Q[0]))&2\|\|(L="",L=h[5](37,v.Cr,"imageselect")?L+'Select each image that contains the object described in the text or

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	188
Entropy (8bit):	5.032128680603358
Encrypted:	false
SSDEEP:	3:IntSunSOeodQ7nSFJjuV0CXOQT/QiExtny+Z4tyYNDthukyo2nGsCkk1n:sNSImnSF9umCOQTgry+Z4t51yokn+
MD5:	AA3352BE75876477E9D1D5016451F285
SHA1:	DE5E29F8548815B5F154002AC83FD70DF04AD798
SHA-256:	FF4F903592E97849E80456ED9E5C303F37EE6F0639ED9F9C9413C7C309C40CC1
SHA-512:	26E2A3F1FFFC580FFC12F62BDEBECDB39B15335A3CA29768628F327793CBB5719295E3F4444635F16A71B5D02F3647842E5EEA71CA1716FF267CA0C0064C14E2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAltBef0zydvnhIFDZRU-s8SBQ3lSVobEgUNlUrNgxIFDbSXJ9ESBQ1zgNenEk8JkXRei6bFfk8SBQ3pLr4aEgUNFXJ_0xIFDbKBU60SBQ0Oh448EgUNC4LpExIFDQ4mV_gSBQ02ESsiEgUNAGLXMxIFDTplu64SBQ21jyOQ?alt=proto
Preview:	Ci0KBw2UVPrPGgAKBw3lSVobGgAKBw2VSs2DGgAKBw20lyfRGgAKBw1zgNenGgAKWgoHDekuvhoaAAoHDRVyf9MaAAoHDbKBU60aAAoHDQ6HjjwaAAoHDQuC6RMaAAoHDQ4mV/gaAAoHDTYRKyIaAAoHDQBi1zMaAAoHDTplu64aAAoHDbWPI5AaAA==

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2551
Entropy (8bit):	4.755247052027596
Encrypted:	false
SSDEEP:	48:Q0fTnsoi3fMfJoAt3WovJqVFHc5maY7sg/ofyT3FN3M/TH:z7sIhJgHaPqL/qGFMj
MD5:	F2E0440200A3B16D84F51BB843B4C0A4
SHA1:	16A7CD5D354EEB55A15612663B5021F73A910023
SHA-256:	17A96CDA0E1ADCA945D4E72C7D115F95712A91F944A351FC479E12C82AAA3A4D
SHA-512:	BE3F53970EECFEFCF5F3498E387889D1206466097423C18F91646F21237515A27EDC3F0B5247E1DACC7C0700492467FDE257EBEAC1AC0B6F3EAE6C861890ABA7
Malicious:	false
Reputation:	low
URL:	"https://granddunman-info.com/Content/templates_assets/DesignX,Z_Common/MortgageCalculatorStyle.css"
Preview:	...fieldset-border-radius {.. border: 2px solid #fff !important;.. border-radius: 10px !important;.. position: relative;..}.....calc-pointer-image {.. position: absolute;.. top: 50%;.. transform: translateY(-50%);.. left: calc(100% - 82px);.. z-index: 5;..}.... .calc-pointer-image img {.. width: 180px;.. height: auto;.. }.....arrow-inner::before {.. content: "";.. position: absolute;.. top: 31.2px;.. right: -10px;.. z-index: 30;.. width: 42px;.. height: 6px;.. .. transform: rotate(36deg);..}.....arrow-inner::after {.. content: "";.. position: absolute;.. top: 56.8px;.. right: -12px;.. z-index: 30;.. width: 51px;.. height: 6px;.. .. transform: rotate(-39deg);..}.....td-align-bottom {.. vertical-align: bottom;.. border-bottom: none !important;..}.....td-h-66 {.. height: 66px;..}.....user-input-div {.. display: flex;.. align-items: center;.. color: #3b3b3b;.. border: 2px so

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2694)
Category:	downloaded
Size (bytes):	220298
Entropy (8bit):	5.567322466508078
Encrypted:	false
SSDEEP:	3072:VHEqE9cHsT0BOa/IiQhCrCCVjeYJGzN04JuEgVkQfl3yCPyr81GWPyi:tEN3YJNtdl3y1u7h
MD5:	86FE5CC69ED34ED5F6039A357B6C2029
SHA1:	5F3A7335E5DEB07804640B67446718D1F4E1C336
SHA-256:	D17B36CC39B88B9B3236B5E03FE60553D142E0AF9F23E0F5EB314E462B56A724
SHA-512:	5FAE335B9519DA5DCB4841FB0E04C647A1F006761BFA268D8B4C62A907435277D8B9D69F4F8100D05486063C319BD826A508A2D1D32267F81766C66F209AAF63
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.NaAhg1PrSJA.O/am=ACA/d=1/exm=el_conf/ed=1/rs=AN8SPfqbyTLlqlcRfKevF3N6hlE0U26HZg/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var bh,ch,gh,hh,jh,kh,lh,nh,oh,ph,qh,rh,th,vh,wh;_.ah=function(a,b,c){if(a.forEach&&typeof a.forEach=="function")a.forEach(b,c);else if(_.ea(a)\|\|typeof a==="string")Array.prototype.forEach.call(a,b,c);else for(var d=_.tf(a),e=_.sf(a),f=e.length,g=0;g<f;g++)b.call(c,e[g],d&&d[g],a)};bh=function(a,b){if(b){b=Number(b);if(isNaN(b)\|\|b<0)throw Error("L`"+b);a.B=b}else a.B=null};ch=function(a,b){return a?b?decodeURI(a.replace(/%25/g,"%2525")):decodeURIComponent(a):""};._.dh=function(a,b,c){a.j=c?ch(b,!0):b;return a};_.eh=function(a,b,c){a.h=c?ch(b,!0):b;return a};_.fh=function(a,b,c){a.l=c?ch(b,!0):b;a.l&&(a.l=a.l.replace(/:$/,""));return a};gh=/[#\/\?@]/g;hh=/[#\?]/g;jh=/[#\?:]/g;kh=/#/g;lh=/[#\?@]/g;_.mh=function(a){var b=_.Gc();a.g.set("zx",b)};nh=function(a){a=a.charCodeAt(0);return"%"+(a>>4&15).toString(16)+(a&15).toString(16)};oh=function(a,b,c){return typeof a==="string"?(a=encodeURI(a).replace(b,nh),c

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 466 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	32281
Entropy (8bit):	7.98117525360963
Encrypted:	false
SSDEEP:	768:xQ7AkACe3n+SBgcP9iFzurgotXWDqVm8uEUnqCm7:xyACA3gccFzI3Wqm8TUnM7
MD5:	325242F8D58EFAEEC42DDC9CFB48C7CA
SHA1:	8B999F279C0F6BFE3871A173A52A47EDB8EE7583
SHA-256:	8C8F2AD7394F21A98DE3B0200A17BED3833F98D06D33FBCFD610A6F60AE22B39
SHA-512:	40A4CB1775DB03DB168C04AE6DBEE5CDE56DDA60867665DCD80ACA224E916F52F5B8F454855DD1482DFAE8AB669307CDCF33E50E49D72EBD56103CCB2057C8EB
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/816ac552-d08a-443a-bfac-bfe60eac5b7f
Preview:	.PNG........IHDR................H....sRGB....... .IDATx^.w$.....{..o.Q"E#Q....Hcv.....{.;o.H9R.II..(....{...ndV.L9.m..........w..X,...,.Y .@d.....Nd.....n.".D..,.Y ..,.9.h!D..,.Y .@d.SX r..0^......".D..,.9.h.D..,.Y .@d.SX r..0^......".D..,.9.h.D..,.Y .@d.SX r..0^......".D..,.9.h.D..,.Y .@d.SX r..0..yk._F,f.....y..C.q.v..4......".\|.-.9....6...3...-t.y.gy8.#..G.9...F..Y ..#e..>..)...........]............:X...}...+....X^^......./..."..+...\|../.\|~... .....,....}..?.......1.D..~..XLNsoo.v.Vl{{.v..mgg...^...mw......6.8X..;.\|..1...?.a.ZaQ....YAA..,....+.....}AA..l...o;D..Y .@d.G...#.W72p......i{.[....r..;k...j;;..=.sog#...-.;..=.'3%k. #5....3.Hq...2.R+(,....3.y...Ya...S......9OT..W.#:od......"Gz..(.....mo.....m......1k.....i.{......~P..Y..<...aw4.7.NhR?4(..?.?...-.2.J...-...+)k...&+.l....WZ~aI...u..6.@d.G...#=.{../.8ww.m{kY?;.K...d......h........<...".s&..I{..........2.B+,,...j+)....Z+-....z9....\.%..R9..Q.g`.....".D.8.....o^L`!...Y[_.......4l[....

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=3872, bps=182, compression=none, PhotometricIntepretation=RGB, orientation=upper-left, width=7128], baseline, precision 8, 1450x788, components 3
Category:	dropped
Size (bytes):	1606744
Entropy (8bit):	7.930461056408219
Encrypted:	false
SSDEEP:	24576:nxs1tA6sANOBVxH6AXSOen5QWwwI7KVUCAbQVMrrD81ibhiatEI659VBTz4l:GomuVxH66gQnwI7OqbQOrrA14ltK3BG
MD5:	23DE7A5206D1BEF88EBE75F503E41635
SHA1:	DBA7ECA3D25B2660B8422B5C8C3BD94F945AE2C8
SHA-256:	C7F6E40AB4558FECDEA5986DB401E5A0BF8B27D0EFC9DEEF7E80A28C4187771D
SHA-512:	B8C90E9697E2B8DCEF75691F8D541D5852F0D18301F0DBA5F76D0368FA746F512B6CCA7E951A5DF0A29BA3CF31A463D81D3828C75EAF74D08709E2B7EE79AF03
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....,Exif..II*........................... ...................................................................................................(...........1...........2...........i...........".........H.......H.......Adobe Photoshop CS3 Windows.2023:06:12 11:59:14...................................N........XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1484x665, components 3
Category:	dropped
Size (bytes):	197710
Entropy (8bit):	7.775983790068322
Encrypted:	false
SSDEEP:	3072:biEdr6nN1SHJ9+2+mfkX0f+827CEpZWgYe+qaBB9J9SxyqvxSTX7vQ+HvIkixQNQ:Un7gJ9W8WC+WeABB92xyqpwQ+HAG/kH
MD5:	0F72F969E836E988EEE818C6D32C25B3
SHA1:	4051B2422819595F069620D62A273C291DFB3038
SHA-256:	D0F476B22146258A68B998A80D8B3C6192774B0110774B88945E99E204E32A82
SHA-512:	5CB5DEAAC1CC63298E62AE601353A7B6BB36BBDC64F5E94554E5DA06A7B1F366240D822E07D974AA58964089591DCE4F50537EFD3E27FB8C809AAF58A5D20BA1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..w.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.731372038840301
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKgZ3eVmGEwjWaee:PLKdXNQKgkTL
MD5:	F3DFE1A46E91C1C5521B4ED0E336AE06
SHA1:	8112055ED07A442DD199C15A8B2C451A3E4B54E6
SHA-256:	724FC56703E050F8625D033339E4C69746C05564BA34DF35003A34ED59432657
SHA-512:	0570AADEDB1FFB2EAEB8A8454004C1EA63109712D07E9F0E1D08FDEEFA06FC8CD64C75688A2FE5AF7EE314E056BC744337FEFA8B5FDA95F17B2B0E4146D81C5C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=aR-zv8WjtWx4lAw-tRCA-zca
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/recaptcha__en.js');

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	6409
Entropy (8bit):	4.922557481084574
Encrypted:	false
SSDEEP:	192:qdmsK41LHSBWhXRpC7C7D12JHcs/pEOLlNRXg5oY:ls/rziGM+hqHBo
MD5:	005E8E2287CBC924C1849F7BEAD60BF2
SHA1:	23AAEB588A06EAE1713AAA462939DF1F3FEA3675
SHA-256:	E404EED3DE9F104F3F08770F85A40A50642420770264B9AB5883CC4137A4830A
SHA-512:	D20A06F83C4A130B6EFB314EFBD2E928678BD69F77CCE715FA692BAAE92FFBAA4D0A2FB035C379548621EC7D4710D3B361F81A7448C0AA6B92052A0C9050B4A3
Malicious:	false
Reputation:	low
Preview:	..//Set Value to 0 on first click..$(document).on("click", ".first-click", function () {.. $(this).val('');.. $(this).removeClass('first-click');..});....//Calculator Calculations..$(document).on('click', '#CalculateMortgageBtn', function () {.. isCheckValidation = true;.... checkValidation();.. if ($('.isValid').length === 5) {.. CalculateMortgage();.. }..});........//Calculator Calculations..function checkValidation() {.. $('.CalcInput').each(function () {.. validateForm($(this));.. });..}....//Calculator Calculations..$(document).on('change keyup', '.CalcInput', function () {.. if (isCheckValidation) {.. validateForm($(this));.. }..});....function validateForm(_this) {.. var inputVal = parseFloat(cleanPrefixSufix(_this.val()));.. var minVal = parseFloat(_this.attr('minVal'));.. var maxVal = parseFloat(_this.attr('maxVal'));.. var minError = _this.closest('.user-input-div').siblings('.calc-input-validation-min');.. var

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=3544, bps=158, PhotometricIntepretation=CMYK, orientation=upper-left, width=6297], baseline, precision 8, 1450x816, components 3
Category:	downloaded
Size (bytes):	1825777
Entropy (8bit):	7.928990785343967
Encrypted:	false
SSDEEP:	49152:7MeLWDxWFgBNkNX2mdg13qGRMtonP6H1zihBojPa:7YDFBNkHG3zM+P6cD
MD5:	D401EDBF4FE4B6232E2BFACBE654867B
SHA1:	9B27F0E2602F810064833C9E37696930C73978CB
SHA-256:	990349E6EE382B1323A7088A2E206F5078BE62660E8284226D1EC6D6A1F74070
SHA-512:	D98D56CB835C1119DE2C55AA380BC1B86A5189246A283C55F786C78DFF4F85B9A35F473B28B06A1415CB4187A82D018E806A478220B5CEFE263635BCD3F78177
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/88a3f70f-cf12-44a6-b0a4-af03a8bf3cb5.png
Preview:	......JFIF.....,.,.....'Exif..II*.......................................................................................................(...........1...!.......2...........i.......................,.......,.......Adobe Photoshop 24.5 (Macintosh).2023:06:27 16:07:43...........0231.........................................XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch...

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	dropped
Size (bytes):	1468
Entropy (8bit):	5.803059127452011
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccATY+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtF17diAsLqJ:VKEcUbKo7LmvtUjPKtX7v1hiBLrwUnG
MD5:	A625B9CECE22F33E4FAF90A9B77364B7
SHA1:	061A32A1A7C0A9706FD975711212EAF4414CFB36
SHA-256:	E9A9C2D2911C343FB8B36D0C9A717ADD553125FC98BEDB47563122AD11D64178
SHA-512:	8E12EC0B7591F17CDFE665B803EA03334937C27DEFE5F62A129F04D0BDC055D410D44964AF7503474D8A2F2CCD767C672199F0F332F1627838EFA653FB2CB0D7
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	22701
Entropy (8bit):	4.604252370370754
Encrypted:	false
SSDEEP:	192:vJVZS5FIBZyvI6+t+zSJQIng0EK9nrCuN3ZqV1Z75xeeKRx:bk5K/aItmS1oV1l5K7
MD5:	07F1F63DD438F13F37E8FD2404F85F77
SHA1:	1A8F182A08CE1CE40BFD6B7F39BA08AC41C44213
SHA-256:	1791474D51E9CD0BD80634BE1A675F21D554A4ADF177C4958A1E96942AE27361
SHA-512:	6B9B5FA13360DCC64FAD9808B5F1E63014709AF2E4C7A62577427C480A2D63B1B041307B7264D4DDACE774858178AA2E0A9FC0FD1789BB6B8B5011D6E716CCA6
Malicious:	false
Reputation:	low
Preview:	....var checkUnitType = $("#checkUnitType").val();..var websiteLogo = $("#WebsiteLogo").val();..var currentUrl = encodeURIComponent(window.location.href); // Encode the current page URL..var WhatsAppNumber = $("#WhatsAppNumber").val();..var encodedWhatsappNumber = encodeURIComponent(WhatsAppNumber);..var weburl = $("#webUrl").val();..// Construct the thank you page URL dynamically without explicitly mentioning the controller..var thankyouUrl = '@Url.Action("ThankYouPage", "Home")' + "?url=" + weburl + "&whatsapp=" + encodedWhatsappNumber;..function validateContactForm() {.. debugger.. var name = document.forms["QueryForm"]["formName"].value;.. var phone = document.forms["QueryForm"]["formPhone"].value;.. var email = document.forms["QueryForm"]["formEmail"].value;.. if (name == null \|\| name == "" \|\| phone == null \|\| phone == "") {.. Swal.fire({.. icon: 'error',.. title: 'Error!',.. text: 'Please fill in a valid value for all the req

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	downloaded
Size (bytes):	1468
Entropy (8bit):	5.803059127452011
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccATY+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtF17diAsLqJ:VKEcUbKo7LmvtUjPKtX7v1hiBLrwUnG
MD5:	A625B9CECE22F33E4FAF90A9B77364B7
SHA1:	061A32A1A7C0A9706FD975711212EAF4414CFB36
SHA-256:	E9A9C2D2911C343FB8B36D0C9A717ADD553125FC98BEDB47563122AD11D64178
SHA-512:	8E12EC0B7591F17CDFE665B803EA03334937C27DEFE5F62A129F04D0BDC055D410D44964AF7503474D8A2F2CCD767C672199F0F332F1627838EFA653FB2CB0D7
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 700, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1529580
Entropy (8bit):	7.996715853007158
Encrypted:	true
SSDEEP:	24576:iYYXACmsku1YOSsXCnFcCr4pPdeC64EM+zPJB2gKP7f+Z/d0GSf:iYYXhkWmFix61T9cf+j2
MD5:	C4808956015247ABC7AEB02A29D3CD87
SHA1:	C29A683A15C5F7F85D7B4D8743B0708AE8FDD378
SHA-256:	342AA4275BFD270CD135B06D66E07B347A8F8C0E98F813F1D1BCA4193BCCE10E
SHA-512:	DF0CE81CD90F73A751B5626413CA5E6FCCD35BB56D2CE681C06CECC6E78183E7C9179F327CFD4960F1701A7A80625172F32771A5786B90B86A0A57BA0FE6CCE6
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/eba04e88-350e-4bb3-81e4-80cbeb119659
Preview:	.PNG........IHDR..............3F.....sRGB....... .IDATx^t...dYr.w3..=3..2B.......4. i..F..HB...........q.w.\LwU...'...q..........q....q....q=.....~t...n.....q......8...r=....r....~y9..q<.gz.Q..z....z9...r.+?>........s..s......%.............s....>z........x};........~../......<j......w/....c......~....o7......_\|9~..t<??i..............v?..n......x=../...?...\|y<....K..................v.......z.._.....G..z.s.~{;...h....x{.u..ym.....k..].u9.....8..O.......k..D.O..q\.../_......x~y>.......q.^%....3...P..w.;k@.....m.....5..~...@.?.....8?.\..Z..._}.C.y.<.5.Z...C?+.....U...G............kn%.........-.^.z.-rx.g...z=..............E.k.j.KFK..]...Z.............x<>]..O..G=...F'.}\|h...?...z..J&.j.u..=u.K.<#..s.....<k.....]..w..9k3{Y..z.g..Y..~.9.:.#!.........z...u..k...K...s......9...../.....=tW.7m}Er[{.....<.Q...5?.W:R.-....H.._.n.M..tgII.]..']F.u.....~.....G.=.4\....({..Z...zW..R8~L..1[..Y...kJ..%.5.:.>.~Z}......;kGek$.......?.i.!.ER/:...{.N6J_.....~.d.FR..z.Y

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1002), with CRLF line terminators
Category:	downloaded
Size (bytes):	539425
Entropy (8bit):	5.111315307523134
Encrypted:	false
SSDEEP:	12288:BEebHeg/md/AHhsncaL8ata+3XIdCgTf9kDUUB:EoHhsncaL8ata+3XIBf9kDUUB
MD5:	8EC0DB1CB8ED2395C5DF4E11BE0D86E9
SHA1:	D91E3C65E262D7E0021A926D228B9F6AD9AEF4A9
SHA-256:	97BCA2A8204372F21C29BC2D6CEEB192EAB0719F1D154E1073F04ACD8D2F0064
SHA-512:	0BBE5FD8A7991D8F0BB43A0DFF3BC1130F5E2514524FCCA9DC4662815155644D44A550BA2FFD92E86177C024D28319DC28A39D007C01BFDE6BDBFE3D429C8F71
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/microsites_assets/js/jquery-ui.js
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14.. http://jqueryui.com..* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-1-7.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	79242
Entropy (8bit):	6.019678305853488
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOILbuhXwW4nxM:mGRFauOxLA/+IcTOBX/
MD5:	A0CE64213F4F6193A598DE1CDBAEA665
SHA1:	FEC9A873B214601198F7312BCB1BF99204014085
SHA-256:	F0DFF86310E9D08A2D80DBE68BAE9367F8CD6CBD4B7D036F09B0702D035C7E8C
SHA-512:	72DA125D31FD39B9B6571286C9B4B35D2B8875C8E299155A4D44742FF2B3FDF9B8CD5A7B888CF2BA26FAF4842EA6810CF7D6DEE5DC4B7E55AED03C623884356C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18050)
Category:	dropped
Size (bytes):	18670
Entropy (8bit):	5.65098474031577
Encrypted:	false
SSDEEP:	384:KmZugm8YvH/gvUb5YxczZflxXESc7hbnaeJIyjPQWr:egm8YvH/gJx0ZflF7AaeJTTr
MD5:	0E0CFEAFAAC28AE24B801A4D3EA67C72
SHA1:	43D22F7513A529D17D9C75EE7B9B58E9BA8643D5
SHA-256:	C6B9CB7C21234ABA4647501854CCABCAF51733C39430EE2C0BD4FD1B6EC5DF31
SHA-512:	9FAA65A0821F7F3B39D6A91CA66E489DB053762F7994B156D99C61901019D81A1227BC4A14B15E0C42648A60B7EB1105B28731CA8988FDD9F9182BA557464047
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var F=function(H,a){if(!(a=(H=null,d).trustedTypes,a)\|\|!a.createPolicy)return H;try{H=a.createPolicy("bg",{createHTML:y,createScript:y,createScriptURL:y})}catch(u){d.console&&d.console.error(u.message)}return H},y=function(H){return H},d=this\|\|self;(0,eval)(function(H,a){return(a=F())&&H.eval(a.createScript("1"))===1?function(u){return a.createScript(u)}:function(u){return""+u}}(d)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var od=function(H,a,d,F,A,y){function B(){if(F.B==F){if(F.v){var J=[l,a,d,void 0,A,y,arguments];if(H==2)var u=W(F,(q(J,F),false),false);else if(H==1){var P=!F.V.length;(q(J,F),P)&&W(F,false,false)}else u=Hc(F,J);return u}A&&y&&A.removeEventListener(y,B,c)}}return B},h=function(H,a,d,F,A,y,B,J){if(H.B=(B=(J=(A=(d\|\|H.P++,H.I>0)&&H.W&&H.b7&&H.s<=1&&!H.j&&!H.S&&(!d\|\|H.i7-a>1)&&doc

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	20488
Entropy (8bit):	7.882148098623626
Encrypted:	false
SSDEEP:	384:wYNg7QhlpyyW7yQbhbzqYcWCCkz7Nrg8Bl7weMfen2:wYySlpyyQF2YcWCCkzdg8BqeMG2
MD5:	EEB3005EA501570C834DB852D824271F
SHA1:	A217F1015BE764288AF122E0D55D5795C0A8CF52
SHA-256:	EB53DB66A45CA46FE751FFAB878CFEAAB214CA7FB1E8BD8B006EB4C878F63B94
SHA-512:	BB677CCB7B6F76FF7635D533862F8C6F8E0C0A2B175C383F2D42E12B5EBE0628EF9EF657BCEB3DFFDFA4E61C1ABEED493F9C64959315819B2DD07A94DE7D5824
Malicious:	false
Reputation:	low
Preview:	RIFF.P..WEBPVP8X....,...t.....ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 818 x 495, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	842701
Entropy (8bit):	7.996754271220854
Encrypted:	true
SSDEEP:	24576:mh7NxU/NWZHuRFuebxwh0XttBepAOO+Lxvx93FW:G7NxsFwh09tMu+Lv91W
MD5:	E3D27E7F46983D514A85323880B8EC60
SHA1:	4E6EE5294F8BBD2B313EC9C246C9ADF555C25934
SHA-256:	0DF6E5DD2FA4383A4848DE1485455C321409C919F6E311D0635C532EF9C9A22C
SHA-512:	C66AF47AB9187B7CA4F3572B1FDCAADCF523CCACE4FD0707D6C8BCA31508BFB5C0FDE54AD467A1D1877B921AC17F893A1210961F2383E37F765C51EA2DE18709
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2.................sRGB....... .IDATx^d..\.\.y.p....&."?@.\|......fs...%.>]@f.............___/...W.......xy<........x>......//....4..........#.W........m....S.^2.......{y<..T._q+..k.._/........z..y.G...{<^.....W..=y....>7...{y..P.......~..w.....-...}^....L......S..{BF;O..C.^._.(....=...z<.3...n......7.>W~.q.{.....]..:.u.YO.}.5s...q}.#..k.u....'.y\|>.^2....3x.o...c.Ic......z...\]...t....v?.zqm.O..ume._..~...~....]..o...x\|.9{m....\|<.^s........w.......7.....fof=\|...W>....:.l...\.}...p._..o..~..xy.g.\|}.}.G;.O..x.s...Ly..g..{..Y._}.o........-v...u...}..\|...........ub[^..}.<.[...~..............\|y...M.#..d.\K<.w^......-..m....x.dOm..Y.S...A......k.g..bk..YJ....\|=>..}'.2v...s....yx..z..7.........M...:..6lv...C...O.......Z.......y..G.%.~l........{..../..vD.B.'\.k.z...X_.-.}.....eY...~*6.....s.g{...Om......^7W:.<..Ce..L..,R..q.....V...o.g...k.............?.I.1_.u\_.D.Nwrj.v?...\|.....O....l....l.1....$......\|v.e}.~..(.~

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 650, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	577902
Entropy (8bit):	7.996581718212616
Encrypted:	true
SSDEEP:	12288:74lt2lRa/eQbqiE/SLcjVsWZwZgM7TMB/pAFAN:74WvQeQbajVS7T+pAk
MD5:	D99B5C3ED8DDA3EEDC62918E4BD78716
SHA1:	3FD6530B3154299753D03F821948F9AC400DE43E
SHA-256:	7858C3FEB1FF905AA996832DB0A186BAB595B7094B0648358471376C42ACD780
SHA-512:	1012BBAD373F8257F754E5E279EBD41443355EAEDB99F23094AF928425BBD88C69AA97684E887F06F6ED7474246302A9A48CB311ED13F6718B518424B1F304D1
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/fc467042-6800-4049-83c5-910869ceffef
Preview:	.PNG........IHDR.....................sRGB....... .IDATx^..l.R.V.....?A<.2..!cY.6..}.....<di\q...#c..1#2WU.>.l_N.=..j.\............\|\|.n...v........w...w.._}\|.............v..0...x......=....4.}.F_s.....\|.../.5..;.z.<.;.i#..sN....~{...Yj...=.......=...zp?..E..Q..i....j...N{..^rG.ykN...;E.....>..1....y..x`N..%...^.~/.\|...sA.......`n{.dn.c...^.......\.yM.X..S_-.....z.s.`_.^8_;..........W...a.NsJ.h1.Y(........z..f....\|~...{......t).....%..Q...v..--.y.no1..T:.sxF.d.. i..G.,.+..H.....W.$.#...>5...\|F..2.c..... .4.">...>.%....^.]DY.r.)~.5.8.......~{...Q.2.4].......+.@q ..C..XV...N[99...RF!.}..t.h..~{.O..q9...\|.....+.CN.6.y..Nv.........A.$.....r..u........Z*%H.t.....j.....=z..!...O...k......y........mN#.x..W.JJS....Q.O<./S.;7C...g...,...].A.e.C..sY.x..\|,y.g8.....h3.v.....I.a.v..[...s..h\|!.(Q..x.e,.R...'..>./.d.I.1=.fv.v...W.6s.....i.s.x...J..y...\|.........".......+.f#z.q.h......`.)..z.....^./X.......].g......c.ug.+!.............j9.oT."..}..E...%...

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65294), with CRLF line terminators
Category:	downloaded
Size (bytes):	78135
Entropy (8bit):	5.198158768678848
Encrypted:	false
SSDEEP:	1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZd:u36WJr9ixz
MD5:	2591536DC6F1D305043BE991897839AB
SHA1:	BCD392A2D95051811EA25008CA85CAA4BB0C4FE8
SHA-256:	237E83161BFE098CBEFDB3ED2EC69D4A7F2CE17A24F7CAA14D9F0AE5DC0A8291
SHA-512:	5B10DECE21AC84476C012D8FC54E068081AC54D2FF2590ED157D254C67DB1A2FEA9761B786884826C4D84CE8B1E6309CE8A52700EC57A76AA8396C749E449D32
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/js/Bootstrap5/bootstrap5.1.3.bundle.min.js
Preview:	/!.. Bootstrap v5.1.3 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10594), with CRLF line terminators
Category:	downloaded
Size (bytes):	11023
Entropy (8bit):	5.18976078625643
Encrypted:	false
SSDEEP:	192:Ed06H6Kn0E9ZosvACp1mhWXAy1dxsFn7ZnPD8xIDz+mIjhwYXyl8XHDhVlzbC/:hwGCeh7hpgmIhwYXyl8XHv6
MD5:	51E59A32C2FF7DC7D47B05BEF510A85D
SHA1:	1619F7CA1F469877654A493B325F12D4031A1652
SHA-256:	FAF4A82ED0DDD2B65B05F72830B1F8792998A49E1A2CCAE3AA17A5C45CBE0637
SHA-512:	AE77E3A7F0C80C13877D5462CA5C3A25CD8CA9EE584A56542DD0A36750F8A25C8013D1FACAB5F35AE340C9795400962965E81384E58A4D7946649486E6D5E83E
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/fontawesome/fontAwesome.js
Preview:	window.FontAwesomeKitConfig = {"asyncLoading":{"enabled":false},"autoA11y":{"enabled":true},"baseUrl":"https://ka-f.fontawesome.com","baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"id":13580758,"license":"free","method":"css","minify":{"enabled":true},"token":"a316664222","v4FontFaceShim":{"enabled":true},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":true},"version":"6.3.0"};..!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(e)}function e(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function n(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(t);e&&(o=o.fi

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	23177
Entropy (8bit):	4.0983277771614555
Encrypted:	false
SSDEEP:	384:suPmGzmECrshSSQCyF8jKQze/he/USlGA2Al:BO9EQ8jK78bl
MD5:	A1FB4AAEE1DCBFD24E6EC0FD67AB9645
SHA1:	77558A30FF578AEB671E2BDB574DF166751AA487
SHA-256:	C84E4B2E9E47490FF3FA125E0AA933F617633649358DA8861B4B430AB6AE9A70
SHA-512:	D170DF1B116589824F16B89D7983A8C5D80D22FAF01932E798ADB4C596C202F3DF2C640CCC752C6AA64AF19A07FA5B97191C53AD2E3AF80AB8D349C29C04F4FF
Malicious:	false
Reputation:	low
Preview:	/*. jquery.mask.js. * @version: v1.14.16. * @author: Igor Escobar. . Created by Igor Escobar on 2012-03-10. Please report any bug at github.com/igorescobar/jQuery-Mask-Plugin. . Copyright (c) 2012 Igor Escobar http://igorescobar.com. . The MIT License (http://www.opensource.org/licenses/mit-license.php). . Permission is hereby granted, free of charge, to any person. * obtaining a copy of this software and associated documentation. * files (the "Software"), to deal in the Software without. * restriction, including without limitation the rights to use,. * copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the. * Software is furnished to do so, subject to the following. * conditions:. . The above copyright notice and this permission notice shall be. * included in all copies or substantial portions of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. * EXPRESS OR IMP

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 650, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	577902
Entropy (8bit):	7.996581718212616
Encrypted:	true
SSDEEP:	12288:74lt2lRa/eQbqiE/SLcjVsWZwZgM7TMB/pAFAN:74WvQeQbajVS7T+pAk
MD5:	D99B5C3ED8DDA3EEDC62918E4BD78716
SHA1:	3FD6530B3154299753D03F821948F9AC400DE43E
SHA-256:	7858C3FEB1FF905AA996832DB0A186BAB595B7094B0648358471376C42ACD780
SHA-512:	1012BBAD373F8257F754E5E279EBD41443355EAEDB99F23094AF928425BBD88C69AA97684E887F06F6ED7474246302A9A48CB311ED13F6718B518424B1F304D1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB....... .IDATx^..l.R.V.....?A<.2..!cY.6..}.....<di\q...#c..1#2WU.>.l_N.=..j.\............\|\|.n...v........w...w.._}\|.............v..0...x......=....4.}.F_s.....\|.../.5..;.z.<.;.i#..sN....~{...Yj...=.......=...zp?..E..Q..i....j...N{..^rG.ykN...;E.....>..1....y..x`N..%...^.~/.\|...sA.......`n{.dn.c...^.......\.yM.X..S_-.....z.s.`_.^8_;..........W...a.NsJ.h1.Y(........z..f....\|~...{......t).....%..Q...v..--.y.no1..T:.sxF.d.. i..G.,.+..H.....W.$.#...>5...\|F..2.c..... .4.">...>.%....^.]DY.r.)~.5.8.......~{...Q.2.4].......+.@q ..C..XV...N[99...RF!.}..t.h..~{.O..q9...\|.....+.CN.6.y..Nv.........A.$.....r..u........Z*%H.t.....j.....=z..!...O...k......y........mN#.x..W.JJS....Q.O<./S.;7C...g...,...].A.e.C..sY.x..\|,y.g8.....h3.v.....I.a.v..[...s..h\|!.(Q..x.e,.R...'..>./.d.I.1=.fv.v...W.6s.....i.s.x...J..y...\|.........".......+.f#z.q.h......`.)..z.....^./X.......].g......c.ug.+!.............j9.oT."..}..E...%...

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=3334, bps=182, compression=none, PhotometricIntepretation=RGB, orientation=upper-left, width=5000], baseline, precision 8, 2560x1707, components 3
Category:	dropped
Size (bytes):	790411
Entropy (8bit):	7.980144821541063
Encrypted:	false
SSDEEP:	12288:oHJdQ/xoXw5oOOn4QCFnJjZqg3BoXDUK7Lu0rc0/+wsQT+Bfxd0dOR2vjeVWX:o0/OgFJlRQUYrcS+/y6fv0dOEvjecX
MD5:	9FC06372DA9E8073AA78E50B256AFC18
SHA1:	75638F9CB3220DCCA9F6BB683D2B127B23CCA90C
SHA-256:	45447DD3F10B37CD95CBAD578C94E878CD7E85881A5584A1A90F2C55A985C04A
SHA-512:	7D51D2065417C24D3BA9C9DE7F37A69344BAE78BB03479CC97F699009AC5B80D13F1474A5ABAEDE1D243979AAFAE7E1D94BDE4A4DE8B110FF7EE0EEAAB7AAF85
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....+Exif..II*...............................................................................................................................(...........1...".......2...........i...........0.........,.......,.......Adobe Photoshop CC 2019 (Windows).2019:09:12 18:11:12.....................................................................~...............(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................k...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...".c.I..U........G....w;...~...n'@.3......

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10656)
Category:	dropped
Size (bytes):	323939
Entropy (8bit):	5.677502255604551
Encrypted:	false
SSDEEP:	6144:bFAtpEzi3WOc6jQpGTR0JAzRVuNUYPY641dlmDY6UhBN/Sgq9bNw8W8tY9uOG2W7:bFAUec6aAzyi6Uh3Sg+bg8tY9uOG2UfF
MD5:	45C6611DF8882CE6646EE7949D010DB9
SHA1:	707C46A92353525ED3210DCD2F58B4F41E35737F
SHA-256:	26686F9AC24711EE205BCB8C909C97855B457DBE207CB249AA9A412A8AA01D9A
SHA-512:	9360D51894C1DE1AD6DF7330E6B5FD5E8D6127502F820698788EDDEE4863141D68AFB3B394FA5781AC8786F81C92B1AF3D65F504EA5D77D963289340E99F2379
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=988\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=988\u0026hl=en-US\u0026"],null,null,null,1,"988",["https://khms0.google.com/kh?v=988\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=988\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en-US\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=163\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (360), with CRLF line terminators
Category:	dropped
Size (bytes):	93440
Entropy (8bit):	5.124671423032388
Encrypted:	false
SSDEEP:	1536:Z5u1MHUCBjloTO6JyqaiYhKPQ4ZarMMEpEa9wleUBj/DvRM3VX:Z5GUjloTO6JyViPZpMEpFalrBj/DvRMt
MD5:	C1A79EA184D48EAC08037A68032EE093
SHA1:	2BE9BD99A52C926049F988A87A38F668F5E2E9D2
SHA-256:	93AB8AE2581EFB90C20445709B7402E82BF74100B1446860305BB5D118917775
SHA-512:	A7AC0A94829F4D9868A49BDB76BF6863E44FF1E2941F40B4D316778058FAE968D8BB7BA77D57F4B0ABBBC027FC6AFBC914666A76476091C3D6782ED12D370BF4
Malicious:	false
Reputation:	low
Preview:	/*.. Owl Carousel v2.3.4.. * Copyright 2013-2018 David Deutsch.. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE.. /../.. Owl carousel.. * @version 2.3.4.. * @author Bartosz Wojciechowski.. * @author David Deutsch.. * @license The MIT License (MIT).. * @todo Lazy Load Icon.. * @todo prevent animationend bubling.. * @todo itemsScaleUp.. * @todo Test Zepto.. * @todo stagePadding calculate wrong active classes.. /..;(function($, window, document, undefined) {...../... Creates a carousel.... * @class The Owl Carousel.... * @public... * @param {HTMLElement\|jQuery} element - The element to create the carousel for.... * @param {Object} [options] - The options... /...function Owl(element, options) {....../.... Current settings for the carousel..... * @public.... /....this.settings = null;....../.... Current options set by the caller including defaults..... * @public.... */....this.options = $.extend({}, Owl.Defaults, opti

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1560)
Category:	downloaded
Size (bytes):	1775
Entropy (8bit):	5.086883427840699
Encrypted:	false
SSDEEP:	48:wvPioGysd99D9ND9dKh2EZGS1eYzs9SHgm4:aP679RNRdKbgMGSM
MD5:	00BB3D26F3FEE308E5747EB9F5760B48
SHA1:	10FFA11714CE78407AC429CCC732BBF00603CD94
SHA-256:	852DB4D1E3C440DEAA05229FA8BEB300BC959F16D0F9C2BE168173A26C68E1A9
SHA-512:	4F00CC7153FC814F32F2284D3086F9D9C3843F9A02DBECD23A925C2327F47ACB7122AF091D110112F790C3FE8BEDB35FEB499F5376F63EE6F3846F8D20E5A417
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.3.0/css/free-v4-font-face.min.css?token=a316664222
Preview:	/!. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.ttf) format("truetype")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.ttf) format("truetype")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-regular-400.woff2) format("woff2"),url(../webfonts/free-fa-regular-400.ttf) format("truetype");unicode-range:u+f003,u+f006,u+f014,u+f016-f017,u+f01a-f01b,u+f01d,u+f022,u+f03e,u+f044,u+f046,u+f05c-f05d,u+f06e,u+f070,u+f087-f088,u+f08a,u+f094,u+f096-f097,u+f09d,u+f0a0,u+f0a2,u+f0a4-f0a7,u+f0c5,u+f0c7,u+f0e5-f0e6,u+f0eb,u+f0f6-f0f8,u+f10c,u+f114-f

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5655
Entropy (8bit):	4.2109922663057
Encrypted:	false
SSDEEP:	48:yZ9qbl9UcBjmau3ka3Rs2l56jOwXq2+JEnrWdYFu4h:y6p9ULau0aDl7BoFuE
MD5:	26B98F8D8E285619068CD0C042C47876
SHA1:	6C78EB73C234C101EBC842E15D9C98973F151BF7
SHA-256:	844F0BA1BB02BAEC601536B3AE5E941DAC5B4DC0DB0BCFCD96FD04271DE58C3B
SHA-512:	1C53E24DCC4BE9E4A7338B946A7D3F211F157674B79046F1A844B92F531517285A4AD42C04D076E3BB90CA2EDFCBB552BEDD14D68E0C85B82BF1E42504B03F75
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/microsites_assets/js/map-script.js
Preview:	(function($) {.. .. "use strict";..../* --------------------------------------------..Google Map..-------------------------------------------- */ ..window.onload = MapLoadScript;..function GmapInit() {.. var Gmap = $('.map-canvas');.. Gmap.each(function() {.. var $this = $(this),.. lat = '',.. lng = '',.. zoom = 12,.. scrollwheel = false,.. zoomcontrol = true,.. draggable = true,.. mapType = google.maps.MapTypeId.ROADMAP,.. title = '',.. contentString = '',.. theme_icon_path = $this.data('icon-path'),.. dataLat = $this.data('lat'),.. dataLng = $this.data('lng'),.. dataZoom = $this.data('zoom'),.. dataType = $this.data('type'),.. dataScrollwheel = $this.data('scrollwheel'),..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	30328
Entropy (8bit):	3.663461882867988
Encrypted:	false
SSDEEP:	192:STvohNZo/O8HniPVcLUcizrTvoUNZo/O8HniPVcLUciT:Goh/8CPCLYznoU/8CPCLYT
MD5:	C03E1DA7F3C40AF33A117DC869FBB1AF
SHA1:	97CA127397C88DBEFE5859452311BF28E90ADE5D
SHA-256:	301F62F5421CC8F7AD0CFD70C257D4A7983BFC49C0CE8CDD99204BBA72B2F79D
SHA-512:	29B4A178B69370FA420132BD0720BAE52D7BFC6F0706F08CB03A2D6FE823DC7E3A673141CC17CA4CC0C3809354D155F5844F23AA57FFE281047EEFFB52BE791D
Malicious:	false
Reputation:	low
Preview:	// API callback.callback({. "sourceLanguages": [. {. "language": "auto",. "name": "Detect language". },. {. "language": "ab",. "name": "Abkhaz". },. {. "language": "ace",. "name": "Acehnese". },. {. "language": "ach",. "name": "Acholi". },. {. "language": "aa",. "name": "Afar". },. {. "language": "af",. "name": "Afrikaans". },. {. "language": "sq",. "name": "Albanian". },. {. "language": "alz",. "name": "Alur". },. {. "language": "am",. "name": "Amharic". },. {. "language": "ar",. "name": "Arabic". },. {. "language": "hy",. "name": "Armenian". },. {. "language": "as",. "name": "Assamese". },. {. "language": "av",. "name": "Avar". },. {. "language": "awa",. "name": "Awadhi". },. {. "language": "ay",. "name": "Aymara". },. {. "language": "az",

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 466 x 535, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	109003
Entropy (8bit):	7.990259360606957
Encrypted:	true
SSDEEP:	1536:wWl/p0So0CYLWxWgrBE3xwoNMY2W0tQ3A0aWE6Iug+r/io8SYdEX6FoHU1tuu7Me:rBtC0mfdiiNW06+2nKtjECH7vgO0tm
MD5:	F334B42152E485191B77B3EE168D5F59
SHA1:	ED00701C211581CB46AF7F4D51F204ABD4410F50
SHA-256:	175CFFDC47AFA395B02ECFFF787EE78FDEF724089169DBFE4EB48EF6FE35BBD7
SHA-512:	98A3CE9C2A2714E882852EFBAB08FACC92553AF06AC84B8388231555040AFB84124CA94E9C53899392E88A3355FA993E08E26EF38BCCC03D1616F2A7A2E86F54
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(......sRGB....... .IDATx^.}..U.....2.T..`I.X#..1QL...'.t....T%...P........FM.......b.EM.Di3s.i{....w....{g.y..3w..........Z/.z....=y.O....4..?....b........\|.(B._..N...]...J.....@.O>/tU.....={...../.\|.../.q/.b]..f'F.'..k..G}........1.H.....>..L.H.[F..o.N..u.. .. ..........)`;I....t...;...v/.......W...(f.j.t...3.}....c...$..G..<Pt....H9.....Om'...l..'..\...u.s.$0.A.....(..x`%..,..{...-kWM8sH.7.i.]K.t$..6..K.......tu.p...+ @.......O..o...M/.vdG.nB..h...#R..(....<c.h.....d.T..d..w......:............v.(..../...;CCe.P.p...B%e.........'L&.D.[g.....D%...@1!..H7.....LpPT.M.@...s0...\..C.>..m.b......b.=.........y..7o7C%..#......]._..f...a.a.CcV.sB"P..B.k!.4..g..Wo.....]....pG.3d..,..d..m.G..L..L..$...3VTn.m.....Q...'q....G.q.............G.!@.tE....u-S.<.....<.O..PU.l.H..bUU...eZ.'..q`.5..8.?.v..T.}f_..7...[.y.w;.x\......=G.o(..$..L.H.t..@..h.H..].DC..\.u...{.T..QT..:.15p...{.....v..g.e......;.........LW...

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (2063), with CRLF line terminators
Category:	dropped
Size (bytes):	167651
Entropy (8bit):	4.932326269236075
Encrypted:	false
SSDEEP:	1536:H3MfY76EIhy6rxpBc9fGIKV9g9aygt5cIj+gSojlRjuqSuAFxcOuw8o0raSMB5qC:JFSe72jlRx0FxvnQC
MD5:	88040EB035E1E1E0F9FAB4B5002C903D
SHA1:	3C8EFA7D556F4F0DB5FAAC60E731AA8BDA57E0A5
SHA-256:	87A9A3FFE84161120548B405A04E01401F5ACFABB95827B0EF2E6963BDC1FAFB
SHA-512:	D6E863AE444DEB18240EE16379FC329F7AE0548DF732FA74F31D482ED56C541BE4D1D29300226299365C5E99550D4F7DCDF7CAE9F5C7A0020DEB71EF479D8553
Malicious:	false
Reputation:	low
Preview:	./!.. sweetalert2 v11.4.33..* Released under the MIT License.../..(function (global, factory) {.. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :.. typeof define === 'function' && define.amd ? define(factory) :.. (global = global \|\| self, global.Sweetalert2 = factory());..}(this, function () {.. 'use strict';.... /.. This module contains `WeakMap`s for each effectively-"private property" that a `Swal` has... * For example, to set the private property "foo" of `this` to "bar", you can `privateProps.foo.set(this, 'bar')`.. * This is the approach that Babel will probably take to implement private methods/fields.. * https://github.com/tc39/proposal-private-methods.. * https://github.com/babel/babel/pull/7555.. * Once we have the changes from that PR in Babel, and our core class fits reasonable in one module.. * then we can use that language feature... */.. var private

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 108000, version 771.256
Category:	downloaded
Size (bytes):	108000
Entropy (8bit):	7.99230476163115
Encrypted:	true
SSDEEP:	3072:5e/4ksa6PreNV5zp0q0iqCwrrkBwCYTvuK:5e/4TreNV5zKDzrkBwCYb
MD5:	3A97D67DEB684F79E3C15C05718BE7E7
SHA1:	950E246881739EF22E747B5FA573E88114344159
SHA-256:	F7A5ABA06E482E1506BDF5B3A730147D4A0ED7F088F6425CC9B166BF8A105FD8
SHA-512:	42A87BBB4020A83E781842DD78045EE62FE9F0E6721D6F449CFAF52A778A041894210E72D11944668962A4CE6E308E7DF3DFCBF0148CE95D46C6A342ADCB3131
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v6.3.0/webfonts/free-fa-brands-400.woff2
Preview:	wOF2.............................................8.$. .`.....`..T.... . .ybq...:..P.o<(#.Nj.....%!.T5..._~.....?........v\.7..u.[..A....C..p%...v.$^R.8U....1v..tD.$......k{.?...&...}..Uo.t.@.d........s..w......`F.-.C..b)i..l).4nw..`7as.{.P...b_ .%...8........km+.}...G..+}........xl"D/.{.G.... ..2h.....,..x.....G...........U.].U.q...j.5#..,.dK....8...A.C.d...$.Y.d1Y.......~...e E.x..5.P.R........P.t~p..x.x.A 9,..@.]..0...QSm..:g..X....z.$GN.8...Y..S\|.t.b..........{.../.:b_V.....#..FV.Y.=...........p..A.?..\|%......".@.f._d.+......8..rbw.._..../F\|%.sw..........k8......6.b.tM'"......f.\|..8.hUDE..4V......Y....o.\|.).!.l..\|.m..P.#T.X..$.Y......1,.F...4.......x.OFP..+..u.=........>...{....TD...K.......T.....:..NU..Z]....B....e\...,..../.Wc.%..].......+M...=.Q...A..wb*Q.h....[..._.Y..6..K.-....re......8{......I.Lr.ggbJ.:.^.x.hC......$..9..L....r...i..2D}{nf.g<'.u.'.....?.Y...v.t..L5.z.So.S..a-r.rS..@.....Q<....sE..h7.....M...sL.=W....

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1344), with CRLF line terminators
Category:	downloaded
Size (bytes):	7578
Entropy (8bit):	4.842525553431084
Encrypted:	false
SSDEEP:	96:95cNA1QTREKf9I2YhhBJ5cNA1QTREKf9I2YhhBZ7Lh/tdfyi2G/bQ/bvWkE/WGQ:wW1mKpEW1mKpZ3OebkbEG
MD5:	3183F36EF1D3F24A2716B891835A482F
SHA1:	F63A9BE7D3313F9A2C4D1589D42B861F7710AC00
SHA-256:	EDFDF261979A8C1E929327FA17DBA5E2D6B3CAE82972BB69C24AECECB35DB5C0
SHA-512:	CC9F792E22E20FB5189F2AEB11B8C18271A7DBF8AA914F7DB6E5636AFC6C549A9FDEEBBA134837DB56F0B2CF8D0F71108030542E16B4B14CA532CADA855DAE94
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/image-lightbox-plugin/dreamimage.js
Preview:	(function ($) {.. $.fn.dreamimage = function (tempName) {.. var cs, x = 0;.. if ($("#dreambackground")[0] == undefined) {.... $("body").append('<div id="dreamland" style="position: fixed;z-index:214748364855555 !important; padding: 0px;display: none;top:0px;left:0px;"><div id="dreambackground" style="position: fixed;height: 100%;z-index:1000;width: 100%;background-color: rgba(0, 0, 0, 0.7);"></div><div id="tool"><svg height="50" width="50" style="cursor:pointer;float: right;z-index: 10005;position: fixed; right:10px;"><rect x="0" y="0" height="50" width="50" fill="white" style="display: none;" /><path d="M 5 5 L 45 45" stroke="white" stroke-width="1" /><path d="M 45 5 L 5 45" stroke="white" stroke-width="1" /></svg><span style="width: 120px;background-color: #555;color: #fff;text-align: center;padding: 5px 0;border-radius: 6px;position: absolute;z-index: 100000;left:50px;top:10px;display:none;">Close</span></div><div id="dreamcontent" style="text-align: cent

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65342), with CRLF line terminators
Category:	downloaded
Size (bytes):	71756
Entropy (8bit):	5.119955657637811
Encrypted:	false
SSDEEP:	1536:X6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:ykZgwh1nAukdDO3Xyr5Ir5eh0dTo
MD5:	B3D5B75898F1ED885C7D2B538FAA8B81
SHA1:	BC96496831F4DF311443B8E3D76CFC17DB53A988
SHA-256:	A61E123314188BD0453320008E01B4BBB665BEE09039F4CBD9BEF44DE410CE67
SHA-512:	BE097927CB6F3C12EE4140A60F11DD56BCB1E8661B35848F25F1AE2417B65190924D73D2D01C04C6763FC2C50D3931CDDBC2AA74CD945F84145D3F3FE451F433
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/css/Animate2020.css
Preview:	@charset "UTF-8";/!.. animate.css - https://animate.style/.. * Version - 4.1.1.. * Licensed under the MIT license - http://opensource.org/licenses/MIT.. .. Copyright (c) 2020 Animate.css.. /:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.animate__animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-duration:var(--animate-duration);animation-duration:var(--animate-duration);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__animated.animate__repeat-2{-webkit-animation-iteration-count:2;animation-iteration-count:2;-webkit-animation-iteration-count:calc(var(--animate-repeat)2);animation-iteration-count:cal

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8326
Entropy (8bit):	7.854867527348164
Encrypted:	false
SSDEEP:	192:iaOSykknUHdnEjpof7t0G6Eh6vWYOY9LWO9cKWGK+gcAcH3LT:ioenU94pofRP6sRoWjcH3v
MD5:	3350646BE726C4434276DC1DC28B9293
SHA1:	5DE84A1224298CD56F4FD8880DBEAEFAC0C2357B
SHA-256:	CD3D58DEC9D8F921DA9DE2C55E7756CB0DA3EB06D249F28D5A384AF207D4A61B
SHA-512:	A8390427EC3235EB19BF2872A985718DCDC33668A5559AA650219ABDB153ECC71FA29D90C5A7346D8D3ED2FDB7A138CB62C0FB710849E8C3C8E6E80914A887E0
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/images/translate-icon.png
Preview:	.PNG........IHDR.............>..z....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2023-04-08T16:15:11+05:00" xmp:ModifyDate="2023-04-08T16:23:41+05:00" xmp:MetadataDate="2023-04-08T16:23:41+05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:7f0797f2-68d9-1447-b755-586179459d3f" xmpMM:DocumentID="xmp.did:7f0797f2-68d9-1447-b755-586179459d3f" xmpMM:Origi

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (564), with CRLF line terminators
Category:	downloaded
Size (bytes):	32467
Entropy (8bit):	4.679164328251552
Encrypted:	false
SSDEEP:	768:/4h0gRA7RA3R+R5+ERA0R+NH0ADH0iMoDU0vEEcuXyJtTN:/47RA7RA3R+RfRA0R+NH0ADH0iMoDU0K
MD5:	2876E520C29EE9907425853AF278237E
SHA1:	ECB2698F47FBF1CABE88ABDC9FDDD3E2629F1ECA
SHA-256:	FB2687577CC0B7D5BE8C510B4AE3F76C1BBC9ADB43D67B0431D58C19CB5A7AB1
SHA-512:	D41CBCF871D010C9CD8606DCC8423BD1211670B8535DF038AEC77BBEA607CCE8E7978E23FED2BE2307D6C68CE36859685E91E1254344A85CD60BA9D57920E812
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/microsites_assets/js/custom.js
Preview:	/*************************************************************************************************************..\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\| TABLE OF CONTENT \|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|..************************************************************************************************************..************************************************************************************************************....01. Revolution slider..02. Sticky header..03. Prealoader..04. Language switcher..05. prettyPhoto..06. BrandCarousel..07. Testimonial carousel..08. ScrollToTop ..09. Cart Touch Spin..10. PriceFilter..11. Cart touch spin..12. Fancybox activator..13. ContactFormValidation..14. Scoll to target..15. PrettyPhoto....************************************************************************************************************..\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\| End TABLE OF CONTENT \|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|..*

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4032x3024, components 3
Category:	downloaded
Size (bytes):	1112545
Entropy (8bit):	7.9714555723708695
Encrypted:	false
SSDEEP:	24576:PvsMTPKyk90EZDtVfzPjJRtZQLwl+Za8uNt6uLqRb+FeOKiBkH9jyeJ7:XsmKB0EBrrP7iwl+ZMtYDOKBHJ7
MD5:	CCD73EBCF9A490423957FCFA95496F1F
SHA1:	39DAAA7D5A7AEF49A43A52E523A36043A3616596
SHA-256:	FDFA18E631B64F85438087F75BAAF1ECDA109F05C692D6460EA8B0809B654163
SHA-512:	82C13716BD16CC81D5DC446C0D5E138171A908A9A78A59B5E6C37AF8C258160D24F5AE678194FAD142F3F3918FC2BE60E2446F9E283F418B1762C691118E9CD7
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/fe78f58c-fa4d-450e-ab38-1851e0e90a93.jpg
Preview:	......JFIF.............4ICC_PROFILE......$appl....mntrRGB XYZ ........... acspAPPL....APPL...........................-appl....%..M8.......................................desc.......ecprt...d...#wtpt........rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... desc........Display P3..................................................................................text....Copyright Apple Inc., 2017..XYZ .......Q........XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................Z.....................!..1.A."Qa..2q.....B..#...Rb3r..$C......4Scs...%...&5D..Tdt.'6EU.................................3......................!.1AQ.."2a.qB.#R3...C..b..$............?..Z.K......6'"(&..j...+...q.A..(..%f..'.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 282 x 132, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	31989
Entropy (8bit):	7.986343993061047
Encrypted:	false
SSDEEP:	768:P++dBmaLONzyAm4xtWNABdsagZp9Ku+fiSpbJ4N:9BLONzhm4GNABiZAu+fiSlWN
MD5:	6DFE14EFB6574148D80931B1DE3DBB68
SHA1:	B613B1169FB848CEE2AE8B5FB9DCEB4072CE83EF
SHA-256:	74EB79CBE8D152B8ECE05B72B33A042B71056457A79ABE8C83DEE2CCFB0E1620
SHA-512:	FAC5E8DB6322B5E0BB880B51B4F86DCC8C37D12C9A10262AD878041DCDED2F5FC1859F32374D03E94B58D7DD1703FF15A8110EFCF961F5D8505F2565D5908ECF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............O..=....sRGB....... .IDATx^.].x...~.7..........]......:....Tq.B)...!.4...n....\|..&..,..r.....og.;3......t:...6..(P.......k..F.....l@c..6..(P....M...6...6....l..Q..)`...'.m...l....m..(`.@.S..4%Nb..6..(`.....Q.F.....hJ...l..Q..4.=`....%N...8.m..(`...hl{.F...J..6.)q....Q.F........6..8.l@S.$..`....6......l.(q....Il..F...l@c..6..(P....M...6...6....l..Q..)`...'.m...l....m..(`.@.S..4%Nb..6..(`.....Q.F..........p.q$......../...........;T.o....wJ..g/].J...o.yCGZ-....R~.....2V..y.j.....J...8..B..8......k.......A..!!!.J....p....#.u..=e....h.....u..O]FJr. .X.S...T..Z..G{....?O}...mr.t......FZ..\|..>..5.T)...[.~.j.5@...<.....!......{.....h......?...44.j..I.ix...W.\...#:.....^.1..g{......4l.q@...X.f..<.._.H6.Z.W{)z.h...G 4..;0\_.@.`..OLA....2M.... ..B..r.]=L.9......YR...t.(Uj$'..IT.._..#G.....3w......o.s...Ftl.....g....gP.nu,Z2.....+.]...m..WP.....:.4............,.&j....;....S..AH.@+..c^8..x...{;..ai..h......VM.X..........Lll..m

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 466 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	32281
Entropy (8bit):	7.98117525360963
Encrypted:	false
SSDEEP:	768:xQ7AkACe3n+SBgcP9iFzurgotXWDqVm8uEUnqCm7:xyACA3gccFzI3Wqm8TUnM7
MD5:	325242F8D58EFAEEC42DDC9CFB48C7CA
SHA1:	8B999F279C0F6BFE3871A173A52A47EDB8EE7583
SHA-256:	8C8F2AD7394F21A98DE3B0200A17BED3833F98D06D33FBCFD610A6F60AE22B39
SHA-512:	40A4CB1775DB03DB168C04AE6DBEE5CDE56DDA60867665DCD80ACA224E916F52F5B8F454855DD1482DFAE8AB669307CDCF33E50E49D72EBD56103CCB2057C8EB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................H....sRGB....... .IDATx^.w$.....{..o.Q"E#Q....Hcv.....{.;o.H9R.II..(....{...ndV.L9.m..........w..X,...,.Y .@d.....Nd.....n.".D..,.Y ..,.9.h!D..,.Y .@d.SX r..0^......".D..,.9.h.D..,.Y .@d.SX r..0^......".D..,.9.h.D..,.Y .@d.SX r..0^......".D..,.9.h.D..,.Y .@d.SX r..0..yk._F,f.....y..C.q.v..4......".\|.-.9....6...3...-t.y.gy8.#..G.9...F..Y ..#e..>..)...........]............:X...}...+....X^^......./..."..+...\|../.\|~... .....,....}..?.......1.D..~..XLNsoo.v.Vl{{.v..mgg...^...mw......6.8X..;.\|..1...?.a.ZaQ....YAA..,....+.....}AA..l...o;D..Y .@d.G...#.W72p......i{.[....r..;k...j;;..=.sog#...-.;..=.'3%k. #5....3.Hq...2.R+(,....3.y...Ya...S......9OT..W.#:od......"Gz..(.....mo.....m......1k.....i.{......~P..Y..<...aw4.7.NhR?4(..?.?...-.2.J...-...+)k...&+.l....WZ~aI...u..6.@d.G...#=.{../.8ww.m{kY?;.K...d......h........<...".s&..I{..........2.B+,,...j+)....Z+-....z9....\.%..R9..Q.g`.....".D.8.....o^L`!...Y[_.......4l[....

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	232447
Entropy (8bit):	5.457177291672901
Encrypted:	false
SSDEEP:	3072:NfLeYH8At6Jn37OeR8NteGvQ+AMPpgArl0xYu58713dW:NfLeYc+6JrH8N7QQGArHu58713E
MD5:	2E42A77BDBE375D22751B45E143129D7
SHA1:	F5979889619D6D581291BB53E7028045A2130659
SHA-256:	F4CFD4A5B95DFB31C47CD567D9719FC12A0453F6FF27E2872147A9740E4B9E56
SHA-512:	7F6380B8CFB6D31AA5B089FC1CFC0FD154A1AAF597B6FA6E7CDCCB35F4D2BA7AFDC4688572345C4A271FA5F29A499E3BF96208AAA63A6B0686D1F7EB590626CA
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	125673
Entropy (8bit):	7.9668351695624375
Encrypted:	false
SSDEEP:	3072:bIe+9Ur27/sv2S3rBETlhzyyP+dEgpqJw29T3HtcLgsEofadCE9:f+Or27UeMOF3gYxTKVvadr9
MD5:	63000A705AA44CB5F113C6A700BE806C
SHA1:	D21833EB3A35720FB5F4AB1AD4ACB9BAD646CE2E
SHA-256:	CF019F930A3B582725992B4DB0BFD7F1AD2B5451ED491327B049CBA174913A5E
SHA-512:	E9EAF320B99F36145F039FABC51CC80A8ECADDC527AE3CDB271EA2775CD8676B21214C605308D4A6EFC4B91364A04451AFCFDB0C1E655BB1F0705DCEACBABAFE
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/assets/images/Calculator/percent.png
Preview:	.PNG........IHDR.............M.......pHYs.................sRGB.........gAMA......a....~IDATx.....\U...s.{o..4.%...D....?.JP...."..H..@.@.R...R......4!YP..!4.d.H%.>...{...lI...f....w.....3o...s....@...&j.[.....!.5.c.Qm......BP...?3V..-.N-.. ...o...^C..1V_.w.Q...~.50..c...R.u].m....v.......DM..jT..q.V..:..T.T....s.to..b.6..A....5.\|..3...U`.j ..u..........@....k...t../.Lv.\|q.!..:...^.......s.<..`..!............1w......[...l.`$.r..a%......W.yU.... ^g.Qb...E..:.....[.T.q>>...ZUj.2......x.D..wZh.2......... X......Zd.a{....Kt.=.WU..=..^U........:.....@..@..ZU..L8.,.$..n..h...%....`A.......8.PA.}. ..2...0.....@...Qi$......=...q(....e...d.....!@....S..sAG!+...oP'....v.v...t....m......N..f..We......0h'.C....z..:..ta....<.2u.../.7\..g....3......[..H.%.~..c.1.....6.#.=.,;.. @..(1..D..r..?P0...8@..%.....Yv..........r..(.....:....N...k{u.......t.."....x!`..(n.....N.!.P..Pz..;{.mv.p... ......Mv..1~.j.F.%..@...t..uu........ .T.z.....:...%....Q........... K..u....rx&...

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	20488
Entropy (8bit):	7.882148098623626
Encrypted:	false
SSDEEP:	384:wYNg7QhlpyyW7yQbhbzqYcWCCkz7Nrg8Bl7weMfen2:wYySlpyyQF2YcWCCkzdg8BqeMG2
MD5:	EEB3005EA501570C834DB852D824271F
SHA1:	A217F1015BE764288AF122E0D55D5795C0A8CF52
SHA-256:	EB53DB66A45CA46FE751FFAB878CFEAAB214CA7FB1E8BD8B006EB4C878F63B94
SHA-512:	BB677CCB7B6F76FF7635D533862F8C6F8E0C0A2B175C383F2D42E12B5EBE0628EF9EF657BCEB3DFFDFA4E61C1ABEED493F9C64959315819B2DD07A94DE7D5824
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/images/contactForm_bg.jpg
Preview:	RIFF.P..WEBPVP8X....,...t.....ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x420, components 3
Category:	downloaded
Size (bytes):	166287
Entropy (8bit):	7.972387058480307
Encrypted:	false
SSDEEP:	3072:ViysV4VoCJLQ/ju1qv3k7lZHjE6mrRVMcdwuDvBsCA:Vixp8QbzUZRYpr3MxuDJZA
MD5:	1FBBA1F29C2C9A00A5C3C8235F08B4E3
SHA1:	6AF017784CDD778D958CE60D5B310DD0D7E1753A
SHA-256:	71CA9E5E92249F965B8C37727256193969397060FD46A9DE056DAF60A04AEE50
SHA-512:	E10F5CBA8CF3A0505F201880138C3CEE672C600CFD56B86A4388E27B1D513C6226259B050F9AE422F4FD856C9973AF202907C1EA3B4790946F43D5A3EFA2A694
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/76160c82-fc06-46bb-8a14-0e4150f249c4.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(..o.(...gG.0D......1N8......_....YA...J..$L.A.....\|.iB.....}..r.{T.'..;}#L..n.. ..e.....Q....#&.4.\|5..Tw....g...P.$..@V.1...<U.j.n.w.3n5."..&.V.x..j..@$.cE......}-.`.=..G.j.t.Wh......8.'.48bd...Q......<.$..5.xo..I.5.......+^....U..Zk.FNK..t...XA3.c...K...F~..._Z~.....E....f..,Ik.A.....a.>.=........&.Yn./..J].[-..H..;..`w.>.....3\|*.#.E..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	50104
Entropy (8bit):	7.981356093857293
Encrypted:	false
SSDEEP:	768:KYy5Tq0gdnQWJ3fcB/77EoWaGZqUJHayooogsTe7rqO1r0zcu2:K9TqPztfcB47ZqUdodgT7rqOqc
MD5:	535FD561E2820475B3873452976E15EE
SHA1:	E5B0B0D9D70D4732A7466052601C901569C7F29C
SHA-256:	03B45E7FEED38A322A4DF2E05F1705E0908C54A2640250E444DD7454C4A5CE77
SHA-512:	F4B510127EF2B1CD2BCEF3517A996721D6002F8BD5FF0702B1D8F81AE769BBF682F9C14102D0C22CDE42FCD29CA0A6A60F703DC7A9524531BFEF8358231774E9
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/a148584e-6732-49f2-a1ee-96a1878c94a0.jpg
Preview:	RIFF....WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.731372038840301
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKgZ3eVmGEwjWaee:PLKdXNQKgkTL
MD5:	F3DFE1A46E91C1C5521B4ED0E336AE06
SHA1:	8112055ED07A442DD199C15A8B2C451A3E4B54E6
SHA-256:	724FC56703E050F8625D033339E4C69746C05564BA34DF35003A34ED59432657
SHA-512:	0570AADEDB1FFB2EAEB8A8454004C1EA63109712D07E9F0E1D08FDEEFA06FC8CD64C75688A2FE5AF7EE314E056BC744337FEFA8B5FDA95F17B2B0E4146D81C5C
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/aR-zv8WjtWx4lAw-tRCA-zca/recaptcha__en.js');

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2694)
Category:	dropped
Size (bytes):	220298
Entropy (8bit):	5.567322466508078
Encrypted:	false
SSDEEP:	3072:VHEqE9cHsT0BOa/IiQhCrCCVjeYJGzN04JuEgVkQfl3yCPyr81GWPyi:tEN3YJNtdl3y1u7h
MD5:	86FE5CC69ED34ED5F6039A357B6C2029
SHA1:	5F3A7335E5DEB07804640B67446718D1F4E1C336
SHA-256:	D17B36CC39B88B9B3236B5E03FE60553D142E0AF9F23E0F5EB314E462B56A724
SHA-512:	5FAE335B9519DA5DCB4841FB0E04C647A1F006761BFA268D8B4C62A907435277D8B9D69F4F8100D05486063C319BD826A508A2D1D32267F81766C66F209AAF63
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var bh,ch,gh,hh,jh,kh,lh,nh,oh,ph,qh,rh,th,vh,wh;_.ah=function(a,b,c){if(a.forEach&&typeof a.forEach=="function")a.forEach(b,c);else if(_.ea(a)\|\|typeof a==="string")Array.prototype.forEach.call(a,b,c);else for(var d=_.tf(a),e=_.sf(a),f=e.length,g=0;g<f;g++)b.call(c,e[g],d&&d[g],a)};bh=function(a,b){if(b){b=Number(b);if(isNaN(b)\|\|b<0)throw Error("L`"+b);a.B=b}else a.B=null};ch=function(a,b){return a?b?decodeURI(a.replace(/%25/g,"%2525")):decodeURIComponent(a):""};._.dh=function(a,b,c){a.j=c?ch(b,!0):b;return a};_.eh=function(a,b,c){a.h=c?ch(b,!0):b;return a};_.fh=function(a,b,c){a.l=c?ch(b,!0):b;a.l&&(a.l=a.l.replace(/:$/,""));return a};gh=/[#\/\?@]/g;hh=/[#\?]/g;jh=/[#\?:]/g;kh=/#/g;lh=/[#\?@]/g;_.mh=function(a){var b=_.Gc();a.g.set("zx",b)};nh=function(a){a=a.charCodeAt(0);return"%"+(a>>4&15).toString(16)+(a&15).toString(16)};oh=function(a,b,c){return typeof a==="string"?(a=encodeURI(a).replace(b,nh),c

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	148
Entropy (8bit):	4.795641973267506
Encrypted:	false
SSDEEP:	3:wWeinuE1inqEPAaCSDCLdGiunSOZkPQQFSEjmnSb9inuSoICkY:wAuEonqOnDCAioS/XSFSb99SckY
MD5:	2E21B6DF819B4C912348199932B4E87D
SHA1:	CA950F9F06422B12E2DEC0C254BB3373C7C970AF
SHA-256:	FAE207831D2ED6ED56CC7E3B42B6C9AF7A0582CC4EC7782B34D42AF0CA5D6182
SHA-512:	998B95ADF08B1C95552E4AF001AB62F37EB587D97305ABAB7B8D8B23A656FEE7BA71BCCADC52666667FD0FCE864F0B2CCA45891336C349EC97EFDD9B226D45AA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQkS9RX22Gff8xIFDekuvhoSBQ0Vcn_TEgUNsoFTrRIFDQ6HjjwSBQ0LgukTEgUNDiZX-BIFDTYRKyISBQ0AYtczEgUNOmW7rhIFDbWPI5ASBQ2UkJL6EgUNU1pHxQ==?alt=proto
Preview:	CmwKBw3pLr4aGgAKBw0Vcn/TGgAKBw2ygVOtGgAKBw0Oh448GgAKBw0LgukTGgAKBw0OJlf4GgAKBw02ESsiGgAKBw0AYtczGgAKBw06ZbuuGgAKBw21jyOQGgAKBw2UkJL6GgAKBw1TWkfFGgA=

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 818 x 495, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	842701
Entropy (8bit):	7.996754271220854
Encrypted:	true
SSDEEP:	24576:mh7NxU/NWZHuRFuebxwh0XttBepAOO+Lxvx93FW:G7NxsFwh09tMu+Lv91W
MD5:	E3D27E7F46983D514A85323880B8EC60
SHA1:	4E6EE5294F8BBD2B313EC9C246C9ADF555C25934
SHA-256:	0DF6E5DD2FA4383A4848DE1485455C321409C919F6E311D0635C532EF9C9A22C
SHA-512:	C66AF47AB9187B7CA4F3572B1FDCAADCF523CCACE4FD0707D6C8BCA31508BFB5C0FDE54AD467A1D1877B921AC17F893A1210961F2383E37F765C51EA2DE18709
Malicious:	false
Reputation:	low
URL:	https://rtdbookappointment.s3.ap-southeast-1.amazonaws.com/Bookappointment/Property/0015afb1-92d4-4cef-a624-d7433dda1593
Preview:	.PNG........IHDR...2.................sRGB....... .IDATx^d..\.\.y.p....&."?@.\|......fs...%.>]@f.............___/...W.......xy<........x>......//....4..........#.W........m....S.^2.......{y<..T._q+..k.._/........z..y.G...{<^.....W..=y....>7...{y..P.......~..w.....-...}^....L......S..{BF;O..C.^._.(....=...z<.3...n......7.>W~.q.{.....]..:.u.YO.}.5s...q}.#..k.u....'.y\|>.^2....3x.o...c.Ic......z...\]...t....v?.zqm.O..ume._..~...~....]..o...x\|.9{m....\|<.^s........w.......7.....fof=\|...W>....:.l...\.}...p._..o..~..xy.g.\|}.}.G;.O..x.s...Ly..g..{..Y._}.o........-v...u...}..\|...........ub[^..}.<.[...~..............\|y...M.#..d.\K<.w^......-..m....x.dOm..Y.S...A......k.g..bk..YJ....\|=>..}'.2v...s....yx..z..7.........M...:..6lv...C...O.......Z.......y..G.%.~l........{..../..vD.B.'\.k.z...X_.-.}.....eY...~*6.....s.g{...Om......^7W:.<..Ce..L..,R..q.....V...o.g...k.............?.I.1_.u\_.D.Nwrj.v?...\|.....O....l....l.1....$......\|v.e}.~..(.~

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 579 x 398, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	422955
Entropy (8bit):	7.995609616507028
Encrypted:	true
SSDEEP:	12288:F11+j6d28+cvO2v1F/RM2Zkt2xtA3/uAJu/s2SFQY:F11X2cnv7/RMKtPA3/uC1FB
MD5:	136D2EE60C3FD9397BBE8837205DC582
SHA1:	B4D6115D5BCDA093591BD0C370D7B29E3D4A3E65
SHA-256:	DE6E5EB4A16919D400EFE0849C5A50B5339EEFE0E864F72945606C8547019127
SHA-512:	40BA4150E5E7A61ACA110C998D9CE58E0A0EB284A1EC6F3EB0445BF1E148C22094D4CA19A9BE6BE4BF6F7CB59DDC48D9CC6B904BFAE087F3BEB6E8E70F8DB9FE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...C............l....sRGB....... .IDATx^....iV..<.3...d......bPh..FPA......[m.B$..C.Fq.V......).....;.i....<...E`.E$.z.".g....]...Ve........../~....b..F.Z.j....&..+.Jl..h.Z.Z....F....V.uT+.h..q}}.w....x....>..F....U..X,.}..n..l.... V.U...8==..d..FC...v.l4...z..V[.]...j.b.X.3\.^..n...byxn>..vc...r...7[...z..>b.\F...7......^.....g.Y..X.W.l6.NZ.f3b...f..ZM;.\-.}..g.....wQ.....~.Q.D...j.ub].\..z...b.....5....z.E-..[.^...;.3.L\|.kD%..%..L..j6.^.s.0.{..<W...\|...k....Q.....Y... .>.5...l.1......t:.n..{....1..b.^.]....{........6..u.j..5...u...X.G.fL.s..b...g1......(bo.mw.Zc...t.N..$NONc:...&...gC~c...l..fC..L..g..m...{%...:4$......Vk.......\......b..}.V...S....\...mw.lY.......f.5f-'...\|..lk....ga.;.vTX..\.e...k.u....@..^.Ut......n.b..H...A2.{lw...[...r.y..vZKd.w.5......5e......s.{.P.V...Y..rQ..[..A_p/.JE..a...e4.;.1..c0..h4*.d..[............F.XV..9....s.R.....S....{...b....._...v..<'..A~yG.....{.fS...f..&:..@.{o.I}..Q

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (4206), with CRLF line terminators
Category:	dropped
Size (bytes):	4249
Entropy (8bit):	4.978180794012261
Encrypted:	false
SSDEEP:	96:/3WOegOecOehOevczR1RquiHVAt6zkA2QgnWM0Bxpx0FM:d91RqJ1A0UnWjx0FM
MD5:	9C5E25EA326FBD60B0837B14DBC19720
SHA1:	063C6142A3990305E3C2E0A9B18BE9821B160B40
SHA-256:	E63B19DB6C737A11AED2B23B20BD986141A4E596AEADE1E8AB08F4CF20DAA391
SHA-512:	A7A1970A49B3B5ACA58136DD5E6AA4F88503E6BF856867A73AF5725DE319EDC21901D5E478BF26E677DB96623508119B143D2A9F05BA70995E3286461B802E33
Malicious:	false
Reputation:	low
Preview:	.!function (a) { a(["jquery"], function (a) { return function () { function b(a, b, c) { return m({ type: t.error, iconClass: o().iconClasses.error, message: a, optionsOverride: c, title: b }) } function c(a, b, c) { return m({ type: t.info, iconClass: o().iconClasses.info, message: a, optionsOverride: c, title: b }) } function d(a) { r = a } function e(a, b, c) { return m({ type: t.success, iconClass: o().iconClasses.success, message: a, optionsOverride: c, title: b }) } function f(a, b, c) { return m({ type: t.warning, iconClass: o().iconClasses.warning, message: a, optionsOverride: c, title: b }) } function g(a) { var b = o(); q \|\| n(b), j(a, b) \|\| i(b) } function h(b) { var c = o(); return q \|\| n(c), b && 0 === a(":focus", b).length ? void p(b) : void (q.children().length && q.remove()) } function i(b) { for (var c = q.children(), d = c.length - 1; d >= 0; d--)j(a(c[d]), b) } function j(b, c) { return b && 0 === a(":focus", b).length ? (b[c.hideMethod]({ duration: c.hideDuration,

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	212
Entropy (8bit):	4.955584294164118
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkp0TAOG/QiExtny+Z4tyYNDthukyo2nGsCkkMk2C3Tn:wpoSySv6yF8pcWgry+Z4t51yokntx0T
MD5:	C5299129F7B927B2C43DF73146E6DFF0
SHA1:	1BDB0E6FD69B60EA6101B8FC2B8376546255F326
SHA-256:	FBC8E234E9F40B27899F7AA498DD13C692F24D1B07CC7C90DEA14E11600D7919
SHA-512:	1DA09A13F1C6A284633D0F8500C80EFC70A4B2DA9CA3B18463754EC0B54F4E63E58ABA1E67994A3698A62DF8749C37D106C4F739E16869680F7115F0E3C8F6A7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9bEl0JEvUV9thn3_MSBQ3pLr4aEgUNFXJ_0xIFDbKBU60SBQ0Oh448EgUNC4LpExIFDQ4mV_gSBQ02ESsiEgUNAGLXMxIFDTplu64SBQ21jyOQEgUNlJCS-hIFDVNaR8U=?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgAKbAoHDekuvhoaAAoHDRVyf9MaAAoHDbKBU60aAAoHDQ6HjjwaAAoHDQuC6RMaAAoHDQ4mV/gaAAoHDTYRKyIaAAoHDQBi1zMaAAoHDTplu64aAAoHDbWPI5AaAAoHDZSQkvoaAAoHDVNaR8UaAA==

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8340
Entropy (8bit):	4.723357752893795
Encrypted:	false
SSDEEP:	192:gjIjauLsM2kSmbJLc2MZXSrFoCaPoJ4fR6cswueHj2c37Mo9rRN:XJJcweFDN
MD5:	01F8B12FE3792E3E98D8880341BB618B
SHA1:	14EA65C28712460C73B532F9D76A2B8A528C3828
SHA-256:	3E4D52C7CCF9FF59AA895CDAC1C1211EF0754577DD1ED10D8F68BB634F9B602A
SHA-512:	E6C7F110E4EFBAE04F6533061A86512E60B6A3010D847BEE7C63A0AC3A60A1B1965C65492BA48CD62D7AAB9E99A1CB3F10B2D47F0FD2C298FC58A192531936E3
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/templateZ/css/tempZstyle.css
Preview:	..{.. box-sizing: border-box;.. margin: 0;.. padding: 0;..}..a{.. text-decoration: none !important;..}...headerr {.. display: flex;.. position: fixed;.. top: 0 !important;.. width:100%;.. justify-content: space-around;.. align-items: center;.. padding: 15px 0px;.. z-index: 999999999;.. height:130px;.. -webkit-backface-visibility: hidden;..}...header-contact-btn a{.. display: inline-block;.. min-width: 200px;.. padding: 17px 25px;.. text-align: center;.. / background-color: #3a3a3c;/.. font-size: 18px;.. font-weight: 500;.. fill: #fff;.. color: #fff;.. border-radius: 2px;.. transition-duration: 0.2s;..}.....header-contact-btn a:hover{.. / background-color: #fff!important;/.. /border: 3px solid black;/.. border-radius: 5px;.. color: black;.. transform: scale(1.2);.. transition-duration: 0.2s;..}...header-sliderr{.. min-height: 75vh;.. /background-image: url(../images/slider-bg.jpg);*/

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10594), with CRLF line terminators
Category:	dropped
Size (bytes):	11023
Entropy (8bit):	5.18976078625643
Encrypted:	false
SSDEEP:	192:Ed06H6Kn0E9ZosvACp1mhWXAy1dxsFn7ZnPD8xIDz+mIjhwYXyl8XHDhVlzbC/:hwGCeh7hpgmIhwYXyl8XHv6
MD5:	51E59A32C2FF7DC7D47B05BEF510A85D
SHA1:	1619F7CA1F469877654A493B325F12D4031A1652
SHA-256:	FAF4A82ED0DDD2B65B05F72830B1F8792998A49E1A2CCAE3AA17A5C45CBE0637
SHA-512:	AE77E3A7F0C80C13877D5462CA5C3A25CD8CA9EE584A56542DD0A36750F8A25C8013D1FACAB5F35AE340C9795400962965E81384E58A4D7946649486E6D5E83E
Malicious:	false
Reputation:	low
Preview:	window.FontAwesomeKitConfig = {"asyncLoading":{"enabled":false},"autoA11y":{"enabled":true},"baseUrl":"https://ka-f.fontawesome.com","baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"id":13580758,"license":"free","method":"css","minify":{"enabled":true},"token":"a316664222","v4FontFaceShim":{"enabled":true},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":true},"version":"6.3.0"};..!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(e)}function e(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function n(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(t);e&&(o=o.fi

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	121062
Entropy (8bit):	7.990120254304285
Encrypted:	true
SSDEEP:	3072:OOofBBnSYFyODsuCFyC7c82wHOpYabeKJxPsuU+aNML6j:OOofBB7yODsuqA8+asFsuU+aNME
MD5:	893032B923C6D21364D299354C9E3CAB
SHA1:	0F349DCCD850E9597D8858D24D00B42952DB606B
SHA-256:	02BC131426B59C457C8FD97AA242BC177292CA5AC4F882CCFFD9ADA16E0717B3
SHA-512:	56A908FB8797736C9C434740842272D70F1603CAD38A151508C5C2282C05DB798E34481ECF2710D9C593998E238429E25C7AD09B593A3807B72470BFF09AE8FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sRGB....... .IDATx^.}.\|.E..3.....)..R...`W.'./.......c..........".....4)B.!.\.l......]B(..pw....\.vg....}..! 7..D@" ....0....P...k.m.Q..h{.....".p^..Z..pA..pAIxGAI8...G....P,.....C.m..m..mY.vl.1...0..d.D...U-...cYYY.P(.6T-...[...,.((...S...]...WT.v......:...BFQ~~`{.\|R..')?.........D@" ..O.lf,;..4+..4.h..&..k.z..f...n.rma.h4^...$;..gG"...ifY.cX......e..8......%..........\|?J)......?oc.w.....E!..................RMW.@.4'7..^.Z..6m..y......X.....F...u.J..@....O0.....$.....!$....@`..F+...Z.r.....[.Z..e..-....g....7..L....J.`U..d.8`3..(..x..m.@.Er............D....G.`Y..o.[.O.......9.X.......p.(...w.'.c..OE....y...6\.q.u.5^.E..-.5]].v.U..6_Q....X...$.._c9C..D....v.Z.lj.\|ma.....y....mY.u..._\..,+..F3.D..."%S..3.C..qP.~GJ....G........n.yEQ.-oA.I.8.L......~,4.)..P TX..XH.h.3A...)(..;T0M........u..?h.V ..uM-i..C;....6m~n...M..nZ....Z.HBO......H..1..1m...Z..\.~..%]~.yi.?V.h..M...E.m..-.9.q2$TX......H.6.;.......oA..

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	103
Entropy (8bit):	4.1716187943968235
Encrypted:	false
SSDEEP:	3:GACW0RXxKbFEuFX4MfY1hgSF7nKXl0QgKHJu:SW0xxsFfX820QFpu
MD5:	96C5637E1EB8F8F8C34172F2D23EAFC6
SHA1:	2A416F86C3C9E26F9C34BF1F8B1BB5DAA46E86F9
SHA-256:	90B2D35CD5E08370ED20DB81197DD9DA1A4DBB421F71293FD5733EA49EB7B3E1
SHA-512:	4686BA81D38403B2DCFDB0514F1151DF5BF555EB12EA47214FFA2E8EA2BED44348144D6731A01EBA38890B33726A76DFA26822B4233EB59BF12ED58E9EBB86D3
Malicious:	false
Reputation:	low
URL:	https://granddunman-info.com/Content/templates_assets/images/Calculator/dollar_sign.png
Preview:	The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 3008x2008, components 3
Category:	dropped
Size (bytes):	1100445
Entropy (8bit):	7.919934594136108
Encrypted:	false
SSDEEP:	24576:PwjL4bGIpYVlP/FIxUeZhbwVubC8iTJObGvpgXXBC1Y:PJaBz/OxHZPKOO2QY
MD5:	48EDDC08A8C038B0844774C445CFD0DC
SHA1:	2E46997DF1C01AFD6ADD5D1C57BFBFBC4984EF2B
SHA-256:	BE26CB699B18291318A84E74037378013F1D46BEC93D3277968CE37C4CFDC272
SHA-512:	CDA00B8C155387EDFB776066D89645FD8778BD2DE247C8D820D7D80A7AAE0F195C4ED2BC81BD6C177491EEDAA2ED2E8DA179F00C707A61691DAB6C5F7DB3EA89
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....brS......8A...zb.n..JG....S..Ib~PF=h,_.....{P....+..z..<......aV....ph Qn....<....K\|.I......T`.... .J`~T.U...P3..O(...zP....G\.".;....<g.0.D.8.q.*....0.9.ri...t\|....V4C....A\.....4........n.W.z.B...\......s.P4.7...`z.N.....N..#C....(.D.........v...=.)+......:P1.,.W.x.......h'.p...\....(..6...........4..@[....r.+.#;.{p..../.2.....H.......SN.n.].b:..q...h.u^;.K...

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 22, 2024 00:39:23.241301060 CEST	192.168.2.5	1.1.1.1	0x1ce6	Standard query (0)	granddunman-info.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:23.241431952 CEST	192.168.2.5	1.1.1.1	0xa2cf	Standard query (0)	granddunman-info.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:25.367990971 CEST	192.168.2.5	1.1.1.1	0xf832	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.368175030 CEST	192.168.2.5	1.1.1.1	0xad14	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:25.717734098 CEST	192.168.2.5	1.1.1.1	0xb5b8	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.717957020 CEST	192.168.2.5	1.1.1.1	0x1df7	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 22, 2024 00:39:25.719932079 CEST	192.168.2.5	1.1.1.1	0x6fbd	Standard query (0)	rtdbookappointment.s3.ap-southeast-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.720074892 CEST	192.168.2.5	1.1.1.1	0x804a	Standard query (0)	rtdbookappointment.s3.ap-southeast-1.amazonaws.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:25.795809984 CEST	192.168.2.5	1.1.1.1	0x3d05	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.796444893 CEST	192.168.2.5	1.1.1.1	0x911	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:26.489187002 CEST	192.168.2.5	1.1.1.1	0x1566	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.489343882 CEST	192.168.2.5	1.1.1.1	0x58c5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:26.567481041 CEST	192.168.2.5	1.1.1.1	0x7797	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.567622900 CEST	192.168.2.5	1.1.1.1	0x32d9	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:26.655467033 CEST	192.168.2.5	1.1.1.1	0xe7d9	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.655606985 CEST	192.168.2.5	1.1.1.1	0xeb5d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:26.822690010 CEST	192.168.2.5	1.1.1.1	0x6d32	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.823100090 CEST	192.168.2.5	1.1.1.1	0xd140	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 22, 2024 00:39:27.290323973 CEST	192.168.2.5	1.1.1.1	0xc6fc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.290632010 CEST	192.168.2.5	1.1.1.1	0xb892	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:27.334489107 CEST	192.168.2.5	1.1.1.1	0xa54a	Standard query (0)	rtdbookappointment.s3.ap-southeast-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.334723949 CEST	192.168.2.5	1.1.1.1	0x186a	Standard query (0)	rtdbookappointment.s3.ap-southeast-1.amazonaws.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:28.279984951 CEST	192.168.2.5	1.1.1.1	0x872	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:28.280241013 CEST	192.168.2.5	1.1.1.1	0xffd2	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:28.715127945 CEST	192.168.2.5	1.1.1.1	0x6fa5	Standard query (0)	granddunman-info.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:28.715240955 CEST	192.168.2.5	1.1.1.1	0x1d67	Standard query (0)	granddunman-info.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:29.260277033 CEST	192.168.2.5	1.1.1.1	0x40f3	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:29.260958910 CEST	192.168.2.5	1.1.1.1	0x2820	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:32.154571056 CEST	192.168.2.5	1.1.1.1	0xd4d7	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:32.155128956 CEST	192.168.2.5	1.1.1.1	0x9802	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Oct 22, 2024 00:39:39.277120113 CEST	192.168.2.5	1.1.1.1	0xe528	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:39.277359962 CEST	192.168.2.5	1.1.1.1	0x4462	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 22, 2024 00:40:25.849785089 CEST	192.168.2.5	1.1.1.1	0x185e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:40:25.849931955 CEST	192.168.2.5	1.1.1.1	0x70f5	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 22, 2024 00:39:23.552208900 CEST	1.1.1.1	192.168.2.5	0x1ce6	No error (0)	granddunman-info.com		20.43.132.131	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.375699997 CEST	1.1.1.1	192.168.2.5	0xad14	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 22, 2024 00:39:25.375711918 CEST	1.1.1.1	192.168.2.5	0xf832	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.375711918 CEST	1.1.1.1	192.168.2.5	0xf832	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.724925995 CEST	1.1.1.1	192.168.2.5	0xb5b8	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:25.724925995 CEST	1.1.1.1	192.168.2.5	0xb5b8	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.725076914 CEST	1.1.1.1	192.168.2.5	0x1df7	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:25.725076914 CEST	1.1.1.1	192.168.2.5	0x1df7	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 22, 2024 00:39:25.725076914 CEST	1.1.1.1	192.168.2.5	0x1df7	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 22, 2024 00:39:25.738331079 CEST	1.1.1.1	192.168.2.5	0x804a	No error (0)	rtdbookappointment.s3.ap-southeast-1.amazonaws.com	s3-r-w.ap-southeast-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	rtdbookappointment.s3.ap-southeast-1.amazonaws.com	s3-r-w.ap-southeast-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.146.249	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.148.233	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.164.134	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.148.2	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.36.43	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.150.144	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.164.198	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.748995066 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.164.79	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.802794933 CEST	1.1.1.1	192.168.2.5	0x3d05	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:25.805249929 CEST	1.1.1.1	192.168.2.5	0x911	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 22, 2024 00:39:26.496392012 CEST	1.1.1.1	192.168.2.5	0x1566	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.496414900 CEST	1.1.1.1	192.168.2.5	0x58c5	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 22, 2024 00:39:26.574652910 CEST	1.1.1.1	192.168.2.5	0x7797	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:26.574652910 CEST	1.1.1.1	192.168.2.5	0x7797	No error (0)	www3.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.575062990 CEST	1.1.1.1	192.168.2.5	0x32d9	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:26.662704945 CEST	1.1.1.1	192.168.2.5	0xe7d9	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.662704945 CEST	1.1.1.1	192.168.2.5	0xe7d9	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.662765026 CEST	1.1.1.1	192.168.2.5	0xeb5d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 22, 2024 00:39:26.830008030 CEST	1.1.1.1	192.168.2.5	0x6d32	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:26.830008030 CEST	1.1.1.1	192.168.2.5	0x6d32	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:26.830260992 CEST	1.1.1.1	192.168.2.5	0xd140	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:26.830260992 CEST	1.1.1.1	192.168.2.5	0xd140	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 22, 2024 00:39:26.830260992 CEST	1.1.1.1	192.168.2.5	0xd140	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 22, 2024 00:39:27.298883915 CEST	1.1.1.1	192.168.2.5	0xb892	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 22, 2024 00:39:27.299012899 CEST	1.1.1.1	192.168.2.5	0xc6fc	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	rtdbookappointment.s3.ap-southeast-1.amazonaws.com	s3-r-w.ap-southeast-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.146.110	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.164.210	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.149.125	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.133.63	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.148.173	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.148.18	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.40.27	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345325947 CEST	1.1.1.1	192.168.2.5	0xa54a	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.148.229	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:27.345957994 CEST	1.1.1.1	192.168.2.5	0x186a	No error (0)	rtdbookappointment.s3.ap-southeast-1.amazonaws.com	s3-r-w.ap-southeast-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:28.287444115 CEST	1.1.1.1	192.168.2.5	0x872	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:28.287444115 CEST	1.1.1.1	192.168.2.5	0x872	No error (0)	www3.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:28.287782907 CEST	1.1.1.1	192.168.2.5	0xffd2	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:29.025897026 CEST	1.1.1.1	192.168.2.5	0x6fa5	No error (0)	granddunman-info.com		20.43.132.131	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:29.267965078 CEST	1.1.1.1	192.168.2.5	0x40f3	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:29.268505096 CEST	1.1.1.1	192.168.2.5	0x2820	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:32.161922932 CEST	1.1.1.1	192.168.2.5	0xd4d7	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:32.162642956 CEST	1.1.1.1	192.168.2.5	0x9802	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:37.394604921 CEST	1.1.1.1	192.168.2.5	0x4b06	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:37.394604921 CEST	1.1.1.1	192.168.2.5	0x4b06	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:39.285394907 CEST	1.1.1.1	192.168.2.5	0xe528	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:39:39.286564112 CEST	1.1.1.1	192.168.2.5	0x4462	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 22, 2024 00:39:50.970046043 CEST	1.1.1.1	192.168.2.5	0x7508	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:39:50.970046043 CEST	1.1.1.1	192.168.2.5	0x7508	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:40:13.744671106 CEST	1.1.1.1	192.168.2.5	0x5f67	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:40:13.744671106 CEST	1.1.1.1	192.168.2.5	0x5f67	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:40:25.858767986 CEST	1.1.1.1	192.168.2.5	0x185e	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:40:25.858783960 CEST	1.1.1.1	192.168.2.5	0x70f5	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 22, 2024 00:40:37.293627977 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 00:40:37.293627977 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:40:39.473428011 CEST	1.1.1.1	192.168.2.5	0xf5d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 22, 2024 00:40:39.473428011 CEST	1.1.1.1	192.168.2.5	0xf5d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:24 UTC	663	OUT	GET / HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:25 UTC	647	IN	HTTP/1.1 200 OK Content-Length: 203924 Connection: close Content-Type: text/html; charset=utf-8 Date: Mon, 21 Oct 2024 22:39:25 GMT Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store Expires: -1 Pragma: no-cache Set-Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f;Path=/;HttpOnly;Secure;Domain=granddunman-info.com Set-Cookie: ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f;Path=/;HttpOnly;SameSite=None;Secure;Domain=granddunman-info.com X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET
2024-10-21 22:39:25 UTC	3449	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 61 6e 64 20 44 75 6e 6d 61 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Grand Dunman</title> <met
2024-10-21 22:39:25 UTC	103	IN	Data Raw: 31 2c 39 30 30 26 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 31 30 30 3b 30 2c 32 30 30 3b 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 35 30 30 3b 30 2c 36 30 30 3b 30 2c 37 30 30 3b 30 2c 38 30 30 3b 30 2c 39 30 30 3b 31 2c 31 30 30 3b 31 2c 32 30 30 3b 31 2c 33 Data Ascii: 1,900&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,3
2024-10-21 22:39:25 UTC	4096	IN	Data Raw: 30 30 3b 31 2c 34 30 30 3b 31 2c 35 30 30 3b 31 2c 36 30 30 3b 31 2c 37 30 30 3b 31 2c 38 30 30 3b 31 2c 39 30 30 26 66 61 6d 69 6c 79 3d 52 61 6a 64 68 61 6e 69 3a 77 67 68 74 40 33 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 42 65 62 61 73 2b 4e 65 75 65 26 66 61 6d 69 6c 79 3d 43 6f 72 6d 6f 72 61 6e 74 2b 47 61 72 61 6d 6f 6e 64 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 35 30 30 3b 30 2c 36 30 30 3b 30 2c 37 30 30 3b 31 2c 33 30 30 3b 31 2c 34 30 30 3b 31 2c 35 30 30 3b Data Ascii: 00;1,400;1,500;1,600;1,700;1,800;1,900&family=Rajdhani:wght@300&display=swap" rel="stylesheet"> <link href="https://fonts.googleapis.com/css2?family=Bebas+Neue&family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;
2024-10-21 22:39:25 UTC	4096	IN	Data Raw: 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 2d 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 63 68 61 74 2d 6f 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 Data Ascii: solute; top: 5px; font-size: 14px; line-height: 20px; left: -30px; } .chat-option { display: flex; align-items: center; position: relative;
2024-10-21 22:39:25 UTC	1812	IN	Data Raw: 30 2e 33 73 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 65 6d 61 69 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 65 6d 61 69 6c 20 69 6e 70 75 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 Data Ascii: 0.3s; } .contact-form-email { height: 0px; overflow: hidden; } .contact-form-email input { box-sizing: border-box; display: block; width: 100
2024-10-21 22:39:25 UTC	4096	IN	Data Raw: 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 70 78 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e Data Ascii: isplay: block; width: 60%; font-family: inherit; color: rgb(255, 255, 255); padding: 0px 0px 8px; border: none; outline: none; box-shadow: none; paddin
2024-10-21 22:39:25 UTC	4096	IN	Data Raw: 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 2e 68 65 61 64 69 6e 67 2d 6f 76 65 72 76 69 65 77 20 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 32 70 78 20 30 70 78 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 Data Ascii: font-weight: 400; } .call-to-action .heading-overview p { text-align: left; /* color: #FFFFFF;*/ font-size: 18px; line-height: 22px; padding: 0px 2px 0px 20px;
2024-10-21 22:39:25 UTC	4096	IN	Data Raw: 72 64 20 2e 68 65 61 64 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 32 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: rd .heading { color: #fff; font-weight: 600; letter-spacing: 2px; font-family: 'Roboto', sans-serif; padding: 0px 20px; }
2024-10-21 22:39:25 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 64 65 76 65 6c 6f 70 65 72 20 2e 64 65 76 65 6c 6f 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 65 76 65 6c 6f 70 65 72 2d 6f 76 65 72 76 69 65 77 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 45 43 45 43 45 43 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: } .developer .developer-container .developer-overview { text-align: center; color: #ECECEC; font-size: 17px; line-height: 19px; font-weight
2024-10-21 22:39:25 UTC	4096	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 66 6c 6f 6f 72 5f 70 6c 61 6e 73 5f 73 65 63 20 2e 73 65 63 2d 68 65 61 64 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 33 61 31 37 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 42 65 62 61 73 20 4e 65 75 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 36 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f Data Ascii: } } .floor_plans_sec .sec-heading { color: #83a17e; font-family: 'Bebas Neue'; font-size: 60px; font-weight: 200; text-transform: uppercase; fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:25 UTC	764	OUT	GET /Content/templates_assets/templateZ/css/tempZstyle.css HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:25 UTC	298	IN	HTTP/1.1 200 OK Content-Length: 8340 Connection: close Content-Type: text/css Date: Mon, 21 Oct 2024 22:39:25 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "50b3e6b82e8db1:0" Last-Modified: Mon, 16 Sep 2024 11:51:10 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:25 UTC	3612	IN	Data Raw: 0d 0a 2a 7b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 61 7b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 65 72 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 61 72 6f 75 6e 64 3b 0d 0a 20 20 20 20 61 6c 69 Data Ascii: *{ box-sizing: border-box; margin: 0; padding: 0;}a{ text-decoration: none !important;}.headerr { display: flex; position: fixed; top: 0 !important; width:100%; justify-content: space-around; ali
2024-10-21 22:39:25 UTC	4096	IN	Data Raw: 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 27 2c 20 54 69 6d 65 73 2c 20 73 65 72 69 66 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 69 63 65 2d 6c 69 73 74 20 75 6c 7b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 2e 70 72 69 63 65 2d 6c 69 73 74 20 75 6c 20 6c 69 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 70 78 3b 0d 0a Data Ascii: font-family: 'Times New Roman', Times, serif; font-size: 30px; font-weight: 700;}.price-list ul{ list-style-type: none; padding: 0;}.price-list ul li{ display: flex; align-items: center; margin: 20px 0px;
2024-10-21 22:39:25 UTC	632	IN	Data Raw: 61 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 66 6f 6f 74 65 72 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 66 6f 6f 74 65 72 2d 69 63 6f 6e 20 69 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 35 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 Data Ascii: a { font-size: 14px; font-weight:500; } .footer-icon { font-size: 9px; padding-top: 10px !important; padding-bottom: 10px !important; } .footer-icon i { font-size: 35px; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	104.17.25.14	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:25 UTC	591	OUT	GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:25 UTC	941	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:25 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5f-7918" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 175 Expires: Sat, 11 Oct 2025 22:39:25 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q3P56WVELXl7t6mG8BVOS9GZaFytsnHJVw1kXWzL3WwpltbpLzR3hGUzBEqkXm57ryGXZciM1QmncsFWrHKsc%2BDWCOUee4LAIEH0PYK%2Bdo4%2Bt4fOgHfefqCFTgZLewKnE13QXEAU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d64be5abbf5421d-EWR alt-svc: h3=":443"; ma=86400
2024-10-21 22:39:25 UTC	428	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c Data Ascii: ontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-bl
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f Data Ascii: ransform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-ro
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 Data Ascii: -stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-enve
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: :"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: t:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f0
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: ash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{conte
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: re{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: a-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{conten
2024-10-21 22:39:25 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: tent:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49724	157.240.0.6	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	541	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:26 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-21 22:39:26 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-21 22:39:26 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-21 22:39:26 UTC	14681	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 Data Ascii: c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="objec
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 Data Ascii: k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})()
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 Data Ascii: )==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"undefined":i(h))==="object"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered(
2024-10-21 22:39:26 UTC	1702	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 Data Ascii: unction p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.prototype.hasOwnProperty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.string
2024-10-21 22:39:26 UTC	14682	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 30 2c 64 3d 21 31 2c 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 66 3d 62 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 62 3b 21 28 63 3d 28 62 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 63 3d 21 30 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 6c 2e 74 72 69 67 67 65 72 28 61 2c 62 29 7d 7d 63 Data Ascii: alsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){var c=!0,d=!1,e=void 0;try{for(var f=b[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),b;!(c=(b=f.next()).done);c=!0){b=b.value;l.trigger(a,b)}}c
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 61 29 7d 63 61 74 63 68 28 61 29 7b 69 66 28 61 2e 6e 61 6d 65 3d 3d 3d 22 46 42 45 76 65 6e 74 73 43 6f 65 72 63 69 6f 6e 45 72 72 6f 72 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 68 72 6f 77 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 42 28 62 2c 49 2e 73 74 72 69 6e 67 Data Ascii: null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return e}}function A(a,b){try{return b(a)}catch(a){if(a.name==="FBEventsCoercionError")return null;throw a}}function B(a,b){return b(a)}function C(a){return function(b){b=B(b,I.string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49736	104.17.25.14	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	603	OUT	GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://granddunman-info.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:26 UTC	963	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec3-5a89" Last-Modified: Mon, 04 May 2020 16:11:47 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 32034 Expires: Sat, 11 Oct 2025 22:39:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DotyTDCnMb2HQZqEZ9Mo2J2%2FwgYJVRVQ8Os99phy0uR%2FyYGwH7I%2BqOJ2lkXN8GBfvecb8J9PT%2FN7TcSBgAtCA7HZ9%2Fv3MAW1zdU5Mx7mkDuz1uVjr9WttGfCz1PlmUcM3zGZa%2BeS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d64be5e1d2d7289-EWR alt-svc: h3=":443"; ma=86400
2024-10-21 22:39:26 UTC	406	IN	Data Raw: 35 61 38 39 0d 0a 2f 2a 2a 0a 20 2a 20 6a 71 75 65 72 79 2e 6d 61 73 6b 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 76 31 2e 31 34 2e 31 36 0a 20 2a 20 40 61 75 74 68 6f 72 3a 20 49 67 6f 72 20 45 73 63 6f 62 61 72 0a 20 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 49 67 6f 72 20 45 73 63 6f 62 61 72 20 6f 6e 20 32 30 31 32 2d 30 33 2d 31 30 2e 20 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 61 6e 79 20 62 75 67 20 61 74 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 49 67 6f 72 20 45 73 63 6f 62 61 72 20 68 74 74 70 3a 2f 2f 69 67 6f 72 65 73 63 6f 62 61 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 54 Data Ascii: 5a89/** * jquery.mask.js * @version: v1.14.16 * @author: Igor Escobar * * Created by Igor Escobar on 2012-03-10. Please report any bug at github.com/igorescobar/jQuery-Mask-Plugin * * Copyright (c) 2012 Igor Escobar http://igorescobar.com * * T
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 20 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 0a 20 2a 20 72 65 73 74 72 69 63 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 2a 20 63 6f 70 69 65 73 20 6f 66 20 74 Data Ascii: py of this software and associated documentation * files (the "Software"), to deal in the Software without * restriction, including without limitation the rights to use, * copy, modify, merge, publish, distribute, sublicense, and/or sell * copies of t
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 6f 72 79 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 4d 65 74 65 6f 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 72 65 71 75 69 72 65 28 27 6a 71 75 65 72 79 27 29 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 66 61 63 74 6f 72 79 28 6a 51 75 65 72 79 20 7c 7c 20 5a 65 70 74 6f 29 3b 0a 20 20 20 20 7d 0a 0a 7d 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 76 61 72 20 4d 61 73 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c Data Ascii: ory); } else if (typeof exports === 'object' && typeof Meteor === 'undefined') { module.exports = factory(require('jquery')); } else { factory(jQuery \|\| Zepto); }}(function ($) { 'use strict'; var Mask = function (el
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 66 20 28 63 74 72 6c 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 72 6c 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 28 70 6f 73 2c 20 70 6f 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 20 2f 2f 20 49 45 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 61 6e 67 65 20 3d 20 63 74 72 6c 2e 63 72 65 61 74 65 54 65 78 74 52 61 6e 67 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 61 6e 67 65 2e 63 6f 6c 6c 61 70 73 65 28 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: f (ctrl.setSelectionRange) { ctrl.setSelectionRange(pos, pos); } else { // IE range = ctrl.createTextRange(); range.collapse(true);
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 20 21 65 6c 2e 64 61 74 61 28 27 63 68 61 6e 67 65 64 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 27 63 68 61 6e 67 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 64 61 74 61 28 27 63 68 61 6e 67 65 64 27 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 74 27 73 20 76 65 72 79 20 69 6d 70 6f 72 74 61 6e 74 20 74 68 61 74 20 74 68 69 73 20 63 61 6c 6c 62 61 63 6b 20 72 65 6d 61 69 6e 73 20 69 6e 20 74 68 69 73 20 70 6f 73 69 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: !el.data('changed')) { el.trigger('change'); } el.data('changed', false); }) // it's very important that this callback remains in this position
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 6f 6e 2e 6f 70 74 69 6f 6e 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 63 75 72 73 69 76 65 20 3d 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2e 72 65 63 75 72 73 69 76 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 63 75 72 73 69 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 6b 43 68 75 6e 6b 73 2e 70 75 73 68 28 6d 61 73 6b 2e 63 68 61 72 41 74 28 69 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 52 65 63 75 72 73 69 76 65 20 3d 20 7b 64 69 67 69 74 3a 20 6d 61 73 6b 2e 63 68 61 72 41 74 28 69 29 2c 20 70 61 74 74 65 72 6e 3a 20 70 61 74 74 65 72 Data Ascii: on.optional; recursive = translation.recursive; if (recursive) { maskChunks.push(mask.charAt(i)); oRecursive = {digit: mask.charAt(i), pattern: patter
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 65 6c 5b 6d 65 74 68 6f 64 5d 28 76 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 65 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 65 6c 5b 6d 65 74 68 6f 64 5d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 63 75 6c 61 74 65 43 61 72 65 74 50 6f 73 69 74 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 6c 64 56 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: el[method](v); } r = el; } else { r = el[method](); } return r; }, calculateCaretPosition: function(oldVal) {
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 2e 6d 61 73 6b 44 69 67 69 74 50 6f 73 4d 61 70 5b 69 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 6b 44 69 67 69 74 73 42 65 66 6f 72 65 43 61 72 65 74 41 6c 6c 2b 2b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 69 20 3d 20 63 61 72 65 74 50 6f 73 4f 6c 64 20 2d 20 31 3b 20 69 20 3e 3d 20 30 3b 20 69 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 2e 6d 61 73 6b 44 69 67 69 74 50 6f 73 4d 61 70 4f 6c 64 5b 69 Data Ascii: if (p.maskDigitPosMap[i]) { maskDigitsBeforeCaretAll++; } } for (i = caretPosOld - 1; i >= 0; i--) { if (p.maskDigitPosMapOld[i
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 72 6e 20 63 61 72 65 74 50 6f 73 4e 65 77 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 65 68 61 76 69 6f 75 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 69 6e 76 61 6c 69 64 20 3d 20 5b 5d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6b 65 79 43 6f 64 65 20 3d 20 65 6c 2e 64 61 74 61 28 27 6d 61 73 6b 2d 6b 65 79 63 6f 64 65 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 2e 69 6e 41 72 72 61 79 28 6b 65 79 43 6f 64 65 2c 20 6a 4d 61 73 6b 2e 62 79 50 61 73 73 4b 65 79 73 29 20 3d 3d Data Ascii: rn caretPosNew; }, behaviour: function(e) { e = e \|\| window.event; p.invalid = []; var keyCode = el.data('mask-keycode'); if ($.inArray(keyCode, jMask.byPassKeys) ==
2024-10-21 22:39:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 63 68 65 63 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 72 65 76 65 72 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 4d 65 74 68 6f 64 20 3d 20 27 75 6e 73 68 69 66 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 20 3d 20 2d 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 73 74 4d 61 73 6b 43 68 61 72 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 20 3d 20 6d 61 73 6b 4c 65 6e 20 2d 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 20 3d 20 76 61 6c 4c 65 6e 20 2d 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: check; if (options.reverse) { addMethod = 'unshift'; offset = -1; lastMaskChar = 0; m = maskLen - 1; v = valLen - 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49714	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	780	OUT	GET /Content/templates_assets/DesignX,Z_Common/MortgageCalculatorStyle.css HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:26 UTC	298	IN	HTTP/1.1 200 OK Content-Length: 2551 Connection: close Content-Type: text/css Date: Mon, 21 Oct 2024 22:39:26 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "ef6ae4c8bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:57:58 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:26 UTC	2551	IN	Data Raw: 0d 0a 2e 66 69 65 6c 64 73 65 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 6c 63 2d 70 6f 69 6e 74 65 72 2d 69 6d 61 67 65 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 Data Ascii: .fieldset-border-radius { border: 2px solid #fff !important; border-radius: 10px !important; position: relative;}.calc-pointer-image { position: absolute; top: 50%; transform: translateY(-50%); left: calc(100% -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49715	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	774	OUT	GET /Content/templates_assets/DesignX,Z_Common/MeetingCardsStyle.css HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:26 UTC	299	IN	HTTP/1.1 200 OK Content-Length: 6088 Connection: close Content-Type: text/css Date: Mon, 21 Oct 2024 22:39:26 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "266bc44c8bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:57:58 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:26 UTC	3611	IN	Data Raw: 0d 0a 2e 6d 61 69 6e 20 7b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 30 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 72 64 31 2c 20 2e 63 61 72 64 32 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 64 33 61 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 2f 2a 20 41 64 Data Ascii: .main { justify-content: center; align-items: center; max-width: 1300px !important; flex-wrap: wrap;}.card1, .card2 { background-color: #ffd3a0; border-radius: 30px; padding: 10px; margin-bottom: 20px; /* Ad
2024-10-21 22:39:26 UTC	2477	IN	Data Raw: 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 0d 0a 20 20 20 20 74 6f 70 3a 20 34 35 25 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 68 65 61 64 65 72 20 7b 0d 0a 20 Data Ascii: background-color: rgba(0, 0, 0, 0.4);}.modal-content { top: 45%; left: 50%; transform: translate(-50%, -50%); padding-top: 0px; width: 80%; max-width: 500px; border-radius: 13px;}.modal-header {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49716	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	762	OUT	GET /Content/templates_assets/css/bootstrap5.1.3.min.css HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:26 UTC	301	IN	HTTP/1.1 200 OK Content-Length: 163878 Connection: close Content-Type: text/css Date: Mon, 21 Oct 2024 22:39:26 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "1376cf458bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:57:46 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:26 UTC	3609	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6
2024-10-21 22:39:26 UTC	4096	IN	Data Raw: 5d 29 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 62 69 64 69 2d 6f 76 65 72 72 69 64 65 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 Data Ascii: ]):hover{color:inherit;text-decoration:none}code,kbd,pre,samp{font-family:var(--bs-font-monospace);font-size:1em;direction:ltr;unicode-bidi:bidi-override}pre{display:block;margin-top:0;margin-bottom:1rem;overflow:auto;font-size:.875em}pre code{font-size:i
2024-10-21 22:39:26 UTC	4096	IN	Data Raw: 78 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 2c 2e 37 35 72 65 6d 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 2c 2e 37 35 72 65 6d 29 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 35 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 Data Ascii: xl{width:100%;padding-right:var(--bs-gutter-x,.75rem);padding-left:var(--bs-gutter-x,.75rem);margin-right:auto;margin-left:auto}@media (min-width:576px){.container,.container-sm{max-width:540px}}@media (min-width:768px){.container,.container-md,.container
2024-10-21 22:39:26 UTC	4096	IN	Data Raw: 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 79 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 78 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 79 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 Data Ascii: {--bs-gutter-x:1.5rem}.g-sm-4,.gy-sm-4{--bs-gutter-y:1.5rem}.g-sm-5,.gx-sm-5{--bs-gutter-x:3rem}.g-sm-5,.gy-sm-5{--bs-gutter-y:3rem}}@media (min-width:768px){.col-md{flex:1 0 0%}.row-cols-md-auto>{flex:0 0 auto;width:auto}.row-cols-md-1>{flex:0 0 auto;w
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 2e 63 6f 6c 2d 78 6c 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 35 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 36 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 78 6c 2d 37 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 38 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 39 7b 66 6c 65 78 3a Data Ascii: .col-xl-3{flex:0 0 auto;width:25%}.col-xl-4{flex:0 0 auto;width:33.33333333%}.col-xl-5{flex:0 0 auto;width:41.66666667%}.col-xl-6{flex:0 0 auto;width:50%}.col-xl-7{flex:0 0 auto;width:58.33333333%}.col-xl-8{flex:0 0 auto;width:66.66666667%}.col-xl-9{flex:
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 72 69 70 65 64 2d 62 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 73 74 72 69 70 65 64 2d 63 6f 6c 6f 72 29 7d 2e 74 61 62 6c 65 2d 61 63 74 69 76 65 7b 2d 2d 62 73 2d 74 61 62 6c 65 2d 61 63 63 65 6e 74 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 61 63 74 69 76 65 2d 62 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 29 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 6f 76 65 72 3e 2a 7b 2d 2d 62 73 2d 74 61 62 6c 65 2d 61 63 63 65 6e 74 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 68 6f 76 65 72 2d 62 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 29 7d 2e 74 61 Data Ascii: riped-bg);color:var(--bs-table-striped-color)}.table-active{--bs-table-accent-bg:var(--bs-table-active-bg);color:var(--bs-table-active-color)}.table-hover>tbody>tr:hover>*{--bs-table-accent-bg:var(--bs-table-hover-bg);color:var(--bs-table-hover-color)}.ta
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 33 37 35 72 65 6d 20 2d 2e 37 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 2e 37 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 69 Data Ascii: ontrol::-webkit-file-upload-button{padding:.375rem .75rem;margin:-.375rem -.75rem;-webkit-margin-end:.75rem;margin-inline-end:.75rem;color:#212529;background-color:#e9ecef;pointer-events:none;border-color:inherit;border-style:solid;border-width:0;border-i
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 25 33 65 25 33 63 70 61 74 68 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 73 74 72 6f 6b 65 3d 27 25 32 33 33 34 33 61 34 30 27 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 27 72 6f 75 6e 64 27 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 27 72 6f 75 6e 64 27 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 27 32 27 20 64 3d 27 4d 32 20 35 6c 36 20 36 20 36 2d 36 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 Data Ascii: ;background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16'%3e%3cpath fill='none' stroke='%23343a40' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M2 5l6 6 6-6'/%3e%3c/svg%3e");background-re
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 72 6d 2d 72 61 6e 67 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 66 6f 63 75 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 74 68 75 6d 62 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 23 66 66 66 2c 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 31 33 2c 31 31 30 2c 32 35 33 2c 2e 32 35 29 7d 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 66 6f 63 75 73 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 68 75 6d 62 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 23 66 66 66 2c 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 31 33 2c 31 31 30 2c 32 35 33 2c 2e 32 35 29 7d 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 6f 75 74 65 72 7b 62 6f 72 64 Data Ascii: rm-range:focus{outline:0}.form-range:focus::-webkit-slider-thumb{box-shadow:0 0 0 1px #fff,0 0 0 .25rem rgba(13,110,253,.25)}.form-range:focus::-moz-range-thumb{box-shadow:0 0 0 1px #fff,0 0 0 .25rem rgba(13,110,253,.25)}.form-range::-moz-focus-outer{bord
2024-10-21 22:39:27 UTC	4026	IN	Data Raw: 6f 75 70 2d 73 6d 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 72 65 6d 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 29 3e 2e Data Ascii: oup-sm>.form-control,.input-group-sm>.form-select,.input-group-sm>.input-group-text{padding:.25rem .5rem;font-size:.875rem;border-radius:.2rem}.input-group-lg>.form-select,.input-group-sm>.form-select{padding-right:3rem}.input-group:not(.has-validation)>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49713	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	748	OUT	GET /Content/microsites_assets/css/owl.css HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:26 UTC	298	IN	HTTP/1.1 200 OK Content-Length: 4944 Connection: close Content-Type: text/css Date: Mon, 21 Oct 2024 22:39:26 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "ca397188bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:56:30 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:26 UTC	3612	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0d 0a 20 2a 2f 0d 0a 2f 2a 0d 0a 20 2a 20 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 43 6f 72 65 0d 0a 20 2a 2f 0d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE // * Owl Carousel - Core */.owl-carousel { display: none; width: 100%;
2024-10-21 22:39:26 UTC	1332	IN	Data Raw: 2a 2f 20 7d 0d 0a 20 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 2e 6f 77 6c 2d 6c 61 7a 79 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 34 30 30 6d 73 20 65 61 73 65 3b 20 7d 0d 0a 20 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 2e 6f 77 6c 2d 6c 61 7a 79 5b 73 72 63 5e 3d 22 22 5d 2c 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 2e 6f 77 6c 2d 6c 61 7a 79 3a 6e 6f 74 28 5b 73 72 63 5d 29 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 3b 20 7d 0d 0a 20 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 2e 6f 77 6c 2d 6c 61 7a 79 Data Ascii: */ } .owl-carousel .owl-item .owl-lazy { opacity: 0; transition: opacity 400ms ease; } .owl-carousel .owl-item .owl-lazy[src^=""], .owl-carousel .owl-item .owl-lazy:not([src]) { max-height: 0; } .owl-carousel .owl-item img.owl-lazy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49726	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	675	OUT	GET /Bookappointment/Property/cdd27b0c-30b1-4e1e-96d0-fa2224c7e0b2 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:26 UTC	514	IN	HTTP/1.1 200 OK x-amz-id-2: ulfXuO20ZzGtPuskWS3TQpmukOe7pmjTeleL+k4zPwwDqtMc6Ly1F99U85k67T0Ivsdwh6eUtM/8pLCA+jywkg== x-amz-request-id: 6ZYTKZDRY9K7EFP6 Date: Mon, 21 Oct 2024 22:39:27 GMT Last-Modified: Wed, 09 Oct 2024 09:31:22 GMT ETag: "6dfe14efb6574148d80931b1de3dbb68" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: 6.NK8iZIYXaDqmbGuiEZd_s8V39XVhIg Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 31989 Connection: close
2024-10-21 22:39:26 UTC	1443	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 1a 00 00 00 84 08 06 00 00 00 4f a8 e4 3d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 05 78 94 c7 d6 7e d7 37 ee 0e 81 84 10 9c e0 ee 0e c5 5d 8a 17 97 16 8a 94 3a c5 0b b4 b4 54 71 97 42 29 ee ee c5 21 10 34 04 89 bb 6e d6 f7 ff cf 7c bb c9 26 d9 dd 2c 92 f6 72 ef ce f3 a4 0d 9b 6f 67 e6 3b 33 f3 ce f1 c3 d3 e9 74 3a d8 9a 8d 02 36 0a d8 28 50 82 14 e0 d9 80 a6 04 a9 6b eb da 46 01 1b 05 18 05 6c 40 63 db 08 36 0a d8 28 50 e2 14 b0 01 4d 89 93 d8 36 80 8d 02 36 0a d8 80 c6 b6 07 6c 14 b0 51 a0 c4 29 60 03 9a 12 27 b1 6d 00 1b 05 6c 14 b0 01 8d 6d 0f d8 28 60 a3 40 89 53 c0 06 34 25 4e 62 db 00 36 0a d8 28 60 03 1a db 1e b0 51 c0 46 81 12 a7 80 0d 68 4a 9c c4 b6 01 6c Data Ascii: PNGIHDRO=sRGB IDATx^]x~7]:TqB)!4n\|&,rog;3t:6(PkFl@c6(PM66lQ)`'mlm(`@S4%Nb6(`QFhJl
2024-10-21 22:39:27 UTC	15952	IN	Data Raw: 5f 58 90 63 55 d9 80 e6 df 3b b9 ef d8 c8 ef 0c d0 14 d5 d1 10 d0 58 6e ca 64 99 5e 74 22 1d cd bb aa 0c d6 32 18 b8 13 1e 81 fa 75 1b 40 29 08 06 cf c1 05 7c 29 1f 22 e2 64 0a b5 82 40 43 3a 9a 00 13 44 2a c8 e3 18 94 cb d0 68 11 13 97 8c 89 13 27 61 df 91 4b e0 3b 97 81 d8 5e 64 96 c8 36 a0 29 6e 07 96 f4 df 8b e7 55 4b 7a 06 d6 f6 ff 4e 02 cd db e0 68 68 89 38 75 b6 11 43 50 8c b9 bc 00 51 ad 75 c9 29 ae 4f ea 87 29 78 f5 4c 05 a9 b8 79 bc 7c af 22 1d c7 6f dc b9 fb 10 f5 eb 76 00 dc bc c1 97 90 cf 8a e9 09 90 65 4f 11 9b a1 d7 d1 b4 47 d9 d2 7e 85 18 3f 23 8f 18 f6 2b a7 91 d1 f1 74 80 56 83 a7 d1 f1 98 32 69 36 0e 9f be 0a 91 9b 9b 59 a6 91 84 2c 65 4a 2e ba 75 34 d2 d1 14 e6 30 0d 53 24 05 10 1b ca 5a a2 71 6a 29 ae 3b bd 8e 2a 9f 40 05 f7 36 8f 56 Data Ascii: _XcU;Xnd^t"2u@)\|)"d@C:Dh'aK;^d6)nUKzNhh8uCPQu)O)xLy\|"oveOG~?#+tV2i6Y,eJ.u40S$Zqj);@6V
2024-10-21 22:39:27 UTC	9000	IN	Data Raw: 6e e1 92 2f 51 2d 34 84 a5 0a a5 7f 93 32 f6 f2 95 70 f4 ef 33 1a 03 87 f6 c4 b0 21 bd 61 6f 67 cf 01 cd 9a dd f8 64 d6 18 b4 68 59 9f c9 ff 8f 23 5f e2 db 79 2b d1 a0 51 25 0c 1d d2 1d ad 9b 37 66 05 de 9a f7 1a 8b b4 e4 4c d4 a8 14 82 1a 95 43 d8 ba 6a 54 6a f8 fa b9 a3 6e ed aa a8 5b 9b b8 06 1d 1e 45 3d 67 e9 0c 3c 5c 5d d8 ad 9b 91 95 83 c9 93 16 e0 d2 cd 08 38 b8 d9 a3 46 b5 60 d4 a8 50 0e a1 21 c1 28 1f 52 96 29 84 59 4a c8 42 ca e0 62 81 a6 d0 d9 7a fa 2c 06 cb 7f 5a 89 d3 a7 cf 61 f9 f2 45 78 f4 34 0a 2b 7e f9 0b 55 ab 84 62 c9 d2 69 70 75 22 2e 92 cf 01 cd ca cd b8 7b fb 3e d6 6e fa 89 71 34 39 19 b9 38 7a e4 0c fe dc b5 0f fd 06 75 c6 07 43 fb b3 3c 2e ab d7 6c c5 d1 c3 c7 b1 65 fb 1a 84 55 2d cf f4 79 54 b1 33 3e 29 15 62 a1 90 25 9b a2 44 50 Data Ascii: n/Q-42p3!aogdhY#_y+Q%7fLCjTjn[E=g<\]8F`P!(R)YJBbz,ZaEx4+~Ubipu".{>nq498zuC<.leU-yT3>)b%DP
2024-10-21 22:39:27 UTC	5594	IN	Data Raw: 5f 7f 9c 82 87 91 cf 11 38 66 0e 74 2b e8 63 f4 58 5f f4 f0 f2 90 7b e5 49 f3 cf e7 b5 4c 46 60 23 0a bc 24 2e 65 99 0c 8f 9e 46 61 de a2 3f 70 fd cf 68 58 da 98 a2 48 a3 88 e7 77 cb ea b9 b0 a8 62 ce 14 a4 fc 10 f6 0c d3 b6 f9 fb be a7 7f 07 68 f6 1d c3 8f 4b d6 20 b7 50 03 8d eb d6 42 05 4d 4d 64 a5 a7 20 21 29 1a 0f 5f 66 60 d5 af d3 e1 e9 e1 ca b4 92 c1 eb 77 63 fd da e3 68 ed 62 83 aa e6 46 28 28 00 de 67 14 43 53 57 03 83 07 77 83 5b eb a6 9c a3 93 f8 26 8d af 4e 4a a0 e9 85 a2 a2 02 bc 8a 4d c2 98 69 f3 50 58 54 88 d1 be fd e1 e5 e1 86 b1 33 16 22 ee d5 6b f4 e8 d4 0e 23 86 f6 61 6f c0 93 a7 af 30 7b ee 8f ac 09 07 4e 18 83 ba f6 35 d0 7d c0 44 d8 da 98 c1 7f 50 77 78 b5 77 e3 0d 4f 16 78 01 68 c2 31 75 ea 72 78 fb b5 c6 a4 31 7e b0 ab 41 c0 a1 d4 Data Ascii: _8ft+cX_{ILF`#$.eFa?phXHwbhK PBMMd !)_f`wchbF((gCSWw[&NJMiPXT3"k#ao0{N5}DPwxwOxh1urx1~A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49730	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	675	OUT	GET /Bookappointment/Property/29b3f34b-2880-4e5c-990a-c73279b40889 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:26 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: ZIqtcA4BCP9Jd+LZ1IwNgEWGJEwa2KPVvzsCWRrhadmmI3qRF7Zli8Bq3QSxXj79qW5QkoSx7/VKtu1eHm3fNQ== x-amz-request-id: 6ZYTRE4WAVZBE1YF Date: Mon, 21 Oct 2024 22:39:27 GMT Last-Modified: Wed, 09 Oct 2024 09:23:49 GMT ETag: "bb5c2a3bcf86e5dd1e847f4a223d8ff1" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: un8znrXKESU1.Gu0miyauPSEhrpM0ehY Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 435873 Connection: close
2024-10-21 22:39:26 UTC	1441	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 26 00 00 01 4c 08 06 00 00 00 ff 49 77 e7 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e 64 bd d9 93 a4 77 76 1d 76 be 35 f7 a5 aa b2 f6 ae de 80 c6 32 18 60 56 8d 48 cb 94 ed b0 23 68 9a 0e d2 64 f8 c1 c1 70 58 0a 91 21 47 c8 4f 96 4c eb 6f f0 83 2c 4a d6 83 1f 1c 8e f0 8b c3 0f 1c d1 b4 25 93 a2 48 0e 97 21 67 c3 60 38 83 01 d0 00 ba 01 f4 56 5d 5d 6b ee 99 df ee 38 f7 de 5f 66 81 6a 12 d3 55 d9 99 5f 7e df 6f b9 f7 dc 73 cf bd 3f ef 7f fe e6 fd ca ab 2a c0 03 aa aa 42 09 0f 3e f8 33 e0 fb 1e ca aa 44 05 8f ff 8c ca 93 ff 05 df ec 79 1e f8 2f 01 df c7 97 f9 2f 65 09 f0 3d f6 36 79 a7 bc 4f df c0 df f9 c7 de 2e df c7 7f d7 ef f7 50 c9 ff ad be 02 5e 05 94 72 2d be ce ef 94 3b Data Ascii: PNGIHDR&LIwsRGB IDATx^dwvv52`VH#hdpX!GOLo,J%H!g`8V]]k8_fjU_~os?*B>3Dy//e=6yO.P^r-;
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: ff 8d f9 72 81 3c cb 91 a4 19 b6 77 8f e0 95 39 2e f2 16 ea ed 3e 46 e7 cf 51 af 86 40 b1 c0 64 3c c4 f6 de 6d 3c f8 e4 53 e4 79 85 fd 83 43 34 9b 11 8a 22 17 03 2e f6 d0 40 09 01 08 17 52 51 15 eb d7 05 a8 d0 08 aa c3 9e cf a6 ba e1 e3 16 ba 8d 16 26 e3 4b f9 f7 65 96 a1 d1 ee cb 03 66 e9 1c 79 36 47 9e a7 02 7c c2 90 8b 9f ff 05 88 eb 4d 59 60 69 96 60 63 f3 00 71 5c c3 e9 b3 53 6c 6c b5 d0 d9 d8 06 37 f6 62 fa 1c 59 ba 5c 41 4a 1a 58 7e 27 87 28 cd 32 d0 86 7a 65 0d 61 2d 46 14 d5 e1 05 21 a2 9c f7 d1 c0 67 cf ae b0 b1 b9 23 a0 6a 39 1b c9 86 ea 76 9b 18 ec ee c9 b3 e5 c9 0c f3 d9 b9 3c 1f 9d 08 81 18 17 2b 37 45 92 a5 28 b2 0c 25 ef 33 ae 0b 80 09 c3 1a 86 c3 33 f8 5e 8c c8 ab 70 78 e3 16 cd 34 b2 2c 45 10 78 18 6c 0e 70 76 76 2a 9b 3a 0c 43 ec 0d 36 Data Ascii: r<w9.>FQ@d<m<SyC4".@RQ&Kefy6G\|MY`i`cq\Sll7bY\AJX~'(2zea-F!g#j9v<+7E(%33^px4,Exlpvv*:C6
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 95 bd e0 b3 a9 ef e7 b3 69 77 5e fe 46 d6 88 ad e6 79 27 92 d3 a7 a0 9b 69 27 6b c1 2a 5a 4a d7 bd 5b cc e8 35 16 c5 39 28 3b 69 dc 75 5a 55 3d a2 fe 8f 91 0d a6 c1 f9 bc dd 57 7a 55 19 05 27 f6 75 7a 0f 15 0b db 9f 55 2a c3 a5 80 d6 22 21 f1 40 16 9d 0b f3 b9 d2 70 7c be 78 82 7a 3d da 2b de cf 4a 50 aa c9 a0 f5 4d 5a b9 ba 52 2e 6b df 25 eb d9 7e 5d 95 c0 cb fc 2a 38 94 71 35 50 a5 b2 83 35 6b 6f 53 69 1d 69 d7 fa ca 95 cf 74 a9 1a 63 01 b5 0f 8d f5 44 b9 a6 93 94 ef 77 95 97 1a ae b9 1d 64 e1 dd b5 da 17 d3 b0 ad 7c a3 31 55 ee 88 08 83 30 da f7 c7 aa bb 54 07 c4 cd eb 02 4c ab 48 d3 08 59 fa 22 09 e8 92 53 9a 5d 0a 52 01 9d 56 eb 5a 33 12 09 61 5d b6 45 d3 97 ca a6 99 97 b0 b3 ed 44 73 64 48 4b 6c 95 6e 7b fb 1f a6 2f ad 81 a1 55 4d c9 65 04 98 5c 47 Data Ascii: iw^Fy'i'kZJ[59(;iuZU=WzU'uzU"!@p\|xz=+JPMZR.k%~]*8q5P5koSiitcDwd\|1U0TLHY"S]RVZ3a]EDsdHKln{/UMe\G
2024-10-21 22:39:27 UTC	15360	IN	Data Raw: 0b 70 a2 4a 4c 4e 7e 91 ef e6 f7 f2 b6 84 b9 90 b3 69 b4 a4 55 b2 3f a2 41 d1 93 87 59 01 49 11 b6 2b 4c 70 d1 2c 53 5c ce b7 bb d3 75 99 ca 22 38 d2 8e ab ba 33 08 a0 22 89 fc ed fc 14 9f e3 c0 74 93 05 98 8e be b7 90 d1 69 0d 04 10 59 4f 12 a7 07 e1 bd 4a 1c 6c 25 ba 8e 4e d0 36 e6 4e b0 e9 18 75 4b 61 b9 4a 91 6b 40 44 99 22 15 aa 6a 3a 41 9d a5 1c 46 77 4d 6f c1 fb 77 9a 12 b9 7b 63 eb d9 9e 4e 9c a5 cd b1 58 00 61 38 d6 8e 4f 89 1b d3 8d 88 4e e4 5a 3f 12 9b 03 ad 54 d4 fb 16 32 cc d2 0f 5a 94 a1 6b d2 81 3d a7 bf 71 f6 c6 55 a7 c8 20 7f 2e 85 b0 26 64 e4 65 97 61 b0 c0 5a b5 94 6b 70 e2 80 9d 63 4b 56 1a 14 e7 0c 0d 08 49 95 0c 19 2c 29 03 5f 6b 52 14 57 38 56 c5 b1 56 ab c7 15 bb a6 05 e4 3e b5 c2 da 31 9c 56 b7 d0 40 df 75 31 66 f5 94 d8 5a 8f 5a Data Ascii: pJLN~iU?AYI+Lp,S\u"83"tiYOJl%N6NuKaJk@D"j:AFwMow{cNXa8ONZ?T2Zk=qU .&deaZkpcKVI,)_kRW8VV>1V@u1fZZ
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 25 0a f2 2a c0 21 25 65 bd 7e 53 fe d5 ff fe 4f f1 d9 f3 1f 21 8a c6 78 63 67 03 f5 62 1e 15 06 d9 7c 0e 85 5c 5a c3 c7 78 d0 93 bc fa 8d ef ff 08 fd ec 23 6c 14 fa b8 b9 69 e3 fe eb 5f c7 f3 2f bf 27 98 31 5b 5c 47 69 6d 1f 85 c4 1c f7 b6 1b f8 37 7f f5 c7 22 20 91 7b b2 bf b7 8b eb 36 ab db 00 03 32 30 1b 9f 42 e3 de 17 44 2d 6a 58 df 7a a8 0a be 7b f8 57 b8 be 6a 63 99 5a 22 1e c7 a8 94 09 e5 d7 70 78 d2 43 b6 50 c0 68 32 d2 cf 1c ec 1f 88 20 c5 56 53 e0 96 f0 73 29 18 6b 7e 8e e9 d7 43 bf 91 49 80 48 a3 5c 70 44 11 06 d7 d8 5a df c4 e1 ab 23 ec 6c 6d 4b 55 b4 cc a4 b1 77 ef 4d 1c be 7a 82 b9 88 a6 53 4d d7 a5 73 2b d1 07 a9 61 98 91 a6 b2 d8 e6 d4 e4 ee 25 46 93 1e b6 b7 1f 6a ea ef d5 f9 04 c3 c9 04 8f 5f db 15 79 f6 fa e4 23 f9 47 b0 3d 23 32 de 8a Data Ascii: %*!%e~SO!xcgb\|\Zx#li_/'1[\Gim7" {620BD-jXz{WjcZ"pxCPh2 VSs)k~CIH\pDZ#lmKUwMzSMs+a%Fj_y#G=#2
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 60 5c 08 43 d7 78 66 f9 56 67 5c 0e 2f b2 4c de ee a3 2a 27 6b ce c1 83 08 00 98 ce 30 e8 73 74 6d 96 06 2c d6 29 07 36 af 21 2b ba 68 01 2f ec 42 0d b4 79 1c 8d 86 8e 98 f3 8c 09 4d 47 65 3e 68 56 90 a5 b3 29 23 26 73 7c ea 23 af a8 70 e3 3a 35 34 c9 a4 e0 f3 eb e4 a3 b7 e8 35 2a 38 72 2e c9 b5 7d c2 6a 85 48 c9 13 8d b7 fc 09 11 bd c3 51 8c f9 d8 c7 9f f8 e8 3c ff 12 1f 35 f2 29 b2 7a d3 10 b9 68 02 18 49 c2 a3 46 46 35 81 2f fd 88 10 3b 57 01 f3 7d fe cb ef df 8b 04 03 73 03 24 e3 9c 18 5b bb d1 9f e0 de 49 17 24 ee 14 18 f4 e4 8b d7 d5 8f 28 28 99 30 26 c2 16 2b 3b 56 d0 24 6e 19 93 3c a6 4d c3 1e fc 68 aa e4 8c 87 68 f6 eb 37 94 7b da fd db 1f e2 b3 5b 6f 61 3c 1a cc 5d 40 b9 f4 6b e5 a2 36 d6 74 2e 03 0e 25 b2 e9 0c e2 c8 e0 dd 0f df c6 68 3c 14 1a Data Ascii: `\CxfVg\/L'k0stm,)6!+h/ByMGe>hV)#&s\|#p:5458r.}jHQ<5)zhIFF5/;W}s$[I$((0&+;V$n<Mhh7{[oa<]@k6t.%h<
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 42 80 75 f0 31 66 e4 58 41 45 64 c8 cc b1 fc 60 71 55 8f c9 48 1d e3 a1 77 8a c6 28 66 90 45 04 dd 40 71 3e 67 22 e7 b8 aa ce 0e 28 7b 06 23 ab 7a 53 51 50 7e cd 67 51 e4 61 37 27 b3 e2 c6 ca 4a fb 79 66 24 67 6a 1c 43 dd 6d 9c e0 e7 89 10 32 b3 b5 8f ee 21 11 53 1a 0f 1a ed c5 0c c9 c4 99 89 25 94 75 94 e2 b5 76 a4 c6 4a 4a be 1c 2a 86 0c dd 8f ac f3 a3 13 d5 46 90 a6 82 32 4c 24 1a 6d b8 03 aa 7e bf 39 5f 8b a7 13 4e 31 e8 8e 31 1d 9b bf 96 ce 0e a2 67 f4 2a 91 91 9f 15 92 66 46 38 45 b9 64 e4 70 93 13 cf 30 a2 72 47 ee ba 11 7a 61 5c 94 44 da d2 bf 99 8a cc e6 4f f4 06 21 5c 76 5f 6c cc 64 88 d7 fc 65 da 3c 27 7a c9 3e da b1 f3 d7 b8 1e 0e 60 a8 48 f0 31 9a 8f 62 ed 87 cc c5 f3 73 92 b4 15 95 91 c2 2e 52 7a ba 02 2e 22 b2 46 23 a0 88 10 ec d7 2c e2 13 Data Ascii: Bu1fXAEd`qUHw(fE@q>g"({#zSQP~gQa7'Jyf$gjCm2!S%uvJJF2L$m~9_N11gfF8Edp0rGza\DO!\v_lde<'z>`H1bs.Rz."F#,
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 4c ce 3e c5 8b a3 53 ec 6c 6e e2 ee de 3e 0a 19 1a 2f 01 a5 72 1e 3b db d7 d1 68 1c b9 02 c7 c2 d8 cc e8 cc 94 47 66 bc 66 dc 13 76 ff 42 98 68 f8 35 e8 20 97 ce a2 d9 6a 62 6b 75 43 d0 fe c6 f6 0e d6 b7 6e a2 71 76 88 56 f3 58 9d a8 16 8a ac fa 47 f6 87 28 02 d1 97 09 bb 93 34 8a c5 0a 4a b9 2c ba ed 0e 56 96 eb 48 a6 53 38 3c 18 a2 d5 1d 62 6d 7d 0d 93 69 03 ab 0b 19 d4 96 77 10 0c ce 30 0b 7b 08 46 3d 5b e7 0e b1 8b 9d cf f0 b0 d1 18 1d 86 85 4d 62 e8 f7 1a da e0 72 99 04 a6 c9 45 25 f6 0e 07 5d f1 54 78 18 53 b9 52 ca 95 d0 1f 4e f1 fc e8 0c c5 6c 06 d7 76 76 b0 51 4b 2b b4 6c 38 1a a2 db 1b e0 b4 3b c6 42 39 a5 02 8f e9 b8 74 1d 9d b0 30 61 1a 6f e4 49 a0 1d c9 bc 5f 58 cc 11 50 d0 06 3c e3 66 92 42 4c 05 08 3f 5a b6 0e 1f 08 d9 d8 53 ee 4e 65 50 36 Data Ascii: L>Sln>/r;hGffvBh5 jbkuCnqvVXG(4J,VHS8<bm}iw0{F=[MbrE%]TxSRNlvvQK+l8;B9t0aoI_XP<fBL?ZSNeP6
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 9f 89 41 5d ca 5a e2 2f 47 30 7c bb f4 21 b1 79 aa 11 71 f4 d2 54 29 99 e4 48 87 df 14 78 f6 e4 18 4f 7f f8 bf 63 18 4b 60 a1 90 14 87 22 68 b5 30 8a e5 f0 fa ab 37 f1 de e7 9f 61 e4 dd 78 b5 58 c6 cb d7 bf 8a 1f bd fb c7 88 c9 34 25 85 4c 8e 52 53 d6 3b 01 72 a5 35 4c 3a cf b0 b5 f9 0a ea f5 05 bc f3 c1 5b 66 42 c3 40 af 0c 09 1f 21 96 d6 6f 62 d2 3f 44 a3 d5 c5 ca e6 cb a8 95 33 38 6b 1c db d7 11 aa f2 31 cb e6 ca 3a 16 16 ca d8 7b f4 89 91 8f 1c 5a a3 af 65 79 ed 55 8c 51 44 6f ef 2d bc 38 ed e1 c6 e5 6d 1c 9d 9e 21 95 9a e1 9b df fc 36 f6 9e 3c 50 e5 cf 31 89 c9 ba a6 9a 09 46 64 5a de 79 21 26 b4 a4 9f 86 da 0c 79 40 9d 3e bb 2f 68 8f bc 8f 66 eb 1c 3b 9b bb 28 2c ad a1 5a 5b c5 67 1f fe d8 a5 c7 33 64 0b 24 8b c6 35 be 09 43 86 1b 1a 4a 11 72 dc 32 Data Ascii: A]Z/G0\|!yqT)HxOcK`"h07axX4%LRS;r5L:[fB@!ob?D38k1:{ZeyUQDo-8m!6<P1FdZy!&y@>/hf;(,Z[g3d$5CJr2
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 44 12 44 37 2c 3a 44 c5 d2 94 8a 49 73 37 9e 30 26 40 ae ac 8e 74 ab 75 62 a8 95 d6 8b 54 61 86 d4 92 c8 1c 90 6b f5 be 58 fc 2b 8b c9 8d 00 03 09 be db c7 ad 18 76 23 97 8b 11 a1 3e 95 9b be 98 0a 27 40 7f 6d 60 4a d4 cb 9e 7d 21 6a 0e 29 e1 17 14 dd e0 78 4f 81 f0 c1 3e 93 15 fe ee 6e db 83 c3 67 f6 eb bf bc 31 df 3d 1a 63 67 83 31 ea 31 64 13 51 54 f2 51 cd db 5e 1e 8f b0 b5 e2 21 3a 0f e1 ce 95 30 5a 1d 6e 6a c0 e3 bd 31 92 49 ea ae e3 f8 7f be db 10 31 f3 bd 07 be e0 22 c6 d5 2f e4 19 a1 6d 06 31 ba 68 a0 1c 38 8e 6c e5 12 f6 9f 3e 47 f1 f2 af 60 e7 73 ff 12 8d 67 df 43 2e 17 c3 4f 7f fa 9f 91 4e 78 78 fd cb 7f 82 d0 d1 5f 62 d0 3b c5 41 67 07 f1 5e 07 8b 85 1c 6a cd 13 8c 49 ac 9b 8e 10 f7 0e e1 4f 9b 48 24 12 e8 b4 e9 71 31 54 ce c5 60 18 c6 d2 d2 Data Ascii: DD7,:DIs70&@tubTakX+v#>'@m`J}!j)xO>ng1=cg11dQTQ^!:0Znj1I1"/m1h8l>G`sgC.ONxx_b;Ag^jIOH$q1T`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49728	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	675	OUT	GET /Bookappointment/Property/27679c1f-0391-4dd3-b767-bc38f04cf61f HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:26 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: uZW6CU3ERq2shf5gF7tk/2jkhtD1tGQMmeeXPydF4tIGptKSxACIp1s5BEx1BAbNndWQCXYwQ3/TN3B7HOuixQ== x-amz-request-id: 6ZYZNST2F387DESV Date: Mon, 21 Oct 2024 22:39:27 GMT Last-Modified: Thu, 26 Sep 2024 07:52:53 GMT ETag: "136d2ee60c3fd9397bbe8837205dc582" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: fWvAw.oxOdlYDe28JvQDO09bdpCYtmX1 Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 422955 Connection: close
2024-10-21 22:39:26 UTC	1442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 43 00 00 01 8e 08 06 00 00 00 94 a7 07 6c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e d4 bd f9 b3 ed 69 56 d6 b9 f6 3c ef 33 df 9c 87 ca ac 64 06 11 b5 b5 15 9a 62 50 68 0d a8 46 50 41 1a d0 fe a3 fa 07 5b 6d 86 42 24 a2 0d 43 da 46 71 88 56 81 82 2a aa 90 a2 90 29 a9 ac ca ca cc 3b 9f 69 cf f3 ee f8 3c cf bb f6 bd 45 60 90 45 24 d1 7a 88 22 ef bd 67 ef ef f0 be eb 5d c3 b3 9e b5 56 65 bf df ef e3 bf 81 9f 1f ff f1 1f 8f 2f 7e f1 8b d1 ef f7 62 bb dd 46 b5 5a 8b 6a b5 1a 9b cd 26 f2 11 2b 95 4a 6c b6 db 68 b7 5a b1 5a ad 82 bf f3 99 46 a3 11 eb f5 2a 56 ab 75 54 2b 95 68 b5 db 71 7d 7d 1d 77 2e ee c4 ed 78 14 d5 88 d8 c7 3e ea f5 46 d4 ea f5 a8 55 ab b1 58 2c f4 7d ee b5 db Data Ascii: PNGIHDRClsRGB IDATx^iV<3dbPhFPA[mB$CFqV);i<E`E$z"g]Ve/~bFZj&+JlhZZFVuT+hq}}w.x>FUX,}
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 46 4e 4f b5 52 93 e0 b1 4e fc be 5e ab c6 ed 08 83 6b c5 ab 03 cd 7a 5a 5c 75 88 11 24 1c b8 c9 74 12 6d 14 f9 6c 2e 83 26 91 96 a1 ac c9 48 71 40 78 36 29 9c 5a 35 ba 45 c1 f0 7c 18 69 3e 73 7e 71 a1 c3 c4 21 62 3d 71 ba e4 68 56 51 6c 35 bd 17 d7 60 5d 2d ec a1 77 64 cd 51 58 ac 15 fb c1 bf f1 5c 5c 17 a5 ca 73 f3 6f fc a4 31 4c 25 87 63 50 ab 56 f4 7b d6 97 df db 40 62 a8 6b 32 de 1c 08 94 28 06 9b b5 6c d4 ea fa 33 46 89 f5 e3 30 f2 ef e9 48 20 53 ac 23 c6 08 87 dc e7 7b af 67 66 1d 31 d6 a9 88 b9 17 bf e7 3e ec 77 1a ec f9 02 67 ae 15 cd a6 15 dc d5 f5 95 9e 21 8d c3 64 32 d2 7a 4f 71 fa 5a ed 2f 51 d4 5c 4b ce 4a ad 11 cd 46 55 9f 41 59 20 23 fc 3b c6 88 f7 e3 be e8 90 21 ce fa 6a a5 bf f3 2e 6c 30 eb 8c d3 dd ed b4 25 93 18 43 e4 96 35 65 8d d8 c7 Data Ascii: FNORN^kzZ\u$tml.&Hq@x6)Z5E\|i>s~q!b=qhVQl5`]-wdQX\\so1L%cPV{@bk2(l3F0H S#{gf1>wg!d2zOqZ/Q\KJFUAY #;!j.l0%C5e
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 90 53 d2 bb 6e 64 a9 11 40 d0 5a b2 47 55 99 01 e8 a3 eb 00 2e 03 21 75 a5 67 58 73 41 ff 91 2d 0d 6e 2f 7d bb 12 b5 72 27 6a db 96 cc 3c a4 7d 94 2e 2b fd d9 68 ba f8 83 3f f8 01 73 86 7e f1 e7 ff e1 97 38 2f 83 e3 8b f8 c6 bf fc d1 2f cb 09 ca 0f 7f f2 ff fd a7 f1 3f 7c db 97 3e e0 cf fe ec 3f 8d 07 0f 5d 89 46 0a 89 c9 de 18 36 36 48 73 79 c8 55 32 74 94 71 04 d7 d7 82 e7 d5 a4 50 46 04 fe 80 a1 7b 19 b3 f5 46 8a 5e 0d b5 40 3b 76 b0 cb 3d 74 13 e1 c7 db 66 83 32 5f 7d e0 3f 94 74 1c 50 29 30 f2 15 d3 c9 8f 8f c5 63 a0 12 8a c3 88 f1 f3 f4 65 23 10 08 f2 e9 c9 71 3c 7c f4 28 ce 4e 29 c5 5c 29 c2 e7 7b c9 21 42 68 94 9e 29 d3 b9 b7 5b d2 0a 9e fe 0e fe c5 41 56 04 89 81 6c b7 03 0e d4 cb af be 12 d7 8f af 8c 68 35 18 20 eb a8 23 53 24 5c d3 88 85 53 38 Data Ascii: Snd@ZGU.!ugXsA-n/}r'j<}.+h?s~8//?\|>?]F66HsyU2tqPF{F^@;v=tf2_}?tP)0ce#q<\|(N)\){!Bh)[AVlh5 #S$\S8
2024-10-21 22:39:27 UTC	15360	IN	Data Raw: 03 4e 3b bd e8 13 aa b9 dd f4 97 8a cf 81 6c 1e f6 81 3f b3 56 8f 1e 3e 12 f1 5e 69 ab 92 9a e5 be 74 65 f7 b8 19 f7 49 cb e6 be 89 a6 61 53 90 6b a8 07 4a 65 97 71 41 3e 73 d6 f9 5c 9f de 56 bc 37 e7 eb f6 e6 36 2e ee dc 31 27 b8 70 52 79 27 da 3b bc f6 a1 0f c5 0f fd d0 07 5c 4d 96 ce 10 1b f2 4d df fc 37 a3 db a7 67 c4 9f ec e7 8f 72 86 7e fa 63 1f 8b 77 df 7b 57 42 96 5d 48 b3 d3 26 9e 38 8a 3e 23 16 75 28 2e b3 b0 38 14 f0 71 44 f8 d3 f0 c5 b5 d2 6c 23 e6 55 35 5a ea f4 9b 30 31 87 11 85 7f 7a 72 2a 81 14 91 75 b3 16 69 0f a5 ad 21 7b 6a ba 65 14 c6 9e 2b 53 e2 3d 1f 88 e7 a1 d4 9b 0d d3 10 4a 26 c8 97 ae a2 08 11 01 12 04 33 3c 65 84 df 69 26 3a 65 cf 15 4d 10 55 89 ff a1 46 62 cc e8 b2 11 d6 08 81 32 b3 0b 47 8d e8 4d 5d 50 cb 64 64 04 1a a1 cc 41 Data Ascii: N;l?V>^iteIaSkJeqA>s\V76.1'pRy';\MM7gr~cw{WB]H&8>#u(.8qDl#U5Z01zr*ui!{je+S=J&3<ei&:eMUFb2GM]PddA
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 5f dc 6b 95 71 a3 2f 72 15 b2 60 dc 8f 95 89 a7 2d 2e da 34 c1 fd d8 e7 6c 7c e1 13 ff c5 5f 0e 18 e2 64 c9 db af 7e 15 cb f9 04 49 cc 48 89 1f fd 22 25 47 b5 fb d3 cf ff 75 19 33 ff 71 5f b3 f1 39 6a cd ed 1f f9 ab 3f fd 83 df c5 a8 7f 2a a3 a5 74 b0 a4 77 8b 38 df 16 ac 42 ea 32 8e c8 0b 21 9e 0a 51 84 56 bb ab 3c 72 d6 69 bc 44 8b 0b ba 3d 57 02 78 4c de 9e 4e 95 7a 7d ed 99 c1 cd 8d fd dc 34 c9 60 68 25 3c 1a 93 15 85 50 69 ca 28 4f 51 ae 42 cb 89 19 15 dd 67 e9 47 43 7a 0e 28 98 23 c3 80 54 26 4a 8b a5 3a a7 7d 52 11 83 71 3c 95 06 63 3c fc 64 7c 78 1d 6b 91 f0 33 e8 ba 08 45 f9 fa 34 26 63 5b 89 28 87 95 0b ab 43 7e 26 de 7c 0e 39 24 19 37 65 4e 1d 88 a1 12 cb 6e f5 73 e1 0c ba 65 8b 1b aa 45 63 b3 3c 13 af 12 e9 a1 d3 a7 81 c2 e4 68 89 80 4e b2 d4 Data Ascii: _kq/r`-.4l\|_d~IH"%Gu3q_9j?*tw8B2!QV<riD=WxLNz}4`h%<Pi(OQBgGCz(#T&J:}Rq<c<d\|xk3E4&c[(C~&\|9$7eNnseEc<hN
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 56 33 33 33 d2 16 bd 79 e3 c6 fb 96 08 bc 5e ea 2b 31 29 62 05 f5 bd ef bd 29 af 4d 5e 01 7f a7 86 c6 fc fc 3d 84 42 41 6c 6f 6f c1 e6 20 ac ac 48 f5 b3 13 66 f8 22 36 2c 2d 72 cc 94 84 dc 16 bc 7e 2f ca d5 32 26 4e 39 30 79 d0 8f d7 ff 7c 11 1f fa d0 59 ac be 57 44 ab d2 96 f5 cc 24 5c 54 7f 7b 4d b8 ec 4d ec 99 3b 80 d4 4e 19 cd 46 07 cd 56 5d 48 85 89 a4 17 0b f7 d7 95 be 92 d6 c5 f1 33 71 2c dc cd 89 cf 55 9b fe 45 95 0e 06 9a 11 0e 27 fb 04 7a 34 86 03 d4 8a 5d 24 27 fc e2 3c 9e 8c 38 d0 69 75 a5 ba f5 ec f1 40 2b 0f 60 f6 58 11 30 0c 04 79 2a 96 5b 70 73 da cb 69 44 31 a7 54 b7 eb 4d 92 23 b9 37 38 99 42 ee dc 00 41 bb 1e fe a8 0b 0f 1e 54 31 34 19 24 c9 65 61 31 b0 02 06 9b 05 89 29 37 0a 85 0e 7a 9d 01 06 e5 0e 9c 16 33 e6 e6 c6 05 91 f9 f5 0f 2f Data Ascii: V333y^+1)b)M^=BAloo Hf"6,-r~/2&N90y\|YWD$\T{MM;NFV]H3q,UE'z4]$'<8iu@+`X0y*[psiD1TM#78BAT14$ea1)7z3/
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 88 cc 4b 4a f1 77 f2 45 57 fb fc ce 2a 36 56 6e 8c 44 c9 be ff 36 8f fe f0 cf fd 95 f7 bc 7c f7 3f 61 33 7b 1b 3a 93 4e 46 af 35 74 50 ad 34 e1 72 3a 50 a8 16 e0 71 39 30 61 fa 1c b2 db ab 32 b1 c2 1b cd a6 32 5b 4e 2e b7 4f 54 4e d9 53 24 ec c9 20 cb 31 f7 5d 8f 20 f2 87 76 ed 04 d8 8b 56 9a 0a 4a 2b 45 69 e2 50 90 4a 89 8c a9 f6 16 a7 2b c4 bd 54 ae 91 19 3e 13 11 8a dc 71 92 84 fd 49 35 a2 4f 9b 07 d5 db e4 78 20 83 2c cb 17 05 c5 d2 83 48 e9 e3 d0 5a 40 b4 67 5a d4 8a a1 b1 66 13 81 f8 0c 2e 6d fd ae 38 f9 9a ad 7a 14 4b 1d fc e5 37 52 e8 1a f2 08 24 9d 68 56 c8 c8 d7 f0 d9 8f fc 22 26 e2 b3 92 c4 70 01 89 f0 d8 50 93 8c bb d6 a8 4b 6f 95 19 f3 f6 f6 b6 04 7b 21 f6 0e 87 f8 e6 b7 ff 0c d9 ec 16 6a c3 92 10 d3 82 93 0e 04 7c 1e ec ac 57 a0 6f da d1 2c Data Ascii: KJwEW*6VnD6\|?a3{:NF5tP4r:Pq90a22[N.OTNS$ 1] vVJ+EiPJ+T>qI5Ox ,HZ@gZf.m8zK7R$hV"&pPKo{!j\|Wo,
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 03 71 a8 66 72 d2 54 1c 3f ef 13 24 9f 6b f1 c8 c8 26 83 bb a6 eb d2 1a 17 ee 9e 55 93 56 33 11 a1 0d 94 50 e8 22 eb ca 39 63 5f 34 5a e1 8c 9e 79 f0 e4 49 94 38 16 19 98 68 36 43 6d d3 cf ac 01 d5 a6 40 2f 94 f1 d1 3d 57 c1 2c 6d 11 06 9c 17 04 a9 cc 66 d2 92 73 78 d7 7b ee ba 8c 12 93 f6 c2 b1 6a 28 7f ad 97 fd d0 c8 09 6d 67 57 c5 9c d1 50 0d d7 11 0c 44 90 cd a6 71 fc ec 45 9a 63 88 57 9a f0 7c d7 1d fd 9d 0e bb 8c 7d 3e d3 4c 26 87 e1 7d 17 d0 15 f6 22 cb fc 42 a7 05 d5 a6 0d 66 53 13 f9 4a 05 3d a1 9d b8 f9 aa 7f 65 64 e8 f0 8f bf f6 2f af 82 de f4 1b 7e d2 81 fa f4 e4 df 63 3e f6 aa 28 c7 4c 8a 07 8d 96 2e 6d 29 9b 47 47 36 5f 85 15 0d 4c 4e 67 70 55 f0 43 62 f0 47 de 0d 61 f7 72 b5 86 4a 4d c7 d7 ce 2f c2 e6 f5 00 6d 33 ac 0e ab b8 3f 6f 58 d9 0b Data Ascii: qfrT?$k&UV3P"9c_4ZyI8h6Cm@/=W,mfsx{j(mgWPDqEcW\|}>L&}"BfSJ=ed/~c>(L.m)GG6_LNgpUCbGarJM/m3?oX
2024-10-21 22:39:27 UTC	11368	IN	Data Raw: bd 66 fc 09 93 bc cd 66 d9 a0 92 09 23 73 6f fb b6 ad 58 5c 5e 41 ae 3c 0d ab a7 02 8b 96 42 30 d8 07 bd aa a0 d6 68 c3 ed b4 23 91 3d 0f 34 5c 30 db 8b b0 9a fa e0 b2 db 90 c9 a5 a1 d9 9b 88 a7 cb d0 d4 12 ec 36 05 99 82 02 9b 83 29 de 0a 5a 15 45 9c 97 4d 7a 03 99 7c 0d 01 b7 09 aa 55 41 3c db 80 d9 aa a0 5a 68 61 75 b6 2e e6 74 b1 95 1a b6 8d ba e1 8e d8 50 c9 aa f0 47 5b b0 9a 4d d8 bd 73 0b ec ee 36 92 4b 39 c4 73 19 d8 55 0b 82 ee bb e0 73 0e c8 c6 1a 0e 86 c5 75 98 68 92 58 84 54 6b 98 5d 39 05 77 47 1c 1d 81 12 32 79 3f 42 8e eb 51 d6 d7 10 f2 6a 18 a8 db 31 10 34 fc 61 56 93 19 e4 2c 7e 38 aa 69 9c cc e8 b0 86 93 58 5a 49 c2 e3 70 c3 a4 da 60 52 7c 70 3b 06 e1 b2 b3 cd 59 59 b7 93 b0 89 f0 24 59 f9 0e 5c 5a 51 72 09 73 62 d8 79 3b ec 8e 17 50 c8 Data Ascii: ff#soX\^A<B0h#=4\06)ZEMz\|UA<Zhau.tPG[Ms6K9sUsuhXTk]9wG2y?BQj14aV,~8iXZIp`R\|p;YY$Y\ZQrsby;P
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: e4 b7 70 09 49 26 73 d2 ee 89 e7 66 50 a8 1f 84 cb f4 f1 75 9e 8b 91 01 c8 b8 98 eb ff d3 7f 83 b9 40 6b 41 c0 fe c5 5f 45 fd c1 87 d1 9c 9e 41 d9 65 c5 83 bf b5 09 6b c9 32 dc 16 1d 2e bf 15 3e bb 1f 87 5f 9f 01 6a 4d 9c 3f 96 80 b5 9b e2 05 5d 94 a4 9d c3 5e 84 9d 54 47 55 10 9f 6f a3 5c ab 62 7c af 17 c1 a8 0d ad 86 49 d6 a6 a1 fe 1d b0 d4 a2 72 e8 e4 45 e5 21 ef 93 61 12 6c 10 95 2b e5 92 88 6c d2 a9 ac b8 74 33 03 91 05 10 db 80 2e b7 81 9e 8b 54 9d fb 1f e3 a3 d6 5b 48 bc 17 44 6e 24 8a c5 b0 89 46 a9 d1 c0 53 17 26 51 60 61 24 79 9f 3c 76 1a af c3 fb 5a 67 34 c6 3a 8f c7 6e 31 61 4f 57 07 b6 76 f7 18 29 00 34 f2 35 c2 0d 45 c1 4c b7 77 9d 07 53 a1 2d 50 da 6f 95 43 2d 85 44 7c 2f ec b4 10 01 65 ee 21 c7 2c d7 4c b6 ca 88 98 4b 38 ec 48 0e 45 7d 06 Data Ascii: pI&sfPu@kA_EAek2.>_jM?]^TGUo\b\|IrE!al+lt3.T[HDn$FS&Q`a$y<vZg4:n1aOWv)45ELwS-PoC-D\|/e!,LK8HE}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49729	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	679	OUT	GET /Bookappointment/Property/f9e1bfbb-9f36-4121-ac77-feca8b122ceb.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:26 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: Q65u9bj9xxQVLO8GQ04cahGtUNoWylea/CWgRQe9a1h94xXp/rWBjQXjKRAzgpyqN8P/53tfGwjImnGY4/ufJA== x-amz-request-id: 6ZYT1K1M0QV26P77 Date: Mon, 21 Oct 2024 22:39:27 GMT Last-Modified: Tue, 17 Sep 2024 04:08:36 GMT ETag: "8d92f5d697951e1086b50f00120c0168" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: iHzz8nbVf_5X7_UkKGSfp9wSj6S.NoUo Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 168250 Connection: close
2024-10-21 22:39:26 UTC	8393	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 9f 05 cd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: ab af 68 a7 51 f0 d4 11 5d 6b 16 a2 f6 2f 3b 4a 86 55 77 8a 4b 84 dd ba 24 75 8e 42 ac e0 06 08 c4 67 06 80 36 a8 af 33 97 f6 d2 f8 39 06 83 06 a8 ff 00 16 7e 19 a6 99 75 24 11 43 78 de 28 b1 10 4c f3 90 b0 2a bf 9b b4 99 09 01 00 3f 31 23 19 ad 33 fb 4e fc 35 1e 0c 3e 23 ff 00 85 85 e0 7f f8 47 97 51 1a 41 d5 3f b7 ad 7e c4 2f 49 00 5a f9 db f6 79 d9 20 79 79 dd c8 e2 80 3b 9a 2b ce c7 ed 77 f0 9c db e9 52 ff 00 c2 cf f8 79 e5 6b b6 6f a8 69 af ff 00 09 1d 9e dd 42 d9 24 f2 9a 78 4f 99 fb c8 c4 9f 21 75 ca 86 e3 39 e2 bb ed 3f 50 83 56 b0 86 ea d6 68 ae 6d ae 63 59 61 9a 27 0f 1c a8 c3 2a ca c3 82 08 20 82 3a e6 80 26 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a Data Ascii: hQ]k/;JUwK$uBg639~u$Cx(L?1#3N5>#GQA?~/IZy yy;+wRykoiB$xO!u9?PVhmcYa' :&(((((((((((
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: f1 2b 59 f1 0d b1 bf 7f 8a ba e9 b8 d3 4c 56 11 c6 4c 65 a6 66 4e 2e 83 13 1b a9 65 8d d5 b8 39 af 5c fd 89 bf d4 7c 20 ff 00 b2 a1 f1 5f ff 00 52 0d 76 be 85 f8 e7 fb 26 da fc 6a fd a9 fe 08 7c 49 9a e2 de 19 be 0d 5e 6b 37 b0 23 45 be 5b 93 7f a7 3d 89 45 3f c2 a0 49 bc 9f 58 d0 63 b8 00 c0 f1 3f ec 05 e1 78 7c 35 a8 30 f1 af c7 22 56 da 43 86 f8 a9 e2 12 0f ca 7a 8f b5 f3 5f 05 7f c1 96 bf f2 8a af 19 ff 00 d9 50 d4 7f f4 d7 a4 d7 eb 3f 8b 3f e4 55 d4 ff 00 eb d2 5f fd 00 d7 e4 c7 fc 19 6b ff 00 28 aa f1 9f fd 95 0d 47 ff 00 4d 7a 4d 00 75 9f 11 7f e5 6e df 01 7f d9 08 97 ff 00 4b 6f eb f5 2e bf 2d 3e 22 ff 00 ca dd be 02 ff 00 b2 11 2f fe 96 df d7 ea 5d 00 7c ef ff 00 04 b8 ff 00 93 53 be ff 00 b2 8b e3 ef fd 4c 75 aa fa 22 b9 2f 82 7f 05 b4 6f 80 3e Data Ascii: +YLVLefN.e9\\| _Rv&j\|I^k7#E[=E?IXc?x\|50"VCz_P??U_k(GMzMunKo.->"/]\|SLu"/o>
2024-10-21 22:39:27 UTC	15360	IN	Data Raw: a2 26 ff 00 e2 c6 ab a8 78 ed 8e 30 f2 5b ea 17 0f 2d 82 90 71 ca 69 ff 00 62 8b 9c 1f dd 0c e2 be 5a fd 9c 75 af 16 7c 0f f1 77 c2 5f 0e 7c 1b d4 3e 31 78 de 56 bf d7 65 f8 93 e1 6f 1c 58 c5 62 fa 5c 2d 0d ed d2 49 2b 79 49 6f 67 72 fa 93 42 91 18 64 64 b8 4b 89 1f f7 c8 be 6a 7d c5 63 fb 48 fc 2f b0 f8 6d a6 f8 8a db c7 be 02 87 c2 17 70 5c 1d 3f 53 8b 5b b4 5d 36 68 ad 21 92 59 fc a9 83 f9 65 61 86 09 9d f6 9c 22 42 e4 e0 21 23 a2 f1 3f c4 ef 0d f8 26 1d 1e 4d 67 c4 3a 1e 93 1f 88 6f 23 d3 f4 a6 bd bf 8a 01 a9 dc c8 8c e9 04 05 d8 79 b2 32 23 b0 44 cb 10 8c 40 c0 34 01 f0 37 ec d5 f0 8f c5 96 ff 00 b7 85 bd ff 00 8c fe 19 7c 49 d0 bc 6b f1 2f e1 a6 bc 9e 36 f1 54 d7 da 4c 90 8b c9 2e 74 cf 2e 3b 57 82 fe 73 0d ad ba 47 f6 7b 68 82 ef 19 59 19 18 b5 c4 Data Ascii: &x0[-qibZu\|w_\|>1xVeoXb\-I+yIogrBddKj}cH/mp\?S[]6h!Yea"B!#?&Mg:o#y2#D@47\|Ik/6TL.t.;WsG{hY
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: e5 f0 b5 9e 9d af 5c c2 9a 7f 88 f5 06 8f 5e 86 e2 f0 c3 0b 06 92 28 2d 21 45 95 24 97 1b a4 79 76 c7 84 dc fe 87 ff 00 04 ec f0 77 8b 3e 03 7c 3f d6 fe 0f 78 8f c3 52 e9 fa 47 c2 cb d1 a6 78 47 5f 8f 61 b7 f1 56 86 e0 bd ad c3 94 03 17 b1 8d f1 5c 86 00 bc 91 f9 dd 26 18 ae df b7 de a9 e0 bf 05 f8 b2 ef c7 ff 00 0a bc 53 e0 5d 6f c2 7a 86 8d 6c d6 57 17 96 d7 96 7a a5 b6 a7 7d 15 94 37 56 b7 b0 93 13 84 91 df cc 8d b6 c8 9e 58 ca 85 92 36 6f 41 fd 9c 3f 69 58 bf 69 a9 3c 49 a9 e8 ba 06 a5 6d e0 bd 36 f9 6c b4 2f 11 5c ba 0b 7f 17 28 4c cb 77 66 83 2c 6d 03 9d 89 33 60 4d b5 99 01 4d ae c0 1f 27 7c 27 fd 9e 3c 67 a5 7c 6c f0 71 b8 f0 df c4 48 7c 4b a2 fc 55 d7 3c 4f ab 41 73 2c 6d e0 6b 4d 3a ee 7d 4d be d7 68 9b bc b1 2b c3 77 1b a7 94 3e d2 2e 27 91 a5 Data Ascii: \^(-!E$yvw>\|?xRGxG_aV\&S]ozlWz}7VX6oA?iXi<Im6l/\(Lwf,m3`MM'\|'<g\|lqH\|KU<OAs,mkM:}Mh+w>.'
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 4c d3 45 1d fc b1 a2 25 9c 4e dc 98 2d 2d e3 86 d6 3c 60 15 83 7e 37 3b 13 ed 74 51 40 05 14 57 8b 7e de 5f 1d fc 51 fb 3d fc 0f 83 58 f0 7f f6 0a eb b7 da c5 a6 9b 0c ba cd 94 b7 b6 90 ac ac 77 b3 45 14 d0 3b 9d aa 40 c4 ab 82 41 39 c6 08 07 e6 4f fc 1a 67 ff 00 25 db f6 e1 ff 00 b1 fe d7 ff 00 4a 35 6a d8 ff 00 82 d3 7f ca c3 3f b0 17 fd 7f 49 ff 00 a5 8b 5c 07 fc 19 91 e3 5b 9f 89 5a 8f ed 67 e2 2b d8 e0 86 f3 5f f1 36 93 a9 4f 1c 00 88 92 49 8e a7 23 05 04 93 b4 16 38 c9 27 1d cd 77 ff 00 f0 5a 6f f9 58 67 f6 02 ff 00 af e9 3f f4 b1 68 03 f6 1e 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 0f ce 2f f8 3a f7 fe 50 91 f1 27 fe c2 9a 27 fe 9c ed eb e9 ef f8 24 ff 00 fc a2 cf f6 6a ff 00 b2 55 e1 7f fd 34 5a Data Ascii: LE%N--<`~7;tQ@W~_Q=XwE;@A9Og%J5j?I\[Zg+_6OI#8'wZoXg?h((((((((/:P''$jU4Z
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: f0 3e 8f f1 eb fe 0b 1f a4 e9 36 b6 a7 e0 6f c0 1b b3 6d 0a 44 67 b8 d4 a0 69 66 da 00 de e4 6a c0 16 38 c9 20 0e 49 e2 ae 7e c3 9f f0 57 7f db 0e 0f f8 2b c7 82 bf 66 3f da 73 e1 df c2 af 0c 4f e3 5d 02 f3 5a 8c f8 77 cc 7b 9b 68 e3 b6 ba 9a 29 7c d5 bc b8 89 95 9a ce 54 28 40 6e 41 c8 c6 18 03 ee cf f8 79 3f 82 ff 00 e7 c7 ff 00 2f 0f 0a ff 00 f2 da 8f f8 79 3f 82 ff 00 e7 c7 ff 00 2f 0f 0a ff 00 f2 da be 88 a2 80 3e 61 f0 67 ed 73 a3 7c 67 fd b1 fc 03 6f a3 e9 b3 b6 fd 0b 5c b0 9a 48 f5 ad 1f 50 5b 6f 31 ac 2e 15 dc 59 5e dc 3a af fa 19 4c b2 81 99 17 9e d5 f4 f5 14 50 01 45 14 50 01 45 7c d3 fb 7b fe df 7a f7 ec 5f e2 4f 09 d8 e9 1f 09 7c 45 f1 1e 1f 12 db 5e 4f 35 d6 9d 7a b6 b1 e9 cd 03 40 ab 1b 96 8d 81 67 13 12 39 07 11 9e 0f 38 f0 5f f8 7e 5f 8c Data Ascii: >6omDgifj8 I~W+f?sO]Zw{h)\|T(@nAy?/y?/>ags\|go\HP[o1.Y^:LPEPE\|{z_O\|E^O5z@g98_~_
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: fe 0a a7 ff 00 2b 10 fe cc 9f f6 4a bc 67 ff 00 a6 8d 5e bd 7b e3 34 a2 df fe 08 57 7d 2b 70 b0 6b f0 4a 7f e0 3e 31 8d bf a5 00 7d 21 f1 e3 c1 56 3a 57 ed b5 fb 3d 6b f6 e9 1d b5 c4 73 78 9b 44 11 c4 a1 04 89 7b 62 2f 66 24 0e a4 cb a7 c6 c4 f7 63 93 cd 7d 03 5f 2f fe d2 de 2c b9 ba ff 00 82 9b fe cc be 1b b7 86 49 6d 61 b2 f1 56 b9 7d 22 91 b6 d9 96 c6 2b 6b 7d dd fe 7f 3e e7 1f f5 cd ab ea 0a 00 2b ce fc 4d ff 00 27 65 e0 af fb 14 bc 41 ff 00 a5 9a 25 7a 25 79 df 89 bf e4 ec bc 15 ff 00 62 97 88 3f f4 b3 44 a0 0f 44 a2 8a 28 00 af 3b f1 37 fc 9d 97 82 bf ec 52 f1 07 fe 96 68 95 e8 95 e7 7e 26 ff 00 93 b2 f0 57 fd 8a 5e 20 ff 00 d2 cd 12 80 3d 12 8a 28 a0 0f 03 f1 bf fc a5 13 e1 8f fd 92 cf 17 ff 00 e9 db c2 f5 ef 95 e0 7e 37 ff 00 94 a2 7c 31 ff 00 b2 Data Ascii: +Jg^{4W}+pkJ>1}!V:W=ksxD{b/f$c}_/,ImaV}"+k}>+M'eA%z%yb?DD(;7Rh~&W^ =(~7\|1
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 0f e8 32 cb 3e 99 a6 4d e1 7b 17 b3 d3 a4 97 1e 6b c3 11 8b 64 6c f8 1b 8a 80 5b 03 39 a0 0f 11 d6 35 7d 53 f6 85 ff 00 82 9d 78 eb e1 7f 8c 7c 45 e2 af 0e 78 3b c1 de 0b d1 b5 df 0a 69 1a 16 bd 79 e1 f9 3c 4b 35 d4 d7 b1 df de bd cd a4 b1 5c 4e b6 c6 1b 68 bc a5 93 ca 43 70 19 d4 b3 21 5f 3e 1f 15 fc 4e de 37 83 e1 52 f8 c7 c5 12 fc 2c 7f 8d 6f e0 66 f1 78 d6 e5 fe d5 fe ce 1e 18 5d 4d 74 df ed 30 de 7e f3 ab 96 b0 fb 4f 99 e7 fc be 47 99 e7 7c f5 f6 07 89 ff 00 65 8f 86 3e 36 f0 3e 8f e1 9d 67 e1 c7 80 f5 7f 0d f8 78 e7 4a d2 6f 7c 3f 69 3d 8e 98 70 57 f7 10 bc 65 22 e0 91 f2 01 c1 35 a8 df 04 bc 18 df 0b 3f e1 06 3e 11 f0 c1 f0 4f d9 fe c7 ff 00 08 f9 d2 a0 fe ca f2 33 9f 2b ec db 7c ad 99 e7 6e dc 67 b5 00 7c 9b fb 67 db 4d fb 2c fc 09 f8 95 6f f0 c7 Data Ascii: 2>M{kdl[95}Sx\|Ex;iy<K5\NhCp!_>N7R,ofx]Mt0~OG\|e>6>gxJo\|?i=pWe"5?>O3+\|ng\|gM,o
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 1f b8 72 a5 6f 74 f8 ed de 78 f0 41 20 0b 88 a5 8f 9e 87 28 78 3c 60 f3 40 1f 31 fc 07 f8 11 e1 6f 8e 5f b4 77 ed 31 7b e2 cd 36 4d 6e e3 49 f8 91 6b a7 59 34 f7 93 81 69 6c 3c 27 e1 d9 bc a4 55 70 15 7c c9 a5 7c 01 f7 a4 63 d4 d7 a2 78 cf f6 4c f8 33 f0 f7 c2 1a a6 bd ac f8 72 d2 c7 49 d1 6d 25 be bd b9 7b bb a2 b0 43 1a 17 77 20 48 49 c2 82 70 06 68 f0 07 ec 6f 77 f0 d3 c4 be 33 d5 b4 af 8b 3f 12 e3 bc f1 ee b4 9a fe ae 64 83 43 75 92 e9 6c 2c ec 03 20 3a 6f ca be 45 8d b8 c0 ee 18 f7 ae a3 52 fd 9d ed fc 5f a6 69 96 7e 2c f1 27 88 7c 67 69 a5 6b 10 6b 71 c1 aa 47 63 1c 53 4d 02 b1 85 25 4b 6b 68 56 48 e3 94 a4 ea 18 12 25 86 26 ce 17 14 01 e7 3f b1 1f ec e3 6d e1 5d 67 59 f8 9f 7b e1 3b ef 03 eb 3e 30 b6 8a cf 4f f0 e5 d5 f1 b8 93 c3 fa 5a 1d e9 1c c0 Data Ascii: rotxA (x<`@1o_w1{6MnIkY4il<'Up\|\|cxL3rIm%{Cw HIphow3?dCul, :oER_i~,'\|gikkqGcSM%KkhVH%&?m]gY{;>0OZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49727	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	679	OUT	GET /Bookappointment/Property/389de8b6-ff8a-45d1-b76e-52cbb5c88f77.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:26 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: NRkj9DkXUzpBSAYwIXr+aF6uAjYG7uecJlvvzEWHG7GZqTKUdUKTcVoCXSdn94HbDccMnI8/LAXWAxo4K/E5mA== x-amz-request-id: 6ZYKZ8DTWW6RPGTE Date: Mon, 21 Oct 2024 22:39:27 GMT Last-Modified: Tue, 17 Sep 2024 04:17:20 GMT ETag: "772d2b6ef68db6cfe9f38faf550d45c5" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: IuiOkt5AYg0uJAYJM1AA6dpAOTrQRl6l Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 174638 Connection: close
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 96 05 ca 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:27 UTC	509	IN	Data Raw: 17 ff 00 d8 a5 a5 7f e9 1c 54 01 e8 95 e7 7f 1f bf e4 2d f0 f3 fe c6 db 7f fd 26 b9 af 44 af 3b f8 fd ff 00 21 6f 87 9f f6 36 db ff 00 e9 35 cd 00 7a 25 14 51 40 05 14 51 40 05 7f 3d de 2c ff 00 94 e5 fe c7 df f6 53 7e 23 7f ea 67 ae 57 f4 23 5f cf 77 8b 3f e5 39 7f b1 f7 fd 94 df 88 df fa 99 eb 94 01 f7 37 fc 1d 4f ff 00 28 dc f0 cf fd 94 df 0f 7f e8 c9 6b d3 7f e0 df df f9 47 d6 91 f5 d3 7f f4 c3 a4 d7 99 7f c1 d4 ff 00 f2 8d cf 0c ff 00 d9 4d f0 f7 fe 8c 96 bd 37 fe 0d fd ff 00 94 7d 69 1f 5d 37 ff 00 4c 3a 4d 00 7d bd 45 14 50 01 45 14 50 07 9d fe cb 9f f2 4a 67 ff 00 b1 8f 5f ff 00 d3 cd ed 7a 25 79 df ec b9 ff 00 24 a6 7f fb 18 f5 ff 00 fd 3c de d7 a2 50 07 ce da 47 fc 14 87 c3 ba c5 af 87 b6 f8 23 c7 f1 5f 78 bb 4b d2 b5 ad 12 c5 d3 4d 33 6a 36 9a Data Ascii: T-&D;!o65z%Q@Q@=,S~#gW#_w?97O(kGM7}i]7L:M}EPEPJg_z%y$<PG#_xKM3j6
2024-10-21 22:39:27 UTC	7886	IN	Data Raw: ac a3 b3 f0 ec 87 4f 7b db f5 ba 5b b7 8e 48 e4 8e e9 ad b6 aa 69 f7 cc fb e6 56 51 6a e7 1f 34 7b f8 0d 73 fe 09 91 e1 cd 66 f3 51 ba 8f 55 16 37 be 22 3e 27 83 5e b8 b7 d3 c2 b6 a7 6b ac 5f 4f 7f 17 cb bc aa dd 5a 4e f6 fe 5d c3 07 2c 90 c8 85 02 ca 3c be a3 57 fd 93 bc 45 e2 6f 89 b6 9e 3f d4 bc 61 a1 bf 8f 34 89 2c 86 97 71 6f e1 d9 63 d2 ed e1 82 1d 46 17 49 2d 5a f1 e4 91 a4 4d 56 eb 2c 2e 13 05 2d f0 a7 63 89 00 21 d1 3f e0 a2 5e 05 d5 7c 7d ab 78 66 6b 3f 10 e9 ba bf 87 fc 37 aa 78 9b 55 86 e6 1b 73 fd 9b 1e 9d 76 6d 6e 6d a4 31 cc df e9 1b 87 98 aa b9 47 88 ac 8a e5 58 67 bf fd 99 3f 68 1d 27 f6 ab fd 9f fc 25 f1 1b 42 b2 d5 b4 dd 1f c6 3a 6c 5a 9d a5 ae a9 1c 71 de 5b a3 8c 84 95 63 79 10 38 ee 15 d8 7b 9a f9 fb c4 9f f0 49 cd 3b c6 1f 12 4f 8c Data Ascii: O{[HiVQj4{sfQU7">'^k_OZN],<WEo?a4,qocFI-ZMV,.-c!?^\|}xfk?7xUsvmnm1GXg?h'%B:lZq[cy8{I;O
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: e5 47 f2 c7 1a e7 62 67 3b 57 1f 03 fe c2 bf f0 4a 3f 87 5f b7 77 c7 ef db 0b c5 7e 2f f1 0f c5 1d 27 51 d3 3f 68 0f 11 e9 31 43 e1 af 17 5d 68 f6 ad 12 c7 69 28 67 8a 22 15 a4 dd 33 02 e7 92 02 8e c2 bf 62 6b e0 5f 8c bf f0 6d cf ec e1 f1 c7 e3 37 8b fc 77 ab 37 c4 bb 4d 77 c7 1a c5 ce bb aa 8d 37 c5 b7 16 76 f2 5d 4e e5 e4 65 8d 06 14 12 7a 7a 00 3b 50 07 d2 9f b1 4f ec 35 e1 1f d8 3b c0 3a af 87 7c 1f aa f8 d3 56 b2 d6 35 0f ed 29 e5 f1 2e bd 3e b1 70 92 79 69 1e d4 92 52 4a a6 10 1d a3 8c 92 7b d7 aa 78 c3 c6 5a 47 c3 cf 0b 5f eb 9a fe ab a6 e8 7a 2e 95 0b 5c de ea 1a 85 ca 5b 5a d9 c4 a3 2d 24 92 b9 0a 8a 07 52 c4 01 5e 0b ff 00 04 fe ff 00 82 5d 7c 32 ff 00 82 6b 43 e2 b4 f8 71 37 8c 26 1e 32 36 8d a8 7f 6e eb 92 ea 64 7d 9b ce f2 fc bf 33 ee 7f c7 Data Ascii: Gbg;WJ?_w~/'Q?h1C]hi(g"3bk_m7w7Mw7v]Nezz;PO5;:\|V5).>pyiRJ{xZG_z.\[Z-$R^]\|2kCq7&26nd}3
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 71 2d 9c cc ea ad 24 13 24 f0 b8 64 21 83 24 b1 a3 82 08 20 a8 af 32 d4 3f e0 99 bf 03 75 5f 0c e9 9a 45 cf 80 6c e6 b1 d1 6f 2e 6f ec 55 ef ee cc 96 b3 5c 47 0c 73 b2 49 e6 ef 1b d2 08 41 1b b1 f2 0e 3a d7 bb d1 40 1e 13 e2 ff 00 f8 26 67 c0 bf 1f 78 5b 46 d1 75 af 87 ba 76 a5 a6 68 16 97 5a 7d 8c 17 17 77 4f e5 5b 5c cb e6 cf 0b 1f 37 73 c6 ef c9 57 24 7b 63 8a eb fc 7b fb 21 7c 2f f8 9f f0 0e db e1 6e bb e0 2f 0b ea 1f 0e ec 60 b7 b7 b4 f0 f3 d8 22 d8 59 25 be df 20 43 1a 80 22 f2 f6 8d a5 30 57 1c 57 a3 d1 40 1e 0f a7 ff 00 c1 31 3e 01 68 fe 14 d4 74 4b 3f 85 be 19 b2 d3 75 7b 6b 5b 5b e8 ed a3 78 5a e9 2d af a4 d4 20 2e ea c1 d9 d2 f2 59 27 de 4e f2 ee 49 26 b4 0f ec 0d f0 e2 c3 e1 c4 1e 0f d2 74 fb fd 0f c2 c7 c4 16 7e 23 bf d3 2d 6f 5e 48 b5 89 ed Data Ascii: q-$$d!$ 2?u_Elo.oU\GsIA:@&gx[FuvhZ}wO[\7sW${c{!\|/n/`"Y% C"0WW@1>htK?u{k[[xZ- .Y'NI&t~#-o^H
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 00 f2 1d 4b fe 4f d3 45 ff 00 b1 07 50 ff 00 d3 8d 95 7a f5 7c c1 fb 5a 78 eb c4 5f 0f 7f 69 4d 2e f3 c2 53 68 b6 be 23 be f0 b4 3a 35 85 c6 af 63 2d f5 95 ac 97 de 23 d2 2c bc e9 60 8a 68 5e 55 41 70 5f 62 cd 19 6d a0 6e 19 cd 6c 7f c2 bd fd ac 3f e8 af 7e cf 1f f8 68 75 8f fe 69 68 03 e8 7a 2b e7 8f f8 57 bf b5 87 fd 15 ef d9 e3 ff 00 0d 0e b1 ff 00 cd 2d 72 1f 14 7e 25 7e d2 1f b3 67 88 be 1e 5f 78 ab c6 ff 00 04 7c 59 e1 df 14 f8 d7 49 f0 b5 fd 8e 93 f0 ef 54 d1 ef 56 2b d9 fc a3 2c 57 12 6b 97 28 ac 99 ce 1a 16 07 a7 1d 68 03 eb 6a fc 9d ff 00 83 38 7f e5 16 9e 2d ff 00 b2 9d ab 7f e9 16 9d 5f ac 55 f9 3b ff 00 06 70 ff 00 ca 2d 3c 5b ff 00 65 3b 56 ff 00 d2 2d 3a 80 39 3f 19 ff 00 ca e6 be 12 ff 00 b2 69 27 fe 9b ee eb f6 3a bf 1c 7c 67 ff 00 2b 9a Data Ascii: KOEPz\|Zx_iM.Sh#:5c-#,`h^UAp_bmnl?~huihz+W-r~%~g_x\|YITV+,Wk(hj8-_U;p-<[e;V-:9?i':\|g+
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: da 7c b7 fe 18 f1 0e a5 77 3d a5 c6 a1 71 73 0b 4d 71 3c 73 4d 2c 9b 66 00 bc b2 33 b1 5c b6 09 c0 00 fa 42 8a f3 bf f8 69 cf 0f ff 00 d0 23 e2 1f fe 10 ba d7 ff 00 22 d1 ff 00 0d 39 e1 ff 00 fa 04 7c 43 ff 00 c2 17 5a ff 00 e4 5a 00 f4 4a fc f1 fd 85 04 e7 e2 fe 97 e5 14 d9 ff 00 0b 67 c5 7e 76 e1 c9 4f ed af 89 1d 3d f7 6d fc 33 5f 65 7f c3 4e 78 7f fe 81 1f 10 ff 00 f0 85 d6 bf f9 16 be 26 f1 1f ec 61 f0 d6 ff 00 f6 a2 9b c4 76 1e 1e fd a3 b4 5f 0f ea 5e 25 6d 5a f1 34 6d 6b c7 9a 5c 0a d7 16 9a cd cd e5 d4 51 5b dc 47 e4 99 35 0d 41 7e 48 51 02 f9 92 95 01 25 9b 20 1f 4a ff 00 cd b6 7f dd 5b ff 00 dd ee be 88 af 9a a1 83 c2 de 14 f8 37 e1 bf 87 be 03 d0 be 27 b5 bd b7 8b 34 8b f8 ce b7 a4 78 82 f2 62 3f b7 ad ef ee e7 9e ff 00 51 47 91 fa cf 21 79 a6 Data Ascii: \|w=qsMq<sM,f3\Bi#"9\|CZZJg~vO=m3_eNx&av_^%mZ4mk\Q[G5A~HQ% J[7'4xb?QG!y
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: b6 32 fb 2b db e8 a0 02 bc ab f6 c7 ff 00 92 49 a4 7f d8 f1 e1 0f fd 49 74 ca f5 5a f2 af db 1f fe 49 26 91 ff 00 63 c7 84 3f f5 25 d3 28 03 d5 68 a2 8a 00 28 a2 8a 00 2b 98 f8 d5 f1 83 41 fd 9f 7e 0f f8 a3 c7 5e 29 bb fb 07 86 fc 1f a5 5c eb 3a 9d c0 5d c6 2b 7b 78 9a 59 0a af 56 6d aa 70 a3 92 70 07 26 ba 7a f9 d3 f6 e6 17 9f 17 7c 7b f0 a3 e0 d5 9d 8d b5 fe 9d e3 9d 77 fb 7b c5 9e 78 dc 90 e8 1a 43 43 75 32 95 e8 c2 7b d6 d3 6d 59 48 20 c7 75 2f 1c 64 00 60 fc 43 f0 f6 ad fb 48 fc 6b f0 3c b0 a2 f8 3f 5d d4 3c 07 69 e2 44 b6 d4 60 37 83 4e b9 b6 d7 34 8d 40 5b 4c a8 f1 97 c3 c3 e5 31 56 5e a4 8f 4a f5 af ec 5f 8c ff 00 f4 32 fc 30 ff 00 c2 66 fb ff 00 93 ea b7 c6 0f 82 9e 36 f1 07 c6 5d 1f c6 9e 06 f1 7f 85 bc 39 7d 61 a2 dc e8 97 50 6b be 18 9f 5a 8a Data Ascii: 2+IItZI&c?%(h(+A~^)\:]+{xYVmpp&z\|{w{xCCu2{mYH u/d`CHk<?]<iD`7N4@[L1V^J_20f6]9}aPkZ
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 28 ff 00 83 38 1b 77 fc 12 cb c5 84 72 0f c4 dd 54 82 3b ff 00 a1 69 d4 01 f4 67 ed 33 fb 6a f8 67 f6 8e f8 29 ab f8 48 78 03 f6 ab f0 c5 dd e3 db 5e 69 da ce 9f f0 7b 59 7b 9d 22 fa d2 e6 2b bb 4b a8 d6 4b 66 47 31 5c 41 0b ed 70 55 b6 60 f0 6b 92 d3 3f e0 a1 5f 19 2d ac 23 8e e6 1f 1a dc ce 83 0d 28 fd 94 3c 5d 1f 99 e8 76 ff 00 6b 90 0e 31 9c 71 9c e0 0e 95 fa 07 45 00 7c 07 ff 00 0f 11 f8 b9 ff 00 3e 5e 37 ff 00 c4 54 f1 7f ff 00 2d eb 92 f8 bb fb 47 78 ab f6 99 d2 b4 af 0d fc 46 b1 f8 c9 75 e0 4b 7d 6b 4d d6 f5 3d 37 c3 5f b3 4f 89 f4 9d 43 55 7d 3e f6 0b eb 7b 73 77 35 ed d2 c5 03 4f 6f 17 98 12 1f 31 90 15 59 23 c9 35 fa 53 45 00 7c cb ff 00 0f 47 f0 df fd 12 5f da 67 ff 00 0d 0e bb ff 00 c8 f4 ef 80 df 1d 3f e1 a5 bf 6c 31 af e9 be 07 f8 a3 e1 8d Data Ascii: (8wrT;ig3jg)Hx^i{Y{"+KKfG1\ApU`k?_-#(<]vk1qE\|>^7T-GxFuK}kM=7_OCU}>{sw5Oo1Y#5SE\|G_g?l1
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 7f e1 5d a9 ff 00 f1 fa fc e2 ff 00 83 9a ff 00 e0 8a bf b3 d7 fc 13 57 f6 2e f0 4f 8c fe 11 78 4f 53 d0 3c 41 ac 78 de 0d 1a ea 7b 8d 72 f2 f9 5e d9 ac 6f 66 2a 12 69 19 41 df 0c 67 70 19 e3 19 e4 d0 07 f4 57 e2 af f9 16 35 1f fa f5 97 ff 00 40 35 f9 21 ff 00 06 55 7f ca 2c 7c 7b ff 00 65 57 51 ff 00 d3 46 8f 5f ad fe 2a ff 00 91 63 51 ff 00 af 59 7f f4 03 5f 92 1f f0 65 57 fc a2 c7 c7 bf f6 55 75 1f fd 34 68 f4 01 fa fd 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 Data Ascii: ]W.OxOS<Ax{r^ofiAgpW5@5!U,\|{eWQF_cQY_eWUu4hEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 22:39:26 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=238006 Date: Mon, 21 Oct 2024 22:39:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49731	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	679	OUT	GET /Bookappointment/Property/1a22c8ef-71e4-459b-9b38-cec3ca239794.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:26 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: EhnNaZ2AnsPDvvN9hG6a57C30FrudIlZwps2wDotPzmBgSFN8K3zIsatKGACpvLDpuoT3F03BdhRRMKa/QRAZw== x-amz-request-id: 6ZYQY83RGB9TAAHW Date: Mon, 21 Oct 2024 22:39:27 GMT Last-Modified: Tue, 17 Sep 2024 04:26:27 GMT ETag: "75cc7fb67071a88b82f280c78bb89b7b" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: P1pvR4edTLrZaRjVi2dztOb_eVBbrAp9 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 212797 Connection: close
2024-10-21 22:39:26 UTC	1442	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 a1 05 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 01 d5 d1 5f 32 fc 66 ff 00 82 ca fe cb df b3 c7 c4 fd 63 c1 7e 35 f8 d3 e0 ef 0e 78 a7 c3 f3 0b 7d 47 4d bb 96 41 35 a4 85 43 05 60 10 8c ed 65 3d 7b d7 af fe cf 3f b4 ff 00 c3 bf da cf c0 7f f0 93 fc 34 f1 a7 87 3c 71 a0 2c e6 d9 ef 74 7b d4 ba 8a 29 40 04 c6 fb 4e 51 c0 65 3b 5b 07 04 71 cd 00 77 74 57 95 7e d5 7f b7 17 c2 3f d8 7b c2 d6 9a cf c5 9f 88 1e 1c f0 2d 8e a2 ce 96 67 52 b9 db 35 f3 20 05 c4 31 28 32 4a 54 11 9d 8a 71 91 9e b5 c4 7e c9 9f f0 56 ef d9 c3 f6 e6 f1 8b f8 77 e1 5f c5 af 0d 78 ab c4 09 0b 5c 0d 31 44 d6 77 92 46 bf 79 92 1b 88 e3 77 0b d4 ed 07 03 93 c5 00 7d 19 45 36 69 96 de 16 92 46 54 44 05 99 98 e0 28 1d 49 35 f1 cf 89 3f e0 e0 af d8 d3 c2 7e 3c 97 c3 77 9f 1f bc 1b fd a7 04 c6 09 1a 08 ee ae 2d 15 c1 20 ff 00 a5 47 13 41 8e Data Ascii: _2fc~5x}GMA5C`e={?4<q,t{)@NQe;[qwtW~?{-gR5 1(2JTq~Vw_x\1DwFyw}E6iFTD(I5?~<w- GA
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 8e 69 1a 50 14 03 dc 7f e1 91 bc 2b ff 00 41 5f 89 df f8 72 7c 45 ff 00 c9 d4 7f c3 23 78 57 fe 82 bf 13 bf f0 e4 f8 8b ff 00 93 ab ce bf 67 cf db 67 c5 9f 1e 3e 3a 6a 3a 10 f0 ff 00 c2 2d 33 c2 fa 77 88 f5 ed 01 98 7c 49 9a 7f 16 11 a6 5e 5e 59 79 c7 47 fe cb 58 c7 9b 2d a8 7d bf 6c f9 21 97 7e e6 23 61 fa 52 80 3c c3 fe 19 1b c2 bf f4 15 f8 9d ff 00 87 27 c4 5f fc 9d 47 fc 32 37 85 7f e8 2b f1 3b ff 00 0e 4f 88 bf f9 3a bd 3e 8a 00 f3 0f f8 64 6f 0a ff 00 d0 57 e2 77 fe 1c 9f 11 7f f2 75 1f f0 c8 de 15 ff 00 a0 af c4 ef fc 39 3e 22 ff 00 e4 ea f4 fa 28 03 e6 cf da 73 f6 6d f0 f7 83 7c 09 e1 ed 4e d3 51 f1 f4 d7 36 9e 3b f0 8b c6 97 de 3a d6 ef ed d8 ff 00 c2 49 a6 8f 9e 19 ee de 27 1c f4 65 23 38 3d 45 77 de 10 ff 00 93 dd f8 85 ff 00 62 3f 85 ff 00 f4 Data Ascii: iP+A_r\|E#xWgg>:j:-3w\|I^^YyGX-}l!~#aR<'_G27+;O:>doWwu9>"(sm\|NQ6;:I'e#8=Ewb?
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 7f f1 ca e6 7c 69 ff 00 05 1b fd 9e be 1b ea 0b 69 e2 2f 8f 1f 06 74 1b a7 41 2a c3 a8 f8 d7 4d b5 91 90 92 03 05 79 81 c1 2a dc ff 00 b2 7d 2b 9e ff 00 85 0b e3 3f fa 17 7f f3 39 f8 a7 ff 00 91 ab f3 bf fe 0a 45 fb 01 fe d2 7e 02 ff 00 82 91 fc 24 fd a3 be 1c 7c 1b d2 7e 2e 59 78 42 cb fb 3a e3 c2 ed f1 0a eb 56 9c c8 b0 ea 09 e6 4d 3e a9 14 65 22 22 f8 15 58 f7 e1 a1 6c aa ee 04 80 7e 8b ff 00 c3 d8 bf 65 9f fa 39 6f 80 1f f8 70 f4 8f fe 48 af 5f f8 59 f1 73 c2 9f 1d 3c 0f 67 e2 7f 04 f8 9f c3 de 31 f0 d6 a0 5c 5a ea da 1e a3 0e a1 63 72 51 da 37 d9 34 2c c8 db 5d 59 4e 09 c1 52 0f 22 bf 2f 7f e1 bb 7f 6d ff 00 fa 46 c7 86 ff 00 f0 b1 d3 7f f8 9a db b2 ff 00 82 9c ff 00 c1 40 f4 eb 48 e0 b7 ff 00 82 7c 5b c1 04 2a 12 38 e3 f1 fd 92 a2 01 d0 00 06 00 a0 Data Ascii: \|ii/tAMy}+?9E~$\|~.YxB:VM>e""Xl~e9opH_Ys<g1\ZcrQ74,]YNR"/mF@H\|[*8
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: d7 1d 17 ff 00 4f ba 75 7d 15 ff 00 04 d5 ff 00 94 73 7c 01 ff 00 b2 6f e1 df fd 36 5b d7 ce bf f0 73 c7 fc a0 cb e3 af fd 71 d1 7f f4 fb a7 57 d1 5f f0 4d 5f f9 47 37 c0 1f fb 26 fe 1d ff 00 d3 65 bd 00 7c 13 ff 00 06 70 ff 00 ca 2d 3c 5b ff 00 65 3b 56 ff 00 d2 2d 3a bf 58 ab f2 77 fe 0c e1 ff 00 94 5a 78 b7 fe ca 76 ad ff 00 a4 5a 75 7e b1 50 01 45 14 50 01 45 14 50 07 c0 1f f0 74 77 fc a0 a3 e3 9f fd c0 3f f5 20 d3 2b ef fa f8 03 fe 0e 8e ff 00 94 14 7c 73 ff 00 b8 07 fe a4 1a 65 7d ff 00 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 1f 2f fe d1 1f f2 77 b6 7f f6 0f d3 bf f4 d3 e3 4a f5 cf 80 bf f2 69 be 0c ff 00 b1 4a c7 ff 00 48 d2 bc 8f f6 88 ff 00 93 bd b3 ff 00 b0 7e 9d ff 00 a6 9f 1a 57 ae 7c 05 ff 00 93 4d f0 67 fd 8a 56 3f fa 46 94 01 73 Data Ascii: Ou}s\|o6[sqW_M_G7&e\|p-<[e;V-:XwZxvZu~PEPEPtw? +\|se}@Q@Q@Q@Q@/wJiJH~W\|MgV?Fs
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 89 5e 77 f1 af fe 4a 57 c2 1f fb 1b 6e 3f f4 c3 ab d7 a2 50 07 9d fc 6b ff 00 92 95 f0 87 fe c6 db 8f fd 30 ea f5 99 f1 ab f6 17 f8 3b fb 47 78 d2 3f 11 f8 ef e1 b7 84 7c 57 af 45 67 1e 9e b7 fa 96 9e 93 5c 0b 78 de 47 48 b7 91 9d 8a d2 c8 40 ec 64 6f 5a d3 f8 d7 ff 00 25 2b e1 0f fd 8d b7 1f fa 61 d5 eb d1 28 03 e4 0f 10 ff 00 c1 2d ff 00 67 68 7f 69 bf 08 d8 2f c1 af 00 2d 95 cf 86 35 cb 89 61 1a 54 7b 24 92 3b bd 21 51 88 f5 51 2c 80 7f be 7d 6b d6 3e 1a 7f c1 3a fe 05 fc 1b f1 d6 9d e2 7f 0b 7c 2a f0 4e 83 e2 1d 21 da 4b 2d 42 cf 4c 48 e7 b5 66 46 8d 8a 36 32 09 47 65 fa 31 ae 8f c4 df f2 76 5e 0a ff 00 b1 4b c4 1f fa 59 a2 57 a2 50 07 e5 e7 c0 4f f9 5b 5f e3 7f fd 90 db 3f fd 2c d2 68 ff 00 82 97 ff 00 ca c6 1f b0 37 fd 79 78 a3 ff 00 48 64 a3 e0 27 Data Ascii: ^wJWn?Pk0;Gx?\|WEg\xGH@doZ%+a(-ghi/-5aT{$;!QQ,}k>:\|*N!K-BLHfF62Ge1v^KYWPO[_?,h7yxHd'
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: f0 f9 8f d9 63 fe 8b af c3 df fc 18 8f f0 af a6 a8 a0 0f 98 e2 ff 00 82 cf 7e ca b3 a6 53 e3 bf c3 c6 01 8a e4 6a 43 a8 24 1e de a0 d3 bf e1 f3 1f b2 c7 fd 17 5f 87 bf f8 31 1f e1 5d cf ec 39 ff 00 24 5f 5a ff 00 b2 81 e3 6f fd 4a b5 6a f6 1a 00 f9 97 fe 1f 31 fb 2c 7f d1 75 f8 7b ff 00 83 11 fe 14 7f c3 e6 3f 65 8f fa 2e bf 0f 7f f0 62 3f c2 be 9a a2 80 3e 65 ff 00 87 cc 7e cb 1f f4 5d 7e 1e ff 00 e0 c4 7f 85 1f f0 f9 8f d9 63 fe 8b af c3 df fc 18 8f f0 af a6 a8 a0 0f 99 7f e1 f3 1f b2 c7 fd 17 5f 87 bf f8 31 1f e1 47 fc 3e 63 f6 58 ff 00 a2 eb f0 f7 ff 00 06 23 fc 2b e9 aa 28 03 e6 5f f8 7c c7 ec b1 ff 00 45 d7 e1 ef fe 0c 47 f8 57 5f f0 3b fe 0a 37 f0 2b f6 95 f1 fc 5e 15 f0 17 c5 3f 07 f8 ab c4 53 41 25 cc 7a 75 85 e8 92 79 23 8c 02 ec 17 b8 50 41 35 Data Ascii: c~SjC$_1]9$_ZoJj1,u{?e.b?>e~]~c_1G>cX#+(_\|EGW_;7+^?SA%zuy#PA5
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 37 73 80 3f 73 35 6f 85 be 19 d7 bc 35 65 a3 5f 78 73 42 bd d1 f4 c6 47 b3 b1 9f 4f 8a 4b 6b 46 40 55 0c 71 95 2a 85 41 20 60 0c 02 71 56 af bc 13 a3 6a 6d 72 6e 74 8d 32 e0 de 97 6b 83 2d aa 3f 9e 5e 25 85 cb e4 7c db a2 55 8c e7 aa 28 53 c0 c5 00 7c 4f fb 50 f8 5e ef e2 dd a7 c0 ef 0c f8 4a ef c5 17 5f 16 fc 41 a0 69 92 e9 d7 d0 dc 83 a7 78 0e c2 de ea c2 ee f3 5f 9d 0e 37 4c 4c 11 5b 46 8c c7 ed 1e 63 43 b7 ca 6b 93 5f 76 57 33 e2 af 82 de 0e f1 d5 d5 a4 fa df 84 fc 33 ac 4d a7 c6 21 b5 92 fb 4b 82 e1 ad 90 1c 85 42 ea 4a 80 7b 0e 2b a6 a0 0f 9b 3e 0c 7f ca 57 ff 00 68 0f fb 27 5e 02 ff 00 d2 df 15 d7 d2 75 f3 67 c1 8f f9 4a ff 00 ed 01 ff 00 64 eb c0 5f fa 5b e2 ba fa 4e 80 0a 28 a2 80 3f 9e df f8 3a c3 fe 4a 47 86 ff 00 ec a9 de 7f ea 3f e0 da fd 9e Data Ascii: 7s?s5o5e_xsBGOKkF@Uq*A `qVjmrnt2k-?^%\|U(S\|OP^J_Aix_7LL[FcCk_vW33M!KBJ{+>Wh'^ugJd_[N(?:JG?
2024-10-21 22:39:27 UTC	1024	IN	Data Raw: 12 5b c4 9f 7a 65 cf 96 7c 03 ff 00 82 71 f8 a3 e1 d7 c5 af d8 df 5a d4 34 4f 0e 25 bf c1 1f 02 f8 97 44 f1 1b c5 24 6c f0 5f ea 11 e9 eb 13 43 f2 fe f3 73 47 79 b9 c7 4f 35 b3 f7 cd 7d c5 a9 e8 b6 7a d7 d9 fe d9 69 6d 77 f6 49 96 e6 0f 3a 25 93 c9 95 73 b6 45 c8 e1 86 4e 08 e4 66 ad 50 07 e6 ef 85 7f e0 97 1f 11 34 bf d9 ea 7f 08 5c 69 5e 1c 28 de 0f 97 c3 a9 67 f6 b4 36 c0 1f 17 4d a9 a4 3b 71 b4 44 2c 59 06 31 80 7e 4c 71 5f 57 6a bf b3 4e a5 e2 0f da ef e2 57 8b d8 c1 a7 69 9e 2b f8 65 a3 f8 37 4d d4 ed d8 7d b6 ca 78 6f 75 b9 ae 76 0e 19 14 2d ed a3 02 0e 19 93 fd 8a f7 4a 28 03 e0 d5 fd 8c 3e 2b f8 fb e1 07 86 3c 2d a9 78 43 c2 3e 11 93 e1 9f c2 3d 77 c0 56 d7 56 1a c2 dc 27 88 ef af 2c 2d ec e1 5b 70 22 43 05 8f fa 37 9c c2 6d ae 1c c2 36 1f 2c bd Data Ascii: [ze\|qZ4O%D$l_CsGyO5}zimwI:%sENfP4\i^(g6M;qD,Y1~Lq_WjNWi+e7M}xouv-J(>+<-xC>=wVV',-[p"C7m6,
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: f8 4d fb 3b 7c 57 d6 6f 7c 27 e2 6d 7f 44 b7 d7 7c 77 e2 5d 37 c6 7f 65 b1 f1 d5 ce 8f ab df 6a d1 d9 c1 6b 61 79 6a f6 b7 51 5c c6 df 67 b0 85 63 10 32 ab 79 0c d8 2c 5d 8f c7 1e 16 f8 03 fb 41 eb 3e 2d fd a2 3c 63 f0 db 4a b8 d1 27 f8 a9 a3 6b da cf 84 34 ef 14 e8 33 5a cc b6 f7 33 db 22 59 7f a4 34 71 e9 f7 b7 0d 05 d5 ca ad d4 72 08 da f1 1a 68 78 91 2b 76 cb e1 96 ab 17 ec 9d e2 bf 82 ba 3f c3 3f 89 77 9a e7 c5 9d 4b c3 be 23 f0 7c ba af 87 6e e0 b5 d1 74 f4 d3 f4 55 82 6d 4a f9 a3 5b 6b 3b bd 24 69 85 0d b4 ef 1d cc ad 61 01 58 99 a7 55 a0 0f a3 f4 8f 84 7f b2 df c3 cd 53 c7 90 6a 1e 2c f0 f6 af a8 dc f8 4a eb c3 1e 30 3e 2e f8 91 77 e2 0b a5 d0 ad 24 b9 b8 b9 82 f1 b5 1b d9 9d 21 81 af 6e 1a 46 72 3c b5 97 0c c1 42 81 ec 9f 0b fc 7b f0 df c1 9a 37 Data Ascii: M;\|Wo\|'mD\|w]7ejkayjQ\gc2y,]A>-<cJ'k43Z3"Y4qrhx+v??wK#\|ntUmJ[k;$iaXUSj,J0>.w$!nFr<B{7

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:26 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:26 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 19 Oct 2024 17:01:38 GMT ETag: "0x8DCF05FB2860982" x-ms-request-id: f1e6e80a-401e-0048-62b4-230409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223926Z-178ffc65759tbh4guw9nprg7en00000008u0000000008de5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:26 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-21 22:39:26 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49725	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:26 UTC	745	OUT	GET /Content/assets/css/Animate2020.css HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:27 UTC	300	IN	HTTP/1.1 200 OK Content-Length: 71756 Connection: close Content-Type: text/css Date: Mon, 21 Oct 2024 22:39:26 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "725622e18adada1:0" Last-Modified: Sat, 20 Jul 2024 09:54:57 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:27 UTC	3610	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0d 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0d 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 Data Ascii: @charset "UTF-8";/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-r
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e Data Ascii: 5,.06);-webkit-transform:translate3d(0,-30px,0) scaleY(1.1);transform:translate3d(0,-30px,0) scaleY(1.1)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:tran
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 69 6d 61 74 65 5f 5f 73 68 61 6b 65 58 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 68 61 6b 65 58 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 68 61 6b 65 58 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 59 7b 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 30 25 2c 33 30 25 2c 35 30 25 2c 37 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 7d 32 30 25 2c 34 30 25 Data Ascii: imate__shakeX{-webkit-animation-name:shakeX;animation-name:shakeX}@-webkit-keyframes shakeY{0%,to{-webkit-transform:translateZ(0);transform:translateZ(0)}10%,30%,50%,70%,90%{-webkit-transform:translate3d(0,-10px,0);transform:translate3d(0,-10px,0)}20%,40%
2024-10-21 22:39:27 UTC	1812	IN	Data Raw: 64 65 67 29 7d 37 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 31 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 31 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 6f 62 62 6c 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 35 25 7b 2d 77 65 62 6b 69 74 Data Ascii: deg)}75%{-webkit-transform:translate3d(-5%,0,0) rotate(-1deg);transform:translate3d(-5%,0,0) rotate(-1deg)}to{-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes wobble{0%{-webkit-transform:translateZ(0);transform:translateZ(0)}15%{-webkit
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 58 28 2d 31 32 2e 35 64 65 67 29 20 73 6b 65 77 59 28 2d 31 32 2e 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 2d 31 32 2e 35 64 65 67 29 20 73 6b 65 77 59 28 2d 31 32 2e 35 64 65 67 29 7d 33 33 2e 33 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 36 2e 32 35 64 65 67 29 20 73 6b 65 77 59 28 36 2e 32 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 36 2e 32 35 64 65 67 29 20 73 6b 65 77 59 28 36 2e 32 35 64 65 67 29 7d 34 34 2e 34 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 2d 33 2e 31 32 35 64 65 67 29 20 73 6b 65 77 59 28 2d 33 2e 31 32 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 2d 33 2e 31 32 35 64 65 67 29 20 73 6b 65 77 59 28 Data Ascii: X(-12.5deg) skewY(-12.5deg);transform:skewX(-12.5deg) skewY(-12.5deg)}33.3%{-webkit-transform:skewX(6.25deg) skewY(6.25deg);transform:skewX(6.25deg) skewY(6.25deg)}44.4%{-webkit-transform:skewX(-3.125deg) skewY(-3.125deg);transform:skewX(-3.125deg) skewY(
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 65 59 28 30 29 20 73 63 61 6c 65 28 2e 37 29 3b 6f 70 61 63 69 74 79 3a 2e 37 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 62 61 63 6b 49 6e 55 70 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 61 63 6b 49 6e 55 70 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 61 63 6b 49 6e 55 70 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 4f 75 74 44 6f 77 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 70 61 63 69 74 79 3a 31 7d 32 30 25 Data Ascii: eY(0) scale(.7);opacity:.7}to{-webkit-transform:scale(1);transform:scale(1);opacity:1}}.animate__backInUp{-webkit-animation-name:backInUp;animation-name:backInUp}@-webkit-keyframes backOutDown{0%{-webkit-transform:scale(1);transform:scale(1);opacity:1}20%
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 29 2a 30 2e 37 35 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 44 6f 77 6e 7b 30 25 2c 36 30 25 2c 37 35 25 2c 39 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 Data Ascii: alc(var(--animate-duration)*0.75);-webkit-animation-name:bounceIn;animation-name:bounceIn}@-webkit-keyframes bounceInDown{0%,60%,75%,90%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.35
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 55 70 7b 30 25 2c 36 30 25 2c 37 35 25 2c 39 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e Data Ascii: form:translateZ(0);transform:translateZ(0)}}.animate__bounceInRight{-webkit-animation-name:bounceInRight;animation-name:bounceInRight}@-webkit-keyframes bounceInUp{0%,60%,75%,90%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 30 30 70 78 2c 30 2c 30 29 20 73 63 61 6c 65 58 28 32 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 30 30 70 78 2c 30 2c 30 29 20 73 63 61 6c 65 58 28 32 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 62 6f 75 6e 63 65 4f 75 74 52 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 4f 75 74 52 69 67 68 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 4f 75 74 52 69 67 68 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 4f 75 74 55 70 7b 32 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 2e 39 38 35 29 3b 74 72 61 6e 73 66 6f 72 Data Ascii: 00px,0,0) scaleX(2);transform:translate3d(2000px,0,0) scaleX(2)}}.animate__bounceOutRight{-webkit-animation-name:bounceOutRight;animation-name:bounceOutRight}@-webkit-keyframes bounceOutUp{20%{-webkit-transform:translate3d(0,-10px,0) scaleY(.985);transfor
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 30 25 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 30 25 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 55 70 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 55 70 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 55 70 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 55 70 42 69 67 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 Data Ascii: transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}.animate__fadeInUp{-webkit-animation-name:fadeInUp;animation-name:fadeInUp}@-webkit-keyframes fadeInUpBig{0%{opacity:0;-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49740	172.217.18.4	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	679	OUT	GET /recaptcha/api.js?render=6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:27 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 21 Oct 2024 22:39:27 GMT Date: Mon, 21 Oct 2024 22:39:27 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 22:39:27 UTC	629	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-21 22:39:27 UTC	846	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-10-21 22:39:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49743	104.17.24.14	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	388	OUT	GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:27 UTC	959	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec3-5a89" Last-Modified: Mon, 04 May 2020 16:11:47 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 32035 Expires: Sat, 11 Oct 2025 22:39:27 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jqj84XLDdBlLfKGaSgSy2RnysCQq%2BHQMz9dP0eXse9QoVECpN8JqINg3Ch6ZIf5jUeeB1uwBArAuoG%2F%2BCDkqh%2BWmZpiuY1LAypzqWP0a21jXaKR6XBMgfjDhLXJdIrgra7QHiLds"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d64be62be6543e3-EWR alt-svc: h3=":443"; ma=86400
2024-10-21 22:39:27 UTC	410	IN	Data Raw: 35 61 38 39 0d 0a 2f 2a 2a 0a 20 2a 20 6a 71 75 65 72 79 2e 6d 61 73 6b 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 76 31 2e 31 34 2e 31 36 0a 20 2a 20 40 61 75 74 68 6f 72 3a 20 49 67 6f 72 20 45 73 63 6f 62 61 72 0a 20 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 49 67 6f 72 20 45 73 63 6f 62 61 72 20 6f 6e 20 32 30 31 32 2d 30 33 2d 31 30 2e 20 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 61 6e 79 20 62 75 67 20 61 74 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 49 67 6f 72 20 45 73 63 6f 62 61 72 20 68 74 74 70 3a 2f 2f 69 67 6f 72 65 73 63 6f 62 61 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 54 Data Ascii: 5a89/** * jquery.mask.js * @version: v1.14.16 * @author: Igor Escobar * * Created by Igor Escobar on 2012-03-10. Please report any bug at github.com/igorescobar/jQuery-Mask-Plugin * * Copyright (c) 2012 Igor Escobar http://igorescobar.com * * T
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 20 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 0a 20 2a 20 72 65 73 74 72 69 63 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 2a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 Data Ascii: f this software and associated documentation * files (the "Software"), to deal in the Software without * restriction, including without limitation the rights to use, * copy, modify, merge, publish, distribute, sublicense, and/or sell * copies of the S
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 4d 65 74 65 6f 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 72 65 71 75 69 72 65 28 27 6a 71 75 65 72 79 27 29 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 66 61 63 74 6f 72 79 28 6a 51 75 65 72 79 20 7c 7c 20 5a 65 70 74 6f 29 3b 0a 20 20 20 20 7d 0a 0a 7d 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 76 61 72 20 4d 61 73 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 2c 20 6d 61 Data Ascii: ; } else if (typeof exports === 'object' && typeof Meteor === 'undefined') { module.exports = factory(require('jquery')); } else { factory(jQuery \|\| Zepto); }}(function ($) { 'use strict'; var Mask = function (el, ma
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 74 72 6c 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 72 6c 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 28 70 6f 73 2c 20 70 6f 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 20 2f 2f 20 49 45 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 61 6e 67 65 20 3d 20 63 74 72 6c 2e 63 72 65 61 74 65 54 65 78 74 52 61 6e 67 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 61 6e 67 65 2e 63 6f 6c 6c 61 70 73 65 28 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: trl.setSelectionRange) { ctrl.setSelectionRange(pos, pos); } else { // IE range = ctrl.createTextRange(); range.collapse(true);
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 2e 64 61 74 61 28 27 63 68 61 6e 67 65 64 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 27 63 68 61 6e 67 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 64 61 74 61 28 27 63 68 61 6e 67 65 64 27 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 74 27 73 20 76 65 72 79 20 69 6d 70 6f 72 74 61 6e 74 20 74 68 61 74 20 74 68 69 73 20 63 61 6c 6c 62 61 63 6b 20 72 65 6d 61 69 6e 73 20 69 6e 20 74 68 69 73 20 70 6f 73 69 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f Data Ascii: .data('changed')) { el.trigger('change'); } el.data('changed', false); }) // it's very important that this callback remains in this position //
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 63 75 72 73 69 76 65 20 3d 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2e 72 65 63 75 72 73 69 76 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 63 75 72 73 69 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 6b 43 68 75 6e 6b 73 2e 70 75 73 68 28 6d 61 73 6b 2e 63 68 61 72 41 74 28 69 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 52 65 63 75 72 73 69 76 65 20 3d 20 7b 64 69 67 69 74 3a 20 6d 61 73 6b 2e 63 68 61 72 41 74 28 69 29 2c 20 70 61 74 74 65 72 6e 3a 20 70 61 74 74 65 72 6e 7d 3b 0a Data Ascii: ptional; recursive = translation.recursive; if (recursive) { maskChunks.push(mask.charAt(i)); oRecursive = {digit: mask.charAt(i), pattern: pattern};
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 20 65 6c 5b 6d 65 74 68 6f 64 5d 28 76 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 65 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 65 6c 5b 6d 65 74 68 6f 64 5d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 63 75 6c 61 74 65 43 61 72 65 74 50 6f 73 69 74 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 6c 64 56 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: el[method](v); } r = el; } else { r = el[method](); } return r; }, calculateCaretPosition: function(oldVal) {
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 69 66 20 28 70 2e 6d 61 73 6b 44 69 67 69 74 50 6f 73 4d 61 70 5b 69 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 6b 44 69 67 69 74 73 42 65 66 6f 72 65 43 61 72 65 74 41 6c 6c 2b 2b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 69 20 3d 20 63 61 72 65 74 50 6f 73 4f 6c 64 20 2d 20 31 3b 20 69 20 3e 3d 20 30 3b 20 69 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 2e 6d 61 73 6b 44 69 67 69 74 50 6f 73 4d 61 70 4f 6c 64 5b 69 5d 29 20 7b Data Ascii: if (p.maskDigitPosMap[i]) { maskDigitsBeforeCaretAll++; } } for (i = caretPosOld - 1; i >= 0; i--) { if (p.maskDigitPosMapOld[i]) {
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 61 72 65 74 50 6f 73 4e 65 77 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 65 68 61 76 69 6f 75 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 69 6e 76 61 6c 69 64 20 3d 20 5b 5d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6b 65 79 43 6f 64 65 20 3d 20 65 6c 2e 64 61 74 61 28 27 6d 61 73 6b 2d 6b 65 79 63 6f 64 65 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 2e 69 6e 41 72 72 61 79 28 6b 65 79 43 6f 64 65 2c 20 6a 4d 61 73 6b 2e 62 79 50 61 73 73 4b 65 79 73 29 20 3d 3d 3d 20 2d 31 Data Ascii: aretPosNew; }, behaviour: function(e) { e = e \|\| window.event; p.invalid = []; var keyCode = el.data('mask-keycode'); if ($.inArray(keyCode, jMask.byPassKeys) === -1
2024-10-21 22:39:27 UTC	1369	IN	Data Raw: 20 20 20 20 63 68 65 63 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 72 65 76 65 72 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 4d 65 74 68 6f 64 20 3d 20 27 75 6e 73 68 69 66 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 20 3d 20 2d 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 73 74 4d 61 73 6b 43 68 61 72 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 20 3d 20 6d 61 73 6b 4c 65 6e 20 2d 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 20 3d 20 76 61 6c 4c 65 6e 20 2d 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: check; if (options.reverse) { addMethod = 'unshift'; offset = -1; lastMaskChar = 0; m = maskLen - 1; v = valLen - 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49735	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	753	OUT	GET /Content/templates_assets/css/jquery-ui.css HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:27 UTC	300	IN	HTTP/1.1 200 OK Content-Length: 58390 Connection: close Content-Type: text/css Date: Mon, 21 Oct 2024 22:39:26 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4bd7b0478bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:57:49 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:27 UTC	3610	IN	Data Raw: 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 30 20 30 20 30 20 30 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 7d 2e 75 69 2d 68 65 6c 70 65 72 2d 72 65 73 65 74 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e Data Ascii: .ui-helper-hidden{display:none}.ui-helper-hidden-accessible{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.ui-helper-reset{margin:0;padding:0;border:0;outline:0;line-height:1.3;text-decoration:non
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 2d 63 6f 6e 74 65 6e 74 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 7d 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 6c 61 62 65 6c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 7d 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 2e 75 69 2d 73 70 69 6e 6e 65 72 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 37 35 25 3b 77 69 64 74 68 3a 63 61 6c 63 28 20 31 30 30 25 20 2d 20 32 2e 34 65 6d 20 29 7d 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 2e 75 69 2d 73 70 69 6e 6e 65 72 20 2e 75 69 2d 73 70 69 6e 6e 65 72 2d 75 70 7b 62 6f 72 64 65 72 2d 74 Data Ascii: -content{border-right:none}.ui-controlgroup-vertical .ui-controlgroup-label.ui-widget-content{border-bottom:none}.ui-controlgroup-vertical .ui-spinner-input{width:75%;width:calc( 100% - 2.4em )}.ui-controlgroup-vertical .ui-spinner .ui-spinner-up{border-t
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 2d 63 6c 6f 73 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 2e 33 65 6d 3b 74 6f 70 3a 35 30 25 3b 77 69 64 74 68 3a 32 30 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 30 70 78 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 31 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 2e 35 65 6d 20 31 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 70 61 Data Ascii: log .ui-dialog-titlebar-close{position:absolute;right:.3em;top:50%;width:20px;margin:-10px 0 0 0;padding:1px;height:20px}.ui-dialog .ui-dialog-content{position:relative;border:0;padding:.5em 1em;background:none;overflow:auto}.ui-dialog .ui-dialog-buttonpa
2024-10-21 22:39:27 UTC	1812	IN	Data Raw: 46 5a 4e 72 37 70 52 43 61 76 5a 35 42 57 32 31 34 32 68 59 33 41 4e 2f 7a 57 74 73 6d 66 31 32 70 39 58 78 78 46 6c 32 6c 70 4c 6e 31 72 73 65 7a 74 66 58 5a 6a 64 49 57 49 66 32 73 35 64 49 74 77 6a 59 4b 42 67 6f 39 79 67 35 70 48 67 7a 4a 58 54 45 65 47 6c 5a 75 65 6e 70 79 50 6d 70 47 51 6f 4b 4f 57 6b 59 6d 53 70 61 53 6e 71 4b 69 6c 65 49 32 46 41 41 41 43 48 35 42 41 6b 42 41 41 45 41 4c 41 41 41 41 41 41 6f 41 43 67 41 41 41 4b 56 6a 42 2b 67 75 2b 6a 47 34 6b 4f 52 54 56 72 56 68 52 6c 73 6e 6e 32 64 4a 33 5a 6c 65 46 61 70 74 46 72 62 2b 43 58 6d 4f 39 4f 6f 7a 65 4c 35 56 66 50 39 39 48 76 41 57 68 70 69 55 64 63 77 6b 70 42 48 33 38 32 35 41 77 59 64 55 38 78 54 71 6c 4c 47 68 74 43 6f 73 41 72 4b 4d 70 76 66 61 31 6d 4d 52 61 65 39 56 76 57 Data Ascii: FZNr7pRCavZ5BW2142hY3AN/zWtsmf12p9XxxFl2lpLn1rseztfXZjdIWIf2s5dItwjYKBgo9yg5pHgzJXTEeGlZuenpyPmpGQoKOWkYmSpaSnqKileI2FAAACH5BAkBAAEALAAAAAAoACgAAAKVjB+gu+jG4kORTVrVhRlsnn2dJ3ZleFaptFrb+CXmO9OozeL5VfP99HvAWhpiUdcwkpBH3825AwYdU8xTqlLGhtCosArKMpvfa1mMRae9VvW
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 2d 6d 61 78 7b 72 69 67 68 74 3a 30 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 7b 77 69 64 74 68 3a 2e 38 65 6d 3b 68 65 69 67 68 74 3a 31 30 30 70 78 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 6c 65 66 74 3a 2d 2e 33 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 2e 36 65 6d 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 7b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 Data Ascii: er-horizontal .ui-slider-range-max{right:0}.ui-slider-vertical{width:.8em;height:100px}.ui-slider-vertical .ui-slider-handle{left:-.3em;margin-left:0;margin-bottom:-.6em}.ui-slider-vertical .ui-slider-range{left:0;width:100%}.ui-slider-vertical .ui-slider
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 68 74 20 61 7b 63 6f 6c 6f 72 3a 23 37 37 37 36 32 30 7d 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 31 61 38 39 39 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 64 64 66 64 66 3b 63 6f 6c 6f 72 3a 23 35 66 33 66 33 66 7d 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 20 61 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 20 61 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 20 61 7b 63 6f Data Ascii: ht a{color:#777620}.ui-state-error,.ui-widget-content .ui-state-error,.ui-widget-header .ui-state-error{border:1px solid #f1a899;background:#fddfdf;color:#5f3f3f}.ui-state-error a,.ui-widget-content .ui-state-error a,.ui-widget-header .ui-state-error a{co
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 6e 3a 2d 31 32 38 70 78 20 2d 34 38 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 6e 65 2d 73 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 34 70 78 20 2d 34 38 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 65 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 30 70 78 20 2d 34 38 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 73 65 2d 6e 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 37 36 70 78 20 2d 34 38 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 73 74 6f 70 2d 31 2d 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 32 70 78 20 2d 34 38 70 Data Ascii: n:-128px -48px}.ui-icon-arrowthick-2-ne-sw{background-position:-144px -48px}.ui-icon-arrowthick-2-e-w{background-position:-160px -48px}.ui-icon-arrowthick-2-se-nw{background-position:-176px -48px}.ui-icon-arrowthickstop-1-n{background-position:-192px -48p
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 38 70 78 20 2d 31 34 34 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 63 68 65 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 34 70 78 20 2d 31 34 34 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 62 75 6c 6c 65 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 30 70 78 20 2d 31 34 34 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 72 61 64 69 6f 2d 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 36 70 78 20 2d 31 34 34 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 72 61 64 69 6f 2d 6f 66 66 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 31 32 70 78 20 2d 31 34 34 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 70 69 6e 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: round-position:-48px -144px}.ui-icon-check{background-position:-64px -144px}.ui-icon-bullet{background-position:-80px -144px}.ui-icon-radio-on{background-position:-96px -144px}.ui-icon-radio-off{background-position:-112px -144px}.ui-icon-pin-w{background-
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 75 69 2d 77 69 64 67 65 74 2d 6f 76 65 72 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 2e 35 65 6d 20 2e 35 65 6d 20 2e 35 65 6d 20 2e 37 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 7d 2e 75 69 2d 61 63 63 6f 72 64 69 6f Data Ascii: margin-left:-8px;display:block}.ui-widget-overlay{position:fixed;top:0;left:0;width:100%;height:100%}.ui-accordion .ui-accordion-header{display:block;cursor:pointer;position:relative;margin:2px 0 0 0;padding:.5em .5em .5em .7em;font-size:100%}.ui-accordio
2024-10-21 22:39:27 UTC	4096	IN	Data Raw: 7d 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 20 73 70 61 6e 2c 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6e 65 78 74 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 70 78 7d 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 3a 30 20 32 2e 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 38 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 75 69 2d 64 Data Ascii: }.ui-datepicker .ui-datepicker-prev span,.ui-datepicker .ui-datepicker-next span{display:block;position:absolute;left:50%;margin-left:-8px;top:50%;margin-top:-8px}.ui-datepicker .ui-datepicker-title{margin:0 2.3em;line-height:1.8em;text-align:center}.ui-d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	142.250.185.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	673	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:27 UTC	745	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 22:39:27 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CKgH; Domain=.google.com; Expires=Sat, 19-Apr-2025 22:39:27 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 22:39:27 UTC	633	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6c 62 2c 6f 62 2c 70 62 2c 71 62 2c 77 2c 73 62 2c 74 62 2c 76 62 2c 77 62 2c 78 62 2c 7a 62 2c 44 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 Data Ascii: DX-License-Identifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,lb,ob,pb,qb,w,sb,tb,vb,wb,xb,zb,Db;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=St
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 72 6e 20 61 3b 74 72 79 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a Data Ascii: rn a;try{var b=function(c){return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 63 5d 3d 64 5b 63 5d 29 7d 7d 3b 0a 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 64 6f 63 75 6d 65 6e 74 3a 62 3b 76 61 72 20 63 2c 64 3b 62 3d 28 64 3d 28 63 3d 22 64 6f 63 75 6d 65 6e 74 22 69 6e 20 62 3f 62 2e 64 6f 63 Data Ascii: c]=d[c])}};Wa=function(a){var b=arguments.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){b=b===void 0?document:b;var c,d;b=(d=(c="document"in b?b.doc
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d Data Ascii: \|a==Object.prototype)return a;a[b]=c.value;return a};qb=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.M
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6f 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b Data Ascii: a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a};_.y=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ob(a)};throw Error("d`"+String(a));};
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 65 60 22 2b 61 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 44 62 3d 7a 62 3b 0a 5f 2e 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 78 62 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 44 62 29 44 62 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: oto__=b;if(a.__proto__!==b)throw new TypeError("e`"+a);return a}:null}Db=zb;_.z=function(a,b){a.prototype=xb(b.prototype);a.prototype.constructor=a;if(Db)Db(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropert
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 4b 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 68 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 4e 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 47 28 67 29 3a Data Ascii: eturn{resolve:g(this.K),reject:g(this.o)}};e.prototype.K=function(g){if(g===this)this.o(new TypeError("h"));else if(g instanceof e)this.N(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.G(g):
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 71 2c 72 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 71 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6d 28 71 28 75 29 29 7d 63 61 74 63 68 28 42 29 7b 6e 28 42 29 7d 7d 3a 72 7d 76 61 72 20 6d 2c 6e 2c 70 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 71 2c 72 29 7b 6d 3d 71 3b 6e 3d 72 7d 29 3b 74 68 69 73 2e 4c 64 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 Data Ascii: .reject)}catch(m){l.reject(m)}};e.prototype.then=function(g,h){function l(q,r){return typeof q=="function"?function(u){try{m(q(u))}catch(B){n(B)}}:r}var m,n,p=new e(function(q,r){m=q;n=r});this.Ld(l(g,m),l(h,n));return p};e.prototype.catch=function(g){ret
2024-10-21 22:39:27 UTC	1378	IN	Data Raw: 74 69 6f 6e 20 62 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6c 29 7b 76 61 72 20 6d 3d 74 79 70 65 6f 66 20 6c 3b 72 65 74 75 72 6e 20 6d 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6c 21 3d 3d 6e 75 6c 6c 7c 7c 6d 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 76 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 70 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b Data Ascii: tion b(){}function c(l){var m=typeof l;return m==="object"&&l!==null\|\|m==="function"}function d(l){if(!vb(l,f)){var m=new b;pb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49748	157.240.253.1	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:27 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-21 22:39:27 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-21 22:39:27 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-21 22:39:27 UTC	14681	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 Data Ascii: c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="objec
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 Data Ascii: k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})()
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 Data Ascii: )==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"undefined":i(h))==="object"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered(
2024-10-21 22:39:27 UTC	1702	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 Data Ascii: unction p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.prototype.hasOwnProperty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.string
2024-10-21 22:39:27 UTC	14682	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 30 2c 64 3d 21 31 2c 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 66 3d 62 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 62 3b 21 28 63 3d 28 62 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 63 3d 21 30 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 6c 2e 74 72 69 67 67 65 72 28 61 2c 62 29 7d 7d 63 Data Ascii: alsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){var c=!0,d=!1,e=void 0;try{for(var f=b[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),b;!(c=(b=f.next()).done);c=!0){b=b.value;l.trigger(a,b)}}c
2024-10-21 22:39:27 UTC	16384	IN	Data Raw: 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 61 29 7d 63 61 74 63 68 28 61 29 7b 69 66 28 61 2e 6e 61 6d 65 3d 3d 3d 22 46 42 45 76 65 6e 74 73 43 6f 65 72 63 69 6f 6e 45 72 72 6f 72 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 68 72 6f 77 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 42 28 62 2c 49 2e 73 74 72 69 6e 67 Data Ascii: null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return e}}function A(a,b){try{return b(a)}catch(a){if(a.name==="FBEventsCoercionError")return null;throw a}}function B(a,b){return b(a)}function C(a){return function(b){b=B(b,I.string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 22:39:27 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237974 Date: Mon, 21 Oct 2024 22:39:27 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-21 22:39:27 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:27 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 215660da-601e-0001-80b4-23faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223927Z-178ffc65759b6phk1938t93stc000000098000000000cznq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:27 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:27 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: c8166578-701e-006f-41b4-23afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223927Z-178ffc65759s7gvj790ueq542n00000008rg00000000ffd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:27 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:27 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: f31cec41-001e-00ad-0fb4-23554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223927Z-178ffc657594b2ghbgpuphudcn000000090000000000n3vb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:27 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: db9c49b1-b01e-00ab-61b4-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223927Z-178ffc65759ltvfqk1p4048kt400000008q000000000ey9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:27 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 236f0d98-b01e-0097-23b4-234f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223927Z-178ffc65759wtchcan29e9304c00000008w0000000000t4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:27 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49759	172.217.18.4	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:27 UTC	499	OUT	GET /recaptcha/api.js?render=6LeoXzokAAAAAN4quJ7wN-7woQEK2QDcZ4GpUdQo HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:28 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 21 Oct 2024 22:39:28 GMT Date: Mon, 21 Oct 2024 22:39:28 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 22:39:28 UTC	629	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-21 22:39:28 UTC	846	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-10-21 22:39:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49760	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	679	OUT	GET /Bookappointment/Property/c4f90d03-3f83-4812-97de-557314d69352.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:28 UTC	516	IN	HTTP/1.1 200 OK x-amz-id-2: XTr2KsjBRMFXePTPzsRvdgezJnMc8Mcl3ixK0jdWW+i8zaGdi1A+sHLjvNLY9voTuZxXdW9FM4vdxFra6KamBQ== x-amz-request-id: GF9DH1PJ9QB7ZF67 Date: Mon, 21 Oct 2024 22:39:29 GMT Last-Modified: Wed, 09 Oct 2024 08:47:45 GMT ETag: "23de7a5206d1bef88ebe75f503e41635" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: wp6x2MeQgB7ZIGCz1NhotMktE6Cwm1tG Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 1606744 Connection: close
2024-10-21 22:39:28 UTC	15778	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 01 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0e 00 00 01 03 00 01 00 00 00 d8 1b 00 00 01 01 03 00 01 00 00 00 20 0f 00 00 02 01 03 00 03 00 00 00 b6 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 bc 00 00 00 1b 01 05 00 01 00 00 00 c4 00 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 cc 00 00 00 32 01 02 00 14 00 00 00 e8 00 00 00 69 87 04 00 01 00 00 00 fc 00 00 00 22 01 00 00 08 00 08 00 08 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 33 20 57 Data Ascii: JFIFHH,ExifII* (12i"HHAdobe Photoshop CS3 W
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: ee 17 ed 93 e2 dd 70 de 58 b9 90 79 55 9f d4 de 2a 72 4b dd 8f 33 f7 b4 d3 5d ff 00 1f cf 72 f9 b9 23 cc d3 b2 5a ad 9b f7 75 fb de cd 9c 11 b4 d5 fc 5c 9a 66 83 e1 dd 21 e4 9a e7 59 b9 8e d3 4a d3 63 69 9e 40 96 d6 2c 97 17 d2 e5 4d c3 23 48 ef 25 ed db 2c 56 e5 98 22 c3 08 58 47 ab 43 0f 87 c1 52 f6 ae f4 e2 bd da 95 e6 b7 e8 94 5d b9 9d de 9c aa ee 4e da 18 4e ac ea fb b1 db a4 17 6b 6b 7e fc b6 bb 6b 48 ad 65 64 7e 8c f8 6b 4a 8b e1 af 81 bc 37 a5 78 cf 65 d7 88 f4 fd 0e d6 d4 f8 67 4e bc dd 2f 9c a8 e4 8d 4a f9 55 7f b3 b4 f3 e6 01 22 2a 7f 69 5d 8d cb 0f d9 21 28 f4 f1 fc 57 57 01 95 cb 2a 75 25 4b 0f 56 a5 5a f2 c1 50 94 61 8e c6 7b 6f 67 cd 4f 15 57 59 60 30 76 87 2c e9 a7 f5 ac 5c 26 d4 9d 38 ea 55 0c 0b af 55 55 87 24 9d 3f 76 38 ab 39 51 86 b7 Data Ascii: pXyUrK3]r#Zu\f!YJci@,M#H%,V"XGCR]NNkk~kHed~kJ7xegN/JU"i]!(WW*u%KVZPa{ogOWY`0v,\&8UUU$?v89Q
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: a6 3f a8 ff 00 eb 7b d5 c1 da ff 00 d7 f5 fd 58 cb 96 4f a7 e9 f9 8c 2b ce 4f 75 c9 fa d4 df de d3 cd af bf fe 08 dc 39 52 7f d2 24 09 85 04 1c 7f fa fd 68 dd ea 4e fa 77 15 ba e3 76 57 f5 fe 99 fa 51 cd 6d 39 ad eb a7 f9 9a aa 71 5f d5 bf 22 22 9f 80 3e dc fe 07 ff 00 ad 48 e6 94 3f 97 fa fb c6 1f ee 81 8e de 99 fa e4 81 fe 7b d5 c6 56 52 f2 4e 4f c9 2e af c9 75 fc 11 1b b4 ba b6 a3 f3 db ee fc 11 f1 77 ed 83 fb 57 e8 bf b3 c7 85 df 48 d1 26 b6 d4 be 29 6b f6 6f fd 85 a4 16 59 13 44 b7 70 d1 ff 00 6f eb 31 8f b9 14 3f 31 b1 b5 73 ba ea 5f 9b 02 34 2d 5f 19 c5 bc 4d 2c bd 7f 65 65 8e 2f 36 ab 4b 9a b5 6f 72 6b 28 c3 ca 4a f5 a5 ef 3a 7f 5e ad aa c2 e1 e7 79 53 8a 78 8a f0 8c 14 23 5b eb 78 6b 87 63 98 4a 39 9e 3f 9d 65 94 aa da 85 2f 7a 12 cd 2b c5 6b 45 Data Ascii: ?{XO+Ou9R$hNwvWQm9q_"">H?{VRNO.uwWH&)koYDpo1?1s_4-_M,ee/6Kork(J:^ySx#[xkcJ9?e/z+kE
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 4a 3e ed 39 53 8f 2b 3b cb 8d 59 6c 21 b4 48 04 72 dc be 99 05 9c fb b2 63 b2 78 e7 92 59 16 50 0a 87 9b 6c df ea d4 85 8b 93 74 54 a0 81 bf 75 95 27 2c 2d 79 69 18 2c 34 e4 e7 26 a3 1f 72 84 ae 9b 95 92 d9 dd b7 68 f5 7b 9f 9c 46 b4 69 d6 a0 ae e5 2f 6a a3 cb 1d 5f bf 53 47 f3 e9 dc f2 0f 1f 6a 1a 35 c5 8c ad 7c 91 a5 b8 99 9a c6 e0 33 35 fd dc b8 da ff 00 d9 d1 a9 54 f2 47 57 b8 91 4d bf 96 d9 2e ee fb 57 f3 0e 29 cf 72 ec 76 07 0b 84 86 1e 95 48 61 e9 52 85 3c 6c a9 cb eb 75 2a c2 3c b2 8e 16 ee 32 b6 fc d5 6b 47 d9 b8 dd 52 e6 76 91 f6 19 2e 5d 89 c2 d7 ad 5e 55 6b 43 da d5 ab 29 61 5c 97 b2 fe 2c ec eb da f6 9a de 10 8c 97 2f db 5f 64 f9 ca fb 50 54 6d 91 06 67 91 f1 14 7b 83 33 33 1c 22 fd d5 0c 40 f9 77 04 53 81 9e 31 5f 98 4e 9b ab 27 0a 50 6e 6e Data Ascii: J>9S+;Yl!HrcxYPltTu',-yi,4&rh{Fi/j_SGj5\|35TGWM.W)rvHaR<lu*<2kGRv.]^UkC)a\,/_dPTmg{33"@wS1_N'Pnn
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: 71 8e 3a 7d 06 0f fd f5 9a ba 95 af 76 9f de b7 ff 00 83 d8 89 6d af 96 c7 45 6b 1a c6 ab 8d df 31 53 f4 1e 98 24 1c 2f e1 f4 af 3e a5 5d db 7a d9 ad 35 f2 d7 fa e8 69 4a 9a 5b df 57 f9 ff 00 5f 2d cd 45 61 8c 74 ae 37 3d 74 d7 d4 e8 94 2d b5 df cb fc 8a f2 97 2a 40 e7 76 33 f9 e7 f2 e3 1d 6a e1 3d 56 fa 7f 5a 11 ca ff 00 97 ff 00 25 fe bb ff 00 57 28 4c d8 21 1a 3c 6e ea 3a 8f e6 3f 4e 95 d1 ed 2f f6 99 3c 8a e9 38 ef ea 3e 38 62 27 1b 54 74 e4 8e 3f 2f f3 ed 4a 75 9c 76 b5 be ff 00 d4 bf ab c3 fa fe bf af 22 e6 c4 fe e0 ff 00 be bf fb 1a c3 db cf cf ef ff 00 80 3f 65 fe 1f eb e4 7f 97 2e a7 e0 b9 a4 9e fa 5f 0b 69 d7 fa 7e ad a6 c4 f7 ba df c3 db f9 9a f7 59 d3 6d 55 bf 7b ab f8 5e f9 54 0f 18 78 59 70 5f ed 16 d1 9d 63 4b 4f dc ea 36 b2 79 6d 74 c6 1a Data Ascii: q:}vmEk1S$/>]z5iJ[W_-Eat7=t-*@v3j=VZ%W(L!<n:?N/<8>8b'Tt?/Juv"?e._i~YmU{^TxYp_cKO6ymt
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 3f 99 3f 0e d1 22 66 cb 7c bb b9 ec 71 eb 9f ca a7 9f c8 cb 96 5d 85 58 d8 9c e3 91 c9 5f 5e 7e bf 8e 2b 30 e5 7d 98 b2 2b 9f 9b f0 23 b7 e9 ff 00 d7 cf ad 1b 7f c3 87 24 9f 97 dd ff 00 0e 20 4f bb dd 87 e5 d3 a7 6f f3 de a5 4a fb 27 a7 f5 dc d5 53 5d 5a f9 e8 39 c0 0a 41 1d ba e7 fc f4 fc ea ef d7 e7 fd 58 1f 2d b5 db e6 61 6b fa e6 8f e1 9d 1f 53 f1 17 88 6f ed f4 9d 17 47 b2 9a fb 53 d4 2f 1f ca b7 b6 b6 85 49 77 72 4f cc c7 84 8e 35 cb cb 21 58 d1 4b 30 15 c3 98 66 18 3c b7 07 5f 30 c7 56 54 30 d8 68 39 56 ab 7f 7f b4 63 0a 57 52 a9 56 52 6a 34 e9 45 73 54 9b 51 5a c9 1a 60 70 58 9c c7 17 43 05 83 a6 ea e2 71 13 8c 69 d3 5a 75 d6 52 96 d0 a7 14 a5 2a 93 7a 42 0a 53 7a 23 f9 e3 fd ac ff 00 6a 2d 5b e3 cf 8a 1a db 4e 6b bd 37 e1 cf 87 e7 96 3f 0d e8 cf Data Ascii: ??"f\|q]X_^~+0}+#$ OoJ'S]Z9AX-akSoGS/IwrO5!XK0f<_0VT0h9VcWRVRj4EsTQZ`pXCqiZuR*zBSz#j-[Nk7?
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: d9 1d 5d 86 90 e5 f7 3f 0c 47 0b 80 71 91 cf 23 9e a3 fa 9a e0 ab 88 de df af e1 eb e5 f7 9e c6 1f 05 cb 29 dd fb d1 4a d6 d5 7f 5e 8d 6c 8e d2 c7 c3 13 dc 3a ac 41 70 bf 36 18 fd e2 e3 ae 7a 9e 7a 0f 6f 5a f3 6a e3 61 4f 59 4a dc da 25 a9 e9 52 cb 6a 55 97 2d 3f b3 6d 1e f2 be c9 35 a7 af a9 e9 ba 27 80 ee e5 60 59 36 84 1f 36 f8 f2 db 8f b6 0f 1e e7 a1 af 23 11 99 c1 69 17 ad fb bb f6 e9 fd 7c 8f 73 0d 94 55 71 8f b8 bd cb eb 2d e2 de f1 d2 d1 fc 3c f5 3d 26 c3 c0 91 40 03 4e 53 23 a7 c9 8e 83 3c 79 6d bb 3d fe 65 c5 79 15 73 0e 77 a7 33 ee ef ee d9 f9 7e 7b ec cf 62 8e 55 4e 17 75 25 05 36 ad a3 db b7 53 b4 d3 b4 98 2c 00 d8 32 df c4 ec bd 73 d1 7d 76 ff 00 b2 7f 2a e0 9d 59 d5 97 bc da 8d 9e de be 67 75 35 87 c3 26 a0 dc 9f 5b 6b 6f f8 1b 79 79 6c 6d Data Ascii: ]?Gq#)J^l:Ap6zzoZjaOYJ%RjU-?m5'`Y66#i\|sUq-<=&@NS#<ym=eysw3~{bUNu%6S,2s}v*Ygu5&[koyylm
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 70 3b e3 bf 5c 61 39 c7 d5 79 e9 f7 7e a7 75 4e 67 0e 48 b5 64 f6 5b 76 d3 fe 0f e6 6b db 6a 2d 0e c9 21 fd dc b1 90 78 e3 a1 ce 5b d7 fa 7e 55 1c d1 6b 97 ff 00 6e ff 00 25 f9 1c 4e 84 95 d5 af fd ed 2c bd 3e f3 51 bc 45 77 22 9f 33 6b 92 85 73 23 39 c2 e7 24 f4 04 f5 f9 7a fe 55 0a 31 8d f9 55 af fd 7e 80 a8 79 fa 2d ff 00 42 3b 4d 4a 3f 34 b4 80 e7 ee 86 e3 f8 86 4b 60 1f 4e 39 fc a9 4a 56 da cc 7e ca 4a fe ef 2f ad cd 25 9a 0b 89 7c b4 cb 11 d7 9f cf a6 7a 0a 5c fd ef e6 b4 ff 00 87 32 f6 72 d6 5e 7f 2d c7 35 8e 79 8c 9e bd 71 91 c7 f2 f7 ed 53 ed 97 cf e6 5f 91 24 16 8c 87 6e d2 4f 5f 6e 7f 0c f4 fd 07 d6 a7 da d9 df 7b fe 9f 34 69 18 75 7e 56 36 ed ad 8e 46 e4 dc 78 c9 fe e8 c8 fa 76 e9 5c 95 67 cb af f5 fd 76 fc 48 f8 9f cf fa bf f4 8e 8e d8 08 cf Data Ascii: p;\a9y~uNgHd[vkj-!x[~Ukn%N,>QEw"3ks#9$zU1U~y-B;MJ?4K`N9JV~J/%\|z\2r^-5yqS_$nO_n{4iu~V6Fxv\gvH
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: 29 07 db e5 ad 62 b4 4b fa d4 c6 4e ee 4f fb af ff 00 49 ff 00 33 fb 3e f0 ba a8 f0 cf 86 95 02 a7 fc 53 9a 0e 4e 00 f9 bf b2 2c f7 67 81 9c f5 ff 00 26 bf 7f 85 9d 3a 5d 6f 4e 9c bd ed 7e c4 57 fe da cf c8 ea d4 50 a9 51 7f d3 ea bd 3f be fb 7f 5d 7b 9d 10 88 1e a7 93 8c 7a 10 7f cf f4 aa bd 96 fa 7e 07 34 a4 f6 d9 f7 bb ff 00 22 6d 81 71 b9 bb 7e 7f 41 fe 78 a5 cc 97 53 32 46 61 b5 76 91 b7 3c e4 7f 5f cf da a5 cd 5a ca cf 5e c1 ea 37 1c 8c 74 ef 8f d3 eb 51 cf 2d 00 69 8f 76 40 e0 f5 0c b8 c8 f6 f5 c7 b8 aa e7 f2 02 06 89 b2 72 3f f4 3f 4f 4e 94 b9 e5 e5 f7 14 a6 d2 b6 83 3c a5 fc 0f f9 eb fd 28 e7 7e 45 73 f9 0d 6f 94 11 bb a7 f3 e6 84 f4 96 ba e9 6d 7f 22 e3 77 f6 6d 62 85 c5 dd bd a2 f9 97 12 05 03 19 c8 cf de fb bd 8f 5c 7f 9e 69 43 9a 52 f7 17 3c Data Ascii: )bKNOI3>SN,g&:]oN~WPQ?]{z~4"mq~AxS2Fav<_Z^7tQ-iv@r??ON<(~Esom"wmb\iCR<
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 19 d5 34 b4 64 49 25 8e 36 55 1b 49 2a 33 c6 79 07 b1 6f 5f ee d7 ce 62 a9 d4 db 96 56 fc 0f a6 cb 71 14 14 9b 73 4b dd 7a bd fa fd df d5 cf 49 47 47 01 a2 75 91 5f e6 dc b8 ea 46 47 4e fe 98 ed 5e 7f a5 96 ba df 4e bf e7 fe 47 6c d4 e6 fe 1e 6b 68 b9 75 ba be f6 eb 72 ca ce c3 00 29 38 e3 20 37 eb ff 00 eb ac e5 6b df 99 7e bd b6 dc c9 e1 e7 2f b3 6f 26 92 fd 74 b9 66 3b d6 43 cb 37 b7 a7 d3 15 3e ef 7f fc 09 58 89 61 6a c3 de 51 96 9f 65 37 af f5 fd 75 35 6d ef 61 95 76 96 0a 4f 1c f0 06 41 3e bc 6e eb ed 49 ad 1f f5 a9 0e 32 8f c4 b9 7d 4d 58 84 47 07 78 dd b4 e3 8c f6 e4 f7 ff 00 80 d6 0f af 37 bb cb db af dd ff 00 04 d6 95 93 ba 7a f9 ea b5 4f f0 f4 27 44 2f dc 32 9e 73 ff 00 d6 3d 33 58 6d ae 8f d6 d7 ff 00 33 a2 8a 6e 4f 9b 5f 9d f4 ff 00 87 24 78 Data Ascii: 4dI%6UI*3yo_bVqsKzIGGu_FGN^NGlkhur)8 7k~/o&tf;C7>XajQe7u5mavOA>nI2}MXGx7zO'D/2s=3Xm3nO_$x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49752	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	754	OUT	GET /Content/assets/js/Bootstrap5/bootstrap5.1.3.bundle.min.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:28 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 78135 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:28 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "7aac7bb88bdada1:0" Last-Modified: Sat, 20 Jul 2024 10:00:59 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:28 UTC	3594	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: /! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 65 22 2c 22 6d 6f 76 65 22 2c 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 22 65 72 72 6f 72 22 2c 22 61 62 6f 72 74 22 2c 22 73 63 72 6f 6c 6c 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 26 26 60 24 7b 65 7d 3a 3a 24 7b 54 2b 2b 7d 60 7c 7c 74 2e 75 69 64 45 76 65 6e 74 7c 7c 54 2b 2b 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 63 6f 6e 73 74 20 65 3d 4c 28 74 29 3b 72 65 74 75 72 6e 20 74 2e 75 69 64 45 76 65 6e 74 3d 65 2c 41 5b 65 5d 3d 41 5b 65 5d 7c 7c 7b 7d 2c 41 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 69 3d 6e 75 6c 6c 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 66 6f 72 28 6c 65 74 20 73 3d Data Ascii: e","move","DOMContentLoaded","readystatechange","error","abort","scroll"]);function L(t,e){return e&&`${e}::${T++}`\|\|t.uidEvent\|\|T++}function x(t){const e=L(t);return t.uidEvent=e,A[e]=A[e]\|\|{},A[e]}function D(t,e,i=null){const n=Object.keys(t);for(let s=
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 66 61 64 65 22 29 3b 74 68 69 73 2e 5f 71 75 65 75 65 43 61 6c 6c 62 61 63 6b 28 28 28 29 3d 3e 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 74 29 7d 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 28 29 2c 6a 2e 74 72 69 67 67 65 72 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 22 63 6c 6f 73 65 64 2e 62 73 2e 61 6c 65 72 74 22 29 2c 74 68 69 73 2e 64 69 73 70 6f 73 65 28 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 Data Ascii: =this._element.classList.contains("fade");this._queueCallback((()=>this._destroyElement()),this._element,t)}_destroyElement(){this._element.remove(),j.trigger(this._element,"closed.bs.alert"),this.dispose()}static jQueryInterface(t){return this.each((func
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 73 53 6c 69 64 69 6e 67 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6a 2e 6f 6e 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 65 74 2c 28 28 29 3d 3e 74 68 69 73 2e 74 6f 28 74 29 29 29 3b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 75 73 65 28 29 2c 76 6f 69 64 20 74 68 69 73 2e 63 79 63 6c 65 28 29 3b 63 6f 6e 73 74 20 69 3d 74 3e 65 3f 51 3a 47 3b 74 68 69 73 2e 5f 73 6c 69 64 65 28 69 2c 74 68 69 73 2e 5f 69 74 65 6d 73 5b 74 5d 29 7d 5f 67 65 74 43 6f 6e 66 69 67 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 7b 2e 2e 2e 58 2c 2e 2e 2e 55 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 7b 7d 7d 2c 61 28 4b 2c 74 Data Ascii: sSliding)return void j.one(this._element,et,(()=>this.to(t)));if(e===t)return this.pause(),void this.cycle();const i=t>e?Q:G;this._slide(i,this._items[t])}_getConfig(t){return t={...X,...U.getDataAttributes(this._element),..."object"==typeof t?t:{}},a(K,t
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 6e 63 6c 75 64 65 73 28 74 29 3f 6d 28 29 3f 74 3d 3d 3d 47 3f 5a 3a 4a 3a 74 3d 3d 3d 47 3f 4a 3a 5a 3a 74 7d 73 74 61 74 69 63 20 63 61 72 6f 75 73 65 6c 49 6e 74 65 72 66 61 63 65 28 74 2c 65 29 7b 63 6f 6e 73 74 20 69 3d 73 74 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 29 3b 6c 65 74 7b 5f 63 6f 6e 66 69 67 3a 6e 7d 3d 69 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 6e 3d 7b 2e 2e 2e 6e 2c 2e 2e 2e 65 7d 29 3b 63 6f 6e 73 74 20 73 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 2e 73 6c 69 64 65 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 2e 74 6f 28 65 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 29 7b 69 66 28 76 Data Ascii: ncludes(t)?m()?t===G?Z:J:t===G?J:Z:t}static carouselInterface(t,e){const i=st.getOrCreateInstance(t,e);let{_config:n}=i;"object"==typeof e&&(n={...n,...e});const s="string"==typeof e?e:n.slide;if("number"==typeof e)i.to(e);else if("string"==typeof s){if(v
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 28 74 2c 65 29 7b 74 2e 6c 65 6e 67 74 68 26 26 74 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 65 3f 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 64 74 29 3a 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 64 74 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 65 29 7d 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 2f 73 68 6f 77 7c 68 69 64 65 2f 2e 74 65 73 74 28 74 29 26 26 28 65 2e 74 6f 67 67 6c 65 3d 21 31 29 3b 63 6f 6e 73 74 20 69 3d 70 74 2e 67 65 74 4f 72 43 72 65 61 74 Data Ascii: (t,e){t.length&&t.forEach((t=>{e?t.classList.remove(dt):t.classList.add(dt),t.setAttribute("aria-expanded",e)}))}static jQueryInterface(t){return this.each((function(){const e={};"string"==typeof t&&/show\|hide/.test(t)&&(e.toggle=!1);const i=pt.getOrCreat
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 74 6f 70 22 2c 22 62 6f 74 74 6f 6d 22 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 3f 22 78 22 3a 22 79 22 7d 76 61 72 20 69 65 3d 4d 61 74 68 2e 6d 61 78 2c 6e 65 3d 4d 61 74 68 2e 6d 69 6e 2c 73 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 3b 66 75 6e 63 74 69 6f 6e 20 6f 65 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 69 65 28 74 2c 6e 65 28 65 2c 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 74 6f 70 3a 30 2c 72 69 67 68 74 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 7d 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 65 5b 69 5d 3d 74 2c Data Ascii: top","bottom"].indexOf(t)>=0?"x":"y"}var ie=Math.max,ne=Math.min,se=Math.round;function oe(t,e,i){return ie(t,ne(e,i))}function re(t){return Object.assign({},{top:0,right:0,bottom:0,left:0},t)}function ae(t,e){return e.reduce((function(e,i){return e[i]=t,
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 2c 69 3d 65 2e 6f 76 65 72 66 6c 6f 77 2c 6e 3d 65 2e 6f 76 65 72 66 6c 6f 77 58 2c 73 3d 65 2e 6f 76 65 72 66 6c 6f 77 59 3b 72 65 74 75 72 6e 2f 61 75 74 6f 7c 73 63 72 6f 6c 6c 7c 6f 76 65 72 6c 61 79 7c 68 69 64 64 65 6e 2f 2e 74 65 73 74 28 69 2b 73 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 45 65 28 74 29 7b 72 65 74 75 72 6e 5b 22 68 74 6d 6c 22 2c 22 62 6f 64 79 22 2c 22 23 64 6f 63 75 6d 65 6e 74 22 5d 2e 69 6e 64 65 78 4f 66 28 52 74 28 74 29 29 3e 3d 30 3f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3a 7a 74 28 74 29 26 26 77 65 28 74 29 3f 74 3a 45 65 28 5a 74 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 74 2c 65 29 7b 76 61 72 20 69 3b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 5b 5d 29 3b 76 61 72 20 6e 3d 45 65 28 74 29 Data Ascii: ,i=e.overflow,n=e.overflowX,s=e.overflowY;return/auto\|scroll\|overlay\|hidden/.test(i+s+n)}function Ee(t){return["html","body","#document"].indexOf(Rt(t))>=0?t.ownerDocument.body:zt(t)&&we(t)?t:Ee(Zt(t))}function Ae(t,e){var i;void 0===e&&(e=[]);var n=Ee(t)
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 62 65 28 65 29 5d 7d 28 67 29 3a 5b 67 65 28 67 29 5d 29 2c 76 3d 5b 67 5d 2e 63 6f 6e 63 61 74 28 62 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 28 55 74 28 69 29 3d 3d 3d 76 74 3f 4c 65 28 65 2c 7b 70 6c 61 63 65 6d 65 6e 74 3a 69 2c 62 6f 75 6e 64 61 72 79 3a 68 2c 72 6f 6f 74 42 6f 75 6e 64 61 72 79 3a 64 2c 70 61 64 64 69 6e 67 3a 63 2c 66 6c 69 70 56 61 72 69 61 74 69 6f 6e 73 3a 70 2c 61 6c 6c 6f 77 65 64 41 75 74 6f 50 6c 61 63 65 6d 65 6e 74 73 3a 6d 7d 29 3a 69 29 7d 29 2c 5b 5d 29 2c 79 3d 65 2e 72 65 63 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 77 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 45 3d 6e 65 77 20 4d 61 70 2c 41 3d 21 30 2c 54 3d 76 5b 30 5d 2c 4f 3d 30 3b 4f Data Ascii: be(e)]}(g):[ge(g)]),v=[g].concat(b).reduce((function(t,i){return t.concat(Ut(i)===vt?Le(e,{placement:i,boundary:h,rootBoundary:d,padding:c,flipVariations:p,allowedAutoPlacements:m}):i)}),[]),y=e.rects.reference,w=e.rects.popper,E=new Map,A=!0,T=v[0],O=0;O
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 28 6f 3d 73 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 2c 73 63 72 6f 6c 6c 54 6f 70 3a 6f 2e 73 63 72 6f 6c 6c 54 6f 70 7d 3a 76 65 28 73 29 29 2c 7a 74 28 65 29 3f 28 28 63 3d 56 74 28 65 29 29 2e 78 2b 3d 65 2e 63 6c 69 65 6e 74 4c 65 66 74 2c 63 2e 79 2b 3d 65 2e 63 6c 69 65 6e 74 54 6f 70 29 3a 72 26 26 28 63 2e 78 3d 79 65 28 72 29 29 29 2c 7b 78 3a 61 2e 6c 65 66 74 2b 6c 2e 73 63 72 6f 6c 6c 4c 65 66 74 2d 63 2e 78 2c 79 3a 61 2e 74 6f 70 2b 6c 2e 73 63 72 6f 6c 6c 54 6f 70 2d 63 2e 79 2c 77 69 64 74 68 3a 61 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 61 2e 68 65 69 67 68 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 65 28 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 4d 61 70 2c 69 3d 6e 65 77 20 53 65 74 2c 6e 3d 5b 5d 3b 66 75 6e Data Ascii: {scrollLeft:(o=s).scrollLeft,scrollTop:o.scrollTop}:ve(s)),zt(e)?((c=Vt(e)).x+=e.clientLeft,c.y+=e.clientTop):r&&(c.x=ye(r))),{x:a.left+l.scrollLeft-c.x,y:a.top+l.scrollTop-c.y,width:a.width,height:a.height}}function He(t){var e=new Map,i=new Set,n=[];fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49751	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	807	OUT	GET /Content/templates_assets/images/translate-icon.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:28 UTC	300	IN	HTTP/1.1 200 OK Content-Length: 8326 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:28 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "1110bb598bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:58:20 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:28 UTC	3610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 06 00 00 00 3e b3 d2 7a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 1c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR>zpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 14 f0 a4 57 f6 03 47 14 9a 5e c1 2b 34 63 4f a3 e9 a9 37 e2 46 ec 65 bf 38 f7 8c 38 f7 94 20 cf 54 1c cf f4 56 d8 df 89 7a 16 55 f7 8f 8e 26 44 b8 55 c3 c4 fd bf 94 b0 ea a1 ca c2 e7 0d 8b 3c d7 38 b9 20 b7 ae ca 36 e0 3d c9 6e 69 1d b1 fd 10 0f 3b e1 31 55 6a c0 12 81 1e 27 44 08 1a a1 0d bc 1f a5 ca 28 e2 f6 a8 8b f6 29 1c 10 d8 5d 8d d8 5e 71 6c eb 54 3d 8b a8 34 21 04 10 f8 88 c2 16 11 3e 87 72 f9 ec 5d a7 59 35 38 71 17 b2 85 ff 0c e5 b8 3f 5a 36 b5 8b 2d 82 88 b0 0d f8 86 2a 37 75 32 80 53 ea b0 53 84 41 27 54 23 47 dc e3 18 a9 46 ec eb a9 b8 47 7b 23 f9 7a 6f 95 91 87 f7 ba 26 1c db 47 b1 e9 61 d7 68 a7 6b 5a 2c a5 0a 21 80 c0 43 c0 3b 81 db 38 b6 dd e0 4c dd 72 25 cc b5 f5 0a ac 55 58 49 58 80 3b b9 c5 a1 26 5f bb 81 27 08 0b 61 6b cc 9e 2d 25 84 Data Ascii: WG^+4cO7Fe88 TVzU&DU<8 6=ni;1Uj'D()]^qlT=4!>r]Y58q?Z6-*7u2SSA'T#GFG{#zo&GahkZ,!C;8Lr%UXIX;&_'ak-%
2024-10-21 22:39:28 UTC	620	IN	Data Raw: 0e d6 d4 09 d3 2c 1e f8 a9 c2 5b d2 ab c1 8c be ab f0 97 c0 46 09 3d 85 d9 06 8e 62 60 5c 95 c7 11 de 44 77 4d b7 cc c9 42 98 91 23 4d be 24 22 48 14 7e c4 1e 38 67 a5 77 8f ec 73 3e 4e f6 94 cf 82 87 11 81 4b 09 d7 fb ef 17 e1 06 e0 3c 55 90 f0 bd 87 14 de 08 ec a5 f5 41 93 05 11 f8 8c c2 5d aa fc 1d d3 36 fa 9d 6c fd 44 18 03 be a6 ca 8d 94 28 80 60 21 ec a8 47 f6 b9 8e 4c 40 27 1b f5 7a c2 72 a0 98 63 cb 9b 06 08 83 25 db 3b 51 8f a9 04 9e 51 f8 73 e0 9a 19 fe f7 98 c0 93 0a 37 96 71 5e d1 42 d8 e5 54 f9 fc d1 7f cf b1 1e 00 22 dc 0e dc 3e ed 7b 00 f8 bc 2b 97 23 9b a2 30 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 Data Ascii: ,[F=b`\DwMB#M$"H~8gws>NK<UA]6lD(`!GL@'zrc%;QQs7q^BT">{+#0&gBcrf!4&gBcrf!4&gBcrf!4&gBcrf!4&gBcrf!4&gBcrf!4&gBcrf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49750	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	731	OUT	GET /Content/fontawesome/fontAwesome.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:28 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 11023 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:28 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "423094c98adada1:0" Last-Modified: Sat, 20 Jul 2024 09:54:18 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:28 UTC	3594	IN	Data Raw: 77 69 6e 64 6f 77 2e 46 6f 6e 74 41 77 65 73 6f 6d 65 4b 69 74 43 6f 6e 66 69 67 20 3d 20 7b 22 61 73 79 6e 63 4c 6f 61 64 69 6e 67 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 75 74 6f 41 31 31 79 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 61 2d 66 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 22 2c 22 62 61 73 65 55 72 6c 4b 69 74 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 69 74 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 22 2c 22 64 65 74 65 63 74 43 6f 6e 66 6c 69 63 74 73 55 6e 74 69 6c 22 3a 6e 75 6c 6c 2c 22 69 63 6f 6e 55 70 6c 6f 61 64 73 22 3a 7b 7d 2c 22 69 64 22 3a 31 33 35 38 30 37 35 38 2c 22 6c 69 63 65 6e 73 65 22 3a 22 66 72 65 65 22 2c 22 6d 65 Data Ascii: window.FontAwesomeKitConfig = {"asyncLoading":{"enabled":false},"autoA11y":{"enabled":true},"baseUrl":"https://ka-f.fontawesome.com","baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"id":13580758,"license":"free","me
2024-10-21 22:39:28 UTC	4096	IN	Data Raw: 7c 28 22 66 75 6c 66 69 6c 6c 65 64 22 3d 3d 3d 6e 26 26 62 28 69 2c 6f 29 2c 22 72 65 6a 65 63 74 65 64 22 3d 3d 3d 6e 26 26 77 28 69 2c 6f 29 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 6e 29 7b 76 61 72 20 6f 3b 74 72 79 7b 69 66 28 65 3d 3d 3d 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 73 20 63 61 6c 6c 62 61 63 6b 20 63 61 6e 6e 6f 74 20 72 65 74 75 72 6e 20 74 68 61 74 20 73 61 6d 65 20 70 72 6f 6d 69 73 65 2e 22 29 3b 69 66 28 6e 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 28 6e 29 29 29 7b 76 61 72 20 72 3d 6e 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 72 2e 63 Data Ascii: \|("fulfilled"===n&&b(i,o),"rejected"===n&&w(i,o))}function y(e,n){var o;try{if(e===n)throw new TypeError("A promises callback cannot return that same promise.");if(n&&("function"==typeof n\|\|"object"===t(n))){var r=n.then;if("function"==typeof r)return r.c
2024-10-21 22:39:28 UTC	3333	IN	Data Raw: 6c 2c 76 65 72 73 69 6f 6e 3a 74 2e 76 65 72 73 69 6f 6e 2c 69 64 3a 6e 2e 69 64 2c 63 6f 6e 74 65 6e 74 46 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 50 28 74 2c 65 2e 62 61 73 65 55 72 6c 2c 65 2e 76 65 72 73 69 6f 6e 29 7d 7d 29 29 29 7d 29 29 2e 63 61 74 63 68 28 69 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 5f 2e 61 6c 6c 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 63 6f 6e 74 65 6e 74 46 69 6c 74 65 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 7d 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6e 28 74 2c 65 Data Ascii: l,version:t.version,id:n.id,contentFilter:function(t,e){return P(t,e.baseUrl,e.version)}})))})).catch(i)}))}));return _.all(d)}function U(t,e){var n=e.contentFilter\|\|function(t,e){return t},o=document.createElement("style"),r=document.createTextNode(n(t,e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49761	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	435	OUT	GET /Bookappointment/Property/cdd27b0c-30b1-4e1e-96d0-fa2224c7e0b2 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:28 UTC	514	IN	HTTP/1.1 200 OK x-amz-id-2: THkSflNrWWNEoI69RFBnEsUJSjPvlG6E6QU33+oKIx+MnHj05ltvarEnM4XLee/BKB3HSd3kEHrOCnXf8D3PgQ== x-amz-request-id: GF9FRZVZ4ZJ5V1XQ Date: Mon, 21 Oct 2024 22:39:29 GMT Last-Modified: Wed, 09 Oct 2024 09:31:22 GMT ETag: "6dfe14efb6574148d80931b1de3dbb68" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: 6.NK8iZIYXaDqmbGuiEZd_s8V39XVhIg Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 31989 Connection: close
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 1a 00 00 00 84 08 06 00 00 00 4f a8 e4 3d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 05 78 94 c7 d6 7e d7 37 ee 0e 81 84 10 9c e0 ee 0e c5 5d 8a 17 97 16 8a 94 3a c5 0b b4 b4 54 71 97 42 29 ee ee c5 21 10 34 04 89 bb 6e d6 f7 ff cf 7c bb c9 26 d9 dd 2c 92 f6 72 ef ce f3 a4 0d 9b 6f 67 e6 3b 33 f3 ce f1 c3 d3 e9 74 3a d8 9a 8d 02 36 0a d8 28 50 82 14 e0 d9 80 a6 04 a9 6b eb da 46 01 1b 05 18 05 6c 40 63 db 08 36 0a d8 28 50 e2 14 b0 01 4d 89 93 d8 36 80 8d 02 36 0a d8 80 c6 b6 07 6c 14 b0 51 a0 c4 29 60 03 9a 12 27 b1 6d 00 1b 05 6c 14 b0 01 8d 6d 0f d8 28 60 a3 40 89 53 c0 06 34 25 4e 62 db 00 36 0a d8 28 60 03 1a db 1e b0 51 c0 46 81 12 a7 80 0d 68 4a 9c c4 b6 01 6c Data Ascii: PNGIHDRO=sRGB IDATx^]x~7]:TqB)!4n\|&,rog;3t:6(PkFl@c6(PM66lQ)`'mlm(`@S4%Nb6(`QFhJl
2024-10-21 22:39:28 UTC	510	IN	Data Raw: df 03 55 2b 96 67 87 67 cb b6 3d 90 ab 14 68 d6 a4 1e e3 22 cc 71 34 53 26 7d 8e 90 90 60 7c 3c cd 3c d0 18 42 08 cf 9c fb 1b 1b b6 ec c7 ad 5b 8f f1 20 f2 05 fa f6 69 8b 0f 86 74 47 93 fa 61 fa ee fb f0 31 d4 00 00 20 00 49 44 41 54 05 38 7c f2 3c 56 ae d8 8a bb b7 1f 60 dd a6 ef 59 e4 72 46 46 36 f6 ed 3f 8d 75 1b f7 a2 75 87 7a 98 f3 e9 64 f8 79 7b 61 ef be e3 58 bc f4 77 04 96 f1 c7 90 c1 bd 10 56 ad 22 0b 3c 7d fe 22 1a bf fe be 09 4a 8d 0e bd 7a 74 44 9f ee ed 59 6a d0 4f e7 2c c3 be 13 57 d1 ae 65 43 8c 1f da 15 5a ad 86 45 ed 13 8d 5c 5d 9c e0 4b 55 4c 85 22 8c 9f 36 17 11 77 1e 31 2e 67 e4 f0 de 8c 7b 3a 70 f2 02 2e 5f bc 81 8a e5 cb 62 e8 e0 1e 2c d3 1d 89 fd 94 4b e7 d2 b5 db 58 b7 75 37 52 32 72 31 7f d6 78 c6 f5 52 04 ba b7 87 3b bb 94 78 66 Data Ascii: U+gg=h"q4S&}`\|<<B[ itGa1 IDAT8\|<V`YrFF6?uuzdy{aXwV"<}"JztDYjO,WeCZE\]KUL"6w1.g{:p._b,KXu7R2r1xR;xf
2024-10-21 22:39:28 UTC	503	IN	Data Raw: da b2 cc 81 cf a3 e3 d1 a3 df 14 88 a5 3c 8c 1b d9 07 a3 86 f4 61 c0 d0 b0 fb 58 88 34 4a f4 eb d2 1a 3d bb b4 cd 03 42 4a 3b e1 e6 e6 0c 77 37 aa 27 0e dc 7b f4 14 11 f7 9f c0 d3 dd 05 0d eb 86 e1 c9 f3 97 18 3c 60 32 5c bd bc d0 a5 5b 7b d4 ab 55 19 01 7e 5e fa d2 2b 72 f8 f9 78 21 ac 6a c5 22 9a 17 83 e8 34 65 d2 97 08 09 09 c2 c7 d3 c6 9a e5 68 88 1e 14 d1 bd 61 d3 0e 6c d9 be 07 4d 9a 35 c3 95 db f7 a0 ce 55 a3 57 e7 36 98 38 be 9f de 6c 4c 40 73 01 2b 57 6c c4 d3 47 91 f8 fb ea 11 a6 0f a1 4c 03 eb 36 ec c6 c7 b3 96 a0 71 f3 ea 58 fc cd 0c 16 75 be 7e fd 0e ac 5e b5 09 9f cd 9e 8e 5e 5d da 32 1d 0a 35 aa 08 71 e2 ec 25 24 26 a4 a2 62 68 30 6a 86 55 62 9c 1d 03 9a 53 d7 d0 b9 6d 53 7c 38 b2 17 a8 84 2f 35 4a 13 e2 ee e6 0c 37 57 67 56 f7 7a f2 ac f9 Data Ascii: <aX4J=BJ;w7'{<`2\[{U~^+rx!j"4ehalM5UW68lL@s+WlGL6qXu~^^]25q%$&bh0jUbSmS\|8/5J7WgVz
2024-10-21 22:39:28 UTC	9000	IN	Data Raw: 92 2f 51 2d 34 84 a5 0a a5 7f 93 32 f6 f2 95 70 f4 ef 33 1a 03 87 f6 c4 b0 21 bd 61 6f 67 cf 01 cd 9a dd f8 64 d6 18 b4 68 59 9f c9 ff 8f 23 5f e2 db 79 2b d1 a0 51 25 0c 1d d2 1d ad 9b 37 66 05 de 9a f7 1a 8b b4 e4 4c d4 a8 14 82 1a 95 43 d8 ba 6a 54 6a f8 fa b9 a3 6e ed aa a8 5b 9b b8 06 1d 1e 45 3d 67 e9 0c 3c 5c 5d d8 ad 9b 91 95 83 c9 93 16 e0 d2 cd 08 38 b8 d9 a3 46 b5 60 d4 a8 50 0e a1 21 c1 28 1f 52 96 29 84 59 4a c8 42 ca e0 62 81 a6 d0 d9 7a fa 2c 06 cb 7f 5a 89 d3 a7 cf 61 f9 f2 45 78 f4 34 0a 2b 7e f9 0b 55 ab 84 62 c9 d2 69 70 75 22 2e 92 cf 01 cd ca cd b8 7b fb 3e d6 6e fa 89 71 34 39 19 b9 38 7a e4 0c fe dc b5 0f fd 06 75 c6 07 43 fb b3 3c 2e ab d7 6c c5 d1 c3 c7 b1 65 fb 1a 84 55 2d cf f4 79 54 b1 33 3e 29 15 62 a1 90 25 9b a2 44 50 be 5e Data Ascii: /Q-42p3!aogdhY#_y+Q%7fLCjTjn[E=g<\]8F`P!(R)YJBbz,ZaEx4+~Ubipu".{>nq498zuC<.leU-yT3>)b%DP^
2024-10-21 22:39:28 UTC	5592	IN	Data Raw: 9c 82 87 91 cf 11 38 66 0e 74 2b e8 63 f4 58 5f f4 f0 f2 90 7b e5 49 f3 cf e7 b5 4c 46 60 23 0a bc 24 2e 65 99 0c 8f 9e 46 61 de a2 3f 70 fd cf 68 58 da 98 a2 48 a3 88 e7 77 cb ea b9 b0 a8 62 ce 14 a4 fc 10 f6 0c d3 b6 f9 fb be a7 7f 07 68 f6 1d c3 8f 4b d6 20 b7 50 03 8d eb d6 42 05 4d 4d 64 a5 a7 20 21 29 1a 0f 5f 66 60 d5 af d3 e1 e9 e1 ca b4 92 c1 eb 77 63 fd da e3 68 ed 62 83 aa e6 46 28 28 00 de 67 14 43 53 57 03 83 07 77 83 5b eb a6 9c a3 93 f8 26 8d af 4e 4a a0 e9 85 a2 a2 02 bc 8a 4d c2 98 69 f3 50 58 54 88 d1 be fd e1 e5 e1 86 b1 33 16 22 ee d5 6b f4 e8 d4 0e 23 86 f6 61 6f c0 93 a7 af 30 7b ee 8f ac 09 07 4e 18 83 ba f6 35 d0 7d c0 44 d8 da 98 c1 7f 50 77 78 b5 77 e3 0d 4f 16 78 01 68 c2 31 75 ea 72 78 fb b5 c6 a4 31 7e b0 ab 41 c0 a1 d4 68 7c Data Ascii: 8ft+cX_{ILF`#$.eFa?phXHwbhK PBMMd !)_f`wchbF((gCSWw[&NJMiPXT3"k#ao0{N5}DPwxwOxh1urx1~Ah\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49762	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	679	OUT	GET /Bookappointment/Property/801b4073-e639-426d-b891-9b26b1b9a643.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:28 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: OZCWEeDU9C08yhVbqZ81ERaXHiwA04tytI9gZomogishDGpAI4FeNBUhz7BRXHArxndV2q9HJ3WLxPnVExdDWg== x-amz-request-id: GF96XJZBAC8WTHCK Date: Mon, 21 Oct 2024 22:39:29 GMT Last-Modified: Tue, 17 Sep 2024 07:24:55 GMT ETag: "185520fba1997eb59f37dbddd5be9d7b" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: LhK8SY85bLKxS4HRj5CDsYRtQecg5nW. Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 195237 Connection: close
2024-10-21 22:39:28 UTC	1442	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 8a 05 ca 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 77 16 5f 0a df e1 aa 5c 1f 0e 43 e2 99 d1 15 0e a4 d7 6d f6 b1 21 8d 71 00 00 c7 e6 12 49 1b 4e 79 2d 4e 6f da 4e 1f f8 38 fb f6 ae ff 00 86 6d 8b e0 a4 ba df fc 22 9e 18 fe d9 1f 11 ce a6 2d 45 bf f6 7d 9e cf b3 fd 84 ee f3 37 f5 df c6 3a 73 40 1f 79 fe c6 3f 17 7f 6b df 1c 7c 5e 92 cb e3 97 c2 1f 85 de 07 f0 58 d3 e5 92 3d 47 c3 de 28 7d 4a ed ae c3 46 23 8c c4 46 36 15 32 12 dd 8a 8f 5a f9 87 f6 6d ff 00 82 a7 fe db 3f b6 7f 87 7c 47 e2 8f 85 bf b3 f7 c1 cd 67 c2 3a 27 89 75 1f 0e c5 3e a1 e3 09 ac 6e a7 92 ce 63 1b 65 18 71 91 b7 9e 99 35 f5 af ec 3b 71 fb 5f cd e3 2d 6b fe 1a 46 0f d9 ce 2f 0f fd 89 7f b2 0f c3 86 d6 0d e1 ba de 37 79 ff 00 6e 3b 3c bd 99 c6 ce 77 63 b5 78 2f fc 1b 3f ff 00 26 23 e3 9f fb 2b 3e 29 ff 00 d2 b5 a0 0f 4e fd 8c ff 00 e0 Data Ascii: w_\Cm!qINy-NoN8m"-E}7:s@y?k\|^X=G(}JF#F62Zm?\|Gg:'u>nceq5;q_-kF/7yn;<wcx/?&#+>)N
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: ff 00 a1 b7 e0 7f fd f9 d3 ff 00 f9 1e 80 2d fc 61 f8 eb a4 7e d1 5f f0 72 af ec 39 e2 3d 29 2e 2c e4 6f 06 78 9e d7 52 d3 2e d7 65 ee 87 7d 1e 9b ab ad c5 8d cc 7d 52 78 5f 2a c3 a1 c0 65 25 59 58 d5 fd ac 3f e5 73 4f d9 93 fe c9 a5 e7 fe 9b fc 4d 59 df b0 df fc 12 ab f6 d3 d6 ff 00 e0 b3 9f 0e 7f 69 6f da 36 e3 e1 94 d0 78 4e cf 51 83 51 9f 42 ba 8e 29 af 0c ba 4d cd 84 2d e4 43 12 a3 cb fb d8 15 a4 38 3e 5c 08 09 3b 10 57 d1 5f f0 53 ff 00 f8 20 e6 b7 fb 7b fe db fe 14 f8 f5 e0 7f da 07 c5 1f 03 fc 6d e1 4f 0e af 87 ad ee 74 7d 1c dd 4e 88 1e ec 99 62 9d 2e ad de 22 d1 de 4b 1b 0f 9b 2a 7b 64 82 01 fa 29 45 7e 4e ff 00 c4 3f 1f b5 2f fd 24 af e3 a7 fe 0b af 7f f9 6d 47 fc 43 f1 fb 52 ff 00 d2 4a fe 3a 7f e0 ba f7 ff 00 96 d4 01 fa c5 45 7e 4e ff 00 c4 Data Ascii: -a~_r9=).,oxR.e}}Rx_e%YX?sOMYio6xNQQB)M-C8>\;W_S {mOt}Nb."K{d)E~N?/$mGCRJ:E~N
2024-10-21 22:39:28 UTC	15360	IN	Data Raw: 9f f2 86 3f 13 7f d8 cb a3 7f e9 45 7c b3 e2 1d 03 50 f0 b7 ed 05 ff 00 04 76 d3 f5 5d 3e ff 00 4a d4 2d 6d 75 54 9e d2 f6 d9 ed e7 81 b6 58 1c 3c 6e 03 29 c1 07 91 de be a6 ff 00 83 b9 3f e5 0c 7e 26 ff 00 b1 97 46 ff 00 d2 8a 00 fa 1f fe 08 7d ff 00 28 bc f8 61 ff 00 71 5f fd 3b 5e d7 d5 f5 f2 87 fc 10 fb fe 51 79 f0 c3 fe e2 bf fa 76 bd af ab e8 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 03 82 fd a9 fc 19 a9 7c 48 fd 98 7e 23 f8 7b 45 b6 fb Data Ascii: ?E\|Pv]>J-muTX<n)?~&F}(aq_;^Qyv((((((((((((((((((((((((((((((\|H~#{E
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 8b 9f 06 ff 00 ec af f8 57 ff 00 4b 85 7e 3e ff 00 c1 14 22 f0 f7 ec d9 a7 f8 bf c1 ba a7 8a f4 6c fc 37 f8 bd e2 28 75 2b bb ab 88 ec fc ab 48 7c 51 f0 de 05 bc 99 19 cf 93 13 9b 69 48 66 6d b9 8d c6 e3 b0 d7 ec 26 99 ff 00 04 cf f0 ac 7e 31 f0 e6 b1 ac 78 fb e3 4f 8b 7f e1 16 d5 ad f5 cb 1b 0d 7f c6 f7 97 d6 3f 6c b7 6d f0 c8 f0 b1 c3 6c 6e 40 3c 64 57 e7 17 ed d7 ff 00 06 f5 fc 1d 3f b6 ae bb a9 cc bf 68 6f 8e 8f 75 ab f9 44 5d c6 ba 2d e4 fe 2d f0 c4 32 be 23 ba 51 2a 15 d5 2e 94 22 88 82 ab e0 1d c1 1d 00 3d 73 fe 0c ff 00 60 ff 00 f0 49 cd 40 83 90 7e 20 6b 04 11 df f7 76 b5 fa 9d 5e 1f ff 00 04 f0 fd 83 bc 21 ff 00 04 df fd 97 74 8f 85 fe 0b 8d 7f b3 ac 2e 2e 2f ae 6e 76 ba b5 ed cc f2 17 79 08 79 24 61 81 b1 14 17 62 16 35 19 38 cd 7b 85 00 14 51 Data Ascii: WK~>"l7(u+H\|QiHfm&~1xO?lmln@<dW?houD]--2#Q*."=s`I@~ kv^!t../nvyy$ab58{Q
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: f6 f2 ff 00 b3 6f d7 3f f5 15 d3 ab e9 3f f8 33 c3 fe 4c 37 52 fa 45 ff 00 a7 1d 5e 80 3f 47 3e 34 7e de 5f 09 bf 67 81 f1 03 fe 13 3f 17 45 a0 ff 00 c2 ae d1 b4 ff 00 10 f8 9b cf b0 ba 6f ec fb 0b e9 a6 82 d6 75 d9 11 f3 c3 cb 6f 32 62 1d ec ac a0 30 5d cb 9e 7f e2 c7 fc 15 07 e0 67 c1 2d 33 5b ba f1 0f 8d 9e 21 e1 ff 00 13 c7 e0 db b8 6c b4 4d 47 51 ba 6d 5a 48 6d 26 5b 68 60 b6 82 49 6e 3e 5b eb 30 5e 15 74 57 b9 8d 0b 07 60 b5 e7 9f b7 6f fc 13 df 55 fd aa bf 6b ff 00 85 5a ed bc 1a 53 fc 3c bc b4 b9 d1 be 2a db 5d 4a 7c cd 73 4b b6 df 77 a5 5a ac 7d 1d 57 50 92 47 6e 41 5d c1 b9 2a 2b e7 05 ff 00 82 40 7c 53 1f b3 77 85 21 d6 e3 d3 3c 43 f1 0f c1 a3 4b bb f3 2d ef 61 8e 2d 56 e6 6f 1b 59 6b 1a ac 9f 38 55 12 a6 9d a3 69 70 c4 cc c0 30 06 3c a8 5a 00 Data Ascii: o??3L7RE^?G>4~_g?Eouo2b0]g-3[!lMGQmZHm&[h`In>[0^tW`oUkZS<]J\|sKwZ}WPGnA]+@\|Sw!<CK-a-VoYk8Uip0<Z
2024-10-21 22:39:28 UTC	1776	IN	Data Raw: fc 12 7f fe 51 67 fb 35 7f d9 2a f0 bf fe 9a 2d 6b df eb c0 3f e0 93 ff 00 f2 8b 3f d9 ab fe c9 57 85 ff 00 f4 d1 6b 5e ff 00 40 05 14 51 40 05 14 51 40 05 14 51 40 05 7c 01 ff 00 3b 4d 7f dd aa ff 00 ee dd 5f 7f d7 c0 1f f3 b4 d7 fd da af fe ed d4 01 f7 fd 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 1f 92 9f f0 77 b7 ec d7 f1 17 f6 99 fd 8c 7e 17 e9 9f 0e 3c 05 e3 2f 1f ea 5a 77 8d c5 d5 d5 9f 87 34 5b 9d 52 e2 da 1f b0 dc af 9a f1 c0 8e ca 9b 88 1b 88 c6 48 19 e6 bf 50 7e 06 69 37 3a 07 c1 2f 07 58 de c1 25 b5 e5 96 87 65 04 f0 c8 30 f1 48 90 22 b2 91 d8 82 08 fc 2b aa a2 9d 37 c9 4e 74 d7 da 92 97 dd 1e 51 54 5c f3 84 ff 00 95 35 f7 bb 9f 8b 3f f0 50 bf d8 db f6 8e ff 00 82 76 ff 00 c1 65 6f ff 00 6c ef 80 df 0d ae 7e 35 f8 5b Data Ascii: Qg5*-k??Wk^@Q@Q@Q@\|;M_Q@Q@Q@Q@Q@Q@w~</Zw4[RHP~i7:/X%e0H"+7NtQT\5?Pveol~5[
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 06 48 4c f1 f5 e0 b8 f4 af cf 3f f8 34 1b e1 57 8a ff 00 6a 2f da 3f e2 a7 ed 2d f1 0f 52 bc f1 16 a9 a0 68 f6 3e 05 d2 35 1b bd a5 98 ac 11 2b 81 80 06 62 b5 b7 b5 4c f5 22 56 27 24 92 7f 5f bf e0 a8 7f 01 be 24 fe d4 7f b0 7f c4 5f 87 3f 09 b5 6f 0d 68 7e 33 f1 b6 9b fd 8f 15 f6 bd 71 3c 16 70 5b 4c ea 97 59 78 62 96 40 e6 03 2a ae 10 fc cc 33 8a e4 bf e0 8c 1f f0 4e b9 ff 00 e0 97 9f b0 2f 85 fe 16 ea 97 ba 46 ab e2 78 27 b9 d4 f5 fb fd 30 3f d9 6e ef 27 90 b1 d8 ce aa ec a9 18 8e 30 cc aa 48 8c 1d a3 38 0f 07 3e 4a b8 8a cf 4e 64 ad fe 29 5d 49 fa 72 7b be a6 58 88 5f 0f 42 8a d7 95 bb ff 00 85 5a 49 7c e6 af 63 f3 cf f6 c3 fd 94 3f 69 6f f8 25 17 fc 16 57 c6 1f b5 b7 c1 2f 85 37 df 1e 3e 1f fc 4b b3 78 7c 41 e1 dd 19 9c ea 76 e6 61 00 96 1f 2a 24 92 Data Ascii: HL?4Wj/?-Rh>5+bL"V'$_$_?oh~3q<p[LYxb@3N/Fx'0?n'0H8>JNd)]Ir{X_BZI\|c?io%W/7>Kx\|Ava$
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: 16 91 a6 f8 c3 4a fe d7 b2 d0 b5 cb 0f 11 d8 c7 f6 a9 ad fc 8b fb 1b 84 b9 b5 9b 31 3a 96 d9 2a 2b 6d 62 51 b1 86 56 04 8a ec 2b e2 8f da db c3 b7 df f0 4f 9f 0d fc 36 f1 cf 82 3c 69 f1 17 5f d6 b5 6f 1f 78 77 c2 7a be 9d e2 7f 17 6a 3a ed af 8a ad 75 3b e8 ac e7 0b 6b 71 33 c3 6f 70 8b 29 b8 47 b3 8e 1d a6 12 0a b4 45 92 bc 0f e0 7f ed 83 f1 bf e0 e7 c3 cf 89 1e 0a ff 00 84 aa 5f 18 f8 f7 e3 27 88 f5 a9 7e 07 dc eb db ee 4d 8d c0 f1 0d ee 99 7f 65 23 b6 77 db e9 91 a5 bd f8 56 ce 2d e5 91 00 db 08 5a 00 fd 53 a2 be 07 d1 3c 73 e3 1f 0a ff 00 c1 bf 5a fe b1 77 e3 5f 17 6b 5e 34 d1 7c 19 ac c6 7c 4e fa 94 c9 ac dd 4f 05 c5 cc 4b 70 2e 03 f9 8b 29 08 30 c1 c1 5e 30 46 05 27 c3 6f da 2e 3f d9 b7 f6 b5 f8 97 3d ee a5 f1 23 c2 5f 0e 3c 31 f0 a2 5f 17 de 78 5b Data Ascii: J1:*+mbQV+O6<i_oxwzj:u;kq3op)GE_'~Me#wV-ZS<sZw_k^4\|\|NOKp.)0^0F'o.?=#_<1_x[
2024-10-21 22:39:29 UTC	15360	IN	Data Raw: 32 78 b6 c5 7c 09 a9 6b ef e1 ed 4a e3 7a fd a9 7c e8 c5 b1 92 56 2f cc 2e ec 65 8f cc a0 0f d6 2a 2b f3 ab c0 5f b6 cf 8d ff 00 6c 8f f8 28 c7 c1 0f 14 f8 47 54 bf d1 be 00 2c b7 5a 12 d9 a4 d2 40 fe 27 d6 a6 f0 ed e6 a3 78 97 51 e4 6e 4d 3c c7 6b 00 56 51 b2 e4 dd 03 97 8b 09 d1 7f c1 68 3f 6c 3b ef 85 5a 87 82 7e 1d 78 4f c7 96 de 02 f1 7d c5 a6 a5 f1 01 ef 66 d6 a3 d2 a3 ba 87 48 b7 79 2c b4 c7 92 47 40 cb 7f a9 35 a4 2d 1e 4f 99 04 57 4a 54 8c d0 07 de 74 57 c8 1e 1f f8 b7 a5 7f c1 45 fe 39 78 26 3d 23 c5 be 31 d2 fe 15 ea 3f 0d ac fc 7f a7 5b e8 5a dd d7 87 ee f5 e9 af 6e e4 89 45 c5 c5 a4 91 dc a8 b5 48 54 34 31 ca ab be eb f7 81 b6 a0 1e f5 fb 39 7c 30 3f 06 b4 7d 7b c3 ab e3 df 10 78 e6 d2 cf 55 69 6d 17 5e bf 1a 8e a5 a0 c3 24 31 3a d8 cb 72 c4 Data Ascii: 2x\|kJz\|V/.e*+_l(GT,Z@'xQnM<kVQh?l;Z~xO}fHy,G@5-OWJTtWE9x&=#1?[ZnEHT419\|0?}{xUim^$1:r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49763	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	439	OUT	GET /Bookappointment/Property/f9e1bfbb-9f36-4121-ac77-feca8b122ceb.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:28 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: Lx/lwSaQaDIU9i+VSrNLzbniBSkcacGneaMdQUZ4QawsRJPXOxEpOVFRp46GQ0hJ9FyUkUAlUB+DEX52YhDGgQ== x-amz-request-id: GF9E3JETJ4DAZDPT Date: Mon, 21 Oct 2024 22:39:29 GMT Last-Modified: Tue, 17 Sep 2024 04:08:36 GMT ETag: "8d92f5d697951e1086b50f00120c0168" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: iHzz8nbVf_5X7_UkKGSfp9wSj6S.NoUo Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 168250 Connection: close
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 9f 05 cd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:28 UTC	509	IN	Data Raw: 87 a8 7c 4c f8 75 f0 cb fe 0e 1c f8 a7 71 f1 17 c4 1e 0a f0 fd 85 cf c1 9d 0a 3b 49 7c 49 7d 6d 69 0c b2 8d 4a e8 95 8c ce c0 16 c7 38 1c e2 b0 fe 2e fc 43 f8 5b f1 b7 fe 0b c9 fb 2a ff 00 c2 85 d4 fc 1b af 78 97 c3 5a 47 89 ef be 21 ea 7e 11 9a de e2 de 1d 12 5b 05 8a d6 0b f9 ad 89 56 26 e7 69 8e 37 24 a1 65 6c 00 ea 4e de a9 fb 33 fc 38 fd a6 7f e0 e1 bf 8a 7a 7f c4 8f 87 fe 09 f8 83 61 a6 fc 19 d0 ae 2c ed bc 4b a1 5a ea d0 da ca 75 2b a5 2f 1a 4e 8e 11 8a f1 90 01 c7 15 f7 7f c1 8f d9 b3 e1 d7 ec e1 a6 4f 65 f0 f3 c0 3e 0a f0 1d 9d d1 06 7b 7f 0e e8 76 da 5c 53 11 92 37 2c 08 80 e3 73 75 f5 3e b4 01 f9 39 fb 2f fe d9 5f 02 ff 00 64 5f f8 2d ff 00 ed f0 df 1a fc 61 e0 ff 00 09 ae bf aa f8 58 68 e7 5d 50 7e d4 61 b0 b8 f3 fc bc ab 7d df 36 2c ff 00 bc Data Ascii: \|Luq;I\|I}miJ8.C[*xZG!~[V&i7$elN38za,KZu+/NOe>{v\S7,su>9/_d_-aXh]P~a}6,
2024-10-21 22:39:28 UTC	7885	IN	Data Raw: 9c a9 0e 9b 61 f1 49 2e 6e e4 75 2c b1 c2 9e 35 99 9d 88 00 92 02 83 c6 28 03 dd 7f 6f af f8 2d af ec 35 fb 5b fe c7 de 3f f8 5d e0 0b cb 1f 8a 5e 3e f8 85 a3 dc 78 7b c3 1e 1e b3 f0 3d fd a4 d7 3a ad ca 34 56 72 09 ee ed 61 8a 2f 2e 76 8e 4f 33 78 65 d9 95 04 8c 55 4f f8 2e 17 c3 1d 77 f6 7b ff 00 82 24 7e ca be 10 f1 fe af 6f a9 f8 87 c1 be 38 f0 4e 99 af 6a 12 ca 0c 2f 35 bd 95 c2 4c c6 46 fb ca 0a b0 de df 78 2e e3 d4 d7 77 fb 6d 7f c1 67 7f 60 6f 8d 5f b2 67 c4 1f 08 d9 f8 93 c2 9f 11 75 5f 12 68 77 5a 6e 97 e1 cd 33 c2 97 73 5f 6a d7 d3 46 d1 db 45 00 36 c0 2c be 73 47 b1 f2 36 30 0c 08 20 57 85 ff 00 c1 4d be 13 fc 46 f0 07 fc 1b e1 fb 26 78 43 e3 93 ff 00 6c 78 ee db e2 3f 86 ad 35 d8 af b1 70 e2 17 37 fe 4d ad c6 ec 89 24 8e d5 a1 86 4c e7 73 46 Data Ascii: aI.nu,5(o-5[?]^>x{=:4Vra/.vO3xeUO.w{$~o8Nj/5LFx.wmg`o_gu_hwZn3s_jFE6,sG60 WMF&xClx?5p7M$LsF
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 2b 59 f1 0d b1 bf 7f 8a ba e9 b8 d3 4c 56 11 c6 4c 65 a6 66 4e 2e 83 13 1b a9 65 8d d5 b8 39 af 5c fd 89 bf d4 7c 20 ff 00 b2 a1 f1 5f ff 00 52 0d 76 be 85 f8 e7 fb 26 da fc 6a fd a9 fe 08 7c 49 9a e2 de 19 be 0d 5e 6b 37 b0 23 45 be 5b 93 7f a7 3d 89 45 3f c2 a0 49 bc 9f 58 d0 63 b8 00 c0 f1 3f ec 05 e1 78 7c 35 a8 30 f1 af c7 22 56 da 43 86 f8 a9 e2 12 0f ca 7a 8f b5 f3 5f 05 7f c1 96 bf f2 8a af 19 ff 00 d9 50 d4 7f f4 d7 a4 d7 eb 3f 8b 3f e4 55 d4 ff 00 eb d2 5f fd 00 d7 e4 c7 fc 19 6b ff 00 28 aa f1 9f fd 95 0d 47 ff 00 4d 7a 4d 00 75 9f 11 7f e5 6e df 01 7f d9 08 97 ff 00 4b 6f eb f5 2e bf 2d 3e 22 ff 00 ca dd be 02 ff 00 b2 11 2f fe 96 df d7 ea 5d 00 7c ef ff 00 04 b8 ff 00 93 53 be ff 00 b2 8b e3 ef fd 4c 75 aa fa 22 b9 2f 82 7f 05 b4 6f 80 3e 07 Data Ascii: +YLVLefN.e9\\| _Rv&j\|I^k7#E[=E?IXc?x\|50"VCz_P??U_k(GMzMunKo.->"/]\|SLu"/o>
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: f0 b5 9e 9d af 5c c2 9a 7f 88 f5 06 8f 5e 86 e2 f0 c3 0b 06 92 28 2d 21 45 95 24 97 1b a4 79 76 c7 84 dc fe 87 ff 00 04 ec f0 77 8b 3e 03 7c 3f d6 fe 0f 78 8f c3 52 e9 fa 47 c2 cb d1 a6 78 47 5f 8f 61 b7 f1 56 86 e0 bd ad c3 94 03 17 b1 8d f1 5c 86 00 bc 91 f9 dd 26 18 ae df b7 de a9 e0 bf 05 f8 b2 ef c7 ff 00 0a bc 53 e0 5d 6f c2 7a 86 8d 6c d6 57 17 96 d7 96 7a a5 b6 a7 7d 15 94 37 56 b7 b0 93 13 84 91 df cc 8d b6 c8 9e 58 ca 85 92 36 6f 41 fd 9c 3f 69 58 bf 69 a9 3c 49 a9 e8 ba 06 a5 6d e0 bd 36 f9 6c b4 2f 11 5c ba 0b 7f 17 28 4c cb 77 66 83 2c 6d 03 9d 89 33 60 4d b5 99 01 4d ae c0 1f 27 7c 27 fd 9e 3c 67 a5 7c 6c f0 71 b8 f0 df c4 48 7c 4b a2 fc 55 d7 3c 4f ab 41 73 2c 6d e0 6b 4d 3a ee 7d 4d be d7 68 9b bc b1 2b c3 77 1b a7 94 3e d2 2e 27 91 a5 03 Data Ascii: \^(-!E$yvw>\|?xRGxG_aV\&S]ozlWz}7VX6oA?iXi<Im6l/\(Lwf,m3`MM'\|'<g\|lqH\|KU<OAs,mkM:}Mh+w>.'
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: f4 2d 07 e1 b7 8c ae 3c 19 ad df 5d 58 e9 9e 2c 8e 7b 39 63 9d 60 0f 8b f9 6c 52 63 77 06 9b 33 c7 24 70 dd bc 61 64 60 84 85 49 11 db ea 1a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 f8 ab fe 0e 2b ff 00 94 2a fc 7e ff 00 b0 1c 1f fa 5d 6d 5e ad ff 00 04 a0 ff 00 94 5a 7e cd 5f f6 4a fc 2f ff 00 a6 8b 5a f2 9f f8 38 af fe 50 ab f1 fb fe c0 70 7f e9 75 b5 7a b7 fc 12 83 fe 51 69 fb 35 7f d9 2b f0 bf fe 9a 2d 68 03 e4 8f db 43 41 ff 00 82 5c 6a bf b4 ef 8b a5 f8 ce ff 00 05 13 e2 87 da c2 f8 88 5e 5d cd 0d d7 da 42 2e 7c e5 85 82 79 98 db b8 e3 71 3f 7b 9c d7 ca ff 00 f0 Data Ascii: -<]X,{9c`lRcw3$pad`I(((((((((((((((((((+*~]m^Z~_J/Z8PpuzQi5+-hCA\j^]B.\|yq?{
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: 3e 8f f1 eb fe 0b 1f a4 e9 36 b6 a7 e0 6f c0 1b b3 6d 0a 44 67 b8 d4 a0 69 66 da 00 de e4 6a c0 16 38 c9 20 0e 49 e2 ae 7e c3 9f f0 57 7f db 0e 0f f8 2b c7 82 bf 66 3f da 73 e1 df c2 af 0c 4f e3 5d 02 f3 5a 8c f8 77 cc 7b 9b 68 e3 b6 ba 9a 29 7c d5 bc b8 89 95 9a ce 54 28 40 6e 41 c8 c6 18 03 ee cf f8 79 3f 82 ff 00 e7 c7 ff 00 2f 0f 0a ff 00 f2 da 8f f8 79 3f 82 ff 00 e7 c7 ff 00 2f 0f 0a ff 00 f2 da be 88 a2 80 3e 61 f0 67 ed 73 a3 7c 67 fd b1 fc 03 6f a3 e9 b3 b6 fd 0b 5c b0 9a 48 f5 ad 1f 50 5b 6f 31 ac 2e 15 dc 59 5e dc 3a af fa 19 4c b2 81 99 17 9e d5 f4 f5 14 50 01 45 14 50 01 45 7c d3 fb 7b fe df 7a f7 ec 5f e2 4f 09 d8 e9 1f 09 7c 45 f1 1e 1f 12 db 5e 4f 35 d6 9d 7a b6 b1 e9 cd 03 40 ab 1b 96 8d 81 67 13 12 39 07 11 9e 0f 38 f0 5f f8 7e 5f 8c ff Data Ascii: >6omDgifj8 I~W+f?sO]Zw{h)\|T(@nAy?/y?/>ags\|go\HP[o1.Y^:LPEPE\|{z_O\|E^O5z@g98_~_
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 59 e1 9f 12 f8 61 6e 61 d3 75 df 0c 6b 33 69 5a 8c 10 5c aa ad c5 b9 92 33 87 86 43 1c 4c 51 c3 0d f0 c6 e3 0c 80 8e 47 5a ff 00 82 67 fc 2f bc f0 8f 81 b4 fd 22 3f 14 78 4b 54 f8 71 69 25 8e 85 e2 2d 07 5f ba b2 d7 21 82 56 df 71 1c d7 61 8b dd 24 f2 66 49 16 e3 cc 0f 21 32 11 bf e6 a0 0f 93 ff 00 6e 1f db 47 f6 87 fd 9e ac ac 3c 11 e0 7f 13 5a f8 b7 c7 3e 1f f8 cb a2 78 7a 0b d9 f4 6b 38 a4 f1 8e 91 77 e1 fb cd 53 fb 2a e9 42 79 31 5d 49 2d bf 94 66 b7 58 08 57 85 d5 63 dc c0 fa 6f 87 ff 00 e0 a5 97 9f b4 e7 ed e7 f0 67 49 f8 4d ae 45 77 f0 76 ed ae ac 7c 59 77 f6 05 3f da 7a a5 c6 85 75 a9 db 58 2c 8e a5 a3 92 ce 2b 78 a4 9d 63 20 87 bc 8e 36 39 49 10 7a 17 c0 df f8 25 6f 83 be 10 78 2b c3 fe 1e be d7 3c 41 e2 cb 2f 06 fc 42 3f 12 74 3d 43 53 9d 9f 5a Data Ascii: Yanauk3iZ\3CLQGZg/"?xKTqi%-_!Vqa$fI!2nG<Z>xzk8wS*By1]I-fXWcogIMEwv\|Yw?zuX,+xc 69Iz%ox+<A/B?t=CSZ
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: e8 32 cb 3e 99 a6 4d e1 7b 17 b3 d3 a4 97 1e 6b c3 11 8b 64 6c f8 1b 8a 80 5b 03 39 a0 0f 11 d6 35 7d 53 f6 85 ff 00 82 9d 78 eb e1 7f 8c 7c 45 e2 af 0e 78 3b c1 de 0b d1 b5 df 0a 69 1a 16 bd 79 e1 f9 3c 4b 35 d4 d7 b1 df de bd cd a4 b1 5c 4e b6 c6 1b 68 bc a5 93 ca 43 70 19 d4 b3 21 5f 3e 1f 15 fc 4e de 37 83 e1 52 f8 c7 c5 12 fc 2c 7f 8d 6f e0 66 f1 78 d6 e5 fe d5 fe ce 1e 18 5d 4d 74 df ed 30 de 7e f3 ab 96 b0 fb 4f 99 e7 fc be 47 99 e7 7c f5 f6 07 89 ff 00 65 8f 86 3e 36 f0 3e 8f e1 9d 67 e1 c7 80 f5 7f 0d f8 78 e7 4a d2 6f 7c 3f 69 3d 8e 98 70 57 f7 10 bc 65 22 e0 91 f2 01 c1 35 a8 df 04 bc 18 df 0b 3f e1 06 3e 11 f0 c1 f0 4f d9 fe c7 ff 00 08 f9 d2 a0 fe ca f2 33 9f 2b ec db 7c ad 99 e7 6e dc 67 b5 00 7c 9b fb 67 db 4d fb 2c fc 09 f8 95 6f f0 c7 e2 Data Ascii: 2>M{kdl[95}Sx\|Ex;iy<K5\NhCp!_>N7R,ofx]Mt0~OG\|e>6>gxJo\|?i=pWe"5?>O3+\|ng\|gM,o
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: f6 39 95 4a a0 c7 b7 fc 26 fd 99 fe 1c 7c 04 ba ba 9f c0 bf 0f fc 11 e0 b9 af a3 58 6e 64 d0 74 2b 5d 39 ae 11 4e 55 5c c2 8a 58 02 4e 01 e0 66 8f 8b df b3 3f c3 8f da 0a ef 4b 9f c7 bf 0f fc 11 e3 79 f4 33 29 d3 64 d7 f4 2b 5d 49 f4 ff 00 34 28 93 c9 33 23 18 f7 85 50 db 71 bb 68 ce 71 40 1f 19 7c 4c b1 f8 b9 f0 db 4b f8 2b a1 7c 40 83 e2 5f c6 1b f8 3c 05 32 eb 9a 37 c3 df 1d c5 e1 8d 72 0d 5d 1e dc 36 a1 74 46 a1 62 f7 96 88 b2 2d b9 9b cc 28 92 1f 31 a2 dd 32 6d eb ec bf 68 4f 8a 5f f0 e1 ed 73 e2 68 d7 6d 2c be 27 69 1f 0c b5 4d 72 df 5a 96 0f ed 14 b8 6b 4b 79 e4 86 e9 70 62 59 1e 68 62 47 49 76 84 df 2a c8 63 65 cc 4d f4 6e bb fb 1b fc 21 f1 4f 81 b4 7f 0c 6a 7f 0a be 1b ea 3e 1a f0 f4 93 4b a5 69 37 5e 19 b2 9a c7 4c 79 4b 19 5a 08 5a 32 91 17 2c Data Ascii: 9J&\|Xndt+]9NU\XNf?Ky3)d+]I4(3#Pqhq@\|LK+\|@_<27r]6tFb-(12mhO_shm,'iMrZkKypbYhbGIv*ceMn!Oj>Ki7^LyKZZ2,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49765	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	679	OUT	GET /Bookappointment/Property/a962e906-800c-4033-a363-a17dcd590ef0.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:28 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: HZxAHbEQi9A1gi0bD6rChi0MJ7lUrvhKgaCqpbXRBQ4IGRVrei2qvxVMj9STuaTlqsEVNSZ2EJgcsbE3bZBrbQ== x-amz-request-id: GF9F0G4P9FBTGAGJ Date: Mon, 21 Oct 2024 22:39:29 GMT Last-Modified: Tue, 17 Sep 2024 07:27:06 GMT ETag: "0f72f969e836e988eee818c6d32c25b3" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: YxTnP.AFH2VBI8A2c2YwePbQxNTmbSMv Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 197710 Connection: close
2024-10-21 22:39:28 UTC	3490	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 99 05 cc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:28 UTC	16384	IN	Data Raw: 52 79 8f e6 e4 74 af 3e ff 00 82 d7 ff 00 ca 23 bf 68 df fb 10 35 6f fd 26 7a f8 5b fe 0a c1 a8 68 1a 57 ec d7 ff 00 04 d3 b9 f1 5c da 3d b7 86 a0 f1 bf 85 a4 d5 25 d5 9e 34 b1 8e d8 69 91 99 1a 76 93 e4 11 85 ce e2 dc 63 39 a0 0f d0 4f d9 df fe 0a c5 fb 37 fe d6 3f 10 e1 f0 97 c3 bf 8c 9e 07 f1 47 89 ae 51 9e df 4b b6 be d9 75 72 15 4b 37 96 8e 14 c8 42 82 48 5c 90 01 27 8a f4 7b 2f da 93 e1 f6 a1 fb 46 5d fc 23 8b c5 5a 61 f8 93 63 a5 0d 72 6f 0f 96 65 bb 5b 12 ca a2 e0 02 30 c9 b9 d4 65 49 e4 fb 1a fc ad ff 00 82 ec f8 fb f6 6d f8 af fb 30 f8 73 c2 9f b3 9d d7 c3 0f 11 fe d2 9a df 8b 34 a4 f8 75 27 c3 49 6c 26 d6 74 eb c4 ba 8d a6 99 a7 b2 3b a0 84 40 25 04 bb 05 dc 50 ff 00 0e 57 e8 6f f8 2c 17 c2 ef 10 7e cf be 06 f8 5d fb 5e 78 7b 49 8b 56 f8 9d fb Data Ascii: Ryt>#h5o&z[hW\=%4ivc9O7?GQKurK7BH\'{/F]#Zacroe[0eIm0s4u'Il&t;@%PWo,~]^x{IV
2024-10-21 22:39:28 UTC	1024	IN	Data Raw: b8 3c f8 bc 4b f6 2b 38 ce a2 1a 2b d8 d1 63 fd dd ca 86 49 f7 2d c3 fd a3 cb 2c 7c c1 ee 7f b1 37 81 3c 6d e0 ad 33 c5 8d e3 ad 1a cb 4f d4 f5 2f 11 6a f7 d0 4f 1d b4 06 79 ed a6 d5 af a7 b7 12 5c a5 d4 ad 3a 8b 79 60 d8 1a 28 7c b5 c2 6d 24 61 7d ca 8a 00 28 a2 8a 00 f3 bf 06 ff 00 c9 cf f8 f3 fe c0 5a 1f fe 8d d4 ab d1 2b ce fc 1b ff 00 27 3f e3 cf fb 01 68 7f fa 37 52 af 44 a0 02 8a 28 a0 02 bf 3f 3f 6c 0f f9 58 67 f6 3c ff 00 b1 33 c6 7f fa 4b 1d 7e 81 d7 e7 e7 ed 81 ff 00 2b 0c fe c7 9f f6 26 78 cf ff 00 49 63 a0 03 e3 57 ec d9 f0 eb f6 99 ff 00 82 f7 cd a5 fc 48 f0 1f 83 7c 7d a5 e9 df b3 fd b5 e5 ad a7 88 f4 5b 6d 52 0b 59 bf e1 22 b9 5f 35 12 74 65 57 da cc 37 00 0e 09 19 e6 bf 3a 3e 2b 68 ff 00 05 9b e0 df 89 1e d2 d7 f6 71 6b 8f ec 5b a6 81 ed Data Ascii: <K+8+cI-,\|7<m3O/jOy\:y`(\|m$a}(Z+'?h7RD(??lXg<3K~+&xIcWH\|}[mRY"_5teW7:>+hqk[
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 7b 6f 6f 53 5d 3f fc 3a 53 f6 56 ff 00 a3 6a f8 09 ff 00 84 06 95 ff 00 c6 2b d5 f5 9f f9 2e de 1c ff 00 b0 0e ab ff 00 a5 1a 6d 75 b4 01 f3 df fc 3a 53 f6 56 ff 00 a3 6a f8 09 ff 00 84 06 95 ff 00 c6 28 ff 00 87 4a 7e ca df f4 6d 5f 01 3f f0 80 d2 bf f8 c5 7d 09 45 00 7c f7 ff 00 0e 94 fd 95 bf e8 da be 02 7f e1 01 a5 7f f1 8a f9 a3 c4 bf f0 44 3f d9 42 cb f6 52 d2 7c 4f 17 c0 df 03 26 b7 77 a7 e9 77 12 dc 0b 43 86 79 de dc 4a 76 67 68 c8 76 e0 0c 0c f1 8c 0a fd 1b af 0e f1 7f fc 98 ae 81 ff 00 60 9d 0f ff 00 46 5a d0 07 9f ff 00 c1 23 ff 00 67 af 04 7e ce 5f 0a 7c 75 a4 f8 1b c2 fa 37 85 f4 eb 8f 12 c1 71 2c 3a 7d b2 c2 24 76 d1 74 c7 24 e3 af cc ee 40 e8 37 1c 75 af ac 6b c0 3f e0 9f 5f f2 26 78 d3 fe c3 f6 bf fa 62 d2 6b df e8 03 92 f8 fb ff 00 24 27 Data Ascii: {ooS]?:SVj+.mu:SVj(J~m_?}E\|D?BR\|O&wwCyJvghv`FZ#g~_\|u7q,:}$vt$@7uk?_&xbk$'
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 96 0b f6 93 21 01 dc 74 76 cf 4b e2 ef d9 9f c0 fe 35 f8 0a bf 0c 6e b4 18 6d bc 0b 15 a5 b5 84 1a 56 9b 71 36 9a 96 90 5b 34 6f 02 42 f6 ef 1c 91 79 6d 14 65 7c b6 52 36 8a e2 fc 0d e2 cd 56 ef fe 0a 45 f1 4b 42 97 52 d4 25 d1 34 ff 00 86 be 0e bf b5 d3 de e1 cd ad b5 c4 fa a7 8a 52 79 92 2c ed 59 24 4b 7b 75 76 03 2c 20 88 12 42 2e 3e 0b f8 e3 f1 f7 c6 69 fb 68 fc 34 d1 6e 13 e3 bf c4 0d 0a ff 00 c6 ff 00 14 ad 6e fc 31 e0 4f 17 4f a5 df de c5 67 26 94 2c c1 6f ed 0b 25 30 db 79 92 6d 43 36 10 48 db 57 92 28 03 ef 4f 16 7f c1 3c 3e 18 f8 ee c7 41 87 5a 8f c7 fa ac 9e 16 d6 3f b7 f4 7b cb af 88 9e 21 96 ff 00 4b bd fb 3c b6 c6 58 6e 8d f7 9f 18 30 cd 2a 94 57 08 77 92 57 3c d5 ff 00 15 fe c3 1f 0f fc 6b 6d e1 b1 a8 3f 8f da f3 c2 56 f7 f6 9a 5e a7 07 c4 Data Ascii: !tvK5nmVq6[4oByme\|R6VEKBR%4Ry,Y$K{uv, B.>ih4nn1OOg&,o%0ymC6HW(O<>AZ?{!K<Xn0*WwW<km?V^
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: dd 0f 54 b6 ba d1 16 75 d1 ed 2e 3c 43 a9 5e e9 7a 00 9c 11 2f d8 2c 27 b8 7b 4b 2c ab 32 7f a3 c5 1e 11 99 06 10 95 ae 43 c5 ff 00 f0 4c 5f 87 b7 ba 97 87 f5 0f 0d 4f e2 6f 0a dd 78 57 c4 36 fe 25 d2 b4 e4 f1 06 a3 7d e1 ab 5b 98 a5 f3 36 8d 12 6b 86 d3 d1 09 2c 57 ca 86 37 89 d8 49 13 47 20 0d 5f 46 d1 40 1c 0f 83 ff 00 65 cf 87 de 05 9f 50 96 c3 c2 ba 63 49 a9 f8 a2 7f 1a ca f7 8a d7 ad 1e b3 32 ed 92 f6 23 31 7f 26 42 bc 0f 2b 68 50 58 28 19 39 de f8 67 f0 bb 42 f8 3d e1 89 34 6f 0e 58 ff 00 67 69 b2 ea 37 fa b3 c3 e7 49 36 6e 6f af 26 bd ba 93 74 8c cd f3 dc 5c 4c f8 ce d5 df 85 0a a0 01 d0 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 Data Ascii: Tu.<C^z/,'{K,2CL_OoxW6%}[6k,W7IG _F@ePcI2#1&B+hPX(9gB=4oXgi7I6no&t\LQ@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: e0 a7 3f f4 2b e9 3f f8 75 13 ff 00 8c d0 07 eb fd 15 f8 f7 7d f0 f3 fe 0a 81 25 94 ab 6d e1 bd 12 2b 82 84 44 f2 fc 50 59 11 1b 1c 16 51 12 96 19 ec 18 67 d4 57 a3 7c 17 f1 67 fc 14 97 e1 0c 9a 9b 5c fc 1c f8 7d e2 ff 00 ed 11 08 55 d7 be 27 fd a0 59 f9 7e 66 4c 5b 62 5d a5 f7 8d d9 ce 76 27 4c 1c 80 7e 9f 51 5f 9f 9f f0 d2 df f0 51 bf fa 36 7f 81 7f f8 70 9f ff 00 89 a3 fe 1a 5b fe 0a 37 ff 00 46 cf f0 2f ff 00 0e 13 ff 00 f1 34 01 fa 07 45 7e 7e 7f c3 4b 7f c1 46 ff 00 e8 d9 fe 05 ff 00 e1 c2 7f fe 26 8f f8 69 6f f8 28 df fd 1b 3f c0 bf fc 38 4f ff 00 c4 d0 07 e8 1d 78 77 8b ff 00 e4 c5 74 0f fb 04 e8 7f fa 32 d6 be 6d ff 00 86 96 ff 00 82 8d ff 00 d1 b3 fc 0b ff 00 c3 84 ff 00 fc 4d 78 c6 a3 a0 ff 00 c1 4c b5 6f 86 f6 de 16 9b e1 e7 80 53 4a b6 86 da Data Ascii: ?+?u}%m+DPYQgW\|g\}U'Y~fL[b]v'L~Q_Q6p[7F/4E~~KF&io(?8Oxwt2mMxLoSJ
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 91 bc 21 ab dc df 87 ba f1 5d 89 5c ff 00 68 7d 94 46 3e cd 6f 27 0d 06 f9 19 e5 8c 87 64 8c 15 07 c7 3f 69 0f 82 5f 16 ff 00 6d af 82 9e 3d f0 d7 8b fc 2d e1 9d 13 c2 7a fc de 1c b6 d3 7c 29 73 7f 1d ed c5 c4 76 da bc 77 5a a5 c5 e4 e8 be 56 c9 6d 95 23 8e 04 2d fe a5 cb 36 65 0a 9d ff 00 ec 43 f0 53 c6 df b3 47 fc 26 de 01 d5 9b 4e bb f8 67 a2 6a a2 6f 86 d3 c1 2e 67 d3 f4 79 93 77 f6 54 c8 79 02 ce 50 f1 c4 dc 83 03 42 b9 ca 10 00 39 ff 00 05 7e df 3a df 8a be 27 68 16 f2 f8 13 4c b6 f0 57 8a bc 7b ac fc 3c d3 75 08 bc 48 d3 6b 8b 7f a6 ff 00 68 09 65 b8 d3 4d a2 a4 50 31 d3 2e 58 15 ba 79 04 6d 0c 8d 18 0c c2 3f a6 2b e1 bf 86 5f b0 77 8b 3c 2d fb 40 78 7b 5b 7f 02 78 43 4f f1 66 93 f1 07 55 f1 3e b5 f1 52 1d 42 36 d5 7c 4b a4 5c bd d9 8e c5 d4 46 2e Data Ascii: !]\h}F>o'd?i_m=-z\|)svwZVm#-6eCSG&Ngjo.gywTyPB9~:'hLW{<uHkheMP1.Xym?+_w<-@x{[xCOfU>RB6\|K\F.
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 7e 38 d7 bf 68 2d 77 e1 55 cd b7 9f f1 13 4f f1 dd fc 82 11 71 63 a5 38 86 d3 42 93 45 ca ce 36 45 f6 61 a8 ae a4 57 7a af ef d5 c3 80 82 db 15 af e1 7f 17 7c 6e f1 37 c0 ef 89 3a cf 8b 53 c5 ba 4e b3 73 e2 e8 ef 74 8d 36 3d 0f 53 9b 6e 9c 74 5b 77 82 d2 18 ec 24 82 e9 23 6b 80 3c c7 49 0e c9 cc ca fc 6e 40 01 f6 ed 79 df ec 9d ff 00 26 f1 e1 8f fa f7 7f fd 1a f5 dc e8 13 dc 5c e8 56 52 5d db 1b 3b a9 20 46 9a dc cb e6 98 1c a8 2c 9b ff 00 8b 07 23 3d f1 9a e1 bf 64 ef f9 37 8f 0c 7f d7 bb ff 00 e8 d7 a0 0f 44 af 0e f1 7f fc 98 ae 81 ff 00 60 9d 0f ff 00 46 5a d7 b8 d7 87 78 bf fe 4c 57 40 ff 00 b0 4e 87 ff 00 a3 2d 68 02 8f fc 13 eb fe 44 cf 1a 7f d8 7e d7 ff 00 4c 5a 4d 7b fd 78 07 fc 13 eb fe 44 cf 1a 7f d8 7e d7 ff 00 4c 5a 4d 7b fd 00 72 5f 1f 7f e4 Data Ascii: ~8h-wUOqc8BE6EaWz\|n7:SNst6=Snt[w$#k<In@y&\VR]; F,#=d7D`FZxLW@N-hD~LZM{xD~LZM{r_
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 7e 26 ff 00 92 a1 e0 af fa ff 00 f1 07 fe a6 7a 25 00 7d 3d 45 14 50 01 5f 10 7f c1 7d fc 05 f1 5b e2 bf ec 4f 61 e1 3f 83 2b e2 7b 9f 1b f8 9b c4 96 d6 71 59 68 3a f0 d1 2e af 2d e3 82 e2 ee 74 17 26 48 d4 03 15 b3 8c 31 20 96 1f 29 20 57 db f5 c5 ea fa c5 8f 88 fe 39 69 3a 1b e9 82 f2 e7 c3 ba 7b eb ed 7a 67 65 fe cc 96 62 f6 96 e3 60 18 7f 3a 33 7e 32 4f cb e4 1e 09 60 54 03 f0 b7 fe 18 03 e3 af fd 1a 87 ed 8f ff 00 89 55 a7 ff 00 f1 8a 97 f6 9e f8 65 f1 e7 c2 bf f0 49 f9 bf 65 8d 03 f6 2c f1 8f c3 bf 0b 78 c3 c4 f6 1e 47 88 7c 41 f1 57 49 d7 a6 37 b2 ea b0 de b0 95 51 23 2f e6 18 8a 67 2a 14 1c 9c f3 9f e8 06 be 77 ff 00 82 91 ff 00 c9 35 f0 0f fd 94 0d 17 ff 00 46 b5 00 79 8f c2 bf f8 22 1f ec a1 e3 3f 85 fe 1b d6 35 1f 81 de 0c 9b 50 d5 74 bb 5b cb Data Ascii: ~&z%}=EP_}[Oa?+{qYh:.-t&H1 ) W9i:{zgeb`:3~2O`TUeIe,xG\|AWI7Q#/g*w5Fy"?5Pt[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49767	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	675	OUT	GET /Bookappointment/Property/2d6b9ee7-fcbe-43f7-9a4d-6594acb4d938 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:29 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: yCgz1oHcBZwlpbA/fWCjXZz8jKYG0WzN8+MBpgCm0FtialhGZoo0fOdHgw5PpfiL2JqEtynTV4nHwr39UWaN/A== x-amz-request-id: GF92NPAQVSRYP3H8 Date: Mon, 21 Oct 2024 22:39:29 GMT Last-Modified: Tue, 17 Sep 2024 07:32:23 GMT ETag: "67171e37f6d6968cc1a6cec4e317a764" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: nqMcZB4J1411AXt4VWfn..2CxHu2GrAv Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 892013 Connection: close
2024-10-21 22:39:29 UTC	418	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 46 00 00 03 01 08 06 00 00 00 0a f7 7b 0c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e 6c bd 09 7a 65 db 72 9c 77 00 d4 d3 fc 07 21 c9 a2 44 91 1e 81 25 8b cd 08 6c 36 e2 4c 7c 0b 80 bf 8c 88 3f 32 37 2e 8b cd ad 02 ce d9 cd 5a d9 44 46 36 eb ed 3f fd 5f ff f4 fd f6 f6 7a 7d bf fc e7 ed fb f5 9a 7f 7f cd 4f e6 ef af 37 fd 7d fe 3b ff fb f5 ad 1f ea 73 fa ed db eb f5 d2 cf f4 09 fd f7 7b fe 9d 1f bf eb f7 5c 3f d7 d1 ef be 73 cf ef d7 db fb fb f9 0e 4f 32 97 f2 b5 de f5 0c ba 7a fe 7c bf e6 a1 3f bf bf 5f bf 3e de 5e 5f 7c e5 fb ed f5 3d ef f2 3d 9f fe d0 77 f5 ad f7 79 80 6f 3f 66 1e ec fb fd ed a5 2b cf 67 72 e9 f9 d6 fb eb 4b f7 e0 9e bc df dc 62 7e ef 6f 65 1d f2 34 ef ef Data Ascii: PNGIHDRF{sRGB IDATx^lzerw!D%l6L\|?27.ZDF6?_z}O7};s{\?sO2z\|?_>^_\|==wyo?f+grKb~oe4
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: b7 d7 47 04 ce ff b6 8c 8d 8c 7c 7e cd fb f8 a5 f4 fe fa 9c ff 0f 19 cb 16 fa 61 66 cd df 47 74 d8 f5 ac 69 64 5c cf fb 35 ab 32 ef 3c bb 30 ef f7 7a 7d e6 5d fc e9 af d7 c7 db bb 64 c9 62 f1 f5 fa cc 0a bc 5b 68 2c 9a af d7 eb 63 74 e0 35 df f7 7a cc 3a 66 33 f5 fd 79 36 e9 e1 ac e7 bc 53 9e 7b 37 7d d6 69 de 77 76 f6 d3 72 d8 ad 1f 39 b2 0e bc bf 79 6d b5 d6 c8 dd fb 48 fd f7 eb a3 3f f3 fd e6 f3 f3 bc 73 ff 79 1e ff 68 f5 13 6d 9c 2b cd 56 cc b3 f1 67 d6 6e f6 1d 2d 97 e6 bc f1 c9 73 eb e8 cb c8 cb fc 8f d7 d2 df 9a 95 f3 9e 78 cf fa 42 fe 91 9e 59 6b 6b 29 8a bd b2 e2 55 86 f3 7d ad db 97 f7 68 e4 d5 cf ea eb da 2e bc bd 5e 1f 5a 64 6b 71 d6 79 de cb eb e5 fb 5b a7 e6 0b 56 96 b7 b9 97 7e 67 2d 94 d0 9c 3f fa dd e8 9d e4 65 f6 61 f4 49 82 5b 3d d7 e5 Data Ascii: G\|~afGtid\52<0z}]db[h,ct5z:f3y6S{7}iwvr9ymH?syhm+Vgn-sxBYkk)U}h.^Zdkqy[V~g-?eaI[=
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 97 08 08 74 c5 df a9 8e 30 7b d5 b1 1e dc 6f a1 40 f7 45 25 28 a7 fe 6e fd d5 b2 88 97 50 01 68 57 2f ff fa 1f fe 45 12 ac 45 68 64 86 93 44 cc ad c8 95 85 01 45 23 78 7a 68 b2 78 44 79 8b 90 0b 66 b2 8c 5b 58 7d 68 2e bd 94 d5 6e 05 1a 61 f6 22 29 05 54 2a 3d 09 87 b7 b7 d7 1f bf 99 29 b2 e9 86 79 41 d7 1b c4 b8 14 f1 7b d3 dc c1 c9 40 4b a2 a6 74 0c 4d 26 9a 48 f5 30 39 8a 8e 47 20 74 2d 04 db 91 6d d1 6d d2 11 56 97 cb e5 dd 33 bf f6 3d a8 26 bf 75 e3 5a 89 9c 79 24 e1 23 c5 94 23 5b 3e bf 7e a7 10 1c 2e ca 6b 3e 8e 50 ad 9e 69 41 d5 7b 12 e1 36 4a 7f 66 59 8f 2c 3d 6b b4 92 6e 74 d1 2f 63 00 12 bc 25 c1 72 53 47 38 10 a2 72 2f 5b 94 06 a0 2b 69 f3 cb 50 13 82 c6 f2 7d 07 1a bb 3e 92 1d 0e 44 64 9d b5 ad 18 24 00 4d 00 20 4e a3 06 66 9f 61 d3 03 07 3e Data Ascii: t0{o@E%(nPhW/EEhdDE#xzhxDyf[X}h.na")T*=)yA{@KtM&H09G t-mmV3=&uZy$##[>~.k>PiA{6JfY,=knt/c%rSG8r/[+iP}>Dd$M Nfa>
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 28 45 58 8a b9 d3 1e 85 72 18 b7 78 82 39 ab 51 83 f5 3a 9a 35 fb 48 f9 bd 5e 27 03 7c 8f 3d 32 c0 bb ab 79 b4 94 3a 99 38 74 d7 b1 91 82 de 75 43 7e f4 8c d1 33 3a 72 05 70 6e 5c ff 30 75 34 57 90 a6 8f 1d 3b ac 1c 72 48 ba b8 15 71 8f 9a d9 05 3d 9e bb b6 47 59 34 47 e1 98 a0 87 fa 82 72 36 b8 c9 7b 57 77 fc a0 a3 5e 73 f5 39 be 82 aa af 01 65 fb 07 b9 b1 38 6c fd da 96 23 c4 b1 e6 ec 3c eb 18 6c 7a 33 c3 4c 7e 3f 84 80 40 65 6a d0 66 90 ab b2 17 c7 7e a1 f9 eb 6f 90 59 fc 4f 4a 94 70 5e 5a 1a 8f 47 a0 06 c8 5b 1f db 09 03 73 82 18 e9 78 36 b8 07 d0 46 b2 d9 26 95 5c 60 3a f4 08 6b 79 3c 60 92 5a 25 cb 02 03 1c 9f 59 f1 05 b2 8d 2d 2e ab 18 91 f7 c8 01 34 3b 0c 7f 80 33 f5 62 a6 89 d6 72 e0 85 0b c0 f7 06 eb e2 2f 59 72 dc cd 9b 80 11 b9 d7 08 03 e9 2d Data Ascii: (EXrx9Q:5H^'\|=2y:8tuC~3:rpn\0u4W;rHq=GY4Gr6{Ww^s9e8l#<lz3L~?@ejf~oYOJp^ZG[sx6F&\`:ky<`Z%Y-.4;3br/Yr-
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 4f 02 b0 d9 49 a1 d4 a8 4d c7 47 de 07 e1 88 6f f1 5e 58 ac 53 54 6c a1 6f 54 9d 17 b6 cb 6c cc da 2a da 11 79 77 50 c5 5d bd 90 5a 9b e8 bd e3 da a4 39 b4 5a a1 3f b5 ee 11 e2 4e 87 29 37 8e 7f 21 b7 37 c6 a2 be 5b 39 70 03 5e 77 4c 78 79 bd 90 b7 ca a1 a7 a8 76 6b aa 0c 73 ba 13 e3 4c 3a e5 d6 6b e0 e4 50 ad c7 6d 4d bc bd 7f 70 1d d1 ba 0e 81 4c 3d a3 40 10 5d 6b 7e b1 14 f5 db 19 da f8 60 16 26 6d c9 4f 89 06 34 47 8b 5a df e1 a7 23 6b e7 22 53 0d a7 eb ee 3a 4f 1a 76 3d 56 8d 94 f0 ee fa 68 02 28 b8 a8 d9 0a 1c 68 c5 27 57 ad ae bb ec 8f 6b a6 12 c5 81 d1 76 30 b3 d6 02 aa 7c 18 a8 18 bd 65 d4 d9 6f 02 12 22 a4 7a 4d 6a 32 b4 7f ed c3 c7 00 e1 e0 ea f9 ba 9b 10 23 b8 66 7e 14 53 49 87 99 55 77 9e 7f 66 f0 60 f9 64 59 8e 87 3b 8f 88 d0 1e 65 53 f9 6a Data Ascii: OIMGo^XSTloTl*ywP]Z9Z?N)7!7[9p^wLxyvksL:kPmMpL=@]k~`&mO4GZ#k"S:Ov=Vh(h'Wkv0\|eo"zMj2#f~SIUwf`dY;eSj
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: c5 da b7 6d 23 49 5d 88 3f 25 cd e8 6e a8 6d d3 72 58 ba c5 02 53 b3 3e cb 3e d2 e8 40 dd 6e 7b 35 7f 27 b6 b0 49 90 39 44 16 e7 cf 0d a0 a6 d7 4c 8b 66 ab 23 ac 49 3d 19 a1 4e 0a 8d ce 93 8e e4 03 39 bd 39 fb 88 0c 2b 98 0b b7 2e fe 78 47 7d d5 f1 de f6 e7 51 8e 4c b4 b7 72 0d 36 5f 4f 12 25 5a 75 00 fa ea 99 98 3a dd f8 c2 7f 05 6c cd b6 7b d3 63 14 16 e0 e8 67 a4 a5 3e 8e d1 0a 4d a2 67 53 a7 26 a1 23 1d 1d d4 ba 2e 21 85 8d b1 57 4d 3f 37 03 83 d2 f8 fd 9c 6c 71 b4 28 7f 00 c9 d2 c0 b1 75 d6 4f 4c 8b 3f 39 d9 e4 e0 fd 29 47 35 03 40 61 04 ac 60 bb 78 51 fb 13 60 d6 e9 82 18 50 f6 88 9c b5 23 a3 79 0e 99 93 74 05 79 ff bd a6 c3 c8 f9 65 66 4c bd 23 45 19 96 55 c0 ca c2 d9 c0 36 87 d4 4c 10 6a a5 df 2d 54 dd fb bc d6 e8 2c 83 59 e3 de a5 7c 03 e2 66 13 Data Ascii: m#I]?%nmrXS>>@n{5'I9DLf#I=N99+.xG}QLr6_O%Zu:l{cg>MgS&#.!WM?7lq(uOL?9)G5@a`xQ`P#ytyefL#EU6Lj-T,Y\|f
2024-10-21 22:39:29 UTC	1776	IN	Data Raw: c2 f2 2c e0 ae 89 f6 76 21 13 e8 c6 eb c5 6c f4 81 03 bb 1e 2e c1 c5 ee 94 c2 41 0b 34 66 30 ed a4 7f 02 1c 82 b4 ed 8c 87 6b dd 60 be 9d 9e 52 d1 a4 f7 12 6d 47 8f 88 2c 59 77 5e 4d ea ec c8 d5 32 42 b1 fa 62 8c f5 76 01 9d 04 a3 00 4a cb bb 6b ec 66 e6 5a 64 ba 99 c9 aa 87 62 e2 f7 80 34 07 c7 03 10 3b 38 4a 0a 0b 3b b2 41 9d ea a3 fa 2c 38 af 82 56 a6 64 a2 3b 27 d7 3b 25 ad 89 1f db 87 e4 ba 51 21 6b 9f f5 35 d8 08 f7 b2 e6 0f c1 e2 20 38 6d b5 82 26 aa fe dd 67 d0 6d 9b ee e7 73 bd 14 c1 5b 02 9a 04 c1 0d 7a 43 07 c4 22 07 d4 e5 00 76 fc 5a c0 1d 41 e9 0b 6a 29 3b 68 b9 07 e8 79 77 cc 28 69 34 46 d7 ea 44 ee a3 d2 7e 8e 13 fc 77 9a 11 7f 9b 34 6d a7 cc 4f e3 06 32 ab ac 0e e7 ce 34 f3 b6 14 2f 74 7e bd 08 c4 b1 09 1d f4 11 29 b7 ce 36 14 87 23 5f 41 Data Ascii: ,v!l.A4f0k`RmG,Yw^M2BbvJkfZdb4;8J;A,8Vd;';%Q!k5 8m&gms[zC"vZAj);hyw(i4FD~w4mO24/t~)6#_A
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 67 52 cc d2 af 29 c4 e9 74 4a 80 99 da ef e3 ec f2 56 ad b4 cd 32 6a 48 5a 2c 1e 11 59 9e 83 02 65 19 d1 1c a5 d1 f4 69 58 04 d7 a2 d0 ae 0d 8e 4f 8c d9 06 26 06 96 48 8e 0a 51 2c 11 53 7d 77 10 11 35 d8 81 a6 0d a0 a9 6e de c7 46 3d b8 ac d3 03 25 56 89 96 1b f0 b6 70 1e 1e 23 33 14 bf b8 99 c8 3a c6 d2 ef db 5a de 55 28 72 d4 a1 63 6c 00 93 6e ce 3e 60 c4 cd 20 b8 10 91 b3 9c d0 5a a7 43 e3 f0 7b 82 8d 65 ac 63 17 2d f9 19 44 d8 70 b4 79 70 ba 24 6e d5 a9 32 b7 c4 fb 3e b4 f8 76 04 d4 67 59 51 08 6d b5 b4 7e c1 e8 51 93 a1 ad 49 16 6a d2 45 fe c6 3e 26 d2 6b 80 e3 27 7f 1d 36 69 c5 37 93 d2 c0 d8 27 66 e9 25 4e 72 20 86 96 6a 8e 9a a1 a5 11 13 db 60 12 d7 65 5e 57 66 ad fb 7c bd 3e 6e 65 5b 87 89 40 59 b1 05 1f a6 53 09 55 f7 2b 61 ed 16 74 e9 fa 5f 83 Data Ascii: gR)tJV2jHZ,YeiXO&HQ,S}w5nF=%Vp#3:ZU(rcln>` ZC{ec-Dpyp$n2>vgYQm~QIjE>&k'6i7'f%Nr j`e^Wf\|>ne[@YSU+at_
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 27 8b 47 87 c2 f3 07 ba 03 6b b6 9a e0 2c b5 61 34 12 60 31 2b 48 ab f0 93 fa ca d0 20 69 ae 96 80 93 e6 d2 29 f7 28 4e 4d ce 5a d5 7e 21 f9 5e ce 54 01 16 02 87 64 9b 9c f6 e7 66 03 a0 d4 b2 c8 fd 49 01 e3 28 04 26 21 83 bf c0 3a 45 b7 69 1a 54 f5 cc 22 2d 8e 22 06 1a 11 6f 7c 07 d2 88 27 25 0f 43 c9 6b 8b 5f 33 21 29 c1 ac 9c 30 55 54 81 36 27 e7 eb 0f 88 26 8d a9 d7 dc b3 27 cd 13 2b 4c 94 8c db 15 67 0e 60 8b 7a 2d 9d 13 c8 99 58 0d ac 5d cd 28 73 8d 09 7e 4b af 25 82 cd 31 ea 57 5e 5b d7 f2 ff 62 a0 2f 01 67 ad e2 09 cf e3 64 8a dc 0e 52 80 c3 4d 99 e3 05 06 4f 7d ee 14 f7 af 34 01 cf 3a 1c 1d b8 17 59 89 1c ac 05 e7 c3 49 3f 57 5b 1c a7 4e c5 1a d4 9b d9 88 91 b9 67 08 d9 0a f8 21 49 5d b2 57 92 ee c1 b4 48 af 48 7d 60 b9 0a d3 08 25 42 19 cd 24 6e Data Ascii: 'Gk,a4`1+H i)(NMZ~!^TdfI(&!:EiT"-"o\|'%Ck_3!)0UT6'&'+Lg`z-X](s~K%1W^[b/gdRMO}4:YI?W[Ng!I]WHH}`%B$n
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 03 95 97 1a 41 15 e1 23 5f 53 61 2f 82 67 c7 c8 ad b1 31 fb 95 27 7c d4 c7 9e 6d dd 79 df de 7b fd 9f 59 67 6f cb 06 fd b6 f5 07 6d db df eb 45 03 c7 5e cf ff 3b 34 6f 6c ed 11 ac df fc 6f ff 57 bb fc fd 7f 62 5b ab 37 03 40 b9 ec 7a 8e 51 77 bf 67 e3 0d df 83 46 cc 46 f3 4c d4 e5 33 9f b7 f9 63 17 ad bb bb 6f df fb dd 7f 14 63 76 7a 8e 6a 18 92 13 9e 8d c2 3e f6 89 42 58 8d 6c 26 59 5e 0f a5 f9 f7 1c e8 f8 7a fc c6 6f fe e7 b6 d7 36 fb e1 ef ff 3f b6 bb b9 19 2a cb 2b ff 5a e3 0d 8e c4 c1 b9 8e f6 14 e1 a7 23 37 d1 93 b3 31 c0 1a 23 97 7c 58 af 27 58 3b cb d4 68 b6 ec d0 a1 05 7b ee b5 5f b3 23 4f be 64 8d b9 45 5b 9b 38 67 8f 7b 93 36 18 f6 38 68 76 34 95 01 a2 1e 3b 4a db 5b 8c 6b 61 16 4b 63 c8 03 69 72 79 e6 e2 84 72 6f 8a b1 28 f6 5c a5 fb 70 4a eb Data Ascii: A#_Sa/g1'\|my{YgomE^;4oloWb[7@zQwgFFL3cocvzj>BXl&Y^zo6?*+Z#71#\|X'X;h{_#OdE[8g{68hv4;J[kaKciryro(\pJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49768	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	675	OUT	GET /Bookappointment/Property/fc467042-6800-4049-83c5-910869ceffef HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:29 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: wAw/uv2CST8AFGhS/JlnSrQ+9hhaY2AwYxkYFdskU8J5uH8sPmbM9sNRJCh8+xZkw6kPMFVu+c1X94kWQyKlww== x-amz-request-id: GF915Q9A2T7HZV9W Date: Mon, 21 Oct 2024 22:39:29 GMT Last-Modified: Tue, 17 Sep 2024 07:35:36 GMT ETag: "d99b5c3ed8dda3eedc62918e4bd78716" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: 4Lb5ryGKnkHEU297Re2.cFZUAM0eFSwi Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 577902 Connection: close
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 02 8a 08 06 00 00 00 cb 16 a9 a6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 8b 96 6c cb 52 1d 56 d5 fb 0e f9 ff 3f 41 3c 0c 32 fa 0e 21 63 59 16 36 b6 8c 7d 01 01 06 84 87 3c 64 69 5c 71 9f a7 db 23 63 ce 19 31 23 32 57 55 f5 3e 1b 6c 5f 4e c3 3d bb bb 6a ad 5c 99 91 f1 9c 11 19 eb fe 7f fe f8 9f 7f 7c 7c dc 6e f7 fb fd 76 ff f8 b8 c5 1f f1 ff f8 77 fd e4 ef 77 fc 1d 5f 7d 7c dc d6 9f 1f b7 b7 f5 07 ae c5 07 fa cf ed 76 cf 01 30 c6 fc f9 78 1b 9f e0 9a 8f fb 3d c6 8f b9 1c 7f 34 11 7d b9 46 5f 73 b8 df d6 ff c5 7c ec e7 c3 2f f7 35 e9 da 3b a6 7a fd 3c 2e 3b ae 69 23 db 1f 73 4e f8 ea fe f1 7e 7b 0f c2 14 59 6a d6 1a ef 3d c7 89 f9 af 9f f7 8f db 3d 96 f2 01 Data Ascii: PNGIHDRsRGB IDATx^lRV?A<2!cY6}<di\q#c1#2WU>l_N=j\\|\|nvww_}\|v0x=4}F_s\|/5;z<.;i#sN~{Yj==
2024-10-21 22:39:29 UTC	509	IN	Data Raw: af ba 87 28 e0 d8 9b e9 60 4d 9a f3 8e 48 35 de 36 d5 5a 9c 7a a2 23 e9 4d 36 7b 80 ad 1e 37 01 ce 1a 8a 44 cf 14 2d 9d af fa 29 a5 2b ca 96 9c 8e 8d 76 23 1e 52 7b c1 4b d4 d6 96 37 95 03 d5 c1 ea b7 6d b8 60 00 00 20 00 49 44 41 54 30 e8 97 55 ed 8d bb bf 00 86 6f d8 3d 06 8b 9a 0e 4e 46 0b 76 a8 0c 02 4b 4f 3e 8f a7 95 02 5a 1e 4a ea 8a 75 6c b1 e5 cd 8b 21 21 54 80 ce 9e c5 27 73 67 9e b7 70 b5 ca d3 c3 f8 a9 bc 26 4c c9 d9 00 ba 91 d1 ee 15 c4 a0 c9 f3 19 03 cd 80 3b 93 ab de 0a 52 ba 89 7f c5 c0 7c 8d 79 f8 d4 3d 9e f3 f2 65 6e 5a 70 56 4b 76 3f a4 8a 56 7a e4 75 39 97 57 72 11 a9 1f e6 21 a6 83 d2 97 32 79 a1 a2 0e 7b ba 00 df 4a 13 94 71 b6 fd 4e 87 49 09 c9 f2 5e 1c fa 7c 9d de 6e b8 31 f8 e4 01 1c e3 24 96 66 5f 9e 72 88 f5 5c 7f 75 af 1b 01 29 Data Ascii: (`MH56Zz#M6{7D-)+v#R{K7m` IDAT0Uo=NFvKO>ZJul!!T'sgp&L;R\|y=enZpVKv?Vzu9Wr!2y{JqNI^\|n1$f_r\u)
2024-10-21 22:39:29 UTC	7885	IN	Data Raw: 5f 83 8e d5 b5 4e c6 65 cc 1d 9b 75 49 b4 5a 02 e1 3a 70 fc b9 b0 ef 14 25 7c 5b 83 fe c2 3c 4b 7b d5 91 86 d4 34 fc 45 b2 e2 3d fa cd 3b 46 5e cb ae 75 a3 73 5d 99 f0 6c bb b7 ef 5b 1e 7c 7e eb da 8c ee b4 5e d8 92 97 4e c9 98 73 1e f6 a5 d2 4d c4 86 89 cf a7 43 4b 83 72 8c 6c db fc 24 a8 57 8a 7b 27 85 23 96 4a 0b 40 79 76 95 5b e6 c1 bf a8 85 24 b2 36 f6 61 03 5b 32 12 87 4c 24 ad a5 8d f5 70 39 a9 32 a2 6d 5c 57 d1 56 a7 e3 29 45 53 68 4a 07 88 4b f1 15 fe 02 90 69 e9 9a 98 96 3b 26 d0 c0 a0 87 55 5b 53 99 2a 55 26 bd b3 50 2f 84 0e 39 f1 16 ec b6 ad 17 a4 1d 96 8c 46 2b cd 4f 15 bf 9d 8a 70 35 9f b6 a3 7a 24 03 84 76 dc eb d3 52 70 be a1 4b ba 20 7f ba 40 6e 45 14 d7 27 bb 38 3d 0e d7 53 ae dc cd ac c8 dc a1 f1 6e a0 1f 2f eb 20 07 83 cf e6 f4 b0 cb Data Ascii: _NeuIZ:p%\|[<K{4E=;F^us]l[\|~^NsMCKrl$W{'#J@yv[$6a[2L$p92m\WV)EShJKi;&U[S*U&P/9F+Op5z$vRpK @nE'8=Sn/
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 73 96 d2 07 18 0e 54 e5 8b 61 c4 10 5c 56 63 1a 18 b1 61 a9 8b 29 52 08 73 6f 95 8f 45 38 9d be a5 c6 89 79 24 71 e8 2c a5 58 f1 0b 9f e3 5c c3 f6 72 0f 42 f1 04 c0 b1 d9 25 bb f1 6e 86 03 80 ae 20 ba ef d3 28 8c 88 31 ab 70 69 a6 56 1a 6d c8 65 be b4 56 03 91 c8 06 f9 31 8f 74 75 83 5c 2f 8d ee 08 05 f6 da e4 42 70 6f a2 3c c2 91 7a 9d 41 4a 82 b6 d0 fa 83 68 c8 66 f6 0f 46 b2 f6 b6 25 7e 4a ae c4 e1 6e 04 5b b5 70 cd 5c d2 98 f3 0a 27 b4 76 c1 fb 44 c8 5f 4d 04 2c b5 48 5d 0f d8 a6 69 24 fe b1 f3 92 22 5b 39 87 d2 d7 72 58 4a 6b e8 48 9a 38 c7 d3 62 76 95 e4 32 64 4f 3b a4 54 15 af a3 33 54 77 b9 3d d5 c4 79 fc 31 15 c5 ee a7 79 6a d7 1d a4 5c bc c9 24 8f ad 99 12 1c cc 73 9a cc b7 34 e6 90 c1 6e 40 e5 65 66 e4 94 9a 4d 7c dd af 87 d2 c3 9b 67 11 b7 ae Data Ascii: sTa\Vca)RsoE8y$q,X\rB%n (1piVmeV1tu\/Bpo<zAJhfF%~Jn[p\'vD_M,H]i$"[9rXJkH8bv2dO;T3Tw=y1yj\$s4n@efM\|g
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 01 42 39 40 d8 f1 34 0a e2 4b fd b9 16 fe 3c 06 7d c3 26 08 65 5c eb 17 aa 2e 93 ce ac f2 c9 9f e5 b1 4d a7 6d 3e 9b 7b 29 aa 25 62 59 d2 54 dd e6 b2 1a ec f3 ed 9d bd b6 b5 73 d0 f6 f6 f6 db c6 e6 4e 9b 5a c2 a7 1f 17 60 61 40 e5 74 a0 85 77 76 0f 1c f4 b9 50 aa 50 d5 17 e1 19 4b 49 68 05 d0 c4 8a 33 59 dc e5 6a 4c d4 b0 26 df 57 5a 37 c0 3d 76 2b 57 8d eb c6 af ae 19 3e 5d 95 cc f8 76 1a 03 74 bd 92 96 30 ee 3b 02 da 15 63 c6 a8 f3 21 a6 75 20 3d e2 b1 43 97 5e b1 f5 c3 e1 c4 34 0a d0 91 94 27 b6 5b fa b2 5d 57 b6 36 04 e6 2f aa 73 30 62 39 31 57 53 df f0 d2 74 58 0c 9c aa 02 96 e1 75 29 e9 64 cc 8c a2 28 71 a2 ba fc ac 75 31 e3 d8 b4 cd d3 aa 94 c1 0d 50 4f 6f cf b7 21 1b c4 a4 8b 97 25 65 78 57 3e 5c 3d b8 23 2e 8b c4 a9 59 18 09 56 7a 85 0d 20 6f 3b Data Ascii: B9@4K<}&e\.Mm>{)%bYTsNZ`a@twvPPKIh3YjL&WZ7=v+W>]vt0;c!u =C^4'[]W6/s0b91WStXu)d(qu1POo!%exW>\=#.YVz o;
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 41 1d c3 7c e1 0e d4 0d d6 27 3d d0 8a 30 4e 4b 84 21 32 58 de 35 26 35 9e e5 0b 44 b9 80 0b d3 8d d8 9f f5 aa db 54 f6 04 ed 3a 7d 4d 73 3c 94 b9 d4 57 cc 88 2f 61 8f cb 8c fa cb 3e 87 01 82 7c 09 61 c7 9a 53 ca e9 f2 36 33 d1 db a2 a7 fb 81 99 f9 c2 9e 54 ed df cb fd 22 3d ad cf 27 ef fd f1 ef 86 ac 16 ec 1f 51 90 57 49 c3 7a 2d 77 15 c0 bc af 52 2f 86 f7 82 d2 c6 89 62 f4 b4 ca 25 75 0d eb d6 af 8b 24 b2 d5 85 ad d6 75 f7 22 d1 19 90 68 d1 8a 4d 13 09 63 72 02 a4 08 78 49 27 5e 02 d7 a0 4b fa 04 b1 ba d0 35 59 cc 8d 95 42 b1 28 d1 43 8a 20 da a6 96 d8 39 ee a5 19 ac 71 75 41 98 95 44 24 85 af 58 b3 ea c2 a1 14 14 fe 4b ba 1f 14 b8 8d 20 4f 1e 8b 84 30 3d 31 0c 00 b4 4b f5 ae cd 3e 1e 7d 47 49 66 14 60 5f 41 6d 43 8d 5b 07 8b c4 ca 58 87 77 7a dd a0 d0 Data Ascii: A\|'=0NK!2X5&5DT:}Ms<W/a>\|aS63T"='QWIz-wR/b%u$u"hMcrxI'^K5YB(C 9quAD$XK O0=1K>}GIf`_AmC[Xwz
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 1e e0 c1 f3 dd 9a 2c 36 6e 7c de 10 3f 57 96 26 1d af c8 28 dd d8 dc 6e af bd f6 a6 27 ac 6d 6f ef b4 ad ad 9d b6 b1 63 e7 ad e7 5c c0 42 e5 46 2e f4 71 28 f8 32 6d 32 0e 10 c3 ed 15 5f 35 29 fd 2b fe 3f a2 f8 a4 c0 c6 e7 d3 23 4a b2 bc 63 6c 59 75 11 09 5c 85 b6 77 15 c2 86 43 5e b7 59 94 96 9e 52 8d 93 50 1e e2 19 f9 8d b5 50 0b 04 95 e0 a1 71 eb 4e 52 73 c3 c4 3d 02 1d 5f 1c 53 a6 58 f7 a4 cd bc a4 05 93 1b b4 e4 0c cf b0 e6 14 1e da 98 19 ad 3e 6b 77 ee 3f 68 6f be f5 cd f6 77 ff cb bf d5 0e 6e 58 90 ed a4 4d ed 58 59 3b 1c c6 e8 f3 f3 45 3b 3b 3d f1 4e 54 e8 46 75 de 96 ab 45 db da dc 6a f3 8d 79 5b fa 41 44 ad 9d b7 59 7b 70 34 6d 3f fe ab c7 6d 6b 72 da b6 e6 73 07 74 93 2f 6f 5a 61 7f 0b d8 a9 47 33 4e a7 72 1a cc 64 52 b6 eb eb 37 f4 0a e5 8d e5 Data Ascii: ,6n\|?W&(n'moc\BF.q(2m2_5)+?#JclYu\wC^YRPPqNRs=_SX>kw?hownXMXY;E;;=NTFuEjy[ADY{p4m?mkrst/oZaG3NrdR7
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 74 36 65 29 96 22 36 1d 4b 67 2c d3 39 e2 d9 a6 44 d0 84 c0 b3 c5 7d 33 9a b7 01 3a 16 d9 b6 54 88 4c f2 c1 26 c6 46 f4 26 2e 91 b1 8e ed 37 31 e0 11 ef 46 10 f7 2f d0 83 97 17 ae 23 f9 70 f8 09 cb d3 6c a3 5b 2f 75 6b c3 ea de f8 cf e7 8f 01 f8 8b a3 87 ed f1 bd 4f da d9 d9 49 fb f6 1f fd 61 bb f3 c9 3b 2e c0 9e a0 e4 c9 e8 8c 79 33 bf cc 46 aa 96 80 be 86 be 1b e9 71 aa 8c c1 37 34 b2 63 dd bc 99 6d f8 29 62 48 9e 9a b5 db 5f f9 5a db df bb 99 16 9e 5e 5f 09 b5 34 37 25 68 88 03 86 ff 2c 8b 2b 93 6e 48 7b 61 cd b8 51 62 4a eb da ae 87 c6 5c e9 f1 94 ae 50 dc a3 9e 55 d9 d4 ba 4d 78 e9 f2 48 22 38 d3 59 bb d0 4f 64 89 22 76 86 fb 0d e3 e6 94 b8 fe 97 fe 2f 16 d2 87 e6 4a 13 00 b2 a6 1d 35 ee 6d 64 a6 fa ba 71 50 8d 20 ef 28 65 3b c2 0d 5c 65 ad c3 60 6d Data Ascii: t6e)"6Kg,9D}3:TL&F&.71F/#pl[/ukOIa;.y3Fq74cm)bH_Z^_47%h,+nH{aQbJ\PUMxH"8YOd"v/J5mdqP (e;\e`m
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 26 98 02 4c cf af 22 57 28 20 57 9e c6 7c 39 8d 0f ff f2 0f dd 5d b1 18 82 f5 4b d7 71 fd cd df 64 df f9 a7 8f 0e d0 69 b7 d0 6a d4 30 1a f4 90 68 56 df 1f 27 33 4b 48 a4 97 b5 47 46 58 b0 43 f5 ad 04 d0 ed 0d f0 f3 bf f9 73 7c 7a e3 07 68 d4 4f 78 bf b9 fc 2a a7 a0 09 6d 2a 1a cc 18 e5 a9 39 cc ce ad 73 5d 75 d1 80 34 f8 47 05 85 01 8d bb 93 e1 66 87 96 95 1e 91 d0 f2 0e ad 30 3a 26 ec 01 0b b4 5c ff a8 f0 d8 c7 be 15 48 4e e9 17 1c 80 04 e7 3e 52 40 93 34 21 e0 83 93 94 86 2f a4 05 a5 e9 7f 99 04 ba 9d 3e c7 03 70 4e 21 85 1f 24 53 ac 5d 91 40 25 8a 66 38 e8 4b 9f f6 a1 a4 25 10 c0 fb 76 ae 3e 40 cc 07 fa 84 2a 8b 02 0d 0b 5e 55 5c 22 c1 24 81 95 c6 d3 8c 85 5d c7 2e 4f 04 d8 ce b0 d8 cd 12 0e ad bc 38 e8 47 b7 28 70 74 e9 45 73 b1 b3 0a 58 2c 4b dc 3a Data Ascii: &L"W( W\|9]Kqdij0hV'3KHGFXCs\|zhOxm9s]u4Gf0:&\HN>R@4!/>pN!$S]@%f8K%v>@*^U\"$].O8G(ptEsX,K:
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 2a 32 0b 56 29 f1 60 7b 2d 60 c8 2c 68 b3 7d 04 9d c2 35 f0 51 d7 3c 4f 15 50 9e cd 8a be 93 bd 7c 61 ba a3 8e 37 5a 9d df fc ae 76 93 4c bd 12 4a 3e 3c 3d ce aa 74 58 13 cc 49 3f 68 fe 4f af b8 a9 2b c4 3d 89 23 f4 dc 21 34 65 28 ec f9 ec 2c 7d dd 75 39 9f 7e 7c ee bc 3a e7 ab 29 af 3a 88 e0 15 2c 4e 22 3d c3 45 08 ba a7 d9 5d d7 9a d8 4c 9c a9 52 c0 47 3f 66 d9 cb bb 0d 1a 03 35 c5 2d 94 bf 2f 3e b2 df 98 41 65 90 34 e8 2a 7a ba c3 53 ea 16 58 49 06 79 b8 cb a6 b1 5f ab 42 25 d8 aa 2e 03 e7 af f5 fc 78 a8 32 3b f0 56 46 c5 9d 1d 1f fa a0 3e fb 78 2c 84 cf 28 14 0b 3f 94 cd 3a 67 3d ab b6 c2 c6 4a 90 95 db ac d7 d1 ea b6 f9 21 64 fd 6e 3f dd c2 87 ef df c0 ce f6 b6 53 96 b8 dc a9 ae af 73 07 28 88 53 a1 94 52 a9 8c 42 81 ac 6a 89 7b 3a 77 f1 12 be fa 8d Data Ascii: 2V)`{-`,h}5Q<OP\|a7ZvLJ><=tXI?hO+=#!4e(,}u9~\|:):,N"=E]LRG?f5-/>Ae4zSXIy_B%.x2;VF>x,(?:g=J!dn?Ss(SRBj{:w

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 29ddfe47-801e-008c-25b4-237130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223928Z-178ffc65759s2lrrn1hbsvp3a8000000091g00000000efux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 79de2ff4-a01e-006f-75b4-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223928Z-178ffc65759ztcbhzhemfn92pw000000094000000000g22f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:28 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6ba7c2f1-c01e-0034-11b4-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223928Z-178ffc65759dpzf5dzapequ9n000000008vg00000000t2b1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:28 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:28 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 000b1e82-501e-007b-35b4-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223928Z-178ffc65759ph9lb1wbddceht400000008vg00000000eg68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:28 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f1cdf84c-c01e-00a2-7eb4-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223928Z-178ffc657594b2ghbgpuphudcn000000092000000000bucr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49764	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	739	OUT	GET /Content/property_assets/js/map-script-3.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:29 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 4031 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:28 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "65214b3b8bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:57:29 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:29 UTC	3595	IN	Data Raw: 0d 0a 2f 2f 20 37 2e 20 67 6f 6f 67 6c 65 20 6d 61 70 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 4d 61 70 20 28 29 20 7b 0d 0a 09 69 66 20 28 24 28 27 2e 67 6f 6f 67 6c 65 2d 6d 61 70 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 67 6f 6f 67 6c 65 2d 6d 61 70 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 09 2f 2f 20 67 65 74 74 69 6e 67 20 6f 70 74 69 6f 6e 73 20 66 72 6f 6d 20 68 74 6d 6c 0d 0a 20 20 20 20 20 20 20 20 09 76 61 72 20 53 65 6c 66 20 3d 20 24 28 74 68 69 73 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 09 76 61 72 20 6d 61 70 4e 61 6d 65 20 3d 20 53 65 6c 66 2e 61 74 74 72 28 27 69 64 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 09 76 61 72 20 6d 61 70 4c 61 74 20 3d 20 53 65 6c 66 Data Ascii: // 7. google mapfunction gMap () {if ($('.google-map').length) { $('.google-map').each(function () { // getting options from html var Self = $(this); var mapName = Self.attr('id'); var mapLat = Self
2024-10-21 22:39:29 UTC	436	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 74 3a 20 69 6e 64 65 78 5b 30 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6e 67 3a 20 69 6e 64 65 78 5b 31 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 57 69 6e 64 6f 77 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 68 74 6d 6c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 20 20 20 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 09 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 20 20 0d 0a 09 Data Ascii: lat: index[0], lng: index[1], infoWindow: { content: html } }); }); } });

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49778	216.58.212.174	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	493	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:29 UTC	745	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 22:39:28 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CPQD; Domain=.google.com; Expires=Sat, 19-Apr-2025 22:39:28 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 22:39:29 UTC	633	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6c 62 2c 6f 62 2c 70 62 2c 71 62 2c 77 2c 73 62 2c 74 62 2c 76 62 2c 77 62 2c 78 62 2c 7a 62 2c 44 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 Data Ascii: DX-License-Identifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,lb,ob,pb,qb,w,sb,tb,vb,wb,xb,zb,Db;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=St
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 72 6e 20 61 3b 74 72 79 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a Data Ascii: rn a;try{var b=function(c){return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 63 5d 3d 64 5b 63 5d 29 7d 7d 3b 0a 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 64 6f 63 75 6d 65 6e 74 3a 62 3b 76 61 72 20 63 2c 64 3b 62 3d 28 64 3d 28 63 3d 22 64 6f 63 75 6d 65 6e 74 22 69 6e 20 62 3f 62 2e 64 6f 63 Data Ascii: c]=d[c])}};Wa=function(a){var b=arguments.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){b=b===void 0?document:b;var c,d;b=(d=(c="document"in b?b.doc
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d Data Ascii: \|a==Object.prototype)return a;a[b]=c.value;return a};qb=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.M
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6f 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b Data Ascii: a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a};_.y=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ob(a)};throw Error("d`"+String(a));};
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 65 60 22 2b 61 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 44 62 3d 7a 62 3b 0a 5f 2e 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 78 62 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 44 62 29 44 62 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: oto__=b;if(a.__proto__!==b)throw new TypeError("e`"+a);return a}:null}Db=zb;_.z=function(a,b){a.prototype=xb(b.prototype);a.prototype.constructor=a;if(Db)Db(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropert
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 4b 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 68 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 4e 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 47 28 67 29 3a Data Ascii: eturn{resolve:g(this.K),reject:g(this.o)}};e.prototype.K=function(g){if(g===this)this.o(new TypeError("h"));else if(g instanceof e)this.N(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.G(g):
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 71 2c 72 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 71 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6d 28 71 28 75 29 29 7d 63 61 74 63 68 28 42 29 7b 6e 28 42 29 7d 7d 3a 72 7d 76 61 72 20 6d 2c 6e 2c 70 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 71 2c 72 29 7b 6d 3d 71 3b 6e 3d 72 7d 29 3b 74 68 69 73 2e 4c 64 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 Data Ascii: .reject)}catch(m){l.reject(m)}};e.prototype.then=function(g,h){function l(q,r){return typeof q=="function"?function(u){try{m(q(u))}catch(B){n(B)}}:r}var m,n,p=new e(function(q,r){m=q;n=r});this.Ld(l(g,m),l(h,n));return p};e.prototype.catch=function(g){ret
2024-10-21 22:39:29 UTC	1378	IN	Data Raw: 74 69 6f 6e 20 62 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6c 29 7b 76 61 72 20 6d 3d 74 79 70 65 6f 66 20 6c 3b 72 65 74 75 72 6e 20 6d 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6c 21 3d 3d 6e 75 6c 6c 7c 7c 6d 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 76 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 70 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b Data Ascii: tion b(){}function c(l){var m=typeof l;return m==="object"&&l!==null\|\|m==="function"}function d(l){if(!vb(l,f)){var m=new b;pb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49766	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:28 UTC	738	OUT	GET /Content/microsites_assets/js/jquery-ui.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:29 UTC	317	IN	HTTP/1.1 200 OK Content-Length: 539425 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:29 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "3ba029228bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:56:46 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:29 UTC	3593	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-ex
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 09 7d 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2f 20 45 78 74 65 6e 64 20 77 69 74 68 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 74 6f 20 63 61 72 72 79 20 6f 76 65 72 20 61 6e 79 20 73 74 61 74 69 63 20 70 72 6f 70 65 72 74 69 65 73 0d 0a 09 24 2e 65 78 74 65 6e 64 28 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 7b 0d 0a 09 09 76 65 72 73 69 6f 6e 3a 20 70 72 6f 74 6f 74 79 70 65 2e 76 65 72 73 69 6f 6e 2c 0d 0a 0d 0a 09 09 2f 2f 20 43 6f 70 79 20 74 68 65 20 6f 62 6a 65 63 74 20 75 73 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 70 72 6f 74 6f 74 79 70 65 20 69 6e 20 63 61 73 65 20 77 65 20 6e 65 65 64 20 74 6f 0d 0a 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 Data Ascii: }};// Extend with the existing constructor to carry over any static properties$.extend( constructor, existingConstructor, {version: prototype.version,// Copy the object used to create the prototype in case we need to// redefine t
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 09 09 09 2f 2f 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 6a 51 75 65 72 79 20 69 6e 73 74 61 6e 63 65 0d 0a 09 09 09 69 66 20 28 20 21 74 68 69 73 2e 6c 65 6e 67 74 68 20 26 26 20 6f 70 74 69 6f 6e 73 20 3d 3d 3d 20 22 69 6e 73 74 61 6e 63 65 22 20 29 20 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 74 68 69 73 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 09 09 76 61 72 20 6d 65 74 68 6f 64 56 61 6c 75 65 3b 0d 0a 09 09 09 09 09 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 24 2e 64 61 74 61 28 20 74 68 69 73 2c 20 66 75 6c 6c 4e 61 6d 65 20 29 3b 0d 0a 0d 0a 09 09 09 09 Data Ascii: // return undefined instead of the jQuery instanceif ( !this.length && options === "instance" ) {returnValue = undefined;} else {this.each( function() {var methodValue;var instance = $.data( this, fullName );
2024-10-21 22:39:29 UTC	1812	IN	Data Raw: 09 09 6f 70 74 69 6f 6e 73 20 3d 20 7b 7d 3b 0d 0a 09 09 09 70 61 72 74 73 20 3d 20 6b 65 79 2e 73 70 6c 69 74 28 20 22 2e 22 20 29 3b 0d 0a 09 09 09 6b 65 79 20 3d 20 70 61 72 74 73 2e 73 68 69 66 74 28 29 3b 0d 0a 09 09 09 69 66 20 28 20 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0d 0a 09 09 09 09 63 75 72 4f 70 74 69 6f 6e 20 3d 20 6f 70 74 69 6f 6e 73 5b 20 6b 65 79 20 5d 20 3d 20 24 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 20 6b 65 79 20 5d 20 29 3b 0d 0a 09 09 09 09 66 6f 72 20 28 20 69 20 3d 20 30 3b 20 69 20 3c 20 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 69 2b 2b 20 29 20 7b 0d 0a 09 09 09 09 09 63 75 72 4f 70 74 69 6f 6e 5b 20 70 61 72 74 73 5b 20 69 20 5d 20 5d 20 3d 20 Data Ascii: options = {};parts = key.split( "." );key = parts.shift();if ( parts.length ) {curOption = options[ key ] = $.widget.extend( {}, this.options[ key ] );for ( i = 0; i < parts.length - 1; i++ ) {curOption[ parts[ i ] ] =
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 73 28 20 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 2c 20 63 6c 61 73 73 4b 65 79 20 29 3b 0d 0a 0d 0a 09 09 09 2f 2f 20 57 65 20 64 6f 6e 27 74 20 75 73 65 20 5f 61 64 64 43 6c 61 73 73 28 29 20 68 65 72 65 2c 20 62 65 63 61 75 73 65 20 74 68 61 74 20 75 73 65 73 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 65 73 0d 0a 09 09 09 2f 2f 20 66 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 74 68 65 20 73 74 72 69 6e 67 20 6f 66 20 63 6c 61 73 73 65 73 2e 20 57 65 20 77 61 6e 74 20 74 6f 20 75 73 65 20 74 68 65 20 76 61 6c 75 65 20 70 61 73 73 65 64 20 69 6e 20 66 72 6f 6d 0d 0a 09 09 09 2f 2f 20 5f 73 65 74 4f 70 74 69 6f 6e 28 29 2c 20 74 68 69 73 20 69 73 20 74 68 65 20 6e 65 77 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 63 6c 61 73 73 65 73 20 6f Data Ascii: s( currentElements, classKey );// We don't use _addClass() here, because that uses this.options.classes// for generating the string of classes. We want to use the value passed in from// _setOption(), this is the new value of the classes o
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 22 20 3f 20 69 6e 73 74 61 6e 63 65 5b 20 68 61 6e 64 6c 65 72 20 5d 20 3a 20 68 61 6e 64 6c 65 72 20 29 0d 0a 09 09 09 09 09 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 2f 2f 20 43 6f 70 79 20 74 68 65 20 67 75 69 64 20 73 6f 20 64 69 72 65 63 74 20 75 6e 62 69 6e 64 69 6e 67 20 77 6f 72 6b 73 0d 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 68 61 6e 64 6c 65 72 20 21 3d 3d 20 22 73 74 72 69 6e 67 22 20 29 20 7b 0d 0a 09 09 09 09 68 61 6e 64 6c 65 72 50 72 6f 78 79 2e 67 75 69 64 20 3d 20 68 61 6e 64 6c 65 72 2e 67 75 69 64 20 3d 0d 0a 09 09 09 09 09 68 61 6e 64 6c 65 72 2e 67 75 69 64 20 7c 7c 20 68 61 6e 64 6c 65 72 50 72 6f 78 79 2e 67 75 69 64 20 7c 7c 20 24 2e 67 Data Ascii: " ? instance[ handler ] : handler ).apply( instance, arguments );}// Copy the guid so direct unbinding worksif ( typeof handler !== "string" ) {handlerProxy.guid = handler.guid =handler.guid \|\| handlerProxy.guid \|\| $.g
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 61 70 69 2e 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 70 6f 73 69 74 69 6f 6e 2f 0d 0a 20 2a 2f 0d 0a 0d 0a 2f 2f 3e 3e 6c 61 62 65 6c 3a 20 50 6f 73 69 74 69 6f 6e 0d 0a 2f 2f 3e 3e 67 72 6f 75 70 3a 20 43 6f 72 65 0d 0a 2f 2f 3e 3e 64 65 73 63 72 69 70 74 69 6f 6e 3a 20 50 6f 73 69 74 69 6f 6e 73 20 65 6c 65 6d 65 6e 74 73 20 72 65 6c 61 74 69 76 65 20 74 6f 20 6f 74 68 65 72 20 65 6c 65 6d 65 6e 74 73 2e 0d 0a 2f 2f 3e 3e 64 6f 63 73 3a 20 68 74 74 70 3a 2f 2f 61 70 69 2e 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 70 Data Ascii: * Released under the MIT license. * http://jquery.org/license * * http://api.jqueryui.com/position/ *///>>label: Position//>>group: Core//>>description: Positions elements relative to other elements.//>>docs: http://api.jqueryui.com/p
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 74 3b 0d 0a 09 74 61 72 67 65 74 4f 66 66 73 65 74 20 3d 20 64 69 6d 65 6e 73 69 6f 6e 73 2e 6f 66 66 73 65 74 3b 0d 0a 0d 0a 09 2f 2f 20 43 6c 6f 6e 65 20 74 6f 20 72 65 75 73 65 20 6f 72 69 67 69 6e 61 6c 20 74 61 72 67 65 74 4f 66 66 73 65 74 20 6c 61 74 65 72 0d 0a 09 62 61 73 65 50 6f 73 69 74 69 6f 6e 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 74 61 72 67 65 74 4f 66 66 73 65 74 20 29 3b 0d 0a 0d 0a 09 2f 2f 20 46 6f 72 63 65 20 6d 79 20 61 6e 64 20 61 74 20 74 6f 20 68 61 76 65 20 76 61 6c 69 64 20 68 6f 72 69 7a 6f 6e 74 61 6c 20 61 6e 64 20 76 65 72 74 69 63 61 6c 20 70 6f 73 69 74 69 6f 6e 73 0d 0a 09 2f 2f 20 69 66 20 61 20 76 61 6c 75 65 20 69 73 20 6d 69 73 73 69 6e 67 20 6f 72 20 69 6e 76 61 6c 69 64 2c 20 69 74 20 77 69 6c 6c 20 62 Data Ascii: t;targetOffset = dimensions.offset;// Clone to reuse original targetOffset laterbasePosition = $.extend( {}, targetOffset );// Force my and at to have valid horizontal and vertical positions// if a value is missing or invalid, it will b
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 09 09 09 68 6f 72 69 7a 6f 6e 74 61 6c 3a 20 72 69 67 68 74 20 3c 20 30 20 3f 20 22 6c 65 66 74 22 20 3a 20 6c 65 66 74 20 3e 20 30 20 3f 20 22 72 69 67 68 74 22 20 3a 20 22 63 65 6e 74 65 72 22 2c 0d 0a 09 09 09 09 09 09 76 65 72 74 69 63 61 6c 3a 20 62 6f 74 74 6f 6d 20 3c 20 30 20 3f 20 22 74 6f 70 22 20 3a 20 74 6f 70 20 3e 20 30 20 3f 20 22 62 6f 74 74 6f 6d 22 20 3a 20 22 6d 69 64 64 6c 65 22 0d 0a 09 09 09 09 09 7d 3b 0d 0a 09 09 09 09 69 66 20 28 20 74 61 72 67 65 74 57 69 64 74 68 20 3c 20 65 6c 65 6d 57 69 64 74 68 20 26 26 20 61 62 73 28 20 6c 65 66 74 20 2b 20 72 69 67 68 74 20 29 20 3c 20 74 61 72 67 65 74 57 69 64 74 68 20 29 20 7b 0d 0a 09 09 09 09 09 66 65 65 64 62 61 63 6b 2e 68 6f 72 69 7a 6f 6e 74 61 6c 20 3d 20 22 63 65 6e 74 65 72 22 Data Ascii: horizontal: right < 0 ? "left" : left > 0 ? "right" : "center",vertical: bottom < 0 ? "top" : top > 0 ? "bottom" : "middle"};if ( targetWidth < elemWidth && abs( left + right ) < targetWidth ) {feedback.horizontal = "center"
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 3d 20 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 4c 65 66 74 20 2d 20 6f 66 66 73 65 74 4c 65 66 74 2c 0d 0a 09 09 09 09 6f 76 65 72 52 69 67 68 74 20 3d 20 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 4c 65 66 74 20 2b 20 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 20 2d 20 6f 75 74 65 72 57 69 64 74 68 20 2d 20 6f 66 66 73 65 74 4c 65 66 74 2c 0d 0a 09 09 09 09 6d 79 4f 66 66 73 65 74 20 3d 20 64 61 74 61 2e 6d 79 5b 20 30 20 5d 20 3d 3d 3d 20 22 6c 65 66 74 22 20 3f 0d 0a 09 09 09 09 09 2d 64 61 74 61 2e 65 6c 65 6d 57 69 64 74 68 20 3a 0d 0a 09 09 09 09 09 64 61 74 61 2e 6d 79 5b 20 30 20 5d 20 3d 3d 3d 20 22 72 69 67 68 74 22 20 3f 0d 0a 09 09 09 09 09 09 64 61 74 61 2e 65 6c 65 6d 57 69 64 74 68 20 3a 0d 0a 09 09 09 09 09 09 30 2c 0d 0a 09 09 09 09 61 Data Ascii: = collisionPosLeft - offsetLeft,overRight = collisionPosLeft + data.collisionWidth - outerWidth - offsetLeft,myOffset = data.my[ 0 ] === "left" ?-data.elemWidth :data.my[ 0 ] === "right" ?data.elemWidth :0,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49775	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	439	OUT	GET /Bookappointment/Property/1a22c8ef-71e4-459b-9b38-cec3ca239794.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:29 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: SIROdY2KHChi57s8riJh1+84WHgs62QokG+1AUPHa5AgowYVeN/OlI++rOp1YoJuwdwtfWM5lykh3WEqUqRXoA== x-amz-request-id: 8HFTRHV0ADMB08ZF Date: Mon, 21 Oct 2024 22:39:30 GMT Last-Modified: Tue, 17 Sep 2024 04:26:27 GMT ETag: "75cc7fb67071a88b82f280c78bb89b7b" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: P1pvR4edTLrZaRjVi2dztOb_eVBbrAp9 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 212797 Connection: close
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 a1 05 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:29 UTC	417	IN	Data Raw: 22 f1 0d ef 89 5b e1 df d9 3f b4 ef 5b 4d 9a d6 d2 61 73 e6 f9 4d 03 4a aa d2 29 30 49 f3 6d 00 e0 10 48 20 9f a3 a8 00 a2 bc 1f f6 f1 ff 00 82 8b fc 3b ff 00 82 74 78 53 c2 ba b7 c4 15 f1 2c e9 e3 4d 69 3c 3d a3 da e8 5a 4c 9a 9d dd e5 eb a3 3a 44 b1 47 f3 12 db 48 00 02 49 20 01 93 5e 45 a3 ff 00 c1 7c 3e 03 c3 af 69 d6 9e 30 b3 f8 af f0 b2 d3 56 bb 8e c2 d7 56 f1 c7 80 75 3d 17 4a 79 e4 38 48 da ea 48 bc a8 b2 7f 8a 46 55 1d 49 03 34 01 f6 ad 15 f3 8f ed a3 ff 00 05 44 f8 73 fb 0b fc 45 f0 8f 84 fc 53 a5 f8 ff 00 5f f1 17 8d ec ee af f4 ad 3f c2 9e 1b b8 d6 ee 26 86 d8 c6 26 72 90 02 c0 2f 98 a7 a7 4a e6 fe 07 7f c1 61 3c 09 f1 ef e2 ce 87 e0 fd 37 e1 c7 ed 03 a4 5f 6b d7 1f 66 86 f3 5c f8 6d a9 69 da 7c 0d b4 b6 66 b8 91 02 46 bc 75 63 8c 91 eb 40 1f Data Ascii: "[?[MasMJ)0ImH ;txS,Mi<=ZL:DGHI ^E\|>i0VVu=Jy8HHFUI4DsES_?&&r/Ja<7_kf\mi\|fFuc@
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 00 0a 07 e1 a4 7e 22 fe cd fe d6 df ae 68 da 37 d9 fe d1 e4 63 fb 43 54 b5 d3 fc cd db 5b fd 5f da 7c cd b8 f9 b6 6d ca e7 70 00 ee a8 af 36 fd a8 3f 68 29 7f 67 bf 04 69 77 1a 77 87 ee 7c 59 e2 6f 14 6b 16 de 1d f0 f6 8d 0d c2 db 2d fd fd c6 f2 9e 6c c4 37 93 6f 1a 47 2c d3 4a a9 23 24 50 c8 cb 1c 85 42 1f 12 b4 ff 00 82 a2 cb e0 ef 11 6a 5e 1f f8 99 e0 58 3e 19 f8 93 46 f0 ce b5 ad dc 5b ea 9e 21 55 b4 bf b8 d3 ee 21 89 21 b0 b8 92 08 be d7 6f 71 1c e9 24 77 0a 8a 46 19 1a 10 ea e1 40 3e b6 a2 be 2b b3 ff 00 82 c1 a5 dd cf c3 ff 00 f8 b7 73 7d 93 c6 df 0a 20 f8 8b 3d d2 eb 5b a2 d2 af ee 74 bb dd 52 d7 45 27 ec ff 00 3b c9 6d a6 6a 2f e7 7c bb 45 ba 93 11 f3 06 3c e3 e2 1f fc 1c 4b e1 8f 06 fe cc 9f 0a 3e 26 58 fc 38 d6 35 6b 6f 1e 41 72 35 fd 20 6a 0d Data Ascii: ~"h7cCT[_\|mp6?h)giww\|Yok-l7oG,J#$PBj^X>F[!U!!oq$wF@>+s} =[tRE';mj/\|E<K>&X85koAr5 j
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 92 f6 25 7f 32 ca 29 56 d2 73 13 c9 90 db 55 5f cb 77 54 35 f4 df f8 29 0d dd c7 c3 1d 23 e2 6d ef c2 3f 1b e8 ff 00 07 b5 96 b7 91 3c 4b 7b 77 62 97 76 76 53 ba 24 5a 9d c6 9e 26 32 c7 64 de 62 3e ec b4 c9 11 de f0 a0 0c 00 07 d3 f4 57 8d fc 1b fd b5 7c 39 f1 8f f6 ad f8 cf f0 8a de d6 ef 4f f1 17 c1 69 74 91 a8 4b 70 eb e4 ea 30 ea 16 11 de 47 2c 3d f1 1e f2 8e 0f dd 3b 0f 47 5a a5 fb 00 fe dd 9e 1d ff 00 82 87 7c 17 d5 3c 79 e1 4d 37 51 d3 f4 2b 3f 11 6a 1a 15 a3 5e 15 df 7f 1d ac 81 56 e9 42 f4 8e 55 2a ea 0f 38 61 40 1e e3 45 78 3f c2 8f db db 43 f8 af fb 71 7c 45 f8 1f 6f a1 6b 36 7a 8f 80 6c 21 bd 8f 59 9b 6f d8 35 b3 b2 d9 ae e2 b7 23 92 d6 c6 f6 cd 24 cf f1 4d 8e c6 b1 3f e1 e0 f7 97 9a 5c fe 2e d3 fe 17 78 af 53 f8 51 6d ad 9d 0d bc 53 6d 77 6c Data Ascii: %2)VsU_wT5)#m?<K{wbvvS$Z&2db>W\|9OitKp0G,=;GZ\|<yM7Q+?j^VBU*8a@Ex?Cq\|Eok6zl!Yo5#$M?\.xSQmSmwl
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 7f 86 2e 6e 6c af e5 7f 10 34 8d a8 3d 8c 57 10 49 04 8b a7 5a 9d b0 5c 02 22 27 e6 8e 52 c5 75 7e 1e 7e da 1e 36 f1 47 ec d5 e1 9f 8e 7e 28 f8 a1 79 e0 8d 3b c4 1f 10 17 4d 3e 1e 3e 0e 37 fa 0d ae 9b 06 b8 34 49 2c a5 9e de d6 5b a8 a7 ba 90 19 22 9e 49 d1 12 59 e2 5d ad 1c 52 17 fa 7b 56 fd 84 be 16 f8 8b 53 d5 af 35 4f 0f 5d eb 13 f8 86 c6 1d 2f 5a fe d2 d6 ef ef 53 5e b3 85 e5 78 ad af 92 59 d9 6e e0 43 3c f8 8e 70 e8 04 ae 31 86 22 af 78 8b f6 2d f8 59 e2 cf 10 4b a8 ea 1e 09 d1 ee 1e e7 51 b7 d6 2e 6d 4a b2 d8 5e 5f 5b ed f2 2f 26 b4 0c 2d e6 b8 8f cb 8f 64 b2 46 ce be 5a 61 86 c5 c0 07 cf df f0 45 8f da 4f e2 97 ed 53 fb 29 78 13 c6 3f 12 ac be 27 cd 7b af 78 5a db 50 97 5c d6 a3 f0 bc 1a 1e b5 71 21 1b a4 b3 8b 4d 93 ed 91 f0 09 02 e6 28 86 d2 78 Data Ascii: .nl4=WIZ\"'Ru~~6G~(y;M>>74I,["IY]R{VS5O]/ZS^xYnC<p1"x-YKQ.mJ^_[/&-dFZaEOS)x?'{xZP\q!M(x
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: b3 3c 3b 0c 77 33 ec c1 6c 57 d3 1e 22 fd b3 b5 2d 7f c7 1a e6 8b f0 c7 e1 d6 b3 f1 3a 3f 0a 43 6b 2e b3 a8 da 6a b6 5a 7d 9c 32 dc 5a c7 79 15 a4 0d 3c 81 a6 b9 6b 59 ad e6 db b5 62 0b 73 16 e9 41 62 07 23 ab 7f c1 56 7c 27 a0 ea 30 db 6a 1e 0f f1 e6 91 79 7b e0 cb 3f 14 d8 e9 1a a6 9a 6c 75 bb bb bb bd 49 f4 cb 6d 18 59 4a 43 0b d9 2e 94 20 cb 79 67 78 6d fb 3e 7a 00 ed 3f 6b 8f 02 f8 b7 f6 92 fd 86 75 dd 12 c3 c3 b3 69 be 21 f1 4e 99 68 35 2f 0d dd df 5b 89 de dd a5 85 f5 0d 33 ed 28 ed 0a cd 25 b0 b8 b7 59 56 4d 8a ee ac 1c 01 b8 72 df b0 7f c0 ed 53 e1 77 c5 8f 89 ba dd bf 80 7c 43 f0 c7 c1 3e 28 b6 d1 fe c1 a0 78 83 57 b5 d4 f5 39 35 3b 75 bb 4b db d3 25 bd dd da 24 32 40 da 74 48 86 e0 9d d6 b2 b6 c4 df 97 f4 3f da 73 f6 96 bf fd 97 3f 64 8f 13 7c Data Ascii: <;w3lW"-:?Ck.jZ}2Zy<kYbsAb#V\|'0jy{?luImYJC. ygxm>z?kui!Nh5/[3(%YVMrSw\|C>(xW95;uK%$2@tH?s?d\|
2024-10-21 22:39:29 UTC	1776	IN	Data Raw: af f8 63 e3 9e 9f e2 7d 7f 44 ba 9a 24 5d 43 c3 ba 97 8d ed bc 4a f7 44 4a c0 49 07 d8 27 ba 88 80 49 79 2c a7 89 43 38 da 75 7e 23 7f c1 3a 08 9f f6 8e d4 7c 37 f0 d7 c3 56 ba cf 8b 3c 4b e1 dd 4f c1 f7 36 b0 d8 db ca 63 b1 b5 d2 99 e4 85 b7 0f b3 98 ee ad ee 5b e6 d8 4b a9 60 0e e0 4f bd f8 af f6 84 37 bf b6 ce 87 f0 bb c2 f6 fa 34 9a c6 9b a0 9f 14 78 d3 50 bc b6 77 6d 37 47 77 9a 0b 3b 68 99 59 71 71 71 74 ae eb b8 b2 24 56 73 96 4d d2 46 6b 6e 0f db 6b e0 cd cf 84 b5 5d 7e 3f 8b 9f 0c 64 d0 b4 13 66 ba 9e a4 be 29 b1 36 9a 71 bc 45 7b 41 34 be 6e c8 fc f5 74 68 b7 11 e6 06 52 b9 04 50 07 cc 7a 3f ec 1f e2 8f 10 fe de fe 19 f1 77 89 fc 15 a7 ea 7e 0e d1 fc 6d e3 2f 10 79 f7 b3 da 5c 47 0a de d8 e8 f1 e9 f3 f9 25 cb 16 69 6d 6e 36 fc 85 a3 31 86 21 72 Data Ascii: c}D$]CJDJI'Iy,C8u~#:\|7V<KO6c[K`O74xPwm7Gw;hYqqqt$VsMFknk]~?df)6qE{A4nthRPz?w~m/y\G%imn61!r
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 10 a1 b7 c8 2f 9e ce 05 9d d5 9c a5 ed ca 65 81 2b 5e f9 e0 58 74 dd 7b fe 0a 07 ad 78 5b c6 fe 47 c3 df 06 5c 78 f7 4d d3 ae fe 1a 0d 5c a6 91 1e a3 06 8f 74 fa 5d da 18 da 38 65 b5 d5 c9 67 58 3c b5 49 65 d2 95 25 43 30 92 25 fd 16 f0 e7 c0 9f 04 78 3a 1b 98 f4 8f 06 f8 57 4b 8e f7 67 da 12 cf 49 b7 80 4f b1 83 a6 f0 a8 37 6d 60 18 67 a1 19 15 73 c4 7f 0a bc 2f e3 19 2f 1b 57 f0 de 83 aa b6 a3 1c 70 dd b5 e6 9f 14 e6 e9 23 25 a3 59 37 29 dc 14 92 54 1c 80 49 c5 00 7e 64 7e ce 3a ef 84 7e 23 fc 7a f1 57 84 be 2d f8 d2 6b 7f d9 ef c2 d6 1e 27 7f 84 b3 5e 78 b6 ea db 4c d7 b4 d8 2e d1 35 3b e3 a8 0b 80 d3 c9 a6 e7 c9 b7 95 a5 2f 04 12 3c 91 91 b7 cd af 9a fe 21 7c 47 f8 dd 37 c1 4f 8d 72 a7 8c bc 4b 6d e2 1f 8d be 12 d2 f4 9b 9b 8b ab b9 a1 9b 49 4d 03 c2 Data Ascii: /e+^Xt{x[G\xM\t]8egX<Ie%C0%x:WKgIO7m`gs//Wp#%Y7)TI~d~:~#zW-k'^xL.5;/<!\|G7OrKmIM
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: ad 62 cf 42 b3 f1 b7 8e 7e 35 78 5f e2 2e a9 a6 da ea 06 7b 6d 23 4d d2 ef 34 78 96 dd 67 64 4f 36 55 b1 d2 95 db 08 03 4b 23 aa 92 30 c7 d4 be 2b fe c1 1e 15 f8 8b f0 c3 c7 9a 0c 5a d7 c4 28 e5 f1 c7 87 b5 4d 02 66 d4 3c 77 ae 6a 96 70 2d f5 ac b6 ee e2 d2 e2 f1 ed fe 51 29 2a 3c bf 97 03 6e dc 0a f7 3a 28 03 e1 8f 00 7f c1 3d 35 9f 88 57 23 4a d7 3e 1d f8 3b e1 1e 86 3e 16 6b 5f 0e f5 f9 fc 3d 7f 1d d4 de 2c 9f 51 5b 48 c4 df bb 8a 32 d0 40 b6 f7 32 23 5c fe f8 bd df 0a 9f bc 2f e8 1e 0f f8 59 f1 8f e3 0f 8c be 0a db 7c 47 f0 f7 87 3c 3d a7 fc 20 bc 6d 6f 58 d4 ec 35 81 78 be 29 d4 e3 d3 6e b4 f8 3e c9 10 8d 5e 1b 62 6e e5 b8 63 31 57 52 91 46 15 c1 77 1f 53 d1 40 1f 33 78 9f e1 d5 c7 c1 ef f8 2a 6e 97 f1 32 54 9a 5f 0e fc 54 f0 3c 3e 02 b8 9a 38 99 c6 Data Ascii: bB~5x_.{m#M4xgdO6UK#0+Z(Mf<wjp-Q)<n:(=5W#J>;>k_=,Q[H2@2#\/Y\|G<= moX5x)n>^bnc1WRFwS@3xn2T_T<>8
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 57 76 76 b2 cf 29 9e 3f 34 11 e5 5b 19 65 91 25 1b 56 30 cc c3 68 c8 f2 ef 82 5f 09 ff 00 63 ff 00 d9 e7 e2 06 87 e3 bf 05 6b 7f 0d 74 5d 62 cf c3 b6 3e 08 d2 ef 62 f1 af 9b 6f fd 9f 6f 0c ad 6b 6e 91 bd d3 42 f2 88 52 76 12 ed 33 3a 89 89 76 05 cd 7c 31 fb 58 7c 16 f8 87 e2 7f f8 69 bf 0e 69 1a 77 c7 6d 5b 55 d7 3c 6f e2 cd 67 4c f0 70 f8 7f 70 7c 27 aa d9 cd e1 39 ad 53 52 8b 54 1a 70 32 5c 99 18 a4 30 ad fb ac 92 a4 4a 2d cb 36 e1 ed 1f 09 fe 24 dc 78 12 c7 f6 7c d5 75 5f 10 fe d6 5f 10 6d 3c 05 e2 1b 6b 8d 73 4e f1 17 c1 0d 4e d8 78 66 36 f0 ae bb 63 9b 54 b1 f0 ed a4 f7 2b f6 9b 98 21 63 ba e3 68 68 d8 95 04 b9 00 f7 1b 6f 81 ff 00 b1 b7 c3 5d 6f 44 f1 ad bf 88 3e 1f 78 72 1b 79 65 f1 3d 9b c1 f1 06 4b 2d 1b 50 f2 35 0b 8b a1 79 35 aa de 2d a5 dc 76 Data Ascii: Wvv)?4[e%V0h_ckt]b>booknBRv3:v\|1X\|iiwm[U<ogLpp\|'9SRTp2\0J-6$x\|u__m<ksNNxf6cT+!chho]oD>xrye=K-P5y5-v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49776	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	435	OUT	GET /Bookappointment/Property/27679c1f-0391-4dd3-b767-bc38f04cf61f HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:29 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: QxO2Tzs7CMwCRV1/P66i8t7g2BCAYYHcbADswUc0MZG7Vtu6XJmAqM9lGUS9w2Dp6ANPF7tqh9+KKLKwbIGSXQ== x-amz-request-id: 8HFNT26C07PRRYGA Date: Mon, 21 Oct 2024 22:39:30 GMT Last-Modified: Thu, 26 Sep 2024 07:52:53 GMT ETag: "136d2ee60c3fd9397bbe8837205dc582" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: fWvAw.oxOdlYDe28JvQDO09bdpCYtmX1 Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 422955 Connection: close
2024-10-21 22:39:29 UTC	8395	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 43 00 00 01 8e 08 06 00 00 00 94 a7 07 6c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e d4 bd f9 b3 ed 69 56 d6 b9 f6 3c ef 33 df 9c 87 ca ac 64 06 11 b5 b5 15 9a 62 50 68 0d a8 46 50 41 1a d0 fe a3 fa 07 5b 6d 86 42 24 a2 0d 43 da 46 71 88 56 81 82 2a aa 90 a2 90 29 a9 ac ca ca cc 3b 9f 69 cf f3 ee f8 3c cf bb f6 bd 45 60 90 45 24 d1 7a 88 22 ef bd 67 ef ef f0 be eb 5d c3 b3 9e b5 56 65 bf df ef e3 bf 81 9f 1f ff f1 1f 8f 2f 7e f1 8b d1 ef f7 62 bb dd 46 b5 5a 8b 6a b5 1a 9b cd 26 f2 11 2b 95 4a 6c b6 db 68 b7 5a b1 5a ad 82 bf f3 99 46 a3 11 eb f5 2a 56 ab 75 54 2b 95 68 b5 db 71 7d 7d 1d 77 2e ee c4 ed 78 14 d5 88 d8 c7 3e ea f5 46 d4 ea f5 a8 55 ab b1 58 2c f4 7d ee b5 db Data Ascii: PNGIHDRClsRGB IDATx^iV<3dbPhFPA[mB$CFqV);i<E`E$z"g]Ve/~bFZj&+JlhZZFVuT+hq}}w.x>FUX,}
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 27 25 e4 46 c4 1a 07 12 aa 53 a9 38 cf 3b 71 00 67 4a 7f 79 9d 15 08 51 9d 28 1e 1d c6 dd fc 2c 57 9e 52 42 ec 0a 38 55 ac 95 82 0e 11 5b e1 4a 29 2d e7 14 2f 51 b2 db 3d d8 71 54 25 ac 2a 3b 17 aa a8 3b 38 06 89 48 17 84 37 11 1e 0c 36 46 25 79 54 e9 08 1b 51 b3 71 54 2f 96 b2 46 4a 7b 15 a7 47 e8 5d d1 af 4e 57 3c d1 4d 4a dd 42 28 16 3a 46 c5 9d 53 b3 9c 55 e4 c6 d5 89 e8 b7 e2 1b c2 b7 2c 6d 4e 9c 72 29 7a b1 f0 f8 b2 2d 40 20 5f 9c 27 71 33 4d 25 a0 e8 24 d1 cc 4c 83 64 9b 0c c9 a9 b8 66 e6 b9 a4 7e e3 fd 91 c3 9b db 91 a8 06 19 b0 29 2b a0 72 6b 07 ba 6c 40 1a 6b 9e df 67 c9 84 fc 56 d3 7c 26 64 0e c7 5c 95 48 65 2f b9 8f 7a 9f c9 71 23 e8 28 dc 98 d2 b2 24 fb 0b 65 99 bf fa 5e a9 07 95 1d 35 e9 da 82 78 f2 3b 57 60 c1 79 c5 d9 7a a2 3b b0 19 ec 1d Data Ascii: '%FS8;qgJyQ(,WRB8U[J)-/Q=qT%*;;8H76F%yTQqT/FJ{G]NW<MJB(:FSU,mNr)z-@ _'q3M%$Ldf~)+rkl@kgV\|&d\He/zq#($e^5x;W`yz;
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 43 03 41 d7 2b aa 47 2a 31 18 b6 e2 d1 03 0e 2e 8a 1e 47 61 17 43 a5 4b 30 f2 f4 c7 99 c6 92 b9 55 dd 5a 3c ba 99 c4 72 ba 8d 37 5e 3d 89 d9 76 1f 93 d1 4c 2d e1 fb 0c fa 8a 6a d4 2b 28 83 aa 86 f9 6d 97 5b 29 8e 7b f7 af e2 ce b3 83 58 2f 39 00 ed b8 bc be a1 79 90 e7 eb 0c 3b 1a b5 81 93 85 72 61 06 cf 78 3e 8d f5 7a 1f ad 0e b0 f8 36 d6 d3 88 dd 9a ce a5 ad 18 dd ce e2 d9 97 07 f1 f8 d1 9a d1 9a 9a 8d 46 c9 eb 7a b7 8c f9 74 13 b5 76 2b 1a 9b 9a 88 c0 08 6b af 57 d1 d0 bc c9 7c 12 9b 55 3d 3a cd 7d dc 7f b0 8c 3b a7 9d e8 9d b4 a3 d3 ec c6 e5 15 95 6f 11 cd 1a 8a b5 11 93 d5 34 5a b5 56 d4 2b db a8 02 63 4f 16 f1 e8 c1 34 be f2 b5 5e 70 57 06 39 4e 47 f5 e8 1e 77 62 39 65 98 2a 9d bf 49 45 c2 a1 c2 a8 6c e3 fe dd 59 f4 ba 4e 91 5c dd de c4 f8 72 16 2f Data Ascii: CA+G1.GaCK0UZ<r7^=vL-j+(m[){X/9y;rax>z6Fztv+kW\|U=:};o4ZV+cO4^pW9NGwb9eIElYN\r/
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 95 a1 47 13 05 fb ea 91 a0 74 83 6b 45 84 fc 69 82 0a 3f b3 9c 11 9c 48 e3 9e c6 42 73 1d 6b c2 62 9b da bb 0d 10 a2 fe 8f fa 49 09 bb 56 5e 47 64 64 14 db cb e9 63 1b d4 60 0a 73 2b 52 93 52 d2 13 c8 e2 10 9c aa b6 a8 62 6c 64 b8 88 06 93 12 36 cd a2 f1 07 a1 c0 6c 27 ab 67 56 05 23 c7 d4 f9 f0 9e 49 8b 57 a9 43 95 7c 42 ed 0f 3c 83 f8 4c 70 3f e6 f4 02 47 f6 f9 0c f3 73 4a 3b b8 a0 cb 37 5b 85 1c c0 67 98 31 0d 2c eb 72 4d 78 3e f2 f5 78 8e f4 a6 4b 1c 9e 0f d6 91 2d 35 f9 7c 3c e7 a9 5d 13 09 c6 3a 54 9c ef 9d 9f 91 f7 f0 f2 93 4b 0c 92 d7 e1 e8 1e 1c cb c3 e5 9d a7 f0 d3 cf fe 07 ff 72 c0 d0 0f ff 96 e9 e8 14 c7 77 de 94 fc b1 a7 3e fe 0b d2 3e fa 71 5f 3f 6e 9a ec cb 7f f6 5f e3 6c fa ae 1c 06 8e c7 48 82 14 95 5a 80 24 4c 91 f0 30 1f d7 f1 68 e7 d3 Data Ascii: GtkEi?HBskbIV^Gddc`s+RRbld6l'gV#IWC\|B<Lp?GsJ;7[g1,rMx>xK-5\|<]:TKrw>>q_?n_lHZ$L0h
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: c1 f8 d9 2d 69 21 4a ba 38 a9 14 de 7f 16 72 14 60 57 2b 02 e4 79 6f 37 4c f0 c6 f4 90 40 8c 45 04 d7 26 af a5 04 ec f2 b9 60 db dc 76 71 2d ff 6f 51 c1 ed 1f 39 56 46 da c7 70 4f ff 37 3f d0 5e b1 28 e3 9a 10 a7 69 b6 55 39 b0 c2 7d 9a e0 40 23 3b 44 56 47 b1 d7 c2 82 c9 80 89 ca 50 93 10 5c 46 30 c5 b1 bc 07 95 04 bf 0e 8a 5d 2c e4 fa 28 af a3 52 ae 97 1a 24 50 45 f8 06 94 6c da e7 dc 1f 64 fd f2 7a f0 b9 54 92 36 79 26 54 0c 45 86 90 7b 79 bd 21 c5 21 c1 a4 14 39 eb e4 76 16 e1 4b 16 37 74 e0 96 e7 30 53 03 24 52 a0 a8 80 5e 3e 57 d1 5c 0d 2c 48 81 22 20 5a 7d c9 bd a7 2e 47 42 54 a9 e1 62 fb 95 5a c4 42 44 fe d4 01 6d b4 6e 04 9f 72 4e b1 75 56 af ca f0 06 b5 61 6a 18 80 eb 9a fa 43 35 59 2c 53 5e 16 65 20 64 a3 09 12 3d 69 d5 f2 35 54 f1 c1 a1 9e a5 Data Ascii: -i!J8r`W+yo7L@E&`vq-oQ9VFpO7?^(iU9}@#;DVGP\F0],(R$PEldzT6y&TE{y!!9vK7t0S$R^>W\,H" Z}.GBTbZBDmnrNuVajC5Y,S^e d=i5T
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: c4 3b 89 01 a0 0f 03 15 4d 44 aa 5e 25 35 e2 b4 ce 1a c4 48 89 42 f5 30 a5 52 66 b5 a6 1b ca 4d 15 c7 5e 7e 2f b5 89 a0 61 40 b4 49 a7 fc c0 38 1e a3 f1 c8 a1 2b 32 a5 f2 69 13 c2 4a ba db c1 9c dd 84 f3 61 9b 38 37 13 44 a2 62 28 37 60 b7 37 c0 ca f0 55 58 6c aa 82 66 d5 b7 73 3f 08 9d d6 40 78 b2 80 78 c2 86 98 f3 93 e8 36 28 67 6e c2 83 f2 d7 e0 73 0e 11 4b b8 e5 67 07 1d 92 e4 ec 68 75 69 aa 1a 10 77 67 97 93 3e 35 e2 0c 88 a5 e5 0c c6 c2 1f 87 d3 3c 0b ab c9 24 49 8f cb ed 91 a0 cd 83 92 15 e5 8d 1b 37 05 2d 21 7a c1 80 21 64 34 bd 4e d4 93 a9 b9 c4 0d c0 e4 89 55 29 17 2a 2b 1e 6e 00 71 a0 af d5 a4 2d 45 f4 80 bf 93 ab 43 d2 f0 c7 67 de c4 e1 d0 7d 39 b4 87 43 3d 9e 5d fd 61 5c df 0a 0a b1 9b f7 8e 01 8d c9 48 3a 9d 91 84 87 5c 0c 09 6e 23 d1 33 be Data Ascii: ;MD^%5HB0RfM^~/a@I8+2iJa87Db(7`7UXlfs?@xx6(gnsKghuiwg>5<$I7-!z!d4NU)*+nq-ECg}9C=]a\H:\n#3
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: e9 dd 12 16 57 d7 a1 f3 98 30 96 f4 a3 d8 ac 63 3a 3c 83 70 22 88 ef 3e 7b 11 dd 3c 90 98 b1 e1 d4 93 0e 0c 7b 8a 2b 19 f5 cf 20 61 ff 08 ee 2d 2c c8 d9 a1 b8 81 aa 48 21 4d 81 08 31 8b 0b ee 33 9f a3 03 0f 75 87 b2 59 29 b2 b8 16 95 77 a0 da b7 8c 89 4c 08 f9 df 44 79 79 56 6d 14 8b f8 f3 4b 57 a0 0d 86 e8 35 1b 38 bb 77 16 9f ff f1 1f 93 d7 27 af 96 67 1c 93 3b be a7 2a a8 4d ea 1e 8d cc 5d f9 7d 99 d4 16 b4 7a 5e 92 4a 29 a0 ec 36 14 0b 45 69 ff 73 b2 d3 12 08 e1 e6 ed 45 79 26 3c bb f8 7a 6c 5d f3 8c 10 ce 92 f0 3c 7b 08 1f be 0b 87 cd 88 66 5b 83 69 58 45 a3 65 42 34 e2 83 d7 31 83 a7 ce fd eb 1f 08 bf f9 7f bd 4d c6 ab fa eb 74 86 de 5b f8 32 16 36 ee d1 f1 04 2e bb 1b 9d 6e 19 55 06 04 f3 10 8d 26 2b eb 10 56 ae eb 71 28 fe 01 d1 f4 70 79 3d 28 e5 Data Ascii: W0c:<p">{<{+ a-,H!M13uY)wLDyyVmKW58w'g;*M]}z^J)6EisEy&<zl]<{f[iXEeB41Mt[26.nU&+Vq(py=(
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 61 d5 c7 71 61 6a 0e e7 cf 5f 10 f5 0d 11 3d e1 be 59 2c e2 97 42 ee 02 b9 09 3c 95 f2 df 99 66 2e c4 54 2b e7 02 95 35 b4 d4 50 b1 b8 b4 24 68 12 4f bd e2 5a dc 67 04 ce 52 89 24 2d 19 b3 11 1f c3 ec ba 50 74 19 a9 7c 0a 7a 8b 5e 4d 0a 72 a9 2a 34 5b 1b 41 db 2e 98 4d 41 43 5c b0 1e de ca b8 09 9e e6 0b ad e3 c8 d7 e6 e1 74 94 11 09 33 17 cf 8e 76 bd 84 03 9f 31 ec 02 b8 fe 78 0f 3d 81 dc 8d 77 c8 5f 1b 11 15 af fc c9 95 a0 dc 95 84 f9 90 d7 8f 5c b1 02 8f cd 04 b3 d5 0b 53 b3 8d b5 5c 0c f1 54 1e 51 fb 67 e0 75 bb c5 7c 93 dc 12 ba a1 6f 9c f8 29 39 67 21 98 ca 9f 43 19 87 91 cd 95 04 fd 63 c1 5e 2d 99 31 d4 fb 2e 51 1a fa c2 6e f4 46 f6 cb c6 4c b9 f4 fb b6 07 10 b4 bc 15 21 fa 9f 4f 1e c7 cd db 37 61 38 1a f8 59 db 80 ac 07 e7 72 16 ac d4 6d 58 5d 59 Data Ascii: aqaj_=Y,B<f.T+5P$hOZgR$-Pt\|z^Mr*4[A.MAC\t3v1x=w_\S\TQgu\|o)9g!Cc^-1.QnFL!O7a8YrmX]Y
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: c3 e9 b5 61 fe 5c 1b a6 96 1f 30 2f e0 ce e8 15 88 32 5b 6b 03 08 32 29 38 be 90 47 d8 69 46 7f c0 8a 5c b9 05 bf e3 8d 62 28 59 a8 a2 b5 f3 7d 02 03 bf dd 45 d7 d5 be be ee 37 21 3f 46 cf 8d 8b 2f 63 02 a2 3d 7d 98 9d 9e 14 a4 80 aa b3 b7 bb e6 66 66 d0 d7 5c 79 03 74 5a ff a6 75 0f cf f5 cd ed 8d 9f a4 ec 7e c5 14 11 52 f5 cb 27 ff 0c 75 87 0a 4b bb 0f 7b 76 0e 21 e2 b8 0d 87 cf fe 57 34 1b 55 9c 3b 97 c5 4d 77 de 0a b7 1a 43 c0 d5 44 a1 9a c5 fc 72 0d bb 2b d7 c0 52 49 bf e9 ad 5c ee 13 1a f1 32 eb 6e ec 1b 37 69 39 53 c0 f0 fb bf 28 de 42 54 a6 70 a1 63 81 41 3e 0c 4f 68 86 39 1b e3 36 8c 93 79 b3 59 41 b6 78 04 26 f3 02 66 57 8b b8 6a f4 e7 71 e1 e2 0f 60 d1 d6 d0 50 eb 38 7a a4 86 81 21 2f a2 bd 8c 14 60 34 47 1b bd 81 fb d1 3f 7f 61 bd e0 63 2b b5 Data Ascii: a\0/2[k2)8GiF\b(Y}E7!?F/c=}ff\ytZu~R'uK{v!W4U;MwCDr+RI\2n7i9S(BTpcA>Oh96yYAx&fWjq`P8z!/`4G?ac+
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 3a 3a 07 dc e8 ed f6 8a 2b 2d 79 45 ce 62 08 bd cb 86 60 30 6b 28 f9 9f 82 a7 7e 15 d4 e0 21 28 26 1b e2 99 79 b8 f6 72 2b f7 aa 2f 4d dd 6e 80 72 69 1b 14 c5 06 ab e2 42 3a 12 c0 c1 91 7b b0 ac ed 12 28 ee 29 58 d2 e7 c3 58 57 70 f7 33 ff 02 c5 ae 61 7d f0 3a 58 15 2b 86 b5 1c 7e 38 ff 04 9c 6e ee 54 74 32 b4 c2 c5 cc 48 bf 21 dd f7 82 ec 7f 21 e1 d1 03 43 58 6e 3c cf 64 39 30 a2 84 d4 21 05 0e 95 61 79 7a 61 48 99 27 53 c3 73 5a 4e 50 3d a2 42 0b a9 24 ec 16 15 76 33 ad 10 4c 50 6b 06 38 6d 2e 64 b5 3c ac 26 05 2e b3 8a 6c b5 44 18 48 c2 50 8a d5 a2 44 18 50 69 37 1a 9b 91 c2 2a 19 4b c3 9c a9 60 f1 e5 49 5c b3 6c a7 38 03 d3 2a 9f 85 55 a5 be 00 af bb 03 56 8b 4f ae 07 95 2f dc 8d b1 20 a5 5c f3 bc 6d db 97 f8 b9 22 69 dd b6 fd 8d 6d 21 86 87 87 f5 d6 Data Ascii: ::+-yEb`0k(~!(&yr+/MnriB:{()XXWp3a}:X+~8nTt2H!!CXn<d90!ayzaH'SsZNP=B$v3LPk8m.d<&.lDHPDPi7K`I\l8UVO/ \m"im!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49780	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	675	OUT	GET /Bookappointment/Property/0015afb1-92d4-4cef-a624-d7433dda1593 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:29 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: Das1Qs9AUstuLM2U4gun1l/gCE4W1WejQWug9sOs+AlSTJf5DIcpfuKVZeWEWpJuzdwHOjjEiBTubq3zf9VTOA== x-amz-request-id: 8HFQVQCN0BP7AB35 Date: Mon, 21 Oct 2024 22:39:30 GMT Last-Modified: Wed, 09 Oct 2024 09:41:06 GMT ETag: "e3d27e7f46983d514a85323880b8ec60" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: tkiXouL7kOxmO9cUlcj2uW25FG20IkvQ Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 842701 Connection: close
2024-10-21 22:39:29 UTC	1443	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 32 00 00 01 ef 08 06 00 00 00 8f 0a ea f5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e 64 bd db 96 5c d9 92 5c 17 79 01 70 8e f4 ff 7f 26 91 22 3f 40 dd 7c 96 c8 2a 00 99 91 1a 66 73 da da 1b 25 8c 3e 5d 40 66 c4 be ac 8b bb b9 b9 b9 af 97 ff f3 ff fe 5f 5f 5f 2f af 8f c7 57 fe ef eb f1 f5 f5 f5 78 79 3c 1e cf c7 e3 f1 fa f2 fa 78 3e f8 f7 e3 f9 f5 e0 2f 2f 8f af af fc 34 9f cf 0f f2 1d fe fb 92 df e5 23 f9 57 ae f3 fa d2 eb e6 d3 af fd 6d be 9e ef e7 53 cf 5e 32 f7 e0 df bd f4 f5 a7 bf 7b 79 3c bf f2 54 b7 5f 71 2b 9e d1 6b f5 f7 5f 2f 8f d7 97 af c7 f3 f9 f5 f8 7a c9 df 79 e4 47 9e a3 9f 7b 3c 5e 1f 8f c7 c7 d7 57 7f c7 3d 79 a6 e7 cb 9f b7 3e 37 cc 98 bc e4 7b 79 af 0e 50 Data Ascii: PNGIHDR2sRGB IDATx^d\\yp&"?@\|*fs%>]@f___/Wxy<x>//4#WmS^2{y<T_q+k_/zyG{<^W=y>7{yP
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 7b 5e 7f 8b 70 41 aa c0 25 cf 86 63 9b 6b 67 cf 64 5d 9d 40 f2 ee f0 be f2 2c a0 98 38 c8 0b 10 bc 3e be 9e 9f 2e 91 2d f6 cb 8c 10 58 13 7c fc b9 f1 74 62 0d 30 e2 0c 71 d8 97 73 e5 3d 4f d8 1b 20 ec 3c b1 1d 30 14 c0 0e 82 ca 63 b4 b3 59 8d fe ba 46 b3 a8 3e b3 67 70 b4 5f 2f 81 4e db 73 71 40 ac b1 0c 1c 01 f8 ec 59 1c 68 c2 85 d7 02 d2 0f 03 77 be bc 27 65 8e f8 ae c1 90 cf 16 27 f8 3b 20 95 db 9f 80 be 1f 33 38 6e f0 e4 da c5 39 40 70 3c 6a 91 31 75 bf dc 82 b1 0f 75 56 fd fe e3 f1 eb eb eb f1 dd 98 b5 81 cd cb cb e3 9b e6 39 7f ff fd c4 81 66 fd 77 ac 34 ac bd c6 e7 f3 f1 f1 f5 fa f8 7c 85 3c 78 eb f7 75 52 79 b6 07 63 d8 b9 7b cd 5a 61 4d 7f 66 8f e6 67 2f 5f 8f 8f 8f af c7 8f c7 f3 f1 f1 fa 86 73 68 b0 f2 5a 67 9f f9 de fa cf 68 6f fe 1b a8 f6 f5 Data Ascii: {^pA%ckgd]@,8>.-X\|tb0qs=O <0cYF>gp_/Nsq@Yhw'e'; 38n9@p<j1uuV9fw4\|<xuRyc{ZaMfg/_shZgho
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: d7 fa ff fe fa f2 f8 7f f3 9e 9f cf c7 47 eb 1d ec f3 df a1 79 ed dc a7 68 b8 b5 0d 95 3f d1 c5 ae d2 b8 80 7e 59 d4 02 f1 74 d2 ea 07 d9 1b ed 1e b6 97 d6 ce 24 13 91 16 cf 6f 9f 64 a1 92 21 68 53 02 1d 60 9e b3 cc 62 ce 26 49 0a de 33 a4 9a 4d 79 7f 7d bc 7c 3c 1f 7f 77 de c9 8e 75 4a cd ba 85 d4 88 2d 4b 70 41 46 8f 60 ac c0 e6 f3 f9 f8 df de 1e 8f bf f2 8c cb 7f 3e 3f 1f 3f 53 78 3e 67 21 a0 78 7e 50 64 5e 31 c6 d2 db 76 ee 2a 13 da 0e 69 d4 e7 ac 1d 75 3b 54 7d 3e 1e 3f cd 06 fc db 80 22 81 d6 20 74 d6 6b 24 5e 7b ce 65 1a db 69 a6 c4 c2 00 0c 99 89 fc bc 87 75 36 d0 4d 11 7f 32 51 78 93 81 fe 38 9c 30 95 6d b0 d1 cf d8 6c 38 c9 80 7c ff f9 69 9d 02 fb 32 7b 27 b2 b0 7f a5 93 98 73 07 bb 0a 10 eb 7c ba ff 61 ef c9 de ff ae 42 2b 73 83 93 a2 ed 35 67 Data Ascii: Gyh?~Yt$od!hS`b&I3My}\|<wuJ-KpAF`>??Sx>g!x~Pd^1v*iu;T}>?" tk$^{eiu6M2Qx80ml8\|i2{'s\|aB+s5g
2024-10-21 22:39:29 UTC	15360	IN	Data Raw: c6 b6 ec d6 35 c4 79 d5 90 6d ab 42 2f 11 14 f4 11 d9 11 37 a9 c1 c5 b6 e7 aa 14 92 1b 64 c6 68 99 fd 61 5d b9 4b 0c ee 73 c5 06 3c 6a c0 33 3f 48 11 f8 7e f7 89 20 a4 ac f5 f4 d2 b2 3c bd 9e db 63 7a fa d5 3e 04 10 35 fb 69 86 a0 41 5b 5f 40 89 c6 b6 9c 0c 05 8e 7a 46 df bd 32 a3 34 3c e1 7e a0 d6 03 e7 54 29 47 c7 d2 42 4c 65 90 01 94 df 1d b7 64 39 12 c8 c4 b9 36 a3 a1 f1 4c e0 54 43 dc 71 e5 5d 22 a1 6a 76 e3 30 d8 01 09 36 d3 90 28 69 71 74 c7 29 d2 44 c8 8d 9e 2b 11 80 db ee 63 5f 48 c9 be 1e 8f df 3d c3 01 8d 7b eb 30 4e f7 32 d6 7f 9b 00 cc 41 f6 bc 8a 30 52 04 36 91 f9 74 8f b7 15 aa 20 4c b2 65 85 ef d5 dc 26 4b 91 cf 7d 7c 3e 3e 73 e4 b7 07 a9 f5 1c 9a 7a 5e de 27 13 f0 fb eb f9 08 eb 98 62 fe 38 e7 04 79 9c 3e 9e c6 06 64 f7 2a 45 3a 87 c2 f1 Data Ascii: 5ymB/7dha]Ks<j3?H~ <cz>5iA[_@zF24<~T)GBLed96LTCq]"jv06(iqt)D+c_H={0N2A0R6t Le&K}\|>>sz^'b8y>d*E:
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 08 50 1b 07 50 9c 9f 25 40 1f 35 68 1d 22 f4 18 10 fd b5 2a 25 58 d9 3e 8a 1b f5 ad 54 30 83 fb 9c f6 56 1d 54 af 5b 15 de 5c 8b 90 b7 eb 80 fc eb 94 b5 12 18 42 75 01 00 c3 81 4b f2 b3 9f 20 bf d3 2a b4 11 6b be 15 35 55 93 a2 f4 3c 19 1f 35 58 eb 3a 7d 3d 9e 5e e9 15 2d 4b 61 f6 41 7a 3c 40 ef 6c 06 f6 05 a5 2e 90 be b2 0f 5e 9d 08 84 58 1c 62 48 4d 1a e9 2f e8 be 0b b0 b5 42 32 ea d3 7e 56 10 49 bd 45 7b 25 38 0f bb 83 13 8b b1 b5 f2 08 01 9d 64 ec f8 6f 12 86 7c 67 03 57 d1 8c fc 8b a1 ce 03 57 9f 1e 7f 3c 73 26 97 6a f4 ef ac 9c a6 42 dc 04 c6 aa 08 d4 31 fc c9 8f 8a b1 f0 6c 3d e7 67 c0 e9 62 41 92 02 2a 36 00 85 54 64 14 84 f9 22 58 ce f7 75 10 ae 95 1a fa 3d 5c bc da 6f 9e ad f7 e4 c4 3f 02 7a 4b be 8c 5d 41 af a1 1c 56 42 5c f5 f0 7c 44 fc 44 cf Data Ascii: PP%@5h"%X>T0VT[\BuK k5U<5X:}=^-KaAz<@l.^XbHM/B2~VIE{%8do\|gWW<s&jB1l=gbA*6Td"Xu=\o?zK]AVB\\|DD
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 01 d6 e8 3f 76 c8 12 c6 33 4b a7 09 88 bd b4 fb 54 e3 9d c6 2a d2 95 7b 4e 14 f1 10 fb 25 c4 30 69 84 65 6f b5 de 38 29 f6 bc 2d 12 2d ef 33 0c 33 97 ae b2 c3 56 3b 90 ba 0f b8 76 01 9d 59 ff 88 b0 6c 40 70 5e e5 0c 7c ad 1a a5 20 ad e0 59 93 ef 0c f2 15 1c cb d7 d0 33 92 c4 9e 91 0e 05 fc 8c 57 62 03 7a 5f d2 17 1a 15 2f 21 91 df 2f e9 5d 1a 23 21 a0 21 be 08 a4 ed 62 e8 50 fd 8a 68 13 fd 76 bd 8f c6 30 c3 f7 b3 87 11 bf 48 d9 a3 83 b3 6f 2c 25 fc 31 40 8e 87 bf d4 b9 77 e3 d0 15 16 e8 c1 99 d0 01 22 2c 01 98 02 da be 76 e0 b0 76 f0 f9 a5 fd 8c a5 63 06 0c 4e 12 a3 4c 75 e8 b2 e9 ab 4c 9c 53 50 d2 dc e1 e9 ff fe eb fd 2b f2 87 c9 cc ab 65 6e b3 e3 90 05 c2 c3 21 f3 50 8a f6 67 a0 ea 4e 0a 3e 7c 57 73 c7 04 06 a2 8c 87 b6 04 d9 9f 80 d4 e0 26 7d 12 2d c1 Data Ascii: ?v3KT*{N%0ieo8)--33V;vYl@p^\| Y3Wbz_/!/]#!!bPhv0Ho,%1@w",vvcNLuLSP+en!PgN>\|Ws&}-
2024-10-21 22:39:29 UTC	10776	IN	Data Raw: e9 69 6b f2 2d 50 67 62 5f c0 ab 1f c5 fe d3 7c 0e e8 d3 e4 30 ef a1 2d 2f c2 ec 39 e2 31 02 22 10 a8 33 51 5d 2f 7d 28 71 4f 55 b6 ab fa df 47 66 04 bd 3c 7e 75 de d0 e2 e5 f8 20 aa 88 87 9a 3d 14 97 d3 7d 80 b3 ec 53 1e b1 08 78 03 e8 4b 4d ab 01 6c d5 df e2 8f 43 b9 c1 77 61 21 01 e4 5a ad 35 91 ad d2 5b ec 8a c2 38 ad ba e4 67 bd c3 a0 01 a2 df ee 75 3e 2c 60 45 d7 3d 09 7a 29 8d d0 bf 08 63 94 7d be 29 fd f5 13 4e a3 37 77 7e 55 0a 72 57 82 f0 d1 2e 5b 39 aa cd c8 fd 7f 7e fc eb 3b e0 06 12 da 56 04 72 0f 9f 9f 10 04 30 a1 f7 91 a8 00 68 0f aa 18 df 77 12 f4 6d b0 40 55 79 95 ba 25 2d a3 38 56 ee bb e8 0b 33 68 b2 1c a6 67 00 c3 8a 3f 34 9e 38 d5 0b 3f d7 4a 18 1c 1b 62 98 dd d5 25 4d 05 c9 f2 99 f5 b3 00 2c 99 a5 d5 bd ef d0 69 54 ed 0a 34 56 b9 cd Data Ascii: ik-Pgb_\|0-/91"3Q]/}(qOUGf<~u =}SxKMlCwa!Z5[8gu>,`E=z)c})N7w~UrW.[9~;Vr0hwm@Uy%-8V3hg?48?Jb%M,iT4V
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 28 67 56 91 8e ae 23 f7 b3 89 57 6d ab e7 d8 80 82 1c 41 25 51 41 70 9a 96 49 96 12 b3 c7 67 05 e8 68 6c a4 d0 ce e8 75 3d 13 11 2d 43 56 d4 5b 3a 34 40 24 38 c8 23 83 d6 40 07 72 59 ea 28 17 30 8a 02 15 85 d3 10 e1 5c 2d 37 9b 91 d7 c1 1f 0c 7d 48 f9 94 72 a4 f1 98 f4 94 52 30 54 45 74 9d ea c3 92 1b b9 ea 2e 00 68 c0 82 fa 05 ac a6 d6 b9 3c 36 ee e5 f9 36 10 69 48 61 a2 98 be 9b ea 33 33 98 cb 60 e6 8c 0f 0d ed 86 fa e7 86 36 6c b4 dc 06 32 2b 3a b0 5e 81 7e c0 4d f9 4b 08 67 73 70 c6 09 25 23 97 12 27 da d9 72 b4 0e 30 c8 7b a9 67 96 10 05 af ea 5c 58 77 c2 ec 33 5f c7 20 bf 09 8f 88 be 95 d9 13 8f f6 37 4c 10 f7 7e 4b 6e 5a 20 70 62 7d 39 f4 36 8b a1 2e 77 4b d8 96 b9 7b 6b fb fb 68 5d 4b 19 e4 f0 66 b2 75 2a 69 ab 6c 11 18 2e 71 bb 66 d1 94 91 a4 31 Data Ascii: (gV#WmA%QApIghlu=-CV[:4@$8#@rY(0\-7}HrR0TEt.h<66iHa33`6l2+:^~MKgsp%#'r0{g\Xw3_ 7L~KnZ pb}96.wK{kh]Kfu*il.qf1
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 01 93 35 03 74 92 04 84 30 1c 56 68 22 d4 26 d4 15 c9 54 ba d3 38 26 11 b8 a8 0f a2 ee dc e4 25 89 d7 c5 e6 73 94 fb eb f3 fb 9e 52 14 48 8a b7 9f b7 c4 26 e5 e1 a2 81 dd af f6 15 49 f1 c8 73 30 41 be 41 23 67 00 be f5 e3 f1 44 d6 30 f1 05 15 d9 d6 20 6c 20 99 eb 91 a0 a4 ca 46 72 48 45 99 67 b4 e6 88 b9 3b db fb 39 41 83 87 7c 6f 95 a0 5a d5 3a bd 65 02 14 2d 99 ff 55 1d 2b 09 2b 49 6e 92 39 93 fc 5a c1 1a 6b 2a 1a 02 03 9d a5 d2 c4 69 15 c5 da 9b 2b 41 cb 57 e3 e4 49 12 7a 09 5a 76 2f 6d 22 0f 06 15 42 ea dc ce 42 d6 37 df 05 4d c8 76 b1 d8 26 12 6b 25 c0 63 73 da 68 69 b5 91 fd 6b 20 47 60 c3 ff 96 4a d3 47 4f 43 a7 7c e8 c3 4d 6f 25 a8 33 4b ca 1b 66 2e d0 9a 86 a9 58 54 a5 27 49 47 9e 2b 9f 5c c5 ac 0e 03 e5 f9 0d cc 01 7f 16 70 28 9e 92 85 7b 8f e0 Data Ascii: 5t0Vh"&T8&%sRH&Is0AA#gD0 l FrHEg;9A\|oZ:e-U++In9Zk*i+AWIzZv/m"BB7Mv&k%cshik G`JGOC\|Mo%3Kf.XT'IG+\p({
2024-10-21 22:39:29 UTC	15360	IN	Data Raw: d5 7a 0a 4d 49 8d ac 2a 7b b7 55 11 69 18 da eb 57 9b aa 77 7d 30 84 95 3e 66 b5 5c 13 4a d5 ae 4b c3 52 bb 60 b4 fd 7d 97 2e 6c a7 33 af 97 e4 0a bc fb d2 f6 e9 60 6d 9b f4 f5 fb 6f 2a 14 47 de d8 64 73 3f a2 dc 6f fb fd 9c 31 e2 ba ed cd 9b 70 69 e4 5d ea 9d 8b 6a 8f 77 88 51 d1 70 2b 60 a4 da 0d 4e b6 3d a4 2b ee 77 0b 4d 0d 7c c3 47 6f 7f 82 72 ab 06 48 0d fc 6e 94 3f a8 15 06 56 1a f0 52 e6 fa 32 e5 f7 db e0 69 70 df 7e 20 3f fb d0 e3 8a e2 37 c8 ed 65 2d 7d 22 67 40 ce b3 48 d9 7a af e6 6c 8b cc 77 53 d8 46 fb 28 a2 c2 81 88 01 bd 14 ad 1a f0 dd 26 4c 54 bf e4 f6 93 48 60 4c 1a 80 40 b7 b2 17 84 e0 7c db be f2 b0 09 74 93 bd 1a a2 ed 49 03 4d a9 a4 e6 9f 24 4c e3 8a 1f c0 41 ee aa f7 93 b5 b2 a1 b5 ca 77 95 ad c6 50 65 d6 94 d4 1f 12 a1 9b bc ec ca Data Ascii: zMI{UiWw}0>f\JKR`}.l3`moGds?o1pi]jwQp+`N=+wM\|GorHn?VR2ip~ ?7e-}"g@HzlwSF(&LTH`L@\|tIM$LAwPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49777	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	435	OUT	GET /Bookappointment/Property/29b3f34b-2880-4e5c-990a-c73279b40889 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:29 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: 3EqKFSV1TyfgmslW4i9xhClYBPd5lgTJbcQhbQwxhYd4XG9xMJ5mCtIlhrnJTPUzqW/4OYH+f6ny4sgLx3NPzQ== x-amz-request-id: 8HFR5Y2M3MGVF897 Date: Mon, 21 Oct 2024 22:39:30 GMT Last-Modified: Wed, 09 Oct 2024 09:23:49 GMT ETag: "bb5c2a3bcf86e5dd1e847f4a223d8ff1" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: un8znrXKESU1.Gu0miyauPSEhrpM0ehY Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 435873 Connection: close
2024-10-21 22:39:29 UTC	15777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 26 00 00 01 4c 08 06 00 00 00 ff 49 77 e7 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e 64 bd d9 93 a4 77 76 1d 76 be 35 f7 a5 aa b2 f6 ae de 80 c6 32 18 60 56 8d 48 cb 94 ed b0 23 68 9a 0e d2 64 f8 c1 c1 70 58 0a 91 21 47 c8 4f 96 4c eb 6f f0 83 2c 4a d6 83 1f 1c 8e f0 8b c3 0f 1c d1 b4 25 93 a2 48 0e 97 21 67 c3 60 38 83 01 d0 00 ba 01 f4 56 5d 5d 6b ee 99 df ee 38 f7 de 5f 66 81 6a 12 d3 55 d9 99 5f 7e df 6f b9 f7 dc 73 cf bd 3f ef 7f fe e6 fd ca ab 2a c0 03 aa aa 42 09 0f 3e f8 33 e0 fb 1e ca aa 44 05 8f ff 8c ca 93 ff 05 df ec 79 1e f8 2f 01 df c7 97 f9 2f 65 09 f0 3d f6 36 79 a7 bc 4f df c0 df f9 c7 de 2e df c7 7f d7 ef f7 50 c9 ff ad be 02 5e 05 94 72 2d be ce ef 94 3b Data Ascii: PNGIHDR&LIwsRGB IDATx^dwvv52`VH#hdpX!GOLo,J%H!g`8V]]k8_fjU_~os?*B>3Dy//e=6yO.P^r-;
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 58 63 53 78 2f 72 7d 73 d8 ae fb ae 0b f7 9d bb 50 6d 88 55 15 ad 02 f0 75 9a 44 4e a5 76 6c 83 de fc 2a 1d a3 0d fe 94 b1 70 29 58 95 2d 18 f3 ef 7a e6 08 90 d2 52 6c 6d d7 aa be ca 5a b5 a9 aa c7 d2 89 0e 90 aa 84 61 0d ee 75 ce 1d 80 b1 ae be 96 f2 53 8c 60 f7 61 1a 6d 65 50 ae 95 42 f3 5e a4 25 86 91 06 d6 91 58 e6 42 f9 1b c5 38 d6 23 87 3f 4b 50 2c 63 a8 41 83 3b e8 90 e0 da cd a3 13 c5 3a f6 97 8f 22 9d be 8c 7d e1 d7 89 7e c7 f4 2b da 6c cd fc 17 6d 82 9d 9f c4 bb e2 f6 26 ab 27 c1 34 9f 57 da 33 f0 7a 25 ea a1 5e 05 5e 01 ef b7 7e e7 43 d1 d1 ca a3 ac 24 1b 4a a1 f2 50 21 49 eb b8 56 f5 76 f3 ba 51 b4 85 ad 9b 36 37 6e 0e a4 38 46 c3 08 8e 35 2f b4 4e 43 e9 47 2c e2 b2 75 e7 e0 e9 ea da 62 ec 56 ea 7f 6b fa a2 26 47 46 4e 4b 92 d7 39 3c 07 ef 8d Data Ascii: XcSx/r}sPmUuDNvl*p)X-zRlmZauS`amePB^%XB8#?KP,cA;:"}~+lm&'4W3z%^^~C$JP!IVvQ67n8F5/NCG,ubVk&GFNK9<
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: b6 56 32 84 87 0b 0d ac d5 aa e8 0f cd de 7e 14 8d 90 2b d5 e4 3f c2 49 c7 44 35 b8 c3 04 bf 26 5c 9d 11 98 e2 9c a3 90 c9 e2 d1 e3 af c9 5a 9d 53 92 fb c3 1b 99 bf 65 88 2e ce 07 ba 2f ad 8d 07 88 e3 21 06 d7 cf ef 98 0e f9 5c 1f b6 4e 38 01 98 06 75 e3 24 16 71 07 95 72 5e 0b 36 5b dc c4 3c 51 c1 64 dc b1 40 31 5f e0 ba 6f 73 87 18 ac 86 a3 9e 5a 24 8f f6 ef a3 5a 49 9b 5f 4b 2e 83 5c a6 82 d3 93 cf b0 5c 90 17 43 42 99 b5 bb e8 e9 a2 24 8d 86 78 24 80 a6 b2 c8 66 8b a0 dd 36 5b 33 54 da 24 99 28 48 42 cb d6 05 2b 79 4f 48 04 f9 fa da 90 a2 21 81 7c 75 1d 8d cd 7b d8 2b 2f b1 b3 9e c2 4e ab 89 bf fc e1 35 be ff 84 a4 e5 1b 79 cf f4 ba 97 a8 17 92 68 0f 46 68 56 73 28 e7 29 35 26 fa 92 42 b1 be 87 fa d6 1b e2 ab 3c fd ec 87 40 b9 6e 32 d0 e1 85 ec f0 0f Data Ascii: V2~+?ID5&\ZSe./!\N8u$qr^6[<Qd@1_osZ$ZI_K.\\CB$x$f6[3T$(HB+yOH!\|u{+/N5yhFhVs()5&B<@n2
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 55 c5 ac 88 73 cb 18 c5 cc 0c 9d f1 14 f3 64 01 89 d1 29 86 9c f2 ea 2c 71 43 08 4c d3 af a1 80 cb a5 e6 a2 54 6a 0d cc 27 03 0c 2e 9f ca 58 ac 3f b8 41 14 c5 a8 d7 aa 58 2e d2 a8 95 6b e8 8e 66 6a 5d 30 78 dc 3b b8 27 e2 93 48 ae 84 90 f9 20 f4 1e 34 d4 09 c9 89 55 03 42 26 b4 d1 b9 78 99 59 47 1a e8 56 2f 55 35 5d 78 7b 73 1d 83 c9 42 1c 8a 19 bd 4e 36 76 71 c3 01 76 24 9c ba 1a 86 dc 1b 2f 5b 74 f0 e9 b3 4a 3e 5b 40 21 9f d3 6c 9d eb cb 1e ba 9d 21 d6 b6 f7 51 2c c5 58 5f df 91 97 c9 a8 7b a2 a4 c7 24 80 f6 d9 ad da b0 84 90 f3 80 02 27 a7 db 3e 91 15 b6 21 12 db a8 d4 36 71 75 71 aa 43 60 c0 71 c4 fa 8c 0b 94 b2 05 0c c6 3d 94 0a 45 3c bc b7 87 5a bd aa cf 46 94 67 3c ec d9 01 17 26 42 93 93 22 49 31 89 a4 dc b4 69 0d 50 e4 01 c6 40 4e f3 34 f6 fe d5 Data Ascii: Usd),qCLTj'.X?AX.kfj]0x;'H 4UB&xYGV/U5]x{sBN6vqv$/[tJ>[@!l!Q,X_{$'>!6quqC`q=E<ZFg<&B"I1iP@N4
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 4d 23 79 b2 8d 92 64 0b e0 70 97 71 66 bc e8 88 10 24 37 11 8c 46 97 11 ca 76 81 91 44 92 dc 2f a1 18 8e 8e e8 7d a9 ce b8 e0 0f 59 45 e2 e3 57 37 0c 34 e5 92 37 15 ee 3d 62 08 59 44 36 77 ce d7 bc 48 bb 20 c5 ea eb e6 34 17 47 46 fc 9a 3a c6 66 65 1f 5f c2 bf f8 fe bd 99 15 0b 5c 00 d1 6c 71 ee 7b 83 7e 30 c5 83 93 3e da 83 c0 ad 86 5d ea 25 58 98 79 0b c6 1c 97 0e 9e da 7f 1a d4 68 3e 4a 86 30 09 64 b6 58 74 3d 7d c6 15 55 97 73 58 c8 17 1f 0f d6 3b 9f bd 87 3b 1f fd 44 c4 50 6e 94 2c 54 cc 95 cf 2a bd 62 21 87 da 52 0d c1 20 26 8f 91 fd 23 e6 b3 74 55 88 38 7b c2 6e ac 2a 54 22 1d 53 04 83 11 26 89 1c 96 ca 39 b4 5a 6d 7c ed eb 3f 83 0f 6f df c6 2c 18 a1 50 59 c6 f2 da 36 72 b3 be 3a 5e 15 37 5e 1d 5f bf 72 4d 4e a4 fc a4 c2 f5 38 2b 65 a9 a4 c3 91 f0 Data Ascii: M#ydpqf$7FvD/}YEW747=bYD6wH 4GF:fe_\lq{~0>]%Xyh>J0dXt=}UsX;;DPn,Tb!R &#tU8{nT"S&9Zm\|?o,PY6r:^7^_rMN8+e
2024-10-21 22:39:29 UTC	11800	IN	Data Raw: 60 5c 08 43 d7 78 66 f9 56 67 5c 0e 2f b2 4c de ee a3 2a 27 6b ce c1 83 08 00 98 ce 30 e8 73 74 6d 96 06 2c d6 29 07 36 af 21 2b ba 68 01 2f ec 42 0d b4 79 1c 8d 86 8e 98 f3 8c 09 4d 47 65 3e 68 56 90 a5 b3 29 23 26 73 7c ea 23 af a8 70 e3 3a 35 34 c9 a4 e0 f3 eb e4 a3 b7 e8 35 2a 38 72 2e c9 b5 7d c2 6a 85 48 c9 13 8d b7 fc 09 11 bd c3 51 8c f9 d8 c7 9f f8 e8 3c ff 12 1f 35 f2 29 b2 7a d3 10 b9 68 02 18 49 c2 a3 46 46 35 81 2f fd 88 10 3b 57 01 f3 7d fe cb ef df 8b 04 03 73 03 24 e3 9c 18 5b bb d1 9f e0 de 49 17 24 ee 14 18 f4 e4 8b d7 d5 8f 28 28 99 30 26 c2 16 2b 3b 56 d0 24 6e 19 93 3c a6 4d c3 1e fc 68 aa e4 8c 87 68 f6 eb 37 94 7b da fd db 1f e2 b3 5b 6f 61 3c 1a cc 5d 40 b9 f4 6b e5 a2 36 d6 74 2e 03 0e 25 b2 e9 0c e2 c8 e0 dd 0f df c6 68 3c 14 1a Data Ascii: `\CxfVg\/L'k0stm,)6!+h/ByMGe>hV)#&s\|#p:5458r.}jHQ<5)zhIFF5/;W}s$[I$((0&+;V$n<Mhh7{[oa<]@k6t.%h<
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 98 cf 9e 3f c1 68 b8 88 7c 2e 81 7c d1 48 87 72 4f 9c 4c f1 f2 d5 0d 60 96 04 92 69 f4 cf f7 cc f7 86 4f 68 ba 8c 74 ae 88 fd 93 73 74 fb 01 b2 b9 bc 0a 13 a1 53 dd 03 a4 13 f4 07 b1 c3 7d 7d f3 06 86 f1 1a 9e 61 11 8b d9 94 90 9e ee f9 29 96 2a 39 dc 7f 7e 84 37 ae ed 22 57 ad a3 3f 9e e1 6c 18 e0 e4 d3 1f 20 d6 3f 93 df 4a 79 79 17 ed c6 73 54 d6 5e 42 38 6c cb 31 f6 a4 71 2a 87 50 ce b0 cd 75 96 48 43 34 77 75 ad 81 77 3f 5c d7 eb ab eb d8 dd d8 c1 59 af 85 1f fc bb 1f 69 9d b1 18 e4 48 4b a3 99 58 5c d7 bb d7 eb 0b ba 5d 5d 59 c2 f2 42 4d 04 f1 27 c7 67 58 28 14 b1 b2 58 c6 b3 93 53 75 cd b9 42 5e 87 d8 68 4c 55 97 1d 6e ea c8 e3 71 dc f8 d6 bf 8f db a7 3d e4 4a 35 b4 da 1d 9c de 79 57 12 fd 99 0a cd 18 e2 e9 34 e2 c9 0c 5e bb b2 8d d5 5a 59 1d e2 8b Data Ascii: ?h\|.\|HrOL`iOhtstS}}a)9~7"W?l ?JyysT^B8l1qPuHC4wuw?\YiHKX\]]YBM'gX(XSuB^hLUnq=J5yW4^ZY
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 5a 5d d3 58 8c f7 2e 1b ed 99 c1 97 33 99 0a 60 3f 79 53 5c 60 7e ec 3a 98 38 39 c1 59 a3 8b 51 a4 a2 d1 0d bb 65 3e 30 7c 61 fd 64 17 8b 4b d7 51 c8 2d a0 d5 3e c6 4c 81 53 24 84 02 e5 62 09 e7 8d ba db bc a6 22 0a f3 7d da fd b2 8d 25 96 c8 09 c9 30 0e 46 04 c9 2c a5 dd 3b f0 87 03 cc 06 5d 94 17 97 9c eb a1 41 f6 83 4e 0b cd fa 19 e2 0b 5b 68 ef df 45 ae bc 8a 48 6e 59 0a 15 76 52 fd 67 ef e2 ac d7 45 26 3c 17 32 46 e5 15 62 1e ba bd 2e fc 41 cf a2 ca 79 38 91 64 ec a4 9c f6 30 9a b9 18 bf 7e fd f2 15 2c ad 6e e0 bd 4f 1f a3 79 7e 8c 72 dc 43 7e b1 8a bf fc fb ef c8 83 23 e5 79 0e 0d b1 83 8e cc 7c 8e cc b8 1e d6 56 16 25 05 e6 83 cc 8d 9a d7 75 a9 b2 88 28 26 68 f4 7c 0c 27 23 e7 13 64 9e 1e 22 8d ba 03 66 61 eb 06 66 cb 77 b4 61 13 31 39 ba fb 23 9c Data Ascii: Z]X.3`?yS\`~:89YQe>0\|adKQ->LS$b"}%0F,;]AN[hEHnYvRgE&<2Fb.Ay8d0~,nOy~rC~#y\|V%u(&h\|'#d"fafwa19#
2024-10-21 22:39:29 UTC	9592	IN	Data Raw: 49 76 6e 81 e4 22 04 8e af 56 b0 30 90 89 1d c5 d4 14 3c 4a fa 1c 60 38 e8 63 38 f2 e1 65 ca 98 8e ba 58 2f 2e e0 a4 79 82 85 d2 2a 36 d7 ab 28 95 37 d0 3a bb af 05 2c b6 b4 22 01 08 f7 3b 18 58 23 19 7e a6 09 9e 1c 0f 31 0f 7b b2 ba 1f 0e 5a 08 c9 d7 24 85 c9 a8 ab 87 6a 7b 7b 0b 8f 1e df 47 9f 89 c9 e3 3e 06 fe 08 55 22 33 d1 2c 7c 9f 9c 08 73 a0 5c 5b cd 01 c9 02 a6 a3 21 9a 67 0f 10 8e 56 50 ef 0d d1 6e 1c 21 1e 0b 61 ad 5a 40 32 49 d6 bb 55 da e6 3a 68 1b 14 c7 5b f5 56 1f cf 5e b6 35 26 2a 57 77 5c de 86 75 fc 5c db ad f3 5d ac 5d fd 32 ce 4e ce 11 0b 75 f5 3a 23 b9 01 a5 62 11 cd 26 47 10 f6 b3 0a 39 3a a2 52 15 33 91 b5 7b 28 9a 40 26 43 c4 24 25 9f 13 12 46 bd 6c 11 a9 e5 2d 74 7b 3e 32 18 60 79 69 51 6c 72 de 7b 5e fb 4e ab 21 a9 79 7c 61 1b dd Data Ascii: Ivn"V0<J`8c8eX/.y6(7:,";X#~1{Z$j{{G>U"3,\|s\[!gVPn!aZ@2IU:h[V^5&Ww\u\]]2Nu:#b&G9:R3{(@&C$%Fl-t{>2`yiQlr{^N!y\|a
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: cd 34 7e e1 86 44 0f 93 7e af 65 b3 62 b7 76 34 27 e5 06 3f 9b a2 52 aa 62 ad 92 51 e6 45 2a 11 47 38 e4 a1 db 1d a0 d1 1c a1 d5 69 e0 da d5 1b d8 a4 e7 08 5d 26 c3 51 9c d5 6a 38 6d b4 51 28 af 60 d0 69 88 b4 75 7a f2 02 fd 7e 13 a5 4c c2 60 44 cd c9 6d 71 9e 76 2d da 5a 7e 08 11 cf 66 98 0a d2 0b a3 db da c3 68 32 42 df 0f a1 ba b8 86 a5 52 09 a1 59 1f c9 58 1c cd b6 8f 56 b3 25 4e 84 17 4f e2 f9 71 1d 77 2e 55 50 5c 58 c6 95 ad a2 f6 4a 7a d1 9c 9c b7 b0 77 d2 42 be 50 16 c9 97 20 4b af db d6 b5 a2 e7 80 b8 23 2e 79 79 38 1c 4b bd 41 92 2b 51 01 8e bc 14 96 25 af 12 76 21 cc c1 e0 06 e4 fe 9b 09 c4 da e8 62 88 25 92 68 15 ae 61 3a 68 23 3f eb 61 e6 25 30 ee 36 d0 7c fa a1 3e 03 11 ba 1e 25 8e e8 8a 5c c9 9f 5d 2c 96 b1 b8 71 1d 7e 66 05 9d 48 5a 1b 74 Data Ascii: 4~D~ebv4'?RbQE*G8i]&Qj8mQ(`iuz~L`Dmqv-Z~fh2BRYXV%NOqw.UP\XJzwBP K#.yy8KA+Q%v!b%ha:h#?a%06\|>%\],q~fHZt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49781	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	439	OUT	GET /Bookappointment/Property/389de8b6-ff8a-45d1-b76e-52cbb5c88f77.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:29 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: mQZQE5B51lFZDfWTgYR8CBLsnu/PeRrsWyjWkEr8X8cg1Ks848Fk83CGx+a+TmxOFYfWAkNFboqQaV+haa5q3w== x-amz-request-id: 8HFZZH3EKQ6PK54V Date: Mon, 21 Oct 2024 22:39:30 GMT Last-Modified: Tue, 17 Sep 2024 04:17:20 GMT ETag: "772d2b6ef68db6cfe9f38faf550d45c5" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: IuiOkt5AYg0uJAYJM1AA6dpAOTrQRl6l Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 174638 Connection: close
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 96 05 ca 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:29 UTC	509	IN	Data Raw: 17 ff 00 d8 a5 a5 7f e9 1c 54 01 e8 95 e7 7f 1f bf e4 2d f0 f3 fe c6 db 7f fd 26 b9 af 44 af 3b f8 fd ff 00 21 6f 87 9f f6 36 db ff 00 e9 35 cd 00 7a 25 14 51 40 05 14 51 40 05 7f 3d de 2c ff 00 94 e5 fe c7 df f6 53 7e 23 7f ea 67 ae 57 f4 23 5f cf 77 8b 3f e5 39 7f b1 f7 fd 94 df 88 df fa 99 eb 94 01 f7 37 fc 1d 4f ff 00 28 dc f0 cf fd 94 df 0f 7f e8 c9 6b d3 7f e0 df df f9 47 d6 91 f5 d3 7f f4 c3 a4 d7 99 7f c1 d4 ff 00 f2 8d cf 0c ff 00 d9 4d f0 f7 fe 8c 96 bd 37 fe 0d fd ff 00 94 7d 69 1f 5d 37 ff 00 4c 3a 4d 00 7d bd 45 14 50 01 45 14 50 07 9d fe cb 9f f2 4a 67 ff 00 b1 8f 5f ff 00 d3 cd ed 7a 25 79 df ec b9 ff 00 24 a6 7f fb 18 f5 ff 00 fd 3c de d7 a2 50 07 ce da 47 fc 14 87 c3 ba c5 af 87 b6 f8 23 c7 f1 5f 78 bb 4b d2 b5 ad 12 c5 d3 4d 33 6a 36 9a Data Ascii: T-&D;!o65z%Q@Q@=,S~#gW#_w?97O(kGM7}i]7L:M}EPEPJg_z%y$<PG#_xKM3j6
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: ac a3 b3 f0 ec 87 4f 7b db f5 ba 5b b7 8e 48 e4 8e e9 ad b6 aa 69 f7 cc fb e6 56 51 6a e7 1f 34 7b f8 0d 73 fe 09 91 e1 cd 66 f3 51 ba 8f 55 16 37 be 22 3e 27 83 5e b8 b7 d3 c2 b6 a7 6b ac 5f 4f 7f 17 cb bc aa dd 5a 4e f6 fe 5d c3 07 2c 90 c8 85 02 ca 3c be a3 57 fd 93 bc 45 e2 6f 89 b6 9e 3f d4 bc 61 a1 bf 8f 34 89 2c 86 97 71 6f e1 d9 63 d2 ed e1 82 1d 46 17 49 2d 5a f1 e4 91 a4 4d 56 eb 2c 2e 13 05 2d f0 a7 63 89 00 21 d1 3f e0 a2 5e 05 d5 7c 7d ab 78 66 6b 3f 10 e9 ba bf 87 fc 37 aa 78 9b 55 86 e6 1b 73 fd 9b 1e 9d 76 6d 6e 6d a4 31 cc df e9 1b 87 98 aa b9 47 88 ac 8a e5 58 67 bf fd 99 3f 68 1d 27 f6 ab fd 9f fc 25 f1 1b 42 b2 d5 b4 dd 1f c6 3a 6c 5a 9d a5 ae a9 1c 71 de 5b a3 8c 84 95 63 79 10 38 ee 15 d8 7b 9a f9 fb c4 9f f0 49 cd 3b c6 1f 12 4f 8c Data Ascii: O{[HiVQj4{sfQU7">'^k_OZN],<WEo?a4,qocFI-ZMV,.-c!?^\|}xfk?7xUsvmnm1GXg?h'%B:lZq[cy8{I;O
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 56 c7 f6 cc fd 9a ae 26 65 8a 09 35 ad 76 cd 24 73 b5 5a 67 d1 6e 59 23 07 fb cc b1 48 40 ea 42 37 a5 00 7a a3 47 e0 4f 00 7c 34 be d2 0a f8 4b 45 f0 76 83 0f f6 65 e5 91 16 f6 da 66 9d 13 22 ff 00 a3 c9 1f 11 46 a5 25 4f 90 80 0a c8 bc 61 86 71 7e 1c f8 23 e1 77 c1 11 36 a7 e1 88 fc 2d e1 cb 5d 67 49 b4 48 fe c7 74 90 d9 7f 66 e9 f1 24 16 e9 6f 18 6f 2a 2b 58 12 54 50 b0 aa c6 be 70 38 cb e4 fc 5b f1 63 e1 a5 b7 c7 4f 18 7c 54 d3 74 fb ef 00 5f eb ed fb 41 ae b1 e1 7f 0e f8 ce 27 9b c3 9e 39 bc b0 f0 5e 99 6f 36 9d 72 51 5b 06 26 5b 99 91 82 b9 8e e3 4f 46 31 bf 94 cb 58 1f 01 fe 14 f8 3b e3 a7 c4 6f 04 fc 25 1e 05 8f e1 96 99 27 c3 df 8b 7e 0d f1 17 85 b4 fd 40 5f e9 fa 05 dc fa b7 85 be d7 1e 9d 32 85 53 6d ba e4 c9 10 45 8c 47 bb 66 c8 d9 0a a8 07 df Data Ascii: V&e5v$sZgnY#H@B7zGO\|4KEvef"F%Oaq~#w6-]gIHtf$oo*+XTPp8[cO\|Tt_A'9^o6rQ[&[OF1X;o%'~@_2SmEGf
2024-10-21 22:39:29 UTC	15861	IN	Data Raw: 8f 2f 6b b1 5e 3f 2a 2d 85 e0 75 8c cc 67 d2 fe 01 fc 20 f1 9f fc 13 67 e2 57 c5 ff 00 1c e8 5e 18 4f 8b f0 be b7 ac f8 87 c6 52 da 45 ff 00 09 26 83 e2 7b 1b 8b 85 b7 48 6e 88 f3 e1 96 ce 64 8a 1b 68 51 80 08 23 45 52 24 c3 00 7e 8b 5b 6b 76 77 ba a5 d5 8c 37 76 d2 de d9 2a 35 cd ba 4a ad 2d b8 7c 94 2e a0 e5 43 6d 6c 67 ae 0e 3a 51 65 ad d9 ea 57 d7 96 d6 f7 76 d3 dc e9 f2 2c 57 51 47 2a b3 db 3b 22 ba ab a8 39 52 51 95 80 38 c8 60 7a 1a fc a6 f0 af c4 af 8a 3f b3 af ed 2b ac 7e d2 3e 28 b2 f1 15 ce bb 69 e0 8f 06 68 5f 15 fc 17 a6 5a 19 45 dc d7 9a 34 b2 45 34 50 20 2c 2e 2d b5 72 90 8d a0 81 0d ed c6 70 17 35 f4 3f fc 11 db e0 76 bb f0 0b c5 ff 00 b4 26 95 e2 dd 5e eb 5d f1 b6 af e2 ed 37 c4 1e 28 bd 9a 40 ea fa ad f6 85 61 75 77 1c 58 e1 60 8e 59 5a Data Ascii: /k^?-ug gW^ORE&{HndhQ#ER$~[kvw7v5J-\|.Cmlg:QeWv,WQG*;"9RQ8`z?+~>(ih_ZE4E4P ,.-rp5?v&^]7(@auwX`YZ
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 8e e3 3a 9b 6f 13 6a 4f 6a cb 1e 57 72 da 4c 73 85 20 f6 fa 8f 8a fe 27 ff 00 c3 71 e8 ee 7c 11 e0 df b5 7f c2 0b 7e 04 5f f0 97 cf b0 a7 f6 85 9e 5b 7f f6 7e 73 9c 0c 6d ee 4e 78 c1 b1 f0 9f c0 1f 1c 7c 27 fb 42 7c 4e f1 ee bf e1 cf 87 9a ac de 31 3a 6e 9b a3 5b 5b 78 aa e6 11 a4 69 16 31 48 d1 5b b9 3a 79 f3 25 37 77 77 f2 b3 f1 c4 c8 b8 c2 0a 00 ea a4 f8 23 e3 79 3e 31 43 e2 e6 f1 6f c3 03 e3 18 74 69 34 78 ee bf e1 0e bf f3 56 c1 e7 49 5e 3f 2f fb 63 6e d3 2a 21 dd b7 39 00 67 b5 33 e2 5f ec cf e3 5f 8e 37 de 10 4f 17 78 db c2 f2 69 5e 13 f1 3e 9d e2 94 83 47 f0 ac f6 57 17 33 d9 4b e6 c7 19 96 5b f9 d5 50 b7 de fd d9 38 e8 47 5a f2 1d 43 c5 3f 12 ff 00 e1 eb da 44 87 c1 7e 10 fe d0 ff 00 85 4d 7c a2 df fe 12 c9 fc a3 17 f6 c5 99 2f e6 7d 83 3b b7 60 Data Ascii: :ojOjWrLs 'q\|~_[~smNx\|'B\|N1:n[[xi1H[:y%7ww#y>1Coti4xVI^?/cn*!9g3__7Oxi^>GW3K[P8GZC?D~M\|/};`
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: 96 42 f2 3b 1e 59 e4 62 72 49 a0 0e d6 8a 28 a0 02 bf 2c bf e0 f0 8f f9 43 f4 bf f6 3a e9 3f ca e2 bf 53 6b f2 cb fe 0f 08 ff 00 94 3f 4b ff 00 63 ae 93 fc ae 28 03 f5 36 bf 21 f5 3f f8 3d 27 f6 58 d3 75 2b 8b 7f f8 41 fe 3d cf e4 4a d1 f9 b1 e8 7a 56 c9 30 48 dc bb b5 20 d8 38 c8 c8 07 d4 0a fd 78 af c9 8f f8 33 a2 ca 1b 8f f8 25 b7 8b 1a 48 a2 73 ff 00 0b 37 55 19 64 04 ff 00 c7 9e 9d 40 1f 1b 7e da 5f f0 59 5f f8 25 ff 00 fc 14 1b e2 f2 78 f3 e2 b7 ec fb fb 42 78 87 c5 8b 63 16 9c d7 f0 bc 56 06 48 23 2c 63 56 4b 7d 69 23 25 77 b7 cd b7 76 0e 09 20 0c 79 17 fc 35 87 fc 11 d7 fe 8d 93 f6 8f ff 00 c1 ab ff 00 f2 f6 bf a8 5f ec ab 6f f9 f6 83 fe fd 8a 3f b2 ad bf e7 da 0f fb f6 28 03 f9 7a ff 00 86 b0 ff 00 82 3a ff 00 d1 b2 7e d1 ff 00 f8 35 7f fe 5e d1 Data Ascii: B;YbrI(,C:?Sk?Kc(6!?='Xu+A=JzV0H 8x3%Hs7Ud@~_Y_%xBxcVH#,cVK}i#%wv y5_o?(z:~5^
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: 87 9b a4 4a 8c ff 00 37 f6 4d a6 55 f5 17 d8 0e 27 63 1d a0 de 8c b2 5c 6d 68 ab f2 ef fe 0e da fd 92 fc 25 fb 39 7f c1 38 7c 15 a8 e9 89 a8 6b 5e 2b f1 0f c5 0b 79 75 9f 14 eb 93 8b dd 6f 56 27 4d d4 d8 24 93 90 36 40 87 fd 5d bc 4b 1c 11 0e 23 8d 06 68 03 ec 0d 7f fe 0d 63 fd 87 ec 74 2b d9 a3 f8 47 7e b2 43 03 ba 1f f8 4c 35 93 82 14 91 ff 00 2f 55 e3 7f f0 65 59 cf fc 12 c7 c7 be df 15 35 1c 7f e0 a3 47 af d6 ff 00 15 7f c8 b1 a8 ff 00 d7 ac bf fa 01 af c9 0f f8 32 ab fe 51 63 e3 df fb 2a ba 8f fe 9a 34 7a 00 fd 7e a2 8a 28 00 a2 8a 28 00 af cb bf da a7 fe 08 79 e3 5f 8d ff 00 14 3e 2b 5c d8 e9 1f 00 35 21 e3 ff 00 17 db f8 d6 c7 c7 fa f6 9f 3c be 38 d3 0c 53 59 c8 ba 3c 72 1b 69 56 0b 54 5b 6f 2d 66 8a 60 4c 44 a7 92 0b 99 07 ea 25 14 01 f3 af c2 7f Data Ascii: J7MU'c\mh%98\|k^+yuoV'M$6@]K#hct+G~CL5/UeY5G2Qc*4z~((y_>+\5!<8SY<riVT[o-f`LD%
2024-10-21 22:39:29 UTC	1024	IN	Data Raw: df 88 1e 3c d7 7c 53 36 a7 aa e9 96 1e 33 d2 b6 78 93 c3 96 f6 26 d2 de fa c3 53 78 22 58 a3 96 0b c9 48 0d 30 8c b7 da 15 23 f3 56 30 e7 cf 3f e0 b2 7f b4 ef 8e 7c 09 f0 e6 ef c3 bf 0b bc 41 75 e1 9d 63 c2 91 69 7e 2b f1 4e b1 6a 01 96 d7 4f 9b 54 8a ce d6 c5 32 08 12 5d ca 67 62 7b 43 63 38 c6 64 42 3d bb e0 5f ec 13 a2 fc 0b fd a0 fc 43 f1 46 1f 19 78 df c4 1e 35 f1 9d b2 5a 78 96 fb 54 fe ce 55 d7 e3 85 55 2c c4 d1 5b 59 c3 1c 66 d9 03 2c 66 05 88 b0 91 bc e3 36 10 ae 4f ed 6d ff 00 04 ac f8 33 fb 67 c5 e2 29 bc 5b a0 5e db 6b 7e 28 16 82 ff 00 59 d2 ef e4 b7 bc 90 5b 34 66 21 82 5a 23 85 89 53 e6 8c fc a4 e3 07 04 00 69 ff 00 c1 47 24 f1 fc 7f b3 73 ff 00 c2 bf 93 c6 b0 4d fd ad 64 75 e9 bc 19 0d b4 de 26 8b 48 12 6e ba 3a 6a 5c 03 13 5c 90 15 70 41 Data Ascii: <\|S63x&Sx"XH0#V0?\|Auci~+NjOT2]gb{Cc8dB=_CFx5ZxTUU,[Yf,f6Om3g)[^k~(Y[4f!Z#SiG$sMdu&Hn:j\\pA
2024-10-21 22:39:29 UTC	16384	IN	Data Raw: dd a2 47 65 68 b2 79 a6 28 6d 2c 6d ed ad 10 b4 80 33 49 e4 99 5b 6a 82 e5 54 01 4f c2 7f b2 3c de 01 f8 c1 e2 5f 15 68 5f 13 3e 20 e9 76 7e 2f f1 02 78 93 55 f0 f4 70 e8 f2 e9 97 37 02 da da d9 90 34 96 0f 76 91 bc 56 b1 06 0b 70 18 1d c5 59 73 c0 07 c2 5f b0 07 ed 45 67 f1 77 f6 71 ff 00 84 8a f7 e2 ef ed 0d aa fc 5b b4 f0 b6 bb a9 dd 59 6a 3a 4e af 0f 86 0c f0 c3 74 aa 52 e6 4b 15 b2 90 20 08 e8 12 e0 e5 d0 63 38 22 bd 6f c1 be 21 f1 87 ec 83 a5 fe ce 9f 10 6e be 28 7c 45 f1 fe 85 f1 92 fb 43 f0 87 88 bc 3b e2 4b bb 7b d8 2d ee b5 4b 66 92 0d 4a ce 41 0a 4d 14 91 dc 05 47 8c bb 46 d0 c8 c7 6a ba 06 3e d3 f0 5b fe 09 df 0f c0 df 84 30 7c 3d d3 7e 2d 7c 53 be f0 15 be 9d 79 a5 a6 85 7d 1e 84 d0 f9 17 29 32 b0 f3 a3 d3 12 e7 2a d3 33 a9 f3 7e f2 ae ed cb Data Ascii: Gehy(m,m3I[jTO<_h_> v~/xUp74vVpYs_Egwq[Yj:NtRK c8"o!n(\|EC;K{-KfJAMGFj>[0\|=~-\|Sy})2*3~

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 79de3108-a01e-006f-6eb4-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223929Z-178ffc65759xp2qhvg0ry65u8s00000008wg00000000pxyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f1cdf905-c01e-00a2-28b4-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223929Z-178ffc65759sqv7lrwy1666yds000000091000000000gm00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 5af8866b-e01e-0051-2cb4-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223929Z-178ffc65759phhh5prpzy708cn00000008xg00000000e773 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 6bdfb643-501e-008f-2db4-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223929Z-178ffc65759jpznb60zg85y41000000008w000000000bp55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49769	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	723	OUT	GET /Content/sweetalert/swal.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:29 UTC	317	IN	HTTP/1.1 200 OK Content-Length: 167651 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:29 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "d63d8ed08adada1:0" Last-Modified: Sat, 20 Jul 2024 09:54:30 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:29 UTC	3593	IN	Data Raw: ef bb bf 2f 2a 21 0d 0a 2a 20 73 77 65 65 74 61 6c 65 72 74 32 20 76 31 31 2e 34 2e 33 33 0d 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0d 0a 20 20 20 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0d 0a 20 20 20 20 20 20 20 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 Data Ascii: /! sweetalert2 v11.4.33* Released under the MIT License.*/(function (global, factory) { typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() : typeof define === 'function' && define.amd ? def
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 63 6f 6e 73 6f 6c 65 50 72 65 66 69 78 2c 20 22 20 22 29 2e 63 6f 6e 63 61 74 28 6d 65 73 73 61 67 65 29 29 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 50 72 69 76 61 74 65 20 67 6c 6f 62 61 6c 20 73 74 61 74 65 20 66 6f 72 20 60 77 61 72 6e 4f 6e 63 65 60 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 40 74 79 70 65 20 7b 41 72 72 61 79 7d 0d 0a 20 20 20 20 20 2a 20 40 70 72 69 76 61 74 65 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 20 20 20 20 63 6f 6e 73 74 20 70 72 65 76 69 6f 75 73 57 61 72 6e 4f 6e 63 65 4d 65 73 73 61 67 65 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 53 68 6f 77 20 61 20 63 6f 6e 73 6f 6c 65 20 77 61 72 6e 69 6e 67 2c 20 62 75 74 20 6f 6e 6c 79 20 69 66 20 69 74 20 Data Ascii: consolePrefix, " ").concat(message)); }; /** * Private global state for `warnOnce` * * @type {Array} * @private / const previousWarnOnceMessages = []; /* * Show a console warning, but only if it
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 73 77 61 6c 43 6c 61 73 73 65 73 2e 6c 6f 61 64 65 72 29 29 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 7c 20 6e 75 6c 6c 7d 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 20 20 20 20 63 6f 6e 73 74 20 67 65 74 43 61 6e 63 65 6c 42 75 74 74 6f 6e 20 3d 20 28 29 20 3d 3e 20 65 6c 65 6d 65 6e 74 42 79 53 65 6c 65 63 74 6f 72 28 22 2e 22 2e 63 6f 6e 63 61 74 28 73 77 61 6c 43 6c 61 73 73 65 73 2e 61 63 74 69 6f 6e 73 2c 20 22 20 2e 22 29 2e 63 6f 6e 63 61 74 28 73 77 61 6c 43 6c 61 73 73 65 73 2e 63 61 6e 63 65 6c 29 29 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 7c 20 6e 75 6c 6c 7d 0d 0a 20 20 20 20 20 2a 2f Data Ascii: swalClasses.loader)); /** * @returns {HTMLElement \| null} / const getCancelButton = () => elementBySelector(".".concat(swalClasses.actions, " .").concat(swalClasses.cancel)); /* * @returns {HTMLElement \| null} */
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 75 64 65 73 28 63 6c 61 73 73 4e 61 6d 65 29 20 26 26 20 21 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 69 63 6f 6e 54 79 70 65 73 29 2e 69 6e 63 6c 75 64 65 73 28 63 6c 61 73 73 4e 61 6d 65 29 20 26 26 20 21 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 70 61 72 61 6d 73 2e 73 68 6f 77 43 6c 61 73 73 29 2e 69 6e 63 6c 75 64 65 73 28 63 6c 61 73 73 4e 61 6d 65 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 63 6c 61 73 73 4e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 20 65 6c 65 6d 0d 0a Data Ascii: udes(className) && !Object.values(iconTypes).includes(className) && !Object.values(params.showClass).includes(className)) { elem.classList.remove(className); } }); }; /** * @param {HTMLElement} elem
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 65 74 44 69 72 65 63 74 43 68 69 6c 64 42 79 43 6c 61 73 73 20 3d 20 28 65 6c 65 6d 2c 20 63 6c 61 73 73 4e 61 6d 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 68 69 6c 64 72 65 6e 20 3d 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 6c 65 6d 2e 63 68 69 6c 64 72 65 6e 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 68 69 6c 64 20 3d 20 63 68 69 6c 64 72 65 6e 5b 69 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 68 69 6c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 26 26 20 68 61 73 43 6c 61 73 73 28 63 Data Ascii: etDirectChildByClass = (elem, className) => { const children = Array.from(elem.children); for (let i = 0; i < children.length; i++) { const child = children[i]; if (child instanceof HTMLElement && hasClass(c
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 3d 20 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 29 2e 77 69 64 74 68 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 50 65 72 63 65 6e 74 20 3d 20 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 57 69 64 74 68 20 2f 20 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 46 75 6c 6c 57 69 64 74 68 20 2a 20 31 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 2e 73 74 79 6c 65 2e 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 27 74 72 61 6e 73 69 74 69 6f 6e 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 2e 73 74 79 6c 65 2e 77 69 Data Ascii: = parseInt(window.getComputedStyle(timerProgressBar).width); const timerProgressBarPercent = timerProgressBarWidth / timerProgressBarFullWidth * 100; timerProgressBar.style.removeProperty('transition'); timerProgressBar.style.wi
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 20 7b 0d 0a 20 20 20 20 20 20 20 20 67 6c 6f 62 61 6c 53 74 61 74 65 2e 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 2e 72 65 73 65 74 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 28 29 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 63 6f 6e 73 74 20 61 64 64 49 6e 70 75 74 43 68 61 6e 67 65 4c 69 73 74 65 6e 65 72 73 20 3d 20 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 6f 70 75 70 20 3d 20 67 65 74 50 6f 70 75 70 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 69 6e 70 75 74 20 3d 20 67 65 74 44 69 72 65 63 74 43 68 69 6c 64 42 79 43 6c 61 73 73 28 70 6f 70 75 70 2c 20 73 77 61 6c 43 6c 61 73 73 65 73 2e 69 6e 70 75 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 66 69 6c 65 20 3d 20 67 65 74 44 69 Data Ascii: { globalState.currentInstance.resetValidationMessage(); }; const addInputChangeListeners = () => { const popup = getPopup(); const input = getDirectChildByClass(popup, swalClasses.input); const file = getDi
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 6d 65 6e 74 7d 20 74 61 72 67 65 74 0d 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 20 65 6c 65 6d 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 0d 0a 20 20 20 20 63 6f 6e 73 74 20 68 61 6e 64 6c 65 4a 71 75 65 72 79 45 6c 65 6d 20 3d 20 28 74 61 72 67 65 74 2c 20 65 6c 65 6d 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 61 72 67 65 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 27 27 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 30 20 69 6e 20 65 6c 65 6d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 28 69 20 69 6e 20 65 6c 65 6d 29 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 2e 61 70 70 65 6e 64 43 68 69 6c Data Ascii: ment} target * @param {HTMLElement} elem */ const handleJqueryElem = (target, elem) => { target.textContent = ''; if (0 in elem) { for (let i = 0; (i in elem); i++) { target.appendChil
2024-10-21 22:39:29 UTC	3892	IN	Data Raw: 6d 73 2e 63 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 43 6f 6c 6f 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 20 3d 20 70 61 72 61 6d 73 2e 63 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 43 6f 6c 6f 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 43 6c 61 73 73 28 63 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 2c 20 73 77 61 6c 43 6c 61 73 73 65 73 5b 27 64 65 66 61 75 6c 74 2d 6f 75 74 6c 69 6e 65 27 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 61 72 61 6d 73 2e 64 65 6e 79 42 75 74 74 6f 6e 43 6f 6c 6f 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6e 79 42 75 74 74 6f 6e 2e 73 74 79 6c 65 2e Data Ascii: ms.confirmButtonColor) { confirmButton.style.backgroundColor = params.confirmButtonColor; addClass(confirmButton, swalClasses['default-outline']); } if (params.denyButtonColor) { denyButton.style.
2024-10-21 22:39:29 UTC	4096	IN	Data Raw: 20 70 61 72 61 6d 73 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 20 20 20 20 63 6f 6e 73 74 20 72 65 6e 64 65 72 49 6e 70 75 74 20 3d 20 28 69 6e 73 74 61 6e 63 65 2c 20 70 61 72 61 6d 73 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 6f 70 75 70 20 3d 20 67 65 74 50 6f 70 75 70 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 69 6e 6e 65 72 50 61 72 61 6d 73 20 3d 20 70 72 69 76 61 74 65 50 72 6f 70 73 2e 69 6e 6e 65 72 50 61 72 61 6d 73 2e 67 65 74 28 69 6e 73 74 61 6e 63 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 72 65 6e 64 65 72 20 3d 20 21 69 6e 6e 65 72 50 61 72 61 6d 73 20 7c 7c 20 70 61 72 61 6d 73 2e 69 6e 70 75 74 20 21 3d 3d 20 69 6e 6e 65 72 50 61 72 61 6d 73 2e 69 6e 70 75 74 3b 0d 0a 20 20 20 20 Data Ascii: params */ const renderInput = (instance, params) => { const popup = getPopup(); const innerParams = privateProps.innerParams.get(instance); const rerender = !innerParams \|\| params.input !== innerParams.input;

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b898d821-901e-008f-62b4-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223929Z-178ffc6575927r9z02fuhf5m1800000008sg00000000pyug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49782	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:29 UTC	739	OUT	GET /Content/microsites_assets/js/map-script.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:30 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 5655 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:29 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "e14fa2248bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:56:51 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:30 UTC	3595	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 47 6f 6f 67 6c 65 20 4d 61 70 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 20 0d 0a 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 4d 61 70 4c 6f 61 64 53 63 72 69 70 74 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6d 61 70 49 6e 69 74 28 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 47 6d 61 70 20 3d 20 24 28 27 2e 6d 61 70 2d 63 61 6e 76 61 73 27 29 3b 0d 0a 20 20 20 20 20 20 47 6d 61 70 Data Ascii: (function($) { "use strict";/* --------------------------------------------Google Map-------------------------------------------- */ window.onload = MapLoadScript;function GmapInit() { var Gmap = $('.map-canvas'); Gmap
2024-10-21 22:39:30 UTC	2060	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 6d 61 70 2c 6d 61 72 6b 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 69 66 28 20 64 61 74 61 48 75 65 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 64 61 74 61 48 75 65 20 21 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 79 6c 65 73 20 3d 20 5b 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 22 66 65 61 74 75 72 65 54 79 70 65 22 3a 20 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 22 2c 0d 0a 20 20 20 20 20 20 20 20 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 20 22 6c 61 62 65 6c 73 2e 74 65 78 74 2e Data Ascii: infowindow.open(map,marker); }); } if( dataHue !== undefined && dataHue !== false ) { var styles = [ { "featureType": "administrative", "elementType": "labels.text.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49787	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	726	OUT	GET /Content/toaster/toastr.min.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:30 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 4249 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:30 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "33c4d5d08adada1:0" Last-Modified: Sat, 20 Jul 2024 09:54:30 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:30 UTC	3595	IN	Data Raw: ef bb bf 21 66 75 6e 63 74 69 6f 6e 20 28 61 29 20 7b 20 61 28 5b 22 6a 71 75 65 72 79 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 61 29 20 7b 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 20 62 2c 20 63 29 20 7b 20 72 65 74 75 72 6e 20 6d 28 7b 20 74 79 70 65 3a 20 74 2e 65 72 72 6f 72 2c 20 69 63 6f 6e 43 6c 61 73 73 3a 20 6f 28 29 2e 69 63 6f 6e 43 6c 61 73 73 65 73 2e 65 72 72 6f 72 2c 20 6d 65 73 73 61 67 65 3a 20 61 2c 20 6f 70 74 69 6f 6e 73 4f 76 65 72 72 69 64 65 3a 20 63 2c 20 74 69 74 6c 65 3a 20 62 20 7d 29 20 7d 20 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 20 62 2c 20 63 29 20 7b 20 72 65 74 75 72 6e 20 6d 28 7b 20 74 79 70 65 3a 20 74 2e 69 6e 66 6f 2c 20 69 63 6f 6e 43 6c 61 73 73 3a 20 Data Ascii: !function (a) { a(["jquery"], function (a) { return function () { function b(a, b, c) { return m({ type: t.error, iconClass: o().iconClasses.error, message: a, optionsOverride: c, title: b }) } function c(a, b, c) { return m({ type: t.info, iconClass:
2024-10-21 22:39:30 UTC	654	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 28 29 20 7b 20 72 65 74 75 72 6e 20 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 6b 28 29 2c 20 75 2e 6f 70 74 69 6f 6e 73 29 20 7d 20 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 20 7b 20 71 20 7c 7c 20 28 71 20 3d 20 6e 28 29 29 2c 20 61 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 20 7c 7c 20 28 61 2e 72 65 6d 6f 76 65 28 29 2c 20 61 20 3d 20 6e 75 6c 6c 2c 20 30 20 3d 3d 3d 20 71 2e 63 68 69 6c 64 72 65 6e 28 29 2e 6c 65 6e 67 74 68 20 26 26 20 71 2e 72 65 6d 6f 76 65 28 29 29 20 7d 20 76 61 72 20 71 2c 20 72 2c 20 73 20 3d 20 30 2c 20 74 20 3d 20 7b 20 65 72 72 6f 72 3a 20 22 65 72 72 6f 72 22 2c 20 69 6e 66 6f 3a 20 22 69 6e 66 6f 22 2c 20 73 75 63 63 65 73 73 3a 20 22 73 75 63 63 65 73 73 22 2c 20 77 61 72 6e 69 6e 67 3a 20 22 77 Data Ascii: function o() { return a.extend({}, k(), u.options) } function p(a) { q \|\| (q = n()), a.is(":visible") \|\| (a.remove(), a = null, 0 === q.children().length && q.remove()) } var q, r, s = 0, t = { error: "error", info: "info", success: "success", warning: "w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49797	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	675	OUT	GET /Bookappointment/Property/816ac552-d08a-443a-bfac-bfe60eac5b7f HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:30 UTC	514	IN	HTTP/1.1 200 OK x-amz-id-2: 1Au1EseJEU2iV8NqX5AvymRkTFUdhsW8WI6SC/jPLjLapIe+VvQCsPMj6xJeVV31g+Zom+KyGLIezYmZ3YdbCA== x-amz-request-id: AZFYQAWVGBG5JXKW Date: Mon, 21 Oct 2024 22:39:31 GMT Last-Modified: Wed, 09 Oct 2024 13:10:16 GMT ETag: "325242f8d58efaeec42ddc9cfb48c7ca" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: 56cUh47VI4O1Q9pucfqxJdpWIxwEZNHm Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 32281 Connection: close
2024-10-21 22:39:30 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 d2 00 00 00 a0 08 06 00 00 00 b8 fd ed 48 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 87 77 24 e7 91 ed 19 f0 de 7b 0f b4 6f 1a 51 22 45 23 51 94 a7 cc cc 48 63 76 de d9 b3 7f e1 ce 7b bb 3b 6f 8c 48 39 52 14 49 49 14 ad 28 d1 b5 85 f7 de 7b a0 f6 fc 6e 64 56 15 4c 39 00 6d d0 cc 9c 81 ba d9 a8 ca ca 8a fc f2 0b 77 e3 de bc 58 2c 16 b3 e8 88 2c 10 59 20 b2 40 64 81 c8 02 91 05 4e 64 81 bc c8 91 9e c8 6e d1 9b 22 0b 44 16 88 2c 10 59 20 b2 80 2c 10 39 d2 68 21 44 16 88 2c 10 59 20 b2 40 64 81 53 58 20 72 a4 a7 30 5e f4 d6 c8 02 91 05 22 0b 44 16 88 2c 10 39 d2 68 0d 44 16 88 2c 10 59 20 b2 40 64 81 53 58 20 72 a4 a7 30 5e f4 d6 c8 02 91 05 22 0b 44 16 88 2c 10 39 d2 68 Data Ascii: PNGIHDRHsRGB IDATx^w${oQ"E#QHcv{;oH9RII({ndVL9mwX,,Y @dNdn"D,Y ,9h!D,Y @dSX r0^"D,9hD,Y @dSX r0^"D,9h
2024-10-21 22:39:30 UTC	510	IN	Data Raw: 03 18 d6 d4 f1 b4 1c b1 b2 29 05 57 67 98 91 6a 38 3e 73 69 37 cc 24 d9 a4 99 79 64 c6 18 a9 3f fa a7 1c 61 09 32 5b 47 0a 6a 99 9e 32 6a 39 68 9a 32 12 04 50 27 cf 28 69 06 08 f1 3c 73 1e 62 f4 72 62 36 cc 63 00 00 20 00 49 44 41 54 a5 3d cb 2c a4 13 93 50 05 20 c8 dc 0d 68 e9 7c 76 91 00 86 9e 22 a0 2f 7a af 79 56 0d b7 75 c3 55 6b d1 f8 8b f7 cd 1f 74 46 ca fd e3 fb 2f cc de 94 e4 23 24 fe 02 2b 06 4a 50 cc 02 c3 64 e4 23 2f d5 96 2f 9a c8 34 47 40 f4 c1 da 63 2f e2 4f f6 a2 b0 64 8e e3 c2 99 32 0e 03 09 4c 88 8d 48 ed 48 93 50 bb 10 26 34 33 cb 9c 3b 6a f7 f8 d2 6e be 95 55 e0 48 db ce d8 91 52 cd c8 93 f2 54 5f a4 fe 92 fd 56 e9 11 ed 5d 29 48 4c a3 b8 21 87 91 da 91 3a 92 72 df 4a 4a 29 97 d4 6b 7e 94 b1 82 d3 1c 2c d4 c9 91 f7 94 29 52 9e 02 1c a3 Data Ascii: )Wgj8>si7$yd?a2[Gj2j9h2P'(i<sbrb6c IDAT=,P h\|v"/zyVuUktF/#$+JPd#//4G@c/Od2LHHP&43;jnUHRT_V])HL!:rJJ)k~,)R
2024-10-21 22:39:30 UTC	501	IN	Data Raw: c8 8f 13 29 5c bc fe 2f 0e 36 52 e0 93 de 91 1d e9 91 c6 85 bd 1b bc c7 d8 42 d0 7c 3d 3e 6e e6 24 16 53 6a 9d 80 5c f6 9e 2e 65 58 d6 47 91 7a 92 ce 3c 76 4d fd f5 6c e7 b0 61 d4 c2 96 f3 33 b4 64 3e f7 fb 82 73 29 a9 b1 d2 b2 46 a9 c2 50 4e 75 b6 31 6f 13 24 8f bf 40 30 e3 2c 56 38 52 2f f7 37 b4 3d ad 00 9c 6c 36 d7 f1 97 83 8e f4 6f f1 b2 fd 99 39 d2 db bf b4 c9 91 3f 2a 49 08 f1 03 20 f7 a9 ba 91 ed 66 73 ef ee e5 ce 73 2e 28 02 01 65 84 59 00 63 1a 2a e5 a4 61 34 0a 41 0e 21 2a 10 14 1b e2 af 09 a4 6f ee 26 05 e0 44 04 c8 30 35 dc a1 a8 7e 64 74 a4 1a f8 2e f1 48 39 ae 02 73 39 cd 75 e4 09 b9 3a 78 f3 15 67 98 d9 81 11 27 13 3a 38 fc 2e a1 a0 78 99 ca 84 3c d0 5d 17 7f 90 81 f5 27 cf e9 e1 fa 7f 2f d5 17 29 80 a4 24 82 f0 cf 09 33 80 aa ba 3e e9 ad Data Ascii: )\/6RB\|=>n$Sj\.eXGz<vMla3d>s)FPNu1o$@0,V8R/7=l6o9?I fss.(eYca4A!*o&D05~dt.H9s9u:xg':8.x<]'/)$3>
2024-10-21 22:39:30 UTC	9000	IN	Data Raw: 9b 14 88 e2 f0 b8 0f e9 d0 ea 87 d7 ab 98 8e 16 87 6c 76 fc 23 51 a6 6e 6e ce ab f2 e4 8a 56 c5 ce 38 76 e9 47 ce 78 55 54 e9 04 1f 49 73 a4 20 b2 b7 36 e0 56 a6 df be a7 92 7a 13 84 0c 39 32 1b 85 d7 75 d0 91 fe 35 3e aa c3 e8 cb 99 94 76 6f bf a2 ef 99 2f dc 88 07 3b f4 d2 21 7a 40 d7 36 72 a4 59 ec 68 2c 44 11 23 cf 7c ae a8 dc 1d 69 6a 34 eb 61 47 0a 29 41 82 fd 26 3b 3e cd 83 97 95 27 16 93 f9 29 36 92 1b b6 ba 3c 2c 52 88 d4 84 09 72 39 81 0a 4c 91 60 e9 a8 7d 34 b6 7d 25 20 cb 4f 9e 11 73 0e 56 74 29 89 26 29 81 8d f5 ff 5e a8 49 4a 60 99 85 c4 83 2b 0d a4 a7 60 4f 42 05 a3 be e9 71 95 b8 e8 35 41 b1 46 9f e9 28 fd 59 9e 68 c7 00 82 50 d6 f5 01 f1 f4 8a 3a 21 b3 90 4a bb 0d 6c 5c 17 95 65 17 8a ff f7 24 b6 cd 62 01 a4 79 89 e4 ca 0a c2 92 ea bd 76 Data Ascii: lv#QnnV8vGxUTIs 6Vz92u5>vo/;!z@6rYh,D#\|ij4aG)A&;>')6<,Rr9L`}4}% OsVt)&)^IJ`+`OBq5AF(YhP:!Jl\e$byv
2024-10-21 22:39:30 UTC	5886	IN	Data Raw: 05 1a 82 ce 0f 85 15 80 3d 21 3d 1e 0e cc f5 64 07 d4 97 45 44 9b ac 97 32 6c 6b f7 f3 3a 2f 87 b2 5f 48 e0 d7 5d 06 0d 47 b8 ba 38 a4 6c 18 5b 73 70 3d 38 3d ca be 38 f4 9a 86 8b 42 1a 8b 69 29 ee 44 7d 6b f3 39 cf 35 11 75 50 8d 81 e8 7e 63 7d 26 ae 2b 2a b4 6d 41 89 ce 53 db 70 51 ac 4e 5c 73 a8 3a 14 0a 7a cf 8c 7d 68 53 a3 ef ea bb 51 fe 25 d0 e2 27 57 64 f7 a3 b4 e1 46 df e5 d1 b4 c0 39 73 a4 7e 13 84 de 9d f8 48 3d 24 c8 d6 e9 9e a5 2f f1 3a d2 d4 49 09 f2 ad a3 f7 7b d6 de 43 2f aa 49 fc a7 29 0f 46 5f 76 d7 95 39 4d 0c d1 ab 62 44 63 c1 05 b2 73 1c f3 78 d4 96 4f d8 77 86 dd 08 c4 25 19 49 5b cf 37 e5 28 d2 1d 4e 2e 30 a1 d9 d1 89 a1 37 03 d9 b6 cc fd 31 2f 25 ef 5a 7d 0b 48 5d f4 47 1f d3 cf 83 3a 5c e6 8e 59 c8 05 f5 03 c9 02 29 f1 fa c8 95 0b Data Ascii: =!=dED2lk:/_H]G8l[sp=8=8Bi)D}k95uP~c}&+*mASpQN\s:z}hSQ%'WdF9s~H=$/:I{C/I)F_v9MbDcsxOw%I[7(N.071/%Z}H]G:\Y)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49789	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	550	OUT	GET /Content/fontawesome/fontAwesome.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:30 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 11023 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:30 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "423094c98adada1:0" Last-Modified: Sat, 20 Jul 2024 09:54:18 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:30 UTC	3594	IN	Data Raw: 77 69 6e 64 6f 77 2e 46 6f 6e 74 41 77 65 73 6f 6d 65 4b 69 74 43 6f 6e 66 69 67 20 3d 20 7b 22 61 73 79 6e 63 4c 6f 61 64 69 6e 67 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 75 74 6f 41 31 31 79 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 61 2d 66 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 22 2c 22 62 61 73 65 55 72 6c 4b 69 74 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 69 74 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 22 2c 22 64 65 74 65 63 74 43 6f 6e 66 6c 69 63 74 73 55 6e 74 69 6c 22 3a 6e 75 6c 6c 2c 22 69 63 6f 6e 55 70 6c 6f 61 64 73 22 3a 7b 7d 2c 22 69 64 22 3a 31 33 35 38 30 37 35 38 2c 22 6c 69 63 65 6e 73 65 22 3a 22 66 72 65 65 22 2c 22 6d 65 Data Ascii: window.FontAwesomeKitConfig = {"asyncLoading":{"enabled":false},"autoA11y":{"enabled":true},"baseUrl":"https://ka-f.fontawesome.com","baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"id":13580758,"license":"free","me
2024-10-21 22:39:30 UTC	4096	IN	Data Raw: 7c 28 22 66 75 6c 66 69 6c 6c 65 64 22 3d 3d 3d 6e 26 26 62 28 69 2c 6f 29 2c 22 72 65 6a 65 63 74 65 64 22 3d 3d 3d 6e 26 26 77 28 69 2c 6f 29 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 6e 29 7b 76 61 72 20 6f 3b 74 72 79 7b 69 66 28 65 3d 3d 3d 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 73 20 63 61 6c 6c 62 61 63 6b 20 63 61 6e 6e 6f 74 20 72 65 74 75 72 6e 20 74 68 61 74 20 73 61 6d 65 20 70 72 6f 6d 69 73 65 2e 22 29 3b 69 66 28 6e 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 28 6e 29 29 29 7b 76 61 72 20 72 3d 6e 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 72 2e 63 Data Ascii: \|("fulfilled"===n&&b(i,o),"rejected"===n&&w(i,o))}function y(e,n){var o;try{if(e===n)throw new TypeError("A promises callback cannot return that same promise.");if(n&&("function"==typeof n\|\|"object"===t(n))){var r=n.then;if("function"==typeof r)return r.c
2024-10-21 22:39:30 UTC	3333	IN	Data Raw: 6c 2c 76 65 72 73 69 6f 6e 3a 74 2e 76 65 72 73 69 6f 6e 2c 69 64 3a 6e 2e 69 64 2c 63 6f 6e 74 65 6e 74 46 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 50 28 74 2c 65 2e 62 61 73 65 55 72 6c 2c 65 2e 76 65 72 73 69 6f 6e 29 7d 7d 29 29 29 7d 29 29 2e 63 61 74 63 68 28 69 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 5f 2e 61 6c 6c 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 63 6f 6e 74 65 6e 74 46 69 6c 74 65 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 7d 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6e 28 74 2c 65 Data Ascii: l,version:t.version,id:n.id,contentFilter:function(t,e){return P(t,e.baseUrl,e.version)}})))})).catch(i)}))}));return _.all(d)}function U(t,e){var n=e.contentFilter\|\|function(t,e){return t},o=document.createElement("style"),r=document.createTextNode(n(t,e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49790	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	566	OUT	GET /Content/templates_assets/images/translate-icon.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:30 UTC	300	IN	HTTP/1.1 200 OK Content-Length: 8326 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:30 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "1110bb598bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:58:20 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:30 UTC	3610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 06 00 00 00 3e b3 d2 7a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 1c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR>zpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2024-10-21 22:39:30 UTC	4096	IN	Data Raw: 14 f0 a4 57 f6 03 47 14 9a 5e c1 2b 34 63 4f a3 e9 a9 37 e2 46 ec 65 bf 38 f7 8c 38 f7 94 20 cf 54 1c cf f4 56 d8 df 89 7a 16 55 f7 8f 8e 26 44 b8 55 c3 c4 fd bf 94 b0 ea a1 ca c2 e7 0d 8b 3c d7 38 b9 20 b7 ae ca 36 e0 3d c9 6e 69 1d b1 fd 10 0f 3b e1 31 55 6a c0 12 81 1e 27 44 08 1a a1 0d bc 1f a5 ca 28 e2 f6 a8 8b f6 29 1c 10 d8 5d 8d d8 5e 71 6c eb 54 3d 8b a8 34 21 04 10 f8 88 c2 16 11 3e 87 72 f9 ec 5d a7 59 35 38 71 17 b2 85 ff 0c e5 b8 3f 5a 36 b5 8b 2d 82 88 b0 0d f8 86 2a 37 75 32 80 53 ea b0 53 84 41 27 54 23 47 dc e3 18 a9 46 ec eb a9 b8 47 7b 23 f9 7a 6f 95 91 87 f7 ba 26 1c db 47 b1 e9 61 d7 68 a7 6b 5a 2c a5 0a 21 80 c0 43 c0 3b 81 db 38 b6 dd e0 4c dd 72 25 cc b5 f5 0a ac 55 58 49 58 80 3b b9 c5 a1 26 5f bb 81 27 08 0b 61 6b cc 9e 2d 25 84 Data Ascii: WG^+4cO7Fe88 TVzU&DU<8 6=ni;1Uj'D()]^qlT=4!>r]Y58q?Z6-*7u2SSA'T#GFG{#zo&GahkZ,!C;8Lr%UXIX;&_'ak-%
2024-10-21 22:39:30 UTC	620	IN	Data Raw: 0e d6 d4 09 d3 2c 1e f8 a9 c2 5b d2 ab c1 8c be ab f0 97 c0 46 09 3d 85 d9 06 8e 62 60 5c 95 c7 11 de 44 77 4d b7 cc c9 42 98 91 23 4d be 24 22 48 14 7e c4 1e 38 67 a5 77 8f ec 73 3e 4e f6 94 cf 82 87 11 81 4b 09 d7 fb ef 17 e1 06 e0 3c 55 90 f0 bd 87 14 de 08 ec a5 f5 41 93 05 11 f8 8c c2 5d aa fc 1d d3 36 fa 9d 6c fd 44 18 03 be a6 ca 8d 94 28 80 60 21 ec a8 47 f6 b9 8e 4c 40 27 1b f5 7a c2 72 a0 98 63 cb 9b 06 08 83 25 db 3b 51 8f a9 04 9e 51 f8 73 e0 9a 19 fe f7 98 c0 93 0a 37 96 71 5e d1 42 d8 e5 54 f9 fc d1 7f cf b1 1e 00 22 dc 0e dc 3e ed 7b 00 f8 bc 2b 97 23 9b a2 30 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 21 34 26 67 16 42 63 72 66 Data Ascii: ,[F=b`\DwMB#M$"H~8gws>NK<UA]6lD(`!GL@'zrc%;QQs7q^BT">{+#0&gBcrf!4&gBcrf!4&gBcrf!4&gBcrf!4&gBcrf!4&gBcrf!4&gBcrf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49792	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	558	OUT	GET /Content/property_assets/js/map-script-3.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:30 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 4031 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:30 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "65214b3b8bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:57:29 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:30 UTC	3595	IN	Data Raw: 0d 0a 2f 2f 20 37 2e 20 67 6f 6f 67 6c 65 20 6d 61 70 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 4d 61 70 20 28 29 20 7b 0d 0a 09 69 66 20 28 24 28 27 2e 67 6f 6f 67 6c 65 2d 6d 61 70 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 67 6f 6f 67 6c 65 2d 6d 61 70 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 09 2f 2f 20 67 65 74 74 69 6e 67 20 6f 70 74 69 6f 6e 73 20 66 72 6f 6d 20 68 74 6d 6c 0d 0a 20 20 20 20 20 20 20 20 09 76 61 72 20 53 65 6c 66 20 3d 20 24 28 74 68 69 73 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 09 76 61 72 20 6d 61 70 4e 61 6d 65 20 3d 20 53 65 6c 66 2e 61 74 74 72 28 27 69 64 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 09 76 61 72 20 6d 61 70 4c 61 74 20 3d 20 53 65 6c 66 Data Ascii: // 7. google mapfunction gMap () {if ($('.google-map').length) { $('.google-map').each(function () { // getting options from html var Self = $(this); var mapName = Self.attr('id'); var mapLat = Self
2024-10-21 22:39:30 UTC	436	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 74 3a 20 69 6e 64 65 78 5b 30 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6e 67 3a 20 69 6e 64 65 78 5b 31 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 57 69 6e 64 6f 77 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 68 74 6d 6c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 20 20 20 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 09 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 20 20 0d 0a 09 Data Ascii: lat: index[0], lng: index[1], infoWindow: { content: html } }); }); } });

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49804	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	439	OUT	GET /Bookappointment/Property/801b4073-e639-426d-b891-9b26b1b9a643.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:30 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: UkoijdXnQvA8Av+G2IGHcRv+CASOGWKr/nsCGVj5Q5BBIpg40xULuujuyGjdmT2wC/YgMb4zeqQJKxSoVSit7Q== x-amz-request-id: AZFZE81495NM7JTW Date: Mon, 21 Oct 2024 22:39:31 GMT Last-Modified: Tue, 17 Sep 2024 07:24:55 GMT ETag: "185520fba1997eb59f37dbddd5be9d7b" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: LhK8SY85bLKxS4HRj5CDsYRtQecg5nW. Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 195237 Connection: close
2024-10-21 22:39:30 UTC	15779	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 8a 05 ca 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:30 UTC	16384	IN	Data Raw: f0 a3 ff 00 0a ed 3f ff 00 8e d0 07 ac 51 5e 4f ff 00 0d e7 f0 37 fe 8b 3f c2 8f fc 2b b4 ff 00 fe 3b 47 fc 37 9f c0 df fa 2c ff 00 0a 3f f0 ae d3 ff 00 f8 ed 00 7a c5 15 e4 ff 00 f0 de 7f 03 7f e8 b3 fc 28 ff 00 c2 bb 4f ff 00 e3 b4 7f c3 79 fc 0d ff 00 a2 cf f0 a3 ff 00 0a ed 3f ff 00 8e d0 07 ac 51 5e 4f ff 00 0d e7 f0 37 fe 8b 3f c2 8f fc 2b b4 ff 00 fe 3b 47 fc 37 9f c0 df fa 2c ff 00 0a 3f f0 ae d3 ff 00 f8 ed 00 7a c5 15 c9 7c 31 f8 fd e0 4f 8d 92 5e 2f 83 3c 6b e1 2f 17 36 9c 10 dd 8d 17 58 b7 bf 36 a1 f3 b3 cc f2 9d b6 ee da d8 ce 33 b4 e3 a5 75 b4 00 51 45 14 00 51 45 14 01 f2 56 99 ff 00 27 89 a8 7f d9 79 1f fa ac 23 af ad 6b e4 ad 33 fe 4f 13 50 ff 00 b2 f2 3f f5 58 47 5f 5a d0 07 c3 3f b6 67 fc 14 0b e2 3f c1 5f 8e ff 00 12 b4 5f 0d 78 b7 e0 Data Ascii: ?Q^O7?+;G7,?z(Oy?Q^O7?+;G7,?z\|1O^/<k/6X63uQEQEV'y#k3OP?XG_Z?g?__x
2024-10-21 22:39:30 UTC	1024	IN	Data Raw: 34 ef 8f 9f 0f 2c 7c 71 63 e1 fb 8f 0e 6a d7 93 7c 2a 9a 7b 1d 4a 07 bd fb 4c 4d 15 b7 f6 c2 b4 0c 80 2a 1c cb 26 fc 16 f9 73 8a bd e3 df d8 d7 e3 6d f7 c7 4b 8f 1c f8 3b e3 b7 85 fc 21 7d e2 3f 09 68 7e 1a f1 3e ff 00 87 23 51 96 f6 6d 36 6b f9 4d dd 9b 49 a8 08 ed 7c c3 a8 cd 88 e4 8a e0 26 d4 c9 93 04 10 0c 1f 85 7f b5 ef c4 4f da db 50 f0 77 85 b4 1d 47 41 f8 77 ab c5 e1 eb fd 67 c6 ba a8 d3 bf b4 84 53 da 6a b3 69 26 de c1 25 90 22 24 97 36 97 92 79 b3 79 85 23 8e 35 d8 cd 21 74 e4 3c 59 fb 7c 6b 7a 3f c3 cd 02 de 7f 8f 7f 02 af 2d 65 f8 93 6d e1 9b df 1c f8 5b 54 b3 b9 8e d7 49 9b 4d bd ba 89 f5 0b 79 99 ed ec 6e da 5b 75 4c 09 1e 37 5f 99 76 6f f2 d3 d7 bc 51 ff 00 04 fc bb f0 57 84 bc 16 df 06 3c 79 71 f0 db c6 7e 08 d3 25 d1 61 d6 b5 3d 21 3c 43 Data Ascii: 4,\|qcj\|{JLM&smK;!}?h~>#Qm6kMI\|&OPwGAwgSji&%"$6yy#5!t<Y\|kz?-em[TIMyn[uL7_voQW<yq~%a=!<C
2024-10-21 22:39:30 UTC	16384	IN	Data Raw: fc 61 fd 8f 68 f6 12 dc 58 34 70 27 d9 e0 d4 27 ba 22 5d db a3 90 c2 22 91 01 65 72 2b db bf e1 e2 3f b3 ff 00 fd 17 4f 83 bf f8 5a 69 bf fc 7a bc cf e3 af c6 8f d9 77 e3 86 b9 a4 f8 87 fe 17 e7 c3 0f 0a f8 e7 c3 cc 0e 93 e2 ad 0b c6 fa 55 be ab 66 9f 31 36 ec ed 23 25 c5 ab 16 25 ed a7 59 21 73 86 29 b9 55 80 07 ad 7e d8 ff 00 f2 49 34 8f fb 1e 3c 21 ff 00 a9 2e 99 5e ab 5f 9e 5f 10 ff 00 e0 a9 3e 14 d6 f5 3f 08 fc 29 f1 87 8c fe 1b 78 87 c5 7e 26 f8 89 e1 7b 6f 0b eb de 07 d6 60 d4 b4 af 11 ac 7a fe 9b 36 c9 a0 8e 69 67 d3 ae b6 24 84 c7 36 e8 1b 60 11 5c 48 ec 63 5f d0 da 00 2b c7 bf 61 cf f9 22 fa d7 fd 94 0f 1b 7f ea 55 ab 57 b0 d7 8f 7e c3 9f f2 45 f5 af fb 28 1e 36 ff 00 d4 ab 56 a0 0f 61 af 2a fd 8e 3f e4 92 6a ff 00 f6 3c 78 bf ff 00 52 5d 4e bd Data Ascii: ahX4p''"]"er+?OZizwUf16#%%Y!s)U~I4<!.^__>?)x~&{o`z6ig$6`\Hc_+a"UW~E(6Va*?j<xR]N
2024-10-21 22:39:30 UTC	1024	IN	Data Raw: a4 97 b1 f8 f6 0d 72 5b f2 c6 1c fd ac e8 b6 d0 58 a9 18 f9 94 c6 5b cb 63 25 7e 85 d1 45 00 79 57 ed 8f ff 00 24 93 48 ff 00 b1 e3 c2 1f fa 92 e9 95 ea b5 e5 5f b6 3f fc 92 4d 23 fe c7 8f 08 7f ea 4b a6 57 aa d0 01 5e 0d 6b fb 2d f8 cf 47 f0 57 89 bc 23 6f e2 7f 86 fa b7 82 fc 4b aa eb 5a 8d c6 95 e2 2f 02 4f aa 79 d1 6a 97 f7 37 b3 db 4e 46 a5 1c 53 47 ba ea 44 c1 88 02 80 02 0f 24 fb cd 14 01 f2 77 fc 3b 0f 45 ff 00 a1 27 f6 4e ff 00 c3 1d 1f ff 00 2c ab 1f c0 ff 00 f0 49 2d 0f c0 da 2c d6 49 e1 8f d9 87 51 13 6a 17 ba 87 9b 7d f0 52 39 65 43 75 75 2d c9 88 1f ed 11 88 a3 32 98 e3 5f e1 8d 11 72 71 93 f6 4d 14 01 e0 1f 09 ff 00 64 ff 00 14 7c 04 8e f9 7c 0b 2f c0 1f 05 ae a8 63 37 a3 42 f8 51 2e 9c 2e cc 7b b6 79 9e 4e aa bb f6 ef 7c 6e ce 37 36 3a 9a Data Ascii: r[X[c%~EyW$H_?M#KW^k-GW#oKZ/Oyj7NFSGD$w;E'N,I-,IQj}R9eCuu-2_rqMd\|\|/c7BQ..{yN\|n76:
2024-10-21 22:39:31 UTC	16384	IN	Data Raw: f2 ff 00 b3 6f d7 3f f5 15 d3 ab e9 3f f8 33 c3 fe 4c 37 52 fa 45 ff 00 a7 1d 5e 80 3f 47 3e 34 7e de 5f 09 bf 67 81 f1 03 fe 13 3f 17 45 a0 ff 00 c2 ae d1 b4 ff 00 10 f8 9b cf b0 ba 6f ec fb 0b e9 a6 82 d6 75 d9 11 f3 c3 cb 6f 32 62 1d ec ac a0 30 5d cb 9e 7f e2 c7 fc 15 07 e0 67 c1 2d 33 5b ba f1 0f 8d 9e 21 e1 ff 00 13 c7 e0 db b8 6c b4 4d 47 51 ba 6d 5a 48 6d 26 5b 68 60 b6 82 49 6e 3e 5b eb 30 5e 15 74 57 b9 8d 0b 07 60 b5 e7 9f b7 6f fc 13 df 55 fd aa bf 6b ff 00 85 5a ed bc 1a 53 fc 3c bc b4 b9 d1 be 2a db 5d 4a 7c cd 73 4b b6 df 77 a5 5a ac 7d 1d 57 50 92 47 6e 41 5d c1 b9 2a 2b e7 05 ff 00 82 40 7c 53 1f b3 77 85 21 d6 e3 d3 3c 43 f1 0f c1 a3 4b bb f3 2d ef 61 8e 2d 56 e6 6f 1b 59 6b 1a ac 9f 38 55 12 a6 9d a3 69 70 c4 cc c0 30 06 3c a8 5a 00 fd Data Ascii: o??3L7RE^?G>4~_g?Eouo2b0]g-3[!lMGQmZHm&[h`In>[0^tW`oUkZS<]J\|sKwZ}WPGnA]+@\|Sw!<CK-a-VoYk8Uip0<Z
2024-10-21 22:39:31 UTC	1024	IN	Data Raw: 48 07 d4 9f 10 3f e0 ba 3e 20 f8 25 6d a4 ea 3f 10 bf 64 bf da 07 c1 3e 1d d5 35 8b 2d 14 ea d7 e3 4a f2 20 9e ea 65 86 20 7f d2 c7 57 61 d4 81 ee 2b ee cf 00 78 d6 cf e2 4f 80 f4 4f 11 69 de 6f f6 7e bf 61 06 a5 6b e6 ae d9 3c a9 a3 59 13 70 c9 c1 da c3 23 35 f0 e6 85 ff 00 06 cd fe c8 7a 0f 88 74 dd 49 3c 11 e2 ab 89 f4 ab b8 af a0 5b 8f 1b 6b 12 46 25 89 c3 a1 2a 6e 79 c3 00 6b ec 3f d9 9f 47 bf f0 ef ec e1 f0 ff 00 4f d5 6d e6 b5 d5 2c 7c 37 a7 5b de 41 32 ed 92 19 92 d6 35 75 61 d9 83 02 0f b8 a0 0e de 8a 28 a0 0f 9d ff 00 e0 a5 ff 00 f0 52 2f 08 ff 00 c1 2f bf 67 89 7e 22 78 c3 46 f1 0e bd 63 f6 88 ed 21 b3 d2 16 0f 3a 69 5e 44 8d 57 33 49 1a f5 90 1c 29 66 da ae c1 48 46 23 c8 bf e1 ed df 16 3f e8 c7 bf 69 4f fb e7 49 ff 00 e4 aa df ff 00 82 94 7e Data Ascii: H?> %m?d>5-J e Wa+xOOio~ak<Yp#5ztI<[kF%*nyk?GOm,\|7[A25ua(R//g~"xFc!:i^DW3I)fHF#?iOI~
2024-10-21 22:39:31 UTC	12392	IN	Data Raw: cb 26 06 46 0e c7 e4 60 67 eb ba fc fc b0 ff 00 95 a6 6f bf ec d7 53 ff 00 52 a1 5f a0 74 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 57 c7 5f f0 70 27 fc a1 9f f6 83 ff 00 b1 61 bf f4 7c 55 f6 2d 7c 75 ff 00 07 02 7f ca 19 ff 00 68 3f fb 16 1b ff 00 47 c5 40 1e 4b ff 00 05 f5 ff 00 94 6e 7c 1f ff 00 b2 95 e0 af fd 28 5a fd 1f af ce 0f f8 2f af fc a3 73 e0 ff 00 fd 94 af 05 7f e9 42 d7 e8 fd 00 7c 01 ff 00 04 f0 ff 00 94 eb ff 00 c1 45 7f ee 9a ff 00 ea 3f 71 5f 7f d7 c0 1f f0 4f 0f f9 4e bf fc 14 57 fe e9 af fe a3 f7 15 f7 fd 00 14 51 45 00 79 af c6 8f d9 1f c0 7f b4 03 6b ad e2 6d 37 54 96 6f 12 e8 89 e1 cd 4a 7d 3b 5e d4 34 a9 ee 34 e4 9c dc 0b 6f 32 d2 78 9d 50 c8 cd bb 69 05 d5 99 18 b2 12 a7 2f 4d fd 85 7e 1a d8 7c 2b d4 fc 13 36 Data Ascii: &F`goSR_tQEQEQEQEQEW_p'a\|U-\|uh?G@Kn\|(Z/sB\|E?q_ONWQEykm7ToJ};^44o2xPi/M~\|+6
2024-10-21 22:39:31 UTC	16384	IN	Data Raw: fc 54 f1 56 99 e3 8f f8 3a 73 c2 9a be 8b a8 d8 6a fa 4e a3 fb 3d 5d 4f 69 7b 65 70 97 16 f7 31 99 6f f0 e9 22 12 ac a7 b1 04 8a 00 af ff 00 06 ab 7e cc 7e 1b f8 a9 ff 00 04 92 d1 b5 6d 4f 52 f8 85 6b 74 fe 26 d5 a2 31 e8 fe 3d d7 74 6b 60 16 55 03 16 f6 77 91 42 0f ab 04 c9 ee 4d 7d 21 ff 00 05 48 f8 09 ff 00 0a 1b f6 74 f0 f6 bb e0 4d 5b e3 7d de b5 37 c4 2f 09 69 32 e9 f6 5f 17 bc 45 0d ce b3 69 79 ae d9 5a cf 63 1c 93 ea 4b 1c 4d 71 1c cd 10 91 9d 36 79 9b b7 a6 37 0f 31 ff 00 83 43 ff 00 e5 0d 7a 1f fd 8d 5a c7 fe 8d 5a fa af fe 0a 93 ff 00 24 3b e1 ff 00 fd 96 2f 87 9f fa 96 e9 54 01 e0 5f f0 ad fc 65 ff 00 46 c3 fb 60 ff 00 e2 50 5c 7f f3 4f 47 fc 2b 7f 19 7f d1 b0 fe d8 3f f8 94 17 1f fc d3 d7 e8 85 14 01 f0 df fc 12 c7 f6 73 ff 00 85 df fb 0b f8 Data Ascii: TV:sjN=]Oi{ep1o"~~mORkt&1=tk`UwBM}!HtM[}7/i2_EiyZcKMq6y71CzZZ$;/T_eF`P\OG+?s
2024-10-21 22:39:31 UTC	1024	IN	Data Raw: 66 b7 12 db ac 26 48 d6 ce e8 fd fc 30 85 b6 96 af 5d a0 02 8a 2b 85 f8 95 fb 44 78 73 e1 8f 8f 3c 35 e1 4b 87 be d4 fc 57 e2 c9 95 74 fd 1b 4b b5 6b ab cf b3 09 a3 8a 7b e9 55 78 86 ce 0f 35 5a 49 e4 2a 83 2a 8a 5a 57 8e 37 00 ee ab c7 3e 2c fe de ff 00 0b fe 10 eb ef a3 5c 6b 5a 97 89 7c 45 15 c3 da 4b a2 f8 43 42 bf f1 46 a5 6d 32 a8 63 1c f6 fa 74 33 c9 6e 70 47 33 04 1c f5 ab 1e 17 f8 07 e2 dd 73 c7 f7 7e 21 f1 ef c4 3d 63 55 8e db 56 7b bd 0b 41 f0 f3 49 a1 69 3a 6d aa 48 1a dd 2e 3c a9 0c f7 d2 ed 51 e6 99 a5 30 3e 48 16 e8 b9 dd eb 11 42 90 29 08 8a 80 b1 62 14 63 24 9c 93 f5 26 80 3c 6b f6 bc fd af af 3f 64 af 05 ea fe 20 9b e1 97 8e 3c 57 a1 e8 f6 29 77 3e a9 a5 5d 69 31 d9 c6 ef 27 96 21 61 71 79 1d c6 e0 4a 92 52 07 5c 38 c1 24 10 3f 21 3f e0 Data Ascii: f&H0]+Dxs<5KWtKk{Ux5ZI**ZW7>,\kZ\|EKCBFm2ct3npG3s~!=cUV{AIi:mH.<Q0>HB)bc$&<k?d <W)w>]i1'!aqyJR\8$?!?

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:30 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: b1c9fd68-401e-002a-03b4-23c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223930Z-178ffc6575927r9z02fuhf5m1800000008y00000000048yq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: c94ff8e6-801e-0035-56b4-23752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223930Z-178ffc65759tbh4guw9nprg7en00000008ug00000000727e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: a228dca2-c01e-00a1-05b4-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223930Z-178ffc65759ckzrvkg6aww0ns400000008wg00000000nytv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 854ddba6-a01e-0032-41b4-231949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223930Z-178ffc65759ltvfqk1p4048kt400000008qg00000000cy98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:30 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: d6f2135d-401e-0016-79b4-2353e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223930Z-178ffc657594b2ghbgpuphudcn000000093g000000007hf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:30 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49803	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:30 UTC	573	OUT	GET /Content/assets/js/Bootstrap5/bootstrap5.1.3.bundle.min.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:31 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 78135 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:30 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "7aac7bb88bdada1:0" Last-Modified: Sat, 20 Jul 2024 10:00:59 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:31 UTC	3594	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: /! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e
2024-10-21 22:39:31 UTC	4096	IN	Data Raw: 65 22 2c 22 6d 6f 76 65 22 2c 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 22 65 72 72 6f 72 22 2c 22 61 62 6f 72 74 22 2c 22 73 63 72 6f 6c 6c 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 26 26 60 24 7b 65 7d 3a 3a 24 7b 54 2b 2b 7d 60 7c 7c 74 2e 75 69 64 45 76 65 6e 74 7c 7c 54 2b 2b 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 63 6f 6e 73 74 20 65 3d 4c 28 74 29 3b 72 65 74 75 72 6e 20 74 2e 75 69 64 45 76 65 6e 74 3d 65 2c 41 5b 65 5d 3d 41 5b 65 5d 7c 7c 7b 7d 2c 41 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 69 3d 6e 75 6c 6c 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 66 6f 72 28 6c 65 74 20 73 3d Data Ascii: e","move","DOMContentLoaded","readystatechange","error","abort","scroll"]);function L(t,e){return e&&`${e}::${T++}`\|\|t.uidEvent\|\|T++}function x(t){const e=L(t);return t.uidEvent=e,A[e]=A[e]\|\|{},A[e]}function D(t,e,i=null){const n=Object.keys(t);for(let s=
2024-10-21 22:39:31 UTC	4096	IN	Data Raw: 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 66 61 64 65 22 29 3b 74 68 69 73 2e 5f 71 75 65 75 65 43 61 6c 6c 62 61 63 6b 28 28 28 29 3d 3e 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 74 29 7d 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 28 29 2c 6a 2e 74 72 69 67 67 65 72 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 22 63 6c 6f 73 65 64 2e 62 73 2e 61 6c 65 72 74 22 29 2c 74 68 69 73 2e 64 69 73 70 6f 73 65 28 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 Data Ascii: =this._element.classList.contains("fade");this._queueCallback((()=>this._destroyElement()),this._element,t)}_destroyElement(){this._element.remove(),j.trigger(this._element,"closed.bs.alert"),this.dispose()}static jQueryInterface(t){return this.each((func
2024-10-21 22:39:31 UTC	4096	IN	Data Raw: 73 53 6c 69 64 69 6e 67 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6a 2e 6f 6e 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 65 74 2c 28 28 29 3d 3e 74 68 69 73 2e 74 6f 28 74 29 29 29 3b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 75 73 65 28 29 2c 76 6f 69 64 20 74 68 69 73 2e 63 79 63 6c 65 28 29 3b 63 6f 6e 73 74 20 69 3d 74 3e 65 3f 51 3a 47 3b 74 68 69 73 2e 5f 73 6c 69 64 65 28 69 2c 74 68 69 73 2e 5f 69 74 65 6d 73 5b 74 5d 29 7d 5f 67 65 74 43 6f 6e 66 69 67 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 7b 2e 2e 2e 58 2c 2e 2e 2e 55 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 7b 7d 7d 2c 61 28 4b 2c 74 Data Ascii: sSliding)return void j.one(this._element,et,(()=>this.to(t)));if(e===t)return this.pause(),void this.cycle();const i=t>e?Q:G;this._slide(i,this._items[t])}_getConfig(t){return t={...X,...U.getDataAttributes(this._element),..."object"==typeof t?t:{}},a(K,t
2024-10-21 22:39:31 UTC	4096	IN	Data Raw: 6e 63 6c 75 64 65 73 28 74 29 3f 6d 28 29 3f 74 3d 3d 3d 47 3f 5a 3a 4a 3a 74 3d 3d 3d 47 3f 4a 3a 5a 3a 74 7d 73 74 61 74 69 63 20 63 61 72 6f 75 73 65 6c 49 6e 74 65 72 66 61 63 65 28 74 2c 65 29 7b 63 6f 6e 73 74 20 69 3d 73 74 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 29 3b 6c 65 74 7b 5f 63 6f 6e 66 69 67 3a 6e 7d 3d 69 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 6e 3d 7b 2e 2e 2e 6e 2c 2e 2e 2e 65 7d 29 3b 63 6f 6e 73 74 20 73 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 2e 73 6c 69 64 65 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 2e 74 6f 28 65 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 29 7b 69 66 28 76 Data Ascii: ncludes(t)?m()?t===G?Z:J:t===G?J:Z:t}static carouselInterface(t,e){const i=st.getOrCreateInstance(t,e);let{_config:n}=i;"object"==typeof e&&(n={...n,...e});const s="string"==typeof e?e:n.slide;if("number"==typeof e)i.to(e);else if("string"==typeof s){if(v
2024-10-21 22:39:31 UTC	2080	IN	Data Raw: 28 74 2c 65 29 7b 74 2e 6c 65 6e 67 74 68 26 26 74 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 65 3f 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 64 74 29 3a 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 64 74 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 65 29 7d 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 2f 73 68 6f 77 7c 68 69 64 65 2f 2e 74 65 73 74 28 74 29 26 26 28 65 2e 74 6f 67 67 6c 65 3d 21 31 29 3b 63 6f 6e 73 74 20 69 3d 70 74 2e 67 65 74 4f 72 43 72 65 61 74 Data Ascii: (t,e){t.length&&t.forEach((t=>{e?t.classList.remove(dt):t.classList.add(dt),t.setAttribute("aria-expanded",e)}))}static jQueryInterface(t){return this.each((function(){const e={};"string"==typeof t&&/show\|hide/.test(t)&&(e.toggle=!1);const i=pt.getOrCreat
2024-10-21 22:39:31 UTC	4096	IN	Data Raw: 74 79 6c 65 2c 69 2e 70 6f 70 70 65 72 29 2c 65 2e 73 74 79 6c 65 73 3d 69 2c 65 2e 65 6c 65 6d 65 6e 74 73 2e 61 72 72 6f 77 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 61 72 72 6f 77 2e 73 74 79 6c 65 2c 69 2e 61 72 72 6f 77 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 65 6c 65 6d 65 6e 74 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 2e 65 6c 65 6d 65 6e 74 73 5b 74 5d 2c 73 3d 65 2e 61 74 74 72 69 62 75 74 65 73 5b 74 5d 7c 7c 7b 7d 2c 6f 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 73 74 79 6c 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 3f 65 2e 73 74 79 6c 65 73 5b 74 5d 3a 69 5b 74 5d 29 2e 72 65 64 75 63 65 28 28 Data Ascii: tyle,i.popper),e.styles=i,e.elements.arrow&&Object.assign(e.elements.arrow.style,i.arrow),function(){Object.keys(e.elements).forEach((function(t){var n=e.elements[t],s=e.attributes[t]\|\|{},o=Object.keys(e.styles.hasOwnProperty(t)?e.styles[t]:i[t]).reduce((
2024-10-21 22:39:31 UTC	4096	IN	Data Raw: 2c 4f 2c 28 28 54 3d 7b 7d 29 5b 76 5d 3d 5f 3f 22 30 22 3a 22 22 2c 54 5b 62 5d 3d 67 3f 22 30 22 3a 22 22 2c 54 2e 74 72 61 6e 73 66 6f 72 6d 3d 28 79 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 7c 7c 31 29 3c 3d 31 3f 22 74 72 61 6e 73 6c 61 74 65 28 22 2b 66 2b 22 70 78 2c 20 22 2b 6d 2b 22 70 78 29 22 3a 22 74 72 61 6e 73 6c 61 74 65 33 64 28 22 2b 66 2b 22 70 78 2c 20 22 2b 6d 2b 22 70 78 2c 20 30 29 22 2c 54 29 29 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 4f 2c 28 28 65 3d 7b 7d 29 5b 76 5d 3d 5f 3f 6d 2b 22 70 78 22 3a 22 22 2c 65 5b 62 5d 3d 67 3f 66 2b 22 70 78 22 3a 22 22 2c 65 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 22 2c 65 29 29 7d 63 6f 6e 73 74 20 75 65 3d 7b 6e 61 6d 65 3a 22 63 6f 6d 70 75 74 65 53 74 79 6c 65 73 22 2c 65 Data Ascii: ,O,((T={})[v]=_?"0":"",T[b]=g?"0":"",T.transform=(y.devicePixelRatio\|\|1)<=1?"translate("+f+"px, "+m+"px)":"translate3d("+f+"px, "+m+"px, 0)",T)):Object.assign({},O,((e={})[v]=_?m+"px":"",e[b]=g?f+"px":"",e.transform="",e))}const ue={name:"computeStyles",e
2024-10-21 22:39:31 UTC	4096	IN	Data Raw: 21 3d 3d 64 26 26 64 2c 66 3d 69 2e 70 61 64 64 69 6e 67 2c 70 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 30 3a 66 2c 6d 3d 72 65 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 70 3f 70 3a 61 65 28 70 2c 79 74 29 29 2c 67 3d 68 3d 3d 3d 4f 74 3f 43 74 3a 4f 74 2c 5f 3d 74 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 62 3d 74 2e 65 6c 65 6d 65 6e 74 73 5b 75 3f 67 3a 68 5d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 3d 22 63 6c 69 70 70 69 6e 67 50 61 72 65 6e 74 73 22 3d 3d 3d 65 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 41 65 28 5a 74 28 74 29 29 2c 69 3d 5b 22 61 62 73 6f 6c 75 74 65 22 2c 22 66 69 78 65 64 22 5d 2e 69 6e 64 65 78 4f 66 28 59 74 28 74 29 2e 70 6f 73 69 74 69 6f 6e 29 3e 3d 30 26 26 7a 74 28 74 29 Data Ascii: !==d&&d,f=i.padding,p=void 0===f?0:f,m=re("number"!=typeof p?p:ae(p,yt)),g=h===Ot?Ct:Ot,_=t.rects.popper,b=t.elements[u?g:h],v=function(t,e,i){var n="clippingParents"===e?function(t){var e=Ae(Zt(t)),i=["absolute","fixed"].indexOf(Yt(t).position)>=0&&zt(t)
2024-10-21 22:39:31 UTC	4096	IN	Data Raw: 6c 6c 21 3d 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 26 26 28 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 2e 78 2b 3d 6c 2c 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 2e 79 2b 3d 63 29 2c 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 5b 6e 5d 3d 72 7d 7d 2c 50 65 3d 7b 6e 61 6d 65 3a 22 70 6f 70 70 65 72 4f 66 66 73 65 74 73 22 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 70 68 61 73 65 3a 22 72 65 61 64 22 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 74 61 74 65 2c 69 3d 74 2e 6e 61 6d 65 3b 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 5b 69 5d 3d 43 65 28 7b 72 65 66 65 72 65 6e 63 65 3a 65 2e 72 65 63 Data Ascii: ll!=e.modifiersData.popperOffsets&&(e.modifiersData.popperOffsets.x+=l,e.modifiersData.popperOffsets.y+=c),e.modifiersData[n]=r}},Pe={name:"popperOffsets",enabled:!0,phase:"read",fn:function(t){var e=t.state,i=t.name;e.modifiersData[i]=Ce({reference:e.rec

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f1e6eb1c-401e-0048-0fb4-230409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc657599t94pduaxa858ss00000008mg00000000mh5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 770a8df0-f01e-0052-02b4-239224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc657594b2ghbgpuphudcn000000093g000000007hft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 9ca36d4f-401e-005b-42b4-239c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc65759ztcbhzhemfn92pw000000094000000000g25z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f0cc003f-001e-0034-04b4-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc65759b6phk1938t93stc000000095g00000000qu2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e27597ff-e01e-0099-0ab4-23da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc65759wtchcan29e9304c00000008sg000000009snu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7a5b0fd3-f01e-0020-5fb4-23956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc65759cwlbzs47w327hrn000000090g00000000ge6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: bc2a09c4-201e-006e-76b4-23bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc65759dpzf5dzapequ9n000000008y000000000f93g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 98640d8a-f01e-005d-1cb4-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc65759ltvfqk1p4048kt400000008t00000000044bg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: dee9d96e-601e-0084-11b4-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc65759phhh5prpzy708cn000000091g00000000343z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:31 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:31 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 2ab36301-901e-0067-19b4-23b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223931Z-178ffc65759ltvfqk1p4048kt400000008m000000000uanh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:31 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49825	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	679	OUT	GET /Bookappointment/Property/88a3f70f-cf12-44a6-b0a4-af03a8bf3cb5.png HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:32 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: KZ+qNfg8yT0eKaFGLPe1x6kSnEwD1sFaAlKnk3epWP4qoSZMYgvYKzOxdVxSBJmIjU9y9LjxiIUSgsNpROXZGw== x-amz-request-id: EX89HA7ZJ457D6GS Date: Mon, 21 Oct 2024 22:39:33 GMT Last-Modified: Wed, 09 Oct 2024 08:52:55 GMT ETag: "d401edbf4fe4b6232e2bfacbe654867b" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: bTnD0eKeR2HURX5Wx8oFStSyljOGgsQN Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 1825777 Connection: close
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 01 27 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 99 18 00 00 01 01 03 00 01 00 00 00 d8 0d 00 00 02 01 03 00 04 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 05 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 04 00 00 00 1a 01 05 00 01 00 00 00 a6 00 00 00 1b 01 05 00 01 00 00 00 ae 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 21 00 00 00 b6 00 00 00 32 01 02 00 14 00 00 00 d7 00 00 00 69 87 04 00 01 00 00 00 eb 00 00 00 1d 01 00 00 08 00 08 00 08 00 08 00 2c 01 00 00 01 00 00 00 2c 01 00 00 01 00 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 36 3a 32 37 Data Ascii: JFIF,,'ExifII*(1!2i,,Adobe Photoshop 24.5 (Macintosh)2023:06:27
2024-10-21 22:39:32 UTC	417	IN	Data Raw: cd 65 38 39 c6 d3 29 ef 8f eb 43 8b ef a5 df df af 6f 22 12 97 33 e5 5b f5 77 fc 3e 5d ff 00 c8 de 8b c5 7a 9c 2a a8 b6 b6 41 54 05 1f ba 90 7f 29 ba 93 cf 7a cd d3 5f de be fd d5 bd 4d 14 67 f6 ad 7e d6 be de 7a 9d c7 85 f5 1b bd 4e 3b ad 4b 51 86 de df 4c b0 42 59 d0 32 34 d3 75 f2 94 c8 e5 76 f4 43 dd 9d c2 76 a4 a1 15 af f9 7f c0 fe b4 ea 27 26 ad 18 bb 39 de 2b 44 ba 7c 5f f6 ed ff 00 ab 9c a6 ab 16 a7 aa 5e cd 7f 71 0a fe fe 4c ae c9 03 45 14 5d 23 89 30 71 85 4c 03 b7 af cc df 78 d3 ba d7 cb fa ea 54 54 63 ee f6 de fe 5b ed 6f ea fa 13 f9 61 36 db 8c a8 8f a0 61 8c b7 57 7c f7 ee 31 dd 43 e3 fd 62 52 8a 5a bf b5 d7 cb cb 4d 3f ab 79 17 1b 6f 7b bd 9b db cf 62 e0 b7 8d f6 a1 50 c7 a9 6e 7e 5c 67 71 25 79 38 0a 7a 11 f7 64 2b cc 91 53 fb bc bf af f2 Data Ascii: e89)Co"3[w>]z*AT)z_Mg~zN;KQLBY24uvCv'&9+D\|_^qLE]#0qLxTTc[oa6aW\|1CbRZM?yo{bPn~\gq%y8zd+S
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: 3e 9f e4 7e 34 fb 79 7f 5f 9e ff 00 80 b9 ba 74 be c4 24 36 4f 1f a2 d5 72 f9 3f fc 09 7f 91 5e d2 7f cc cb 1a e6 9d be 36 bd 8f 65 c4 5e 54 66 79 60 6d e9 79 6b 70 bf b8 be 8c 11 9d 92 46 63 57 6c ee 8e 4f f5 8a 92 24 aa 3d 77 2b 36 d3 d7 cb 4f 95 fb f9 7d a3 c7 b7 32 71 77 f2 bf 43 cc b5 15 58 9d 9d 4c 92 ba 28 fe 2d 9e 60 27 f7 6f 8f 54 19 e7 8f de 02 71 b7 0b 54 a4 de bd bb 76 fe ba 7a 19 f2 24 f9 6d 6f 37 b7 df d0 af 14 af 20 dd 1d 94 84 6e 07 e6 0c 72 3a 05 3c a6 0b 3f de 2b c3 60 a0 55 f9 aa fd fb 7c 3e bf 9f 99 9b 71 4f f8 8b be 87 5b a4 2d c6 a7 69 36 8b 3c 7f 67 91 73 75 a4 5d 33 00 2d ef a3 2c ef 6a dc b6 c8 af 41 2b f2 ec 44 99 50 aa b0 c5 4e a9 a6 e3 fa fa 4b fe 08 d4 93 76 5a ef ae df 8f 7e fb 1c d6 aa 8e 97 38 99 12 1b 96 3b 2e a2 27 e4 8e Data Ascii: >~4y_t$6Or?^6e^Tfy`mykpFcWlO$=w+6O}2qwCXL(-`'oTqTvz$mo7 nr:<?+`U\|>qO[-i6<gsu]3-,jA+DPNKvZ~8;.'
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: 76 4f e0 c3 1d 39 7d 2a 55 b3 3a 78 7a b3 74 69 62 b4 53 49 69 2b 3f 97 c6 bb 6b 2a be a7 ea 26 8f e2 6f 84 7a ae 83 0e ad af 7c 4c f1 85 ac 9a 9d ad c8 3e 1a d0 bc 11 61 75 aa 58 c9 83 e7 69 f7 57 fa af 88 ad 2c 6e e5 8d 7e 73 3d ad bf 91 2c 67 70 08 db 91 7e 7b 29 e2 3c 3e 69 97 d5 c5 3f 77 15 85 a3 19 63 70 b0 b4 75 97 37 f0 3d b5 48 3a b4 fb c9 4b 4e 57 cc d5 ae 7a f9 86 55 88 c0 62 e1 42 31 8c a8 55 a9 6c 3e 22 52 72 4e 31 71 fe 22 a5 09 7b 37 b7 bb af c4 96 b7 3f 3d bf 69 fd 1b e1 16 8b a8 78 4b c6 5e 13 8b c7 12 78 8b 5b be ff 00 84 73 c4 da bf 8a ee 34 1b 0d 2b 5a 5b c8 2f a6 d3 b5 0d 2f 48 d3 e5 bb 96 da fb 4a d5 34 d8 20 bf 51 a8 de c2 8b e2 18 1d 92 17 99 9e 4f 5b 01 98 d3 96 67 88 cb b9 6b d3 a9 5e 8b c6 4e 9c e1 c9 0a 33 a3 18 53 9e 16 51 b4 Data Ascii: vO9}U:xztibSIi+?k&oz\|L>auXiW,n~s=,gp~{)<>i?wcpu7=H:KNWzUbB1Ul>"RrN1q"{7?=ixK^x[s4+Z[//HJ4 QO[gk^N3SQ
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: 21 2c b6 d0 5e ac 72 69 d2 ac 8a 1a 0b b8 2e 62 f3 3e c5 71 70 b1 c9 e5 b3 a6 df dd 91 fc 3f 2f 2c 2c 6a 61 f1 30 9c 64 d4 7d 9e 25 25 78 bb d3 bd 3a 91 4d 3b da 51 a8 9b b6 8f 95 1f 47 ed a5 1a f8 7a 90 f7 5c 94 f0 dc cf 54 dc ed 2a 6d dd ec a5 0b 2d fe 32 ae af e3 cf 88 9a c4 c2 59 bc 43 ab aa 79 22 10 2c 6e 0e 8f 01 45 7d c1 65 b7 d3 16 c6 39 98 e7 02 59 55 dc 04 45 67 2b 1c 61 7c fa 78 7c 3a f8 68 c5 f5 b4 df b4 97 9d af cd 6e fa 6e cf 41 bc 4b 6a f3 9c 55 be 2b 28 24 b7 6f fc 99 57 49 d6 7c 65 0e b3 a4 6b 53 de dd df 4f a5 cf 6c d6 bf 6e be b8 ba db 0c 13 43 2f d9 e3 37 32 cc c8 8c 23 55 22 3d a3 e6 24 a9 39 ab 9e 0f db d2 95 28 51 94 b9 b5 8b a7 45 bf 7a da 7c 11 e8 df 4d 7a 87 b4 8d 29 aa 92 ab 15 ee f2 bf 69 5a 11 56 ed ef f7 4b 7b eb b9 f5 2c 7f Data Ascii: !,^ri.b>qp?/,,ja0d}%%x:M;QGz\T*m-2YCy",nE}e9YUEg+a\|x\|:hnnAKjU+($oWI\|ekSOlnC/72#U"=$9(QEz\|Mz)iZVK{,
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: 00 20 5c 1f 6e 33 9a e8 c4 7b b3 69 76 5f 2b dd 72 af b9 3f e6 fc 4e 3c 1b bd 18 f5 7c ce 2b e4 fa fa 7f 91 e2 92 4d 9d 1e c8 b2 c9 ba 49 f5 58 d6 46 ec 20 6b 09 b6 b7 27 e6 26 e4 11 ea 73 58 af 87 9b b5 d6 fd ad db d5 75 ff 00 23 bd 28 c9 c9 5a d6 e5 b7 95 ef 7f cb fe 18 e8 34 82 5f 42 8b e6 38 8f 57 40 73 ff 00 4d 2d af 80 fa fd ce 39 c9 fa 1c d4 eb cb 2b bf b5 b6 bd 53 bd fe 6b 42 7e dd 9a bf bb 65 f2 92 7e bb 5e e9 74 7a 1e d3 f0 81 25 9f c5 10 c7 1c 72 cc 92 58 a2 81 1a 3b 65 b7 da 06 e5 01 c6 50 b1 fe f7 07 d2 aa 84 b9 6a ed a2 83 d5 6b e8 8c 71 7c b2 a3 cb 7f b5 1f bb aa f9 af 3f 99 ee 97 7e 19 bd d4 6d f5 6b ad 2d a7 f0 45 cd be a3 2e 9a 34 ff 00 14 c7 0d 96 97 ab c2 d7 31 db ac da 77 8a 2e ed 2d 92 08 ae 92 29 91 ed f5 95 b7 b6 0b 24 48 75 b9 58 Data Ascii: \n3{iv_+r?N<\|+MIXF k'&sXu#(Z4_B8W@sM-9+SkB~e~^tz%rX;ePjkq\|?~mk-E.41w.-)$HuX
2024-10-21 22:39:32 UTC	1776	IN	Data Raw: c9 12 c2 91 c2 ec 23 fb 41 1b 3a 44 ae 70 a9 bb 1e 8c a3 3e 58 a7 56 11 b4 20 9f ef 79 5d e3 0e 5d a0 f4 5a 7c 99 e5 46 54 f9 a5 2f 66 df ef 24 d5 e9 df 47 36 d7 c7 dd 5b 7e fd d9 3d 86 8f ae db 58 69 ba 76 a3 a0 eb 8b 7b e6 5e 09 bc cd 3e ea 4d bf 6a 98 a2 3c d7 01 1e 35 56 57 04 bb 48 31 d5 b1 5d 14 27 08 ac 44 a5 24 b9 a5 49 45 b7 f1 72 f5 d7 ce ff 00 ae bb f2 d7 8b 94 a8 db 65 1a 92 f7 7e cb 93 7b f6 7d 51 e7 7e 27 b7 d4 af ef 19 23 8e 28 a5 3a 9f 88 e5 03 a3 28 bb bc 31 ac a5 33 92 5e 30 7e 5d a7 a7 61 8a e9 a5 43 9a 2d a9 2b 38 f2 e8 9b b3 d1 ad ed b2 d3 d4 e7 9d 55 07 1d 2f ca ef be 9e e9 f4 05 d7 c2 db bd 52 78 6e a7 d7 12 d6 09 34 fd 2b c8 86 24 03 ca 8e 2d 1b 4f b4 56 6d f1 a4 61 b6 43 9e 26 3d 71 f2 f3 5d 2b 07 4a dc cf da 39 3b 5f 58 a5 b5 b7 Data Ascii: #A:Dp>XV y]]Z\|FT/f$G6[~=Xiv{^>Mj<5VWH1]'D$IEre~{}Q~'#(:(13^0~]aC-+8U/Rxn4+$-OVmaC&=q]+J9;_X
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: 9d af b5 e5 f0 bf 35 a7 6e bd 0f 9f a1 59 4a 36 96 92 bf 96 b7 db f4 f9 99 39 71 86 6c e4 9e 01 c7 f3 23 1f a1 a6 94 7e e7 e7 b9 d2 af ad fe 5d ff 00 51 8d 36 de a3 1e fc 67 a6 30 70 38 e3 fa 7e 13 ab d6 32 fb fd 3d 06 45 bf 71 e0 ae 3b e0 71 93 dc 91 ff 00 eb a8 6a de a1 6e 6d 0b a8 f1 c4 bd 57 b6 76 e7 b7 e7 8f 6c fb d6 52 52 97 7f 9d 8d a3 1e 5b 7f 5f d7 91 2a 4f 13 f7 38 e4 9f a7 4e b8 a9 e5 92 e9 af c8 a3 d2 7c 1b f0 df c4 1e 34 96 1f b2 fd 9b 45 d2 58 ae fd 6f 59 79 21 b4 54 3f c5 6f 14 51 cb 75 76 db 73 b7 cb 88 43 bb 0b 24 f1 67 35 9c ea d2 83 b5 4a d0 8b eb ab 6d 7f 8b 97 55 d8 d6 38 6c 44 e3 ed 29 e1 ea 55 ed cb c9 1e 6d 75 b7 3c a3 7f c4 fb 97 e1 d7 c0 cf 86 9e 13 44 d5 25 7b 7f 1b eb 96 e8 67 4b 9b f6 b6 9a de 29 63 56 6f f8 96 e8 81 e4 87 cd Data Ascii: 5nYJ69ql#~]Q6g0p8~2=Eq;qjnmWvlRR[_*O8N\|4EXoYy!T?oQuvsC$g5JmU8lD)Umu<D%{gK)cVo
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: 2b ed 65 58 d4 bb fd d0 0f 99 b4 70 8b 5f 0d c5 1e db 11 89 a5 cb 09 7d 56 94 2d 4d ff 00 3c e4 b9 aa 54 ba ba bb 76 8f fd b9 dd b3 e8 72 65 08 51 9c a5 ca eb ce 6f 9e 3d 63 18 e9 08 a4 f5 d1 7e 2f b5 8d 9f 88 1a e5 b6 a1 a8 c9 05 b4 81 ac ac 15 e2 2c 84 11 24 e5 41 ba 99 4e d6 ff 00 56 a5 60 8c e3 69 66 15 b6 45 97 ba 34 fd a5 44 e3 3a cf 9e 4f ac 28 45 7b aa df cd 2d fa 6b 28 fc b3 cc 71 5c d5 5a 87 c3 4f dd d3 ad 4e ad f7 4a f6 6e fb 5c f2 cb 18 2d b5 cd 58 5b c9 61 6d f6 4b 08 c5 f6 a3 29 92 e8 46 be 51 55 b4 89 80 b8 f2 5b 7c d0 6e 74 78 cc 6d 6d 6d 33 14 da e3 3f 6b 82 a4 ab 49 d4 9c 22 ad 67 ee f3 69 6f 75 6f 26 b6 56 b2 3c 0c 55 57 18 aa 70 9b 92 da cd 2e f7 6e e9 77 77 bd db f3 47 35 af 6a f6 ba ae a1 2d d5 c5 99 92 d2 24 25 6e 05 d5 cc 6c 9a 75 Data Ascii: +eXp_}V-M<TvreQo=c~/,$ANV`ifE4D:O(E{-k(q\ZONJn\-X[amK)FQU[\|ntxmmm3?kI"giouo&V<UWp.nwwG5j-$%nlu
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: fc 6a a2 ef 7d 3c fc af e6 54 64 ef f2 d7 cb d0 e6 75 fd 46 1b 14 4b 77 8d e6 b8 b8 42 cc a9 2a c4 60 89 b0 aa 77 14 97 e7 97 e6 54 5d 99 da 1d b7 01 b3 3a 35 b2 5d 2c de d6 d7 6b 5b fa 42 8f bc f5 d6 db 34 fd 5f e3 b7 2f ab dc e2 2e 35 2d 2a d7 cb 26 ce e3 cd 99 09 d8 26 81 b6 40 d8 db 37 36 eb f3 4f f3 08 f2 b9 f2 7f 7b 9c 4a b5 3b ef 6b 5f 4f eb f3 d0 a6 d6 ca ff 00 9b db f1 56 fe 91 57 fb 6b 49 ff 00 9f 3b bf fb ee 0f fe 22 98 b9 63 fc ff 00 82 ff 00 e4 8c 0b 29 61 f9 ed 2e ce 2d 2e b6 87 7c 64 db cc b9 f2 2e d7 bf ee 4b 11 28 1f 7e 06 91 7a ed c7 46 bf d7 f5 f7 9c 7f d7 97 93 b2 ed f9 5c 82 5b 79 2d 66 7b 79 97 6c b0 31 57 e7 21 90 7d d6 46 04 ee 5d a4 3a 37 f1 c6 55 85 2b fe 76 06 9a d0 e9 74 d9 cb a2 4a a7 f7 d0 b2 ef c7 73 fc 12 0c 1c fc fd 1b d2 Data Ascii: j}<TduFKwB`wT]:5],k[B4_/.5-&&@76O{J;k_OVWkI;"c)a.-.\|d.K(~zF\[y-f{yl1W!}F]:7U+vtJs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49824	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	679	OUT	GET /Bookappointment/Property/fe78f58c-fa4d-450e-ab38-1851e0e90a93.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:32 UTC	516	IN	HTTP/1.1 200 OK x-amz-id-2: ah41aQWynuYNlE2uCkzG68CLDdqIsSN+4zeBQ2caexAPCp3cw4K9C/mnnwxKs2xCNhx7aM3OFdQL8Qmk7x563Q== x-amz-request-id: EX8EZEGQM6119JCB Date: Mon, 21 Oct 2024 22:39:33 GMT Last-Modified: Mon, 21 Oct 2024 09:21:54 GMT ETag: "ccd73ebcf9a490423957fcfa95496f1f" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: rdJj5aSHCdmOjHC716Jt2mzxLew7VqV5 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 1112545 Connection: close
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 34 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 24 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e1 00 07 00 07 00 0d 00 16 00 20 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c ca 1a 95 82 25 7f 10 4d 38 99 13 d5 d1 ea 15 82 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 65 63 70 72 74 00 00 01 64 00 00 00 23 77 74 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 20 63 Data Ascii: JFIF4ICC_PROFILE$applmntrRGB XYZ acspAPPLAPPL-appl%M8descecprtd#wtptrXYZgXYZbXYZrTRC c
2024-10-21 22:39:32 UTC	418	IN	Data Raw: 5e d1 75 08 5e f2 22 c2 37 0b 07 10 92 a2 80 fb 41 a6 58 ad 01 89 1e c6 40 94 1d a1 4e 32 0f 30 02 59 ef 66 d0 24 04 9c 0c 7a c1 bd 8e 39 86 8c 5a 98 80 a7 71 e2 10 a4 67 89 03 16 fa ac 11 16 e9 95 46 6e 2d 16 8d d7 ed de 32 ae d2 6b 3f 73 10 e1 c0 07 99 6d 54 88 14 6b 10 1a dd 44 c3 c0 c9 86 c0 f3 01 70 80 d9 6c 70 24 a6 b2 77 7d a3 aa ab 2e 4d 45 0a 08 c3 40 2a 2b 99 09 01 b1 20 00 e0 c2 aa 06 4c 9a 06 85 66 03 4a 2c fa c2 4e 2f 06 4c 1a be f2 08 ed 6a 00 80 2b 77 38 90 ed 38 5e 44 66 f3 ed 03 10 2b 39 38 8c a7 6d 08 c0 aa 58 31 59 7b 83 30 25 12 6f d6 42 b5 9f f5 83 2b 1f 62 b0 e4 8b 94 2b 02 c3 06 a1 0c 36 d1 e4 45 0a 14 df 35 18 2a b1 dd 34 01 3b b0 b2 56 d1 f6 83 71 04 a8 11 eb cb ef 01 3e 5a 31 dc 4e 61 42 32 2f 83 06 40 b1 c4 87 6f 22 01 2b 76 44 Data Ascii: ^u^"7AX@N20Yf$z9ZqgFn-2k?smTkDplp$w}.ME@+ LfJ,N/Lj+w88^Df+98mX1Y{0%oB+b+6E54;Vq>Z1NaB2/@o"+vD
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: 70 c6 8d c0 68 70 21 61 5e 65 ab 81 9e aa c5 ca a4 1b ae c1 8c c9 e5 dc 2e fb c2 40 fa 97 bc 85 c8 60 bd a4 00 15 2a bb d6 e3 58 c6 31 01 20 82 7d 24 5a 6c ca 23 ba fc cf 26 64 a0 39 19 95 96 0a f5 5f b4 bb 6d 81 64 5c cd f6 14 b1 bd c4 48 cd 81 63 9f 68 4e 79 80 16 e3 f7 84 29 36 f4 9f da 13 47 bd 30 8c a3 6b 90 a3 3d cc 0e 00 60 42 e7 d6 14 84 33 28 24 51 b9 61 23 9e fe 90 13 79 30 00 1b 50 37 69 a1 14 90 d6 73 14 b3 16 b0 23 9f a8 9b 93 71 38 db 42 10 a4 5a db 73 08 cf 94 8c 40 c7 7e 14 d1 10 36 57 9c 88 53 6d 40 68 1a 81 be a1 dc 08 88 47 7e 65 8a 4d 66 00 b1 46 e8 89 08 2c 14 de 24 b0 05 54 81 8e d0 08 80 09 a3 47 3e 92 60 dd af e6 16 20 ad 0e 64 2d c0 23 f3 00 2d 89 10 aa 03 5d e1 c0 5e 60 5a aa 22 46 50 00 e2 c9 fb 49 45 68 8e f0 80 2b 38 91 9e 94 Data Ascii: php!a^e.@`*X1 }$Zl#&d9_md\HchNy)6G0k=`B3($Qa#y0P7is#q8BZs@~6WSm@hG~eMfF,$TG>` d-#-]^`Z"FPIEh+8
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: 31 06 8f 7c c5 65 2c 41 35 21 5e c1 ec 77 8b b5 86 a8 20 e2 49 06 81 61 68 4b 14 d0 aa ba e6 67 d6 06 c3 03 c4 6d 37 f3 d0 27 de 4d 0d 39 b1 40 e6 30 00 37 06 e2 06 61 92 dc 71 20 d5 b6 f7 33 1a 56 8f 9a 3e 5d 0f aa 2a 0a 3b 8f f6 95 01 92 4c 20 b8 d3 cf 17 32 d1 d8 d8 24 9c f6 8c 9e 62 bb f8 a9 4e a5 32 82 71 5c 41 b8 85 0a 0d fe 60 6a 57 4a 27 f6 8b be eb 68 a0 26 5d ee 0f b7 79 63 6a 02 be 56 00 fa 41 b8 9a 86 f5 a8 73 00 5d 4c 92 6a bd e5 3b cf cc be 4f ac b1 83 9a b6 c1 cc 1b 8d 1d 95 8b e0 66 45 76 72 48 38 ed 89 4b 30 6c 13 81 80 21 53 b0 5d 88 36 b0 86 26 eb 32 06 65 fa a2 36 b0 d3 15 77 71 1b 5c f0 6e 53 6d 2c 7c aa 04 b7 4a 80 24 83 fa cc 65 f4 d9 54 36 e0 44 b9 35 00 00 4c d5 95 ad 18 06 a2 32 63 0d ca b4 3d 66 73 aa ae 3c 99 23 bc 9f 31 91 73 Data Ascii: 1\|e,A5!^w IahKgm7'M9@07aq 3V>]*;L 2$bN2q\A`jWJ'h&]ycjVAs]Lj;OfEvrH8K0l!S]6&2e6wq\nSm,\|J$eT6D5L2c=fs<#1s
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: 3a 85 bd a0 30 60 49 53 db 10 a9 00 95 11 41 27 18 91 58 51 1d e0 31 c0 c4 55 6d ab 52 51 22 84 02 c3 51 ef 2a 9b 03 37 77 20 1b 5b 3d e2 ec c1 da 78 cc 80 16 6b bb be d0 2c 52 2e ea 2b 3b 16 b5 5a 03 b4 8b ba cd e2 a0 20 b7 38 80 db cb 36 45 7b 45 23 37 52 12 03 05 3c c2 41 17 47 9f 53 00 8b 2a 4e df 78 43 12 05 88 ac d4 b5 72 1f a4 01 c9 80 c5 6f da 15 72 be 5b 8a 13 6e 6e fd 63 00 85 73 cc a1 89 ee 33 14 58 cf ac 8a 68 d4 66 23 89 90 50 50 27 d6 4c 30 dd e9 14 31 e0 66 3d 79 71 8f 68 43 58 14 40 cc 19 61 91 52 59 03 10 ee 62 3b 0f c4 a0 10 14 06 2c 7f 58 37 16 52 c0 46 f2 b8 a2 21 26 b4 f6 81 01 28 d5 8e dd a3 23 00 2c 73 e9 0a 9d aa 3d f9 81 98 13 55 fb 4a a2 b5 f5 19 37 d3 53 0a be 0c 94 2a c4 8c c3 8f 48 0c 42 5d f7 81 b6 9c 0f cc 52 41 60 00 cc 8a Data Ascii: :0`ISA'XQ1UmRQ"Q7w [=xk,R.+;Z 86E{E#7R<AGSNxCror[nncs3Xhf#PP'L01f=yqhCX@aRYb;,X7RF!&(#,s=UJ7S*HB]RA`
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: 71 cc 62 0b 36 05 7a c8 08 ba 06 45 d3 37 ba f2 7d e4 5d 85 93 e5 ed 08 55 1c 1c fa dc 08 19 99 ac 60 48 52 bb f3 2b 27 52 41 bb 8b eb 22 ad 72 63 0d ac 73 01 74 d3 97 39 12 c2 e0 0a 03 cb 15 56 81 02 0a 00 12 79 80 e2 9b 34 28 c8 c0 0c 44 da 68 03 de 33 10 14 01 50 d0 80 2a c9 88 4e 2c 1c 18 77 50 e2 30 03 e5 82 7f 10 0a 7d 34 60 25 58 92 71 5c 62 14 20 8b 3c 46 05 43 ad 89 22 d2 ae a0 b0 47 68 cc a7 e8 43 61 b2 64 dc 19 8d 0a 3f 69 37 90 b4 39 11 44 64 0b 59 cf 78 09 c6 22 a1 04 51 e4 c6 00 2e 24 11 68 31 dd cc 27 cc d6 30 24 6a dc 08 37 21 d4 6e 3b 7d a0 2b 2a f2 24 23 73 a8 12 10 ba 82 c9 8c 95 8b c0 1d e5 60 ec 06 90 a9 09 45 40 4d 9b 8b a8 03 ea ee 27 1d a0 07 71 c1 e3 b4 06 14 05 91 cc 34 0f fb 40 4e ec 40 19 55 e8 e4 81 0d a1 7a e3 04 48 03 16 b7 Data Ascii: qb6zE7}]U`HR+'RA"rcst9Vy4(Dh3PN,wP0}4`%Xq\b <FC"GhCad?i79DdYx"Q.$h1'0$j7!n;}+$#s`E@M'q4@N@UzH
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: fe 60 55 0c 46 07 78 ed a9 b8 0f 96 2f ef 39 ff 00 cd af ce 54 0a 68 f6 a9 a4 3d 12 70 17 b4 c5 c1 56 69 8d 57 6a 35 b6 5c 49 1c e6 26 96 a0 a2 79 fc c7 56 bf 69 9b 8b 52 87 3c 66 e5 9a 65 46 9e 32 65 4b 82 de 58 50 6c 5a 02 ee 66 c5 59 57 93 0a 2d b6 25 23 50 36 e2 05 15 c5 4b 17 78 1b b8 27 de 65 65 5c 41 0d 93 2c 3b 99 7c 92 81 ac a0 79 b2 d1 c6 a3 15 c6 24 69 70 d9 b8 6e e6 4d 4d 30 ee ae 4f 1c 4a d1 aa 81 12 ca 01 af 77 10 2d 66 4f 9b 49 83 5c 48 1f cd 77 99 59 d9 f5 72 e7 bc 46 3b 34 cb 36 4d c0 bc 6d a2 41 cd f7 95 ea 6a 38 26 c6 e1 5c 4a d1 b7 0d be bc 48 68 31 f3 4c 0b 10 93 b4 d5 03 2c d5 66 26 bb 4a f0 2a cc 04 10 e1 c3 63 b8 81 a8 82 ca a4 1a a8 e0 94 5f 59 42 eb 96 6a 3f da 32 ea 6e 17 7f 89 2c 4d 2e 36 57 72 9a f6 84 10 ca 2d 72 39 a9 43 1b Data Ascii: `UFx/9Th=pViWj5\I&yViR<feF2eKXPlZfYW-%#P6Kx'ee\A,;\|y$ipnMM0OJw-fOI\HwYrF;46MmAj8&\JHh1L,f&J*c_YBj?2n,M.6Wr-r9C
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: 2d 92 3b 7a c7 61 90 71 8e 25 6a 6b cc 7b c0 45 b0 20 e6 4a 2d 24 a9 b3 00 3d e3 1c 8a 31 43 00 d4 66 2a 8a 29 21 8c a8 91 7e 63 5f 88 57 ea 24 b7 ef 26 a5 e3 03 ef 13 d0 45 1c 9f 49 30 72 39 96 5f 60 31 14 f9 46 e0 26 82 ed 1b 73 de 15 1d 87 11 ec f7 59 5a 83 e6 68 43 12 2a a4 da 08 a3 fa 40 ab 4a 48 39 85 73 93 01 80 00 6d e2 06 a0 b5 de 11 55 c4 85 b8 a1 89 0d 15 94 1c 13 fb 48 15 41 f5 87 24 5d 71 08 16 6c e2 15 3d c4 0b b7 88 3b 9a 93 15 72 a1 59 80 3b 60 16 45 71 21 5a cd 42 46 ef c4 05 0a 54 c2 73 c4 26 8e 24 22 b0 20 00 22 b9 1c 18 4b 79 80 fd 62 ea 85 2c 08 e6 50 b4 20 c7 23 98 fb 68 49 5d aa 02 0b 39 83 17 88 4e 0d 09 32 7b 48 01 5b 36 4c 56 1d a3 e0 1b 8a 6d 8e 71 01 5d 6c 40 06 33 0b 30 dd 5d a2 87 c5 54 08 09 a2 0f e2 29 fa 7b c7 b3 8e d1 5b Data Ascii: -;zaq%jk{E J-$=1Cf)!~c_W$&EI0r9_`1F&sYZhC@JH9smUHA$]ql=;rY;`Eq!ZBFTs&$" "Kyb,P #hI]9N2{H[6LVmq]l@30]T){[
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: b9 33 ae 35 cf 28 0d e6 16 60 db b5 6e b3 1c 02 05 19 39 e6 74 db 1a 51 b3 76 4c 21 42 b7 3d b8 8c 6c 70 22 ed bf ab 99 51 17 20 81 8a 95 8b 5e 63 b6 06 04 9e 80 e6 e3 92 68 76 ee 16 2a e2 6d 22 c6 65 ea a1 3b 48 ca 18 de 65 d9 71 67 52 c1 ef b4 70 4f 71 88 c7 49 ea d7 89 34 d0 9b 0d 2e d8 d0 df 96 a2 b0 17 8e 3e d0 b2 d3 50 b8 33 55 72 a0 81 e5 b0 70 22 ef 41 76 32 63 0d e1 28 d4 04 29 34 44 01 b8 83 7e 90 b3 37 3c 46 2a a0 46 54 de c1 07 eb 2b 2a 8f 97 9e f2 6d 0e b8 e6 17 22 eb d0 d5 c8 a0 e5 85 88 01 40 db 99 3e a1 43 b4 60 85 bb 8b ef 05 04 c5 c2 11 b2 6e 30 61 55 20 a2 68 4b 34 d5 6e c8 18 8d ae 8a 01 23 31 99 49 51 8c 47 24 32 e3 8e d2 cd a4 05 b1 42 a2 d6 f8 94 28 02 c2 93 2d 4d c7 91 b4 08 00 23 88 e0 b0 61 79 06 61 d2 62 b0 38 1a 2c 83 9e c6 a5 Data Ascii: 35(`n9tQvL!B=lp"Q ^chvm"e;HeqgRpOqI4.>P3Urp"Av2c()4D~7<FFT+*m"@>C`n0aU hK4n#1IQG$2B(-M#ayab8,
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: 37 10 eb 40 5f ac 04 03 a9 4a 39 1c c9 40 b6 4d 62 10 1b 90 60 2a 82 8b eb 21 3b 79 1c f1 17 20 d5 f3 da 3b 02 05 13 70 02 b2 f0 d1 18 b9 7c 61 7d e3 ad 03 64 49 93 c9 fc 4b 02 ea 2d 64 1e 62 69 2d dd fe 25 8c 43 2d 18 11 31 b6 e6 99 45 2c 01 00 47 24 04 27 bc 5a ad 40 01 fb c7 d4 b0 31 47 74 29 56 eb 39 93 fa 59 7b fd e5 6e 18 b2 a1 35 7e 91 1f 49 f4 73 ba cd c0 7d 3d 2d ce 4b 76 e2 4b ff 00 32 ea a1 3f 30 32 e6 bf 32 79 c3 67 33 55 0c a7 76 a5 93 09 f3 35 93 2b a2 17 79 f5 8f b9 4a 57 13 2a 3a 57 f3 18 77 f5 8e e2 85 93 33 2b 95 24 13 8f 59 72 d3 81 6d 89 ad c4 11 49 41 4e 4f 30 31 bd 40 46 4f da 2b 02 af ea 23 a1 35 68 63 70 00 c5 95 85 79 bb 54 2c 00 40 b9 2d de 0d 32 4e a6 f0 3e f1 ac 17 26 ea e5 4d c3 03 bf 4e 87 22 23 36 ab 00 12 af d6 10 db 78 52 Data Ascii: 7@_J9@Mb`!;y ;p\|a}dIK-dbi-%C-1E,G$'Z@1Gt)V9Y{n5~Is}=-KvK2?022yg3Uv5+yJW:Ww3+$YrmIANO01@FO+#5hcpyT,@-2N>&MN"#6xR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49814	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	732	OUT	GET /Content/microsites_assets/js/owl.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:32 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 93440 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "60a0ec248bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:56:51 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:32 UTC	3594	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0d 0a 20 2a 2f 0d 0a 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0d 0a 20 2a 20 40 61 75 74 68 Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE //* * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @auth
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 65 28 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 44 65 66 61 75 6c 74 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 63 61 72 6f 75 73 65 6c 2e 0d 0a 09 20 2a 20 40 70 75 62 6c 69 63 0d 0a 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 44 65 66 61 75 6c 74 73 20 3d 20 7b 0d 0a 09 09 69 74 65 6d 73 3a 20 33 2c 0d 0a 09 09 6c 6f 6f 70 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 63 65 6e 74 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 72 65 77 69 6e 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 63 68 65 63 6b 56 69 73 69 62 69 6c 69 74 79 3a 20 74 72 75 65 2c 0d 0a 0d 0a 09 09 6d 6f 75 73 65 44 72 61 67 3a 20 74 72 75 65 2c 0d 0a 09 09 74 6f 75 63 68 44 72 61 67 3a 20 74 72 75 65 2c 0d 0a 09 09 70 75 6c 6c 44 72 61 67 3a 20 74 72 75 65 2c 0d 0a 09 09 66 72 65 65 44 72 Data Ascii: e();}/** * Default options for the carousel. * @public */Owl.Defaults = {items: 3,loop: false,center: false,rewind: false,checkVisibility: true,mouseDrag: true,touchDrag: true,pullDrag: true,freeDr
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 65 6e 67 74 68 2c 0d 0a 09 09 09 09 69 74 65 72 61 74 6f 72 20 3d 20 2d 31 2c 0d 0a 09 09 09 09 70 72 65 76 69 6f 75 73 20 3d 20 30 2c 0d 0a 09 09 09 09 63 75 72 72 65 6e 74 20 3d 20 30 2c 0d 0a 09 09 09 09 63 6f 6f 72 64 69 6e 61 74 65 73 20 3d 20 5b 5d 3b 0d 0a 0d 0a 09 09 09 77 68 69 6c 65 20 28 2b 2b 69 74 65 72 61 74 6f 72 20 3c 20 73 69 7a 65 29 20 7b 0d 0a 09 09 09 09 70 72 65 76 69 6f 75 73 20 3d 20 63 6f 6f 72 64 69 6e 61 74 65 73 5b 69 74 65 72 61 74 6f 72 20 2d 20 31 5d 20 7c 7c 20 30 3b 0d 0a 09 09 09 09 63 75 72 72 65 6e 74 20 3d 20 74 68 69 73 2e 5f 77 69 64 74 68 73 5b 74 68 69 73 2e 72 65 6c 61 74 69 76 65 28 69 74 65 72 61 74 6f 72 29 5d 20 2b 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 61 72 67 69 6e 3b 0d 0a 09 09 09 09 63 6f 6f 72 Data Ascii: ength,iterator = -1,previous = 0,current = 0,coordinates = [];while (++iterator < size) {previous = coordinates[iterator - 1] \|\| 0;current = this._widths[this.relative(iterator)] + this.settings.margin;coor
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 6f 6e 73 2e 6c 6f 61 64 65 64 43 6c 61 73 73 29 3b 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 49 6e 69 74 69 61 6c 69 7a 65 73 20 74 68 65 20 63 61 72 6f 75 73 65 6c 2e 0d 0a 09 20 2a 20 40 70 72 6f 74 65 63 74 65 64 0d 0a 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 69 61 6c 69 7a 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 74 68 69 73 2e 65 6e 74 65 72 28 27 69 6e 69 74 69 61 6c 69 7a 69 6e 67 27 29 3b 0d 0a 09 09 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 69 6e 69 74 69 61 6c 69 7a 65 27 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 72 74 6c 43 6c 61 73 73 2c 20 74 68 69 73 2e 73 65 74 74 69 6e 67 Data Ascii: ons.loadedClass);};/** * Initializes the carousel. * @protected */Owl.prototype.initialize = function() {this.enter('initializing');this.trigger('initialize');this.$element.toggleClass(this.settings.rtlClass, this.setting
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 4f 77 6c 2e 57 69 64 74 68 2e 49 6e 6e 65 72 3a 0d 0a 09 09 09 63 61 73 65 20 4f 77 6c 2e 57 69 64 74 68 2e 4f 75 74 65 72 3a 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 69 64 74 68 3b 0d 0a 09 09 09 64 65 66 61 75 6c 74 3a 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 69 64 74 68 20 2d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 50 61 64 64 69 6e 67 20 2a 20 32 20 2b 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 61 72 67 69 6e 3b 0d 0a 09 09 7d 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 52 65 66 72 65 73 68 65 73 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 70 72 69 6d 61 72 69 6c 79 20 66 6f 72 20 61 64 61 70 74 69 76 65 20 70 75 72 70 6f 73 65 73 2e 0d 0a 09 20 2a 20 40 70 75 62 6c 69 63 0d 0a Data Ascii: Owl.Width.Inner:case Owl.Width.Outer:return this._width;default:return this._width - this.settings.stagePadding * 2 + this.settings.margin;}};/** * Refreshes the carousel primarily for adaptive purposes. * @public
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 74 65 64 0d 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 45 76 65 6e 74 7d 20 65 76 65 6e 74 20 2d 20 54 68 65 20 65 76 65 6e 74 20 61 72 67 75 6d 65 6e 74 73 2e 0d 0a 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 44 72 61 67 4d 6f 76 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 09 09 76 61 72 20 6d 69 6e 69 6d 75 6d 20 3d 20 6e 75 6c 6c 2c 0d 0a 09 09 09 6d 61 78 69 6d 75 6d 20 3d 20 6e 75 6c 6c 2c 0d 0a 09 09 09 70 75 6c 6c 20 3d 20 6e 75 6c 6c 2c 0d 0a 09 09 09 64 65 6c 74 61 20 3d 20 74 68 69 73 2e 64 69 66 66 65 72 65 6e 63 65 28 74 68 69 73 2e 5f 64 72 61 67 2e 70 6f 69 6e 74 65 72 2c 20 74 68 69 73 2e 70 6f 69 6e 74 65 72 28 65 76 65 6e 74 29 29 2c 0d 0a 09 09 09 73 74 61 67 65 20 3d 20 74 68 69 73 2e 64 69 Data Ascii: ted * @param {Event} event - The event arguments. */Owl.prototype.onDragMove = function(event) {var minimum = null,maximum = null,pull = null,delta = this.difference(this._drag.pointer, this.pointer(event)),stage = this.di
2024-10-21 22:39:32 UTC	804	IN	Data Raw: 0d 0a 0d 0a 09 09 69 66 20 28 61 6e 69 6d 61 74 65 29 20 7b 0d 0a 09 09 09 74 68 69 73 2e 65 6e 74 65 72 28 27 61 6e 69 6d 61 74 69 6e 67 27 29 3b 0d 0a 09 09 09 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 74 72 61 6e 73 6c 61 74 65 27 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 24 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 66 6f 72 6d 33 64 20 26 26 20 24 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 29 20 7b 0d 0a 09 09 09 74 68 69 73 2e 24 73 74 61 67 65 2e 63 73 73 28 7b 0d 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 27 74 72 61 6e 73 6c 61 74 65 33 64 28 27 20 2b 20 63 6f 6f 72 64 69 6e 61 74 65 20 2b 20 27 70 78 2c 30 70 78 2c 30 70 78 29 27 2c 0d 0a 09 09 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 28 74 68 69 73 2e 73 70 65 65 64 Data Ascii: if (animate) {this.enter('animating');this.trigger('translate');}if ($.support.transform3d && $.support.transition) {this.$stage.css({transform: 'translate3d(' + coordinate + 'px,0px,0px)',transition: (this.speed
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 73 65 6c 20 69 73 20 62 75 73 79 2e 0d 0a 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 73 74 61 74 65 29 20 7b 0d 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 74 61 74 65 73 2e 63 75 72 72 65 6e 74 5b 73 74 61 74 65 5d 20 26 26 20 74 68 69 73 2e 5f 73 74 61 74 65 73 2e 63 75 72 72 65 6e 74 5b 73 74 61 74 65 5d 20 3e 20 30 3b 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 53 65 74 73 20 74 68 65 20 61 62 73 6f 6c 75 74 65 20 70 6f 73 69 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 74 65 6d 2e 0d 0a 09 20 2a 20 40 70 75 62 6c 69 63 0d 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4e 75 6d 62 65 72 7d 20 5b 70 6f 73 69 74 69 6f 6e 5d 20 2d 20 54 68 65 20 6e 65 77 20 61 62 Data Ascii: sel is busy. /Owl.prototype.is = function(state) {return this._states.current[state] && this._states.current[state] > 0;};/* * Sets the absolute position of the current item. * @public * @param {Number} [position] - The new ab
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 69 6e 69 6d 75 6d 20 70 6f 73 69 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 74 65 6d 2e 0d 0a 09 20 2a 20 40 70 75 62 6c 69 63 0d 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 42 6f 6f 6c 65 61 6e 7d 20 5b 72 65 6c 61 74 69 76 65 3d 66 61 6c 73 65 5d 20 2d 20 57 68 65 74 68 65 72 20 74 6f 20 72 65 74 75 72 6e 20 61 6e 20 61 62 73 6f 6c 75 74 65 20 70 6f 73 69 74 69 6f 6e 20 6f 72 20 61 20 72 65 6c 61 74 69 76 65 20 70 6f 73 69 74 69 6f 6e 2e 0d 0a 09 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4e 75 6d 62 65 72 7d 0d 0a 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 69 6e 69 6d 75 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 6c 61 74 69 76 65 29 20 7b 0d 0a 09 09 72 65 74 75 72 6e 20 72 65 6c 61 74 69 76 65 20 3f 20 30 20 3a Data Ascii: inimum position for the current item. * @public * @param {Boolean} [relative=false] - Whether to return an absolute position or a relative position. * @returns {Number} */Owl.prototype.minimum = function(relative) {return relative ? 0 :
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 0d 0a 09 09 76 61 72 20 63 75 72 72 65 6e 74 20 3d 20 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 2c 0d 0a 09 09 09 72 65 76 65 72 74 20 3d 20 6e 75 6c 6c 2c 0d 0a 09 09 09 64 69 73 74 61 6e 63 65 20 3d 20 70 6f 73 69 74 69 6f 6e 20 2d 20 74 68 69 73 2e 72 65 6c 61 74 69 76 65 28 63 75 72 72 65 6e 74 29 2c 0d 0a 09 09 09 64 69 72 65 63 74 69 6f 6e 20 3d 20 28 64 69 73 74 61 6e 63 65 20 3e 20 30 29 20 2d 20 28 64 69 73 74 61 6e 63 65 20 3c 20 30 29 2c 0d 0a 09 09 09 69 74 65 6d 73 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2c 0d 0a 09 09 09 6d 69 6e 69 6d 75 6d 20 3d 20 74 68 69 73 2e 6d 69 6e 69 6d 75 6d 28 29 2c 0d 0a 09 09 09 6d 61 78 69 6d 75 6d 20 3d 20 74 68 69 73 2e 6d 61 78 69 6d 75 6d 28 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 74 68 Data Ascii: var current = this.current(),revert = null,distance = position - this.relative(current),direction = (distance > 0) - (distance < 0),items = this._items.length,minimum = this.minimum(),maximum = this.maximum();if (th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49827	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	439	OUT	GET /Bookappointment/Property/a962e906-800c-4033-a363-a17dcd590ef0.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:32 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: w+nyXQ1SWUuJVL4hXRDzVzq1JpdXRbw/xIkzJmECa0OI0/AodufkfxB91Usk9/WWtfpXK+O2cjmNZRCrm9Fcuw== x-amz-request-id: EX88DQRYSZKHZ59J Date: Mon, 21 Oct 2024 22:39:33 GMT Last-Modified: Tue, 17 Sep 2024 07:27:06 GMT ETag: "0f72f969e836e988eee818c6d32c25b3" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: YxTnP.AFH2VBI8A2c2YwePbQxNTmbSMv Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 197710 Connection: close
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 99 05 cc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-10-21 22:39:32 UTC	417	IN	Data Raw: 32 19 1c 48 ca a4 c6 37 74 14 01 fa 63 e3 ff 00 f8 29 5f c1 3f 85 ff 00 b1 a6 99 fb 41 6b be 34 fb 0f c2 1d 62 0b 5b 9b 3d 7f fb 22 fe 5f 3a 3b 97 11 c0 df 66 48 0d c8 dc cc 06 0c 40 8c f3 81 5e 43 f0 43 fe 0e 1c fd 8f 7f 68 ff 00 89 da 57 83 7c 19 f1 7f fb 67 c4 9a dc e9 6d 65 67 ff 00 08 ae b7 6f e7 48 cc 15 46 f9 6c d1 17 25 80 cb 30 1c d7 85 7f c1 65 7e 39 7c 2a f8 e1 ff 00 04 1b f0 d7 8e fe 1f 9d 19 3e 12 6a de 23 f0 b5 dd 92 43 62 b6 b6 76 b6 49 ac c0 b3 42 d6 e1 42 c7 e5 94 91 1e 3d bc 14 61 8e 2b 89 fd bd ff 00 69 bf f8 27 47 c7 cf d9 27 c7 3e 06 f8 79 a3 7c 1e f1 d7 c4 cf 17 69 17 3a 57 82 b4 6f 06 78 35 24 d7 2e 75 b9 a2 68 ec 7e cc f0 5b 87 89 c4 ec 87 7e e5 01 43 67 20 95 20 1f a2 bf b6 df fc 14 37 e0 f7 fc 13 9f c0 ba 47 89 7e 32 f8 bf fe 10 Data Ascii: 2H7tc)_?Ak4b[="_:;fH@^CChW\|gmegoHFl%0e~9\|*>j#CbvIBB=a+i'G'>y\|i:Wox5$.uh~[~Cg 7G~2
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: f0 4d b5 84 3a e4 9a bf f6 95 b0 22 23 6a 04 9e 5f 92 64 0d bb e4 cb 47 9f 98 a5 00 7e b7 d7 07 a4 7e d3 1e 08 d7 7f 68 dd 63 e1 2d ae b5 e6 fc 41 d0 34 4b 7f 11 5f e9 5f 63 b8 5f 22 c2 79 5a 28 a6 f3 8a 08 5b 73 a3 0d aa e5 c6 32 54 0e 6b b8 b5 f3 7e cb 1f 9d b3 ce da 3c cd 99 db bb 1c e3 3c e3 35 f0 af c2 5f f9 58 cb e3 07 fd 91 3d 07 ff 00 4e 77 34 01 f7 75 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 55 4d 7f 4e 9b 58 d0 af 6d 2d ef ee f4 ab 8b a8 1e 18 af 6d 56 26 9e cd 99 48 12 c6 25 47 8c ba 93 b8 07 47 5c 81 b9 58 64 10 0b 74 57 e6 8e 87 f1 57 f6 80 f8 91 f0 8b e0 95 ee 8d e1 df 88 ff 00 12 34 6b 1f 03 6a 3a a7 8a 35 3d 3f c6 11 f8 62 4d 4a ec df c5 1c 65 ae 16 32 27 bb 8e de da e3 cb b6 55 48 dc dc e5 e4 84 2a b5 6e 6a 9f b6 bc Data Ascii: M:"#j_dG~~hc-A4K__c_"yZ([s2Tk~<<5_X=Nw4uQ@Q@Q@Q@Q@UMNXm-mV&H%GG\XdtWW4kj:5=?bMJe2'UH*nj
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: c7 6c d7 d3 89 34 8b d4 92 ce d1 51 24 37 93 c6 61 0f 0d ae c7 56 fb 44 81 62 c1 ce fe 0d 6b ea 3f b4 cf 81 f4 ab eb fb 69 b5 e8 be d5 61 20 84 c0 96 f3 49 2d e3 f9 a2 02 b6 aa a8 4d d3 2c cc 22 61 00 90 ac 87 63 61 b8 af 12 d5 bf e0 9b 17 9e 35 b5 b9 9f c4 3f 10 27 3a d7 fc 20 d1 78 1e ce e7 44 d3 e7 d3 2d a1 8a dd bc cb 79 a7 b7 fb 5c 82 e8 79 8f 37 9b 6f 33 34 13 a3 a2 34 78 56 2f d5 1f d8 df 5e 87 c7 be 1c f1 25 bf 8c b4 68 75 0f 03 cb a9 cb e1 c8 ff 00 e1 1d 90 db c1 fd a5 3a c9 7a 2e 97 ed 7b a7 1b 01 48 b6 3c 26 3d db 9c cc 45 00 7a 26 89 fb 4e 7c 3f f1 2d bf 9b 61 e2 dd 16 ed 0e a1 67 a4 83 14 e1 b3 77 77 1a 49 6f 08 ff 00 6e 44 91 48 1f 5c e3 69 c6 d7 82 7e 2a 78 7f e2 35 fe ab 6d a2 6a 70 ea 13 68 97 0d 6b 78 23 56 02 39 16 49 22 6c 12 00 75 12 Data Ascii: l4Q$7aVDbk?ia I-M,"aca5?': xD-y\y7o344xV/^%hu:z.{H<&=Ez&N\|?-agwwIonDH\i~*x5mjphkx#V9I"lu
2024-10-21 22:39:32 UTC	16384	IN	Data Raw: 32 fa b5 9f 83 f4 ef 03 c7 a7 df de e9 50 da 5d c9 1d 90 d5 ee 6e 63 b2 86 d2 14 46 f3 1a 79 ed ee 16 3b 6b 50 cc 19 70 23 5d cb 9f 9f bf 6c 4f da b7 e1 a7 ed 87 f0 fb e1 cf 8e 7e 15 78 eb c3 5f 11 7c 37 f0 2b e2 9e 83 e2 ff 00 1c 5c 78 72 f0 6a 4f a1 69 6b 15 ec 52 5c bc 70 ee 72 a8 24 32 30 50 48 8e 29 5f 18 43 5c 1f c5 8f 19 7c 32 fd a9 3c 5d f1 7f e3 0e a7 a7 7c 47 d6 fe 0a dc c9 e0 4b 5d 0f c7 5e 11 d3 e5 dd a6 df e8 f7 5a b5 e3 eb d6 ac 46 e9 ec 6c e5 bb 81 64 9e 38 a7 8f 2b 2e 51 d2 39 0a 80 7d 7b e2 3f db 47 e0 af 8d fe 14 41 a9 eb 7a 8a ea 1e 1d d4 b5 9b cd 11 ac 35 3f 0d 5f 35 c2 6a 5a 75 9d d6 a9 3d b4 f6 12 db f9 f1 4d 15 be 9f 3c e1 65 89 49 f2 a3 d9 96 78 83 76 d1 fe d3 5e 06 9f e1 6f 83 7c 6b 0f 88 20 b9 f0 c7 c4 19 b4 c8 3c 3b 7f 6f 04 b3 Data Ascii: 2P]ncFy;kPp#]lO~x_\|7+\xrjOikR\pr$20PH)_C\\|2<]\|GK]^ZFld8+.Q9}{?GAz5?_5jZu=M<eIxv^o\|k <;o
2024-10-21 22:39:32 UTC	1024	IN	Data Raw: 45 00 50 d4 bc 2f a6 eb 3a a5 85 f5 e6 9d 63 77 7b a5 b3 3d 95 c4 d6 ea f2 d9 b3 2e d6 31 b1 19 42 57 82 54 8c 8e 2a fd 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 5c f7 c5 cf 19 78 7b e1 d7 c2 8f 13 f8 83 c5 d2 43 0f 85 34 2d 26 eb 50 d6 a4 9a d9 ae 63 4b 28 61 79 27 2d 12 ab 34 8a 23 57 ca 05 62 c3 80 0e 71 5d 0d 78 af fc 14 9b fe 51 d5 f1 f3 fe c9 c7 88 7f f4 d9 71 40 1c 77 84 7f 6a ef d9 ae df 46 f1 5f 87 6d 6c 74 ff 00 0d db d8 d9 58 ea 7a de 87 a9 f8 06 ff 00 44 92 e6 d2 ee e4 5a da dc 9b 3b 9b 38 9e e2 16 9c 88 c4 88 8e 8a dc 12 30 6b d5 3c 6f 75 f0 c3 f6 48 f8 49 ad eb 5a 9e 9d e1 af 07 78 48 79 69 a8 8b 4d 29 12 3b b7 95 d6 08 e2 f2 21 8c b4 f2 c8 f2 24 49 1a ab 3b b3 aa 2a 92 c0 57 e5 1f 8c 7e 38 e9 7f 12 2e 3e 24 f8 e0 fc 63 f0 f7 c7 5f 0b 78 Data Ascii: EP/:cw{=.1BWTPEPEPEP\x{C4-&PcK(ay'-4#Wbq]xQq@wjF_mltXzDZ;80k<ouHIZxHyiM);!$I;W~8.>$c_x
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 93 ad 68 16 62 ee ef 49 d0 ee af 9f 67 8a 2f bc 39 73 08 86 17 95 1a de e6 ce 37 98 cd e6 a4 4a 22 dd 1a c8 18 ab c8 aa 48 3f 1f 7e c3 9f b3 17 89 ac bf 6a ff 00 1e 78 4f 4d b5 4d 02 e3 e0 77 c3 9d 2b c0 36 b7 b6 bf 17 7c 45 ad c1 a3 6a 77 56 33 cf 98 ad ae 20 8e 26 88 c2 da 6b 18 08 58 e0 31 44 f1 87 70 3c b0 0f b0 3e 1d 7e d7 5f 02 bc 55 f1 cf ec 9a 04 f6 b1 f8 b3 c4 97 57 ba 4c 1a e7 fc 22 b7 96 76 9e 20 b8 b1 0e 6e ad ad f5 67 b6 5b 5b c7 88 5b ca 59 22 9e 42 05 b4 bc 7e e9 f6 f6 3f b2 ef ed 2b f0 d3 f6 ac f0 46 a7 e2 8f 85 9a e6 9b e2 3d 04 6a b2 d9 dd ea 36 16 b2 43 0d cd da c7 13 3b 06 74 5f 38 18 de 22 25 5d ca ca 57 0c 40 af 8a be 11 fc 63 f0 bf c4 af d9 ff 00 f6 71 fd 9e 3c 36 26 b7 f8 dd f0 b7 59 f0 93 f8 a3 c3 42 ce 45 bd f0 6a 68 f2 5b be ab Data Ascii: hbIg/9s7J"H?~jxOMMw+6\|EjwV3 &kX1Dp<>~_UWL"v ng[[[Y"B~?+F=j6C;t_8"%]W@cq<6&YBEjh[
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 62 ff 00 82 41 ff 00 d0 4b f6 58 ff 00 c2 fa df ff 00 93 28 03 f5 1f fe 12 dd 2b fe 82 5a 7f fe 04 27 f8 d1 ff 00 09 6e 95 ff 00 41 2d 3f ff 00 02 13 fc 6b f2 e3 fe 19 8b fe 09 07 ff 00 41 2f d9 63 ff 00 0b eb 7f fe 4c a3 fe 19 8b fe 09 07 ff 00 41 2f d9 63 ff 00 0b eb 7f fe 4c a0 0f d4 7f f8 4b 74 af fa 09 69 ff 00 f8 10 9f e3 47 fc 25 ba 57 fd 04 b4 ff 00 fc 08 4f f1 af cb 8f f8 66 2f f8 24 1f fd 04 bf 65 8f fc 2f ad ff 00 f9 32 8f f8 66 2f f8 24 1f fd 04 bf 65 8f fc 2f ad ff 00 f9 32 80 3f 51 ff 00 e1 2d d2 bf e8 25 a7 ff 00 e0 42 7f 8d 1f f0 96 e9 5f f4 12 d3 ff 00 f0 21 3f c6 bf 2e 3f e1 98 bf e0 90 7f f4 12 fd 96 3f f0 be b7 ff 00 e4 ca 3f e1 98 bf e0 90 7f f4 12 fd 96 3f f0 be b7 ff 00 e4 ca 00 fd 47 ff 00 84 b7 4a ff 00 a0 96 9f ff 00 81 09 fe 34 Data Ascii: bAKX(+Z'nA-?kA/cLA/cLKtiG%WOf/$e/2f/$e/2?Q-%B_!?.????GJ4
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: da 4d cd 9c d6 be 0c f0 a5 b4 ba 73 c9 25 a3 c5 a4 5b a3 5a b4 8f 1c 8e c8 42 65 4b 3c 30 b1 23 19 68 90 9e 54 61 be 0f f8 01 e0 3f 87 96 cf 0e 81 e0 9f 08 e8 71 4b 6e b6 ae 9a 7e 8f 6f 6c af 0a c2 90 2c 64 22 00 50 45 1c 71 85 e8 12 35 5e 8a 05 5e f1 47 c2 af 0d f8 db 49 b3 b0 d5 f4 4d 37 51 b3 d3 80 16 b0 dc 40 ae 90 00 36 8d a0 f4 e0 01 58 3f 0d fe 16 69 bf 0d 3e 28 f8 8b fb 13 46 b7 d2 34 ab dd 2b 4e c0 b6 87 cb 86 59 d2 6b ed f8 03 8d c1 5a 2c f7 c1 5f 6a 00 d1 d4 7e 01 78 13 57 f1 15 be af 77 e0 af 09 5d 6a d6 71 a4 36 f7 b3 68 f6 ef 71 02 21 8d 91 56 42 9b 94 29 86 22 00 38 06 24 c7 dd 18 b1 65 f0 67 c1 fa 6d bc d1 5b f8 53 c3 70 45 71 75 6f 7b 2a 47 a6 40 ab 2c f6 f2 89 ad e6 60 17 99 22 94 09 11 8f 28 e0 30 20 f3 5d 2d 14 01 8d e1 4f 87 7e 1f f0 Data Ascii: Ms%[ZBeK<0#hTa?qKn~ol,d"PEq5^^GIM7Q@6X?i>(F4+NYkZ,_j~xWw]jq6hq!VB)"8$egm[SpEquo{*G@,`"(0 ]-O~
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: a6 7f e9 24 55 da 6a df f2 0a b9 ff 00 ae 4f fc 8d 71 7f b2 cf fc 9b 17 c3 9f fb 15 f4 cf fd 24 8a 80 3b ca 2b e0 6f 0f fe dc 3e 32 f1 07 8c f4 ad 2a f3 e2 47 86 74 9b 0d 53 58 9e 2b 9b e6 d5 34 eb 6f ec e2 87 59 02 d1 a5 92 ca 44 85 b1 63 6e 7c b9 23 92 4f 99 8f 9b 86 01 74 af 3f 6c 7f 19 df eb 3e 06 d3 bc 37 e2 ed 5f c7 93 78 a7 5e d6 2d 35 ab 1f 0c 47 a1 cb ab 68 a2 ce 0d 4e 4b 7b 68 5a 71 1d b2 1b 8f b2 a9 c5 cf ce 45 b4 bb 1b 92 14 03 ee 7a 2b e1 ff 00 0f fe dd 7e 2e d4 fe 0e 78 63 c4 23 c6 7e 15 bd f1 16 b7 25 85 9e b1 a4 c1 60 16 1f 0d 69 92 c5 11 9b c4 52 44 fb 6e 44 48 1f ed 0d e7 14 85 63 9a 38 d9 51 d1 9d b0 7c 7f ff 00 05 0b f8 83 e0 6f 8b fe 3d f0 de 87 ac e8 de 32 d0 2d 7c 35 6b 27 84 fc 40 b6 51 b4 77 f7 cb 2e a1 73 75 24 92 42 7c a9 08 b1 Data Ascii: $UjOq$;+o>2*GtSX+4oYDcn\|#Ot?l>7_x^-5GhNK{hZqEz+~.xc#~%`iRDnDHc8Q\|o=2-\|5k'@Qw.su$B\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49813	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	735	OUT	GET /Content/microsites_assets/js/custom.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:32 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 32467 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4d515e218bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:56:45 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:32 UTC	3594	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 41 42 4c 45 20 4f 46 20 43 4f 4e 54 45 4e 54 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: /*************************************************************************************************************\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\| TABLE OF CONTENT \|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|*************************
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 24 28 27 2e 62 6f 64 79 5f 73 77 69 74 63 68 5f 62 74 6e 20 62 75 74 74 6f 6e 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 62 6f 64 79 5f 73 77 69 74 63 68 65 72 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 73 77 69 74 63 68 65 72 2d 73 68 6f 77 27 29 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 24 28 22 23 6d 79 6f 6e 6f 66 66 73 77 69 74 63 68 22 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 2e 66 69 78 65 64 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 73 74 61 74 69 63 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a Data Ascii: $('.body_switch_btn button').on('click', function () { $('.body_switcher').toggleClass('switcher-show') }); $("#myonoffswitch").on('click', function () { $(".fixed").toggleClass("static"); });
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 76 61 6c 28 27 24 27 20 2b 20 75 69 2e 76 61 6c 75 65 73 5b 31 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 70 72 69 63 65 2d 72 61 6e 67 65 72 20 2e 72 61 6e 67 65 72 2d 6d 69 6e 2d 6d 61 78 2d 62 6c 6f 63 6b 20 2e 6d 69 6e 27 29 2e 76 61 6c 28 27 24 27 20 2b 20 24 28 27 2e 70 72 69 63 65 2d 72 61 6e 67 65 72 20 23 73 6c 69 64 65 72 2d 72 61 6e 67 65 27 29 2e 73 6c 69 64 65 72 28 27 76 61 6c 75 65 73 27 2c 20 30 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 70 72 69 63 65 2d 72 61 6e 67 65 72 20 2e 72 61 6e 67 65 72 2d 6d 69 6e 2d 6d 61 78 2d 62 6c 6f 63 6b 20 2e 6d 61 78 27 29 2e 76 61 6c 28 27 24 27 20 2b 20 24 28 27 2e 70 72 69 63 65 2d 72 61 6e 67 65 72 20 Data Ascii: val('$' + ui.values[1]); } }); $('.price-ranger .ranger-min-max-block .min').val('$' + $('.price-ranger #slider-range').slider('values', 0)); $('.price-ranger .ranger-min-max-block .max').val('$' + $('.price-ranger
2024-10-21 22:39:32 UTC	1812	IN	Data Raw: 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 69 72 65 63 74 69 6f 6e 73 77 69 74 63 68 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 24 28 27 2e 70 61 67 65 5f 64 69 72 65 63 74 69 6f 6e 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 64 69 72 65 63 74 69 6f 6e 5f 73 77 69 74 63 68 20 62 75 74 74 6f 6e 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 24 28 74 68 69 73 29 2e 69 73 28 27 2e 72 74 6c 2c 20 2e 6c 74 72 27 29 20 3f 20 27 72 74 6c 20 6c 74 Data Ascii: function directionswitch() { if ($('.page_direction').length) { $('.direction_switch button').on('click', function () { $('.boxed_wrapper').toggleClass(function () { return $(this).is('.rtl, .ltr') ? 'rtl lt
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 61 73 20 66 61 20 66 61 2d 61 6e 67 6c 65 2d 6c 65 66 74 22 3e 3c 2f 73 70 61 6e 3e 27 2c 20 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 20 66 61 2d 61 6e 67 6c 65 2d 72 69 67 68 74 22 3e 3c 2f 73 70 61 6e 3e 27 5d 2c 0d 0a 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 73 69 76 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 30 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 31 30 32 34 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: as fa fa-angle-left"></span>', '<span class="fas fa fa-angle-right"></span>'], responsive: { 0: { items: 1 }, 600: { items: 1 }, 1024: {
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 75 74 6f 70 6c 61 79 54 69 6d 65 6f 75 74 3a 20 36 30 30 30 2c 0d 0a 20 20 20 20 20 20 20 20 6e 61 76 54 65 78 74 3a 20 5b 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 64 6f 77 6e 2d 61 72 72 6f 77 2d 31 22 3e 3c 2f 73 70 61 6e 3e 27 2c 20 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 64 6f 77 6e 2d 61 72 72 6f 77 2d 31 20 72 69 67 68 74 22 3e 3c 2f 73 70 61 6e 3e 27 5d 2c 0d 0a 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 73 69 76 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 37 36 38 3a 20 7b 0d 0a 20 20 20 20 Data Ascii: e, autoplayTimeout: 6000, navText: ['<span class="icon-down-arrow-1"></span>', '<span class="icon-down-arrow-1 right"></span>'], responsive: { 0: { items: 1 }, 768: {
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 20 20 20 20 20 69 74 65 6d 73 3a 20 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 31 30 32 34 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 33 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 2f 2f 20 41 6d 65 6e 69 74 69 65 73 20 53 74 79 6c 65 35 20 43 61 72 6f 75 73 65 6c 0d 0a 69 66 20 28 24 28 27 2e 61 6d 65 6e 69 74 69 65 73 2d 73 74 79 6c 65 35 2d 63 61 72 6f 75 73 65 6c 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 24 28 27 2e 61 6d 65 6e 69 74 69 65 73 2d 73 74 79 6c 65 35 2d 63 61 72 6f 75 73 65 6c 27 29 2e 6f 77 6c 43 61 72 6f 75 73 65 6c 28 7b 0d 0a 20 20 20 20 20 Data Ascii: items: 2 }, 1024: { items: 3 } } });}// Amenities Style5 Carouselif ($('.amenities-style5-carousel').length) { $('.amenities-style5-carousel').owlCarousel({
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 24 28 27 2e 68 69 64 64 65 6e 2d 62 61 72 2d 6f 70 65 6e 65 72 27 29 3b 0d 0a 20 20 20 20 76 61 72 20 68 69 64 64 65 6e 42 61 72 43 6c 6f 73 65 72 20 3d 20 24 28 27 2e 68 69 64 64 65 6e 2d 62 61 72 2d 63 6c 6f 73 65 72 27 29 3b 0d 0a 20 20 20 20 76 61 72 20 6e 61 76 54 6f 67 67 6c 65 72 20 3d 20 24 28 27 2e 6e 61 76 2d 74 6f 67 67 6c 65 72 27 29 3b 0d 0a 20 20 20 20 24 28 27 2e 68 69 64 64 65 6e 2d 62 61 72 2d 77 72 61 70 70 65 72 27 29 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 28 29 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 53 68 6f 77 20 53 69 64 65 62 61 72 0d 0a 20 20 20 20 68 69 64 64 65 6e 42 61 72 4f 70 65 6e 65 72 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 68 69 64 64 65 6e 42 61 72 Data Ascii: $('.hidden-bar-opener'); var hiddenBarCloser = $('.hidden-bar-closer'); var navToggler = $('.nav-toggler'); $('.hidden-bar-wrapper').mCustomScrollbar(); //Show Sidebar hiddenBarOpener.on('click', function () { hiddenBar
2024-10-21 22:39:32 UTC	2485	IN	Data Raw: 20 20 20 61 6e 69 6d 61 74 65 43 6c 61 73 73 3a 20 27 61 6e 69 6d 61 74 65 64 27 2c 20 2f 2f 20 61 6e 69 6d 61 74 69 6f 6e 20 63 73 73 20 63 6c 61 73 73 20 28 64 65 66 61 75 6c 74 20 69 73 20 61 6e 69 6d 61 74 65 64 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 3a 20 30 2c 20 20 20 20 20 20 20 20 20 20 2f 2f 20 64 69 73 74 61 6e 63 65 20 74 6f 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 77 68 65 6e 20 74 72 69 67 67 65 72 69 6e 67 20 74 68 65 20 61 6e 69 6d 61 74 69 6f 6e 20 28 64 65 66 61 75 6c 74 20 69 73 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 62 69 6c 65 3a 20 66 61 6c 73 65 2c 20 20 20 20 20 20 20 2f 2f 20 74 72 69 67 67 65 72 20 61 6e 69 6d 61 74 69 6f 6e 73 20 6f 6e 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 20 28 64 Data Ascii: animateClass: 'animated', // animation css class (default is animated) offset: 0, // distance to the element when triggering the animation (default is 0) mobile: false, // trigger animations on mobile devices (d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49820	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	739	OUT	GET /Content/templates_assets/js/contactForm.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:32 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 22701 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "1238c8b94821db1:0" Last-Modified: Fri, 18 Oct 2024 10:30:17 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:32 UTC	3594	IN	Data Raw: 0d 0a 0d 0a 76 61 72 20 63 68 65 63 6b 55 6e 69 74 54 79 70 65 20 3d 20 24 28 22 23 63 68 65 63 6b 55 6e 69 74 54 79 70 65 22 29 2e 76 61 6c 28 29 3b 0d 0a 76 61 72 20 77 65 62 73 69 74 65 4c 6f 67 6f 20 3d 20 24 28 22 23 57 65 62 73 69 74 65 4c 6f 67 6f 22 29 2e 76 61 6c 28 29 3b 0d 0a 76 61 72 20 63 75 72 72 65 6e 74 55 72 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 20 2f 2f 20 45 6e 63 6f 64 65 20 74 68 65 20 63 75 72 72 65 6e 74 20 70 61 67 65 20 55 52 4c 0d 0a 76 61 72 20 57 68 61 74 73 41 70 70 4e 75 6d 62 65 72 20 3d 20 24 28 22 23 57 68 61 74 73 41 70 70 4e 75 6d 62 65 72 22 29 2e 76 61 6c 28 29 3b 0d 0a 76 61 72 20 65 6e 63 6f 64 65 64 57 68 61 74 73 61 70 Data Ascii: var checkUnitType = $("#checkUnitType").val();var websiteLogo = $("#WebsiteLogo").val();var currentUrl = encodeURIComponent(window.location.href); // Encode the current page URLvar WhatsAppNumber = $("#WhatsAppNumber").val();var encodedWhatsap
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 20 3d 20 24 28 27 23 53 69 6d 70 6c 65 51 75 65 72 79 46 6f 72 6d 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 68 6f 6e 65 4e 75 6d 62 65 72 2e 6c 65 6e 67 74 68 20 3e 20 37 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 68 6f 77 4c 6f 61 64 65 72 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 64 64 20 72 65 43 61 70 74 63 68 61 20 76 65 72 69 66 69 63 61 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 72 65 63 61 70 74 63 68 61 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 65 63 61 70 74 63 68 61 2e 65 78 65 63 75 74 65 28 27 36 4c 65 6f 58 7a 6f 6b 41 41 41 41 41 4e Data Ascii: r); var form = $('#SimpleQueryForm'); if (phoneNumber.length > 7) { showLoader(); // Add reCaptcha verification grecaptcha.ready(function () { grecaptcha.execute('6LeoXzokAAAAAN
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 64 64 20 23 74 68 61 6e 6b 79 6f 75 20 74 6f 20 74 68 65 20 55 52 4c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 20 22 74 68 61 6e 6b 79 6f 75 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 68 6f 77 45 72 72 6f 72 28 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 20 77 68 69 6c 65 20 73 75 62 6d 69 74 74 69 6e 67 20 74 68 65 20 66 6f 72 6d 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 21 22 29 3b 0d 0a Data Ascii: ); // Add #thankyou to the URL window.location.hash = "thankyou"; } else { showError("An error occurred while submitting the form. Please try again later!");
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 72 6d 2d 6e 61 6d 65 22 29 3b 0d 0a 20 20 20 20 76 61 72 20 63 68 69 6c 64 4f 66 66 73 65 74 20 3d 20 63 68 69 6c 64 44 69 76 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2d 20 70 61 72 65 6e 74 44 69 76 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2b 20 70 61 72 65 6e 74 44 69 76 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0d 0a 20 20 20 20 70 61 72 65 6e 74 44 69 76 2e 61 6e 69 6d 61 74 65 28 7b 20 73 63 72 6f 6c 6c 54 6f 70 3a 20 63 68 69 6c 64 4f 66 66 73 65 74 20 7d 2c 20 31 35 30 30 29 3b 0d 0a 0d 0a 0d 0a 20 20 20 20 24 28 22 23 66 6f 72 6d 4e 61 6d 65 22 29 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 24 28 22 2e 63 68 61 74 2d 6f 70 74 69 6f 6e 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 49 66 Data Ascii: rm-name"); var childOffset = childDiv.offset().top - parentDiv.offset().top + parentDiv.scrollTop(); parentDiv.animate({ scrollTop: childOffset }, 1500); $("#formName").focus();});$(".chat-option").click(function () { // If
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 3a 20 22 30 73 22 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 61 72 65 6e 74 44 69 76 20 3d 20 24 28 22 23 6d 61 69 6e 2d 63 6f 6e 74 61 63 74 2d 64 69 76 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 68 69 6c 64 44 69 76 20 3d 20 24 28 22 23 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 75 6e 69 74 74 79 70 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 68 69 6c 64 4f 66 66 73 65 74 20 3d 20 63 68 69 6c 64 44 69 76 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2d 20 70 61 72 65 6e 74 44 69 76 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2b 20 70 61 72 65 6e 74 44 69 76 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 72 Data Ascii: transition-duration": "0s" }); var parentDiv = $("#main-contact-div"); var childDiv = $("#contact-form-unittype"); var childOffset = childDiv.offset().top - parentDiv.offset().top + parentDiv.scrollTop(); par
2024-10-21 22:39:33 UTC	2723	IN	Data Raw: 65 20 3d 20 28 75 6e 69 74 74 79 70 65 62 74 6e 54 6f 70 20 3e 3d 20 76 69 65 77 70 6f 72 74 54 6f 70 29 20 26 26 20 28 75 6e 69 74 74 79 70 65 62 74 6e 42 6f 74 74 6f 6d 20 3c 3d 20 76 69 65 77 70 6f 72 74 42 6f 74 74 6f 6d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 49 66 20 74 68 65 20 62 75 74 74 6f 6e 20 69 73 20 76 69 73 69 62 6c 65 2c 20 73 69 6d 75 6c 61 74 65 20 61 20 63 6c 69 63 6b 20 6f 6e 20 69 74 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4f 70 74 42 74 6e 56 69 73 69 62 6c 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 6f 70 74 62 74 6e 2e 63 6c 69 63 6b 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4e 61 6d 65 42 74 6e 56 69 73 69 62 6c 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: e = (unittypebtnTop >= viewportTop) && (unittypebtnBottom <= viewportBottom); // If the button is visible, simulate a click on it if (isOptBtnVisible) { $optbtn.click(); } if (isNameBtnVisible) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49822	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	746	OUT	GET /Content/templates_assets/js/mortgageCalculator.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:32 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 6409 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "681f23658bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:58:39 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:32 UTC	3595	IN	Data Raw: 0d 0a 2f 2f 53 65 74 20 56 61 6c 75 65 20 74 6f 20 30 20 6f 6e 20 66 69 72 73 74 20 63 6c 69 63 6b 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 20 22 2e 66 69 72 73 74 2d 63 6c 69 63 6b 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 24 28 74 68 69 73 29 2e 76 61 6c 28 27 27 29 3b 0d 0a 20 20 20 20 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 66 69 72 73 74 2d 63 6c 69 63 6b 27 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 2f 2f 43 61 6c 63 75 6c 61 74 6f 72 20 43 61 6c 63 75 6c 61 74 69 6f 6e 73 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 27 23 43 61 6c 63 75 6c 61 74 65 4d 6f 72 74 67 61 67 65 42 74 6e 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 Data Ascii: //Set Value to 0 on first click$(document).on("click", ".first-click", function () { $(this).val(''); $(this).removeClass('first-click');});//Calculator Calculations$(document).on('click', '#CalculateMortgageBtn', function () {
2024-10-21 22:39:32 UTC	2814	IN	Data Raw: 20 2d 20 33 30 30 30 30 30 30 3b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 6e 6f 63 20 3d 20 30 2e 30 31 3b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 61 20 3d 20 6e 6f 31 61 20 2a 20 6e 6f 31 62 20 2a 20 6e 6f 63 3b 0d 0a 20 20 20 20 76 61 72 20 62 20 3d 20 6e 6f 32 61 20 2a 20 6e 6f 32 62 20 2a 20 6e 6f 63 3b 0d 0a 20 20 20 20 76 61 72 20 63 20 3d 20 6e 6f 33 61 20 2a 20 6e 6f 33 62 20 2a 20 6e 6f 63 3b 0d 0a 20 20 20 20 76 61 72 20 64 20 3d 20 6e 6f 34 61 20 2a 20 6e 6f 34 62 20 2a 20 6e 6f 63 3b 0d 0a 20 20 20 20 76 61 72 20 65 20 3d 20 6e 6f 35 61 20 2a 20 6e 6f 35 62 20 2a 20 6e 6f 63 3b 0d 0a 20 20 20 20 76 61 72 20 66 20 3d 20 6e 6f 36 61 20 2a 20 6e 6f 36 62 20 2a 20 6e 6f 63 3b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 20 3d 20 70 61 72 73 65 46 Data Ascii: - 3000000; var noc = 0.01; var a = no1a * no1b * noc; var b = no2a * no2b * noc; var c = no3a * no3b * noc; var d = no4a * no4b * noc; var e = no5a * no5b * noc; var f = no6a * no6b * noc; var result = parseF

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: aeb88203-401e-00ac-4ab4-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223932Z-178ffc65759ckzrvkg6aww0ns4000000092000000000378v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:32 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 6ba7c906-c01e-0034-56b4-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223932Z-178ffc65759h6zr9gshwvg1mgg000000094g00000000fbpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:32 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: f1e6ebb8-401e-0048-19b4-230409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223932Z-178ffc65759dpzf5dzapequ9n000000008y000000000f957 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49823	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	740	OUT	GET /Content/image-lightbox-plugin/dreamimage.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:32 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 7578 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "cb2437579af3da1:0" Last-Modified: Wed, 21 Aug 2024 07:18:37 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:32 UTC	3595	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0d 0a 20 20 20 20 24 2e 66 6e 2e 64 72 65 61 6d 69 6d 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 65 6d 70 4e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 73 2c 20 78 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 22 23 64 72 65 61 6d 62 61 63 6b 67 72 6f 75 6e 64 22 29 5b 30 5d 20 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 69 64 3d 22 64 72 65 61 6d 6c 61 6e 64 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 38 35 35 35 35 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 61 64 64 Data Ascii: (function ($) { $.fn.dreamimage = function (tempName) { var cs, x = 0; if ($("#dreambackground")[0] == undefined) { $("body").append('<div id="dreamland" style="position: fixed;z-index:214748364855555 !important; padd
2024-10-21 22:39:32 UTC	3983	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 22 23 64 72 65 61 6d 6c 61 6e 64 20 3e 20 23 74 6f 6f 6c 20 3e 20 73 70 61 6e 22 29 2e 73 68 6f 77 28 20 31 30 30 20 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 22 23 64 72 65 61 6d 6c 61 6e 64 20 3e 20 23 74 6f 6f 6c 20 3e 20 73 76 67 20 3e 20 72 65 63 74 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 22 23 64 72 65 61 6d 6c 61 6e 64 20 3e 20 23 74 6f 6f 6c 20 3e 20 73 76 67 20 3e 20 70 61 74 68 22 29 2e 61 74 74 72 28 22 73 74 72 6f 6b 65 22 2c 22 62 6c 61 63 6b 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 7b 0d Data Ascii: //$("#dreamland > #tool > span").show( 100 ); //$("#dreamland > #tool > svg > rect").css("display","block"); //$("#dreamland > #tool > svg > path").attr("stroke","black"); //},function() //{

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: bd647c25-701e-0053-6db4-233a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223932Z-178ffc65759ph9lb1wbddceht400000008y0000000005sh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:32 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 1a6aed53-301e-000c-5ab4-23323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223932Z-178ffc65759h6zr9gshwvg1mgg000000098g000000001zue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:32 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49821	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:32 UTC	806	OUT	GET /Content/assets/images/Calculator/Huttons-Logo.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:32 UTC	301	IN	HTTP/1.1 200 OK Content-Length: 19289 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "dca2fc9ddcf2da1:0" Last-Modified: Tue, 20 Aug 2024 08:40:31 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:32 UTC	3609	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 26 00 00 01 06 08 06 00 00 00 51 8a 5e ed 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 07 74 49 4d 45 07 de 08 13 12 09 1c 4c 5d f4 57 00 00 20 00 49 44 41 54 78 da ed 9d 77 98 63 55 f9 c7 3f 33 cb f6 bb cb 2e 4b 87 d0 11 16 0c 1d 29 22 1d 15 04 15 05 29 8a 48 94 a2 02 41 51 41 40 14 15 2c e0 0f 82 28 d5 88 62 01 41 90 22 4d 29 82 4a af a1 0b 2c 6c 28 cb b2 85 dd 0d cb b6 99 f9 fd 71 de 4b 4e ee 26 33 49 26 37 93 64 bf 9f e7 c9 33 33 99 e4 de 73 ce 3d e5 7b de f3 9e f7 80 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 Data Ascii: PNGIHDR&Q^bKGDpHYs.#.#x?vtIMEL]W IDATxwcU?3.K)")HAQA@,(bA"M)J,l(qKN&3I&7d33s={B!B!B!B!B!B!B!B!B!B!
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: b8 b8 8d 45 49 c8 38 1b 50 be 4c 32 d5 e5 05 4a 6b 15 96 d8 8c fc 4c e0 2b 2d d4 af 1f 47 32 b5 59 cd e5 55 14 b5 01 2e 68 d8 2e 1d d4 3a be 44 32 f5 f1 f7 f3 29 61 22 96 71 e4 5b 23 9a 2b 4a 92 a9 df e2 62 93 74 02 63 cd 1a e1 2c bb ad 35 e3 1d 89 0b 45 fe d5 16 1b 1b d6 23 5c 52 aa cf 5f 62 1b e0 98 26 a5 b5 59 4b dd c3 81 1f b5 60 1d 92 30 11 43 82 7c 4c 44 33 05 ca f7 69 dd 9d 37 f5 32 0e c8 92 4c b5 9a f3 ee 5a c0 1e 34 3e f6 51 23 d8 8d 64 6a fb 9a 2d 04 ce 5a f2 c5 18 27 54 b7 9b 98 db 13 17 a8 6c 65 7b ad 0f a4 70 cb 50 71 31 99 64 ea 98 9a cb 44 c2 44 08 21 6a 16 23 a1 09 fe a3 b8 dd 13 23 3a 30 97 2b 03 17 93 4c 0d 6f a1 41 a5 9b d6 f5 21 db d0 44 53 ad 16 82 71 c0 e7 62 48 cf 4f 80 09 e4 b2 1f c3 05 25 bb 03 98 4a 2e 3b 83 5c f6 6d e0 65 5c dc Data Ascii: EI8PL2JkL+-G2YU.h.:D2)a"q[#+Jbtc,5E#\R_b&YK`0C\|LD3i72LZ4>Q#dj-Z'Tle{pPq1dDD!j##:0+LoA!DSqbHO%J.;\me\
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: 28 70 04 f0 5a 07 95 ef 22 e0 7b e4 b2 2f 74 62 7d 92 30 59 36 c4 c9 7d 38 0f f2 c2 10 a6 a6 17 b8 8c 5c f6 88 96 2f b7 e2 cc fe ef c0 ad 43 9c 9a 46 84 ab fe b6 0d 8e 43 c9 3a 0d aa cb 33 81 c3 70 16 b7 b7 5b bc 26 2d c4 05 c9 db 9c 5c f6 ce 06 1f 39 d0 ea 14 86 3c 05 a5 67 d3 dc 69 e2 e4 b9 0e 28 db c5 40 86 5c f6 92 4e 15 b9 12 26 cb 8e 48 f9 25 70 d9 10 cd 9c 17 00 67 33 70 50 b1 56 13 74 6f e2 7c 61 86 d2 81 74 55 92 a9 ee 41 e6 63 1a 70 d2 10 cf 62 d7 6b e0 73 59 42 2e fb 03 e0 0b c0 dd b4 c6 96 e8 28 af 00 67 92 cb 7e 84 5c f6 0d 2d dd 0c 61 5b 0e 27 1b ce 17 e3 f3 0c fd 12 ed 60 98 03 fc 94 5c f6 3b 9d ec 38 2d 61 b2 2c 34 cc 62 05 fe b6 89 93 66 32 03 b7 0b e1 d4 ba 4e e5 1c fa f2 bb 05 38 8b e6 85 f8 8f b2 1a 83 09 f6 55 1c cc 2f 37 71 38 54 ac Data Ascii: (pZ"{/tb}0Y6}8\/CFC:3p[&-\9<gi(@\N&H%pg3pPVto\|atUAcpbksYB.(g~\-a['`\;8-a,4bf2N8U/7q8T
2024-10-21 22:39:32 UTC	1812	IN	Data Raw: ad 90 ee 6d 6d 10 0f b9 d3 f2 5e d5 8e 27 4b d7 6f ad 73 0e 07 b1 b1 56 4f 96 12 e1 7e 7a bc f2 8e a6 bd b7 bf b4 47 84 61 0a e7 4b 11 f2 36 f0 a1 20 9d 7f 34 2a 66 ca 3d eb 20 9d 7f 10 e7 8c fe aa d7 cf ee 57 c8 24 3e 51 69 c9 ce 2c 9c 9f 8c 4c 0a 9e 02 3e 1c a4 f3 53 59 7a 49 a1 5c fb 7b 12 f8 32 f0 98 bd f7 d3 41 54 fd 2e 13 53 c3 2d cf b7 00 1f 0c d2 f9 9f 5a 7a e6 59 1f b2 b0 8c 63 75 86 d2 25 99 27 81 bd 83 74 fe 89 6a ca 0f 58 14 a4 f3 3f f4 44 7c 28 4e be 59 c8 24 b6 6d 97 7e 18 38 df 7e 7f 01 38 2c 48 e7 ef 32 c1 37 d0 77 17 07 e9 fc 0b c0 6e 91 3e ed 4b c0 6e 16 22 40 c2 44 b4 15 0b 6d 30 c2 66 cf df 0e d2 f9 1f 54 21 2c 00 7e 14 b1 5a fc 31 48 e7 2f 2c d3 71 57 ea 5c c3 3f 0f c1 f9 11 f8 0d 6a 72 44 8c 84 03 c2 2a 94 ee 72 98 13 a4 f3 27 95 fb Data Ascii: mm^'KosVO~zGaK6 4f= W$>Qi,L>SYzI\{2AT.S-ZzYcu%'tjX?D\|(NY$m~8~8,H27wn>Kn"@Dm0fT!,~Z1H/,qW\?jrDr'
2024-10-21 22:39:32 UTC	4096	IN	Data Raw: b1 17 85 4c 62 3a 2e 80 de 5d 26 2e 5f 04 16 17 32 89 be 4a a7 4d c7 2d 44 6c c6 d7 65 67 2f 6d 89 3b af 69 1b 1b 58 36 18 40 4c 2e b6 e7 d9 0c 71 d2 4d e9 d6 ec 1d 80 57 22 67 cd 0c e6 da d1 f6 e6 3f 87 49 de ff e6 62 e1 cc 1b c0 6b 83 f8 ee eb d4 e6 b4 3c 9a 52 eb d6 8b 0c 3e 1c bc 5f 46 73 22 c2 a4 1d 3c 3f a7 35 f0 5a 61 a4 e1 90 35 e9 60 24 4c 3a 93 5a d7 5e a3 71 01 82 98 d2 15 44 07 99 c8 f9 3c cb e3 02 5b 1d c9 c0 5b e2 96 d8 c0 b5 18 e7 20 fa 1c 6e 5b dd 15 0d 4e f3 e8 48 3b 89 2b 86 c2 f8 72 9d b2 95 cf 4c 60 f7 42 26 f1 69 5c 44 cc c9 26 4c 46 46 be b2 32 6e bb e6 e7 bc 7a 70 03 f0 ab 42 26 91 0b d2 f9 b9 71 9e bc 1c 79 9e 98 e8 d8 11 17 b0 ec 33 65 d2 eb d3 e3 3d cf 25 36 08 9d 81 0b 12 d6 8c 41 28 ac 7f 7e df 18 97 7f cb c8 7e da df 02 06 77 Data Ascii: Lb:.]&._2JM-Dleg/m;iX6@L.qMW"g?Ibk<R>_Fs"<?5Za5`$L:Z^qD<[[ n[NH;+rL`B&i\D&LFF2nzpB&qy3e=%6A(~~w
2024-10-21 22:39:33 UTC	1580	IN	Data Raw: a0 71 8b 5d 6b b1 bd a6 52 ea d0 d9 47 e9 31 e2 8b ab 29 1b fb 7d 2a ce db ff 10 9b 79 2d a1 78 1a b3 9f de e1 f6 5e 8f 7d e6 35 e0 d8 20 9d df 36 48 e7 9f 1f 28 12 aa 37 73 ef 0d d2 f9 13 6d 70 fa a7 e5 a3 c7 7e 76 57 28 a3 f0 ff 4f 9a 20 d9 c6 4c fb 55 dd 33 48 e7 67 e2 9c 2f 2f 31 0b c5 62 cb 43 f8 0a 9f 79 b9 81 a1 10 a4 f3 c7 db a0 fa 92 7d 37 1c 08 96 8b 94 4f 78 9d 85 66 19 da 32 48 e7 6f 8a f8 20 6c 87 5b 9a 99 ee a5 e3 0d ca 1c 7c e8 e5 ef c7 c0 d7 cc f2 b6 28 92 f6 5e bb 4e 5f 7f cf da f2 72 9d 59 05 7f 69 d6 a2 72 e5 3e dc f2 d5 e7 3d eb 7f 00 c9 20 9d 3f 23 2c af 5a 82 e3 85 ed 39 48 e7 af 08 d2 f9 ad 4d d4 1d 88 db 46 7c 11 6e 69 e8 d7 66 f2 df 2c 48 e7 27 5b d0 b6 25 5e b9 45 63 c0 f4 17 e8 ab cf 2b 27 bf 4f a9 bb 1f b1 7a fb 98 59 c5 be 69 Data Ascii: q]kRG1)}*y-x^}5 6H(7smp~vW(O LU3Hg//1bCy}7Oxf2Ho l[\|(^N_rYir>= ?#,Z9HMF\|nif,H'[%^Ec+'OzYi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49835	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	439	OUT	GET /Bookappointment/Property/c4f90d03-3f83-4812-97de-557314d69352.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:33 UTC	516	IN	HTTP/1.1 200 OK x-amz-id-2: yJPNMbzm+aNIwfD8wn4CU5NeZo1wl8R42OeKuHWCemAvf/0+pZs4MZipqg4eqIEfleC/xDlNg+IbZkv/fPXoMw== x-amz-request-id: CVWYV894P280T84Q Date: Mon, 21 Oct 2024 22:39:34 GMT Last-Modified: Wed, 09 Oct 2024 08:47:45 GMT ETag: "23de7a5206d1bef88ebe75f503e41635" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: wp6x2MeQgB7ZIGCz1NhotMktE6Cwm1tG Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 1606744 Connection: close
2024-10-21 22:39:33 UTC	15777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 01 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0e 00 00 01 03 00 01 00 00 00 d8 1b 00 00 01 01 03 00 01 00 00 00 20 0f 00 00 02 01 03 00 03 00 00 00 b6 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 bc 00 00 00 1b 01 05 00 01 00 00 00 c4 00 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 cc 00 00 00 32 01 02 00 14 00 00 00 e8 00 00 00 69 87 04 00 01 00 00 00 fc 00 00 00 22 01 00 00 08 00 08 00 08 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 33 20 57 Data Ascii: JFIFHH,ExifII* (12i"HHAdobe Photoshop CS3 W
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 32 ee 17 ed 93 e2 dd 70 de 58 b9 90 79 55 9f d4 de 2a 72 4b dd 8f 33 f7 b4 d3 5d ff 00 1f cf 72 f9 b9 23 cc d3 b2 5a ad 9b f7 75 fb de cd 9c 11 b4 d5 fc 5c 9a 66 83 e1 dd 21 e4 9a e7 59 b9 8e d3 4a d3 63 69 9e 40 96 d6 2c 97 17 d2 e5 4d c3 23 48 ef 25 ed db 2c 56 e5 98 22 c3 08 58 47 ab 43 0f 87 c1 52 f6 ae f4 e2 bd da 95 e6 b7 e8 94 5d b9 9d de 9c aa ee 4e da 18 4e ac ea fb b1 db a4 17 6b 6b 7e fc b6 bb 6b 48 ad 65 64 7e 8c f8 6b 4a 8b e1 af 81 bc 37 a5 78 cf 65 d7 88 f4 fd 0e d6 d4 f8 67 4e bc dd 2f 9c a8 e4 8d 4a f9 55 7f b3 b4 f3 e6 01 22 2a 7f 69 5d 8d cb 0f d9 21 28 f4 f1 fc 57 57 01 95 cb 2a 75 25 4b 0f 56 a5 5a f2 c1 50 94 61 8e c6 7b 6f 67 cd 4f 15 57 59 60 30 76 87 2c e9 a7 f5 ac 5c 26 d4 9d 38 ea 55 0c 0b af 55 55 87 24 9d 3f 76 38 ab 39 51 86 Data Ascii: 2pXyUrK3]r#Zu\f!YJci@,M#H%,V"XGCR]NNkk~kHed~kJ7xegN/JU"i]!(WW*u%KVZPa{ogOWY`0v,\&8UUU$?v89Q
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 8f a6 3f a8 ff 00 eb 7b d5 c1 da ff 00 d7 f5 fd 58 cb 96 4f a7 e9 f9 8c 2b ce 4f 75 c9 fa d4 df de d3 cd af bf fe 08 dc 39 52 7f d2 24 09 85 04 1c 7f fa fd 68 dd ea 4e fa 77 15 ba e3 76 57 f5 fe 99 fa 51 cd 6d 39 ad eb a7 f9 9a aa 71 5f d5 bf 22 22 9f 80 3e dc fe 07 ff 00 ad 48 e6 94 3f 97 fa fb c6 1f ee 81 8e de 99 fa e4 81 fe 7b d5 c6 56 52 f2 4e 4f c9 2e af c9 75 fc 11 1b b4 ba b6 a3 f3 db ee fc 11 f1 77 ed 83 fb 57 e8 bf b3 c7 85 df 48 d1 26 b6 d4 be 29 6b f6 6f fd 85 a4 16 59 13 44 b7 70 d1 ff 00 6f eb 31 8f b9 14 3f 31 b1 b5 73 ba ea 5f 9b 02 34 2d 5f 19 c5 bc 4d 2c bd 7f 65 65 8e 2f 36 ab 4b 9a b5 6f 72 6b 28 c3 ca 4a f5 a5 ef 3a 7f 5e ad aa c2 e1 e7 79 53 8a 78 8a f0 8c 14 23 5b eb 78 6b 87 63 98 4a 39 9e 3f 9d 65 94 aa da 85 2f 7a 12 cd 2b c5 6b Data Ascii: ?{XO+Ou9R$hNwvWQm9q_"">H?{VRNO.uwWH&)koYDpo1?1s_4-_M,ee/6Kork(J:^ySx#[xkcJ9?e/z+k
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 7a 4a 3e ed 39 53 8f 2b 3b cb 8d 59 6c 21 b4 48 04 72 dc be 99 05 9c fb b2 63 b2 78 e7 92 59 16 50 0a 87 9b 6c df ea d4 85 8b 93 74 54 a0 81 bf 75 95 27 2c 2d 79 69 18 2c 34 e4 e7 26 a3 1f 72 84 ae 9b 95 92 d9 dd b7 68 f5 7b 9f 9c 46 b4 69 d6 a0 ae e5 2f 6a a3 cb 1d 5f bf 53 47 f3 e9 dc f2 0f 1f 6a 1a 35 c5 8c ad 7c 91 a5 b8 99 9a c6 e0 33 35 fd dc b8 da ff 00 d9 d1 a9 54 f2 47 57 b8 91 4d bf 96 d9 2e ee fb 57 f3 0e 29 cf 72 ec 76 07 0b 84 86 1e 95 48 61 e9 52 85 3c 6c a9 cb eb 75 2a c2 3c b2 8e 16 ee 32 b6 fc d5 6b 47 d9 b8 dd 52 e6 76 91 f6 19 2e 5d 89 c2 d7 ad 5e 55 6b 43 da d5 ab 29 61 5c 97 b2 fe 2c ec eb da f6 9a de 10 8c 97 2f db 5f 64 f9 ca fb 50 54 6d 91 06 67 91 f1 14 7b 83 33 33 1c 22 fd d5 0c 40 f9 77 04 53 81 9e 31 5f 98 4e 9b ab 27 0a 50 6e Data Ascii: zJ>9S+;Yl!HrcxYPltTu',-yi,4&rh{Fi/j_SGj5\|35TGWM.W)rvHaR<lu*<2kGRv.]^UkC)a\,/_dPTmg{33"@wS1_N'Pn
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 00 71 8e 3a 7d 06 0f fd f5 9a ba 95 af 76 9f de b7 ff 00 83 d8 89 6d af 96 c7 45 6b 1a c6 ab 8d df 31 53 f4 1e 98 24 1c 2f e1 f4 af 3e a5 5d db 7a d9 ad 35 f2 d7 fa e8 69 4a 9a 5b df 57 f9 ff 00 5f 2d cd 45 61 8c 74 ae 37 3d 74 d7 d4 e8 94 2d b5 df cb fc 8a f2 97 2a 40 e7 76 33 f9 e7 f2 e3 1d 6a e1 3d 56 fa 7f 5a 11 ca ff 00 97 ff 00 25 fe bb ff 00 57 28 4c d8 21 1a 3c 6e ea 3a 8f e6 3f 4e 95 d1 ed 2f f6 99 3c 8a e9 38 ef ea 3e 38 62 27 1b 54 74 e4 8e 3f 2f f3 ed 4a 75 9c 76 b5 be ff 00 d4 bf ab c3 fa fe bf af 22 e6 c4 fe e0 ff 00 be bf fb 1a c3 db cf cf ef ff 00 80 3f 65 fe 1f eb e4 7f 97 2e a7 e0 b9 a4 9e fa 5f 0b 69 d7 fa 7e ad a6 c4 f7 ba df c3 db f9 9a f7 59 d3 6d 55 bf 7b ab f8 5e f9 54 0f 18 78 59 70 5f ed 16 d1 9d 63 4b 4f dc ea 36 b2 79 6d 74 c6 Data Ascii: q:}vmEk1S$/>]z5iJ[W_-Eat7=t-*@v3j=VZ%W(L!<n:?N/<8>8b'Tt?/Juv"?e._i~YmU{^TxYp_cKO6ymt
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 6f 3f 99 3f 0e d1 22 66 cb 7c bb b9 ec 71 eb 9f ca a7 9f c8 cb 96 5d 85 58 d8 9c e3 91 c9 5f 5e 7e bf 8e 2b 30 e5 7d 98 b2 2b 9f 9b f0 23 b7 e9 ff 00 d7 cf ad 1b 7f c3 87 24 9f 97 dd ff 00 0e 20 4f bb dd 87 e5 d3 a7 6f f3 de a5 4a fb 27 a7 f5 dc d5 53 5d 5a f9 e8 39 c0 0a 41 1d ba e7 fc f4 fc ea ef d7 e7 fd 58 1f 2d b5 db e6 61 6b fa e6 8f e1 9d 1f 53 f1 17 88 6f ed f4 9d 17 47 b2 9a fb 53 d4 2f 1f ca b7 b6 b6 85 49 77 72 4f cc c7 84 8e 35 cb cb 21 58 d1 4b 30 15 c3 98 66 18 3c b7 07 5f 30 c7 56 54 30 d8 68 39 56 ab 7f 7f b4 63 0a 57 52 a9 56 52 6a 34 e9 45 73 54 9b 51 5a c9 1a 60 70 58 9c c7 17 43 05 83 a6 ea e2 71 13 8c 69 d3 5a 75 d6 52 96 d0 a7 14 a5 2a 93 7a 42 0a 53 7a 23 f9 e3 fd ac ff 00 6a 2d 5b e3 cf 8a 1a db 4e 6b bd 37 e1 cf 87 e7 96 3f 0d e8 Data Ascii: o??"f\|q]X_^~+0}+#$ OoJ'S]Z9AX-akSoGS/IwrO5!XK0f<_0VT0h9VcWRVRj4EsTQZ`pXCqiZuR*zBSz#j-[Nk7?
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: eb d9 1d 5d 86 90 e5 f7 3f 0c 47 0b 80 71 91 cf 23 9e a3 fa 9a e0 ab 88 de df af e1 eb e5 f7 9e c6 1f 05 cb 29 dd fb d1 4a d6 d5 7f 5e 8d 6c 8e d2 c7 c3 13 dc 3a ac 41 70 bf 36 18 fd e2 e3 ae 7a 9e 7a 0f 6f 5a f3 6a e3 61 4f 59 4a dc da 25 a9 e9 52 cb 6a 55 97 2d 3f b3 6d 1e f2 be c9 35 a7 af a9 e9 ba 27 80 ee e5 60 59 36 84 1f 36 f8 f2 db 8f b6 0f 1e e7 a1 af 23 11 99 c1 69 17 ad fb bb f6 e9 fd 7c 8f 73 0d 94 55 71 8f b8 bd cb eb 2d e2 de f1 d2 d1 fc 3c f5 3d 26 c3 c0 91 40 03 4e 53 23 a7 c9 8e 83 3c 79 6d bb 3d fe 65 c5 79 15 73 0e 77 a7 33 ee ef ee d9 f9 7e 7b ec cf 62 8e 55 4e 17 75 25 05 36 ad a3 db b7 53 b4 d3 b4 98 2c 00 d8 32 df c4 ec bd 73 d1 7d 76 ff 00 b2 7f 2a e0 9d 59 d5 97 bc da 8d 9e de be 67 75 35 87 c3 26 a0 dc 9f 5b 6b 6f f8 1b 79 79 6c Data Ascii: ]?Gq#)J^l:Ap6zzoZjaOYJ%RjU-?m5'`Y66#i\|sUq-<=&@NS#<ym=eysw3~{bUNu%6S,2s}v*Ygu5&[koyyl
2024-10-21 22:39:33 UTC	3392	IN	Data Raw: 7a 70 3b e3 bf 5c 61 39 c7 d5 79 e9 f7 7e a7 75 4e 67 0e 48 b5 64 f6 5b 76 d3 fe 0f e6 6b db 6a 2d 0e c9 21 fd dc b1 90 78 e3 a1 ce 5b d7 fa 7e 55 1c d1 6b 97 ff 00 6e ff 00 25 f9 1c 4e 84 95 d5 af fd ed 2c bd 3e f3 51 bc 45 77 22 9f 33 6b 92 85 73 23 39 c2 e7 24 f4 04 f5 f9 7a fe 55 0a 31 8d f9 55 af fd 7e 80 a8 79 fa 2d ff 00 42 3b 4d 4a 3f 34 b4 80 e7 ee 86 e3 f8 86 4b 60 1f 4e 39 fc a9 4a 56 da cc 7e ca 4a fe ef 2f ad cd 25 9a 0b 89 7c b4 cb 11 d7 9f cf a6 7a 0a 5c fd ef e6 b4 ff 00 87 32 f6 72 d6 5e 7f 2d c7 35 8e 79 8c 9e bd 71 91 c7 f2 f7 ed 53 ed 97 cf e6 5f 91 24 16 8c 87 6e d2 4f 5f 6e 7f 0c f4 fd 07 d6 a7 da d9 df 7b fe 9f 34 69 18 75 7e 56 36 ed ad 8e 46 e4 dc 78 c9 fe e8 c8 fa 76 e9 5c 95 67 cb af f5 fd 76 fc 48 f8 9f cf fa bf f4 8e 8e d8 08 Data Ascii: zp;\a9y~uNgHd[vkj-!x[~Ukn%N,>QEw"3ks#9$zU1U~y-B;MJ?4K`N9JV~J/%\|z\2r^-5yqS_$nO_n{4iu~V6Fxv\gvH
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 59 3f cb d4 e6 a7 d6 4c 2a ce 08 38 53 d3 fc 7a 7f 93 8a e4 73 8a 4f ed 3e 8b d7 4b df ca e6 bc bc cd 6b 6d 4b 51 69 db ed 86 a9 ac dc f9 36 6a ab 36 65 22 28 23 52 be 67 cc 5c ac 7c 26 49 96 69 15 17 bf ad 6d 1c 14 3f 8f 5f 9e d6 e7 72 fb 36 5e 56 db a6 be 6e ce d6 7c f2 ad 39 3f 67 0e 8f 95 db ed 7f 8b 4d 7b ad 3b 1e f7 f0 ce fe cf 5a f0 2c 4f a1 ff 00 a4 5b c9 e2 cd 5a 08 5d 54 c6 b2 1b 6b 0d 3d 65 91 4c be 58 f2 57 07 33 ba c7 16 15 98 7c a3 73 77 57 a9 45 e5 34 6a d2 7c d4 fe bb 8a 7c dd 2f f5 6a 37 b3 fb 49 72 7c 5a 6a fa 5a ef 18 53 9a c5 d4 8e ae 5e ca 9d ff 00 f0 29 9d cd cd 86 8f 69 e1 af 11 eb 9b ed 35 cd 47 43 93 4f 81 ed 26 5f 37 44 57 d4 85 f8 06 42 0a ff 00 68 3d ab d9 e5 97 6b 5a b6 e2 a4 36 d3 5f 25 2f 67 56 a6 8f 9b d9 54 a6 ec be d7 37 Data Ascii: Y?L*8SzsO>KkmKQi6j6e"(#Rg\\|&Iim?_r6^Vn\|9?gM{;Z,O[Z]Tk=eLXW3\|swWE4j\|\|/j7Ir\|ZjZS^)i5GCO&_7DWBh=kZ6_%/gVT7
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 8c 71 c7 a1 de 1f 34 e9 0a d5 28 35 1a a9 72 fc 3e d2 ce 51 bf 45 2e 5d 6d 6b eb 0f 79 69 d2 e7 ad 2c 16 0f 38 a6 a7 97 fb 98 85 cc ea 65 b5 1f 2d 48 bd 6f 2c 15 4f 86 49 bd 5d 3d 63 2b ec be 28 fc d4 34 dd 53 c3 1a 93 e9 fa 94 72 c9 15 ad f3 e9 ef 72 f6 f3 da 5c 5b 5e 43 f7 f4 dd 5f 4f b9 55 bb d1 75 68 82 e2 5d 3e f0 06 61 fb db 49 6e ed 9a 39 db a6 a4 14 97 b4 8d b6 e6 76 92 94 64 b6 ba 6b f0 eb d1 fb d7 3c 08 2a b4 65 2a 73 8e 90 a9 28 73 59 a9 c1 ad e9 d5 83 d6 13 5a ae bd 1a 6e 2d 33 db b4 59 04 90 2e 09 39 50 df 4f 4e 9f 9f d4 d7 14 a3 6b be ef f4 ff 00 3f f2 3d 9a 13 4d 46 57 d3 5f cb 5f cc fd 7d ff 00 82 79 ff 00 c8 23 5f f4 1e 3e d0 f8 fe f7 fc 4a ad ff 00 fa f4 f0 09 7f 6e e5 1f f6 1b 84 ff 00 d3 f4 bf 43 ea 28 db fd 50 e2 86 9e af 05 98 7d df Data Ascii: q4(5r>QE.]mkyi,8e-Ho,OI]=c+(4Srr\[^C_OUuh]>aIn9vdk<es(sYZn-3Y.9PONk?=MFW__}y#_>JnC(P}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49834	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	435	OUT	GET /Bookappointment/Property/fc467042-6800-4049-83c5-910869ceffef HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:33 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: 5Uwk1ohlQgmk1c2sEWQ9Go41dVkD3RasDGNElapTy1Lq4tYtF5UpJ3kzJjRKnI876g1UpXx1beTw1PIiWLs0Ow== x-amz-request-id: CVWM5BWBWTA8QH7P Date: Mon, 21 Oct 2024 22:39:34 GMT Last-Modified: Tue, 17 Sep 2024 07:35:36 GMT ETag: "d99b5c3ed8dda3eedc62918e4bd78716" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: 4Lb5ryGKnkHEU297Re2.cFZUAM0eFSwi Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 577902 Connection: close
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 02 8a 08 06 00 00 00 cb 16 a9 a6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 8b 96 6c cb 52 1d 56 d5 fb 0e f9 ff 3f 41 3c 0c 32 fa 0e 21 63 59 16 36 b6 8c 7d 01 01 06 84 87 3c 64 69 5c 71 9f a7 db 23 63 ce 19 31 23 32 57 55 f5 3e 1b 6c 5f 4e c3 3d bb bb 6a ad 5c 99 91 f1 9c 11 19 eb fe 7f fe f8 9f 7f 7c 7c dc 6e f7 fb fd 76 ff f8 b8 c5 1f f1 ff f8 77 fd e4 ef 77 fc 1d 5f 7d 7c dc d6 9f 1f b7 b7 f5 07 ae c5 07 fa cf ed 76 cf 01 30 c6 fc f9 78 1b 9f e0 9a 8f fb 3d c6 8f b9 1c 7f 34 11 7d b9 46 5f 73 b8 df d6 ff c5 7c ec e7 c3 2f f7 35 e9 da 3b a6 7a fd 3c 2e 3b ae 69 23 db 1f 73 4e f8 ea fe f1 7e 7b 0f c2 14 59 6a d6 1a ef 3d c7 89 f9 af 9f f7 8f db 3d 96 f2 01 Data Ascii: PNGIHDRsRGB IDATx^lRV?A<2!cY6}<di\q#c1#2WU>l_N=j\\|\|nvww_}\|v0x=4}F_s\|/5;z<.;i#sN~{Yj==
2024-10-21 22:39:33 UTC	509	IN	Data Raw: af ba 87 28 e0 d8 9b e9 60 4d 9a f3 8e 48 35 de 36 d5 5a 9c 7a a2 23 e9 4d 36 7b 80 ad 1e 37 01 ce 1a 8a 44 cf 14 2d 9d af fa 29 a5 2b ca 96 9c 8e 8d 76 23 1e 52 7b c1 4b d4 d6 96 37 95 03 d5 c1 ea b7 6d b8 60 00 00 20 00 49 44 41 54 30 e8 97 55 ed 8d bb bf 00 86 6f d8 3d 06 8b 9a 0e 4e 46 0b 76 a8 0c 02 4b 4f 3e 8f a7 95 02 5a 1e 4a ea 8a 75 6c b1 e5 cd 8b 21 21 54 80 ce 9e c5 27 73 67 9e b7 70 b5 ca d3 c3 f8 a9 bc 26 4c c9 d9 00 ba 91 d1 ee 15 c4 a0 c9 f3 19 03 cd 80 3b 93 ab de 0a 52 ba 89 7f c5 c0 7c 8d 79 f8 d4 3d 9e f3 f2 65 6e 5a 70 56 4b 76 3f a4 8a 56 7a e4 75 39 97 57 72 11 a9 1f e6 21 a6 83 d2 97 32 79 a1 a2 0e 7b ba 00 df 4a 13 94 71 b6 fd 4e 87 49 09 c9 f2 5e 1c fa 7c 9d de 6e b8 31 f8 e4 01 1c e3 24 96 66 5f 9e 72 88 f5 5c 7f 75 af 1b 01 29 Data Ascii: (`MH56Zz#M6{7D-)+v#R{K7m` IDAT0Uo=NFvKO>ZJul!!T'sgp&L;R\|y=enZpVKv?Vzu9Wr!2y{JqNI^\|n1$f_r\u)
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 5f 83 8e d5 b5 4e c6 65 cc 1d 9b 75 49 b4 5a 02 e1 3a 70 fc b9 b0 ef 14 25 7c 5b 83 fe c2 3c 4b 7b d5 91 86 d4 34 fc 45 b2 e2 3d fa cd 3b 46 5e cb ae 75 a3 73 5d 99 f0 6c bb b7 ef 5b 1e 7c 7e eb da 8c ee b4 5e d8 92 97 4e c9 98 73 1e f6 a5 d2 4d c4 86 89 cf a7 43 4b 83 72 8c 6c db fc 24 a8 57 8a 7b 27 85 23 96 4a 0b 40 79 76 95 5b e6 c1 bf a8 85 24 b2 36 f6 61 03 5b 32 12 87 4c 24 ad a5 8d f5 70 39 a9 32 a2 6d 5c 57 d1 56 a7 e3 29 45 53 68 4a 07 88 4b f1 15 fe 02 90 69 e9 9a 98 96 3b 26 d0 c0 a0 87 55 5b 53 99 2a 55 26 bd b3 50 2f 84 0e 39 f1 16 ec b6 ad 17 a4 1d 96 8c 46 2b cd 4f 15 bf 9d 8a 70 35 9f b6 a3 7a 24 03 84 76 dc eb d3 52 70 be a1 4b ba 20 7f ba 40 6e 45 14 d7 27 bb 38 3d 0e d7 53 ae dc cd ac c8 dc a1 f1 6e a0 1f 2f eb 20 07 83 cf e6 f4 b0 cb Data Ascii: _NeuIZ:p%\|[<K{4E=;F^us]l[\|~^NsMCKrl$W{'#J@yv[$6a[2L$p92m\WV)EShJKi;&U[S*U&P/9F+Op5z$vRpK @nE'8=Sn/
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 21 87 a1 8e 8b e1 11 42 0b bc 18 4b 30 b4 cc 61 6e 58 91 5a a8 00 8f ee 79 51 55 e6 cd 03 4c 60 81 5b 0c 01 5a 83 22 e4 21 42 d1 70 72 89 94 08 89 08 a2 56 bd 83 fa 89 db 24 b8 91 55 78 aa 63 58 59 f2 9a ce 8d 3d d7 69 b6 7e 7f 2f 27 04 fe c0 ca 55 af a8 da d2 25 eb 1a 36 e3 d1 9c 74 5e 1a c6 9d ae 48 d6 65 54 6e f9 55 bd f0 c3 75 3f 50 e0 15 0a 78 24 5d f2 34 4e 5b 79 2b d0 57 06 95 a8 79 20 6c f7 25 aa 96 6a ff 15 a3 ee d7 98 1e 9b ad 5f d9 ff 70 bc 79 65 99 70 18 45 1d 89 58 8b 6d 2f 33 62 35 b3 02 a7 ee 4d bb 7f b3 1b 39 39 0a 3a 95 15 66 53 8b 7f da 0c a6 1b df 7a 41 8b ea b3 78 4e 55 39 32 42 d7 79 bc c9 a6 13 f3 e0 19 53 bd a4 36 1a 83 b2 f8 05 47 55 f8 bc 39 af c0 55 0d 66 67 34 93 f0 af 19 69 a9 de f9 92 12 81 18 75 fc 6f 7b 85 c2 91 7d 3a c4 c8 Data Ascii: !BK0anXZyQUL`[Z"!BprV$UxcXY=i~/'U%6t^HeTnUu?Px$]4N[y+Wy l%j_pyepEXm/3b5M99:fSzAxNU92ByS6GU9Ufg4iuo{}:
2024-10-21 22:39:33 UTC	15861	IN	Data Raw: 8a f6 ed a8 58 e3 6c e5 c7 f5 d2 21 c2 5a 7b 14 aa ac 36 1c 0a 8d 81 48 43 d1 f7 3a 7f 6f ea 6b a4 25 32 cf 1e 9e 93 50 17 8c e4 f9 76 c8 eb 17 9e 7d 56 0a a6 f6 64 1d cf 5b ef 97 0e ac 65 a1 16 02 f4 e3 25 1e ca bf ab 38 95 fb 14 73 49 fc 27 73 fe 89 e2 5d 38 a9 af 49 f6 0f 57 fd 40 81 6b 0a 08 37 7d 46 a3 44 99 18 30 86 a9 b7 e0 f1 74 ff b5 41 7f f6 b4 fe 7d 15 df 7e ee be 67 57 23 bb 5b ce 03 ab dc 95 03 64 9e 1c a9 d5 17 5f 6a 52 8f 44 d7 ad aa 7a 8e 1c 5f 68 cc 6a 98 7f 99 ff 4d f3 7e 0d 93 5c 15 c5 c8 67 40 9c 29 43 f0 6e 85 4d d0 35 a1 72 66 21 33 3f b7 34 72 c1 ee 34 b6 6a 49 5b 3a 09 ce 09 3a 5c 29 38 36 43 fd d0 ed d3 28 55 0d de 37 cd 8a 82 e8 f0 e0 31 e5 18 21 1f 4a da 0a d1 60 ee 39 e1 69 d6 02 ea bd 29 40 0d 30 20 fa 51 f3 cc 6b 46 a5 4e 77 Data Ascii: Xl!Z{6HC:ok%2Pv}Vd[e%8sI's]8IW@k7}FD0tA}~gW#[d_jRDz_hjM~\g@)CnM5rf!3?4r4jI[::\)86C(U71!J`9i)@0 QkFNw
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 47 30 15 a5 46 28 ae a0 ce 11 bd ea 0e 46 e9 79 12 11 11 e6 fe bc e2 1b 0e 06 50 0c 4a ea 61 8c a9 18 4f 4a 12 d3 9a 09 bf b9 24 00 05 de b6 73 48 6c 1a b8 0f 94 51 5e b3 f1 cb ae 0b b0 d5 dc c9 87 27 0e e0 52 2d 0e 7e d6 dc 41 72 6c 3f a7 31 4d 1e 36 9e 00 c7 85 93 17 67 cf 64 49 1d f6 b2 48 ed 34 09 3b b6 83 fa 38 c3 c3 78 e9 34 97 a4 57 39 7f a5 dc 18 ce 58 86 6a 9d 46 27 5b 6b 7d 25 2e 56 8b 76 be 9a b4 93 f3 8b 76 f3 f6 ed f6 cd 37 b7 db e6 64 d1 4c 35 6d 6d ee b4 ed d9 aa bd 3c bc df 1e 3f bc db be fa fa ad b6 9c 9c b7 f9 e6 66 9b 6d cd 4d 59 b4 c5 64 a3 9d 5c 6c b6 a7 87 f3 f6 e1 9d f3 36 bb 38 6e b7 76 2d b9 99 6b a3 7e 42 e1 9c 48 90 69 90 c3 5a cc 77 79 4f 94 3b 37 5b 47 27 3a 05 b8 ae 68 0c 7e b4 48 3a a5 c9 04 c9 c9 68 5e 5f 8d 1f 8f a0 f3 e4 Data Ascii: G0F(FyPJaOJ$sHlQ^'R-~Arl?1M6gdIH4;8x4W9XjF'[k}%.Vvv7dL5mm<?fmMYd\l68nv-k~BHiZwyO;7[G':h~H:h^_
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 5c 24 90 7d 2b e2 3d 0c d0 e5 91 03 b8 78 5e 73 94 47 c0 d2 99 4e 37 20 a0 1e 0e 07 d5 8e 4d 30 43 13 19 ef 41 67 ee 81 c5 95 0d 60 e6 ed 62 7a 03 40 1e ad eb 3a 19 ff 42 ff 70 cf 7a b9 68 ef ff d5 77 da bf f9 a7 ff 53 3b 3b 3b 6b f6 99 d1 e9 d6 cc c5 59 01 b6 5b f5 b2 33 5a ac 76 4c a9 2f 34 63 61 f6 bb d7 6e 7f a5 7d f5 6b bf e3 27 5e c1 6b e2 4c 15 24 52 a2 50 4f b9 96 1a e5 01 49 59 b3 d6 ed 3b 7e e6 b5 32 95 7b 83 79 9d aa ea da 4f 2a 59 06 50 63 42 e3 67 59 0f fe 68 5c e9 d1 0f da b7 8e cc 72 67 a8 8d dc b3 7a 90 fd 06 e0 e6 1f 18 0d 09 e6 e9 c9 ea 1e 56 1c 11 a3 16 a8 7b bb 42 fd c2 ff 41 4f 3e c1 a7 86 cf d7 00 70 10 9b c3 ba 66 2c 0f d9 fa 38 71 4a c0 97 14 62 6e d2 e1 d4 f8 73 3c 4b 15 d5 9f a9 5e 94 f5 4e c5 14 21 13 9e d5 5d ca 6f 74 4f ac bd Data Ascii: \$}+=x^sGN7 M0CAg`bz@:BpzhwS;;;kY[3ZvL/4can}k'^kL$RPOIY;~2{yO*YPcBgYh\rgzV{BAO>pf,8qJbns<K^N!]otO
2024-10-21 22:39:33 UTC	12824	IN	Data Raw: 26 99 5b e0 df f3 0d 86 96 c9 15 1f 5c df a8 75 ba be f3 f4 e3 7f 03 40 07 9a e3 d5 fd 47 7a dc 04 6f cf 24 ad 7d d7 d5 40 46 89 6e 1e 27 df 6a 93 89 95 a0 ed 91 5e c0 84 8d c7 bc ae 52 a5 fc 5e 6b 7e 82 d9 5f fe e9 ff dd 3e 7a e7 cf db 83 3b 1f 23 23 7d b5 f2 c3 28 bc 5f 75 9c e7 cc 5e d5 d4 2e 66 2d 19 d8 6f ed ec b5 83 9b af b7 bd dd 9b 6d 73 6b a3 cd ad 4f ba 92 54 ba 21 d4 b8 48 1e 38 8f d9 5c 07 03 e5 91 60 b2 87 bf cf 0d 99 50 4d e5 51 3d 06 5a 70 21 c7 a2 93 b5 29 d7 08 a8 ab e7 0c f3 0c 93 44 60 28 a7 2a 05 71 fc 7d 74 e7 e8 3b c0 57 92 a7 61 41 14 95 d8 f9 2b 57 43 48 d9 ad fe 7c d0 d6 12 5e f7 b8 6a d9 90 bc 74 6a 14 8d f8 ff a7 ec cd 62 2c 3d cf 33 b1 e7 ec 7b ed 7b 55 2f ec 85 6c b2 49 6a 23 0d 4b 96 37 39 1e 7b 66 82 20 19 23 01 82 e4 2e 40 Data Ascii: &[\u@Gzo$}@Fn'j^R^k~_>z;##}(_u^.f-omskOT!H8\`PMQ=Zp!)D`(*q}t;WaA+WCH\|^jtjb,=3{{U/lIj#K79{f #.@
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 1c 61 47 3a 87 52 69 8a f7 7b 6e 7d 03 d7 2f 6d a0 d6 ee e1 93 f7 6f e0 60 77 93 99 68 12 5b f9 f2 1c 57 9c 43 2a cb 14 3a 05 5f 53 1e fa dd 9f 90 0f 3d 28 a3 33 1e 33 e5 fe fa 2f fd 1a cf e3 2f 7e f8 36 5b ff 94 c3 9e cf e7 90 e8 b6 5b e3 46 a3 86 ff f5 0f fe 0b d6 92 8c 5e 77 11 d9 09 70 f4 f6 ca c6 b5 88 25 c4 94 34 fb f4 7c bb 3d f3 69 b2 07 92 0e 43 2c a0 cd 84 10 17 13 b1 a8 65 dd 70 1b 34 5b 07 ee 8e f9 4e 49 13 22 d3 72 c7 45 7d 15 79 13 aa e8 01 d8 09 78 05 fe d6 d0 2a 57 c0 f0 e5 26 35 dd 88 d2 09 e8 0e 25 13 48 a7 28 ad 2f c9 80 4d 07 37 93 91 ff 51 e0 03 01 3d fd 4f ac 01 51 1a b8 bc ed 90 2c f4 21 fa 7d a2 87 46 dc 25 87 2a fb 50 d1 00 2a c0 33 e0 52 86 a2 69 f3 5a 04 13 34 40 74 24 58 0c b0 43 17 49 f8 f7 b3 d6 68 12 ca e5 27 06 f6 e4 93 a5 Data Ascii: aG:Ri{n}/mo`wh[WC:_S=(33//~6[[F^wp%4\|=iC,ep4[NI"rE}yxW&5%H(/M7Q=OQ,!}F%P3RiZ4@t$XCIh'
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 6f 1e 89 b9 7e f6 77 ff 3b 53 ee 22 70 71 e2 d7 7f eb 8f 00 a7 b8 a7 83 c9 02 e5 ce 54 d8 8d ba 34 de b4 c9 2b dc e3 d1 10 f4 93 3b 9a 0f 85 4c 9c e7 73 fb 69 f8 89 b0 b0 47 ad d9 c3 ce ee 21 3e 79 b0 8b 72 b3 8d 78 34 82 6a a9 8c 48 e1 02 be fe da 25 7c ff 87 ff 80 cf ee 3f c4 98 c7 86 7a 11 4b a6 11 8e 44 10 d0 89 51 70 c0 e3 a4 da ee 18 ab 37 2f e2 b5 4c 18 1f 6d 15 d1 99 4c e0 e4 7e 6b e9 e1 2e f5 45 36 bb 1b c9 44 14 2f ac 11 e5 7e 82 cd a7 c7 a8 36 4b 68 95 4e 51 64 ca dd 0e 5f 30 81 6c 2e c7 c2 2e ca 9c c9 58 e7 e0 e8 04 3a 09 f8 b2 29 68 2e 1a 64 e2 61 51 9c 7b 3a c4 93 9d 63 6e a7 da dd db c1 fe ee 36 0f 5e d1 63 59 ac ac ad 23 13 8b a1 dd aa 61 34 b6 21 9a cb e0 5f fe ea 8b 38 39 28 e2 db 6f 7d 80 ad ed 6d f4 5a 6d d8 bd 01 64 56 f2 08 f9 43 7c Data Ascii: o~w;S"pqT4+;LsiG!>yrx4jH%\|?zKDQp7/LmL~k.E6D/~6KhNQd_0l..X:)h.daQ{:cn6^cY#a4!_89(o}mZmdVC\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49840	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	435	OUT	GET /Bookappointment/Property/2d6b9ee7-fcbe-43f7-9a4d-6594acb4d938 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:33 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: I0VWNwhnTi9v2UCwQsTeV6vXtGkmBlNjPIT61eIxOojm5J3brtIPu+QQyspVDRdFqt4pUw1bbWNaw5JKBz5UdQ== x-amz-request-id: CVWR3RSJ0QMG4N5C Date: Mon, 21 Oct 2024 22:39:34 GMT Last-Modified: Tue, 17 Sep 2024 07:32:23 GMT ETag: "67171e37f6d6968cc1a6cec4e317a764" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: nqMcZB4J1411AXt4VWfn..2CxHu2GrAv Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 892013 Connection: close
2024-10-21 22:39:33 UTC	1441	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 46 00 00 03 01 08 06 00 00 00 0a f7 7b 0c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e 6c bd 09 7a 65 db 72 9c 77 00 d4 d3 fc 07 21 c9 a2 44 91 1e 81 25 8b cd 08 6c 36 e2 4c 7c 0b 80 bf 8c 88 3f 32 37 2e 8b cd ad 02 ce d9 cd 5a d9 44 46 36 eb ed 3f fd 5f ff f4 fd f6 f6 7a 7d bf fc e7 ed fb f5 9a 7f 7f cd 4f e6 ef af 37 fd 7d fe 3b ff fb f5 ad 1f ea 73 fa ed db eb f5 d2 cf f4 09 fd f7 7b fe 9d 1f bf eb f7 5c 3f d7 d1 ef be 73 cf ef d7 db fb fb f9 0e 4f 32 97 f2 b5 de f5 0c ba 7a fe 7c bf e6 a1 3f bf bf 5f bf 3e de 5e 5f 7c e5 fb ed f5 3d ef f2 3d 9f fe d0 77 f5 ad f7 79 80 6f 3f 66 1e ec fb fd ed a5 2b cf 67 72 e9 f9 d6 fb eb 4b f7 e0 9e bc df dc 62 7e ef 6f 65 1d f2 34 ef ef Data Ascii: PNGIHDRF{sRGB IDATx^lzerw!D%l6L\|?27.ZDF6?_z}O7};s{\?sO2z\|?_>^_\|==wyo?f+grKb~oe4
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 1b d1 f6 36 f8 db 0e 68 f2 ef 04 c2 41 c4 51 f8 c8 30 4a 1b 2b af 6f f4 7e 11 3e 89 84 ef d9 3d af be ec 7a e8 6f c4 bb 11 29 99 48 36 2f 7a 64 52 60 81 9f e5 f7 4d f7 f0 da ef 7d 4b 1e e4 47 8f 47 63 59 74 2d 02 33 88 82 58 a0 b1 83 0a 04 1d 68 d7 c1 43 6c 74 cd ec 5f 62 7e 1f 8b 8a ef e4 b1 c6 6f e1 6f d7 fe f8 d9 91 1d ef 03 0e 82 c0 7f 45 11 b9 bb 2e 04 59 3a cb 55 00 87 0f f4 7a 7a 31 74 bf 90 07 b2 37 d9 9f 5a f4 00 e3 06 cc f9 4c e5 e2 b1 ce f9 69 6c be 8c 59 83 17 ec 03 01 d6 bc 9b 83 c4 b7 ff f4 3f fe c9 d6 22 68 fb a2 41 19 84 c3 00 05 6a 1f 61 ce c6 23 38 d9 7b fb 51 33 41 5a 7c 04 5c cc 87 3f 6c 16 0a 83 e3 4b da 20 ee a2 cf 17 1d dd c5 71 f8 03 51 9f 61 4e 5e af df 05 6a 1b b9 74 c1 ba 5f 56 5c dd 6f 50 f8 08 db 3b d1 cb 22 52 d0 f7 6e 33 ca Data Ascii: 6hAQ0J+o~>=zo)H6/zdR`M}KGGcYt-3XhClt_b~ooE.Y:Uzz1t7ZLilY?"hAja#8{Q3AZ\|\?lK qQaN^jt_V\oP;"Rn3
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 3a 2c 13 87 37 bc 06 8e 5e be 3e 91 5f 3a 19 d1 35 af ac ac 6a ec 46 1c 4d 7e ee 75 62 40 df 14 67 d3 3a bb f3 b1 5a 50 d9 d8 0a ee 6a 8c ea 38 8c 8d ba ad d3 7e 6e 05 26 bc 3f 8e 7e f6 9d c8 31 7a e0 ba ad 1c 4a fc 38 fa c4 cf d0 d4 a8 ba 29 53 8f b5 74 47 9d 87 83 08 03 40 0a 67 75 16 1c 0e 31 8a c9 da b8 e3 c7 6c d0 b4 f0 6b b2 ee 2c 86 be 62 bd 48 77 79 01 6c 47 53 50 07 97 d6 69 52 f2 14 dc ca b6 24 35 e7 4b 52 2b 99 28 3d d1 3d ef c6 ce ce 3e da 69 78 3f e7 fe a4 72 15 b9 b3 95 31 fa 9e 96 6c e3 c9 33 d8 49 33 b4 2f 3f 3f e7 54 5e 35 f6 5e 59 1f 25 19 02 e9 cc 8b 03 18 10 ee 3a 4f 82 23 e6 bb b6 33 d7 ce fa 7b f3 ad 8e 2c 28 3b ee f4 af ed 6d 6c d9 eb ed 35 6c ea d8 52 db 13 77 63 89 8d 23 0b a1 1b a7 4b 77 1c 6b 7c 88 82 8a d8 12 33 fb 04 19 0e 32 Data Ascii: :,7^>_:5jFM~ub@g:ZPj8~n&?~1zJ8)StG@gu1lk,bHwylGSPiR$5KR+(==>ix?r1l3I3/??T^5^Y%:O#3{,(;ml5lRwc#Kwk\|32
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 62 a5 bc 96 8c cb 90 4f 48 62 80 d3 21 46 1f dc 79 1c 00 dd 94 b8 3f 08 7e d0 19 92 f5 81 d9 a6 c7 e4 f5 3c 4f 46 bc 34 10 8c 3c 21 56 d5 bf e2 12 8f 49 60 af 49 23 66 39 52 46 63 5d ef 5a 82 43 fe db df ff 4b 80 51 f2 ff 32 10 51 30 e5 60 4f 61 69 e5 c1 1d 4f de 88 08 4b d9 94 00 86 0b 1a e2 cc 45 73 f2 98 29 1e e5 db 7c 7c d9 09 89 0f 09 b1 03 12 50 7e ae b5 87 94 e6 89 4c 9e 37 c2 df e7 03 51 17 3c e4 a6 ce 79 1e f6 02 a3 9d 15 d4 ef 56 17 aa 20 77 73 61 92 c2 5b ed 67 82 b6 01 26 4a 7b 9c 42 4b 4a ee e6 67 1e ca 96 02 d8 1f 35 08 76 b0 a1 cc f3 30 28 91 09 5b 72 aa b4 9b 7a fd 76 5d 23 70 9c 8f 73 da 81 09 ff ee 67 eb 6b f2 1c 82 28 27 75 b8 06 3a eb 96 8a 59 a3 fc 7d 7d 8c 84 d9 17 7f d6 8e 83 45 05 26 4f aa 32 d2 a1 28 3e 29 c8 58 88 88 59 81 13 12 Data Ascii: bOHb!Fy?~<OF4<!VI`I#f9RFc]ZCKQ2Q0`OaiOKEs)\|\|P~L7Q<yV wsa[g&J{BKJg5v0([rzv]#psgk('u:Y}}E&O2(>)XY
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 43 e3 5b 17 42 ee 04 f8 5b 76 52 57 14 f9 a5 46 0d e0 d6 51 73 9c 3f cd 0e 2e 9a 2e 29 f6 58 89 95 0d 77 67 d9 7d bd b3 9f 5d 4e 56 b2 58 df 71 e7 6d 1d de 54 fb 54 76 60 52 62 5e 33 d9 2c ce c0 72 18 8d 2f 8a cd 19 ce d6 69 18 e6 7d 9d 43 5b dd 47 20 27 e9 25 75 fe c2 2c fb f9 0d 00 c6 1e 13 cc e1 c7 4a 77 a6 d9 c2 e0 cf 9d 95 73 90 2f 4e 4f 0e 79 d5 c5 e8 dd 49 ff ad 29 cf be 73 8e ec d1 f3 df fb 30 e5 b0 38 d2 31 45 53 34 74 14 18 ca 29 f0 8f 1e c5 41 e0 45 3d 4f dd c7 43 33 5d c7 b3 bb ce d2 ff 53 fd 86 5d bc ee f4 e8 fc b1 3d 26 f8 23 7c f6 bf 7d dc 9f e5 cb f2 92 43 7b 37 63 7b 61 c3 c7 9e 9b c5 6e 90 be 66 9a d1 ed 56 41 89 7d c2 d8 5f c3 1d d7 5a 3a 9e b4 af ab 32 07 c9 5d e2 ea 1e 08 bb e6 f8 69 7a 7c e6 e8 39 20 80 24 b1 cd 21 a8 f5 bb e0 53 79 Data Ascii: C[B[vRWFQs?..)Xwg}]NVXqmTTv`Rb^3,r/i}C[G '%u,Jws/NOyI)s081ES4t)AE=OC3]S]=&#\|}C{7c{anfVA}_Z:2]iz\|9 $!Sy
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: b8 cb b8 e3 69 cd 46 7b 30 54 72 f2 8b be c6 41 35 4b 05 cb d5 0b c9 43 2f e8 85 b6 37 f8 18 81 ee a1 84 0b 64 04 1b b5 db 1f f4 ea 55 98 fa 12 1c 53 c8 ac 95 36 6a a6 47 60 28 c1 7b 5e 4e 6e 48 46 d0 bf 6b 74 ad 3b fa 98 88 6a 63 ad af e9 b0 d9 28 c0 08 05 0e c2 cf 63 c3 e1 ff 42 8b 1a f4 a4 ba 0c c5 69 da 95 fa e9 74 03 ec 0e 45 9b e6 c0 04 3b 03 1b 86 5d 07 c6 0b 85 1c d6 da a7 bd 74 51 f3 d2 36 11 17 9e 79 43 64 a6 79 5b 16 e6 b4 96 e6 1d 56 cd 9c 9c 83 06 b0 c5 81 c0 44 36 80 9b 28 13 f1 c8 63 4c 4d 17 74 7f cb e6 b9 53 47 4a 48 17 4c 63 4e 03 31 3b c3 15 af af 3d 74 bd 16 20 dd 92 0f 05 8f 9e d0 4c 00 07 55 5d 6f 3b 9d ec 5a c0 58 32 9c 70 ee ab c0 27 29 4b 98 8d f6 2a 2b 25 e8 3a 31 40 91 19 56 3f 8b 4d 72 b3 22 44 ec e0 d1 a0 1d 64 85 74 2d 94 3c Data Ascii: iF{0TrA5KC/7dUS6jG`({^NnHFkt;jc(cBitE;]tQ6yCdy[VD6(cLMtSGJHLcN1;=t LU]o;ZX2p')K*+%:1@V?Mr"Ddt-<
2024-10-21 22:39:33 UTC	752	IN	Data Raw: 48 bd c5 64 83 0e 13 61 76 a4 9c cd d2 75 ba 04 e5 04 25 4f 4b c8 aa f7 9c 9c de 69 6a 15 56 91 a3 3d 83 63 14 ea 6e 4e 88 64 19 8b 4d c1 0d 01 b7 52 1b 16 0c 8c c8 7c 13 03 44 ea ce eb 88 08 ae 6c 71 83 96 8e 1c f2 13 b9 bc dd 3a 0d 53 b4 ba 71 5c 9c 1b 00 81 5f 35 3e 1c 3d 48 be 8a 61 96 38 00 e6 42 d9 e0 d7 2b d5 33 bb 9b ce f6 a6 0e b0 0c ca c7 80 75 21 5f 45 68 75 48 65 b5 67 a7 1b 0d 25 09 b8 50 11 73 8a 1b 5c cb 83 82 79 53 ad b4 8e 82 0a 24 8b c2 2d c3 24 6b 3c 29 04 41 13 01 a3 51 06 47 16 93 0a 24 da 88 19 69 45 17 60 4d 41 a2 b1 f0 3c 87 9d 5c 72 d6 50 b0 05 74 03 1a 1c b1 11 21 53 6c 4b 64 1c b6 90 b9 31 49 8f b8 e8 14 65 ce fb 2e 80 d9 9d 56 61 66 8d a1 b3 87 cd e8 e6 ec 37 a3 a9 ae 43 71 27 c9 9e 4c 6b dd 12 10 c8 f8 00 d5 a1 e0 13 ba 83 08 Data Ascii: Hdavu%OKijV=cnNdMR\|Dlq:Sq\_5>=Ha8B+3u!_EhuHeg%Ps\yS$-$k<)AQG$iE`MA<\rPt!SlKd1Ie.Vaf7Cq'Lk
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: ab 67 52 cc d2 af 29 c4 e9 74 4a 80 99 da ef e3 ec f2 56 ad b4 cd 32 6a 48 5a 2c 1e 11 59 9e 83 02 65 19 d1 1c a5 d1 f4 69 58 04 d7 a2 d0 ae 0d 8e 4f 8c d9 06 26 06 96 48 8e 0a 51 2c 11 53 7d 77 10 11 35 d8 81 a6 0d a0 a9 6e de c7 46 3d b8 ac d3 03 25 56 89 96 1b f0 b6 70 1e 1e 23 33 14 bf b8 99 c8 3a c6 d2 ef db 5a de 55 28 72 d4 a1 63 6c 00 93 6e ce 3e 60 c4 cd 20 b8 10 91 b3 9c d0 5a a7 43 e3 f0 7b 82 8d 65 ac 63 17 2d f9 19 44 d8 70 b4 79 70 ba 24 6e d5 a9 32 b7 c4 fb 3e b4 f8 76 04 d4 67 59 51 08 6d b5 b4 7e c1 e8 51 93 a1 ad 49 16 6a d2 45 fe c6 3e 26 d2 6b 80 e3 27 7f 1d 36 69 c5 37 93 d2 c0 d8 27 66 e9 25 4e 72 20 86 96 6a 8e 9a a1 a5 11 13 db 60 12 d7 65 5e 57 66 ad fb 7c bd 3e 6e 65 5b 87 89 40 59 b1 05 1f a6 53 09 55 f7 2b 61 ed 16 74 e9 fa 5f Data Ascii: gR)tJV2jHZ,YeiXO&HQ,S}w5nF=%Vp#3:ZU(rcln>` ZC{ec-Dpyp$n2>vgYQm~QIjE>&k'6i7'f%Nr j`e^Wf\|>ne[@YSU+at_
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 68 27 8b 47 87 c2 f3 07 ba 03 6b b6 9a e0 2c b5 61 34 12 60 31 2b 48 ab f0 93 fa ca d0 20 69 ae 96 80 93 e6 d2 29 f7 28 4e 4d ce 5a d5 7e 21 f9 5e ce 54 01 16 02 87 64 9b 9c f6 e7 66 03 a0 d4 b2 c8 fd 49 01 e3 28 04 26 21 83 bf c0 3a 45 b7 69 1a 54 f5 cc 22 2d 8e 22 06 1a 11 6f 7c 07 d2 88 27 25 0f 43 c9 6b 8b 5f 33 21 29 c1 ac 9c 30 55 54 81 36 27 e7 eb 0f 88 26 8d a9 d7 dc b3 27 cd 13 2b 4c 94 8c db 15 67 0e 60 8b 7a 2d 9d 13 c8 99 58 0d ac 5d cd 28 73 8d 09 7e 4b af 25 82 cd 31 ea 57 5e 5b d7 f2 ff 62 a0 2f 01 67 ad e2 09 cf e3 64 8a dc 0e 52 80 c3 4d 99 e3 05 06 4f 7d ee 14 f7 af 34 01 cf 3a 1c 1d b8 17 59 89 1c ac 05 e7 c3 49 3f 57 5b 1c a7 4e c5 1a d4 9b d9 88 91 b9 67 08 d9 0a f8 21 49 5d b2 57 92 ee c1 b4 48 af 48 7d 60 b9 0a d3 08 25 42 19 cd 24 Data Ascii: h'Gk,a4`1+H i)(NMZ~!^TdfI(&!:EiT"-"o\|'%Ck_3!)0UT6'&'+Lg`z-X](s~K%1W^[b/gdRMO}4:YI?W[Ng!I]WHH}`%B$
2024-10-21 22:39:33 UTC	15360	IN	Data Raw: 46 03 95 97 1a 41 15 e1 23 5f 53 61 2f 82 67 c7 c8 ad b1 31 fb 95 27 7c d4 c7 9e 6d dd 79 df de 7b fd 9f 59 67 6f cb 06 fd b6 f5 07 6d db df eb 45 03 c7 5e cf ff 3b 34 6f 6c ed 11 ac df fc 6f ff 57 bb fc fd 7f 62 5b ab 37 03 40 b9 ec 7a 8e 51 77 bf 67 e3 0d df 83 46 cc 46 f3 4c d4 e5 33 9f b7 f9 63 17 ad bb bb 6f df fb dd 7f 14 63 76 7a 8e 6a 18 92 13 9e 8d c2 3e f6 89 42 58 8d 6c 26 59 5e 0f a5 f9 f7 1c e8 f8 7a fc c6 6f fe e7 b6 d7 36 fb e1 ef ff 3f b6 bb b9 19 2a cb 2b ff 5a e3 0d 8e c4 c1 b9 8e f6 14 e1 a7 23 37 d1 93 b3 31 c0 1a 23 97 7c 58 af 27 58 3b cb d4 68 b6 ec d0 a1 05 7b ee b5 5f b3 23 4f be 64 8d b9 45 5b 9b 38 67 8f 7b 93 36 18 f6 38 68 76 34 95 01 a2 1e 3b 4a db 5b 8c 6b 61 16 4b 63 c8 03 69 72 79 e6 e2 84 72 6f 8a b1 28 f6 5c a5 fb 70 4a Data Ascii: FA#_Sa/g1'\|my{YgomE^;4oloWb[7@zQwgFFL3cocvzj>BXl&Y^zo6?*+Z#71#\|X'X;h{_#OdE[8g{68hv4;J[kaKciryro(\pJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49844	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	435	OUT	GET /Bookappointment/Property/0015afb1-92d4-4cef-a624-d7433dda1593 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:33 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: lgkXnsUzizizqxKnNwQUwYRj+IbENbe8lFqBb1oXtAZRZJw1QBmMUHWxzspCUWbzd5o4Az2EZ40btoRYnRFfYQ== x-amz-request-id: CVWSF9NMJJZPJB0R Date: Mon, 21 Oct 2024 22:39:34 GMT Last-Modified: Wed, 09 Oct 2024 09:41:06 GMT ETag: "e3d27e7f46983d514a85323880b8ec60" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: tkiXouL7kOxmO9cUlcj2uW25FG20IkvQ Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 842701 Connection: close
2024-10-21 22:39:33 UTC	417	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 32 00 00 01 ef 08 06 00 00 00 8f 0a ea f5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e 64 bd db 96 5c d9 92 5c 17 79 01 70 8e f4 ff 7f 26 91 22 3f 40 dd 7c 96 c8 2a 00 99 91 1a 66 73 da da 1b 25 8c 3e 5d 40 66 c4 be ac 8b bb b9 b9 b9 af 97 ff f3 ff fe 5f 5f 5f 2f af 8f c7 57 fe ef eb f1 f5 f5 f5 78 79 3c 1e cf c7 e3 f1 fa f2 fa 78 3e f8 f7 e3 f9 f5 e0 2f 2f 8f af af fc 34 9f cf 0f f2 1d fe fb 92 df e5 23 f9 57 ae f3 fa d2 eb e6 d3 af fd 6d be 9e ef e7 53 cf 5e 32 f7 e0 df bd f4 f5 a7 bf 7b 79 3c bf f2 54 b7 5f 71 2b 9e d1 6b f5 f7 5f 2f 8f d7 97 af c7 f3 f9 f5 f8 7a c9 df 79 e4 47 9e a3 9f 7b 3c 5e 1f 8f c7 c7 d7 57 7f c7 3d 79 a6 e7 cb 9f b7 3e 37 cc 98 bc e4 7b 79 af 0e 50 Data Ascii: PNGIHDR2sRGB IDATx^d\\yp&"?@\|*fs%>]@f___/Wxy<x>//4#WmS^2{y<T_q+k_/zyG{<^W=y>7{yP
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: cb 5c 5d d7 dc 0c 74 ed e4 e7 f9 76 3f e8 7a 71 6d e6 92 b9 4f ee 97 df 75 6d 65 ec 9f 5f 1d c7 7e be f3 e2 7e d9 df f3 1c 5d 97 cc 6f af ff f2 78 7c e6 39 7b 6d 16 db f3 f9 7c 3c de 5e 73 93 f3 ce b9 d2 eb eb cb e3 77 ee fb 95 e7 e6 bd f2 dd 37 f7 1f d7 dc da 66 6f 66 3d 7c f8 02 ac 57 3e b0 b1 c8 fd 3a 8f 6c 92 f3 0c 5c 8b 7d f4 d1 f7 70 1e 5f 1e 8f 6f be 7f 7e f7 f9 78 79 bc 67 cf 7c 7d f6 7d ba 47 3b e6 4f be fb 78 e9 73 7f ee 81 dd 4c 79 e6 d7 67 9e cd 7b f6 f6 59 df 5f 7d ed 6f ae e5 ee c7 e7 d7 e3 f3 2d 76 83 f7 f9 75 0c 07 df 7d fd fc 7c d4 a6 f5 09 ae bd f5 f3 e3 eb f1 e9 75 62 5b 5e be 9e 7d be 3c cb 5b e7 97 eb e5 7e f9 d6 db cb e3 f1 f7 f3 eb f1 ee 9a c9 cf f2 7c 79 fb b7 8c 4d d6 a5 23 fc f5 64 8d 5c 4b 3c 7f 77 5e 9c 93 0f f7 cc bb d7 b8 2d Data Ascii: \]tv?zqmOume_~~]ox\|9{m\|<^sw7fof=\|W>:l\}p_o~xyg\|}}G;OxsLyg{Y_}o-vu}\|ub[^}<[~\|yM#d\K<w^-
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 1d 41 4b 70 c6 cb 25 8f 63 95 ac 7d 66 80 fb ca 0a 5e 1e bf 2d 38 44 d6 07 c0 ed 01 67 06 8b 01 2d 04 80 06 bf a9 95 a9 7e fd f5 f1 ee c1 82 05 94 66 3f 56 ef 50 7b 66 9b e2 1d f8 d8 35 64 8d 49 fe 9e 79 8e b4 ae a0 64 3b 56 90 94 bd 18 50 0f 11 01 cb 7b 88 a2 b5 cb 86 61 23 e8 2a 1f 05 75 c4 61 b4 cf c7 ef 74 8d 7a 8d cc 4b c1 b6 cd 27 12 94 75 d5 b5 fb eb 57 83 89 66 ef 12 14 3a 1e 1c 48 68 d6 50 e9 59 09 8f 80 04 33 a7 0c 97 bb d0 8c 76 fc 41 6b 70 ec be 16 3b 9c 3a af b5 ba ee 3a ae d6 9c 77 c2 5a a0 6b 09 e1 d0 c0 c9 b5 0a fb 29 91 95 b1 0c 38 d7 fe 43 30 e9 93 25 12 c6 96 e7 6d 69 51 be 0c cc d5 d1 13 a2 0b 63 8b 3f b6 33 d7 58 e5 01 d6 15 74 af 41 86 cf 51 7b 58 79 94 3e cf 7b 54 85 d1 ac 1d 8e 78 3e 9e cb da d9 cf 4c 57 79 9a 3e 80 36 44 df 47 3d Data Ascii: AKp%c}f^-8Dg-~f?VP{f5dIyd;VP{a#*uatzK'uWf:HhPY3vAkp;::wZk)8C0%miQc?3XtAQ{Xy>{Tx>LWy>6DG=
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: 7a 4b 97 37 31 db 51 bd 5c 01 e6 48 0a 82 c7 b5 12 bf b2 89 f4 70 e0 85 d6 3f a8 1d 16 57 53 7a 70 50 86 b8 e8 14 e0 7c cb 68 f5 12 0b 60 ff 08 28 6d f3 bc 62 ff d8 17 f1 92 f1 08 d8 54 02 75 d7 b9 1f 22 be c0 ac f6 c7 cf 35 b7 d7 e6 16 4a 37 b7 77 fa 58 c1 18 e9 6a 28 be 11 89 0e 87 b0 77 a8 7b ad 7f 19 06 9c 6f ba 1e ec d4 db 4c a8 34 ff 7a 05 67 ab 51 62 7e 4a f4 88 15 28 40 60 9e b3 06 23 d9 fe ff c8 7a d3 1d 4b b2 a5 b9 ee e4 50 d5 d5 f7 e3 fb 3f 9b 20 48 82 40 f0 07 41 81 82 08 e8 76 57 55 4e 84 d9 5a b6 23 5a 6a f0 63 f7 ad ca 3c 27 62 0f 3e 98 9b 9b 6f f0 ec c2 da 25 cc 8b fb b0 0f 13 83 d8 b9 1f 40 83 9f 62 10 2b b1 f0 00 90 89 31 35 a9 8a af 89 ec be 15 2b 5a 3b 40 48 4e 7f 9a 71 66 ab e9 1a c2 f6 71 0e 4e d1 4e 91 10 2e e5 f8 82 5a 36 fc bd 7c Data Ascii: zK71Q\Hp?WSzpP\|h`(mbTu"5J7wXj(w{oL4zgQb~J(@`#zKP? H@AvWUNZ#Zjc<'b>o%@b+15+Z;@HNqfqNN.Z6\|
2024-10-21 22:39:33 UTC	16384	IN	Data Raw: 93 31 08 50 1b 07 50 9c 9f 25 40 1f 35 68 1d 22 f4 18 10 fd b5 2a 25 58 d9 3e 8a 1b f5 ad 54 30 83 fb 9c f6 56 1d 54 af 5b 15 de 5c 8b 90 b7 eb 80 fc eb 94 b5 12 18 42 75 01 00 c3 81 4b f2 b3 9f 20 bf d3 2a b4 11 6b be 15 35 55 93 a2 f4 3c 19 1f 35 58 eb 3a 7d 3d 9e 5e e9 15 2d 4b 61 f6 41 7a 3c 40 ef 6c 06 f6 05 a5 2e 90 be b2 0f 5e 9d 08 84 58 1c 62 48 4d 1a e9 2f e8 be 0b b0 b5 42 32 ea d3 7e 56 10 49 bd 45 7b 25 38 0f bb 83 13 8b b1 b5 f2 08 01 9d 64 ec f8 6f 12 86 7c 67 03 57 d1 8c fc 8b a1 ce 03 57 9f 1e 7f 3c 73 26 97 6a f4 ef ac 9c a6 42 dc 04 c6 aa 08 d4 31 fc c9 8f 8a b1 f0 6c 3d e7 67 c0 e9 62 41 92 02 2a 36 00 85 54 64 14 84 f9 22 58 ce f7 75 10 ae 95 1a fa 3d 5c bc da 6f 9e ad f7 e4 c4 3f 02 7a 4b be 8c 5d 41 af a1 1c 56 42 5c f5 f0 7c 44 fc Data Ascii: 1PP%@5h"%X>T0VT[\BuK k5U<5X:}=^-KaAz<@l.^XbHM/B2~VIE{%8do\|gWW<s&jB1l=gbA*6Td"Xu=\o?zK]AVB\\|D
2024-10-21 22:39:33 UTC	1024	IN	Data Raw: f9 08 01 d6 e8 3f 76 c8 12 c6 33 4b a7 09 88 bd b4 fb 54 e3 9d c6 2a d2 95 7b 4e 14 f1 10 fb 25 c4 30 69 84 65 6f b5 de 38 29 f6 bc 2d 12 2d ef 33 0c 33 97 ae b2 c3 56 3b 90 ba 0f b8 76 01 9d 59 ff 88 b0 6c 40 70 5e e5 0c 7c ad 1a a5 20 ad e0 59 93 ef 0c f2 15 1c cb d7 d0 33 92 c4 9e 91 0e 05 fc 8c 57 62 03 7a 5f d2 17 1a 15 2f 21 91 df 2f e9 5d 1a 23 21 a0 21 be 08 a4 ed 62 e8 50 fd 8a 68 13 fd 76 bd 8f c6 30 c3 f7 b3 87 11 bf 48 d9 a3 83 b3 6f 2c 25 fc 31 40 8e 87 bf d4 b9 77 e3 d0 15 16 e8 c1 99 d0 01 22 2c 01 98 02 da be 76 e0 b0 76 f0 f9 a5 fd 8c a5 63 06 0c 4e 12 a3 4c 75 e8 b2 e9 ab 4c 9c 53 50 d2 dc e1 e9 ff fe eb fd 2b f2 87 c9 cc ab 65 6e b3 e3 90 05 c2 c3 21 f3 50 8a f6 67 a0 ea 4e 0a 3e 7c 57 73 c7 04 06 a2 8c 87 b6 04 d9 9f 80 d4 e0 26 7d 12 Data Ascii: ?v3KT*{N%0ieo8)--33V;vYl@p^\| Y3Wbz_/!/]#!!bPhv0Ho,%1@w",vvcNLuLSP+en!PgN>\|Ws&}
2024-10-21 22:39:33 UTC	1776	IN	Data Raw: 14 46 e9 69 6b f2 2d 50 67 62 5f c0 ab 1f c5 fe d3 7c 0e e8 d3 e4 30 ef a1 2d 2f c2 ec 39 e2 31 02 22 10 a8 33 51 5d 2f 7d 28 71 4f 55 b6 ab fa df 47 66 04 bd 3c 7e 75 de d0 e2 e5 f8 20 aa 88 87 9a 3d 14 97 d3 7d 80 b3 ec 53 1e b1 08 78 03 e8 4b 4d ab 01 6c d5 df e2 8f 43 b9 c1 77 61 21 01 e4 5a ad 35 91 ad d2 5b ec 8a c2 38 ad ba e4 67 bd c3 a0 01 a2 df ee 75 3e 2c 60 45 d7 3d 09 7a 29 8d d0 bf 08 63 94 7d be 29 fd f5 13 4e a3 37 77 7e 55 0a 72 57 82 f0 d1 2e 5b 39 aa cd c8 fd 7f 7e fc eb 3b e0 06 12 da 56 04 72 0f 9f 9f 10 04 30 a1 f7 91 a8 00 68 0f aa 18 df 77 12 f4 6d b0 40 55 79 95 ba 25 2d a3 38 56 ee bb e8 0b 33 68 b2 1c a6 67 00 c3 8a 3f 34 9e 38 d5 0b 3f d7 4a 18 1c 1b 62 98 dd d5 25 4d 05 c9 f2 99 f5 b3 00 2c 99 a5 d5 bd ef d0 69 54 ed 0a 34 56 Data Ascii: Fik-Pgb_\|0-/91"3Q]/}(qOUGf<~u =}SxKMlCwa!Z5[8gu>,`E=z)c})N7w~UrW.[9~;Vr0hwm@Uy%-8V3hg?48?Jb%M,iT4V
2024-10-21 22:39:34 UTC	16384	IN	Data Raw: d2 d9 26 8a 6d b0 eb 3a 81 4a f4 bf 4e 83 35 95 c0 e3 a8 d6 93 73 0e 1b 34 83 2b 04 66 6d 1b 22 19 88 56 35 6e 97 bb 92 96 75 ed 1e b5 19 79 95 bf b4 7c 41 e2 87 e4 34 e8 4f 60 a1 f1 7e 7f 4b e9 96 cb 0d 3a 43 73 1a 8e 10 4e 61 8c 65 8f e5 64 90 d7 4b a6 13 8e 83 03 f1 a3 3a 35 fa 49 50 de c9 2d 42 ff 30 30 f7 fc b6 ca dd 2b 8b 15 ca 67 20 2f ce 99 ef 39 c0 77 1c 85 af 25 21 79 e4 20 89 6b 7c 8f 81 d8 10 4a ae 2f 0e 76 3c dd 6e 55 ab 58 a0 b8 28 a7 c9 74 35 b1 1b 5f 77 87 fd 34 fb de 9e 31 7f 87 8e 81 2a 43 26 17 bd 6b 4a 68 2f f1 6a bf 55 df 91 be 83 39 10 82 03 1b 53 67 a4 7b 96 73 be 88 46 5a 31 33 52 1e a8 91 04 a4 b4 1c cc 13 8f 19 61 81 20 4c f6 6a e5 3d 47 91 1a 15 a9 09 48 9d 3a eb 9a cf fb 25 1d 21 8e a9 7b 2c 60 30 87 d1 fd 94 0e 50 6a 9a 54 c0 Data Ascii: &m:JN5s4+fm"V5nuy\|A4O`~K:CsNaedK:5IP-B00+g /9w%!y k\|J/v<nUX(t5_w41*C&kJh/jU9Sg{sFZ13Ra Lj=GH:%!{,`0PjT
2024-10-21 22:39:34 UTC	1024	IN	Data Raw: f8 d3 13 c1 44 0c 39 48 9c 09 1c a0 75 a8 61 36 84 df 1d 3b 22 07 56 a7 da c0 1c 0a 5c 8c 7e ef 27 b6 56 35 b4 ce 9f 21 fb ba a8 5f 18 a0 f6 6f 44 ce 35 68 65 92 90 24 23 f9 b3 e4 74 4a 3d a1 89 21 4d 2b 47 3b 53 ba db 33 d1 cf 4c 70 04 57 5a c0 00 99 72 15 ce 6a db 2b 37 9a fe a9 54 50 72 a7 52 95 69 92 65 f5 c4 e4 06 a4 8f bf 6b ef 4b 1c 26 82 07 26 fd ad 68 d4 67 20 cf 9d a0 f1 eb 0b 6e 76 28 99 27 99 13 f8 0a 4d 2c 7b bd 06 6d d0 f4 dd 19 7d 0f 27 2e 15 8e 97 20 f6 4f 0c b9 4c 50 9b 77 23 49 96 02 da 60 b4 a0 47 e8 43 a5 33 d4 ee 34 19 2d 95 2b d5 9a dc cf fc 73 68 7a 49 4a 09 86 ca 48 2e f0 31 70 cb 7b 89 c5 33 00 4f b0 8b 69 17 05 1e 2d 75 d2 d6 2b 80 f4 cc 56 41 0f 9e b9 ca 59 07 1c 1a 68 64 d6 10 40 91 f9 55 7e d7 9a a3 a9 dc 5b 89 5d f2 01 d2 6c Data Ascii: D9Hua6;"V\~'V5!_oD5he$#tJ=!M+G;S3LpWZrj+7TPrRiekK&&hg nv('M,{m}'. OLPw#I`GC34-+shzIJH.1p{3Oi-u+VAYhd@U~[]l
2024-10-21 22:39:34 UTC	16384	IN	Data Raw: 45 41 4a 61 e9 59 2f f7 b6 91 06 6a 71 4b 14 3c e6 73 9c ad 94 4c a4 c3 77 b5 c9 b4 33 29 d2 fc 5f 77 03 f2 19 da 58 e6 a5 38 8f 85 e4 6c 42 19 36 7f 0e 11 42 18 c0 84 54 97 7a c4 40 d8 37 1d 22 06 da a0 bf f3 59 e4 00 23 4f 9b 1e 93 26 df 9b d0 5c 3a 6a 90 d3 3a 0c aa a6 22 36 55 3c 13 95 64 f0 63 87 7e 35 c9 ee 7d 45 1d e6 f4 9b a5 62 d6 e4 a1 f6 c7 db 3d 0a 52 f6 25 74 c3 8f f4 54 48 99 b3 da 76 40 04 d6 a5 c6 3e 08 69 49 26 4d a8 12 c8 d1 4b 93 c4 63 94 14 03 ce 3c 2b 73 2c 3a d4 a2 01 bc 83 df f2 56 9d f4 dd 9e a2 fc 33 54 00 ed f7 10 fc 59 35 78 d1 38 bf 36 d3 52 ee d7 06 91 04 93 fc 34 38 cf 73 25 f1 19 96 d5 c6 d5 3a 72 82 78 1d 79 d6 83 7e 27 29 6f ea 80 f4 ee 4a 81 0a 72 19 2a 61 54 c8 4e 20 ad 83 23 01 53 98 26 14 85 81 75 87 2e 29 05 74 3e 2a Data Ascii: EAJaY/jqK<sLw3)_wX8lB6BTz@7"Y#O&\:j:"6U<dc~5}Eb=R%tTHv@>iI&MKc<+s,:V3TY5x86R48s%:rxy~')oJraTN #S&u.)t>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:33 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: f31cf33d-001e-00ad-7fb4-23554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223933Z-178ffc65759tbh4guw9nprg7en00000008pg00000000s7sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:33 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:33 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 66c24b8a-b01e-0001-29b4-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223933Z-178ffc65759cwlbzs47w327hrn000000094g000000003usb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 6bdfb929-501e-008f-46b4-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223933Z-178ffc65759h6zr9gshwvg1mgg0000000990000000000h59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:33 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 8f03770d-001e-0049-22b4-235bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223933Z-178ffc65759ts6772vh1wvh4aw000000091g00000000rkpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:33 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: f19a3559-001e-002b-05b4-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223933Z-178ffc65759wtchcan29e9304c00000008u00000000057pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49846	3.5.146.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	435	OUT	GET /Bookappointment/Property/816ac552-d08a-443a-bfac-bfe60eac5b7f HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:33 UTC	514	IN	HTTP/1.1 200 OK x-amz-id-2: NGDlCMPU5TrEPk78UMUvy6Gq1AMoGOL6nLQJ/JrGcwb+DIU9avJpqVfYcYEONd9nluyNYpAoOFrbuu3PKDE7Rg== x-amz-request-id: CVWRMNBT7Z1JHZ6P Date: Mon, 21 Oct 2024 22:39:34 GMT Last-Modified: Wed, 09 Oct 2024 13:10:16 GMT ETag: "325242f8d58efaeec42ddc9cfb48c7ca" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: 56cUh47VI4O1Q9pucfqxJdpWIxwEZNHm Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 32281 Connection: close
2024-10-21 22:39:33 UTC	3490	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 d2 00 00 00 a0 08 06 00 00 00 b8 fd ed 48 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 87 77 24 e7 91 ed 19 f0 de 7b 0f b4 6f 1a 51 22 45 23 51 94 a7 cc cc 48 63 76 de d9 b3 7f e1 ce 7b bb 3b 6f 8c 48 39 52 14 49 49 14 ad 28 d1 b5 85 f7 de 7b a0 f6 fc 6e 64 56 15 4c 39 00 6d d0 cc 9c 81 ba d9 a8 ca ca 8a fc f2 0b 77 e3 de bc 58 2c 16 b3 e8 88 2c 10 59 20 b2 40 64 81 c8 02 91 05 4e 64 81 bc c8 91 9e c8 6e d1 9b 22 0b 44 16 88 2c 10 59 20 b2 80 2c 10 39 d2 68 21 44 16 88 2c 10 59 20 b2 40 64 81 53 58 20 72 a4 a7 30 5e f4 d6 c8 02 91 05 22 0b 44 16 88 2c 10 39 d2 68 0d 44 16 88 2c 10 59 20 b2 40 64 81 53 58 20 72 a4 a7 30 5e f4 d6 c8 02 91 05 22 0b 44 16 88 2c 10 39 d2 68 Data Ascii: PNGIHDRHsRGB IDATx^w${oQ"E#QHcv{;oH9RII({ndVL9mwX,,Y @dNdn"D,Y ,9h!D,Y @dSX r0^"D,9hD,Y @dSX r0^"D,9h
2024-10-21 22:39:33 UTC	13904	IN	Data Raw: b2 f6 de ef 58 53 db d3 71 6a bf 8c d6 cf e2 05 38 51 4a a0 3e 22 72 8c 6c 9b 18 8c 9c 6f 17 c7 97 a0 fa cb e2 e4 69 5e b2 b7 b7 23 d2 8a b9 c9 bf d9 d8 c0 ef 44 e8 af 72 f8 19 39 ea 78 66 aa 32 fb 8e 54 63 ea 9b 9e b4 86 d6 af 58 43 eb 93 d1 48 cc e9 6e 5f f4 ee c8 02 91 05 ee a3 05 1e 49 47 ca f8 06 84 0b 90 2d 4c 8e fc d9 76 b6 16 35 f6 72 56 99 68 92 2b d5 5f 45 c0 50 54 a1 3e 1f ba 9c 70 e2 1e eb b0 e3 ac 45 c7 09 83 27 53 01 26 b2 4c b2 35 34 3e cb 2b 5b 45 62 00 0b 52 f2 c1 58 0a 62 e3 20 6c d7 56 26 6c 77 7b f5 18 09 b5 63 3e 4f c9 6d 90 e1 1e e3 1c f7 e5 9c 77 6c 6d 79 dc 96 e6 6e 8b ed e8 ac b2 dd 83 59 fd be 19 84 0d 65 f5 56 5a de 64 cd 1d cf 5a 4b e7 f3 56 02 71 7f 49 c5 89 41 4d f7 f1 19 8a 3e 2a b2 40 64 81 2f b9 05 1e 49 47 ba bc 38 64 cb Data Ascii: XSqj8QJ>"rloi^#Dr9xf2TcXCHn_IG-Lv5rVh+_EPT>pE'S&L54>+[EbRXb lV&lw{c>OmwlmynYeVZdZKVqIAM>*@d/IG8d
2024-10-21 22:39:33 UTC	9000	IN	Data Raw: ca 9b 14 88 e2 f0 b8 0f e9 d0 ea 87 d7 ab 98 8e 16 87 6c 76 fc 23 51 a6 6e 6e ce ab f2 e4 8a 56 c5 ce 38 76 e9 47 ce 78 55 54 e9 04 1f 49 73 a4 20 b2 b7 36 e0 56 a6 df be a7 92 7a 13 84 0c 39 32 1b 85 d7 75 d0 91 fe 35 3e aa c3 e8 cb 99 94 76 6f bf a2 ef 99 2f dc 88 07 3b f4 d2 21 7a 40 d7 36 72 a4 59 ec 68 2c 44 11 23 cf 7c ae a8 dc 1d 69 6a 34 eb 61 47 0a 29 41 82 fd 26 3b 3e cd 83 97 95 27 16 93 f9 29 36 92 1b b6 ba 3c 2c 52 88 d4 84 09 72 39 81 0a 4c 91 60 e9 a8 7d 34 b6 7d 25 20 cb 4f 9e 11 73 0e 56 74 29 89 26 29 81 8d f5 ff 5e a8 49 4a 60 99 85 c4 83 2b 0d a4 a7 60 4f 42 05 a3 be e9 71 95 b8 e8 35 41 b1 46 9f e9 28 fd 59 9e 68 c7 00 82 50 d6 f5 01 f1 f4 8a 3a 21 b3 90 4a bb 0d 6c 5c 17 95 65 17 8a ff f7 24 b6 cd 62 01 a4 79 89 e4 ca 0a c2 92 ea bd Data Ascii: lv#QnnV8vGxUTIs 6Vz92u5>vo/;!z@6rYh,D#\|ij4aG)A&;>')6<,Rr9L`}4}% OsVt)&)^IJ`+`OBq5AF(YhP:!Jl\e$by
2024-10-21 22:39:33 UTC	5887	IN	Data Raw: d7 05 1a 82 ce 0f 85 15 80 3d 21 3d 1e 0e cc f5 64 07 d4 97 45 44 9b ac 97 32 6c 6b f7 f3 3a 2f 87 b2 5f 48 e0 d7 5d 06 0d 47 b8 ba 38 a4 6c 18 5b 73 70 3d 38 3d ca be 38 f4 9a 86 8b 42 1a 8b 69 29 ee 44 7d 6b f3 39 cf 35 11 75 50 8d 81 e8 7e 63 7d 26 ae 2b 2a b4 6d 41 89 ce 53 db 70 51 ac 4e 5c 73 a8 3a 14 0a 7a cf 8c 7d 68 53 a3 ef ea bb 51 fe 25 d0 e2 27 57 64 f7 a3 b4 e1 46 df e5 d1 b4 c0 39 73 a4 7e 13 84 de 9d f8 48 3d 24 c8 d6 e9 9e a5 2f f1 3a d2 d4 49 09 f2 ad a3 f7 7b d6 de 43 2f aa 49 fc a7 29 0f 46 5f 76 d7 95 39 4d 0c d1 ab 62 44 63 c1 05 b2 73 1c f3 78 d4 96 4f d8 77 86 dd 08 c4 25 19 49 5b cf 37 e5 28 d2 1d 4e 2e 30 a1 d9 d1 89 a1 37 03 d9 b6 cc fd 31 2f 25 ef 5a 7d 0b 48 5d f4 47 1f d3 cf 83 3a 5c e6 8e 59 c8 05 f5 03 c9 02 29 f1 fa c8 95 Data Ascii: =!=dED2lk:/_H]G8l[sp=8=8Bi)D}k95uP~c}&+*mASpQN\s:z}hSQ%'WdF9s~H=$/:I{C/I)F_v9MbDcsxOw%I[7(N.071/%Z}H]G:\Y)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49842	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	557	OUT	GET /Content/microsites_assets/js/jquery-ui.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:33 UTC	317	IN	HTTP/1.1 200 OK Content-Length: 539425 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "3ba029228bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:56:46 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:33 UTC	3593	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-ex
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 09 7d 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2f 20 45 78 74 65 6e 64 20 77 69 74 68 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 74 6f 20 63 61 72 72 79 20 6f 76 65 72 20 61 6e 79 20 73 74 61 74 69 63 20 70 72 6f 70 65 72 74 69 65 73 0d 0a 09 24 2e 65 78 74 65 6e 64 28 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 7b 0d 0a 09 09 76 65 72 73 69 6f 6e 3a 20 70 72 6f 74 6f 74 79 70 65 2e 76 65 72 73 69 6f 6e 2c 0d 0a 0d 0a 09 09 2f 2f 20 43 6f 70 79 20 74 68 65 20 6f 62 6a 65 63 74 20 75 73 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 70 72 6f 74 6f 74 79 70 65 20 69 6e 20 63 61 73 65 20 77 65 20 6e 65 65 64 20 74 6f 0d 0a 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 Data Ascii: }};// Extend with the existing constructor to carry over any static properties$.extend( constructor, existingConstructor, {version: prototype.version,// Copy the object used to create the prototype in case we need to// redefine t
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 09 09 09 2f 2f 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 6a 51 75 65 72 79 20 69 6e 73 74 61 6e 63 65 0d 0a 09 09 09 69 66 20 28 20 21 74 68 69 73 2e 6c 65 6e 67 74 68 20 26 26 20 6f 70 74 69 6f 6e 73 20 3d 3d 3d 20 22 69 6e 73 74 61 6e 63 65 22 20 29 20 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 74 68 69 73 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 09 09 76 61 72 20 6d 65 74 68 6f 64 56 61 6c 75 65 3b 0d 0a 09 09 09 09 09 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 24 2e 64 61 74 61 28 20 74 68 69 73 2c 20 66 75 6c 6c 4e 61 6d 65 20 29 3b 0d 0a 0d 0a 09 09 09 09 Data Ascii: // return undefined instead of the jQuery instanceif ( !this.length && options === "instance" ) {returnValue = undefined;} else {this.each( function() {var methodValue;var instance = $.data( this, fullName );
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 09 09 6f 70 74 69 6f 6e 73 20 3d 20 7b 7d 3b 0d 0a 09 09 09 70 61 72 74 73 20 3d 20 6b 65 79 2e 73 70 6c 69 74 28 20 22 2e 22 20 29 3b 0d 0a 09 09 09 6b 65 79 20 3d 20 70 61 72 74 73 2e 73 68 69 66 74 28 29 3b 0d 0a 09 09 09 69 66 20 28 20 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0d 0a 09 09 09 09 63 75 72 4f 70 74 69 6f 6e 20 3d 20 6f 70 74 69 6f 6e 73 5b 20 6b 65 79 20 5d 20 3d 20 24 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 20 6b 65 79 20 5d 20 29 3b 0d 0a 09 09 09 09 66 6f 72 20 28 20 69 20 3d 20 30 3b 20 69 20 3c 20 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 69 2b 2b 20 29 20 7b 0d 0a 09 09 09 09 09 63 75 72 4f 70 74 69 6f 6e 5b 20 70 61 72 74 73 5b 20 69 20 5d 20 5d 20 3d 20 Data Ascii: options = {};parts = key.split( "." );key = parts.shift();if ( parts.length ) {curOption = options[ key ] = $.widget.extend( {}, this.options[ key ] );for ( i = 0; i < parts.length - 1; i++ ) {curOption[ parts[ i ] ] =
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 20 7b 0d 0a 09 09 09 09 74 68 61 74 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 20 6b 65 79 20 5d 20 3d 20 24 28 20 76 61 6c 75 65 2e 6e 6f 74 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 29 2e 67 65 74 28 29 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 20 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 5f 72 65 6d 6f 76 65 43 6c 61 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 73 2c 20 65 78 74 72 61 20 29 20 7b 0d 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 20 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 73 2c 20 65 78 74 72 61 2c 20 66 61 6c 73 65 20 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 5f 61 64 64 43 6c 61 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 Data Ascii: {that.classesElementLookup[ key ] = $( value.not( event.target ).get() );}} );},_removeClass: function( element, keys, extra ) {return this._toggleClass( element, keys, extra, false );},_addClass: function( element, key
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 69 6e 61 6c 20 65 76 65 6e 74 20 6d 61 79 20 63 6f 6d 65 20 66 72 6f 6d 20 61 6e 79 20 65 6c 65 6d 65 6e 74 0d 0a 09 09 2f 2f 20 73 6f 20 77 65 20 6e 65 65 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 74 61 72 67 65 74 20 6f 6e 20 74 68 65 20 6e 65 77 20 65 76 65 6e 74 0d 0a 09 09 65 76 65 6e 74 2e 74 61 72 67 65 74 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 20 30 20 5d 3b 0d 0a 0d 0a 09 09 2f 2f 20 43 6f 70 79 20 6f 72 69 67 69 6e 61 6c 20 65 76 65 6e 74 20 70 72 6f 70 65 72 74 69 65 73 20 6f 76 65 72 20 74 6f 20 74 68 65 20 6e 65 77 20 65 76 65 6e 74 0d 0a 09 09 6f 72 69 67 20 3d 20 65 76 65 6e 74 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 0d 0a 09 09 69 66 20 28 20 6f 72 69 67 20 29 20 7b 0d 0a 09 09 09 66 6f 72 20 28 20 70 72 6f 70 20 69 6e 20 Data Ascii: inal event may come from any element// so we need to reset the target on the new eventevent.target = this.element[ 0 ];// Copy original event properties over to the new eventorig = event.originalEvent;if ( orig ) {for ( prop in
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 3d 20 77 69 74 68 69 6e 2e 69 73 57 69 6e 64 6f 77 20 7c 7c 20 77 69 74 68 69 6e 2e 69 73 44 6f 63 75 6d 65 6e 74 20 3f 20 22 22 20 3a 0d 0a 09 09 09 09 77 69 74 68 69 6e 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 20 22 6f 76 65 72 66 6c 6f 77 2d 79 22 20 29 2c 0d 0a 09 09 09 68 61 73 4f 76 65 72 66 6c 6f 77 58 20 3d 20 6f 76 65 72 66 6c 6f 77 58 20 3d 3d 3d 20 22 73 63 72 6f 6c 6c 22 20 7c 7c 0d 0a 09 09 09 09 28 20 6f 76 65 72 66 6c 6f 77 58 20 3d 3d 3d 20 22 61 75 74 6f 22 20 26 26 20 77 69 74 68 69 6e 2e 77 69 64 74 68 20 3c 20 77 69 74 68 69 6e 2e 65 6c 65 6d 65 6e 74 5b 20 30 20 5d 2e 73 63 72 6f 6c 6c 57 69 64 74 68 20 29 2c 0d 0a 09 09 09 68 61 73 4f 76 65 72 66 6c 6f 77 59 20 3d 20 6f 76 65 72 66 6c 6f 77 59 20 3d 3d 3d 20 22 73 63 72 6f 6c 6c 22 20 Data Ascii: = within.isWindow \|\| within.isDocument ? "" :within.element.css( "overflow-y" ),hasOverflowX = overflowX === "scroll" \|\|( overflowX === "auto" && within.width < within.element[ 0 ].scrollWidth ),hasOverflowY = overflowY === "scroll"
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 66 66 73 65 74 73 28 20 6f 66 66 73 65 74 73 2e 6d 79 2c 20 65 6c 65 6d 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 20 65 6c 65 6d 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 6f 70 74 69 6f 6e 73 2e 6d 79 5b 20 30 20 5d 20 3d 3d 3d 20 22 72 69 67 68 74 22 20 29 20 7b 0d 0a 09 09 09 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 2d 3d 20 65 6c 65 6d 57 69 64 74 68 3b 0d 0a 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 6f 70 74 69 6f 6e 73 2e 6d 79 5b 20 30 20 5d 20 3d 3d 3d 20 22 63 65 6e 74 65 72 22 20 29 20 7b 0d 0a 09 09 09 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 2d 3d 20 65 6c 65 6d 57 69 64 74 68 20 2f 20 32 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 6f 70 74 69 6f 6e 73 2e 6d 79 5b 20 31 20 5d 20 3d 3d 3d 20 22 Data Ascii: ffsets( offsets.my, elem.outerWidth(), elem.outerHeight() );if ( options.my[ 0 ] === "right" ) {position.left -= elemWidth;} else if ( options.my[ 0 ] === "center" ) {position.left -= elemWidth / 2;}if ( options.my[ 1 ] === "
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 20 64 61 74 61 20 29 20 7b 0d 0a 09 09 09 76 61 72 20 77 69 74 68 69 6e 20 3d 20 64 61 74 61 2e 77 69 74 68 69 6e 2c 0d 0a 09 09 09 09 77 69 74 68 69 6e 4f 66 66 73 65 74 20 3d 20 77 69 74 68 69 6e 2e 69 73 57 69 6e 64 6f 77 20 3f 20 77 69 74 68 69 6e 2e 73 63 72 6f 6c 6c 54 6f 70 20 3a 20 77 69 74 68 69 6e 2e 6f 66 66 73 65 74 2e 74 6f 70 2c 0d 0a 09 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 20 3d 20 64 61 74 61 2e 77 69 74 68 69 6e 2e 68 65 69 67 68 74 2c 0d 0a 09 09 09 09 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 54 6f 70 20 3d 20 70 6f 73 69 74 69 6f 6e 2e 74 6f 70 20 2d 20 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 54 6f 70 2c 0d 0a 09 09 09 09 6f 76 65 72 54 6f 70 20 3d 20 77 69 74 68 69 6e 4f 66 66 73 65 74 20 Data Ascii: data ) {var within = data.within,withinOffset = within.isWindow ? within.scrollTop : within.offset.top,outerHeight = data.within.height,collisionPosTop = position.top - data.collisionPosition.marginTop,overTop = withinOffset
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 65 72 54 6f 70 20 29 20 3c 20 6f 76 65 72 42 6f 74 74 6f 6d 20 29 20 7b 0d 0a 09 09 09 09 09 70 6f 73 69 74 69 6f 6e 2e 74 6f 70 20 2b 3d 20 6d 79 4f 66 66 73 65 74 20 2b 20 61 74 4f 66 66 73 65 74 20 2b 20 6f 66 66 73 65 74 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 7d 2c 0d 0a 09 66 6c 69 70 66 69 74 3a 20 7b 0d 0a 09 09 6c 65 66 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 24 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2e 66 6c 69 70 2e 6c 65 66 74 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0d 0a 09 09 09 24 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2e 66 69 74 2e 6c 65 66 74 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0d 0a 09 09 7d 2c 0d 0a 09 09 74 6f 70 3a Data Ascii: erTop ) < overBottom ) {position.top += myOffset + atOffset + offset;}}}},flipfit: {left: function() {$.ui.position.flip.left.apply( this, arguments );$.ui.position.fit.left.apply( this, arguments );},top:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49843	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	542	OUT	GET /Content/sweetalert/swal.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:33 UTC	317	IN	HTTP/1.1 200 OK Content-Length: 167651 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "d63d8ed08adada1:0" Last-Modified: Sat, 20 Jul 2024 09:54:30 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:33 UTC	3593	IN	Data Raw: ef bb bf 2f 2a 21 0d 0a 2a 20 73 77 65 65 74 61 6c 65 72 74 32 20 76 31 31 2e 34 2e 33 33 0d 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0d 0a 20 20 20 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0d 0a 20 20 20 20 20 20 20 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 Data Ascii: /! sweetalert2 v11.4.33* Released under the MIT License.*/(function (global, factory) { typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() : typeof define === 'function' && define.amd ? def
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 63 6f 6e 73 6f 6c 65 50 72 65 66 69 78 2c 20 22 20 22 29 2e 63 6f 6e 63 61 74 28 6d 65 73 73 61 67 65 29 29 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 50 72 69 76 61 74 65 20 67 6c 6f 62 61 6c 20 73 74 61 74 65 20 66 6f 72 20 60 77 61 72 6e 4f 6e 63 65 60 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 40 74 79 70 65 20 7b 41 72 72 61 79 7d 0d 0a 20 20 20 20 20 2a 20 40 70 72 69 76 61 74 65 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 20 20 20 20 63 6f 6e 73 74 20 70 72 65 76 69 6f 75 73 57 61 72 6e 4f 6e 63 65 4d 65 73 73 61 67 65 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 53 68 6f 77 20 61 20 63 6f 6e 73 6f 6c 65 20 77 61 72 6e 69 6e 67 2c 20 62 75 74 20 6f 6e 6c 79 20 69 66 20 69 74 20 Data Ascii: consolePrefix, " ").concat(message)); }; /** * Private global state for `warnOnce` * * @type {Array} * @private / const previousWarnOnceMessages = []; /* * Show a console warning, but only if it
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 73 77 61 6c 43 6c 61 73 73 65 73 2e 6c 6f 61 64 65 72 29 29 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 7c 20 6e 75 6c 6c 7d 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 20 20 20 20 63 6f 6e 73 74 20 67 65 74 43 61 6e 63 65 6c 42 75 74 74 6f 6e 20 3d 20 28 29 20 3d 3e 20 65 6c 65 6d 65 6e 74 42 79 53 65 6c 65 63 74 6f 72 28 22 2e 22 2e 63 6f 6e 63 61 74 28 73 77 61 6c 43 6c 61 73 73 65 73 2e 61 63 74 69 6f 6e 73 2c 20 22 20 2e 22 29 2e 63 6f 6e 63 61 74 28 73 77 61 6c 43 6c 61 73 73 65 73 2e 63 61 6e 63 65 6c 29 29 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 7c 20 6e 75 6c 6c 7d 0d 0a 20 20 20 20 20 2a 2f Data Ascii: swalClasses.loader)); /** * @returns {HTMLElement \| null} / const getCancelButton = () => elementBySelector(".".concat(swalClasses.actions, " .").concat(swalClasses.cancel)); /* * @returns {HTMLElement \| null} */
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 75 64 65 73 28 63 6c 61 73 73 4e 61 6d 65 29 20 26 26 20 21 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 69 63 6f 6e 54 79 70 65 73 29 2e 69 6e 63 6c 75 64 65 73 28 63 6c 61 73 73 4e 61 6d 65 29 20 26 26 20 21 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 70 61 72 61 6d 73 2e 73 68 6f 77 43 6c 61 73 73 29 2e 69 6e 63 6c 75 64 65 73 28 63 6c 61 73 73 4e 61 6d 65 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 63 6c 61 73 73 4e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 20 65 6c 65 6d 0d 0a Data Ascii: udes(className) && !Object.values(iconTypes).includes(className) && !Object.values(params.showClass).includes(className)) { elem.classList.remove(className); } }); }; /** * @param {HTMLElement} elem
2024-10-21 22:39:33 UTC	3356	IN	Data Raw: 65 74 44 69 72 65 63 74 43 68 69 6c 64 42 79 43 6c 61 73 73 20 3d 20 28 65 6c 65 6d 2c 20 63 6c 61 73 73 4e 61 6d 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 68 69 6c 64 72 65 6e 20 3d 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 6c 65 6d 2e 63 68 69 6c 64 72 65 6e 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 68 69 6c 64 20 3d 20 63 68 69 6c 64 72 65 6e 5b 69 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 68 69 6c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 26 26 20 68 61 73 43 6c 61 73 73 28 63 Data Ascii: etDirectChildByClass = (elem, className) => { const children = Array.from(elem.children); for (let i = 0; i < children.length; i++) { const child = children[i]; if (child instanceof HTMLElement && hasClass(c
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 73 73 42 61 72 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 65 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 6f 6e 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 30 30 25 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d 65 72 50 72 6f 67 72 65 73 73 42 61 72 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 6f 6e 20 3d 20 Data Ascii: ssBar)) { if (reset) { timerProgressBar.style.transition = 'none'; timerProgressBar.style.width = '100%'; } setTimeout(() => { timerProgressBar.style.transition =
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 22 29 2e 63 6f 6e 63 61 74 28 73 77 61 6c 43 6c 61 73 73 65 73 2e 66 6f 6f 74 65 72 2c 20 22 5c 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 22 29 2e 63 6f 6e 63 61 74 28 73 77 61 6c 43 6c 61 73 73 65 73 5b 27 74 69 6d 65 72 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 63 6f 6e 74 61 69 6e 65 72 27 5d 2c 20 22 5c 22 3e 5c 6e 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 22 29 2e 63 6f 6e 63 61 74 28 73 77 61 6c 43 6c 61 73 73 65 73 5b 27 74 69 6d 65 72 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 27 5d 2c 20 22 5c 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 3c 2f 64 69 76 3e 5c 6e 22 29 2e 72 Data Ascii: /button>\n </div>\n <div class=\"").concat(swalClasses.footer, "\"></div>\n <div class=\"").concat(swalClasses['timer-progress-bar-container'], "\">\n <div class=\"").concat(swalClasses['timer-progress-bar'], "\"></div>\n </div>\n </div>\n").r
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 65 6c 65 6d 65 6e 74 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 61 72 61 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 61 72 61 6d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 2f 2f 20 4f 62 6a 65 63 74 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 70 61 72 61 6d 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 61 6e 64 6c 65 4f 62 6a 65 63 74 28 70 61 72 61 6d 2c 20 74 61 72 67 65 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 2f 2f 20 50 6c 61 69 6e 20 73 74 72 69 6e 67 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 70 61 72 61 6d 29 20 Data Ascii: element if (param instanceof HTMLElement) { target.appendChild(param); } // Object else if (typeof param === 'object') { handleObject(param, target); } // Plain string else if (param)
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 65 72 74 42 65 66 6f 72 65 28 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2c 20 6c 6f 61 64 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 73 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 65 6e 79 42 75 74 74 6f 6e 2c 20 6c 6f 61 64 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 73 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 2c 20 6c 6f 61 64 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 20 63 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 0d 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b Data Ascii: ertBefore(cancelButton, loader); actions.insertBefore(denyButton, loader); actions.insertBefore(confirmButton, loader); } } } /** * @param {HTMLElement} confirmButton * @param {
2024-10-21 22:39:33 UTC	4096	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 2c 20 67 72 6f 77 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 67 72 6f 77 20 26 26 20 74 79 70 65 6f 66 20 67 72 6f 77 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 72 6f 77 43 6c 61 73 73 20 3d 20 22 67 72 6f 77 2d 22 2e 63 6f 6e 63 61 74 28 67 72 6f 77 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 72 6f 77 43 6c 61 73 73 20 69 6e 20 73 77 61 6c 43 6c 61 73 73 65 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 43 6c 61 73 73 28 63 6f 6e 74 61 69 6e 65 72 2c 20 73 77 61 6c 43 6c 61 73 73 65 73 5b 67 72 6f 77 43 6c 61 73 73 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d Data Ascii: container, grow) { if (grow && typeof grow === 'string') { const growClass = "grow-".concat(grow); if (growClass in swalClasses) { addClass(container, swalClasses[growClass]); } }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49841	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	558	OUT	GET /Content/microsites_assets/js/map-script.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:33 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 5655 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:32 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "e14fa2248bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:56:51 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:33 UTC	3595	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 47 6f 6f 67 6c 65 20 4d 61 70 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 20 0d 0a 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 4d 61 70 4c 6f 61 64 53 63 72 69 70 74 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6d 61 70 49 6e 69 74 28 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 47 6d 61 70 20 3d 20 24 28 27 2e 6d 61 70 2d 63 61 6e 76 61 73 27 29 3b 0d 0a 20 20 20 20 20 20 47 6d 61 70 Data Ascii: (function($) { "use strict";/* --------------------------------------------Google Map-------------------------------------------- */ window.onload = MapLoadScript;function GmapInit() { var Gmap = $('.map-canvas'); Gmap
2024-10-21 22:39:33 UTC	2060	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 6d 61 70 2c 6d 61 72 6b 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 69 66 28 20 64 61 74 61 48 75 65 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 64 61 74 61 48 75 65 20 21 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 79 6c 65 73 20 3d 20 5b 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 22 66 65 61 74 75 72 65 54 79 70 65 22 3a 20 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 22 2c 0d 0a 20 20 20 20 20 20 20 20 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 20 22 6c 61 62 65 6c 73 2e 74 65 78 74 2e Data Ascii: infowindow.open(map,marker); }); } if( dataHue !== undefined && dataHue !== false ) { var styles = [ { "featureType": "administrative", "elementType": "labels.text.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49845	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	545	OUT	GET /Content/toaster/toastr.min.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:34 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 4249 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:33 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "33c4d5d08adada1:0" Last-Modified: Sat, 20 Jul 2024 09:54:30 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:34 UTC	3595	IN	Data Raw: ef bb bf 21 66 75 6e 63 74 69 6f 6e 20 28 61 29 20 7b 20 61 28 5b 22 6a 71 75 65 72 79 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 61 29 20 7b 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 20 62 2c 20 63 29 20 7b 20 72 65 74 75 72 6e 20 6d 28 7b 20 74 79 70 65 3a 20 74 2e 65 72 72 6f 72 2c 20 69 63 6f 6e 43 6c 61 73 73 3a 20 6f 28 29 2e 69 63 6f 6e 43 6c 61 73 73 65 73 2e 65 72 72 6f 72 2c 20 6d 65 73 73 61 67 65 3a 20 61 2c 20 6f 70 74 69 6f 6e 73 4f 76 65 72 72 69 64 65 3a 20 63 2c 20 74 69 74 6c 65 3a 20 62 20 7d 29 20 7d 20 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 20 62 2c 20 63 29 20 7b 20 72 65 74 75 72 6e 20 6d 28 7b 20 74 79 70 65 3a 20 74 2e 69 6e 66 6f 2c 20 69 63 6f 6e 43 6c 61 73 73 3a 20 Data Ascii: !function (a) { a(["jquery"], function (a) { return function () { function b(a, b, c) { return m({ type: t.error, iconClass: o().iconClasses.error, message: a, optionsOverride: c, title: b }) } function c(a, b, c) { return m({ type: t.info, iconClass:
2024-10-21 22:39:34 UTC	654	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 28 29 20 7b 20 72 65 74 75 72 6e 20 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 6b 28 29 2c 20 75 2e 6f 70 74 69 6f 6e 73 29 20 7d 20 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 20 7b 20 71 20 7c 7c 20 28 71 20 3d 20 6e 28 29 29 2c 20 61 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 20 7c 7c 20 28 61 2e 72 65 6d 6f 76 65 28 29 2c 20 61 20 3d 20 6e 75 6c 6c 2c 20 30 20 3d 3d 3d 20 71 2e 63 68 69 6c 64 72 65 6e 28 29 2e 6c 65 6e 67 74 68 20 26 26 20 71 2e 72 65 6d 6f 76 65 28 29 29 20 7d 20 76 61 72 20 71 2c 20 72 2c 20 73 20 3d 20 30 2c 20 74 20 3d 20 7b 20 65 72 72 6f 72 3a 20 22 65 72 72 6f 72 22 2c 20 69 6e 66 6f 3a 20 22 69 6e 66 6f 22 2c 20 73 75 63 63 65 73 73 3a 20 22 73 75 63 63 65 73 73 22 2c 20 77 61 72 6e 69 6e 67 3a 20 22 77 Data Ascii: function o() { return a.extend({}, k(), u.options) } function p(a) { q \|\| (q = n()), a.is(":visible") \|\| (a.remove(), a = null, 0 === q.children().length && q.remove()) } var q, r, s = 0, t = { error: "error", info: "info", success: "success", warning: "w

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:33 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 535f1e54-c01e-00ad-03b4-23a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223933Z-178ffc65759sqv7lrwy1666yds0000000940000000006981 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:34 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:33 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c94ffd6c-801e-0035-65b4-23752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223933Z-178ffc65759ts6772vh1wvh4aw000000091g00000000rkr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:34 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:33 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:33 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 9ca3735a-401e-005b-7fb4-239c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223933Z-178ffc65759h6zr9gshwvg1mgg0000000990000000000h66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:34 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:34 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 58e5d6ef-b01e-005c-47b4-234c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223934Z-178ffc65759xcrzp9hg9mrxcqn000000097g00000000g7v6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:34 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:34 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 29de0517-801e-008c-5cb4-237130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223934Z-178ffc65759cwlbzs47w327hrn00000008z000000000qphn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:34 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49853	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:34 UTC	804	OUT	GET /Content/assets/images/Calculator/dollarSign.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:35 UTC	300	IN	HTTP/1.1 200 OK Content-Length: 8276 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:33 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4cc0308f8bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:59:49 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:35 UTC	3610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 1f e9 49 44 41 54 78 01 ed 9d 7f 8c 5d 65 99 c7 9f f7 bd 67 94 ab 71 86 0e 6d d9 14 fb 63 16 21 62 6a 70 81 91 04 88 db 0e 84 4d 49 5c 0c 06 34 f2 87 b0 d6 b5 b2 6b 30 5d c1 b8 4b dc 2c 61 b7 11 94 68 48 6a d5 1a f0 0f 8c 29 0b 59 25 0b 89 81 99 6a 84 84 bd a0 36 36 12 89 a6 d3 56 cb 76 5a 6e 99 71 cb 75 73 cf 7d 5f 9f e7 3d e7 ce dc 99 ce dc 79 9f 73 cf b9 f7 9c f7 bc 9f a4 69 a7 3d b7 ed 9c f3 7c cf f3 bc cf fb bc cf 23 c0 93 0d 5b b6 9d 3f a4 83 31 a5 5a 1b 85 14 97 82 d6 eb 04 c0 85 5a 8b f5 20 60 ad Data Ascii: PNGIHDRXpHYssRGBgAMAaIDATx]egqmc!bjpMI\4k0]K,ahHj)Y%j66VvZnqus}_=ysi=\|#[?1ZZ `
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 96 5f 8c ed da 63 34 21 e3 d5 ba 75 16 a6 15 08 76 f8 51 4c 18 e5 09 31 66 47 fa d4 f0 77 c0 93 4b 98 b6 3b 4a da 90 cc c2 bc 06 8c ce 9e 80 12 a0 35 bc 00 09 a0 53 88 d1 50 17 4f ee 60 da 2e 69 43 2a d5 da 68 fb 81 3c 16 e5 65 05 35 43 66 b6 d4 6f 53 35 bd a7 a8 c1 b5 0f b7 f2 05 f5 ef 65 3c 53 d2 86 14 52 5c 6a fb 81 5c 16 e5 65 48 2f cd f0 a8 e5 0c 75 f8 f3 0b f7 1c 81 2f 2c 8e 0d 93 36 64 54 77 64 f9 01 a1 67 a0 2c e0 db 26 3e 10 c6 19 ef b5 88 78 46 c7 c1 60 e3 c4 33 a6 5a d6 7b 94 c1 62 ba 2e 32 6c 18 b5 21 f1 21 5e 68 7d 3d c0 49 28 13 94 cd 12 b0 07 7a 85 26 d3 6a f5 f3 60 66 24 9a d5 e1 85 32 30 38 36 4c da 90 ed 56 fb 76 9f e0 d5 28 b9 80 99 1c 9b 20 e5 bb 2c 28 14 33 ab 83 86 6d e2 1a c5 7b 95 01 c0 b0 61 d2 86 e4 54 a2 26 29 c1 28 3c 14 6a 55 Data Ascii: _c4!uvQL1fGwK;J5SPO`.iC*h<e5CfoS5e<SR\j\eH/u/,6dTwdg,&>xF`3Z{b.2l!!^h}=I(z&j`f$2086LVv( ,(3m{aT&)(<jU
2024-10-21 22:39:35 UTC	570	IN	Data Raw: d9 50 43 ff 32 05 0a 9e 09 2f 9c 7b b1 70 0f 9b 5e 2a 27 87 af 01 09 37 e1 63 df 0e d9 8a 22 82 6a a9 a8 25 6d 81 5f 2e c5 16 48 8c 39 69 28 c4 c3 19 86 07 4b 69 98 66 dd 42 ff ca 08 26 d0 87 72 b7 c8 a7 45 76 28 2e 37 82 d0 e2 fd f8 a4 b7 41 9f 66 b8 9b 30 55 e9 4f b9 b0 9e 73 42 20 6d e2 45 7c 5a 3b bb 1c 1a 68 14 27 24 e8 9f 69 21 0e 6b a5 5f 6b 05 e2 50 5f b2 34 b4 36 ab 8f 6c a8 84 fa 72 21 c5 a5 42 eb ad 0a c4 75 7d 7c 59 74 e2 5c e5 82 53 02 31 98 13 8b 02 45 22 76 42 ff 85 72 0e e6 6d aa e1 35 21 f4 0c fe fa 24 7a ba 53 42 c1 69 05 ba 2e 65 e5 78 fb ba a6 54 8b 3a 51 0e 29 69 fe ef ba d5 1a c6 3d 88 11 09 62 54 4b 58 8b 1b 9d eb f0 a1 5d a8 b5 58 8f bf 7f e9 80 84 b0 14 fc bf eb fd a1 d4 7b 5c 4b 97 bb 27 90 36 0b 42 a1 a1 8f 7d 09 2d 4a 48 1d d3 Data Ascii: PC2/{p^*'7c"j%m_.H9i(KifB&rEv(.7Af0UOsB mE\|Z;h'$i!k_kP_46lr!Bu}\|Yt\S1E"vBrm5!$zSBi.exT:Q)i=bTKX]X{\K'6B}-JH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49854	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:34 UTC	807	OUT	GET /Content/assets/images/Calculator/DollarBagHand.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:35 UTC	302	IN	HTTP/1.1 200 OK Content-Length: 121062 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:33 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4cc0308f8bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:59:49 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:35 UTC	3608	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 06 00 00 00 cb d6 df 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 7d 07 7c 14 45 fb ff 33 b3 ed ee d2 e9 bd 29 82 80 52 04 f5 b5 60 57 f4 27 82 2f 88 0a 2a 8a 05 c1 8e bd 63 05 c4 0e 82 80 8a 8a 82 14 95 22 2a 16 ec bd 01 8a a2 34 29 42 00 21 90 5c ae 6c 9b ff ff 99 d9 cd 5d 42 28 fa 92 70 77 99 fd 88 97 5c f6 76 67 be b3 b7 df 7d da f7 21 20 37 89 80 44 40 22 20 11 f8 d7 08 30 c6 d4 15 85 50 10 89 c6 6b 15 6d df 51 ab a8 68 7b fe d6 ed db 0b 22 91 70 5e e1 e6 a2 5a a5 91 70 41 d1 f6 70 41 49 78 47 41 49 38 9c 13 0e 47 b2 c3 d1 d2 50 2c 1a cb 0a 97 c6 43 b6 6d 1b b6 6d eb 8e e3 82 6d 59 c4 76 6c 8d 31 06 84 10 30 0c c3 64 00 44 a1 d4 d5 55 2d 1e 08 05 Data Ascii: PNGIHDRsRGB IDATx^}\|E3)R`W'/c"4)B!\l]B(pw\vg}! 7D@" 0PkmQh{"p^ZpApAIxGAI8GP,CmmmYvl10dDU-
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 6f 0e e3 6b d3 33 fe b0 44 81 aa a2 a4 0c 45 73 7c 4f 08 8f 65 7b 0f 5a 88 0a 26 23 8a 7d 50 66 0e f1 b3 00 98 cd 5b b5 22 0e 42 7d 4e c4 db 51 49 4e 74 a3 f3 94 f3 70 1c 54 03 ca 33 dc 05 76 dc 02 47 97 7a 99 ab 7e e7 5a 79 7c 07 eb d8 75 55 34 b1 41 65 3a 4d 53 e1 a0 83 5a 7f 3b 6b d6 c4 9e 07 e6 90 cd 35 f7 9b b4 f3 cc 25 a1 cb ab 41 22 20 11 a8 36 04 56 33 16 b8 f8 bf 57 7e f4 e5 37 8b 8e 54 f5 2c 6e 95 95 09 c0 24 b9 c6 7d 42 17 a2 2f 89 8d db b3 c8 25 7e 2b 52 33 0e 9a 86 b1 59 55 b4 05 e5 64 2a 3a a2 09 52 4f 74 3f e3 6e 5e 55 2b 6b b2 e2 f7 0e 17 6e 7c ac 47 c7 be e2 5e d3 14 ef 21 02 8f e2 77 2b e3 16 69 99 86 0d b2 25 03 c3 d0 e2 f9 b5 0a 0a 1b 36 68 b4 b1 61 83 ba 85 75 6b d7 d9 54 bb 6e c1 d6 da f9 05 7f 67 e5 e6 6c 69 54 bb d6 df 81 ac ac e2 Data Ascii: ok3DEs\|Oe{Z&#}Pf["B}NQINtpT3vGz~Zy\|uU4Ae:MSZ;k5%A" 6V3W~7T,n$}B/%~+R3YUd*:ROt?n^U+kn\|G^!w+i%6haukTngliT
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: c0 92 bb 4a 04 24 02 fb 16 81 f3 86 de 3d fd f5 79 1f f4 23 14 ad 71 00 97 67 35 63 33 0e 61 b1 61 92 5c 82 d4 7d 59 58 14 9b 11 84 ae b9 11 38 bc 73 fb 2f a7 cf 99 7c 8a 4c 92 da b7 6b b3 2f 8f f6 c9 b7 2b 8e ea 3b 60 d0 82 a2 b0 99 4d b5 00 d8 5e 27 35 8a e2 31 95 5a e8 1e a1 33 17 98 6b 43 40 a5 c0 ec 52 98 34 fe 91 be fd cf 3a f1 f5 7d 39 b6 4c 3a 96 24 f4 4c 5a 4d 39 17 89 40 9a 21 f0 e2 9b 1f 9f 7f d5 b0 db a7 32 a2 81 65 bb e0 b8 d8 f7 5a 17 96 99 d7 4a 53 88 ce 78 e5 6c 28 07 cb a5 61 a9 a8 59 b7 4a a1 71 dd bc d2 a9 53 9e 3b ee d8 43 9b ff 90 66 d3 af 31 c3 7d f0 c9 a9 b7 3d 38 ea 89 11 34 90 0d 36 a3 60 3a b6 27 16 84 8e f5 8a 2e 77 3f b6 0e 5c 9b c0 b1 4d c8 09 6a 50 a7 20 b4 f1 c3 77 67 1e 26 7b 9f ef fa b2 91 84 5e 63 be 52 72 a2 12 81 d4 43 Data Ascii: J$=y#qg5c3aa\}YX8s/\|Lk/+;`M^'51Z3kC@R4:}9L:$LZM9@!2eZJSxl(aYJqS;Cf1}=846`:'.w?\MjP wg&{^cRrC
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 20 74 7c 78 12 0f 71 f8 a0 86 d6 78 2c 12 01 0d 1b b6 c4 62 a0 19 06 50 aa 0a af 8d 4b 78 ce 03 5a e9 b8 b6 36 3e 10 30 07 5c 86 0d 79 f0 ef 16 16 bf 01 d6 43 b4 6b dd 72 e5 e0 41 03 1f b8 74 c0 59 53 6a 9a 2b 5e 12 7a 15 de d8 e4 a1 25 02 35 0d 81 05 9f 2c e9 fe f0 63 4f 3d f9 f5 b7 8b 3b ab 46 36 98 b6 10 17 41 17 2c 12 b4 b8 b9 27 e4 3f 5d ac 53 e6 7a ec 1a b8 8e 05 81 40 90 bb c2 31 9e 6a 64 65 81 6b 9b 65 e4 2d 88 40 dc fc fd cd 27 76 f1 7b a2 33 5b 59 33 10 4a c1 76 6c 30 74 4c d4 32 81 39 0c 1d fe 65 96 1f 96 b7 09 17 b0 b4 cc f7 d6 32 f7 f7 e3 0f 50 ae 02 ba 6e 08 e2 f6 a2 1d b8 dc 3c e9 50 57 cb ad 1d 5f 21 4e e8 a2 bf 3d d7 70 47 1d 01 c3 e0 7a 02 b8 96 be fb dd d0 74 4e e4 18 56 41 32 e7 21 18 d4 17 70 89 38 26 55 80 52 cc 92 07 2e 17 9b 95 1d Data Ascii: t\|xqx,bPKxZ6>0\yCkrAtYSj+^z%5,cO=;F6A,'?]Sz@1jdeke-@'v{3[Y3Jvl0tL29e2Pn<PW_!N=pGztNVA2!p8&UR.
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 9c 69 14 93 e3 80 88 6e 6b 48 e2 e8 d2 44 62 c7 9f 91 c8 c1 23 74 8c b3 3b cc 85 a0 11 80 68 e9 0e c8 0a aa 60 c7 c2 d0 ad cb a1 9f 8e 1c 7e fb 6d 47 77 69 fd 55 35 0c 5d 9e 22 43 10 40 b9 d7 77 66 be db 6f e4 e8 d1 a3 36 6c da 5a cf a2 21 60 a0 09 8b 9b 13 3a 7a 84 3c 0b 1d 15 e3 18 76 56 23 5e 27 36 0a ba 1e e0 65 6d 98 09 1f 50 1d 68 56 47 5b 37 77 fe ac e3 da 36 c8 5f 9d 09 10 49 42 cf 84 55 94 73 90 08 54 03 02 8b 97 15 b6 ec dd ff a2 af b7 87 ad 7a 45 61 13 54 23 c0 7b 4f fb 64 ee 93 3b be 32 bc b9 a2 85 ee 10 50 74 0d 9c 48 18 40 57 b1 d1 39 e4 e6 84 20 5e 5a 0c d9 41 1a 3e af f7 e9 73 3b 77 6a ff 76 b7 a3 8e fe a1 45 ed 86 5b ac 1c b0 20 23 1a 59 56 c3 82 64 f8 29 5c 17 b8 df a7 14 22 d9 eb d7 6d 6d fc e5 77 5f 1d 3b ff dd 05 bd 7f fa 69 49 f7 98 Data Ascii: inkHDb#t;h`~mGwiU5]"C@wfo6lZ!`:z<vV#^'6emPhVG[7w6_IBUsTzEaT#{Od;2PtH@W9 ^ZA>s;wjvE[ #YVd)\"mmw_;iI
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 9f eb 7d d2 e1 07 7d 9a 69 60 4b 42 cf b4 15 95 f3 91 08 54 31 02 af be f1 d1 79 b7 dc 3a fc a5 6d 25 a6 6e 6a 41 70 d0 1a 72 5d 30 0c 1d e2 51 cc 5f 13 04 6f c5 4d fe ca 6f b0 9e c5 54 4e 15 8e b8 a0 52 17 88 6b 43 50 a3 25 cf 4d 18 3b a0 ef 49 1d e7 55 f1 f0 e5 e1 d3 0c 81 91 e3 a6 df 31 fa b1 b1 0f 46 e2 40 88 1a 80 48 69 29 64 e5 e7 43 24 16 03 e2 05 cf 13 84 2e 3a ef 95 23 74 33 0e e0 b8 60 04 35 08 28 0c 62 a5 db e1 c8 ce 1d 17 4f 78 f6 99 33 da 36 cb da 90 66 70 ec 76 b8 92 d0 33 69 35 e5 5c 24 02 55 8c c0 e2 15 db 3a f4 3c ab ef fb 45 c5 f1 06 16 e8 60 ab 06 d8 58 6a 66 e8 e0 da 16 a0 c5 ad 1b 2a c4 22 51 30 0c 03 6c 07 2d 74 61 91 57 94 78 c5 92 22 8d 5a e8 6a 77 9f 7a fc b1 2b 2e ef 77 c2 f3 55 3c 7c 79 f8 34 44 00 cb 22 87 de 32 7a cc f4 37 e6 Data Ascii: }}i`KBT1y:m%njApr]0Q_oMoTNRkCP%M;IU1F@Hi)dC$.:#t3`5(bOx36fpv3i5\$U:<E`Xjf*"Q0l-taWx"Zjwz+.wU<\|y4D"2z7
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: a5 a1 c8 a0 c6 bc 75 a4 73 75 34 cf af 47 93 25 80 0e 91 a2 09 63 de 1d da bc 63 e3 aa 4b 32 be 65 d2 e6 0e f6 1c b9 5c a4 62 8d 9a fb 4d c2 79 39 a7 ca 1a 01 1d 6b 16 d0 3b a7 4e a3 20 02 27 0a 14 d0 25 45 01 cb d0 28 d8 63 71 9c 47 e2 a1 4c c9 62 db 26 8d 19 d3 32 ff fd dc b9 b4 99 75 c6 be 0a 12 27 35 e8 38 60 dd 9a 8d 9f 57 97 3d 59 c1 02 15 74 4d 07 91 67 b4 b0 a1 0d 15 05 71 64 96 73 2a dd 6d cb 06 5e e0 69 2d 09 cf 19 60 06 e3 41 95 78 a8 5e ad fc ea e8 e9 a3 1b a5 b7 02 39 17 d0 33 f6 73 ea ce de b5 c0 6d 5b a0 f7 f0 e9 93 67 cd 5d da db 20 02 d8 82 0c 66 50 03 41 91 41 12 04 b0 34 24 88 61 22 d2 a6 6d d1 90 23 7b c1 39 07 c7 78 dc d9 2b cf 80 8a 25 9e db b8 61 f1 34 54 a5 d2 6e 7b 22 99 e4 03 7f ff 1d 97 eb c0 91 9f 9e ff f6 fb c3 e5 f6 1f 38 f4 Data Ascii: usu4G%ccK2e\bMy9k;N '%E(cqGLb&2u'58`W=YtMgqds*m^i-`Ax^93sm[g] fPAA4$a"m#{9x+%a4Tn{"8
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: b5 1b fc 76 ef 36 ef a6 9b c5 09 f3 44 50 bc a8 7d df 77 67 2f 5d b1 ae 2d 27 fb c0 af 9b 4e 17 03 b3 61 48 ef 20 f4 ff 34 8a c2 13 46 34 63 4b 74 ed b0 5d 91 98 01 c8 93 3b f2 8f 0d 1b 96 94 7a 2a 6f b6 3f c2 3c ed ab 86 77 01 3d 2d ad ed 5e cb b5 40 98 2d 80 2f a5 3a 6d de dc b2 e5 d3 3d 95 88 28 83 8e 05 4f 48 5b 09 12 10 22 80 c2 29 10 08 c6 83 2c 9a c0 89 84 86 14 59 26 50 c2 f8 21 25 cd 30 82 01 c8 1e 21 c3 6b af 3e bb 79 e3 92 49 b5 32 93 77 fe c6 f0 89 13 e7 2d 58 f1 46 c0 14 c1 c0 97 34 2f 81 89 90 49 7b b7 43 39 55 1b 6c 53 67 7d e7 8c c3 e5 2a 5a 56 7c d1 27 85 69 19 00 0b 57 73 b6 9b 40 38 11 41 97 79 d8 e8 c1 5f 1f d0 b1 a0 2e 74 50 56 39 24 ec c5 de f3 e4 ed 6c b4 3f dd 79 95 87 54 f2 70 b6 4e 25 36 ad 8a bf 2e a0 63 d7 15 72 95 8b 60 1a 04 Data Ascii: v6DP}wg/]-'NaH 4F4cKt];zo?<w=-^@-/:m=(OH["),Y&P!%0!k>yI2w-XF4/I{C9UlSg}ZV\|'iWs@8Ay_.tPV9$l?yTpN%6.cr`
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: e1 91 22 b7 7c ed 8e fb 31 dc 6e d0 70 7b 48 80 e3 7a 1e 3a 01 01 a9 3f 09 4a 8c 62 a1 21 aa ac 61 6b 5b 00 1e c8 93 ed cf cf 57 af 28 f9 58 5e cf 6d 29 6a dd 2d 40 c7 05 98 b7 66 4f 8b 6e bd fa cd 25 a2 57 c4 16 36 ac 0d 48 02 24 06 4a a1 5c 3e 15 75 a1 74 a6 d8 21 81 24 3b d8 e6 a6 d1 88 ce f0 a1 03 07 bd d9 ad e9 98 74 b3 a8 61 9e c8 f1 3f 83 8f 97 a9 56 6b 4f 42 90 e4 89 89 0f 00 48 02 6d ff 43 db 24 07 f4 d0 34 42 1b 22 1b 69 81 23 bc 10 4c 88 05 8f 60 c1 fd 39 a2 2e 6c 59 ff c9 ab 05 1e ca 7a 22 1c 53 76 01 3d 1c 56 75 c7 74 2d 10 66 0b 10 42 e4 da cd 7a ac f9 62 ff e1 aa 71 7e 0b 24 85 f5 4e eb 3a 0b 05 a2 40 87 11 08 52 ad 6b 3c 92 34 b6 99 47 81 81 78 81 e8 e0 13 74 ff ca 65 f3 aa 97 7f b5 50 a6 11 61 f9 fd 6c e0 d1 97 5f af 74 20 5e 23 b9 30 43 Data Ascii: "\|1np{Hz:?Jb!ak[W(X^m)j-@fOn%W6H$J\>ut!$;ta?VkOBHmC$4B"i#L`9.lYz"Sv=Vut-fBzbq~$N:@Rk<4GxtePal_t ^#0C
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 8b f4 24 6c d9 b0 bc c4 4b 05 72 1f cc cc f6 3c 7d 85 64 af df a0 f9 17 87 7f 3e 5d c4 04 09 2c 27 27 9c dc 43 0f 15 c4 a1 77 8e 2f 67 ac 52 a6 51 10 1a a4 37 20 6f ae 6c 7f 6d 5e bd ac 54 c1 87 b3 9e 4c 8d 2d d3 03 53 5c f2 79 6f d8 fe 55 c5 9e 7d 06 2c 8e 0b 18 b9 2e c7 e9 20 7a 91 81 50 04 0b 89 0e 04 8e 6a c0 eb f1 31 a0 4a 04 72 46 aa d0 aa 59 83 31 a3 87 f4 1a 94 9a 7b bf 17 3f 33 78 dc dc 11 e3 a7 7c f8 36 2f 30 a1 1b c3 c2 e0 99 0c 16 f6 a0 63 51 65 b2 08 50 88 e3 3d 11 d0 69 5b a9 1f 72 65 91 62 be de bb a5 c8 03 d9 bd 7f fe 17 1b b9 80 fe 5f ac e7 7e d6 b5 40 1a 58 a0 63 df f7 e6 2c 5b b1 ae 2d 6a 30 23 98 63 51 8d 20 29 a0 9b a1 a2 9b 6b 27 e1 78 ec 9c 49 ab 96 6d cb 0f 65 4a 16 db 39 37 7a 6a d5 7c 99 90 04 24 b9 75 30 cc dc a0 fd a0 d5 5b 3f Data Ascii: $lKr<}d>],''Cw/gRQ7 olm^TL-S\yoU},. zPj1JrFY1{?3x\|6/0cQeP=i[reb_~@Xc,[-j0#cQ )k'xImeJ97zj\|$u0[?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49858	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:34 UTC	801	OUT	GET /Content/assets/images/Calculator/percent.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:35 UTC	301	IN	HTTP/1.1 200 OK Content-Length: 125673 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:33 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "5f79b918bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:59:53 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:35 UTC	3609	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 e8 08 06 00 00 00 4d a3 d4 e4 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 ea 7e 49 44 41 54 78 01 ec dd 07 80 5c 55 d5 07 f0 73 ef 7b 6f ca f6 34 08 25 c9 86 d0 a5 04 44 05 11 98 04 3f c5 4a 50 94 a6 12 94 22 08 92 48 09 84 40 12 40 08 52 12 b0 a1 52 02 8a 80 02 09 a8 34 21 59 50 01 11 21 34 e9 64 d3 48 25 d9 3e e5 95 fb dd 7b df cc ce 6c 49 b2 c9 b6 f7 66 fe bf ef 1b 77 b3 bb 09 bb b3 33 6f ee b9 e7 dc 73 18 01 00 00 40 9f 88 d5 26 6a d5 5b d7 a6 1a c1 d4 cd a8 21 12 35 ea 63 8c 51 6d ee eb 18 d1 98 dc fb 42 50 fb d7 e8 3f 33 56 db dd bf 2d ff 4e 2d f5 82 20 aa ef fa 6f b2 06 Data Ascii: PNGIHDRMpHYssRGBgAMAa~IDATx\Us{o4%D?JP"H@@RR4!YP!4dH%>{lIfw3os@&j[!5cQmBP?3V-N- o
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 38 fb 21 af 1e 4b 5e e3 d2 67 08 00 fa 14 32 e8 00 7d 69 64 a2 d6 8c 18 0b e4 4b fa 78 02 64 cc 01 00 a0 78 d4 26 6a 0d 8f cd 92 41 fa a9 04 9a ca a6 bb 19 6f 02 1a c8 01 f4 1d 04 e8 00 7d c4 1a 9d 38 df 23 3e 0b 59 73 9f 7c d1 9e 2f 33 e6 b3 65 60 5e 4f 00 00 00 c5 02 81 7a 17 72 ed 33 15 7d 65 00 fa 06 02 74 80 de 52 8d e0 2a d9 02 62 2c 41 a0 e6 b1 d4 a9 ce ec ce ca ba 3a 02 00 00 28 56 2a 50 17 7c 2e 13 34 89 00 e3 d8 00 fa 08 02 74 80 5e 40 23 b8 02 08 cc 01 00 a0 04 19 a3 12 93 e4 26 fd 5c 34 92 cb 8d 63 63 53 dd 15 4f 2f 24 00 d8 2e 08 d0 01 b6 07 c6 a7 b5 53 e7 cc 49 78 53 31 cb 1c 00 00 4a 19 3a be 77 30 cb 59 be 68 36 01 c0 36 43 80 0e b0 ad d0 08 4e 43 03 38 00 00 80 4e 6a e5 06 be c7 d5 e6 fd 4c 2a 71 68 20 07 b0 7d 30 66 0d 60 1b a8 46 70 cc Data Ascii: 8!K^g2}idKxdx&jAo}8#>Ys\|/3e`^Ozr3}etRb,A:(VP\|.4t^@#&\4ccSO/$.SIxS1J:w0Yh66CNC8NjL*qh }0f`Fp
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 83 26 71 21 11 e6 a6 70 d2 6c 67 c5 e2 79 04 00 00 00 00 10 42 a2 a9 7e 09 55 8f 6d 94 01 ef 31 14 36 68 1a 17 2a 08 d0 43 c0 18 75 f4 24 19 9c df 4a e1 34 db 59 be 68 16 01 00 00 00 00 84 98 68 5c fa 82 0c 74 55 0f af 04 85 4f 82 55 ed f6 aa 68 5a fa 36 41 a0 a1 49 5c d0 e5 cf 9d d7 52 d8 78 74 b3 b3 72 d1 14 02 00 00 00 00 28 12 c6 a8 09 f3 19 63 a7 52 f8 a0 69 5c 08 e0 0c 7a c0 85 36 38 17 a2 0e c1 39 00 00 00 00 14 1b 77 c5 e2 c9 c4 58 1d 85 4f 8d 19 31 16 a0 69 5c b0 21 40 0f 30 73 f4 c4 50 36 85 53 e3 d4 1c 43 1c 47 00 00 00 00 00 45 c8 61 ee 71 6a cd 4b a1 23 c6 9b 95 7c 26 41 60 e1 0c 7a 40 59 a3 13 e7 13 b1 59 14 32 05 b3 ce d7 10 00 00 00 00 40 31 6a a8 4f 89 21 b5 0f 33 41 93 18 b1 70 65 a4 19 1d 6a 54 8f 6d f4 1a 97 be 40 10 38 38 83 1e 44 23 Data Ascii: &q!plgyB~Um16h*Cu$J4Yhh\tUOUhZ6AI\Rxtr(cRi\z689wXO1i\!@0sP6SCGEaqjK#\|&A`z@YY2@1jO!3ApejTm@88D#
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 13 90 3d 07 18 18 ef ac 68 db a5 ee 99 7f 7c fe a9 a7 16 7f f3 b5 d7 de 38 f0 a3 0d 0d bb 3a ac 8c a7 1d 4f 07 af a6 2a 05 97 17 0e 5b 06 d8 2a 02 2f 93 d9 0e 55 d2 69 cb 8c 87 0a c6 0d 8b ab ae 6d 3a 03 a2 a8 c5 ac 63 0b b2 ac 98 0c 82 4d 19 04 67 64 b0 ee e9 45 98 df d8 8d e9 92 46 62 f9 73 e3 b9 60 3b 17 a0 ab 00 ba bd ac 9d f5 e0 b2 ad 17 c4 fe e2 58 c8 4c 96 ab fe 98 fb 6b fa 5c 7a fe df d7 ff 0d f9 7d 5b 32 83 a3 de cf 6d 3e e8 f2 54 f9 29 95 71 d7 81 bd c8 9d 93 f4 d4 6e 83 cc e8 d8 34 b4 aa d2 1e b9 e3 f0 77 27 1c 71 f8 3f fe 6f 62 e2 4f 87 1d f4 c9 ff 0e 1b c6 9a 08 00 8a c2 75 37 df 77 f5 35 37 ff f6 92 b4 67 1a ba 82 87 f9 1b 79 6a 53 31 1e 8f 53 32 d9 26 f7 1d 3b 5e b7 72 d7 0a ff 28 8d 68 af 06 82 8e bc ec 86 6c 34 1a a5 64 4b 0b 31 d3 d4 ef Data Ascii: =h\|8:O[/Uim:cMgdEFbs`;XLk\z}[2m>T)qn4w'q?obOu7w57gyjS1S2&;^r(hl4dK1
2024-10-21 22:39:35 UTC	3356	IN	Data Raw: 6d cb 56 ae 1b e7 b8 32 43 9b f1 c8 15 fe 73 4f f1 06 61 62 45 e9 e8 b4 d4 ce 05 ea e4 07 eb ea 77 a0 26 8e 58 a6 cc a0 cb 6b 5c 2c 1a 21 4b 7d 8d 93 ca cc b9 6a d6 8f 10 9c c3 80 f3 63 93 9b 29 c0 54 8c a7 62 3d 2a 52 c5 bb 2d ca 82 3d cb 4f 35 86 93 d9 f3 79 04 00 5d a8 f1 69 d7 ff fa 4f e7 9e 7e d6 79 0b 5e 79 fd dd f1 b1 f2 6a 4a b6 b6 e9 31 40 66 24 aa 17 93 9c 9b 94 b1 33 94 49 27 fd 39 e6 32 fb a0 b2 b0 b6 0a e0 65 60 1e 31 4c 32 54 20 ef 94 7c 1b e1 c0 53 59 73 35 4e 48 95 b8 ab df 9d 2a f3 e4 32 b3 a7 8e 32 a8 b7 8e fc 5c a4 bc 4c ff de db da 5c 19 c0 57 93 11 ad 36 7e 7f df c3 67 1d 77 ca f7 1f 78 fd ed 15 07 10 00 74 4b 4d 41 b8 7a fa 35 37 bf f4 f2 eb 87 67 d4 29 a0 48 5c 67 c5 2d b9 c1 e9 4f e1 46 86 bc ff 71 3d 0f 5e 74 2a e6 52 af 4e 86 69 Data Ascii: mV2CsOabEw&Xk\,!K}jc)Tb=R-=O5y]iO~y^yjJ1@f$3I'92e`1L2T \|SYs5NH22\L\W6~gwxtKMAz57g)H\g-OFq=^t*RNi
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: ab a0 56 b9 80 cc cd 3a d7 65 ee 9b 23 ba c9 58 00 6c 23 43 2e a2 d3 c9 36 fd 98 8b 94 cb e0 3c 25 17 d9 d1 38 b5 a4 5d fa 70 e5 47 fb 5e 74 d1 e5 77 2c 5d da 32 92 00 02 6e c9 07 eb f7 9c 76 d9 ac db d6 37 b4 0d 75 99 45 1e 33 49 8d 55 63 ea ac 50 79 39 a5 d3 69 fd 75 6a f3 33 95 b1 f5 35 16 fa 50 f6 35 29 1f 9c 77 9c 1a a1 2a 76 78 b6 cb bb 7a df 20 97 46 8e a8 5e fb f3 79 d7 9d 89 e0 1c 8a 8e 60 c8 a2 f7 93 70 5e b9 91 3d 07 08 ac a7 5f 7c f7 c8 ef 9f 75 fe 83 1b 36 b5 0c 4f db 6a 0e ac 29 33 38 66 76 21 e3 75 53 12 98 9f 71 dd 5e 16 98 0b cc d5 5b e6 65 cf f7 21 8b 0e db 4e 2d 92 cd ec fc 62 47 06 33 0e f7 9b 37 f9 1c f9 39 9b 4c bb 4d 9c fc 8d af dc 7f d5 a5 57 fe 60 97 5d 58 1b 01 04 d0 aa 26 31 fc c4 13 bf bb 70 c9 6b 4b 0f cf 08 4b ee 3c 45 e5 63 Data Ascii: V:e#Xl#C.6<%8]pG^tw,]2nv7uE3IUcPy9iuj35P5)w*vxz F^y`p^=_\|u6Oj)38fv!uSq^[e!N-bG379LMW`]X&1pkKK<Ec
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 54 f3 f1 a6 8d 35 6b d7 ad df 71 f9 b2 e5 3b 7f b8 7c d9 ae 1f 7d b4 6a f7 0f 97 2e dd 6b 59 fd 8a 7d d6 7d bc 61 88 e3 18 cc 8c 44 59 ac 3c aa f6 18 74 50 9e 49 b6 e8 f9 f5 a6 3a a6 a0 b2 ee 72 81 ea 38 19 bd 40 55 9d cb 65 4a 4f 06 f5 d9 24 91 8b e0 20 1a 8d 93 9d 6e 95 6f cb 69 d5 47 6b 6b 7f fb cb 3b a6 ca 0f 5f 48 00 db e8 d5 b7 9b f6 3a e9 b4 ef df de d4 9c 1e 9a 71 18 31 2b 5b e3 92 1b 87 c8 cc 6c f5 8a 51 32 8d 1a 07 56 e7 40 5d 55 2b 38 6a 77 44 6f 5c ea a3 40 e9 14 55 d6 d4 50 b2 ad 85 62 9c d1 ae 3b 0f 5b 7b c3 f5 57 9f be df 2e e8 d8 0e d0 63 f5 75 4b 68 cc d1 75 c1 4d b8 ea 91 6b 75 14 40 c1 0c d0 83 3e 5a cd f3 ee 22 80 12 f1 eb df dd 76 e1 ff de 7d 7f 57 33 52 ae 03 3b d5 b4 c8 88 18 ba 7b bb e8 2e 70 d3 0b ca 6e 9a 8d 85 98 ce 2e 3b ae 2e Data Ascii: T5kq;\|}j.kY}}aDY<tPI:r8@UeJO$ noiGkk;_H:q1+[lQ2V@]U+8jwDo\@UPb;[{W.cuKhuMku@>Z"v}W3R;{.pn.;.
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: cc 3d f9 23 45 2c 99 3d 51 43 ac 3d b9 84 e6 6a 28 ae a3 cf 9b 47 4c 21 b3 2c ad 74 fa 69 27 cf fb c5 9c 8b ce 1f 31 82 35 13 f4 c8 17 0e db ef 5f bf be fe da e3 f7 df 7b dc 5b 71 99 46 cf 65 d0 49 05 ea ea ae 76 fd 51 76 32 eb ae bf 3e 57 99 a1 6e 6a 8e 7a d0 b5 9f 40 cf 66 44 d5 a6 4e 87 c6 77 9c e9 20 5d a8 6a 01 6e 19 f7 dc f3 a7 ef ca 9f b1 18 4a 07 a0 07 a6 ff f4 d7 33 fe fa f8 d3 df ca a8 bd 9c 48 44 8f a6 8c c4 ca a8 ad b1 91 62 f2 2d f4 2f 75 3d c9 dd 58 b6 77 8a ba b6 a8 49 24 4c 6d 12 aa e7 ad 7c ab 26 cb 9b dc a6 a8 e9 d2 09 df f8 f2 6d 17 9d f3 6d 74 6c 07 18 24 c1 1e b9 c6 27 d1 20 1b fc b4 86 3a 90 1f 44 42 d4 61 b4 1a 94 8a bf 3c f9 f4 09 2d c9 4c 19 97 19 1f 4f a6 7b dc 6c ca 47 05 4f 66 11 94 b8 67 32 6a 64 9c 5c a0 99 11 4a 35 b7 52 2c Data Ascii: =#E,=QC=j(GL!,ti'15_{[qFeIvQv2>Wnjz@fDNw ]jnJ3HDb-/u=XwI$Lm\|&mmtl$' :DBa<-LO{lGOfg2jd\J5R,
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 2d 80 f6 63 2c 73 ca b7 bf 79 6b 44 c6 af 32 47 49 5e 5a 26 d3 3d 55 26 ee e9 a0 5c 6d ba a8 b7 aa c9 5a d8 b9 f2 49 f6 fe 87 cb f6 6c 5b d6 b8 33 41 20 fd fe da df 5c be e0 91 c7 4e 4c 39 a4 37 88 d4 d1 84 ca 21 43 74 25 c4 e6 74 bd 56 76 ed 8d 11 b6 e3 1a 41 a4 8e 17 44 22 31 72 32 b6 ba d8 53 65 55 19 45 28 23 be 73 f2 37 6e bf f0 ac 63 af 27 00 28 2a 0e f7 e6 53 10 31 36 7e a0 ca dc 07 e4 95 23 5b de 1e 3c 98 7d 0e 25 68 c9 6b 6f 1e ac 4b c6 3d 83 84 4c 37 bb aa 24 9c f9 0b 4b bf 29 57 ee 2b 39 05 23 b3 ee 2f 72 d5 77 22 0a 37 13 b2 df 2f 65 bf 77 55 4e cc 65 86 c5 94 3f 93 ea 10 ee b9 19 f1 dd 93 4f b8 7b 04 63 cd 04 81 f4 95 a3 26 3c b1 c7 ee b5 6f 5a 32 06 37 0d f9 5b 4c 67 b2 41 39 27 47 be 75 3c bf dc 3d dc fc 99 cd ab d7 ad 1f b9 e2 a3 15 3b 11 Data Ascii: -c,sykD2GI^Z&=U&\mZIl[3A \NL97!Ct%tVvAD"1r2SeUE(#s7nc'(*S16~#[<}%hkoK=L7$K)W+9#/rw"7/ewUNe?O{c&<oZ27[LgA9'Gu<=;
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 9c cb 38 b9 d9 ab 95 e1 a9 b9 b9 e4 9f 29 95 01 8f fa be 99 21 03 3a 93 db 71 af 0c 01 7a c8 45 a2 b1 b4 3a b3 6d 72 4b 07 58 6a e4 5a 98 ab 3b 14 15 98 1b 32 40 d1 6f e5 63 b5 2d 99 c4 98 b5 3e f0 7e b3 d8 e1 8c 29 97 de f6 e1 47 1b 77 6b 95 17 08 16 8d 93 27 af 13 2a 18 74 6d 9b 4c b5 5f e7 b8 fe 06 5f f6 9c b9 3f 46 8d eb 20 9d 8b 5c e5 90 1f 58 fa d7 bf dc 25 24 f7 35 9d cf a5 97 1a bf 99 9e 57 70 bf 30 2f 7b d3 dd f1 e5 26 88 a1 ca d6 93 3a f8 66 f2 3e 94 1b 50 fa 3c bf 61 96 c9 d7 98 6c e5 88 70 88 ec 56 aa 89 b1 d4 9c 59 17 9e fb f9 83 f7 78 9e 00 00 b6 55 bd 8c e9 18 5b 42 01 23 2f 87 7d 7a 0e bd ef 5e 75 46 26 6a e5 6b 60 2d 05 8c 5c be a3 7b 3b 94 3c d5 dd 58 06 3d 46 6e 74 15 15 94 db 16 ca 9e ca 2c 28 f5 1c fc 85 69 ee 8c 68 b6 10 5f 7d a4 6b Data Ascii: 8)!:qzE:mrKXjZ;2@oc->~)Gwk'*tmL__?F \X%$5Wp0/{&:f>P<alpVYxU[B#/}z^uF&jk`-\{;<X=Fnt,(ih_}k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49855	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:34 UTC	803	OUT	GET /Content/assets/images/Calculator/StampDuty.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:35 UTC	302	IN	HTTP/1.1 200 OK Content-Length: 109003 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:33 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "f1e2ae938bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:59:57 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:35 UTC	3608	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 d2 00 00 02 17 08 06 00 00 00 28 ad df ac 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 7d 07 98 55 d5 d5 f6 da a7 de 32 05 54 90 8e 60 49 94 58 23 c6 e8 a7 31 51 4c e2 17 f3 27 8a 74 10 01 15 bb 54 25 16 86 12 50 c0 82 d2 db 00 02 2a 98 98 2a 46 4d 14 93 f8 a9 f9 d2 8c f9 62 0a 45 4d d4 44 69 33 73 cb 69 7b ff cf da e7 9e b9 77 c6 e9 f7 de 99 7b 67 d6 79 1e b8 33 77 ce d9 e5 dd fb 9c f7 ac bd d7 5a 2f 83 7a c7 ef f7 1e 3d 79 d7 4f 9e 1f f3 a3 9f bc 34 e2 ed 3f ff df a9 8a 16 62 f2 14 c6 01 00 ff e1 11 7c 02 28 42 ab 5f 04 fd 4e 08 10 02 5d 04 01 0e 4a 9d 9e d6 fd 0d 40 08 4f 3e 2f 74 55 83 a4 15 83 9e 3d 7b c6 87 9e f7 f9 97 2f bf 7c d8 b6 91 c3 2f f8 71 2f c6 62 5d 04 2a Data Ascii: PNGIHDR(sRGB IDATx^}U2T`IX#1QL'tT%P*FMbEMDi3si{w{gy3wZ/z=yO4?b\|(B_N]J@O>/tU={/\|/q/b]
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 98 9f b3 17 f5 64 b8 6b 83 11 61 60 27 13 60 80 56 ab 61 2c c9 b6 36 53 92 1f bb 8a 16 31 6a 9a 02 77 41 78 2e e8 f2 47 0b 3e 7b d2 a0 7d 8f 3e b4 68 0c e9 99 76 e5 59 9b bb be 67 47 a4 e0 82 06 1c 1e 59 42 7b a4 b9 1b 12 2a 89 10 28 3e 04 82 84 0c 1c 42 80 59 02 55 e1 7b db d6 26 64 f8 54 f8 0b 92 1c 46 bb b8 a0 2b 02 54 e1 c2 dd 33 6e a9 b8 6f da f8 79 41 ef 9f fa e1 af c6 ce 98 75 ff ea 43 d5 c9 d2 04 f7 40 35 a2 e0 79 2a 18 e1 10 d8 d6 21 50 34 06 2a aa cd 04 e2 e1 b5 56 ab 4c 8d 2f 8b e1 96 05 7a 24 02 2a 13 d2 99 49 57 15 e9 9c 94 a8 a9 82 21 a7 9d b8 7f c3 63 8b 47 7f f1 cc 41 6f 14 1f e2 d4 e2 42 42 80 88 b4 90 46 83 da 42 08 14 29 02 6d 23 52 24 35 21 35 8d 75 e1 c0 5d d3 6f ae b8 6f da d8 5a 22 45 28 b6 3c fd f2 b8 bb e7 56 ac 3a 1a 4f 96 32 a3 Data Ascii: dka`'`Va,6S1jwAx.G>{}>hvYgGYB{(>BYU{&dTF+T3noyAuC@5y!P4VL/z$IW!cGAoBBFB)m#R$5!5u]ooZ"E(<V:O2
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: fb a0 f8 d9 5a 3d 53 61 73 d0 95 10 a0 9e a9 13 3f 0a a7 9f 76 22 e9 99 36 37 08 05 f2 f7 9c 10 29 c9 a8 15 c8 68 52 33 08 81 0e 42 a0 2b 12 29 42 bd 09 e3 4c ef 9d b7 0e f5 4c 75 dc 07 4d e9 99 0a c6 5a a4 67 ca 34 cf b7 62 63 6e ad 9e a9 2a 18 30 e1 02 77 6a e0 e4 13 7b ef df 54 b9 6a c4 17 3e 4b de bc 1d 34 b5 5b 54 6d 4e 88 94 bc 76 5b 84 35 9d 44 08 74 5a 04 72 b1 b4 5b 6c 16 69 30 98 a8 67 fa c0 83 cb 1e ff e7 47 ff 2e cf d4 33 45 67 22 0f 30 3c a6 71 3d 53 a6 71 b9 77 0a 9e 9a d6 33 75 5c 19 67 8a 49 ee 5d ab 0a 06 0e ec b5 77 db 96 55 63 48 cf b4 70 6f 1f 22 d2 c2 1d 1b 6a 19 21 50 34 08 e4 82 48 8b 69 8f b4 fe c0 6c 79 fa 85 71 df 99 3b 0f f5 4c 43 a8 67 ea 0a b5 c5 7a a6 a0 30 d0 54 e3 53 7a a6 9e 63 4b 3d 53 e1 26 50 cf 74 ff c6 0d 2b 46 90 9e Data Ascii: Z=Sas?v"67)hR3B+)BLLuMZg4bcn*0wj{Tj>K4[TmNv[5DtZr[li0gG.3Eg"0<q=Sqw3u\gI]wUcHpo"j!P4Hilyq;LCgz0TSzcK=S&Pt+F
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 20 33 c3 49 fd 40 6d fa bd 6e e0 7a 21 e0 f1 69 7a 08 be 91 49 c8 91 4c 53 2f 5a 5e d2 86 b2 92 10 c4 aa 8e 82 ce 04 1c d7 bd bc 6a db d6 35 5f bb e4 9c 13 fe a7 10 e6 7d db 88 b4 b6 b7 32 47 ac 4f 8e 3e b1 4a 8f dc da 6f ea af ba 04 f9 64 71 f6 a7 53 e4 b5 f7 f8 4a 99 6d 45 03 70 3c 08 19 3a 28 60 03 77 6a c0 4d 1c 85 47 97 2c b8 e7 d6 c9 d7 2c 6a cf b1 d9 bc eb c5 09 0b 16 2f 5b f1 ee 07 ff 29 45 3d 53 3d 14 01 17 9d d6 ea 08 83 67 ea 99 0a e9 d0 e8 78 2e 68 6a 18 2c cb 06 d5 8c f8 29 04 31 d1 bd c6 41 b8 09 50 21 e1 ae 5c fe c0 c4 89 57 7d 75 7b 7b f6 a7 98 ea 22 22 6d e7 d1 ba 7b c1 ea 65 4b 97 af 9f 11 3d a6 0f d4 24 6d 29 d2 8b ae fe 72 af c5 34 40 53 54 c0 90 00 54 b7 47 25 42 fc dd 7f b0 04 0f 98 f4 67 7b 3f 38 a8 be 7c bc a8 64 4c c0 d4 12 65 60 Data Ascii: 3I@mnz!izILS/Z^j5_}2GO>JodqSJmEp<:(`wjMG,,j/[)E=S=gx.hj,)1AP!\W}u{{""m{eK=$m)r4@STTG%Bg{?8\|dLe`
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 28 aa 81 10 20 04 08 81 b6 20 40 16 69 5b 50 6b dd 35 44 a4 ad c3 8b ce 26 04 08 01 42 a0 a8 10 20 22 cd ff 70 e5 84 48 49 8f 34 ff 03 45 35 10 02 84 00 21 d0 16 04 6e 98 b1 60 d3 b6 9d cf 5f 47 7b a4 6d 41 af 65 d7 10 91 b6 0c 27 3a 8b 10 20 04 08 81 a2 44 e0 fa e9 0b 2b b7 ef da 3d 91 88 34 7f c3 47 44 9a 3f 6c a9 64 42 80 10 20 04 3a 1c 01 b2 48 f3 3f 04 44 a4 f9 c7 98 6a 20 04 08 01 42 a0 c3 10 40 f5 97 27 bf f7 b3 b4 45 ca 39 e8 8a 00 21 3c e0 a0 01 30 0e 2a e7 c0 80 83 00 05 04 53 64 bc 29 1e 0c 6c 30 85 0d 93 c7 7d 7b cd 8a 45 b3 6f ea b0 4e 14 78 c5 44 a4 05 3e 40 d4 3c 42 80 10 20 04 b2 41 80 88 34 1b f4 5a 76 2d 11 69 cb 70 a2 b3 08 01 42 80 10 28 4a 04 30 45 e0 8e 67 32 12 32 90 45 9a f3 71 24 22 cd 39 a4 54 20 21 40 08 10 02 85 83 00 aa bf ec Data Ascii: ( @i[Pk5D&B "pHI4E5!n`_G{mAe': D+=4GD?ldB :H?Dj B@'E9!<0*Sd)l0}{EoNxD>@<B A4Zv-ipB(J0Eg22Eq$"9T !@
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: c1 86 ed bb 76 4f 6e 68 69 17 89 b4 7e a2 7a 6c 56 10 f2 8e cb b9 98 26 15 e9 0a 95 72 70 6f d4 f3 fc 65 5e 4d d3 80 e3 92 6c 16 44 8a b1 ac b2 3e 96 b2 36 31 11 84 8a 59 e5 54 10 1c a5 2c 53 fb b1 8c 4b f2 e4 b8 bc eb 62 e8 b7 00 4d 61 e0 26 2d 28 29 8d 42 22 56 05 bd 7b 76 3f 34 e9 da d1 2b c7 5c f3 8d 35 9f 1d d0 e3 83 76 82 d7 6f ff a0 0b 27 ec 7f f7 dd 77 4f c0 86 e3 5b 40 6b 52 96 a1 77 95 06 1c 1e 5d 32 f7 fa 1b 47 5d be a1 3d 1b 4e 75 11 02 84 00 21 40 08 34 8f c0 e4 69 8b 9f d8 fe cc 4f c7 b9 4c 07 c1 d0 b2 c4 d4 7f 32 01 0a 08 99 b9 2b 75 20 59 49 03 31 bd 54 ab a4 34 59 5d 4c a1 88 96 a9 69 4a 4b 11 e5 26 91 2b d0 62 cc e6 90 4b cb 42 48 92 c4 72 1d d7 0f c9 51 35 dc 25 15 b2 8d c8 4d 78 b8 52 9e 07 75 44 02 eb 15 1d 94 d0 51 89 83 a6 08 f0 bc Data Ascii: vOnhi~zlV&rpoe^MlD>61YT,SKbMa&-()B"V{v?4+\5vo'wO[@kRw]2G]=Nu!@4iOL2+u YI1T4Y]LiJK&+bKBHrQ5%MxRuDQ
2024-10-21 22:39:35 UTC	804	IN	Data Raw: a5 a8 27 6c b2 e8 5e 06 95 1b 8e 4b 12 98 ae cd 48 d5 31 4d a6 f2 10 0c 05 c1 8c a6 43 40 05 b8 ed df d7 7e ba 68 c9 82 87 4f 54 57 ce 9d 88 54 10 69 51 b9 3e c5 71 0a 04 04 02 79 88 c0 4b af 7d f4 78 cb 27 bb ac b7 40 21 54 09 82 83 0a 3e aa 0e 66 34 c6 ba 50 13 43 41 48 4f 3f 06 aa 8c a6 dc 31 90 55 ac f1 61 44 aa f0 ff a1 ed 18 f5 a2 2e 30 a0 58 8a 9a 3e eb d9 09 8f d7 ad f2 9f 77 f2 70 d9 f9 6e d7 94 d2 a4 c7 9b f5 5c fb e6 fb ff 7d d8 26 ba 17 95 62 48 8a 8e 31 99 44 8a 63 42 e8 24 e3 50 0a e8 96 ea 60 c4 2a 29 cc c3 d5 8a c6 40 55 09 68 c4 01 b0 a2 f6 a2 79 d3 9a 35 aa 79 f7 f3 c7 3b 58 41 a4 f9 ee 12 10 0b 12 08 08 04 8a 22 02 a9 a9 b4 c4 a3 4d 5b be fe e5 b6 9f 6e 73 64 1d 6c 4c eb 82 12 e7 33 ca 47 39 78 7d 0f 11 72 41 d6 50 27 d6 04 45 09 80 44 Data Ascii: 'l^KH1MC@~hOTWTiQ>qyK}x'@!T>f4PCAHO?1UaD.0X>wpn\}&bH1DcB$P`*)@Uhy5y;XA"M[nsdlL3G9x}rAP'ED
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: a0 05 13 00 15 ee 5c cb 01 85 35 13 f9 37 7b 4e a2 3c ed c8 89 d4 65 a2 02 0e e8 2a 0a f8 98 40 ec 34 78 b8 c6 fd 9b a6 2f 98 52 bf 28 a7 74 b3 5f 48 a3 a7 2c 78 7a e2 b4 39 c3 6d a2 93 88 49 40 41 a5 28 cb 04 49 46 3d 5e dc 1a 9b b5 24 a6 c9 cb f1 b5 01 53 bc 68 7a ae aa 01 b0 22 16 04 55 19 82 aa 4d 27 3d 33 a4 65 9b 46 55 57 c4 7f 47 ae 10 a9 f0 23 2d 92 7f ff e2 a0 05 02 02 81 5c 40 60 f1 ba 77 9a f6 e9 37 78 59 5a cc 96 5d 49 03 05 75 75 5d 00 c7 a1 80 23 a3 58 1b f5 ed d1 f0 26 cf 1d 4e d0 ed 84 b0 f4 2f b8 26 c8 60 80 46 2c 48 0c 38 c7 de d8 f2 d2 7d 37 55 b8 f8 9b 5c 58 5a a1 d9 c5 cf 7f 1e bc a8 71 d3 d6 ef ed f8 7d df 15 31 57 01 a2 a7 80 ed d8 80 7d 43 4c c1 98 75 3d 73 22 e5 52 82 2e 50 c9 05 db 95 98 b0 3d d8 c8 aa 16 28 6e 14 ea 3e 56 f5 85 Data Ascii: \57{N<e*@4x/R(t_H,xz9mI@A(IF=^$Shz"UM'=3eFUWG#-\@`w7xYZ]Iuu]#X&N/&`F,H8}7U\XZq}1W}CLu=s"R.P=(n>V
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 00 bc 9f 2e f3 65 03 b6 98 60 ed 54 fc 2c ca 38 48 5c 33 35 db 75 c0 af 13 fe 80 96 f5 27 ef 00 24 96 03 89 01 1d 42 9a 7b e4 f9 35 4b ab df 75 53 f9 ff 9e fb db 8a f8 c6 bc 46 e0 a3 ef f6 54 ae 56 fd d1 8f a9 12 50 f0 7e 63 18 36 28 81 10 f3 18 8d 6f 36 f2 1f 38 e3 23 52 34 f4 96 a8 05 01 c9 81 01 bd 3a 0f 19 dc ab e5 98 bc 5e 6f 61 de 3f a5 34 70 4f ad d6 5b bf da f6 cb 7f 2c 50 58 f4 ef cf 8e fe 23 22 95 14 40 6f 75 ec 71 90 15 09 1c 23 06 9a a6 80 65 46 e1 ee ca 37 7c f6 fe 86 79 98 1d b0 8b 24 91 a2 ce 62 8d 7a ed 3e f9 f0 b3 6d ff 71 48 00 9c 38 d1 e2 ec 84 1a 7f fb cb bc b8 32 6f 8c 78 02 a8 e4 02 71 25 f1 b3 a8 e1 e0 b5 c4 f3 d6 78 1e 91 1e ef c5 09 d6 27 da cc 9f b8 ad e2 28 40 5c 93 e9 a7 8e 1d 3d a8 7b b7 d6 8f cd 28 cc 37 b1 a2 7a 6c 13 e6 ae Data Ascii: .e`T,8H\35u'$B{5KuSFTVP~c6(o68#R4:^oa?4pO[,PX#"@ouq#eF7\|y$bz>mqH82oxq%x'(@\={(7zl
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 25 25 00 b1 58 0c 14 af 34 ea 13 a9 ff 20 c3 f0 c7 71 17 cb 84 20 3b 5f 68 28 61 f3 ac 80 1b 05 2b 72 08 1a d4 ab f9 ea f3 f3 26 d5 c9 89 23 93 20 d2 bc 3a bb 62 bf 02 01 81 40 a1 46 00 4d 2f 5a f7 1c b1 6a cd ba 57 1b 21 1d 06 12 52 20 fd 58 04 24 3d c8 0c db 71 e0 5f f5 74 ba 51 ee 0f eb 6f 9c 48 71 a8 82 df e1 31 62 b5 a2 11 08 04 75 08 28 12 3c d1 bc ee a4 69 23 ba f4 2b d4 c0 e5 e2 c1 ed de 7d ec 82 1e 43 47 2f db b4 f9 9d 87 4d 2a 83 16 4c 86 70 5a 84 8d 1b a9 c1 20 b3 3f 43 12 45 ad 74 ea 09 2e 64 3c c8 20 91 da 31 d0 d0 d9 85 6a 4c 9a d1 b6 62 10 d2 01 ca 96 0a ec 59 32 f7 d9 9a 77 fe fb aa af 73 b2 5c 41 a4 39 41 49 6c 23 10 10 08 08 04 b2 21 b0 68 d5 86 76 3d fa 8f 9e 63 c9 01 05 09 12 07 fc 55 b4 5e 74 28 b8 96 05 1a 9a 5e 38 fc 26 ee b7 b7 64 Data Ascii: %%X4 q ;_h(a+r&# :b@FM/ZjW!R X$=q_tQoHq1bu(<i#+}CG/M*LpZ ?CEt.d< 1jLbY2ws\A9AIl#!hv=cU^t(^8&d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49857	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:34 UTC	805	OUT	GET /Content/assets/images/Calculator/right-Arrow.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:35 UTC	300	IN	HTTP/1.1 200 OK Content-Length: 2526 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:33 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4951b9928bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:59:55 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:35 UTC	2526	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f2 00 00 00 7d 08 06 00 00 00 98 8e 3e a9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 09 98 49 44 41 54 78 5e ed 9d 6b 6b 64 55 16 86 eb ad e4 5b ce da e7 54 9a 6e 9a 7c cb f7 fc 08 f3 27 d2 f6 c5 b6 8d dd a6 45 11 11 11 6f e3 5c bd 21 22 22 8a 82 88 28 22 22 a2 88 8e 33 3a de 45 44 8c 22 22 22 8a 88 11 51 24 04 6b 32 d1 68 e5 ec 49 39 95 9e 74 1b 53 39 75 f6 fd bc fd 35 b5 d7 e5 59 fb e9 ac 4e a5 4f a1 c5 3f 24 e0 89 40 b7 db 7d 40 29 b5 e0 29 7d 52 69 91 54 37 6c 26 2a 02 dd 6e 57 6b ad df 1f 1f 1f 5f 98 98 98 78 2f aa e2 03 2b 96 22 07 36 90 26 95 d3 17 79 ab df b2 2c 2f 2d 8a e2 fe 26 f5 6f b2 57 8a 6c 92 26 63 55 22 b0 5d e4 c1 c1 07 45 e4 12 00 67 04 af 14 b0 c1 2f a6 c8 0d 1e be ef d6 77 10 Data Ascii: PNGIHDR}>sRGBIDATx^kkdU[Tn\|'Eo\!""(""3:ED"""Q$k2hI9tS9u5YNO?$@}@))}RiT7l&*nWk_x/+"6&y,/-&oWl&cU"]Eg/w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49856	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:34 UTC	806	OUT	GET /Content/assets/images/Calculator/Installments.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:35 UTC	301	IN	HTTP/1.1 200 OK Content-Length: 74701 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:33 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "57dc4a908bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:59:51 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:35 UTC	3609	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 2f 00 00 01 bf 08 06 00 00 00 90 5a 37 9a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 7d 09 9c 14 c5 d9 fe 5b d5 dd 33 b3 bb c0 e2 ad 28 c6 2b 11 35 11 3c 72 a8 89 26 41 51 c4 18 05 05 0f 94 fb f4 e0 8a 51 93 a0 a8 28 02 2b 1a 8f 28 11 c5 03 14 54 8c c6 04 13 54 44 fc be f8 c5 1c fe c5 0b 4f 34 ab 68 bc 60 81 dd 9d e9 a3 ea ff 7b df ea 9a ee 59 16 96 dd 99 65 b7 97 ea 5f cc b0 bb d3 dd 55 4f 1d ef 53 ef c9 a0 03 5f 1f 7e f8 c5 5e 3d 7e f4 b3 b5 2e ab 00 0e 02 98 04 90 4c 75 58 84 9f 12 6c 60 52 80 25 7d 60 20 40 02 07 c9 38 04 8c d3 f7 f0 f7 0e b8 70 c9 a8 f3 67 cf 9a 7a f1 2f 93 06 d7 47 eb e5 4e 03 07 9d bf 7c d5 1b ff e9 25 58 06 02 01 00 9c 81 b4 3c 10 c2 07 0b 9c c2 Data Ascii: PNGIHDR/Z7sRGB IDATx^}[3(+5<r&AQQ(+(TTDO4h`{Ye_UOS_~^=~.LuXl`R%}` @8pgz/GN\|%X<
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 14 bd f8 6c fc 0f 23 45 f2 a4 26 bf 41 35 d4 54 44 26 24 6a 23 85 c9 86 e6 17 14 48 a8 82 f6 05 a0 7d 85 a1 c3 2b 30 90 5e 78 f2 21 c1 a7 cc 0f 2d 6a 7f b1 f7 e1 db 19 6a b6 d4 29 2d da b8 75 67 05 04 59 17 ec b4 12 5e ea d4 a8 4e cd 38 5e 4a 78 47 5e 13 71 12 a3 9f 40 1a 71 dc e0 f1 b4 aa 05 43 a8 bd 90 28 f8 50 7b 53 6c 3f 5a 7a 3f f6 3f 64 6a 88 bf 32 73 a9 d5 a0 7c 96 14 59 53 e6 31 25 7c 91 70 fa 12 b5 51 ca 6c 62 91 d6 24 1e 71 12 0a fd 70 65 e0 f7 50 cb 86 3e 42 a8 2d a4 e7 78 3e dd 4f 73 8b 33 9a 2f 6d 35 fe 51 6f 89 aa c4 cc 28 ea 2f 38 c6 d8 46 f4 51 72 dd 2c 70 c7 a6 df a1 b9 30 c8 e5 c0 76 32 5b 25 2f 48 6a 94 86 06 40 fa 2e 38 29 a5 85 52 1a cd 90 f0 b4 61 ff 0b 4d be 85 e3 af fa ef 51 9f 7d d7 05 b0 15 f1 22 2d 24 8e 6f 0e f7 a7 34 8d dd 96 Data Ascii: l#E&A5TD&$j#H}+0^x!-jj)-ugY^N8^JxG^q@qC(P{Sl?Zz??dj2s\|YS1%\|pQlb$qpeP>B-x>Os3/m5Qo(/8FQr,p0v2[%/Hj@.8)RaMQ}"-$o4
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 01 86 44 77 a5 dc 00 5b 22 2f 28 dc 71 73 2f 73 6c a8 af af 27 cd 0b 6e 9e 01 a6 5e 2f 2b 43 e5 0a 64 37 d5 52 a8 9e 26 12 54 f7 08 2b d1 7a 2e 04 78 62 43 6d 40 c3 38 d7 66 75 15 35 39 61 84 0d 65 4a c5 cb 07 89 e9 fa c3 32 f2 22 70 0a 4e 92 74 2a 27 d9 de 40 f3 d2 80 bc 28 61 a8 84 36 f6 45 42 4e a5 d8 c7 93 8e 0f e0 bb f8 7b 87 f6 89 d2 44 1b 34 ab e3 e1 97 23 9b 37 39 6e 92 10 56 7f d2 e6 03 1f eb d8 38 58 2c 13 37 5d 07 52 56 0a b2 d9 2c 40 60 29 21 8e f5 5e 48 f3 a2 b5 2e da f4 a4 c8 8b 2f 3c 55 cf c6 b2 20 8b 76 f2 54 39 7d a2 06 cd c1 34 e9 54 ec af 25 6d 2f c5 3d 4a f5 ad a4 ad ce 94 4b bd 57 9a 17 16 50 3b 7d 3f 00 8b a7 21 97 55 82 0b 05 39 92 17 d4 0e f2 b0 2a b8 26 7d 7a 3a 12 c1 d6 fd b2 54 4d 23 12 18 1c 6b 1d b9 44 e6 a9 8e 4c 4a 15 26 6c Data Ascii: Dw["/(qs/sl'n^/+Cd7R&T+z.xbCm@8fu59aeJ2"pNt'@(a6EBN{D4#79nV8X,7]RV,@`)!^H./<U vT9}4T%m/=JKWP;}?!U9&}z:TM#kDLJ&l
2024-10-21 22:39:35 UTC	1812	IN	Data Raw: 6f c4 e8 c9 8b 6b f3 e4 c5 6b 16 79 41 0d 95 4e 56 d8 de c8 cb 67 1b e5 ee 67 9f 37 7c e9 cb af bc 79 14 c7 64 92 39 74 36 56 49 3a 37 af 3c ad 66 98 b2 9c 72 10 68 1e b5 31 a2 0c f3 c3 78 b0 53 67 f6 d5 63 0f dd 73 f2 8f 0e 3f e8 5f ad 31 17 cd 33 0d 02 c5 22 c0 f6 3c fa dc b5 5f 7e f5 f9 5e 10 08 f2 01 20 0b 7f 68 32 52 9e f8 61 2e 94 f0 33 0a bd 53 ce bb 18 b1 e1 d8 0c 0e ea be c7 3b af bf f0 d8 61 8c c5 ed 2f c5 36 af b8 fb 35 79 c9 a1 a9 00 ed fb 2a 7e 24 d4 bc c4 c8 0b f6 83 ab 64 6d da 79 0f d5 e7 2a 39 9f 0f 29 96 83 f1 a3 ce 4b 30 79 19 12 d3 bc e0 90 5a 64 2e 42 77 26 0b 54 54 95 4e f3 df 30 dd 3a 99 91 84 07 69 22 2f df 5e f9 dc e3 77 25 d2 e7 25 22 2f 29 22 2f e8 ff 84 ea 72 34 1b 91 29 40 6b de c2 93 36 65 90 a6 24 8c aa e4 00 c7 04 8b 90 83 Data Ascii: okkyANVgg7\|yd9t6VI:7<frh1xSgcs?_13"<_~^ h2Ra.3S;a/65y~$dmy9)K0yZd.Bw&TTN0:i"/^w%%"/)"/r4)@k6e$
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 8d e6 dc f9 d0 94 6b 6e bc a5 aa de e7 20 ed 72 f0 04 fa 38 a0 cf 4f 58 e0 93 34 8d a1 10 23 a7 66 3c 91 23 79 0b 97 8a 5f 07 19 e6 43 d7 72 ab 66 e1 ef 7f df bf f7 09 49 4c 52 f7 cf 7e 43 c7 4e 58 bc 6e 93 5f 01 96 03 48 ce 95 d9 b4 30 30 21 7f 70 13 58 01 0a c9 8b 04 0b 4d 8d e4 e0 2d c0 e6 0c aa 66 b6 67 f2 52 66 61 0e ae 7c be 1e 0a 81 47 22 86 34 5c 99 88 89 b4 eb 43 2a f3 69 e4 99 40 f2 c2 c1 0e 72 f0 d0 83 73 0d 79 69 a6 3c 34 5f df 7e 08 74 78 f2 72 c4 f7 51 f3 92 06 9f 61 e1 46 ed 9c 8a 4e c6 6a f1 6a ff 0e 05 79 2c 29 5f b8 91 3b 0c 73 3a 04 a4 79 49 6c 86 dd 73 86 ad 78 ed ad 0f 7a a1 f6 c9 0f 18 99 4c 30 b2 00 a3 cb b0 72 78 a4 79 53 b9 7b b4 a9 00 ff e5 d8 69 b0 50 fb 24 3d 38 ee 7b 87 27 b6 3c c0 98 29 d3 e7 3f f4 d8 53 43 73 c2 a1 c8 0a 40 Data Ascii: kn r8OX4#f<#y_CrfILR~CNXn_H00!pXM-fgRfa\|G"4\C*i@rsyi<4_~txrQaFNjjy,)_;s:yIlsxzL0rxyS{iP$=8{'<)?SCs@
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 9d 5b bc e6 05 c9 cb 99 e7 0c 5d 56 fd 49 44 5e 92 8a 1f 91 82 90 11 04 1c 35 30 88 9f f2 81 b2 d5 32 53 f3 93 31 f0 03 06 16 92 17 89 e4 c5 ae b9 ff ae d9 03 fa 94 c0 6c f4 d4 ca 57 7b 8f 1c 3f 71 c9 fa 9a 4d 95 a8 dd 41 f2 12 d0 82 d7 e4 24 24 2f a4 18 52 fe 6f 71 f2 a2 b7 dc 24 ad 7b 3d 5f 08 de 40 86 e4 e5 ce 3e 87 1f 6c 7c 5e 92 27 42 4d 8b db 0a 81 76 4a 5e 26 2c 7d e6 f9 97 fb 7a 48 5e 38 9a 8d 94 90 47 bf 17 1d 67 60 09 4b 29 8d c9 ef 45 39 ee e1 f7 92 f4 89 c2 03 85 2b 09 10 89 be 27 f8 73 00 16 73 61 f2 84 11 d7 4c bb 6c 4c d1 66 23 74 d8 3d e5 ec c1 8a bc 30 47 19 de 48 db 82 6f 0b 80 4e bb 09 c3 2d de 5e f5 6f a9 70 44 32 88 51 68 48 c8 36 23 2f d3 5a 85 bc 08 ee 27 16 3f 24 7b e8 f8 4e f4 80 fc 5e b4 03 2c 8b 91 97 00 80 59 18 64 04 b6 65 01 Data Ascii: []VID^502S1lW{?qMA$$/Roq${=_@>l\|^'BMvJ^&,}zH^8Gg`K)E9+'ssaLlLf#t=0GHoN-^opD2QhH6#/Z'?${N^,Yde
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: cc ba f5 f3 cf bf ee 9c 4a 67 a4 10 00 5e 20 81 73 0e dc b6 41 08 6c 0f ce cf 42 9e 64 49 ab c1 6f 8a 6d 49 1b dc cf 02 60 c2 e7 fb 76 ef f6 c9 75 53 7f 3d a2 67 8f fd d6 14 db 0a 43 5e 8a 45 70 c7 b9 df 90 97 56 20 2f 67 0e be f8 af cb 9e 7f be 4f 3a dd 05 5c 4f 80 a0 e4 c6 7a a3 15 e1 bf b4 c0 e5 a0 7f 93 c4 69 87 8a 1c d7 75 29 91 50 26 65 83 c5 50 13 92 83 c9 17 8f bb 6e da e5 23 ae 2a b6 4f eb d7 cb 9d 4e ee 3f f0 c5 77 3f f8 e4 30 3f 00 f0 85 04 66 59 f4 ce 54 2a 05 52 93 c2 62 5f d4 0e ee 27 fe 92 d7 21 e1 ac f0 81 41 00 29 2b 80 aa 99 d7 8f 18 36 e8 d4 7b 8b 6d e6 6b ef 7c 78 c8 80 b3 87 3e f7 f9 fa 4d 7b 09 69 83 90 56 a2 e7 5f 98 a0 14 38 2a df 98 00 26 d5 ba 92 4c ad 2b 4c 2d 5e 56 56 06 41 e0 83 f4 b3 60 8b 00 1c ee d7 2e b8 ef ee 33 4e f9 c9 Data Ascii: Jg^ sAlBdIomI`vuS=gC^EpV /gO:\Oziu)P&ePn#ON?w?0?fYTRb_'!A)+6{mk\|x>M{iV_8*&L+L-^VVA`.3N
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 89 04 10 c7 01 fe 1b c9 03 fe 8c 58 d2 f8 6b 22 46 25 f7 f1 a8 74 83 64 ba 7d 54 f9 58 2d c6 44 50 22 f4 1c 09 3e bd 2f 24 db 82 a4 ca 89 2d 79 41 9c 38 0a 2f 7a 38 46 1c 2a 70 ea 0b 87 08 06 1a 14 49 b5 9a c9 6c ba cc 18 0f e2 ba e8 bd a7 60 5f 1c ff 38 17 64 cf 03 8a 10 7a 9e 90 a4 9d 0a a7 da c0 18 87 44 22 41 fd 48 e4 93 b8 7f e1 73 88 26 2f b9 8f 76 7d a6 46 20 8a 40 ec c9 8b 19 2c a2 14 fb 40 bb 58 4e 0e 70 9c 9c 4c f0 80 e1 ae 53 44 dd 21 d2 f2 e2 05 b1 1e 52 1f a6 c0 41 c1 3c e0 ac 41 5a 58 f0 db 5c 0e 69 1b 23 58 83 dd 5c 60 9d 88 aa 78 aa 18 05 55 58 0e 58 db ba 8d 30 55 5a 9a d9 9b 9a 80 39 f8 8e 0b 55 49 0b 3c c7 05 13 2b 34 d3 aa e8 82 c1 a4 b6 82 eb 07 3a 31 05 40 48 66 7e ce 88 04 21 82 09 53 2e a6 b8 28 58 c9 6a 68 70 5c 10 dc 24 c1 b9 70 Data Ascii: Xk"F%td}TX-DP">/$-yA8/z8F*pIl`_8dzD"AHs&/v}F @,@XNpLSD!RA<AZX\i#X\`xUXX0UZ9UI<+4:1@Hf~!S.(Xjhp\$p
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 35 79 31 71 71 00 00 07 d5 18 0d 4b 9a c3 03 f2 82 96 97 77 97 2f 28 1b 79 41 cb cb 0f 7e 38 f4 9d ed 29 24 02 49 6a 0f f3 70 b1 0d 5e be c0 ba 41 01 67 01 51 68 5b b7 11 92 17 94 92 c6 ee 45 ab 85 12 82 0a c5 8f d0 b0 85 c4 cb e2 1e 1c 77 f4 e1 8b 5f f8 db 1d 65 25 2f e7 8e 1c ff 78 1a 42 f2 42 ef 2c 4d 6a 81 c5 2d 63 c1 aa 4c cb 0b 12 16 24 2b a6 c9 89 bc e0 7f a6 69 d2 ef ce 43 f2 72 dd 25 e5 b3 bc dc f9 b7 a9 33 af b9 69 ce 4e 8f 83 cb 92 60 5a 16 78 5e 43 6c c9 0b 8e 05 d7 37 c1 32 18 24 21 0d 57 ff 62 72 99 dd 46 b3 e6 ce 7b e8 19 4d 5e 4a 45 5e ce ba a0 ee f9 17 57 f6 f3 79 15 80 81 d6 2c 29 ba 86 56 56 b4 ba a8 43 5a ad a5 c5 55 12 ef 8e 69 7d 41 f2 96 a8 ae 82 54 83 0d 49 cb a2 4d 92 6f db e0 3b 0d 50 63 09 78 fd a5 85 9a bc 54 b2 e5 c5 44 15 49 Data Ascii: 5y1qqKw/(yA~8)$Ijp^AgQh[Ew_e%/xBB,Mj-cL$+iCr%3iN`Zx^Cl72$!WbrF{M^JE^Wy,)VVCZUi}ATIMo;PcxTDI
2024-10-21 22:39:35 UTC	4096	IN	Data Raw: 72 63 ca 20 79 0c 46 47 05 65 40 55 5e 17 c0 32 00 4c 2f 05 5f da c3 d8 7a ef ed 37 0e 3d a9 df b7 4b e0 36 5a 3b 60 f4 84 c9 f3 b7 6e dd d1 45 60 e6 1b ba 8d b2 dc 88 d1 f7 1b c5 11 25 68 2c c2 5c 62 4d 62 7c 06 5f 41 f2 a2 2d 2f 6d fd 36 e8 ef 8f 19 02 95 4b 5e 16 2d 1d 64 63 7c 06 59 5e 22 5a 0e 99 e8 8b ec 14 c7 42 44 d2 f2 15 a5 2b f9 f9 24 af 8f 01 c3 48 cc 18 18 be 00 c6 6c 30 59 2a 88 79 19 57 b4 db 08 2d 2f 67 9f 2d c9 8b 72 1b e1 0e 97 26 7c 1f ab b2 48 9d 8b b8 e2 27 dd 1a 48 20 bc 40 6f 46 a5 5b 9b 64 a5 93 6e 23 3b 88 79 29 15 79 19 43 31 2f 18 ec 8d 31 4b 71 c6 4f 2e fc 9c 62 67 64 de 1c ba de 64 cc 09 c9 db d1 58 b1 40 20 79 e1 00 a6 2f c9 cb dd 77 dc 52 a2 98 97 e6 c9 4b 66 2e 8d 58 5e c2 98 ac d0 e2 55 f2 f7 b2 4c ef 03 59 0c 85 d0 e4 25 Data Ascii: rc yFGe@U^2L/_z7=K6Z;`nE`%h,\bMb\|_A-/m6K^-dc\|Y^"ZBD+$Hl0Y*yW-/g-r&\|H'H @oF[dn#;y)yC1/1KqO.bgddX@ y/wRKf.X^ULY%

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:35 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:35 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 482a58b6-901e-005b-32b4-232005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223935Z-178ffc65759tbh4guw9nprg7en00000008q000000000rs6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:35 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:35 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 854de04b-a01e-0032-80b4-231949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223935Z-178ffc65759b6phk1938t93stc000000097000000000h55z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f31cf65d-001e-00ad-58b4-23554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223936Z-178ffc65759wc4jjbndw9ea59c00000008yg0000000048nu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c3ec2866-701e-0098-46b4-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223936Z-178ffc6575924dtrv3bg879fun000000096000000000q1ka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: aeb8849b-401e-00ac-27b4-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223936Z-178ffc6575924dtrv3bg879fun000000098000000000dncz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 4552ca04-c01e-0066-7ab4-23a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223936Z-178ffc6575924dtrv3bg879fun00000009bg000000002z02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 000b2b9f-501e-007b-25b4-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223936Z-178ffc65759xp2qhvg0ry65u8s00000008w000000000tmh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49852	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=m98Fb7lRATrT3Hs&MD=oGvLrK7O HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-21 22:39:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 56fad633-92ef-4de1-acb7-fe08cdd4186b MS-RequestId: d6d13adb-248f-45cf-b795-4f5ded1952c4 MS-CV: 2jr+7+NAJ0CUjyvw.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 22:39:36 GMT Connection: close Content-Length: 24490
2024-10-21 22:39:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-21 22:39:36 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49878	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	679	OUT	GET /Bookappointment/Property/76160c82-fc06-46bb-8a14-0e4150f249c4.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:37 UTC	515	IN	HTTP/1.1 200 OK x-amz-id-2: l3eSTLIHYvIPgRStQ417qe/cjs1EIZ7A0g3l8TSRIxtYGjbOoODoAHpg271v4eVOVZTvFRFBkjGQuKiQMggCrw== x-amz-request-id: VBBZBWYQRTB4Q1MC Date: Mon, 21 Oct 2024 22:39:38 GMT Last-Modified: Mon, 21 Oct 2024 09:22:01 GMT ETag: "1fbba1f29c2c9a00a5c3c8235f08b4e3" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: .dKVg_e5crlxfj2Xdp1IGA8OwPfLoTkj Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 166287 Connection: close
2024-10-21 22:39:37 UTC	1442	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 a4 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC"}!1AQa"q2
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: 11 d7 5f eb 63 93 9d da ff 00 d7 f5 fd 79 9b 5e 2a d7 6e 7c 2d a0 5b c8 f0 6d b1 d2 f4 4b bb b9 65 da b8 8a e0 7c 90 a0 39 e0 b6 e7 f5 04 2f 6a f8 97 c4 ae f7 33 69 7f e8 86 76 3a 75 b8 39 d3 56 7c 33 34 8e c3 2b 28 39 eb c7 71 5f 50 fc 47 f0 37 f6 a7 84 75 1b 7f 0f 6a 3a 75 be a7 a9 2c 16 f7 62 ef 59 57 86 08 e3 72 fe 5a 33 0e 4f d4 77 f6 af 0f d5 be 00 f8 b3 51 16 92 2d bf 87 af 1e da ca 3b 69 99 64 b5 39 98 06 67 d9 c8 f9 7e 70 47 be 6b 9e bc 5b 94 63 04 76 d0 9a 50 9c a4 f5 76 3c fa ca f2 f2 d2 de e2 3b 5d 37 cb 8a e9 73 24 43 48 bc c3 ee 3f 2e 0a ca 71 81 9c 11 c9 e9 cd 41 71 6a d3 c5 6f 0e 8d 0d e0 9b fd 61 5b b9 6f a1 94 ed e8 63 c9 db 20 04 12 3b e3 23 15 d2 df 7c 15 f1 45 82 b6 7c 35 69 27 cd 8c da db 23 0e 98 03 e4 98 7d 7e b5 cc dd 78 17 59 b2 Data Ascii: _cy^*n\|-[mKe\|9/j3iv:u9V\|34+(9q_PG7uj:u,bYWrZ3OwQ-;id9g~pGk[cvPv<;]7s$CH?.qAqjoa[oc ;#\|E\|5i'#}~xY
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: 81 65 12 c0 eb a9 4c 62 71 2b 61 fa 8c 04 ed 9c 6e 38 3d 76 f1 5c 90 8f 33 b2 36 93 4b 73 66 b1 fc 4f ad a7 87 34 a9 2f da 2f b4 6d 74 8c 44 1c 26 77 1c 67 71 e0 01 d4 d6 b9 c0 cf 71 eb 5c 07 c6 87 59 be 1d f8 8e 56 24 5b da c0 d1 9e 98 67 60 77 7f df 2b c7 d5 8d 6b 08 f3 49 26 66 dd 96 87 65 6b 38 bb b3 86 7d a5 7c c4 0f b4 8c 11 91 d2 a3 b8 9a 40 e9 6f 6e 40 bb b8 f9 63 27 91 18 e8 d2 1f 60 3f 33 80 2a 1f 07 e9 37 17 be 1d d2 05 a2 dc 49 e6 58 db 31 11 60 a8 06 14 ee 78 fc 6b ac d2 3c 07 24 73 b3 4d 70 21 93 77 ef 0f fa c9 1c af 3c b1 e3 8e 38 ed 9a cd d3 bc 9f 2a 2f 9e cb 56 7c f3 e0 ab 94 8a 2f 15 c5 73 24 93 5a 45 ad 2c 11 02 c3 31 28 88 92 57 3c 02 4f 24 77 24 fd 6b a3 83 c0 da 9f 8d 74 c9 e3 d2 b4 b1 ad 45 34 6c aa 2e f3 6f 67 23 67 ee 49 2f 24 83 Data Ascii: eLbq+an8=v\36KsfO4//mtD&wgqq\YV$[g`w+kI&fek8}\|@on@c'`?37IX1`xk<$sMp!w<8/V\|/s$ZE,1(W<O$w$ktE4l.og#gI/$
2024-10-21 22:39:37 UTC	15360	IN	Data Raw: ff 00 b6 a7 c0 ff 00 11 ed 16 df 13 74 7b 27 6e 91 6a ab 35 9b fe 3b d0 01 f9 d7 a9 68 1e 3d f0 f7 89 e2 59 34 6f 12 e8 9a b2 37 dd fb 0e a9 04 ac 7e 8a ae 4f e9 4a ed 0f 43 d0 1e f2 2b f4 31 dd ed 98 11 80 b3 46 1c 1f 6f 6a e4 f5 6f 85 5e 18 d5 ed af 2d cd 97 d9 ad ae ce 67 b6 b7 72 21 77 ff 00 9e 9b 3f 86 41 fd f5 c1 f5 cd 5c 96 59 ed 55 5a 78 64 84 37 21 a4 42 a0 fd 33 52 26 a2 00 fb df 9d 1c ca 4a cc 76 b6 a8 f0 1f 1a 7e cc 3e 23 d1 b4 9d 5e ef c2 57 96 7e 22 ba 8a 23 26 9f a5 de 13 6f 2c ef ff 00 3c de 4f b8 38 ce 1b be 06 71 9a f3 1f 1e 43 7d f0 be d3 e1 e7 8b ef b4 1b f6 d0 2e 2e 12 cf c5 5e 1c d4 ad 77 dd db 4d 20 c2 94 0b d9 58 36 02 e4 36 d5 3c ee af b5 62 d4 fd f3 56 24 36 7a ad b1 82 ee 18 ae 63 23 06 29 97 70 3f 4f 43 f4 af 2a be 5e ab 34 e1 Data Ascii: t{'nj5;h=Y4o7~OJC+1Fojo^-gr!w?A\YUZxd7!B3R&Jv~>#^W~"#&o,<O8qC}..^wM X66<bV$6zc#)p?OC*^4
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: d7 3d a9 2d 3c 28 c0 cc ff 00 68 88 3b 1c e4 5c 60 72 4e 30 4f 51 5a b1 e8 f3 07 ce e8 59 bb e2 55 34 93 69 17 1f 62 45 0a 83 30 8f 94 3a f5 de c7 fa d6 6f 99 e8 aa fe 08 d5 56 c3 af f9 87 5f f8 14 bf cd 98 36 7e 14 99 2e 95 45 c4 12 80 0a ab 19 d4 11 d4 8e 3b f5 a9 a6 f0 a5 fc 56 52 b6 e8 d9 82 ee 2c 92 82 1b af 41 8f ad 59 83 c3 d7 69 79 66 4c 2a 53 c9 05 88 28 46 49 6f 7a d2 fe c8 ba 8a d1 4b 5b 90 7c 98 fb 8f 53 ef 45 e7 a5 aa af b9 7f 98 bd ae 1a da d0 7f f8 13 ff 00 26 63 47 e1 db db 65 56 66 da 31 ff 00 3d 94 83 fa 55 68 fc 37 a9 7d ad 17 24 b7 97 90 55 97 07 91 c0 ff 00 eb f5 ad a8 34 cb d9 15 59 2c d9 97 ae 72 39 f4 ef 4e b8 d2 6e d6 e3 0d 6f 22 15 8a 3c e3 80 38 14 af 3f f9 f9 1f bb ff 00 b6 1f 3e 15 ff 00 cb 99 7f e0 7f fd a1 9f e1 1f 0d db df Data Ascii: =-<(h;\`rN0OQZYU4ibE0:oV_6~.E;VR,AYiyfL*S(FIozK[\|SE&cGeVf1=Uh7}$U4Y,r9Nno"<8?>
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: e6 69 57 6f 00 38 f5 55 3b 5b f1 06 be 82 f0 67 fc 14 73 e3 07 86 04 71 eb 37 1a 47 8d 6d 41 cb 0d 62 c8 47 70 c3 d0 cf 09 46 cf d4 1a f9 78 9a 63 b1 3d f0 28 71 4f 70 bb 47 e8 77 85 ff 00 e0 a9 1e 19 bb 50 be 29 f8 7f ab 69 52 e7 06 6d 16 fa 3b a8 87 be c9 02 37 fe 3c 6b d5 fc 3f fb 79 fc 0c d7 8c 6a de 30 b9 d1 65 7f e0 d6 74 a9 e0 55 ff 00 81 20 75 fd 6b f2 50 b1 34 81 b0 79 3d 2b 27 4a 2c b5 39 23 f6 b7 49 f8 f7 f0 bb c4 45 57 4b f8 95 e1 4b d7 6e 88 35 58 e2 6f ca 42 a7 f3 ae b6 db 5c d2 6f d4 35 ae bb a3 dc 83 d3 c8 d5 2d df 3f 93 9a fc 22 75 49 0f ce aa de 99 00 d3 0d bc 3f f3 c9 31 ec a2 a7 d8 2e e5 7b 46 7e f5 ee 43 ff 00 2d a0 23 d4 4e 9f e3 51 b3 c4 99 67 b9 b5 40 3a 97 b8 41 fc cd 7e 0d 04 03 8c b8 1e ce 69 fe 5a 38 c3 fc ff 00 ef 92 7f 9d 2f Data Ascii: iWo8U;[gsq7GmAbGpFxc=(qOpGwP)iRm;7<k?yj0etU ukP4y=+'J,9#IEWKKn5XoB\o5-?"uI?1.{F~C-#NQg@:A~iZ8/
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: 7b a1 cb 7f 79 aa 5c 5e 5c 58 1d 40 da 5b 5a 28 4f 2d 8b 6d c9 c3 1c ed 5d ec 3b 64 0a f6 8f 82 8f a5 6b 5e 09 b9 93 49 b3 92 1d 2e 6b 99 23 31 5c 02 56 71 b1 43 12 ac 3a 10 71 8c 76 af 10 4f 82 1a 9c ba e6 9f e5 bd d5 cd bb 17 37 0f 2d c1 dc 87 1c 60 13 9e 6b dd 3e 1e fc 33 d6 3c 3f a0 2d a5 95 cb 69 f6 6f 3b c8 63 60 72 58 85 cb 03 e9 80 3f 23 5c 78 9a b4 a7 0e 58 33 a6 84 2a 46 57 67 93 fc 5a f8 57 2f 80 af 56 fa c5 1d fc 3b 75 20 48 58 9d cd 6b 21 19 f2 5c f7 1c 1d ad dc 0c 75 15 e3 be 26 d2 a2 b4 85 ae e0 8e 4d ac 0f 9c a5 b2 a8 7f bc 07 a7 f2 35 f6 d4 df 0c a4 be b6 9e 0d 42 fe 5b ab 39 13 6c f1 39 c2 c8 bd 48 ff 00 02 2b e7 7f 18 78 0f fe 11 6f 14 df d8 5b 5e c3 3d 9c 32 7e ea 79 66 40 4a 32 e7 0c 39 e4 64 83 c7 38 f7 ad f0 f5 7d ac 6c dd da 22 b5 Data Ascii: {y\^\X@[Z(O-m];dk^I.k#1\VqC:qvO7-`k>3<?-io;c`rX?#\xX3*FWgZW/V;u HXk!\u&M5B[9l9H+xo[^=2~yf@J29d8}l"
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: d0 ad 93 ea 4f a5 63 7c 76 68 ae 34 8b 2d 26 61 24 a3 52 ba d3 f4 f8 e3 88 65 9d ee 35 18 15 d5 47 72 63 82 4f c0 e6 bb 9f da cb 5d 5b 0b 0d 2f ed 1f 2d b5 d5 d4 f7 97 49 bb fd 5a db db 3c aa 73 e8 24 60 33 5a 46 9d 9a e5 b5 b5 e9 ad f4 b3 bf df 7d 35 be ea da c4 e6 f6 fe bf ad 8a 5f b2 23 cb 69 f0 87 c7 be 28 5b 83 6f 26 a3 ab eb 1a 8c b2 80 08 75 b5 1e 55 b9 39 f4 31 0c 63 d6 bf 3d bf 6b 5d 45 2e 3e 2b 4d 69 00 0b 16 9f a5 d8 da 32 83 9d b3 79 41 e5 fc 77 b9 af d0 bf 86 fa 71 f0 57 ec 7b e0 fd 2d 27 30 ea da ee 83 6d 03 a3 0c 32 dc de 5c 2e ec fb 15 76 cd 7e 64 fc 7c f1 2c 5e 29 f8 c3 e3 7d 62 25 09 6f 75 ac dc 18 d1 46 02 a2 31 40 07 e0 82 bb 94 7f 7b e5 6f f8 7f eb d7 be 98 27 ee 9f 68 7e c6 da 62 69 1f b3 be 91 21 1b 64 d4 75 0b bb 92 71 f7 81 90 46 Data Ascii: Oc\|vh4-&a$Re5GrcO][/-IZ<s$`3ZF}5_#i([o&uU91c=k]E.>+Mi2yAwqW{-'0m2\.v~d\|,^)}b%ouF1@{o'h~bi!duqF
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: 3f b1 6d d3 6d c4 81 e3 4b bd fc c7 19 19 38 1e bc e0 1c f1 93 5c 36 b5 aa 4b ff 00 08 e5 b4 7b b2 d7 0e ab c9 ed d4 ff 00 4e 6b 82 85 19 29 ca 72 49 6a ed e7 77 76 df e0 be 47 d2 66 78 ea 35 70 f4 a9 50 93 6d c6 3c f7 d9 38 c7 95 46 3e 5f 14 9f 4f 78 eb f5 79 e1 f0 f6 83 af 6a 91 4a d2 88 ad a7 92 39 98 60 ba ac 4d b5 b0 7a 64 b2 9c 7b d7 c6 96 8a 44 c4 1e a9 10 53 f5 e0 57 d5 7f 18 6e 4e 99 f0 a3 50 89 5b 6b 4d 6d 0c 4b b7 a6 64 98 0c 7f df 31 9a f9 59 64 f2 a2 b9 9f 19 ea d8 f5 03 26 bd 28 6a db 3e 5d e8 92 3e af fd 98 ed e7 87 e1 f6 aa d9 54 81 e1 99 a3 64 fb e5 a4 6c 12 49 f6 51 81 e9 5d 25 b4 4b 0c 7a cb fd e4 8a 16 0a df f0 16 24 7e 6c 2b 7b c0 5e 19 87 c2 5f 0d b4 ab 02 bb 64 96 d2 dd 5f 8e a4 c6 ac d9 fc 5a b0 ee 5c 7f c2 2b e2 0b d0 49 12 ac ee Data Ascii: ?mmK8\6K{Nk)rIjwvGfx5pPm<8F>_OxyjJ9`Mzd{DSWnNP[kMmKd1Yd&(j>]>TdlIQ]%Kz$~l+{^_d_Z\+I
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: a0 ee ce 65 20 0c 9f dd a0 00 67 81 b8 f5 6e 3c 2f c3 1e 3d f1 37 86 7e 02 fc 44 f1 f4 77 a7 4f d5 7c 51 e2 9b ad 41 2f 22 87 f7 82 14 41 1e d5 63 9c 05 58 55 57 d0 70 2b ea 2f 0e c7 6d a3 e9 ff 00 11 7c 4c b6 e8 3c fb d9 e4 05 70 03 a5 ac 2b 1a fd 7e 78 df 9f 73 5c e7 8a 3e 19 58 47 fb 3a 69 7e 0c bc 87 cd 4b 88 ad ad 19 19 b0 c6 e2 79 50 3b 0c 7b c9 29 c7 a1 ab 8d 58 47 47 1d 34 fb bf e1 c9 70 6f 54 cf 96 bc 6f e0 57 f8 6f fb 1f 78 26 21 33 8b b7 d1 61 96 f6 01 d1 49 59 ae 9d b6 9e a4 bd cc 63 fe 02 2b 4a f3 c2 a7 c1 3f b2 ef 82 f4 b7 b7 6b 57 7b 4b 6b 92 fb 70 0b 7e f6 ef e6 3f 84 7d 7d 05 7d 0f fb 53 7c 3d 8f c5 de 09 d1 bc 3f a7 d9 42 1e f6 f6 0d 2e 37 23 1f 65 49 59 06 f5 1d ca a4 47 8e c3 9e d5 85 fb 5a fc 3c 99 3e 12 dc bd 9b 91 65 a6 69 af 6f 10 Data Ascii: e gn</=7~DwO\|QA/"AcXUWp+/m\|L<p+~xs\>XG:i~KyP;{)XGG4poToWox&!3aIYc+J?kW{Kkp~?}}}S\|=?B.7#eIYGZ<>eio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49879	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	679	OUT	GET /Bookappointment/Property/a148584e-6732-49f2-a1ee-96a1878c94a0.jpg HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:37 UTC	514	IN	HTTP/1.1 200 OK x-amz-id-2: IFS+PqnqDae+QJNZUXoencceT0Xz2kP0RC2uL78EpFK5xkpofLb0nCQNEpEdTU59MzI627Q6DEI8NFNhGEw0qw== x-amz-request-id: VBBZ2JPKY7M4H9JY Date: Mon, 21 Oct 2024 22:39:38 GMT Last-Modified: Mon, 21 Oct 2024 09:22:05 GMT ETag: "535fd561e2820475b3873452976e15ee" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: 8FXSvCpLue09B_OwAvi5EjfjixFWlSX. Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 50104 Connection: close
2024-10-21 22:39:37 UTC	1442	IN	Data Raw: 52 49 46 46 b0 c3 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 ff 01 00 cc 01 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFFWEBPVP8X ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c 0c 75 0c 8e 0c a7 0c c0 0c d9 0c f3 0d 0d 0d 26 0d 40 0d 5a 0d 74 0d 8e 0d a9 0d c3 0d de 0d f8 0e 13 0e 2e 0e 49 0e 64 0e 7f 0e 9b 0e b6 0e d2 0e ee 0f 09 0f 25 0f 41 0f 5e 0f 7a 0f 96 0f Data Ascii: +:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*C\u&@Zt.Id%A^z
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: 73 cf ab 5b 1e 4c 2b b7 b6 cb 45 97 80 3e f6 fa c5 15 41 f7 7a 7e 20 37 6a 5f 28 cd 57 15 ed 60 0d 30 b3 ea 77 59 ff 3e bf 14 d4 50 b1 6d 64 d3 99 86 be e2 3d cd 64 ac 04 8b 71 e2 2b 93 dc ac c4 96 34 c5 f9 53 ce 8e 23 f5 58 c1 5f 7d 92 0a 09 de 8e d3 24 10 f2 99 de fd 59 a6 7c 14 ff 8b 1b 4c 2a 6e 54 7f 6c dc ae 2a e1 90 ef a2 d8 17 a7 75 74 7d e6 bc 7b ff 7f 97 e1 e7 db 7b 27 28 3a 06 5f d6 19 73 f3 8d e9 63 4a 0b 43 bc 86 40 f3 56 67 84 17 61 3b 34 d2 3f 5c 3a b3 26 e6 81 d6 9a 9d 0d da 5e b4 ca a9 44 80 20 c5 b2 2c 78 a8 08 ab 92 43 74 19 71 58 e8 66 5a e6 4e df 72 a4 3d 3f cf 22 52 74 9c b6 49 7c 95 00 d1 02 d7 4e f0 3b 30 d7 9f 02 06 4e 80 e9 84 c0 b0 98 53 86 99 54 db de ec f0 bf 30 2d a2 22 af 74 13 90 4a 9e 4f 2d dc 31 29 6f 98 fa 4c 83 98 46 d5 Data Ascii: s[L+E>Az~ 7j_(W`0wY>Pmd=dq+4S#X_}$Y\|LnTlut}{{'(:_scJC@Vga;4?\:&^D ,xCtqXfZNr=?"RtI\|N;0NST0-"tJO-1)oLF
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: 20 c3 5a a9 e2 91 de 90 8e 4f 18 6e f8 27 ae 75 bd cc df 0c 19 88 a9 bf b1 4c ce b5 2f 02 3f 35 36 ed 4b 11 73 9a ac 34 31 c5 93 98 36 fa e2 28 8a eb c4 aa cb 03 1c 33 76 6b 95 fc 07 8e 25 19 41 79 c3 72 bc ce 6c 97 cb 4a bf 4a c8 62 6e 1a 5a 09 56 d7 b3 50 31 5c a5 0c 30 c1 84 0f 22 96 95 3e 75 d2 86 5f 5f 46 be 4e 6e d4 96 45 8c 73 58 2b b7 bd da a7 d3 b5 40 d8 49 5b 17 5d 4b 95 5c eb 25 ec cf e8 5a f0 5e fb 87 c2 62 f0 cb d8 49 aa 4d 71 36 80 78 8a d8 53 aa 80 7d 48 f2 8f 8a 80 e9 7f 82 8c a7 41 32 b4 62 0d 58 11 58 4c 2a 81 ab 03 a2 3d be 2b 94 13 ea 9a 91 18 72 79 01 c9 52 9f 80 1b b1 a6 3c d3 ad ea c4 4d 1c 8f cc 7b a4 bb 04 44 98 31 80 a6 51 ee 59 d9 a4 16 29 d7 c6 ce 8c 1b 5e f7 0f 18 f6 e6 b4 99 49 10 b6 31 36 79 14 17 67 92 94 fc 9f bc c4 a2 c0 Data Ascii: ZOn'uL/?56Ks416(3vk%AyrlJJbnZVP1\0">u__FNnEsX+@I[]K\%Z^bIMq6xS}HA2bXXL*=+ryR<M{D1QY)^I16yg
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: bb 34 30 d8 f9 0a fb 9e 5c cb 40 8f 47 a9 35 50 fc 89 79 8e 0a 41 20 01 8a 8f 62 8d b3 3a 36 2e a9 18 55 10 ba c8 24 86 d5 ab 82 b0 df 74 e6 a4 57 1a a8 88 57 79 91 38 23 66 cc b6 70 b8 42 87 db 70 8e 95 71 59 18 21 7b f9 6b 30 bf 36 2a ee 6c f0 00 d0 16 0c 1f c2 7d 2b c6 87 83 f1 5c 79 c4 c9 35 a3 64 43 98 e0 fe a1 82 cd 85 42 a6 ae 9e 86 bd 35 39 ef 3d a0 f1 95 53 36 d5 cd bb c5 89 5b 69 46 e5 ee a8 b3 ad 75 02 3b 96 c4 4a 12 d7 c9 ca 9f 5e 9a 62 e5 54 c3 44 fc 4f 92 68 bf 81 a0 af 39 06 29 c8 21 66 38 ae 9e 70 82 2a 2c c7 9a c9 34 61 af 74 36 70 9b 91 c4 7a 44 e6 71 86 cb f4 71 46 03 33 4c a4 5a bd 4e 9f 89 a4 18 f2 6f bd 28 78 a4 90 02 54 79 41 bb de a5 52 f0 82 20 6e fe fd 48 e0 51 46 04 df 6b 24 e5 8f f8 34 a0 57 f8 88 ba 74 6a 5e 2c c9 c6 c6 26 f8 Data Ascii: 40\@G5PyA b:6.U$tWWy8#fpBpqY!{k06l}+\y5dCB59=S6[iFu;J^bTDOh9)!f8p,4at6pzDqqF3LZNo(xTyAR nHQFk$4Wtj^,&
2024-10-21 22:39:37 UTC	8136	IN	Data Raw: 00 a6 37 25 c1 41 09 8f b9 21 fa f5 3d b3 8f 64 09 e4 9d 1c bc f5 1e fb d0 f0 6d fa b7 ca 5f e0 e7 12 4c af 3c 6f f8 94 fa ea 4a 0e 8d e1 d9 75 80 d4 c2 2a 8c 47 c2 b6 a0 8f d8 70 e9 93 c5 8d 92 0f ea e4 26 fd 4d 68 8e 1c 23 86 45 9a 49 ad e1 7f 14 d9 32 6c 2e fe 66 0a f6 44 37 6a fb 55 73 52 d9 b6 35 01 a4 47 7e 3d e6 ff 0c b3 ab 17 7b 38 90 14 4e 81 7f e0 d7 b8 c3 4a c2 05 5f f2 91 34 41 6d eb da 61 9e 3d be f1 0b cb b6 d2 88 b3 1f 15 81 fb b9 52 9c f8 8f df e0 e8 21 64 7b 54 b3 6e 89 87 ae b5 87 f4 74 9e e6 6e 7c 86 4a d5 45 ce 88 e1 58 7f c4 1a 88 a8 b2 9a ce 0e e9 04 98 b3 7a fd ef 48 c7 25 28 f1 2e 14 61 e7 39 92 f4 82 de 6a 0b 92 a0 6b 62 e1 22 75 a9 b7 50 8d 13 55 28 59 94 3c a9 25 68 70 cf 9c c8 d6 51 b5 69 84 96 31 f6 b1 c3 af 94 b3 5b d2 9a 79 Data Ascii: 7%A!=dm_L<oJu*Gp&Mh#EI2l.fD7jUsR5G~={8NJ_4Ama=R!d{Tntn\|JEXzH%(.a9jkb"uPU(Y<%hpQi1[y
2024-10-21 22:39:37 UTC	5710	IN	Data Raw: 41 c5 6b 54 d7 3d 22 e1 3d e8 54 4b bc 01 6e c5 48 f4 12 b3 8f c6 b7 ac 62 78 57 71 c4 5c e3 f4 19 08 ef a4 eb e2 34 e6 76 6d ef 16 d2 00 ab f8 cc e9 87 4d 24 b8 83 47 21 32 89 a4 29 13 b9 38 71 a8 95 b0 08 f3 12 a7 07 8d 19 bd b0 e7 69 fe 3c 02 1f 9b 70 57 13 00 8d e2 e2 61 cf e8 d4 2d aa 9e 82 d6 a3 b7 8c f5 8c 8d a5 cd f8 cc 43 58 41 64 76 34 3c 0c ed 81 a3 dd 97 3f d8 19 60 34 d6 b8 f4 cc 8e 73 2d 6d 60 53 38 05 a7 7c 05 d7 9f 3a d7 24 18 27 bb 4a fc 41 fc 56 b0 aa d3 f9 73 c8 78 d0 84 a0 53 6c c8 60 56 3b 8d 43 4e ca db 71 07 49 e0 40 d3 f5 0b 94 d9 38 ae 2a ce d3 89 1e e5 bd 5d 88 5c 15 43 68 b3 54 96 30 81 a1 de 3f 45 8c 92 7a be 61 11 8f 49 22 0f 12 58 a7 d8 9f 3f 3c 95 08 33 ba a4 36 d4 7b 46 7a ff bc ac c8 74 ea 1e 66 b6 92 1c 1d 8b 45 05 91 fa Data Ascii: AkT="=TKnHbxWq\4vmM$G!2)8qi<pWa-CXAdv4<?`4s-m`S8\|:$'JAVsxSl`V;CNqI@8*]\ChT0?EzaI"X?<36{FztfE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49880	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	675	OUT	GET /Bookappointment/Property/aed46e28-3735-43a3-bac1-f2011cbd9497 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:37 UTC	516	IN	HTTP/1.1 200 OK x-amz-id-2: HAznHvAMb95UAMCY+cV+CF+oTsbRpzLl0KlQZ4eL9+VYC0jcG1gaas67t/24P9MuOhWwu6RqpQrc0CyA8rOZGQ== x-amz-request-id: VBBKHSKFQPY9KNRC Date: Mon, 21 Oct 2024 22:39:38 GMT Last-Modified: Tue, 17 Sep 2024 02:29:15 GMT ETag: "7d5b410f4790fe6f84694d5c41e2fd05" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: tC7oKky.Qx6IDC7lxZ_B5z977RIt7aNO Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 1051786 Connection: close
2024-10-21 22:39:37 UTC	8097	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 33 00 00 01 f0 08 06 00 00 00 92 48 31 85 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e 4c bd 07 98 5d e7 75 1d ba 4e b9 fd de b9 33 73 a7 60 0a 30 18 74 10 20 3a 08 80 0d 2c 62 93 28 56 f5 4e ab 38 b1 e5 97 c4 92 1d 4b f2 53 24 39 5f a2 38 5f f2 e5 7d cf c9 f7 5e 5e 64 49 96 25 5b b2 44 c9 12 49 51 85 4d 2c 20 09 92 e8 00 51 66 30 7d 30 fd f6 76 ee bd e7 65 ed fd 9f a1 20 d3 18 cc dc 39 e7 3f 7f d9 7b af b5 d7 de c7 ba e5 e3 df f0 1d d7 45 a3 d9 42 ab d9 40 5f ff 00 56 e6 ae c2 69 34 51 46 1c 5e b3 01 0b 40 38 9e 44 6d f2 2d 0c 6c 18 42 24 1e 45 29 df c4 d2 dc 14 d2 a9 38 1c 3b 84 e5 c5 59 d4 9a 0d f4 64 32 a8 57 2a c8 65 17 50 29 16 d1 a8 57 61 db 36 2c db 82 05 1f 36 ff b6 Data Ascii: PNGIHDR3H1sRGB IDATx^L]uN3s`0t :,b(VN8KS$9_8_}^^dI%[DIQM, Qf0}0ve 9?{EB@_Vi4QF^@8Dm-lB$E)8;Yd2W*eP)Wa6,6
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: a9 41 b5 91 4c 44 51 1e 3f 81 7c 31 2f fa 56 ae 17 e7 79 dd ff 4e 15 3f 7c cf 2d c8 64 32 48 b7 b7 83 a0 79 31 5f c2 9f 7f f1 4b ab ac c6 ae c3 37 61 71 76 12 91 0d b7 8a 94 a1 70 e1 59 dc 74 eb 6d f8 c5 6f 7e 03 cb 89 e1 96 fb 3f 80 42 b1 8e dc f8 59 78 d5 ac 38 88 4a 21 8b 72 3e 2f f3 49 d0 b0 77 df 5e 2c 2e cc 63 7e 71 1e ed 7d 1b 90 9f 1d 55 a0 ca 67 76 43 b8 ff c1 0f 62 65 cd 01 34 5b 26 1b 15 d4 10 91 11 a5 81 64 40 47 c6 d5 b1 45 77 2c f7 7d 75 9b 00 00 20 00 49 44 41 54 12 a6 26 81 82 2d 41 aa 90 de aa 16 5c 95 28 a9 e9 53 00 a0 f2 33 1a 30 de cf 04 c6 7a 7a 55 b3 6f 98 dd 80 85 90 14 3d 25 00 92 3d d1 eb f3 7c 52 32 c4 6b 05 ce 5f 65 58 aa bf 17 79 09 6d 82 d4 63 29 d4 20 39 20 eb 6c 5b c2 2e 0b 80 26 c3 2e 81 84 1a 62 61 31 44 4e a4 35 27 c2 fa Data Ascii: ALDQ?\|1/VyN?\|-d2Hy1_K7aqvpYtmo~?BYx8J!r>/Iw^,.c~q}UgvCbe4[&d@GEw,}u IDAT&-A\(S30zzUo=%=\|R2k_eXymc) 9 l[.&.ba1DN5'
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: d3 d2 c6 09 c4 08 12 89 46 34 93 42 55 cc 63 76 6a 1a 73 99 0c 4a d9 79 17 ea 68 53 3c 79 02 f8 fd 68 6d 6b c1 37 bf fa 15 bc f6 da 1b d8 b2 61 1d 7a 97 af c4 c0 e5 31 4c 67 4a e2 e6 26 5a 5b 31 37 35 ad 17 a5 58 29 a9 70 65 b8 26 37 96 e3 27 df 95 1b 59 d3 92 2d e2 1f f3 50 34 2b 5a 37 c5 2d 97 30 77 f1 30 8a 7c e8 9e eb 8f 0e 28 b3 56 e5 a2 e4 22 35 31 b9 75 e1 a4 6f 51 3b f3 bd 6f 7d 49 de fd 8f fd e4 27 38 79 71 4c 3e f8 a1 68 98 da 4d 51 03 78 80 64 53 53 e2 33 4b 24 ee 0a 0d be 5e 46 ab 73 a5 8f 42 1e bd 6d e5 45 b3 92 00 00 20 00 49 44 41 54 5d cc 61 6c dd bd 0b cb 7b 7b 90 f5 25 f1 de a5 94 82 ad b8 f6 99 c0 3c 7e e6 35 15 b5 44 67 3e fb d9 cf 20 3b 39 a2 d0 b5 6b e3 63 68 4d 44 51 a0 b8 7a 76 02 f9 70 02 1d cd 8d f8 8b ef 7c 5d 1c 6a ef 9f 27 9f Data Ascii: F4BUcvjsJyhS<yhmk7az1LgJ&Z[175X)pe&7'Y-P4+Z7-0w0\|(V"51uoQ;o}I'8yqL>hMQxdSS3K$^FsBmE IDAT]al{{%<~5Dg> ;9kchMDQzvp\|]j'
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: c5 ff 19 a6 a9 2b d2 a0 8c aa 10 7e af 11 b5 46 86 cc 87 48 2c a1 8c b1 4a a9 80 de d5 9b b0 71 e5 0a bc 7b f4 10 56 df f2 00 72 33 33 68 5d bc 44 88 e3 aa f6 66 e4 8b 79 8c 9c 39 81 a8 bf 82 9f 3e fe d8 02 cd c7 1b 2c 7a cf d2 3d 0e 9d 85 7f f4 67 7f 8a 47 7f fa 73 64 e7 e7 91 a1 88 38 9d 46 ae 58 b0 46 4a 9a 01 2b fc 74 a6 ea 92 82 f8 f4 6f 7f 15 88 b5 6b ca c2 89 31 1f f0 e0 95 59 8c 8e 4d 60 e6 cc 5b c8 e5 e6 75 6e 7f f0 d3 9f 95 e1 40 6e 6e 0e 41 e4 31 3a 7c 19 6f bf 41 a4 c8 ed 34 0e c9 23 3d 9e 67 47 67 f7 62 24 5b 9a 44 a7 9f 99 9c 42 63 d7 62 8c 22 89 8e 8e 66 05 89 62 7c 08 fe 52 1a 57 2e 5d d4 79 c2 a2 8d 94 f8 5c 2d ae 49 75 b1 5c c0 ae 03 1f c2 f8 b9 63 e8 5c b3 4d 53 7a 5a 2d 57 72 55 34 d4 ab 68 4c 86 65 a9 5b 9f bb 8a 52 66 1e 9d 2d 0d f8 Data Ascii: +~FH,Jq{Vr33h]Dfy9>,z=gGsd8FXFJ+tok1YM`[un@nnA1:\|oA4#=gGgb$[DBcb"fb\|RW.]y\-Iu\c\MSzZ-WrU4hLe[Rf-
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: c1 e8 a0 74 c8 a4 dd 32 17 43 a1 62 81 98 cc 92 61 08 9c 0a 40 9a 02 b8 a0 58 a1 3d 34 d6 f0 99 1b 1f ff 31 5d 8f 0d 26 58 18 d8 70 c0 bc a2 b9 34 4f 3f f3 2f b8 78 e1 82 6c 67 b3 6c 66 a8 2f a1 9b e6 fa e5 18 19 9f 43 3e 2f f5 0e d6 6e dc a2 7d b9 5a cc a8 a1 26 57 9d 93 e0 74 26 8b e1 f1 49 5c 1e 1d 77 83 11 43 8c 7e ed d7 3f 8f 81 6b 93 2a 50 2d ce 80 93 63 43 13 35 70 ac 32 50 30 8f 78 73 27 a2 9d 8b 91 1a 3c 87 91 c1 3e e7 1c 6a 8d b6 1a 3c 89 83 6b c8 95 4a 7a ef 3a 96 2e c7 9a bd 1f 44 6f 57 07 8a a9 19 8c 5c 3a 8f be b3 67 b0 7d e7 36 5c 1d 1e c6 d6 ad 9b 70 a9 ff 3c 46 46 c6 90 cb e5 35 78 6a 69 6b 33 e4 55 c1 7c 66 f3 cb 9f c9 a1 1e 07 61 cb 97 2e c5 a2 65 cb 44 49 6a ef 5a 84 78 34 80 c7 1e fb b1 86 44 26 05 b8 9e 99 e6 d9 28 eb 8e 3a 3a 2e df Data Ascii: t2Cba@X=41]&Xp4O?/xlglf/C>/n}Z&Wt&I\wC~?k*P-cC5p2P0xs'<>j<kJz:.DoW\:g}6\p<FF5xjik3U\|fa.eDIjZx4D&(::.
2024-10-21 22:39:37 UTC	10480	IN	Data Raw: 85 cf 63 c7 d9 2b 13 68 0b 04 50 6d 56 f1 ee 1b af 23 91 4c 28 7b 46 74 00 06 ed 35 b3 1b 9e 41 d2 cc 5c ff d1 2f 37 5b 42 3e 49 12 e0 4b 9e 8a 2f 08 7c e6 f3 7b e0 f3 b8 91 4d a7 91 cb 66 51 2e e6 94 05 28 41 66 9a 47 c3 7d 93 8b e4 a1 87 1f c2 c6 0d eb f1 ec b3 bf 40 eb d0 4e 4c ac 48 59 ab c5 1c 8b 8d 4a 0e d5 85 8b 2a 96 e2 21 eb 70 09 32 53 e1 7f a7 43 09 39 9d 32 c2 b5 23 10 f2 89 f0 88 d3 18 ea 36 28 9e e7 d4 81 45 20 a1 f9 4c 72 59 f9 d0 3c 54 0d 2f da 42 5d 94 b7 4d f1 95 71 82 32 87 ad 45 df 51 d4 c0 b2 05 65 7a 28 70 d3 ad 77 60 f3 c6 f5 c2 fd 9d 6a 0c 5c b3 9d 52 e6 84 dc c0 16 14 31 3d 37 0b 5b 29 81 cf 3c 7a 2f 6e bd e1 20 1c 1e 8f 74 e3 f9 62 09 a3 a4 99 fd d3 ff c4 be fd 7b 85 63 e8 8d b6 a1 ab a3 0b dd 1b 76 62 72 7a 4a 20 fb d9 f1 51 c4 Data Ascii: c+hPmV#L({Ft5A\/7[B>IK/\|{MfQ.(AfG}@NLHYJ*!p2SC92#6(E LrY<T/B]Mq2EQez(pw`j\R1=7[)<z/n tb{cvbrzJ Q
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: 5f 38 8a 4d 37 de 8b de be 21 74 76 c6 30 3e 17 47 a6 58 43 b8 14 87 ab 9c c4 73 cf fe 5c f6 5b 06 6d 76 74 f5 88 49 01 9d 1d 9b 76 37 a2 7e 97 e8 6d 2e 9c 3b 7b 6d 4f b3 7e 67 ee 83 16 e7 66 9a 6b 9a 74 71 ed 72 3a 71 cf 7d 0f 48 98 21 87 23 ad 1d dd b2 85 9d 7a ef 4d b4 b5 b3 10 72 61 60 e7 f5 8c 15 47 cc ef 43 bd 90 41 0a 3e a1 a2 94 cb 15 64 a6 ae a0 ec f0 a1 6e 0f 0a 42 f9 e0 dd d7 23 5c 59 c2 3c c2 c8 d5 21 f7 b0 c3 db 40 3e be 84 6a 66 11 cf fe fc 19 94 0a 45 19 c0 98 4c 61 83 04 5b cd c3 b5 eb d4 0b 56 f3 02 b1 e4 45 13 bf f5 99 cf c8 c0 96 bf 26 16 33 88 07 36 c0 1f a0 b9 4e 00 cd e9 51 f8 87 36 48 73 45 54 81 ee 74 a2 17 b2 db 11 74 36 d0 48 8c 60 db 60 17 de 7e f3 75 5c 1c 1e 56 11 38 9d c6 bc 3e 04 bd 5e cc 2d ce 9b 6b d2 bd d5 e9 f6 a1 bd ab Data Ascii: _8M7!tv0>GXCs\[mvtIv7~m.;{mO~gfktqr:q}H!#zMra`GCA>dnB#\Y<!@>jfELa[VE&36NQ6HsETtt6H``~u\V8>^-k
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: c9 a0 85 b2 3f 33 bc 55 8a 23 33 54 d0 93 0a 44 65 bc 0a 83 f0 9e ca fb 4a b3 22 eb 49 ac b1 45 33 23 76 cd b4 49 27 42 23 a8 88 5e 37 0b 99 51 aa 89 36 ad 72 4d 54 d7 20 4d a0 e6 da 08 4a 68 21 5e 72 4f bd 32 b1 59 2e 78 8d 3e c9 b2 6d 36 ff bc 9e e6 c1 6d 8a 8f 9b a1 23 59 99 4e 5c 66 da 84 ca 2f 45 db ae 21 39 f2 26 4a 0f b4 88 9d d7 95 22 5c 0b ba a6 44 67 31 3f d2 8f 81 e3 1f 22 95 c9 33 55 7c ef 8e f5 b8 d4 3f 8d 68 22 8a 8a 60 10 6b 37 ed 44 26 19 45 3e 99 40 d2 5d 4b ad de ea 2d 7b 61 cf e7 61 f3 ba 30 34 3a 8d 2b d3 59 6c 5e d7 86 85 48 1c ed de 02 0a 0b 23 78 fe f9 7f e7 54 59 06 28 cf 3c f3 2d f4 74 36 e1 d8 d9 41 84 c2 1a 7d 20 e7 29 8b a9 52 89 e2 f2 a5 e8 22 da 57 ee 46 5f 83 1b 8e ca 46 84 b2 0e 6c ac 77 e0 83 77 df c6 95 2b 03 cb 86 14 fa Data Ascii: ?3U#3TDeJ"IE3#vI'B#^7Q6rMT MJh!^rO2Y.x>m6m#YN\f/E!9&J"\Dg1?"3U\|?h"`k7D&E>@]K-{aa04:+Yl^H#xTY(<-t6A} )R"WF_Flww+
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: f8 f9 48 d5 37 cd 8c ec 22 b7 b0 99 71 73 93 97 ab dd d1 d1 88 f0 f4 38 4a e9 18 92 8e 1a 42 5c 84 7d 9d 2e 64 a7 2f a0 6f 65 2f 0f d0 4c ce 89 ac a3 42 b9 7a 0b 57 08 f3 c9 6b b4 b4 b4 6b e0 9a e4 c6 a4 92 58 5c 0c 21 1e 5d 22 dd 8b b6 cd a4 34 a8 53 90 dc 78 11 77 3d fd f4 33 18 1b 9b 40 3c 32 8f 8e de 3e 0c 4e 47 d1 58 57 8d 13 e7 af 20 19 0d 93 23 bc ff e6 5b 71 ec d8 71 d8 6d 25 6c d9 b6 83 9d fb c5 0b 17 d0 d2 d2 82 d3 27 8e 13 09 11 38 8a 1a 1e 0b 52 67 5a 72 8a 37 27 93 4c 19 bb 3a 81 f6 34 01 97 89 d8 c6 c2 99 c5 8b c9 71 90 cf c9 40 46 e9 f4 49 97 11 67 1e 17 1b 1b f9 fd da a6 16 3c f4 f0 67 71 b5 ff 22 1e b8 ef 4e cc 87 13 f8 6f ff d7 df b0 68 94 8d 9f 87 40 32 89 4c 52 be b3 ba 74 59 b4 35 36 b4 3c a4 95 da a1 d0 b8 4e 30 a9 41 b1 db 71 ef 43 Data Ascii: H7"qs8JB\}.d/oe/LBzWkkX\!]"4Sxw=3@<2>NGXW #[qqm%l'8RgZr7'L:4q@FIg<gq"Noh@2LRtY56<N0AqC
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: d1 9c 33 96 45 b5 65 02 a0 73 0a 63 8c 63 86 17 1a 58 a9 af bc d4 ac 52 c4 0b 1a c1 ba 94 4e 65 1a 80 2e 0c 15 19 74 4b a0 37 dd be 24 b6 64 6d 8d 08 86 0c ee dd 7e 1f ee be f7 7e 34 c5 a3 fc 1c d3 b3 4a 33 93 cf a2 da 1b 6d 5e 54 f0 ae 68 bd ee 45 1a 56 4f ad 8c 7c 2f de 6f a0 41 a4 4d b5 43 44 f7 cb b2 2f ab 66 26 99 4e 92 b2 b9 75 70 37 f7 82 a0 c7 cd cf d6 d1 24 b4 af 0c ce 0d 5d e2 fe d0 1a 8d 20 16 89 a2 51 2a 20 1c f0 a3 6f fb 56 d8 dd d2 b0 d5 50 4c 67 b0 3c b7 c0 a0 f2 a5 54 0a 6b b9 3c aa 85 2c ba 5a 62 58 cd 66 71 ff 7b ef c7 0f 5f 78 07 e3 f3 4b c6 64 c6 09 9f e8 ab 6e bb 1b c9 e5 65 24 e6 27 51 0e c6 90 9c 1b 47 2e 93 59 97 05 b0 a9 31 fa 59 3d c7 2d ca 9e 22 c9 62 5e 21 d7 e9 0b 84 88 ee 4a 53 c3 2f 93 08 0d b7 1b 4e 61 43 91 06 e7 22 1a ea Data Ascii: 3EesccXRNe.tK7$dm~~4J3m^ThEVO\|/oAMCD/f&Nup7$] Q* oVPLg<Tk<,ZbXfq{_xKdne$'QG.Y1Y=-"b^!JS/NaC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49872	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:36 UTC	803	OUT	GET /Content/assets/images/Calculator/Agreement.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:37 UTC	302	IN	HTTP/1.1 200 OK Content-Length: 139052 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:37 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "e1404e8e8bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:59:48 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:37 UTC	3608	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fe 00 00 01 e9 08 06 00 00 00 63 bc 5e 06 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 98 14 45 d3 ae 9e b8 bb 77 c7 91 41 14 11 c1 9c 33 ea 67 00 45 25 28 88 48 12 94 a0 a0 22 41 40 14 50 10 90 a0 22 18 10 44 72 46 40 14 95 20 0a e8 67 f8 cc 01 15 03 20 18 c9 e1 d2 ee 4e ea fe ff ea de bd 80 a8 dc dd 1e 37 bb f4 f8 e0 de de cd f4 54 57 cd ee db 55 5d f5 16 01 79 24 95 06 76 ed 62 e9 cb fe fb 61 cb f5 1f 7e 70 c3 c6 ef 7e 3a 77 d7 ae 7d 55 00 14 15 00 d8 a1 26 c2 d8 21 7f 9d 54 73 96 c2 4a 0d 48 0d 94 8f 06 08 21 e0 79 1e a8 aa 0a aa a6 80 63 bb 44 51 14 b7 f6 f1 b5 77 9f 7a d2 89 9f 36 bb e6 8a 15 17 de 70 ce ca 93 08 b1 ca 47 42 79 d7 92 68 80 94 e4 22 79 4d f9 68 Data Ascii: PNGIHDRc^sRGB IDATx^]EwA3gE%(H"A@P"DrF@ g N7TWU]y$vba~p~:w}U&!TsJH!ycDQwz6pGByh"yMh
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 19 81 7f f3 8e 9c ea 13 c6 4f 1e f5 d2 d2 d7 ba 52 a2 2b 08 fa 1e 51 40 37 02 1c f0 6d cf 06 45 13 c0 4d 2d a7 88 06 05 e0 c7 0f b1 30 b0 2d e1 c8 6a ba 0e 84 31 0e f4 dc 0b 26 04 18 3a c4 b6 0b e9 95 2a 43 38 37 0f 82 a6 ce 23 00 95 2a 04 f6 0d e8 d7 6b 58 9f 2e cd 9f 27 24 1e 24 2f 63 63 95 60 f8 b9 af fc af cd 3d bd 07 2c 52 34 83 38 8c 80 ed e1 22 48 e5 91 0d 04 7e 8d a7 3f c4 80 9f 50 be 40 c2 25 00 86 fb 09 78 a0 d9 11 a8 5f e7 98 3f e7 4f 9f 71 f5 79 a7 57 df 54 02 11 e4 25 52 03 45 34 20 81 3f f5 1f 08 09 fc 3e b7 71 b2 01 ff c6 2d bb 4e ba fb be fe f3 37 7c b7 f9 a2 dc b0 07 a0 06 39 e8 6b 86 01 a0 12 70 3c 1b 38 5a 6b 44 78 b3 94 f0 30 7e 3e d4 e7 3f 91 c2 c3 e5 d9 ec b1 03 81 5e 57 55 0e f8 18 01 c7 48 80 19 4a 83 28 2e 2c 5c 0a 01 c3 04 ea 52 Data Ascii: OR+Q@7mEM-0-j1&:C87#kX.'$$/cc`=,R48"H~?P@%x_?OqyWT%RE4 ?>q-N7\|9kp<8ZkDx0~>?^WUHJ(.,\R
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 94 da bf f9 63 6f ed d6 ad bb be f7 fb f6 7d 75 2c 07 73 07 d1 eb 4f 83 a8 95 0b 86 81 5d ee 90 20 07 8f 43 03 3f 66 05 5e 7f f5 a5 6b 57 cc 9b 70 6d a2 64 c2 71 d6 7e b6 e9 fc 6e 77 f6 5e bb 6b 7f 5e c5 a8 23 68 89 41 55 38 cf 81 87 5c 04 c8 60 88 8c 84 4c fc 2d 0e fc b8 9b 8d b0 a6 80 0b 1a b3 40 07 17 1e ea 77 df c3 43 ee bf 7d 54 22 e5 f3 d3 58 4f 4d 59 d8 fb 91 11 63 9f 06 2d 83 60 1e 04 55 44 3e 86 60 7d c4 50 bf 08 f9 c7 9b 3e 08 e0 17 c9 8f 87 0e 91 8b 53 93 a5 94 bf 70 3f 8b 02 bb 88 5d 7f 11 ea 3f 78 2b 40 d0 53 e1 df 4d 95 80 67 e7 c0 f4 29 4f dd d6 fe c6 46 0b 12 61 57 09 fc 89 d0 a2 bf c7 90 c0 ef 6f fb f8 0a f8 57 bc ff 69 e3 ae 77 3e f8 da ae 03 d1 80 1a c8 e0 75 fa e8 71 a0 07 8d 21 47 71 c4 0b ac 04 f3 1c 96 23 e9 9a 02 c4 8b 82 a9 ba 74 Data Ascii: co}u,sO] C?f^kWpmdq~nw^k^#hAU8\`L-@wC}T"XOMYc-`UD>`}P>Sp?]?x+@SMg)OFaWoWiw>uq!Gq#t
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 9a 57 28 18 9a 06 c8 c4 86 7c e4 1a 51 78 c8 1e 13 e1 02 01 04 4c 00 cf 65 3c 74 6e 5b 36 64 54 aa c2 93 e6 14 cd 00 3b 62 81 61 04 80 60 e3 16 e2 88 26 26 4c 94 c9 21 e8 73 56 3c 5b 00 3f 02 b2 a2 79 50 a1 82 01 b9 d9 bb 21 bd 82 ee 4e 9b fc 74 f3 d6 8d 2e 79 b3 38 8f c0 b7 5b 73 6b de d9 f3 de b7 3e fa f2 a7 33 89 1e 80 a0 61 42 24 12 e1 fb fb 18 d5 c0 05 07 26 12 da 2e e5 f3 44 99 55 c3 c0 0d 07 2e 1b f1 6c d0 55 15 5c 2b 0f da b7 69 f1 d2 ec a7 1f be 8d 10 92 d4 8c f3 c5 d1 9f 3c d7 ff 1a 90 c0 ef 7f 1b 95 56 42 09 fc a5 d5 60 19 5f ef 57 e0 ff ec fb df ce 6a 75 6b a7 75 3b b2 ed aa 2e 31 79 b3 9e f8 21 c0 3f 46 b4 a6 a8 dc db 46 10 f4 78 67 35 91 09 a8 72 6f 18 7b e8 79 3c 4c 8e cd 48 90 0b 80 ba b8 30 d0 38 78 86 c3 61 08 60 fb 5f 6c c3 0a 0a 4f 98 Data Ascii: W(\|QxLe<tn[6dT;ba`&&L!sV<[?yP!Nt.y8[sk>3aB$&.DU.lU\+i<VB`_Wjuku;.1y!?FFxg5ro{y<LH08xa`_lO
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 62 44 a7 ae ad af 9d 97 88 a7 43 02 7f 22 b4 e8 ef 31 92 f4 13 e3 6f a5 26 52 3a 09 fc 89 d4 66 d1 b1 d6 7e f8 cd 65 ed ef ea f7 76 4e 98 06 23 59 59 60 66 64 f0 3d 65 fc 87 c4 3c ba 6e f2 96 bf 87 3e 70 bf 99 82 a1 02 44 f3 f6 d1 09 4f 8e bc bf 77 e7 96 cf 96 9d b4 a9 3b f2 84 17 97 f4 1a 34 f4 b1 67 15 13 c3 fc 3a 20 a5 b3 c7 b0 4a 02 5d 7b 1b 14 e6 f2 be 08 18 ff c6 6c 0b 0c 8f 63 ef 84 38 91 92 88 c4 f0 42 bf e4 7a fd 5b e0 c7 c5 cc bf d8 3b 96 f8 a7 69 2a b8 91 6c 98 3d 6d 62 87 0e cd 2e 5b 98 88 a7 44 02 7f 22 b4 e8 ef 31 24 f0 fb db 3e 32 d4 5f 46 f6 61 8c a9 2d 6e eb f5 fa aa f5 5f 34 a1 6a 08 88 82 9e 3d 05 06 1e af 97 c6 ee 80 d4 c3 4e 80 02 60 0a 1a f4 c4 bc 7f 82 0d 7a 5c 00 d7 86 eb 1a 5e f6 f1 d3 cf 8e bf ee a4 2a 24 bb 8c c4 4d e9 61 5f 5d Data Ascii: bDC"1o&R:f~evN#YY`fd=e<n>pDOw;4g: J]{lc8Bz[;il=mb.[D"1$>2_Fa-n_4j=N`z\^$Ma_]
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: a5 d5 60 19 5f 2f 81 ff f0 14 bc 7b 37 cb b8 b5 fb 9d eb 3f f8 ec db 0b 14 3d 08 b6 87 94 bb 14 b0 81 9a 5a 08 f8 11 f0 0a d7 ec 23 4b 9f 69 68 e0 44 23 40 a8 0b 69 ba 02 57 fe e7 e2 37 5e 9f 37 be 35 21 c4 3a bc bb 8b b3 9e 9d f2 52 ef 07 1f 1d f3 8c 1e aa c8 c9 82 6c ac d9 8b 35 95 fb 3b e0 c7 0e 81 78 a4 85 02 90 97 93 0b a6 8e 89 77 11 30 0c 0d 88 82 7d e8 5d 50 38 a3 af 28 3b 44 cf dd 50 75 50 d0 73 c7 48 81 aa 40 38 62 81 66 84 00 54 1d 5c 04 78 db 03 cd 34 79 03 1f a0 98 ba 58 a8 e5 30 e6 fb e5 03 bf 80 7e 95 b9 40 a8 05 3a b8 d0 b3 7b a7 a7 1f 1f da fb fe e2 cc 5b 9e 9b 5a 1a 90 c0 9f 5a f6 3c d4 6c 24 f0 fb dc c6 12 f8 0f cf 40 e3 a7 bc d4 7f e8 a8 27 9f b4 88 41 98 62 82 6b bb a0 07 42 e0 39 6e 21 e0 17 1e 2f 7a c8 f1 50 37 75 1d 30 83 01 f0 ec Data Ascii: `_/{7?=Z#KihD#@iW7^75!:Rl5;xw0}]P8(;DPuPsH@8bfT\x4yX0~@:{[ZZ<l$@'AbkB9n!/zP7u0
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 92 0b bc 7e 13 64 6c bb 8b 6e 7e e4 98 0f 94 f1 05 6c d9 80 d5 cf 00 01 2d 26 49 e0 c0 d4 fd 94 21 af e1 55 57 ec 5a 3c 7f d6 1d b5 2a c6 9d 0c a7 da 6f b9 b7 eb 2f db 7e fb f3 3a 10 14 30 41 04 c3 24 74 8c 9a aa d2 12 79 2c e7 cb 11 f8 d1 62 13 0d a8 7c 59 e9 5d eb 3f 5e dd a4 5a 59 ee 68 38 c6 85 49 90 4d da 3e f9 f5 4f 5b ff b8 09 6b f8 09 48 34 0c 62 03 3f 73 8d 33 2b d9 30 00 78 59 62 6d 8b 89 49 59 fb b0 43 5f b5 cb cb ef fc 68 c5 8a 7b 0a ab 64 2c f4 39 df 98 b5 74 c0 b8 89 53 de f2 19 58 4f e0 02 10 64 b0 70 5c 22 ea 11 59 0f 11 f8 03 9c 08 81 c0 49 b0 ff 40 d6 2c f8 70 c8 ef d2 5e a3 60 c0 8f 0d 96 b0 f4 72 f2 6b 63 3a 3e d9 ae e5 92 70 8c dd 01 fe 70 48 31 b2 af e1 00 7f 64 eb a7 c4 c7 f8 3f dd bc bd f9 13 dd 7a 7f 96 ae 11 51 f1 24 80 5f d3 33 Data Ascii: ~dln~l-&I!UWZ<*o/~:0A$ty,b\|Y]?^ZYh8IM>O[kH4b?s3+0xYbmIYC_h{d,9tSXOdp\"YI@,p^`rkc:>ppH1d?zQ$_3
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 17 77 e0 ff fc bb dd b7 76 eb 39 70 c3 91 e3 67 e3 64 4f 1c 98 1c 07 aa a1 02 af 10 20 84 46 c4 03 c0 8f 25 68 08 77 c1 f2 38 ac 41 17 4d 1f c4 7a 84 b3 1b 3f 5b d5 fc da 3a 15 f3 d5 d5 2e 1c 7a ca cd 35 e6 2c 5f db 79 e2 6b d3 5e 3b 7a f4 74 79 03 37 39 04 37 39 0a cb ba a7 dc 04 ec 2a 39 5b fe 01 d0 0f c4 ee b1 ca 01 13 1c d1 ea a7 b4 f5 f4 cb 08 fe 08 fa ac 05 2f ed 6b 80 bf d2 fd 20 89 16 36 2c 4a 19 3c a8 cf f8 e7 07 3c 3e e5 42 fc ff b9 79 16 e7 9c e2 2b 01 07 f8 8b af 6e ed 27 73 80 3f c2 75 5c dc 81 ff e7 3f 8f d5 7f a4 7d f7 4d c9 a9 6a 05 3b be ef d3 30 cf 4c 03 5e 11 81 60 d6 3b ed ca c7 40 2d 18 f9 46 f7 b7 0e 0a f8 e1 a9 1e 9d df 98 34 66 c0 b0 08 57 25 1d de 57 db 77 5f 3b 6d ea 7b e3 be d8 f2 dd fd e9 3e 24 d9 f1 64 f6 21 c0 bf 63 cb 99 90 Data Ascii: wv9pgdO F%hw8AMz?[:.z5,_yk^;zty7979*9[/k 6,J<<>By+n's?u\?}Mj;0L^`;@-F4fW%Ww_;m{>$d!c
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 97 e7 eb b5 40 ab 7d 2c 93 b8 5c b2 99 94 58 ea 64 ad 5a 35 fe aa 57 b7 f6 5f 95 2a 57 da 59 a7 4e ad bd f5 6a d7 ff bd 7a 39 ee 58 71 9c 1d c5 06 f8 8f a6 91 b2 7b fe d9 5d e3 db 1f 7e 6c fe dd ff 7e be 73 f7 de 7d 55 ce 24 a7 54 d4 0c 2b ce 24 04 74 93 03 13 f5 1c d0 22 e1 04 10 d0 49 15 c2 f5 1e 4a f3 8a 9b 01 fc df e5 62 56 b6 bd 39 c0 af 67 6e 04 78 dc ef e2 25 0c c0 8b a3 27 49 e0 01 44 9e 83 84 b8 d8 33 e5 ca 26 1e 6d 58 ff aa df 6f bb fd b6 0d b7 5c 77 f3 b7 65 af 88 3f 56 8e e3 d2 f3 32 91 9e 19 ff d6 a4 19 b3 17 0d 53 4d 99 b6 00 25 06 6b 18 22 02 4e 7a 13 2c ce 72 80 3f 2f 02 75 ce 75 24 e0 48 e0 82 12 c8 3b f0 63 97 4c ac 22 ca 3f f0 9f 3c 49 e2 0e 9e 38 56 f9 a7 9f b6 de f9 cd 0f 3f dc f3 cf ae 3d b5 4e 9f 4d a9 78 26 39 a5 8c 69 11 40 c6 4e Data Ascii: @},\XdZ5W_*WYNjz9Xq{]~l~s}U$T+$t"IJbV9gnx%'ID3&mXo\we?V2SM%k"Nz,r?/uu$H;cL"?<I8V?=NMx&9i@N
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 69 dc 2c 3e f4 c0 3d 6b 46 0c eb 3f e4 da 2b ca ed be 54 73 e6 62 a8 13 b6 71 ac da f4 43 db e7 9e 1f ff c6 e1 a3 67 aa 69 26 2a 37 1e d2 fd a8 d8 60 72 86 bd b3 0a bd a9 5d e9 11 74 e5 db 79 fb 21 d9 f2 74 22 b0 5c 00 24 52 a0 3b b6 c0 6e 5c 0c 84 03 28 34 06 76 77 0c cc 71 47 27 d3 ac f8 ec 3c cf f6 fd 83 5e 83 9c 79 9e 69 c2 8f cc 26 06 82 39 62 bf 4f f5 d3 09 22 0a c8 39 60 e7 26 e0 6e 0f 5d 58 cc 13 c1 36 0f 78 4d 1c 66 ce 5d 7c 2f 64 89 30 57 18 db a9 62 12 cd 85 80 7f e0 d3 3d 5e 99 30 b2 67 d4 ba fa 17 7f b2 e5 89 ae bd 07 2f 94 5c 09 80 fb 3b b4 f0 39 8c 25 1a 26 93 79 81 93 33 0b 9a 1c e4 7c 3f 7f 49 55 45 2f b7 e0 3a c3 42 75 08 4c 79 fb c4 d7 18 81 c5 00 89 d7 81 27 2a 70 86 17 56 7e b0 b0 e9 bd 8d ae dd 12 b6 c5 f3 12 5f 08 81 7f 39 02 3f ae Data Ascii: i,>=kF?+TsbqCgi&7`r]ty!t"\$R;n\(4vwqG'<^yi&9bO"9`&n]X6xMf]\|/d0Wb=^0g/\;9%&y3\|?IUE/:BuLy'pV~_9?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49877	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	817	OUT	GET /Content/assets/images/logo/huttons_logo-removebg-preview.png HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:37 UTC	301	IN	HTTP/1.1 200 OK Content-Length: 48256 Connection: close Content-Type: image/png Date: Mon, 21 Oct 2024 22:39:37 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "65db337b75f0da1:0" Last-Modified: Sat, 17 Aug 2024 07:17:12 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:37 UTC	3609	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 84 08 06 00 00 00 97 a4 40 37 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 07 98 25 57 75 2e fa 57 0e a7 4e e8 d3 69 7a 82 26 6b 82 46 20 04 36 c1 38 61 1b 0b 7c c1 e1 19 c1 f3 b5 9f 2f 06 07 82 04 97 64 f0 bb f6 75 78 c6 80 03 48 22 5c 1b 8c b9 c1 cf 04 db 60 5f 63 82 9f f3 35 98 20 19 59 20 81 34 79 a6 bb 67 a6 e3 89 95 ab ee 5b 6b 57 9d 73 3a 9f d3 dd a3 80 bb fc e1 d1 f4 54 9f 53 b5 6b d7 bf d7 fe d7 bf fe 25 61 e7 d8 19 81 9d 11 d8 19 81 9d 11 f8 37 35 02 d2 bf a9 bb dd b9 d9 9d 11 d8 19 81 9d 11 d8 19 01 2c 01 7e 3f 4a 7f 1c 0a de f0 a1 7b ef fd 96 9f 7d da d3 c2 9d f1 d9 19 81 9d 11 d8 19 81 9d 11 f8 e6 1b 81 0e f0 47 69 fa fe 30 c5 cb e3 14 08 a2 f4 Data Ascii: PNGIHDR~@7sRGB IDATx^%Wu.WNiz&kF 68a\|/duxH"\`_c5 Y 4yg[kWs:TSk%a75,~?J{}Gi0
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: f2 53 5b 06 7e 56 f5 5c 1a 08 f8 55 75 f8 39 11 b4 bf 66 dc 52 54 70 33 18 31 10 19 4e 12 97 9c 59 59 d0 9f 9a 01 b4 db e0 09 9a 44 40 e4 43 96 15 24 89 bf 17 98 9b 1c e4 21 aa d6 c8 eb 22 37 fa 6d c9 2c 64 76 d9 c4 a9 67 18 c4 d0 94 3d ce cc 46 43 d4 5d a4 90 a8 5f 42 e8 8a a8 3c 6e 03 69 63 9d a8 76 f8 38 64 fd 21 55 2b 22 0a 42 a1 8a 29 17 11 37 5b 90 ca 55 14 4b 23 a0 ca 89 14 11 62 fa 6c 10 b0 e6 11 7f 57 36 49 12 5b 1e 91 94 dc 2f 35 c4 61 84 34 8a 91 04 01 c2 da 02 a0 a9 80 9f 05 38 d4 e7 41 53 90 b6 5b 90 34 07 69 e4 03 69 f0 7a 60 f2 77 56 8e cf 9e 54 32 1c a4 d4 59 8d 00 90 ee 49 56 20 d9 05 38 c5 0a 47 fb 29 d9 30 e8 06 ad 39 48 62 d1 81 8d 92 cb 54 49 d6 41 f2 4e 83 1e 21 53 d6 52 1b a1 eb c1 9b 9f 06 77 21 0a 03 40 b7 ba 2b 05 75 98 a3 b9 2d Data Ascii: S[~V\Uu9fRTp31NYYD@C$!"7m,dvg=FC]_B<nicv8d!U+"B)7[UK#blW6I[/5a48AS[4iiz`wVT2YIV 8G)09HbTIAN!SRw!@+u-
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: f0 21 f1 6e 42 e6 42 af a0 ee c3 52 c2 0f d7 66 be f4 7f f6 3b e3 86 76 9f fc c3 85 b9 c6 8f 95 77 ed 85 a4 da 58 6c 78 28 95 87 99 76 61 e5 63 1c 0a 9a 20 53 61 f1 0e 3a 8b ee 3a 13 73 d9 7b d1 fd ee 5e 77 da de b2 03 91 d3 20 f0 21 35 08 5b 65 87 62 51 a1 c3 f7 03 ae ad 90 c3 18 8e 61 e2 f2 e9 07 a0 58 ca ed b1 7b f1 63 fd de 57 e7 3c e5 c6 74 e4 c0 0d 68 34 9b 90 75 9d 83 33 a2 3a 08 fc f8 d9 74 a6 a6 d8 9f 08 55 58 a6 02 4b 62 41 59 a8 26 87 81 61 10 4b d4 3f 81 e6 af 46 c2 0d 62 12 b2 c5 50 cc 18 86 40 5e cc 18 ef 3b 51 70 b6 53 cb 2e aa b3 13 cd 6c b9 9b f5 1a 1c bb 80 c0 f5 19 34 4d c3 c0 dc a5 47 80 f8 62 df ef 3e 7d b4 52 bc 31 2d 52 5b 5a 98 ec 00 ab 17 34 b4 fd 26 07 a1 74 47 ed 76 9b af 9b 22 7c 1a 77 86 b7 24 81 a6 68 f0 db 2e 55 3c a1 5d ab Data Ascii: !nBBRf;vwXlx(vac Sa::s{^w !5[ebQaX{cW<th4u3:tUXKbAY&aK?FbP@^;QpS.l4MGb>}R1-R[Z4&tGv"\|w$h.U<]
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: f1 32 f6 a5 23 7b 0e a1 41 d5 b9 64 c7 4d 32 4d 52 19 11 dd 93 15 f1 50 c5 7b 4e 43 90 7c d1 d4 2d 96 55 52 ab 48 2a 4a 5e 98 bd 84 a4 dd bf da ac f7 3a b4 e2 d1 97 86 6e fa c1 ca ee fd d4 71 58 d8 67 90 5a a9 23 fd ed 16 da 51 c2 99 72 36 d4 1b 99 e6 a7 d7 6e a3 5c 30 50 af 4d c3 92 e3 5f 69 6e 40 69 f1 f7 6e 01 f8 15 c9 04 28 cf a1 44 58 b8 f0 30 9c b1 c2 c9 e6 f4 23 0f 6d 8c 6b 4f d5 a0 cc 06 d6 c4 3e 48 c4 b3 67 ea 9a 4e 31 14 57 fb 2e 35 b9 63 15 19 61 74 06 fe 54 74 d8 ba 32 0f c7 c6 8b 9b b5 fb 3f ba e1 77 9a 87 d3 91 3d fb d1 f2 62 24 b2 70 df 94 a9 1f 02 05 11 cb bc b9 78 61 21 4a 4f 51 b8 80 b2 52 2c f2 3b 72 8d 14 7d 54 b3 11 c7 70 86 86 3e a1 a8 ea 17 83 30 3a 2b c9 ca e9 76 bb 35 8d 76 37 7f b3 e1 f5 6c e1 84 47 11 f8 73 9d 74 a7 84 63 d9 65 Data Ascii: 2#{AdM2MRP{NC\|-URH*J^:nqXgZ#Qr6n\0PM_in@in(DX0#mkO>HgN1W.5catTt2?w=b$pxa!JOQR,;r}Tp>0:+v5v7lGstce
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: e9 f6 3c 93 4c 2a 46 4f 2e 8c 7c b6 6c d0 42 0d 0b 93 a7 81 f8 f4 d6 e6 ab 7d 63 3a b2 7b 3f da 41 80 84 f4 d7 3d 34 24 fb b3 93 c4 99 a3 32 36 e8 84 4f 26 76 aa 0e 43 d6 11 79 2e c2 76 13 9a 1c dd e5 ce 7c 65 dd d6 79 1b 06 3a e5 63 07 d1 8a cf 52 72 97 68 39 0e 43 78 e7 93 f7 c7 10 9f 40 d5 18 44 21 b4 3d 1f d4 14 5c 93 c8 fa 38 64 b3 b6 85 a9 f3 d0 d5 f8 f6 c0 3d b7 3e 28 ea 27 d3 d2 d8 28 48 74 4d 12 47 4a 6e d2 98 53 b1 12 a8 80 2d eb cd 2c ae 41 c0 9d 58 0c c5 8e b1 b5 38 8b 34 ac 0d 0e fc 94 dc 0d f5 a9 5e e0 a7 26 30 04 88 1d fd fc 3a 1e 91 f4 fd ad a9 45 28 6a 78 7b ec 6e 1e f8 f3 67 e1 54 bf e5 a6 20 51 6f 77 2a a5 5f 9a bf 78 86 4d e6 60 d9 bc b0 97 4b e3 f0 dd 80 ed 94 a9 e7 43 12 d7 38 49 eb 93 d8 51 31 3a d5 c4 41 18 a2 5c 2e a3 e9 36 c5 fc Data Ascii: <LFO.\|lB}c:{?A=4$26O&vCy.v\|ey:cRrh9Cx@D!=\8d=>('(HtMGJnS-,AX84^&0:E(jx{ngT Qow_xM`KC8IQ1:A\.6
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 09 7d 32 de ca bf bb 9b b4 bb 1e 95 bb 95 91 e3 df b5 38 ef fd ed c8 a1 e3 58 68 d4 a1 e8 9a e8 d6 94 39 32 8a 85 6f 29 5c 50 a4 4f 89 43 02 7f aa e0 a5 6b 0d 7d 2a 5c b1 b1 38 bf 80 28 8c 51 2a 96 d0 a8 d5 30 36 32 ca f2 d0 29 ca 03 c0 2f 02 33 cd be c1 87 12 7d 81 39 55 d9 b3 9f 01 d6 0d 5a 90 f9 fb 44 24 bd 16 f0 d3 cb 43 9d af 88 92 22 fb 06 d0 82 a1 01 8d 45 ba 3f a2 e7 42 a6 5e 2c c3 62 a5 44 e3 ca 02 8a 65 ed db 1a f3 5f fd dc 46 d7 56 d9 75 f3 47 17 9b fe 8b c6 26 f6 c2 f5 22 44 69 0a ab e8 a0 d1 6a 22 4e 63 7e 51 85 ce bd 37 40 c8 3a 9a b1 cd 07 31 05 01 57 78 06 ae cb 3c 7c 4a 3d 2a 68 b1 f5 5d c0 29 89 de 15 90 31 34 3e c6 41 87 e7 51 3b 40 a1 14 22 09 27 df 57 d6 9d 6a b5 eb 8d 92 90 af 81 3a b4 15 4c 15 b3 97 cf c3 34 a4 be ac 7d 3b 9f 47 c0 Data Ascii: }28Xh92o)\POCk}\8(Q062)/3}9UZD$C"E?B^,bDe_FVuG&"Dij"Nc~Q7@:1Wx<\|J=*h])14>AQ;@"'Wj:L4};G
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: c0 f4 c4 6a d6 e1 d4 27 00 9e fc 0a a2 e1 1f af 66 4c 97 28 3c 5e 5b 7f 6b 02 e9 ce 5c a9 d2 4a 2e 9c 56 2c 33 3b 76 ea 7a 4c 2b f3 e8 0e 95 a4 7e c3 34 bc 44 c9 04 58 5a a8 43 f3 a2 69 a1 4e 80 26 ad 1a 0b cf d2 9a 3e 65 eb 2b 5f d0 0b 3d ef 96 b4 2c 68 90 71 7e fe cc 72 4c f5 2b bd 8a 87 0f 7b fc 30 22 ff 25 ba 3e b2 e7 ad 63 63 f6 10 4b 23 f1 d9 62 1a 70 a5 39 e0 34 7d 2f 5d c4 0b 1a d0 2a d2 6a 21 13 b6 94 4a 5a e3 47 11 f6 d2 a2 0f 02 df 35 91 4c 4d 40 32 a4 57 fb 8d 23 df 9f ff 78 b9 7b fb 2b c7 c7 aa df cf f5 ae 43 42 27 3b d5 10 e9 e4 a1 50 00 f3 37 b9 56 50 98 66 4f d0 b2 6e 3e 35 6b 7d d4 46 8e 00 e1 d8 59 6f 74 f3 db 22 e7 d7 3f e6 47 ec 15 92 66 40 a7 f0 bf 0c 52 98 00 6a e9 05 34 7f 7c 3a 3b 69 fe 33 b3 0c 50 a9 1b 86 85 4f 2b 92 25 29 cd df Data Ascii: j'fL(<^[k\J.V,3;vzL+~4DXZCiN&>e+_=,hq~rL+{0"%>ccK#bp94}/]*j!JZG5LM@2W#x{+CB';P7VPfOn>5k}FYot"?Gf@Rj4\|:;i3PO+%)
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 1b 26 6f 40 c4 dc d2 b5 a6 0f d5 da 08 dd 37 be 1b d8 07 ff cb 82 b5 20 6c d9 8e 88 d9 d9 d1 d5 85 20 70 9a 5e 50 ff 8b 30 32 45 5e e4 34 8e e1 2f f0 6c 5c 6c e8 79 48 92 84 89 91 a3 10 14 e5 8a d0 3d b0 80 6f d4 e8 bc e0 31 12 b2 57 30 9c 80 20 f0 1f f4 5d 67 4c 50 58 26 0c 5c 02 02 86 2a 7d 36 12 18 51 52 f4 28 0c ff c1 b5 5e 9c 3d c1 b0 52 cf db 7b 7a ba ef 39 71 ec 08 0f 26 79 35 a2 da f7 67 da a7 e7 37 3c 2c 88 ca 35 9e 1f 52 eb f3 69 cf 36 3f 0c 96 3d 21 ab 72 67 12 45 9f 90 04 f1 2a 5d 95 31 3a 36 04 12 8d 09 ab e5 07 16 84 be ff c1 f3 d9 3f a7 f4 b3 71 dc 7c 47 18 1e 3f e5 c9 ec 54 ba a3 b2 f6 57 83 5a d3 13 34 c9 08 40 02 ae 3e 7a 98 03 86 4f b5 ae 05 b0 bd 41 ae 32 48 02 2f 64 62 bf 79 8f ef 4c 91 6c b6 a2 ba be b7 26 f0 dc 57 ab b9 0c 72 59 1d Data Ascii: &o@7 l p^P02E^4/l\lyH=o1W0 ]gLPX&\}6QR(^=R{z9q&y5g7<,5Ri6?=!rgE]1:6?q\|G?TWZ4@>zOA2H/dbyLl&WrY
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: f4 4d df 94 b5 ca 1b ec b1 71 c8 39 f9 06 af fe ec f2 d9 46 ad 8e f1 e0 d7 86 1d 95 7e 4c 0c 8d 43 55 d1 ed 38 7b 68 7e 27 40 fd c9 8c be b3 d8 d1 05 cf 77 90 16 5e d2 42 24 41 80 a2 19 10 38 1d 49 82 c7 2d bb f9 bb f0 9e 3d b6 dc bc 34 2a 3b 9e 64 a1 5e da 18 ab 81 37 f4 ab 22 53 7d 0a 38 a9 2e b8 b7 b0 9a 4a eb d5 cd 7a 41 1d dc 21 0b c6 ef 99 4d f7 96 4a 67 25 35 20 92 b8 79 8f ef 9e 78 f7 aa de 20 ad 7b 07 2f 64 5b 8a 9f 75 df e5 58 2b fb c9 97 7b 9f 94 19 bc 9b 61 f3 37 fb 4e 08 59 8a 5e e6 9a bb 1e 9d b9 4f 50 2e b8 22 f4 dc c7 72 1d 1d b0 9c fa df 46 d6 ee d7 2f 7a 07 07 71 53 44 d3 8c 79 96 c3 e4 c9 e3 b4 ec 09 8c a4 a4 21 07 bd 94 a3 75 14 fb 5d 67 e2 7a 34 17 a6 cd d2 f7 18 b9 f5 07 78 b1 38 38 35 19 80 57 f9 6b 22 eb e9 79 1b 7e 57 3f 90 1c cd Data Ascii: Mq9F~LCU8{h~'@w^B$A8I-=4*;d^7"S}8.JzA!MJg%5 yx {/d[uX+{a7NY^OP."rF/zqSDy!u]gz4x885Wk"y~W?
2024-10-21 22:39:37 UTC	4096	IN	Data Raw: 39 d0 96 c0 6a 24 d0 b1 45 87 69 77 80 4d 7c 38 27 68 49 37 cd 89 6f 5f 3f 0b 09 a8 a5 2e 24 9c 0c 8f 96 68 4f fe 02 17 5c d1 f4 57 8a 85 44 2f 69 ec 3f 32 cd 7c 65 c5 cf e4 48 a9 a7 bf 19 51 10 10 4a 88 13 83 a1 c5 30 49 42 ec 30 0c 7f 1c 78 de 8f 10 fa 5f 03 86 aa 4b c7 be 74 09 af 6b 4f 95 8a 9d 96 ed f9 31 c3 70 0c ad 60 4d 9f 8f 48 cd 0f c3 7f 8f c3 f0 a1 d8 9b 7a 10 18 5b c2 7c 44 df 57 ea 5c bf 9b 17 95 cd 63 63 13 14 33 bc 0f a8 a5 9c b4 9d fd 57 1e 15 04 a9 6f 62 62 82 01 e3 5f e3 d5 4f 8d 03 af e5 d6 93 6c ae 23 19 19 1a 65 15 41 99 83 03 9e 6e 74 b6 7c fe 3a d3 8d 0e e5 73 59 c2 b3 11 33 76 ec e9 65 65 52 ea be 68 27 2f 68 db 79 45 82 4f 91 39 59 42 0b 6e 52 d2 a0 30 24 84 d7 f2 6c 18 07 0c 41 90 b0 49 c8 7a 55 1b 2c 82 ab cc da 34 43 51 a6 ff Data Ascii: 9j$EiwM\|8'hI7o_?.$hO\WD/i?2\|eHQJ0IB0x_KtkO1p`MHz[\|DW\cc3Wobb_Ol#eAnt\|:sY3veeRh'/hyEO9YBnR0$lAIzU,4CQ

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 16309373-001e-0066-35b4-23561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc65759s7gvj790ueq542n00000008pg00000000qn0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: f248ac78-001e-0028-58b4-23c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc65759dpzf5dzapequ9n000000008vg00000000t2k9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 163092c4-001e-0066-1bb4-23561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc65759sqv7lrwy1666yds00000009400000000069d5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 49871e3f-e01e-0020-6cb4-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc65759tbh4guw9nprg7en00000008s000000000fcpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 79de3ac1-a01e-006f-78b4-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc65759ltvfqk1p4048kt400000008t00000000044nc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49885	3.5.146.249	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	675	OUT	GET /Bookappointment/Property/eba04e88-350e-4bb3-81e4-80cbeb119659 HTTP/1.1 Host: rtdbookappointment.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 22:39:37 UTC	516	IN	HTTP/1.1 200 OK x-amz-id-2: yIJNQno5ait6nhWxcPB2NCdk8i3V0M9c9vvHn3pDXfUYM3sEdrGA4MCGvQ3Q3gKgCDBjqAmb/MXTv5xWHeaKgg== x-amz-request-id: VBBP3MTJBCHMM1XD Date: Mon, 21 Oct 2024 22:39:38 GMT Last-Modified: Wed, 09 Oct 2024 13:14:54 GMT ETag: "c4808956015247abc7aeb02a29d3cd87" x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 x-amz-version-id: B8CKuuWFiWhuzDDUMXoISwrOdNc5S5LJ Accept-Ranges: bytes Content-Type: text/plain Server: AmazonS3 Content-Length: 1529580 Connection: close
2024-10-21 22:39:37 UTC	1441	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 02 bc 08 06 00 00 00 ff 33 46 8e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e 74 bd 0b 93 64 59 72 9c 77 33 eb d5 3d 33 0b 88 32 42 ff ff d7 80 92 8c 80 8c 34 09 20 69 92 91 46 89 a2 48 42 02 a5 9d dd e9 ae ca aa 94 85 bb 7f 11 71 ab 77 9b 5c 4c 77 55 e6 bd e7 11 27 c2 c3 e3 71 2e ff f8 ff fc 7f f7 8f fb c7 71 dc ef c7 c7 71 1c 97 cb c3 71 3d ee c7 c7 fd bd 7e 74 d4 ef de 6e ef c7 c7 fb fb 71 f3 c7 8e cb fd e3 f8 38 2e c7 e5 72 3d 1e 2e 97 e3 72 d5 17 8f 8b 7e 79 39 8e fb 71 3c e4 67 7a e6 51 ff e7 7a dc ef f7 e3 7a 39 8e eb f5 72 d4 2b 3f 3e ee c7 fb c7 fd d0 ff d3 73 eb 83 fe 73 bf de eb 0d fa f6 25 bf a8 cf eb 7f f5 b9 1a c3 fd a2 ef d5 73 f5 8a cb e5 b8 3e 7a fc Data Ascii: PNGIHDR3FsRGB IDATx^tdYrw3=32B4 iFHBqw\LwU'q.qqq=~tnq8.r=.r~y9q<gzQzz9r+?>ss%s>z
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: bc c3 83 d7 a1 8e 4d 08 46 c9 5a 48 fa a3 43 6c 2b a2 af 6c 8d 32 a6 0c 1f d9 c9 d6 20 57 51 71 a3 c3 82 6a 39 68 63 31 06 5b 7b 47 e6 2c 4a 25 64 6d 47 8f c7 2e 2f 5b 3c cb ba be ab bf 96 8e 29 6d 72 8b ce 0d 66 02 9a 30 d8 bb ed ae f5 a1 f7 d6 7b 18 5b 76 cf 59 02 27 20 0b fb fc 05 97 79 9c d6 83 1f b1 9d 1b ad f3 fb 48 d3 3a c0 0d eb 39 65 bd ee ec bd ce b4 70 83 c7 b8 4f 83 5f 95 f5 cb 2f d6 f1 6c 53 7a 82 1c 27 0d 92 7f c8 36 7b be a0 d1 86 3c 9c 13 6b fe f3 38 b3 09 c2 27 39 af 11 95 f6 6d f4 c4 bb 50 c9 28 46 04 25 36 75 a9 9e d1 41 7f 06 6f 7a 84 b1 43 b1 3b d2 12 f5 77 f9 76 b3 a6 ad cf 72 3e 2d 67 d6 6d 8d ed 16 b6 c6 fa cb de af 75 02 5f 19 3b 0e 42 e8 fd 18 33 79 1a 7f e3 aa d6 35 39 82 12 84 d2 e7 b1 39 c1 17 da eb 3c a1 f0 86 ec 2f 47 0e 9c Data Ascii: MFZHCl+l2 WQqj9hc1[{G,J%dmG./[<)mrf0{[vY' yH:9epO_/lSz'6{<k8'9mP(F%6uAozC;wvr>-gmu_;B3y599</G
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: 1f b2 58 1a 44 11 aa b4 0c a1 97 1a 67 b3 cb 48 f3 dc 0a 14 43 12 cb 97 a1 2c ca 8e 97 c9 89 50 2f 34 f9 c7 4e 88 c0 12 f8 d0 9f 0a de 76 99 63 80 55 71 c6 5e 36 85 63 1b 37 8b 64 93 a3 0c 16 fb 44 16 a5 8d 00 c4 cb e8 4f 88 47 22 49 21 94 62 37 c8 ce 38 91 1f 9d 2d 35 14 28 0d f1 39 a3 8c 11 a2 8a 33 e9 bc 2f 38 99 10 d5 93 f0 a1 7e 99 9a 0b 64 e5 ca 72 41 ab aa af 2e 38 ac 3d b6 24 03 2c 1d 68 0d 9f 40 d5 a7 00 53 bb 31 d9 e7 ce 5c 6d 72 77 ca ef a4 7d cd 02 9c ca 87 f7 18 62 4e ac 1f b8 b0 2a ce 3b be 08 67 04 1f ca 4b bc 7a 42 2d 58 aa 73 6f ed d5 a4 4e 89 c9 d8 ea 1c 63 68 1c b2 f6 b2 01 8d d5 fa b4 8f cc 07 6c 79 6b 56 46 b6 d7 8b f7 2e ec 9a 80 0c 94 18 78 dd 2e 5b f4 61 5f 5c 73 26 1d 96 59 ee d9 74 96 3d d0 04 92 32 63 a5 7c 6e f1 1c cd 6a c0 49 Data Ascii: XDgHC,P/4NvcUq^6c7dDOG"I!b78-5(93/8~drA.8=$,h@S1\mrw}bN*;gKzB-XsoNchlykVF.x.[a_\s&Yt=2c\|njI
2024-10-21 22:39:37 UTC	15360	IN	Data Raw: 2c 3e 9b 3e 87 04 71 b6 4d 60 46 80 5a 93 72 9c a8 82 f5 b6 a5 6e 80 3d 84 15 b6 4a 22 9e e8 9b f7 c1 eb 47 cc af 5d 2a 1c 4a d9 b0 b2 2d 0b 2e 7e 22 8c bc 36 09 28 a4 f7 da a9 4f 9d 8f b1 a7 d3 40 d2 60 8b 73 f3 a8 ec a9 49 79 26 d2 ce 91 f4 49 b3 2c 6a c4 90 55 00 1d f4 54 de c5 f1 01 78 6a 8d 72 46 08 32 7b fa dc f8 83 75 1d a7 50 ce 72 3b 54 43 bc f8 fd 7e 91 7f fa 69 f5 04 18 e7 cc e1 a4 68 06 2d f4 2b 7b 8d 6d 8a 80 34 01 90 9f 53 4a 09 31 2b bc 33 2f e8 ec 11 8f 67 1a ce 6a 88 79 df 10 d1 8c 6d 1a f4 66 19 82 af 92 11 84 7e cd ba 77 86 00 aa 09 87 5c 8d a7 f3 cc 80 72 93 74 0b 66 76 69 82 67 46 16 23 8d ea 59 1f a2 bf ee a7 b2 b3 bb 43 34 a7 0f d7 c6 1c 10 7b 0e 42 c6 5e 2c f0 eb 8c 2f 63 d3 22 e8 dc 60 5c 34 b4 c9 26 ab bc 5e 27 f4 7b 36 36 b3 87 Data Ascii: ,>>qM`FZrn=J"G]*J-.~"6(O@`sIy&I,jUTxjrF2{uPr;TC~ih-+{m4SJ1+3/gjymf~w\rtfvigF#YC4{B^,/c"`\4&^'{66
2024-10-21 22:39:37 UTC	16384	IN	Data Raw: 7f 79 7f fb e3 cb 1f 6f 5f 72 22 e1 dc 67 c0 87 5a da 8a f8 7c 4d 89 b9 b2 e1 77 f8 a6 65 c4 19 bf 7a 8d 5f 08 2c 1c 4c 83 c4 28 eb 2c 7f db 12 0e 88 22 a2 d0 1e b1 ce 21 7f 66 cd e5 3c 04 90 0c 46 f8 a3 d3 17 2d b8 ad bc db a7 da 93 86 1c 68 6e 96 bb 6d af 9d d5 b6 19 05 07 4b 76 12 b3 c7 6a 9f 34 f2 4f b6 69 66 5e cd 7e bf bd fd b7 af 43 1c 4e 55 de ee 29 a7 52 46 ac d3 de c9 a8 54 3f fd dc ff 2f 9f 33 a3 61 8e 86 9e d6 d4 01 64 d3 8e 18 10 4f 96 e8 69 2c 17 20 36 0b 6b 66 65 11 69 f0 99 1e 99 53 af 42 12 3d 2a 05 8a 43 80 27 b6 03 b4 8d 5e e7 b6 d5 30 0b 5e 80 81 da c6 9e 02 09 92 bb e0 8f 60 28 a1 16 f3 70 4e ca c4 2a bd 99 c7 19 68 df 21 bb 87 74 2e 9c 0b a0 91 1d 4a 46 b6 99 ce 2c 05 b2 77 78 88 12 b7 e6 c3 62 ec a9 b6 0c d0 f3 3d 18 40 ee 8b 95 3c Data Ascii: yo_r"gZ\|Mwez_,L(,"!f<F-hnmKvj4Oif^~CNU)RFT?/3adOi, 6kfeiSB=C'^0^`(pNh!t.JF,wxb=@<
2024-10-21 22:39:37 UTC	1024	IN	Data Raw: 62 4a 4e 34 27 1c c4 4e d9 a6 ee cc a3 b2 e0 59 0d 02 13 9c 76 3e 79 d6 2a 60 11 7f c5 06 9c e0 11 85 83 14 38 51 f6 5e e7 28 35 3f ec 70 d7 30 be b0 84 6c 0e 6d 67 ba 35 c1 69 a5 fa 77 ce dc 0f 09 39 b2 5d 59 18 6d f7 d0 97 02 20 18 7f 18 dc 1d 50 67 b2 68 81 15 24 a1 95 d4 d5 57 54 42 cd df a9 5c f8 2c f2 ea 83 5a fa fc bf 77 bd b2 86 8f 53 fd 23 42 68 01 de a7 0c 10 d7 4c ac f7 39 95 30 b2 20 9c f1 43 ad 3e 10 30 ba d6 9c 70 f7 ed bb 4e 41 94 d2 7f fc a0 4a 2f 55 4a 41 54 e5 f4 c3 f9 99 07 f4 e7 88 f0 3c ff 83 cc 8c 61 d3 52 88 e0 c9 71 cf a9 02 14 e8 60 8e 56 c0 c1 af 43 53 a3 e4 90 43 8e 9a 0f 94 f1 ce 73 7a 20 bf 2e 99 05 7f a0 2c f1 18 ac 00 ca 00 75 cf 37 db 36 db 79 0c cd 07 53 f0 e3 8a 33 11 55 59 eb ef 3a 2d d2 ff 9b 7b 6c 1b 1f 00 0a cd de c3 Data Ascii: bJN4'NYv>y*`8Q^(5?p0lmg5iw9]Ym Pgh$WTB\,ZwS#BhL90 C>0pNAJ/UJAT<aRq`VCSCsz .,u76yS3UY:-{l
2024-10-21 22:39:38 UTC	16384	IN	Data Raw: 0a 88 ef 69 d5 32 3b 0e 2e a1 82 70 2d d3 ad f6 58 d5 a9 61 ac a2 dd 24 ba f4 e3 c3 cc 92 75 ac 73 60 5c f6 05 f5 57 35 45 74 54 5e db 3b 15 9c 44 92 46 a7 9e cf 7c a8 30 ad 4a 0e 95 68 dd 44 a6 7d 0c 8f b4 c9 66 ba 0a ee 9e 2e 91 36 37 dc 05 37 e4 c1 96 86 84 e4 92 21 de c0 f1 57 b3 20 20 b4 32 4f 67 e6 db c2 2e e6 05 f7 9f f6 75 a2 a2 e2 5a 69 3c e4 29 6e 94 a0 f8 eb ce bd cb be 63 e7 4d 06 3b b6 09 88 f6 fd 63 24 5f c9 2a 3f 0e 88 80 d9 89 8b 15 42 97 f5 d9 c0 10 e0 54 1d 0e 73 6d 3c 95 59 a7 75 7d bf d3 14 77 70 44 6c c7 3a eb da 6b f6 ca bf 3a 6d 41 89 55 ae 3e f1 11 bd db 8b 7d e7 fd 36 d1 71 be d9 eb 26 69 4c 32 f3 08 0a fb 6a 3c bb b3 24 59 d4 a7 4e f8 90 28 6c 8b d7 f5 e1 2d 17 7b 5d 79 58 98 e4 ad a2 5a 12 35 41 7e 6a 1f 11 a9 9c 44 1d bf d2 9a Data Ascii: i2;.p-Xa$us`\W5EtT^;DF\|0JhD}f.677!W 2Og.uZi<)ncM;c$_*?BTsm<Yu}wpDl:k:mAU>}6q&iL2j<$YN(l-{]yXZ5A~jD
2024-10-21 22:39:38 UTC	1024	IN	Data Raw: d6 71 e6 4d 9c bc 6c 9a 89 5c f4 56 64 03 15 dc e5 b7 79 07 58 a8 71 cb 60 ae 6c 7f 8f 8e 7d 39 2f 5a 49 e6 14 98 28 0e f4 55 2e e6 04 67 9e 21 d5 27 7b 66 a1 c2 26 27 2c 2c 9d 81 91 91 74 36 5e a4 f4 8a b1 ae 19 57 5c 78 72 22 b3 15 f0 ee 20 24 a9 43 71 b6 83 49 7c 33 dc 58 51 3b d4 2b a3 a7 bf df d2 1a 99 ee 8c 80 07 22 6e 4e c5 69 e5 6d 17 b3 07 11 76 c7 01 2c 47 f6 bd c8 b0 35 09 0b bf d8 be db d2 6f f3 9e 99 3d 9f 67 4f d0 8f f8 8c 9b b0 b1 0c 24 23 08 cf 70 00 69 32 fd fd 16 af c9 04 12 be 74 d0 e7 42 b4 34 1f ca dc d1 35 94 68 e0 ff c4 e1 ca fb d1 47 db ff 3b 3c 89 65 5f b7 da b1 98 0c 76 c6 4b f5 91 e0 62 1c 08 9c b9 81 f0 ea df e3 bb 9c 4d de 73 8a 57 00 89 f5 f2 96 ed 66 f5 bb 8d 43 76 91 40 5a 72 4a 9b 18 0c 99 d5 b6 24 1b 99 90 61 16 7c b4 a1 Data Ascii: qMl\VdyXq`l}9/ZI(U.g!'{f&',,t6^W\xr" $CqI\|3XQ;+"nNimv,G5o=gO$#pi2tB45hG;<e_vKbMsWfCv@ZrJ$a\|
2024-10-21 22:39:38 UTC	16384	IN	Data Raw: cc a5 9f df b4 82 6c 9d a3 d3 ce 3e 7b 7d 7d 0b 89 63 e0 a8 5d 80 bd d3 59 f1 25 b4 e8 91 01 46 9e 8d 7b 99 f8 cf b6 83 b5 be 75 be eb 67 f4 26 d2 0d 5c ae 49 4d 99 80 c1 90 75 66 a2 a9 b1 85 22 24 c3 62 35 08 8c f3 11 2e a9 2f d2 70 ff 46 4a 17 7c 23 51 67 0c d4 18 54 e2 f8 31 7d 62 3a fd 3d 41 46 dd da 9b 13 58 d9 3c 8a 3f 11 84 2a 19 2e 1b 6b 1b dc 39 29 45 22 a8 67 93 d7 8d 5b f0 c2 11 26 a8 e1 ec 3e df 1e 35 4e 1c 78 d7 4d c4 9b 39 8e 9c 99 0c 85 b4 71 a9 6f fa 2c c6 49 f2 de d9 61 1b d2 84 6c 83 38 3b c9 da a3 7f 53 29 79 67 b7 e4 16 d5 ee 8b e4 79 73 e9 cb f5 c2 01 c9 b0 d6 64 05 5f 28 6b 09 78 ef 20 54 e4 c7 64 85 c9 df 2d 17 92 ce f4 44 d2 fe 92 15 a2 bd 4e 0e 06 4d c7 d1 6b 2b 77 87 3e 77 5a 9f c8 bd 6c f4 72 f0 64 ab d3 3c 1d 24 79 c4 2a a4 e6 Data Ascii: l>{}}c]Y%F{ug&\IMuf"$b5./pFJ\|#QgT1}b:=AFX<?.k9)E"g[&>5NxM9qo,Ial8;S)ygysd_(kx Td-DNMk+w>wZlrd<$y
2024-10-21 22:39:38 UTC	1024	IN	Data Raw: 44 4e ef 2e 3f e6 27 08 5d 47 cc 63 ac 71 b8 c7 96 d7 44 74 be d6 d2 24 92 36 06 72 4f 9f 09 a9 89 3c d4 34 16 ce 57 b3 75 ed 55 c8 a9 5c 50 52 7a b3 ca bf c1 0e 8d 4f c8 f4 2c db 92 be 34 f5 38 7a a9 49 47 e9 dc e5 25 99 97 c7 67 84 a3 90 87 c8 1d 3f bf f6 4a 3d 2b 29 4d 93 fc 45 0f 06 5f e9 69 bb 09 b5 f4 b7 f5 48 77 f9 c2 e1 8a 37 a5 f5 f1 97 34 26 a9 0a 08 77 ec ca 8f d7 5b 11 cd f6 09 06 c3 5c 2d ae 30 03 ce 03 3a 2a cd f8 4d 2a 99 2c 71 80 27 f2 27 e2 d2 36 a2 5e 41 d9 9b 9f 1d d2 b0 b3 22 7c a6 29 be 31 a7 1d d2 3e 59 7f 10 7d ca 69 d6 78 a3 1f a5 b3 62 0f 20 b5 54 ee ea b2 0f eb 23 6b 13 97 b3 f2 f7 94 95 e6 d7 7a df 91 61 34 3d 24 7d 7b 63 14 4c 9e 07 46 c5 ce 70 db 20 18 9d 9e 54 94 d2 35 89 23 c7 3f 81 a3 45 86 0e de 36 03 c6 9e 13 00 f2 ad 7a Data Ascii: DN.?']GcqDt$6rO<4WuU\PRzO,48zIG%g?J=+)ME_iHw74&w[\-0:M,q''6^A"\|)1>Y}ixb T#kza4=$}{cLFp T5#?E6z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49886	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	813	OUT	GET /content/templates_assets/templatey/section-fourty-bg.jpg HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:38 UTC	304	IN	HTTP/1.1 200 OK Content-Length: 1100445 Connection: close Content-Type: image/jpeg Date: Mon, 21 Oct 2024 22:39:37 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "6da15c6e8bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:58:54 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:38 UTC	3606	IN	Data Raw: ff d8 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 07 d8 0b c0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 Data Ascii: CC}!1AQa"q2#BR$3br
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: db 34 00 8e 99 c8 2b c0 3f 9d 00 31 90 72 c0 74 1c d0 00 c0 9f ba 38 03 04 9a 00 66 d0 09 38 1c f3 40 0c 31 ab 36 02 fe b4 00 c7 42 41 61 c7 6a 00 ef 84 64 9d 80 76 e0 e3 8a 0d 07 ac 24 36 f2 7e 6c 75 fe b4 00 e5 b7 da 31 8f ad 04 25 71 de 4b 05 19 19 f5 14 0f 98 72 c0 18 e1 97 04 7a 50 1f 10 e1 6f 96 ca 9c 67 ae 05 01 11 c2 0c 60 a8 ea 79 c9 eb 40 9b b8 f4 88 e7 0e b9 04 f0 71 40 85 f2 00 3f 74 60 f1 c5 00 28 87 3d b0 7b 73 db d2 80 14 c1 87 24 af d7 8e 94 00 e1 6d 91 80 30 33 d3 14 00 08 49 19 24 8c 0e b4 00 f3 17 cb 83 d3 b8 f4 a6 9d 80 6f d9 c0 1b c8 3c fb d5 37 60 14 40 01 c8 5c 02 30 17 d6 97 30 0a c8 c0 0c a1 fc ea 40 54 b7 56 39 2a 0e 7b e7 b5 00 3b c9 c9 e5 7f 31 40 0b f6 60 47 dd e9 40 0a 2d 88 07 a0 18 ed 40 02 db b0 e3 1d f3 ef 8a 00 72 c4 4a Data Ascii: 4+?1rt8f8@16BAajdv$6~lu1%qKrzPog`y@q@?t`(={s$m03I$o<7`@\00@TV9*{;1@`G@-@rJ
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 87 1e b8 34 00 18 fa 64 74 f7 a0 00 28 03 a0 e7 f5 a0 05 78 81 6f ba 33 cd 00 1b 55 86 dd bf 85 00 2b c3 81 f2 93 83 d0 1a 00 3c b5 66 24 8c 1e b4 00 bb 19 be 65 07 9f 5a 00 4f 28 67 27 a7 6c 50 02 88 89 e7 20 1e c4 8e b4 00 18 c6 39 5e 07 73 40 0a 22 07 23 39 f5 27 bd 00 1e 50 2d 8c 7e b4 00 a2 33 b8 2e de 3b d0 02 88 f0 01 03 eb 40 03 c7 18 c0 db 91 40 0a 21 2a 40 e9 eb ef 40 01 89 77 10 38 07 a0 f5 a0 04 28 bd f1 f5 a0 05 31 e7 b0 1c 77 34 00 89 00 20 02 3d 87 14 00 be 51 07 91 c5 00 29 84 ae 38 c8 ed 40 07 96 58 e0 8c 9f 4c d0 01 e5 30 04 f6 1d 4d 00 0b 1e 08 24 50 03 bc af e1 53 f8 e2 80 1b e5 f1 81 8f 7c 50 02 88 81 60 48 fc 28 01 7c b0 14 9d 99 cf 19 22 80 06 43 c9 38 24 f4 c5 00 34 c6 c5 7a 74 eb c5 00 2e c1 83 c7 51 c5 36 ee 00 22 da 4e 46 09 1e Data Ascii: 4dt(xo3U+<f$eZO(g'lP 9^s@"#9'P-~3.;@@!*@@w8(1w4 =Q)8@XL0M$PS\|P`H(\|"C8$4zt.Q6"NF
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: a8 a2 c0 01 41 cf 39 19 eb 4c 06 98 89 39 18 f7 e2 a7 94 05 11 6d 52 31 c7 ad 48 00 45 ce 48 e3 b9 a0 01 a3 cf ca 00 a0 05 28 8b c0 07 24 63 39 ce 28 01 0a 9c 60 82 41 14 d3 b0 0d 2a 07 dd 00 81 d3 8e 94 80 5c 02 7e 55 cf b5 00 23 2e e3 91 8e 28 00 d9 ce 40 eb c6 28 00 d9 81 8c 71 df 1c 56 80 26 37 70 47 d0 54 b5 70 17 ca 5c 64 64 73 54 02 14 23 9c 01 8e 86 80 02 a3 a6 4e 6a 58 00 40 a3 38 04 75 35 40 36 34 2a 73 83 d3 bf 4a 00 72 c6 1b 9c 63 9e d4 00 85 46 ec 11 9f 43 e9 40 08 10 8e 08 1e b4 00 ad 16 4f 04 60 8e d4 00 82 32 4f 50 48 fc 28 01 00 1f 79 47 4e b9 a9 dc 06 ec 90 1e 9e f8 c5 48 08 57 76 09 1c 9f 7a 00 0c 45 b8 db c6 3a 66 80 01 11 50 37 11 8c fa d0 00 14 79 67 1d 09 e0 8a 00 42 b8 3c 0c 7a e6 80 10 28 2c 00 07 04 71 ed 40 08 13 e6 18 1c 74 14 Data Ascii: A9L9mR1HEH($c9(`A\~U#.(@(qV&7pGTp\ddsT#NjX@8u5@64sJrcFC@O`2OPH(yGNHWvzE:fP7ygB<z(,q@t
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 9d 68 01 85 43 0c 63 a7 34 00 c2 8a 07 b8 e8 28 01 a5 00 e0 f6 3d 73 40 08 e9 8e 08 e3 1f e7 f0 a0 06 84 d8 7d 88 c7 4a 00 69 50 d8 23 1d 3d 7b 50 34 ae 35 94 83 9c 1c 8f 43 40 8f 57 31 12 79 f5 eb 8c d0 03 d6 07 39 3f ed 77 a0 07 2c 1b b2 72 0f 3c fa 55 72 80 b1 db ef 5e 9e dc d2 4a e0 48 21 27 92 3a 70 70 29 00 e3 08 40 08 18 07 a8 f6 a0 05 f2 72 71 93 81 d0 9a 69 5c 07 79 3c 02 a0 60 1f f3 9a a4 ee 02 84 c7 ca a3 a7 4e 68 6e c0 2f d9 94 1c 02 33 8e 01 ed 42 77 01 56 03 d1 7e bc 53 01 7c a0 d8 e7 1e d8 35 37 b8 01 88 1c 60 13 c5 50 0b e4 8c 64 1c fe 18 c5 2d 40 12 32 32 cc 38 03 d3 da 98 0e fb 38 00 90 a0 71 d0 9a 00 04 63 04 6d 38 a4 d0 0e f2 02 a8 f5 3d 41 1d 28 01 7c 92 41 2b 9c e7 04 50 d5 c0 73 41 81 b9 4d 4b 56 00 16 e0 1e 4e 69 00 a2 1e e0 63 8e Data Ascii: hCc4(=s@}JiP#={P45C@W1y9?w,r<Ur^JH!':pp)@rqi\y<`Nhn/3BwV~S\|57`Pd-@2288qcm8=A(\|A+PsAMKVNic
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: f2 87 de 3c 0e c3 38 a0 03 c8 55 7c aa e7 8e 7b d0 00 21 50 37 00 4e 4f 38 ea 3d a8 01 c2 26 1d 46 70 7d 33 40 07 97 bc 12 0e 78 e2 80 1b e5 e0 86 6e 0f af 4a 00 53 09 2c 71 cf 7c d0 03 84 4b 80 c8 41 e2 80 10 c4 7e f0 4e 9d c5 00 1e 51 c6 54 fe 04 50 00 d1 83 f2 9e fd 3b 50 02 ac 63 38 c0 1c 73 93 40 0a 50 1e 42 f4 e4 50 00 d1 f1 f3 31 eb e9 40 0b e5 9d a0 85 e3 d0 d0 02 79 38 e7 07 df 34 00 ab 17 03 20 0c f1 8f 4a 00 76 c4 20 e4 63 b1 14 00 79 43 07 d0 0e 9e b4 00 85 03 63 27 38 eb 40 09 e5 30 20 1f 98 13 eb cf d2 80 17 c9 66 52 78 fc 69 a5 70 01 19 2b 90 17 f0 ab 00 d8 a7 90 dd f8 cd 4c 80 12 33 9d c0 7d 7d a8 88 07 92 01 3f 2e 1b 81 cd 26 ac 02 94 c1 39 18 20 7e b4 80 53 06 4e ec 9f c6 9a 76 01 a6 3d 81 82 83 c8 e7 9a 1b b8 01 8f 91 e8 3a 8c 50 dd c0 Data Ascii: <8U\|{!P7NO8=&Fp}3@xnJS,q\|KA~NQTP;Pc8s@PBP1@y84 Jv cyCc'8@0 fRxip+L3}}?.&9 ~SNv=:P
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: df 38 a7 70 15 e3 07 38 e0 0f 6a 60 37 18 3c 01 82 68 7a 00 a6 22 87 24 1c fd 69 37 60 03 19 6c 0e f9 e0 01 4b 94 04 f2 c1 70 49 c6 39 1c d4 80 79 61 40 18 e7 3e b5 69 58 04 20 af 07 07 1d 3e b4 c0 5c 04 38 3c 7a 60 d0 03 44 47 1f 2e 70 79 c5 24 ac 01 80 46 48 fc 07 6a 80 1d e5 8c e0 01 c8 c1 c5 00 21 8c 82 7f 4c d0 00 63 24 fc a3 18 e3 9e 94 00 84 71 85 c9 ef c7 14 00 85 43 72 39 c7 71 4d 3b 00 6d 51 f8 1e 09 aa ea 02 85 04 e3 a8 c7 71 4c 06 b2 e7 94 cf 23 f3 a0 05 0b b0 ec 23 a1 e0 83 40 0c 74 71 f7 7d 38 e3 b5 00 3b 6a 8e 17 1c 9a 49 58 06 84 19 38 1d 78 e6 92 56 60 2a a6 0e 48 e0 9f 4a 69 58 04 da 41 e3 38 3c 63 34 c0 46 5d d8 27 f8 7a 50 00 57 0a 49 e9 de 93 49 80 d1 1e 48 01 0e 01 eb 8a 2c 03 8a 0f 42 33 fa 53 01 36 6d 38 c9 e3 d0 75 a0 04 54 07 8c Data Ascii: 8p8j`7<hz"$i7`lKpI9ya@>iX >\8<z`DG.py$FHj!Lc$qCr9qM;mQqL##@tq}8;jIX8xV`*HJiXA8<c4F]'zPWIIH,B3S6m8uT
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 32 64 77 f7 5c f5 a0 04 31 1c 63 69 27 1c 66 80 1b 8c 82 4f a7 42 28 01 87 20 e4 ae 00 18 00 50 02 05 00 fc bc 0c fe b4 00 d6 4d b8 c0 c1 3d 73 40 0d 21 4b 63 00 11 dc 8f d2 80 07 41 c8 3c e7 9a 06 9d 8f 6e 58 82 ae 32 32 7a 8c d5 b0 6e e2 8b 72 c3 d7 d0 83 4c 43 d6 25 0c 0e 4f 1d b1 d2 80 1e 21 e0 82 83 9f 4a 00 77 94 eb 9f 97 27 3e 94 00 a6 32 00 ed 93 c8 1d 69 30 01 10 0a 03 0e 9d 0d 30 1e 22 04 60 91 83 dc 03 83 49 bb 00 8f 00 da 01 c1 3d f1 4c 05 f2 3a 2b 2f 1d c0 14 00 18 72 4e 7f 2a 02 cd 8f 58 8f 23 18 f6 a0 03 c9 6c 96 0c 06 0f 39 e3 34 ae 03 9e 25 23 77 41 df 27 bd 30 01 12 88 f2 31 9c e7 eb 40 0b e5 90 08 00 fa 00 7f fa d4 00 e2 84 8d aa a0 63 d4 d0 01 e5 65 80 2a 48 07 9a 00 79 8c 06 e0 63 de 80 1b e4 83 1e fd bc e6 96 e0 39 61 2a 37 fa 77 3d Data Ascii: 2dw\1ci'fOB( PM=s@!KcA<nX22znrLC%O!Jw'>2i00"`I=L:+/rNX#l94%#wA'01@ceHyc9a*7w=
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 29 93 91 8e 3b 63 b5 00 1e 5b 75 53 f8 8a 00 0a e0 f2 a0 11 f9 d0 02 ec 21 70 31 c1 e9 40 01 84 8c 10 41 27 da 80 11 a2 c3 03 b4 91 ee 68 01 51 17 82 54 60 0e d4 00 14 2c 32 07 4e b4 00 08 ce 09 2b 90 3a f3 d6 80 11 50 e7 71 1d ba d0 03 b6 0c 90 99 e3 b6 28 01 15 0a 36 dc 8e bd 3d 28 01 02 36 ec 63 90 38 e2 80 15 91 89 c3 29 f5 24 9c 50 00 10 7d cc 75 a0 07 04 5c 9c f5 c7 02 80 10 05 cf 23 f3 14 00 79 67 ef 00 72 7d 28 00 64 39 05 ba f6 38 a0 04 65 3c 38 50 4d 00 29 50 41 e3 9c f1 40 08 d1 8c e0 0e 9d 39 e6 80 11 57 2c 70 06 07 b5 34 ec 02 94 23 ef 77 ed 43 77 01 ad 16 e1 c0 c1 f6 14 37 70 0c 00 0e 3f 5a 40 2e c5 51 f3 0c 9e bc 76 f6 a0 04 2a b9 c1 52 30 28 01 76 8d 99 da 3d 69 a7 60 11 90 63 21 06 28 6e e0 20 8f 6a e4 8e bc e4 8e 94 f9 80 19 46 32 0f 5e Data Ascii: );c[uS!p1@A'hQT`,2N+:Pq(6=(6c8)$P}u\#ygr}(d98e<8PM)PA@9W,p4#wCw7p?Z@.Qv*R0(v=i`c!(n jF2^
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 6d e4 77 c7 14 e2 00 13 70 c8 23 3e b8 a2 20 20 4d a7 96 fa e3 bf f8 55 00 60 83 b4 9c 83 ce 69 37 60 11 f8 39 1d 0f ad 40 01 f9 70 33 db 91 9a 00 46 50 31 fc e8 01 aa a0 1c 0e bd 01 cd 34 ae 02 81 c7 d7 a6 3b 55 80 81 41 39 41 d4 72 68 01 0a 29 e0 67 91 f4 a0 05 50 c5 48 50 47 7a 4d d8 06 05 2a 48 0b 9c f5 35 00 26 cc 92 58 13 ed 9a 00 42 a3 6f 62 0f 40 0d 00 37 18 60 a0 0c 0f 5a 00 52 a7 6f ca a0 0f 7a 00 4d 87 95 38 1c f7 a0 06 ec 2a 32 bd fb 62 80 02 9b 46 5b d3 80 00 a0 04 28 ad c0 6c 03 d6 80 19 b7 80 b8 ef 40 0a 54 10 33 c1 1d 40 a0 06 b0 c8 03 03 9a 00 36 95 e3 34 00 d6 04 1e c0 8e 94 00 01 bc 01 f9 d0 03 40 20 16 cf 20 73 8a 00 69 53 d8 77 a0 00 af 50 17 8c e2 80 14 20 19 07 e8 39 a0 06 98 d8 9d a4 71 d3 fc 9a 00 18 1c 65 46 7b 50 00 10 30 19 c7 Data Ascii: mwp#> MU`i7`9@p3FP14;UA9Arh)gPHPGzMH5&XBob@7`ZRozM82bF[(l@T3@64@ siSwP 9qeF{P0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49884	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	813	OUT	GET /Content/templates_assets/template15/images/slider-bg.jpg HTTP/1.1 Host: granddunman-info.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://granddunman-info.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:38 UTC	303	IN	HTTP/1.1 200 OK Content-Length: 790411 Connection: close Content-Type: image/jpeg Date: Mon, 21 Oct 2024 22:39:37 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "275076898cdada1:0" Last-Modified: Sat, 20 Jul 2024 10:06:49 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:38 UTC	3607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 1c 2b 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0e 00 00 01 03 00 01 00 00 00 88 13 00 00 01 01 03 00 01 00 00 00 06 0d 00 00 02 01 03 00 03 00 00 00 b6 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 bc 00 00 00 1b 01 05 00 01 00 00 00 c4 00 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 22 00 00 00 cc 00 00 00 32 01 02 00 14 00 00 00 ee 00 00 00 69 87 04 00 01 00 00 00 04 01 00 00 30 01 00 00 08 00 08 00 08 00 2c 01 00 00 01 00 00 00 2c 01 00 00 01 00 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 Data Ascii: JFIF,,+ExifII*(1"2i0,,Adobe Photoshop CC 20
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: fd aa d5 21 4e 4d 79 2c 65 ce 8a 9c 5f 26 b0 03 88 a8 ec b7 6f b7 fc d5 a4 cc 5c 4b b6 3b 1e bb de cb 26 fa 46 45 f0 4d 0d 36 ee 6b bd 06 06 7a 9f ab 5d b9 29 0a dd 31 3d 95 9d 9e dc f7 d7 67 54 0f 65 94 06 ed c9 6c ba 03 3e 83 5f 55 ce 6b f6 6d dc cf d1 d9 ff 00 17 52 eb 72 33 ee 6e 45 16 5b b6 97 e7 5f 8d 65 f8 85 ce 78 65 4d 6b 68 bb 21 fe c6 31 bb 28 a3 d3 7b ed 6f f8 47 ff 00 a2 58 4e e9 98 57 fd 61 18 8c c3 c5 c1 a6 ab b1 eb b2 bf 55 f7 6e 8b 9a 2e b2 9b ef 8f 57 d5 dd fa 4f f8 25 ab 9c 73 9f 65 9d 4f 1e d1 55 b6 64 6c aa a0 d6 ba c7 53 43 6e 7d 76 bf 7b 9b fa 07 e5 d2 da bf 73 f4 e8 5f 8d a4 0f 0a 2f 69 82 6b b3 0e 97 56 41 69 60 82 de 21 5b 63 09 e0 4f c1 72 df 56 b3 3a c7 52 a7 aa e2 1b 9f eb 33 16 a7 60 64 7a 62 a2 cb 9d 43 1f 6d 6c 7b 2a 65 36 Data Ascii: !NMy,e_&o\K;&FEM6kz])1=gTel>_UkmRr3nE[_exeMkh!1({oGXNWaUn.WO%seOUdlSCn}v{s_/ikVAi`![cOrV:R3`dzbCml{*e6
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 Data Ascii: hotoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="20
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 87 01 eb 3c fe 1f 71 5b f0 72 97 67 1d 2f ce bf ed 15 83 a9 1b 1d d0 3a c7 e6 dd ff 00 29 fe 0a 93 a3 b5 e1 4f e8 9a df 03 f7 24 bd a6 63 ef 44 a5 79 cf 58 10 05 00 6c 84 02 01 20 02 a0 48 05 ba 01 59 00 94 02 54 01 00 10 05 00 90 01 01 3d 0f e5 91 7d a4 05 5f 28 bf d5 f6 fe bd 9f 02 ba e3 ec e7 97 da 79 92 ea 79 ce d3 82 31 ee 91 a3 0b a9 77 58 6b 03 8f 3e d6 ff 00 05 a4 cc 49 79 3b 68 5c d9 1a e8 64 d5 a4 58 ff 00 9e e5 ae f8 32 9d 1c c6 35 87 39 dc 4d 4b 34 05 d1 49 16 4e 92 4b 68 f1 c8 77 ac 25 b5 d3 3a bf bb 94 7b bc 10 d9 a0 9d c8 5f 6e f8 3e 5a 8f 24 ea 1a 21 78 ff 00 dd 6f c0 a9 e4 78 3c ab cb 3f 05 e6 03 89 28 59 67 0b 36 a8 34 6c 76 6c 9f 71 f5 2f 16 ab 17 f3 a3 d1 86 7f ca ce 7a 8b 11 1c 49 84 8a b7 7f 48 52 01 1d 50 e7 23 76 6c 9f 71 5e 0c b1 Data Ascii: <q[rg/:)O$cDyXl HYT=}_(yy1wXk>Iy;h\dX259MK4INKhw%:{_n>Z$!xox<?(Yg64lvlq/zIHRP#vlq^
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 6a c3 df d9 eb 5f 02 2e 99 f5 e5 1b 46 76 01 31 82 66 60 98 80 0c cc 5b 3d 2b 89 f4 1e 45 c0 f5 8f 7a eb 25 68 e3 07 4f 93 7c 82 d2 41 16 23 42 3b 17 9c f5 81 00 42 01 20 12 02 fe 0d f9 53 fe c1 f8 85 50 3c f3 8d ff 00 ac f5 be 2d fd d0 bd 11 e8 f2 e4 f7 33 6b c9 f6 3c 58 f3 86 4c eb ee e8 6f cf b5 bf e7 bd 74 8b 38 c9 79 3d 83 81 f1 91 41 5c 70 d9 5f f8 bd 51 cd 11 3f 45 fd 9e bd bc 42 f6 69 b2 53 da cf 2e 78 5a dc 8e d2 bb e6 a6 f5 2f 72 ec f2 f8 2b 53 8f c6 1f fa c2 9e 0b e4 f0 0f 28 b4 82 ab 89 b1 96 7d 2f 3a 79 69 ec 37 5f 0f 3b ac ac fa d8 95 e3 46 4f 06 57 86 d4 79 84 e6 cf 65 cc 24 ff 00 cc df bf da a3 2c 7b a3 a1 7f a6 ef 12 bc c7 b0 0a 01 20 05 90 09 68 86 d1 de 83 fc fd 15 41 e8 5e 4d 87 e2 b8 87 eb 63 f8 3d 7d 6f a5 f7 23 e3 fd 5f a8 9d dd 30 Data Ascii: j_.Fv1f`[=+Ez%hO\|A#B;B SP<-3k<XLot8y=A\p_Q?EBiS.xZ/r+S(}/:yi7_;FOWye$,{ hA^Mc=}o#_0
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 46 08 1b 95 a7 5e 6b 09 df 66 e4 b6 ae 0a 8e 76 51 ae bd eb ad 1c 6e 88 cc a7 92 d2 89 86 c6 17 9d 8a b4 4b 18 e7 2a 91 1b 18 e3 75 a4 65 8d 40 11 dc 80 05 00 09 16 54 58 d2 e5 68 cd 83 52 50 80 41 42 01 08 2b 2a 01 b2 10 48 06 94 20 42 14 28 51 14 20 d2 50 80 54 09 00 90 82 b2 01 1d 10 00 f8 20 b1 20 01 08 04 80 48 05 64 02 b6 88 04 10 20 a0 12 00 1e 48 01 dc 80 4a 90 43 55 0a 14 02 40 0b a0 12 01 20 12 00 7c 50 82 d9 00 90 09 01 f3 51 0b f2 e7 eb c8 9e 34 42 99 95 bf 3c 3c 16 24 6e 27 45 13 7e 4d b9 4d 8d 86 8b 89 dc ab 53 ac a7 4b 68 17 68 74 70 9f 64 4b 66 03 64 02 b2 00 59 00 08 50 11 bd 01 9b 57 f9 47 a8 2c 48 dc 4d b1 b2 e4 76 2a 62 3f 30 3e d2 d4 7b 24 ba 33 96 8e 63 24 93 2e 83 75 41 09 42 0f 8d 99 cd ce df 14 04 e8 51 5d 00 94 02 ba a0 57 40 43 Data Ascii: F^kfvQnKue@TXhRPAB+H B(Q PT Hd HJCU@ \|PQ4B<<$n'E~MMSKhhtpdKfdYPWG,HMv*b?0>{$3c$.uABQ]W@C
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 06 a8 04 80 20 20 1d 6b a1 02 15 01 42 06 c8 04 80 70 0a 14 21 00 e0 10 05 00 e4 01 01 00 42 01 c0 20 37 70 3c 2b a5 22 79 46 83 60 b8 e4 9f 84 77 c7 0f 2c e9 00 b0 b7 25 c4 f4 06 c8 04 80 56 40 14 02 40 1e 68 05 c9 00 90 07 92 01 04 02 40 1b 68 80 48 02 80 5d 88 04 80 48 02 06 88 05 c9 50 22 14 07 49 49 f9 2c 5f 60 2a 68 15 da 51 d4 7e ad df 02 aa ec 8f a3 c8 97 63 ca 05 40 54 00 40 14 03 0b 48 39 99 bf 31 c8 aa 0b 74 32 36 49 a3 cb a1 0e 17 1d 8a a2 3e 8f 41 e2 a7 64 e1 3b fe 9b 7f 79 19 88 f6 70 2d 70 70 b8 2a 1d 02 80 08 0e bf 80 ff 00 3d f6 be e5 7c 1c e5 d9 2c be 9b bc 4a f3 1e d5 d1 1a 80 28 04 80 28 01 64 02 b2 01 0e 7c d0 08 aa 04 80 56 d5 00 ac 80 48 00 80 9e 8b f2 c8 be d2 04 74 07 44 34 59 84 7c 93 57 e8 34 bf a5 13 e2 6a 3f 52 43 97 73 81 c8 Data Ascii: kBp!B 7p<+"yF`w,%V@@h@hH]HP"II,_`hQ~c@T@H91t26I>Ad;yp-pp=\|,J((d\|VHtD4Y\|W4j?RCs
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 5d ab b2 93 38 38 25 d1 87 89 0c ae b0 03 bd 7a f1 1e 1c a6 7d 80 5d cf 3d 0a da a1 47 65 50 0d 2d ec 54 00 04 20 f0 2e a1 a0 da c8 00 76 40 36 e8 04 80 56 40 24 00 25 08 c6 92 a9 06 ec a9 06 a1 03 74 02 08 54 39 42 81 08 22 a8 02 10 6e ca 90 1c f7 42 05 00 d2 a8 05 90 80 22 e1 03 05 95 20 6d 75 00 b7 40 02 a8 15 90 50 40 50 50 88 41 40 b2 a0 6d 90 94 2b 20 a0 10 a9 18 ac 80 00 20 15 b9 20 10 05 00 80 50 20 a1 44 80 6a a4 0a 85 1b 75 48 c4 84 07 34 00 54 82 42 89 08 2b a0 02 00 a1 44 84 12 85 12 a0 4a 00 7c 10 82 54 a2 50 0b bd 08 20 80 5c 90 02 ca 80 da e8 0f 9b c8 5f 9a 3f 5c 45 20 d1 46 0c 8a d1 f2 c3 c1 72 91 d2 27 65 1c 72 36 18 c9 19 9a 5a 3e 0b 85 1e 93 36 bf 5a 97 6f b0 5e 8c 5e d3 cd 97 dc 57 b2 e8 73 15 90 10 cf 49 0d 40 b4 8c 07 bf 9a 8d 0b 2b Data Ascii: ]88%z}]=GeP-T .v@6V@$%tT9B"nB" mu@P@PPA@m+ P DjuH4TB+DJ\|TP \_?\E Fr'er6Z>6Zo^^WsI@+
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 4e 7e 0e f8 e1 7c 9d 43 5a 1a 03 40 b0 0b ce 7a 42 80 48 02 a8 12 01 20 0a 01 20 0a 01 59 08 14 02 40 24 01 40 2e c4 02 40 24 01 40 2e 68 04 42 01 59 00 b6 40 2d 8a 00 80 80 45 01 d2 d2 7e 4b 17 d8 1f 05 4d 21 98 80 fe 6f a9 fd 53 fe 05 55 d9 25 d1 e4 4b b1 e5 11 42 89 08 24 02 40 16 fa 41 0a 5c a5 fc a2 3f b4 16 97 66 5f 47 77 c5 ff 00 d5 13 f6 db fb c5 19 88 f6 79 b2 c9 d4 28 04 10 1d 9f 93 aa 61 1c b3 ca d7 38 07 69 92 fd 5d b7 b2 d7 83 94 bb 2f 4d ab dd e2 57 95 9e d5 d1 1a 01 5b 92 14 3c bc 10 82 42 8b b1 08 23 a6 e8 51 72 ba 10 48 05 64 28 b9 f7 a1 04 80 5b 94 02 42 93 51 fe 57 0f da 08 11 d1 2a 68 b7 07 cd 35 7d fd 27 e9 44 f8 9a af d5 64 8b d2 79 ce 5f ca 10 3f 81 63 7e 57 10 d9 81 36 17 b6 85 78 f5 ab ec 3d 1a 67 f7 18 3e 4e 9c e7 71 01 25 b9 5b Data Ascii: N~\|CZ@zBH Y@$@.@$@.hBY@-E~KM!oSU%KB$@A\?f_Gwy(a8i]/MW[<B#QrHd([BQW*h5}'Ddy_?c~W6x=g>Nq%[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49892	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	554	OUT	GET /Content/microsites_assets/js/custom.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:38 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 32467 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:37 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "4d515e218bdada1:0" Last-Modified: Sat, 20 Jul 2024 09:56:45 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:38 UTC	3594	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 41 42 4c 45 20 4f 46 20 43 4f 4e 54 45 4e 54 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 7c 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: /*************************************************************************************************************\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\| TABLE OF CONTENT \|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|*************************
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 24 28 27 2e 62 6f 64 79 5f 73 77 69 74 63 68 5f 62 74 6e 20 62 75 74 74 6f 6e 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 62 6f 64 79 5f 73 77 69 74 63 68 65 72 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 73 77 69 74 63 68 65 72 2d 73 68 6f 77 27 29 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 24 28 22 23 6d 79 6f 6e 6f 66 66 73 77 69 74 63 68 22 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 2e 66 69 78 65 64 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 73 74 61 74 69 63 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a Data Ascii: $('.body_switch_btn button').on('click', function () { $('.body_switcher').toggleClass('switcher-show') }); $("#myonoffswitch").on('click', function () { $(".fixed").toggleClass("static"); });
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 76 61 6c 28 27 24 27 20 2b 20 75 69 2e 76 61 6c 75 65 73 5b 31 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 70 72 69 63 65 2d 72 61 6e 67 65 72 20 2e 72 61 6e 67 65 72 2d 6d 69 6e 2d 6d 61 78 2d 62 6c 6f 63 6b 20 2e 6d 69 6e 27 29 2e 76 61 6c 28 27 24 27 20 2b 20 24 28 27 2e 70 72 69 63 65 2d 72 61 6e 67 65 72 20 23 73 6c 69 64 65 72 2d 72 61 6e 67 65 27 29 2e 73 6c 69 64 65 72 28 27 76 61 6c 75 65 73 27 2c 20 30 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 70 72 69 63 65 2d 72 61 6e 67 65 72 20 2e 72 61 6e 67 65 72 2d 6d 69 6e 2d 6d 61 78 2d 62 6c 6f 63 6b 20 2e 6d 61 78 27 29 2e 76 61 6c 28 27 24 27 20 2b 20 24 28 27 2e 70 72 69 63 65 2d 72 61 6e 67 65 72 20 Data Ascii: val('$' + ui.values[1]); } }); $('.price-ranger .ranger-min-max-block .min').val('$' + $('.price-ranger #slider-range').slider('values', 0)); $('.price-ranger .ranger-min-max-block .max').val('$' + $('.price-ranger
2024-10-21 22:39:38 UTC	1812	IN	Data Raw: 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 69 72 65 63 74 69 6f 6e 73 77 69 74 63 68 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 24 28 27 2e 70 61 67 65 5f 64 69 72 65 63 74 69 6f 6e 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 64 69 72 65 63 74 69 6f 6e 5f 73 77 69 74 63 68 20 62 75 74 74 6f 6e 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 24 28 74 68 69 73 29 2e 69 73 28 27 2e 72 74 6c 2c 20 2e 6c 74 72 27 29 20 3f 20 27 72 74 6c 20 6c 74 Data Ascii: function directionswitch() { if ($('.page_direction').length) { $('.direction_switch button').on('click', function () { $('.boxed_wrapper').toggleClass(function () { return $(this).is('.rtl, .ltr') ? 'rtl lt
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 61 73 20 66 61 20 66 61 2d 61 6e 67 6c 65 2d 6c 65 66 74 22 3e 3c 2f 73 70 61 6e 3e 27 2c 20 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 20 66 61 2d 61 6e 67 6c 65 2d 72 69 67 68 74 22 3e 3c 2f 73 70 61 6e 3e 27 5d 2c 0d 0a 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 73 69 76 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 30 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 31 30 32 34 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: as fa fa-angle-left"></span>', '<span class="fas fa fa-angle-right"></span>'], responsive: { 0: { items: 1 }, 600: { items: 1 }, 1024: {
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 75 74 6f 70 6c 61 79 54 69 6d 65 6f 75 74 3a 20 36 30 30 30 2c 0d 0a 20 20 20 20 20 20 20 20 6e 61 76 54 65 78 74 3a 20 5b 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 64 6f 77 6e 2d 61 72 72 6f 77 2d 31 22 3e 3c 2f 73 70 61 6e 3e 27 2c 20 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 64 6f 77 6e 2d 61 72 72 6f 77 2d 31 20 72 69 67 68 74 22 3e 3c 2f 73 70 61 6e 3e 27 5d 2c 0d 0a 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 73 69 76 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 37 36 38 3a 20 7b 0d 0a 20 20 20 20 Data Ascii: e, autoplayTimeout: 6000, navText: ['<span class="icon-down-arrow-1"></span>', '<span class="icon-down-arrow-1 right"></span>'], responsive: { 0: { items: 1 }, 768: {
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 20 20 20 20 20 69 74 65 6d 73 3a 20 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 31 30 32 34 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 20 33 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 2f 2f 20 41 6d 65 6e 69 74 69 65 73 20 53 74 79 6c 65 35 20 43 61 72 6f 75 73 65 6c 0d 0a 69 66 20 28 24 28 27 2e 61 6d 65 6e 69 74 69 65 73 2d 73 74 79 6c 65 35 2d 63 61 72 6f 75 73 65 6c 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 24 28 27 2e 61 6d 65 6e 69 74 69 65 73 2d 73 74 79 6c 65 35 2d 63 61 72 6f 75 73 65 6c 27 29 2e 6f 77 6c 43 61 72 6f 75 73 65 6c 28 7b 0d 0a 20 20 20 20 20 Data Ascii: items: 2 }, 1024: { items: 3 } } });}// Amenities Style5 Carouselif ($('.amenities-style5-carousel').length) { $('.amenities-style5-carousel').owlCarousel({
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 24 28 27 2e 68 69 64 64 65 6e 2d 62 61 72 2d 6f 70 65 6e 65 72 27 29 3b 0d 0a 20 20 20 20 76 61 72 20 68 69 64 64 65 6e 42 61 72 43 6c 6f 73 65 72 20 3d 20 24 28 27 2e 68 69 64 64 65 6e 2d 62 61 72 2d 63 6c 6f 73 65 72 27 29 3b 0d 0a 20 20 20 20 76 61 72 20 6e 61 76 54 6f 67 67 6c 65 72 20 3d 20 24 28 27 2e 6e 61 76 2d 74 6f 67 67 6c 65 72 27 29 3b 0d 0a 20 20 20 20 24 28 27 2e 68 69 64 64 65 6e 2d 62 61 72 2d 77 72 61 70 70 65 72 27 29 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 28 29 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 53 68 6f 77 20 53 69 64 65 62 61 72 0d 0a 20 20 20 20 68 69 64 64 65 6e 42 61 72 4f 70 65 6e 65 72 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 68 69 64 64 65 6e 42 61 72 Data Ascii: $('.hidden-bar-opener'); var hiddenBarCloser = $('.hidden-bar-closer'); var navToggler = $('.nav-toggler'); $('.hidden-bar-wrapper').mCustomScrollbar(); //Show Sidebar hiddenBarOpener.on('click', function () { hiddenBar
2024-10-21 22:39:38 UTC	2485	IN	Data Raw: 20 20 20 61 6e 69 6d 61 74 65 43 6c 61 73 73 3a 20 27 61 6e 69 6d 61 74 65 64 27 2c 20 2f 2f 20 61 6e 69 6d 61 74 69 6f 6e 20 63 73 73 20 63 6c 61 73 73 20 28 64 65 66 61 75 6c 74 20 69 73 20 61 6e 69 6d 61 74 65 64 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 3a 20 30 2c 20 20 20 20 20 20 20 20 20 20 2f 2f 20 64 69 73 74 61 6e 63 65 20 74 6f 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 77 68 65 6e 20 74 72 69 67 67 65 72 69 6e 67 20 74 68 65 20 61 6e 69 6d 61 74 69 6f 6e 20 28 64 65 66 61 75 6c 74 20 69 73 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 62 69 6c 65 3a 20 66 61 6c 73 65 2c 20 20 20 20 20 20 20 2f 2f 20 74 72 69 67 67 65 72 20 61 6e 69 6d 61 74 69 6f 6e 73 20 6f 6e 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 20 28 64 Data Ascii: animateClass: 'animated', // animation css class (default is animated) offset: 0, // distance to the element when triggering the animation (default is 0) mobile: false, // trigger animations on mobile devices (d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49891	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	558	OUT	GET /Content/templates_assets/js/contactForm.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:38 UTC	316	IN	HTTP/1.1 200 OK Content-Length: 22701 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:37 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "1238c8b94821db1:0" Last-Modified: Fri, 18 Oct 2024 10:30:17 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:38 UTC	3594	IN	Data Raw: 0d 0a 0d 0a 76 61 72 20 63 68 65 63 6b 55 6e 69 74 54 79 70 65 20 3d 20 24 28 22 23 63 68 65 63 6b 55 6e 69 74 54 79 70 65 22 29 2e 76 61 6c 28 29 3b 0d 0a 76 61 72 20 77 65 62 73 69 74 65 4c 6f 67 6f 20 3d 20 24 28 22 23 57 65 62 73 69 74 65 4c 6f 67 6f 22 29 2e 76 61 6c 28 29 3b 0d 0a 76 61 72 20 63 75 72 72 65 6e 74 55 72 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 20 2f 2f 20 45 6e 63 6f 64 65 20 74 68 65 20 63 75 72 72 65 6e 74 20 70 61 67 65 20 55 52 4c 0d 0a 76 61 72 20 57 68 61 74 73 41 70 70 4e 75 6d 62 65 72 20 3d 20 24 28 22 23 57 68 61 74 73 41 70 70 4e 75 6d 62 65 72 22 29 2e 76 61 6c 28 29 3b 0d 0a 76 61 72 20 65 6e 63 6f 64 65 64 57 68 61 74 73 61 70 Data Ascii: var checkUnitType = $("#checkUnitType").val();var websiteLogo = $("#WebsiteLogo").val();var currentUrl = encodeURIComponent(window.location.href); // Encode the current page URLvar WhatsAppNumber = $("#WhatsAppNumber").val();var encodedWhatsap
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 20 3d 20 24 28 27 23 53 69 6d 70 6c 65 51 75 65 72 79 46 6f 72 6d 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 68 6f 6e 65 4e 75 6d 62 65 72 2e 6c 65 6e 67 74 68 20 3e 20 37 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 68 6f 77 4c 6f 61 64 65 72 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 64 64 20 72 65 43 61 70 74 63 68 61 20 76 65 72 69 66 69 63 61 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 72 65 63 61 70 74 63 68 61 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 65 63 61 70 74 63 68 61 2e 65 78 65 63 75 74 65 28 27 36 4c 65 6f 58 7a 6f 6b 41 41 41 41 41 4e Data Ascii: r); var form = $('#SimpleQueryForm'); if (phoneNumber.length > 7) { showLoader(); // Add reCaptcha verification grecaptcha.ready(function () { grecaptcha.execute('6LeoXzokAAAAAN
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 64 64 20 23 74 68 61 6e 6b 79 6f 75 20 74 6f 20 74 68 65 20 55 52 4c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 20 22 74 68 61 6e 6b 79 6f 75 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 68 6f 77 45 72 72 6f 72 28 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 20 77 68 69 6c 65 20 73 75 62 6d 69 74 74 69 6e 67 20 74 68 65 20 66 6f 72 6d 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 21 22 29 3b 0d 0a Data Ascii: ); // Add #thankyou to the URL window.location.hash = "thankyou"; } else { showError("An error occurred while submitting the form. Please try again later!");
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 72 6d 2d 6e 61 6d 65 22 29 3b 0d 0a 20 20 20 20 76 61 72 20 63 68 69 6c 64 4f 66 66 73 65 74 20 3d 20 63 68 69 6c 64 44 69 76 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2d 20 70 61 72 65 6e 74 44 69 76 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2b 20 70 61 72 65 6e 74 44 69 76 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0d 0a 20 20 20 20 70 61 72 65 6e 74 44 69 76 2e 61 6e 69 6d 61 74 65 28 7b 20 73 63 72 6f 6c 6c 54 6f 70 3a 20 63 68 69 6c 64 4f 66 66 73 65 74 20 7d 2c 20 31 35 30 30 29 3b 0d 0a 0d 0a 0d 0a 20 20 20 20 24 28 22 23 66 6f 72 6d 4e 61 6d 65 22 29 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 24 28 22 2e 63 68 61 74 2d 6f 70 74 69 6f 6e 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 49 66 Data Ascii: rm-name"); var childOffset = childDiv.offset().top - parentDiv.offset().top + parentDiv.scrollTop(); parentDiv.animate({ scrollTop: childOffset }, 1500); $("#formName").focus();});$(".chat-option").click(function () { // If
2024-10-21 22:39:38 UTC	4096	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 3a 20 22 30 73 22 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 61 72 65 6e 74 44 69 76 20 3d 20 24 28 22 23 6d 61 69 6e 2d 63 6f 6e 74 61 63 74 2d 64 69 76 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 68 69 6c 64 44 69 76 20 3d 20 24 28 22 23 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 75 6e 69 74 74 79 70 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 68 69 6c 64 4f 66 66 73 65 74 20 3d 20 63 68 69 6c 64 44 69 76 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2d 20 70 61 72 65 6e 74 44 69 76 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2b 20 70 61 72 65 6e 74 44 69 76 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 72 Data Ascii: transition-duration": "0s" }); var parentDiv = $("#main-contact-div"); var childDiv = $("#contact-form-unittype"); var childOffset = childDiv.offset().top - parentDiv.offset().top + parentDiv.scrollTop(); par
2024-10-21 22:39:38 UTC	2723	IN	Data Raw: 65 20 3d 20 28 75 6e 69 74 74 79 70 65 62 74 6e 54 6f 70 20 3e 3d 20 76 69 65 77 70 6f 72 74 54 6f 70 29 20 26 26 20 28 75 6e 69 74 74 79 70 65 62 74 6e 42 6f 74 74 6f 6d 20 3c 3d 20 76 69 65 77 70 6f 72 74 42 6f 74 74 6f 6d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 49 66 20 74 68 65 20 62 75 74 74 6f 6e 20 69 73 20 76 69 73 69 62 6c 65 2c 20 73 69 6d 75 6c 61 74 65 20 61 20 63 6c 69 63 6b 20 6f 6e 20 69 74 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4f 70 74 42 74 6e 56 69 73 69 62 6c 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 6f 70 74 62 74 6e 2e 63 6c 69 63 6b 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4e 61 6d 65 42 74 6e 56 69 73 69 62 6c 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: e = (unittypebtnTop >= viewportTop) && (unittypebtnBottom <= viewportBottom); // If the button is visible, simulate a click on it if (isOptBtnVisible) { $optbtn.click(); } if (isNameBtnVisible) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49893	20.43.132.131	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	559	OUT	GET /Content/image-lightbox-plugin/dreamimage.js HTTP/1.1 Host: granddunman-info.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ARRAffinity=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f; ARRAffinitySameSite=2222e3d8262d7deec787096d9c0cf51e69cf91e860643593f8dcdafc2b417c2f
2024-10-21 22:39:38 UTC	315	IN	HTTP/1.1 200 OK Content-Length: 7578 Connection: close Content-Type: application/x-javascript Date: Mon, 21 Oct 2024 22:39:37 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes Access-Control-Allow-Origin: * ETag: "cb2437579af3da1:0" Last-Modified: Wed, 21 Aug 2024 07:18:37 GMT X-Powered-By: ASP.NET
2024-10-21 22:39:38 UTC	3595	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0d 0a 20 20 20 20 24 2e 66 6e 2e 64 72 65 61 6d 69 6d 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 65 6d 70 4e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 73 2c 20 78 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 22 23 64 72 65 61 6d 62 61 63 6b 67 72 6f 75 6e 64 22 29 5b 30 5d 20 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 69 64 3d 22 64 72 65 61 6d 6c 61 6e 64 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 38 35 35 35 35 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 61 64 64 Data Ascii: (function ($) { $.fn.dreamimage = function (tempName) { var cs, x = 0; if ($("#dreambackground")[0] == undefined) { $("body").append('<div id="dreamland" style="position: fixed;z-index:214748364855555 !important; padd
2024-10-21 22:39:38 UTC	3983	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 22 23 64 72 65 61 6d 6c 61 6e 64 20 3e 20 23 74 6f 6f 6c 20 3e 20 73 70 61 6e 22 29 2e 73 68 6f 77 28 20 31 30 30 20 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 22 23 64 72 65 61 6d 6c 61 6e 64 20 3e 20 23 74 6f 6f 6c 20 3e 20 73 76 67 20 3e 20 72 65 63 74 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 22 23 64 72 65 61 6d 6c 61 6e 64 20 3e 20 23 74 6f 6f 6c 20 3e 20 73 76 67 20 3e 20 70 61 74 68 22 29 2e 61 74 74 72 28 22 73 74 72 6f 6b 65 22 2c 22 62 6c 61 63 6b 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 7b 0d Data Ascii: //$("#dreamland > #tool > span").show( 100 ); //$("#dreamland > #tool > svg > rect").css("display","block"); //$("#dreamland > #tool > svg > path").attr("stroke","black"); //},function() //{

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 310198b1-601e-0070-38b4-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc65759jpznb60zg85y41000000008ug00000000hb5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cda2d0bd-301e-0000-37b4-23eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc65759jpznb60zg85y4100000000900000000000fek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: b8358d3d-c01e-0046-21b4-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc65759b6phk1938t93stc000000096g00000000n45e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: fb314893-f01e-003f-5ab4-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc6575927r9z02fuhf5m1800000008v000000000f398 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 22:39:37 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 22:39:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 22:39:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 59e6e802-401e-0067-5bb4-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T223937Z-178ffc6575924dtrv3bg879fun00000009ag000000005nzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 22:39:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Target ID:	0
Start time:	18:39:14
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:39:19
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2600 --field-trial-handle=2460,i,6466763152911351838,731397705170696679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:39:21
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://granddunman-info.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://granddunman-info.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping368_1641090972\sets.json

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Windows Analysis Report
https://granddunman-info.com/